last executing test programs: 13.264925656s ago: executing program 2 (id=6116): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x123481, 0x127) write$binfmt_script(r5, &(0x7f0000000240)={'#! ', './file0'}, 0xb) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x48) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000140)={0xa, 0xfffd, 0x0, @mcast2, 0x9}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, 0x0}, 0x20) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xff80}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r2, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12160) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58) 13.26375012s ago: executing program 0 (id=6126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x4a, 0x0, &(0x7f0000000400)) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0c0000000400000004000000070000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000f6ffffffff010000000000003a229b67ee937cd281fff32fd5d2bd94b84f22144b0339f626f14da27783c057502c14d3aebeb6ead67ff52b74442367e5b946d088c89d178755d14e7d9fc9e2af54aa03a9c9e0c8830cfb15c769db57a0d3be6250b5f926d755b1c08103b68df0f69087edd5936b20143c2cf94627ed53875d"], 0x50) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r6, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f0000000040)={0x18, r6}) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r4, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x6, 0x8, "f4e56214886a8213"}}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x2, 0x6, 0x8, 0x6004, 0xffffffffffffffff, 0xb, '\x00', r8, r9, 0x1, 0x1, 0x4, 0x9}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) statfs(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=""/49) r10 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, 0x0) 11.260949457s ago: executing program 1 (id=6120): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x0, 0x6}, 0x0) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x2000000, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={[], [{@fowner_lt}, {@appraise_type}, {@smackfshat={'smackfshat', 0x3d, 'sched_switch\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x65, 0x55, 0x31, 0x34, 0x30, 0x39, 0x66], 0x2d, [0x63, 0x33, 0x36, 0x33], 0x2d, [0x66, 0x6fedb0ad667a3716, 0x34, 0x4bbc10f19dea590f], 0x2d, [0x37, 0x66, 0x30, 0x39], 0x2d, [0x36, 0x65, 0x39, 0x32, 0x33, 0x62, 0x36, 0x33]}}}, {@appraise_type}, {@dont_hash}, {@euid_lt}, {@dont_hash}], 0x2f}) r4 = memfd_create(&(0x7f0000000840)='[\v\xdbX\xae[\x1a\xa9\x00\xc2\x9aml\r\xcf\xaa\x13\x99\x85B\xc3\x06<\xc2\xa9\xc3\xdb\x88\xee\x85md\xc8\x85HX\xa9%\f\x8fe\xe0\x00\x00\xa8\xfdn\xbe \a\x0e\xa3\xb9\x1d\x9dO\xbdj\x00\x00\xfb\xff\x00c\xb2\xc9\ap\xd0\xa2\x82\x1e\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcb\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2\xa75\x9d\xcb\x1e\x80\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x00uNh\xc5(\xbc\xf3\xac{\x04D2\xf2\xcd\xc2{E\xae\x89\xddI\xc8\xc6\xe9\xef\x98\xf0\x8b\xac\xa7R\x10\x011\x9fi\x00\x00\x00\x00\x00\x00\x00\x00\x002?D\x86\x14\xa52<\x87n\xf4\x04R\x15\t\xb8\xbeT\xb8\xe7K)\x1fP\xb6\xce8\xcc\xabe\xcb\xd0\xf9\xc9\xfe_\v\xaa#\x8f\x8asu\xb2\xfe\xc4\xbe\x03\xd3\x93E\x1d\xaf}\x9b\xac\xc2\x9a\xe6W\x92sD\fn\x9e\xc2s\xc6_4\f\xc1\x8b\x9a\xa4_\xad\x9b\xb9 \v\x0f{>\xdf^.\xb8\x96\x1d\x99vY\xa8\xfa\xd7i\x94i^;\xaa\xe7XA\xd2\xc5\x02\x12I\xbe\xd0Ksq\x96 \xbf\xed\x1c\x91\xeeN\xda&\xddtG\xc2\xa8j\xae\xac)\xfdNu\x19\x91\xa7z\x1b\x0e\xab\xd2k\x16\x87#\xf6p#\x8d\xdd?\x9fXV\x12\xa9\xc7v\x02\x98g:4\xb6\xcaY\xc2~k\xcb\xef]h/\xa2\xaf\xc4\xec\xdc\xd4H\xed\x94qNY\x85\x87&\xf1\xbb\f\x02\x0fo\xae\xf4\x19|\xc4\xfcL\xdb\x00\xedrK\x13\xb5J?s\x93\xe6\xda\xf0\xf3B\x8d\xb4\xd8>\x12\xb0\x8e\x8d\xdaQ\xa2\xd0\xbc\x92d\x9e^\xbc\xd5\x8aNf\xefa\v*\xb08\xfc\xd2\xa4\x11`\xae\x98\xcc\xe1\xea\xc2\x1dKR\x0e\x1cK\x86\v\xba\xdfz\xa8\xdf\xb6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xe9\xb3@\xe8\a0\x1e\xb8L\x83\xc4\xa8\xb2\xc1\xf8\xae\x1d\x198\x0f\xfa\t\x88+\xdc\xe1\x01@\xbd\x8ba\"|\x14\x1bF\x9b\xd3\xff7\a\x1c:U\xba\xf4\t\xdc\xef\xe3\x11\xdb^\xee\x8c0\xee\xde6:\x80t\xfb\xbc^K\xb4\x8c9\xb0\xec\x82\x127!\x0e\xa3\xc9\xe0\xea\xfa\x0f\xbb\x0e \xc3\xef\xb20x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x20) r5 = socket(0x11, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'nicvf0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) socket$packet(0x11, 0x2, 0x300) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r7, 0xfffffffc, 0x0, 0x30, 0x0, @ib={0x1b, 0x8, 0x5, {}, 0xf, 0x2, 0x4}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x80000001}}}, 0x118) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000700)={0x6, 0x118, 0xfa00, {{0x8, 0x0, "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", 0x5, 0xd, 0x6, 0x6, 0x0, 0x6c, 0x4, 0x1}, r7}}, 0x120) syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) ftruncate(0xffffffffffffffff, 0x3) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008504"]) 10.243444129s ago: executing program 2 (id=6122): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x7ffd) fgetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)=""/100, 0x64) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xce9c, 0x8, 0x3, 0x40004330}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x0, &(0x7f0000000180)=0x1, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x1, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x40, 0x0, 0x3, 0x200003}, {0x6, 0x0, 0xff, 0x40000000}]}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x64) write$ppp(r0, &(0x7f0000000680)=':`', 0x2) 10.242338568s ago: executing program 1 (id=6133): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x803, 0x6) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xd0) sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c, 0x0}}], 0x2, 0x24000000) getpid() r5 = socket$inet_sctp(0x2, 0x1, 0x84) pipe2$9p(&(0x7f0000000300), 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0xc) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000100010004"], 0x408100) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 10.179935964s ago: executing program 0 (id=6123): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc8) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r2, &(0x7f0000000000)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) rmdir(&(0x7f0000000640)='./file0\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r6, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x2, 0x48800) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) shutdown(r6, 0x2) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f0000000180)={&(0x7f00000000c0)}, 0x1, 0x0, 0x0, 0x2810}, 0xee) close(r5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000200)={'syztnl0\x00', r4, 0x7, 0x40, 0x8, 0x0, {{0x6, 0x4, 0x3, 0x6, 0x18, 0x67, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @remote, {[@noop, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'gre0\x00', r4, 0x80, 0x400f, 0xfffffffc, 0x9, {{0x9, 0x4, 0x3, 0x35, 0x24, 0x68, 0x0, 0xb, 0x29, 0x0, @multicast2, @empty, {[@end, @lsrr={0x83, 0xf, 0x1c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @broadcast]}]}}}}}) 9.178799117s ago: executing program 1 (id=6124): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 9.172935637s ago: executing program 4 (id=6125): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) timerfd_create(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r6, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000a80)=ANY=[], 0x0) 8.069571693s ago: executing program 3 (id=6128): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$sock_timeval(r0, 0x1, 0xa, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f00000002c0)={&(0x7f0000ffa000/0x1000)=nil, 0x1000}) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x2}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x8, 0x0, 0x200d66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x42, 0x4038a09, 0x4, @remote, @mcast2={0xff, 0x5}}}) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r8 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0xffffffff, 0x10100}, &(0x7f0000000480), &(0x7f0000000300)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000400)={0x0, 0xc5f7}, &(0x7f0000000000)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r10, r9, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x1, r0, &(0x7f0000000180)=0x80, &(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}}) io_uring_enter(r8, 0x48e9, 0x0, 0x0, 0x0, 0x0) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 6.995389724s ago: executing program 3 (id=6129): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) timerfd_create(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r7, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r8, r5, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f0000000a80)=ANY=[], 0x0) 6.751684422s ago: executing program 0 (id=6130): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) timerfd_create(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r7, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r8, r5, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f0000000a80)=ANY=[], 0x0) 6.687262337s ago: executing program 4 (id=6131): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, @private1, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="04000100"], 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000c40)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @local}], 0x20) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) sync_file_range(r4, 0x2, 0xda38, 0x1) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x52b281, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000d4a1ce4e9de42536000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fccbdf250900000005000700020000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x24084001}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x3, 0x1003, 0x448, '\x00', 0x9}, 0x1, [0x7, 0xd5, 0x2, 0xfff, 0x6, 0x4, 0x2, 0x5, 0xffffffffffffffff, 0xbc, 0x80000000, 0x102f, 0x5, 0x1, 0x83, 0x1, 0x1, 0x7, 0xda, 0x200, 0x84, 0x7, 0x7, 0x7, 0xc, 0x42, 0xff, 0x7, 0xffffffffffffffff, 0x980, 0x900000001, 0x403, 0x0, 0x800000004, 0x101, 0x3, 0xd, 0x1, 0x2000000, 0x6, 0x9, 0x1, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba5a, 0x4, 0xa, 0x88b, 0x6, 0x4000006, 0x7, 0x7fffffffffffffff, 0x2, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x8, 0x9, 0x1800000, 0x6, 0x82b, 0x8, 0x5, 0xfffffffffffffffe, 0x9, 0xfffffffffffffffa, 0x1, 0x100000000000004, 0x2, 0x2b, 0x1, 0x7, 0x300, 0x80, 0x42843379, 0x1, 0x100000007, 0x200, 0x77d, 0xb3, 0x5, 0x539, 0x623b, 0x400006, 0x0, 0x7, 0x4, 0x200, 0x6, 0x8, 0x0, 0x5, 0x96, 0x8, 0x401, 0x2, 0x0, 0x680000000000, 0x2, 0x7, 0xe88, 0x80000007, 0x0, 0xfffffffffffffffb, 0xffff, 0x9, 0x8, 0x10000001000, 0x0, 0x5, 0x1, 0xfffffffffffff000, 0x10000, 0x7ffd, 0xffffffffffffff80, 0x6, 0x46b, 0x4, 0x6, 0x6, 0x4f65, 0x1, 0x7b, 0x3]}) 6.520032765s ago: executing program 1 (id=6132): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000600)=ANY=[@ANYRES32=r1, @ANYRES8=r2, @ANYRES16=r1], 0x21c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 6.493443001s ago: executing program 2 (id=6134): syz_emit_ethernet(0x8a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@rr={0x7, 0x3, 0xd7}]}}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x3, "384f2e196b59482167e83404f483981cc810982895d6cfe2a1d62e4ecd54f89d", "4f024f4fd833b1b014109a6e1c7a4505", {"a6fb3a8a714580bff1b15dc41f638c37", "99daf62beb15ac5de8b48182ff263aca"}}}}}}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRESHEX], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$TCSETA(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x109000, 0x0) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fE,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00']) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) setpriority(0x2, 0xff, 0x0) 5.114883855s ago: executing program 1 (id=6135): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x123481, 0x127) write$binfmt_script(r5, &(0x7f0000000240)={'#! ', './file0'}, 0xb) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x48) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000140)={0xa, 0xfffd, 0x0, @mcast2, 0x9}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, 0x0}, 0x20) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xff80}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r2, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12160) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58) 4.920501214s ago: executing program 4 (id=6136): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg(0xffffffffffffffff, &(0x7f0000002140), 0x2, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002200), 0x248000, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) getsockopt$ax25_int(r6, 0x101, 0x19, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) inotify_add_watch(0xffffffffffffffff, 0x0, 0x1400037e) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x2, 0x1) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="454884", 0x3, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 4.911067702s ago: executing program 3 (id=6137): mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x80141) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x85, 0x0, 0x0, {0x0, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000380)=ANY=[@ANYBLOB="010800070002000000"], 0x3) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000900)=0x15) writev(r5, &(0x7f0000000b00)=[{&(0x7f0000000940)="1d", 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x490082, 0x8) setxattr$incfs_size(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280), &(0x7f0000000100)=0x7, 0x8, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000002c000000030a01030000000000000000050000010900010073797a30000000000c0002400000000000000005140000001100010000000000000000000100000a82d7da951253e84bdf0a79a84b627924ed13e77a541c98ef96825adf846a549a0d6da14cee1799ec643ea7a57f0715806e78e71f7e2cb8b85528329c81ef5a2ddf85ee13de9f7dc43fba6d663b58ba0c33a7e5af6185884eb6c1159838960f7084d7ba27ca"], 0x74}}, 0x8000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006"], 0x0) 4.6771972s ago: executing program 0 (id=6138): clock_nanosleep(0x1, 0x1, &(0x7f0000000240), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0) r5 = socket(0x11, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'nicvf0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) socket$packet(0x11, 0x2, 0x300) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r7, 0xfffffffc, 0x0, 0x30, 0x0, @ib={0x1b, 0x8, 0x5, {}, 0xf, 0x2, 0x4}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x80000001}}}, 0x118) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000700)={0x6, 0x118, 0xfa00, {{0x8, 0x0, "d71366ecf4c860d2374d634810140b2d6aaf7a77845eb238ea74c0fb421fdbe876fcedbd43f57a7c2741ad041247759c7afce9feb015469e47cb7330fa488086d94b8e108f4c480447af0c3e80ed5295820e54206ef9d73e4d6b01121bf8cfc529cb1cd9815cabea49816febab51a32465a4d4dfe9c8c80fc9b2369c819c66cffc67e63a1188ec08414d37b0bde6155711a6d9abc4ed9cd5e0bf5e56dc5c3db4a337125bd9bde0ff19a716d8b6b2d0180dc354f790fdc8a0447fa7e54f423fcd5f68e8b5e885bf28d18a2dfad0ae33a980bd2735f49e6f47540c74370a0bfe1d63d1b221915d63614d672fced59a7972a9fae737a57bf66a998ba1010d3bea1b", 0x5, 0xd, 0x6, 0x6, 0x0, 0x6c, 0x4, 0x1}, r7}}, 0x120) syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) ftruncate(0xffffffffffffffff, 0x3) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008504"]) 4.00669318s ago: executing program 2 (id=6139): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="14c344184aaa11a6000200", @ANYRES16=r2, @ANYRESHEX], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x400) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r3, &(0x7f0000000d00), 0x0, 0x4000) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000005000080050011802efff2"], 0x20}], 0x1}, 0x300) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040815}, 0x800) shutdown(r3, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0x20000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}], 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, &(0x7f0000000000)={'wlan1\x00'}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000100)={r7, r7, 0xfffe, 0x0, 0x0, 0xc2, 0x85, 0x15c2, 0x5886, 0x6, 0x0, 0x0, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) 3.936266339s ago: executing program 4 (id=6140): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) setpgid(0x0, r5) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 3.142546281s ago: executing program 0 (id=6141): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, @private1, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="04000100"], 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000c40)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @local}], 0x20) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) sync_file_range(r4, 0x2, 0xda38, 0x1) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x52b281, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000d4a1ce4e9de42536000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fccbdf250900000005000700020000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x24084001}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x3, 0x1003, 0x448, '\x00', 0x9}, 0x1, [0x7, 0xd5, 0x2, 0xfff, 0x6, 0x4, 0x2, 0x5, 0xffffffffffffffff, 0xbc, 0x80000000, 0x102f, 0x5, 0x1, 0x83, 0x1, 0x1, 0x7, 0xda, 0x200, 0x84, 0x7, 0x7, 0x7, 0xc, 0x42, 0xff, 0x7, 0xffffffffffffffff, 0x980, 0x900000001, 0x403, 0x0, 0x800000004, 0x101, 0x3, 0xd, 0x1, 0x2000000, 0x6, 0x9, 0x24, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba5a, 0x4, 0xa, 0x88b, 0x6, 0x4000006, 0x7, 0x403, 0x2, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x8, 0x9, 0x1800000, 0x6, 0x82b, 0x8, 0x5, 0xfffffffffffffffe, 0x9, 0xfffffffffffffffa, 0x1, 0x100000000000004, 0x2, 0x2b, 0x1, 0x7, 0x300, 0x80, 0x42843379, 0x1, 0x100000007, 0x200, 0x77d, 0xb3, 0x5, 0x539, 0x623b, 0x400006, 0x0, 0x7, 0x4, 0x200, 0x6, 0x8, 0x0, 0x5, 0x96, 0x8, 0x401, 0x2, 0x0, 0x680000000000, 0x2, 0x7, 0xe88, 0x80000007, 0x0, 0xfffffffffffffffb, 0xffff, 0x9, 0x8, 0x10000001000, 0x0, 0x5, 0x1, 0xfffffffffffff000, 0x10000, 0x7ffd, 0xffffffffffffff80, 0x6, 0x46b, 0x4, 0x6, 0x6, 0x20000000004, 0x1, 0x7f, 0x3]}) 2.982880899s ago: executing program 3 (id=6142): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) connect$unix(r3, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) socket$netlink(0x10, 0x3, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) tkill(r2, 0x19) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x38, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ntfs3\x00', 0x200000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$poke(0x5, r5, 0x0, 0x80000006) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r6, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x51}}], 0x2, 0x0, 0x0) sendmmsg$inet(r6, 0x0, 0x0, 0x0) 2.978898859s ago: executing program 4 (id=6143): mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x80141) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000380)=ANY=[@ANYBLOB="010800070002000000"], 0x3) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000900)=0x15) writev(r5, &(0x7f0000000b00)=[{&(0x7f0000000940)="1d", 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x490082, 0x8) setxattr$incfs_size(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280), &(0x7f0000000100)=0x7, 0x8, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000002c000000030a01030000000000000000050000010900010073797a30000000000c0002400000000000000005140000001100010000000000000000000100000a82d7da951253e84bdf0a79a84b627924ed13e77a541c98ef96825adf846a549a0d6da14cee1799ec643ea7a57f0715806e78e71f7e2cb8b85528329c81ef5a2ddf85ee13de9f7dc43fba6d663b58ba0c33a7e5af6185884eb6c1159838960f7084d7ba27ca"], 0x74}}, 0x8000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006"], 0x0) 2.144418287s ago: executing program 2 (id=6144): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 1.822356809s ago: executing program 3 (id=6145): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892", 0xc) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=0x0], 0x48) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf9100"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r7 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r8 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, 0x0, &(0x7f0000000200)=@secondary) keyctl$KEYCTL_MOVE(0x1e, r7, 0xffffffffffffffff, r8, 0x0) 798.847075ms ago: executing program 3 (id=6146): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000600)=ANY=[@ANYRES32=r1, @ANYRES8=r2, @ANYRES16=r1], 0x21c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 702.274678ms ago: executing program 1 (id=6147): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000600)=ANY=[@ANYRES32=r1, @ANYRES8=r2, @ANYRES16=r1], 0x21c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 556.802472ms ago: executing program 0 (id=6148): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0xfffffffffffffffd, &(0x7f0000000000)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES16=r1], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f000086c000/0x4000)=nil) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="7c4fec0c9478719705", @ANYRES16=r4, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a72503018c08720603030303030300000006000f0001000000080026006c09000008000c006400000008000d0000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = dup2(r5, r7) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000500)={{{@in6}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000002f00)=0xe8) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendfile(r10, r9, 0x0, 0x4) 0s ago: executing program 2 (id=6149): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendto$inet6(r5, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408143aae7315bb608e1557b707b38c30f447a288036c", 0x57, 0x10, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000d05c06e00000040080000098", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r6, 0x2c9ab000) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r3) utimensat(0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x2) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f00007a3000/0x3000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xf33a469a5fa93b3d, 0x0, 0x0, 0x24}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): =6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=4301 comm=syz.3.4849 [ 2378.388716][ T4306] wg1 speed is unknown, defaulting to 1000 [ 2378.400495][ T4306] lo speed is unknown, defaulting to 1000 [ 2378.412025][ T4306] lo speed is unknown, defaulting to 1000 [ 2378.423572][ T4306] lo speed is unknown, defaulting to 1000 [ 2379.080690][ T30] audit: type=1400 audit(2000000992.813:1998): avc: denied { mounton } for pid=4298 comm="syz.0.4847" path="/256/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 2379.134301][ T4301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4849'. [ 2379.300732][ T4318] overlayfs: failed to clone upperpath [ 2379.307335][ T4320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4848'. [ 2379.320125][ T4320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4848'. [ 2379.429213][ T30] audit: type=1400 audit(2000000993.333:1999): avc: denied { setopt } for pid=4360 comm="syz.0.4851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 2379.693160][ T30] audit: type=1400 audit(2000000993.593:2000): avc: denied { mount } for pid=4360 comm="syz.0.4851" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 2380.252216][ T30] audit: type=1400 audit(2000000994.173:2001): avc: denied { unmount } for pid=26115 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 2380.741426][T23614] vhci_hcd: vhci_device speed not set [ 2382.679876][ T4410] CIFS: VFS: Malformed UNC in devname [ 2383.141053][ T4420] CIFS: VFS: Malformed UNC in devname [ 2383.220787][ T4424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2383.266481][ T4424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4864'. [ 2383.282491][ T4424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4864'. [ 2384.379877][ T30] audit: type=1400 audit(2000000998.248:2002): avc: denied { bind } for pid=4430 comm="syz.0.4866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2384.768902][ T30] audit: type=1400 audit(2000000998.278:2003): avc: denied { shutdown } for pid=4430 comm="syz.0.4866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2384.980836][ T4445] CIFS: VFS: Malformed UNC in devname [ 2385.722205][ T4463] kAFS: Can only specify source 'none' with -o dyn [ 2386.496587][ T4471] netlink: 'syz.2.4872': attribute type 10 has an invalid length. [ 2386.504584][ T4471] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4872'. [ 2386.514042][ T4471] dummy0: entered promiscuous mode [ 2386.521286][ T4471] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 2387.747466][ T4487] 9pnet_virtio: no channels available for device syz [ 2388.154311][ T4488] CIFS: VFS: Malformed UNC in devname [ 2389.070857][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 2389.079757][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 2389.086973][ C1] bridge0: port 3(team0) entered learning state [ 2390.505036][ T4516] CIFS: VFS: Malformed UNC in devname [ 2390.874800][ T4515] CIFS: VFS: Malformed UNC in devname [ 2392.104735][ T30] audit: type=1800 audit(2000001005.866:2004): pid=4536 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.4886" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2392.343838][ T4548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4548 comm=syz.1.4884 [ 2393.057632][ T4555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4887'. [ 2393.072116][ T4556] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4889'. [ 2393.888007][ T4555] team0: left allmulticast mode [ 2393.924318][ T4555] C: left allmulticast mode [ 2393.998446][ T4555] team0: left promiscuous mode [ 2394.006914][ T4555] C: left promiscuous mode [ 2394.015068][ T4555] bridge0: port 3(team0) entered disabled state [ 2394.055939][ T4555] bridge_slave_1: left allmulticast mode [ 2394.063776][ T4555] bridge_slave_1: left promiscuous mode [ 2394.077061][ T4555] bridge0: port 2(bridge_slave_1) entered disabled state [ 2394.105009][ T4555] bridge_slave_0: left allmulticast mode [ 2394.111620][ T4555] bridge_slave_0: left promiscuous mode [ 2394.124001][ T4555] bridge0: port 1(bridge_slave_0) entered disabled state [ 2394.445251][ T4563] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2395.014082][ T4555] bond0: (slave bridge0): Releasing backup interface [ 2395.118580][ T4574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4891'. [ 2395.400830][ T30] audit: type=1400 audit(2000001009.216:2005): avc: denied { setopt } for pid=4571 comm="syz.4.4893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2396.097333][ T4590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2396.652922][ T4596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4894'. [ 2396.680409][ T4596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4894'. [ 2396.724954][ T4600] CIFS: VFS: Malformed UNC in devname [ 2397.042255][ T4609] CIFS: VFS: Malformed UNC in devname [ 2398.102428][ T4620] binder: 4618:4620 ioctl 400c620e 200000000000 returned -22 [ 2398.133180][ T30] audit: type=1400 audit(2000001012.046:2006): avc: denied { lock } for pid=4618 comm="syz.4.4902" path="socket:[111622]" dev="sockfs" ino=111622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 2398.977262][ T30] audit: type=1400 audit(2000001012.886:2007): avc: denied { create } for pid=4624 comm="syz.4.4904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 2398.997472][ C1] vkms_vblank_simulate: vblank timer overrun [ 2399.531829][ T4638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4905'. [ 2400.639070][ T4659] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4910'. [ 2400.656955][ T4659] geneve3: entered allmulticast mode [ 2400.983451][ T4663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4663 comm=syz.1.4907 [ 2402.401648][ T4647] [U]  [ 2404.435472][ T4706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4706 comm=syz.0.4915 [ 2405.731770][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2405.738165][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.149101][ T4730] netlink: 'syz.4.4925': attribute type 10 has an invalid length. [ 2406.158249][ T4730] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4925'. [ 2407.242683][ T4744] tipc: Resetting bearer [ 2407.248095][ T4744] dummy0: left promiscuous mode [ 2407.295714][ T4745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4926'. [ 2407.307016][ T4745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4926'. [ 2407.336340][ T4744] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2408.728075][ T4760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4930'. [ 2410.020788][ T4771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4771 comm=syz.1.4932 [ 2410.745321][ T30] audit: type=1400 audit(2000001024.556:2008): avc: denied { getopt } for pid=4772 comm="syz.4.4934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2413.411391][ T30] audit: type=1326 audit(2000001027.246:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.0.4942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe601d8ebe9 code=0x7fc00000 [ 2413.693914][ T30] audit: type=1326 audit(2000001027.246:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.0.4942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe601d8ebe9 code=0x7fc00000 [ 2413.890031][ T30] audit: type=1326 audit(2000001027.356:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.0.4942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe601d8ebe9 code=0x7ffc0000 [ 2414.103008][ T4823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4943'. [ 2414.150630][ T30] audit: type=1326 audit(2000001027.356:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.0.4942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe601d8ebe9 code=0x7ffc0000 [ 2414.229848][ T30] audit: type=1326 audit(2000001027.516:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.0.4942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe601d2add9 code=0x7ffc0000 [ 2414.323333][ T30] audit: type=1326 audit(2000001027.516:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.0.4942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe601d2add9 code=0x7ffc0000 [ 2414.562689][ T4830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4830 comm=syz.3.4945 [ 2414.897486][ T30] audit: type=1326 audit(2000001027.516:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.0.4942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe601d2add9 code=0x7ffc0000 [ 2414.921089][ T30] audit: type=1326 audit(2000001027.516:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.0.4942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe601d2add9 code=0x7ffc0000 [ 2415.239786][ T30] audit: type=1326 audit(2000001027.516:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.0.4942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe601d2add9 code=0x7ffc0000 [ 2415.303846][ T4838] CIFS: VFS: Malformed UNC in devname [ 2415.791034][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 2415.792105][ T30] audit: type=1326 audit(2000001029.696:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.0.4942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe601d2add9 code=0x7ffc0000 [ 2415.830602][ T30] audit: type=1326 audit(2000001029.746:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.0.4942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe601d2add9 code=0x7ffc0000 [ 2415.855270][ T30] audit: type=1326 audit(2000001029.746:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.0.4942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe601d8d550 code=0x7ffc0000 [ 2415.880176][ T30] audit: type=1326 audit(2000001029.746:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.0.4942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe601d8ebe9 code=0x7ffc0000 [ 2415.905001][ T30] audit: type=1326 audit(2000001029.746:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.0.4942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe601d2add9 code=0x7ffc0000 [ 2416.048923][ T30] audit: type=1326 audit(2000001029.956:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.0.4942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe601d2add9 code=0x7ffc0000 [ 2416.108626][ T30] audit: type=1326 audit(2000001029.956:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.0.4942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe601d2add9 code=0x7ffc0000 [ 2416.169229][ T30] audit: type=1326 audit(2000001029.956:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.0.4942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe601d8ebe9 code=0x7ffc0000 [ 2417.147592][ T30] audit: type=1326 audit(2000001029.956:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.0.4942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe601d2add9 code=0x7ffc0000 [ 2417.171367][ T30] audit: type=1326 audit(2000001029.956:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.0.4942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe601d2add9 code=0x7ffc0000 [ 2417.540632][ T4861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4952'. [ 2417.569073][ T4861] overlayfs: failed to clone upperpath [ 2419.285569][ T4885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4956'. [ 2419.858059][ T4901] CIFS: VFS: Malformed UNC in devname [ 2419.937754][ T4902] bad cache= option: no%e [ 2419.937754][ T4902] [ 2419.944849][ T4902] CIFS: VFS: bad cache= option: no%e [ 2421.403272][ T4916] CIFS: VFS: Malformed UNC in devname [ 2422.078610][ T4925] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 2422.087408][ T4925] bridge9: entered allmulticast mode [ 2425.572695][ T4961] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2425.594952][ T4962] bridge0: entered allmulticast mode [ 2425.898884][ T4963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4963 comm=syz.1.4972 [ 2426.297306][ T4966] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4973'. [ 2426.306359][ T4966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4973'. [ 2426.893464][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 2426.893480][ T30] audit: type=1400 audit(2000001040.806:2112): avc: denied { read } for pid=4971 comm="syz.4.4975" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 2426.922585][ C0] vkms_vblank_simulate: vblank timer overrun [ 2426.939301][ T4981] CIFS: VFS: Malformed UNC in devname [ 2427.004378][ T30] audit: type=1400 audit(2000001040.846:2113): avc: denied { open } for pid=4971 comm="syz.4.4975" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 2427.029561][ T30] audit: type=1400 audit(2000001040.846:2114): avc: denied { ioctl } for pid=4971 comm="syz.4.4975" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 2427.054511][ C0] vkms_vblank_simulate: vblank timer overrun [ 2427.330619][ T4989] input: syz1 as /devices/virtual/input/input35 [ 2429.513443][ T5024] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=5024 comm=syz.1.4984 [ 2429.615369][ T5026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4984'. [ 2429.662658][ T5026] overlayfs: failed to clone upperpath [ 2429.833408][ T5035] CIFS: VFS: Malformed UNC in devname [ 2432.653581][ T5069] CIFS: VFS: Malformed UNC in devname [ 2434.990232][ T5096] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 2435.003819][ T5096] Error validating options; rc = [-22] [ 2435.556258][ T5099] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=5099 comm=syz.3.4999 [ 2435.950663][ T5110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4999'. [ 2436.484851][ T5099] overlayfs: failed to clone upperpath [ 2437.445510][ T5130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5130 comm=syz.1.5004 [ 2437.953969][ T5134] fuse: Unknown parameter '0xffffffffffffffff0x00000000000000040x000000000000000300000000000000000000' [ 2438.373738][ T5138] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5005'. [ 2438.382800][ T5138] netlink: 'syz.4.5005': attribute type 1 has an invalid length. [ 2438.511196][ T5115] mkiss: ax0: crc mode is auto. [ 2439.555629][ T5160] CIFS: VFS: Malformed UNC in devname [ 2440.194112][ T5187] CIFS: VFS: Malformed UNC in devname [ 2443.006477][ T5226] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=5226 comm=syz.0.5019 [ 2443.141189][ T5229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5019'. [ 2443.615615][ T5237] netlink: 'syz.4.5020': attribute type 4 has an invalid length. [ 2443.623566][ T5237] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5020'. [ 2444.175417][ T5240] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=5240 comm=syz.1.5021 [ 2444.305231][ T5245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5021'. [ 2444.447684][ T5245] overlayfs: failed to clone upperpath [ 2446.407881][ T5230] [U]  [ 2446.827899][ T5273] /dev/nullb0: Can't open blockdev [ 2446.852376][ T5273] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5026'. [ 2447.203242][ T5294] CIFS: VFS: Malformed UNC in devname [ 2448.775434][ T5313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5032'. [ 2449.185914][ T5320] geneve2: entered promiscuous mode [ 2450.587117][ T5337] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=5337 comm=syz.2.5038 [ 2450.726677][ T5342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5038'. [ 2450.986436][ T5345] syz_tun: left allmulticast mode [ 2450.991794][ T5345] dvmrp17: left allmulticast mode [ 2451.042024][ T5348] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5040'. [ 2451.769676][ T30] audit: type=1400 audit(2000001065.481:2115): avc: denied { accept } for pid=5351 comm="syz.4.5041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2451.941082][ T5364] CIFS: VFS: Malformed UNC in devname [ 2452.179976][T25830] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2452.789904][T25830] usb 3-1: Using ep0 maxpacket: 8 [ 2452.804542][T25830] usb 3-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config [ 2452.821830][T25830] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2452.843570][T25830] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2452.860432][T25830] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2452.870243][T25830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2452.894090][ T5379] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5046'. [ 2452.919483][ T5379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5046'. [ 2452.933263][T25830] hub 3-1:1.0: bad descriptor, ignoring hub [ 2452.939325][T25830] hub 3-1:1.0: probe with driver hub failed with error -5 [ 2452.947944][T25830] cdc_wdm 3-1:1.0: skipping garbage [ 2452.957257][T25830] cdc_wdm 3-1:1.0: skipping garbage [ 2452.963298][T25830] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2453.262332][ T5342] [U]  [ 2453.290641][ T30] audit: type=1400 audit(2000001067.211:2116): avc: denied { read } for pid=5386 comm="syz.3.5048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2453.349902][T23614] usb 3-1: USB disconnect, device number 66 [ 2453.407961][ T30] audit: type=1400 audit(2000001067.321:2117): avc: denied { name_bind } for pid=5386 comm="syz.3.5048" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 2457.150899][ T5446] CIFS: VFS: Malformed UNC in devname [ 2458.181121][ T5455] netlink: 'syz.4.5061': attribute type 21 has an invalid length. [ 2458.189916][ T5455] netlink: 'syz.4.5061': attribute type 6 has an invalid length. [ 2458.197756][ T5455] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5061'. [ 2458.839411][ T5462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5462 comm=syz.3.5063 [ 2459.669959][ T5475] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2459.750051][ T5479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5066'. [ 2459.774800][ T30] audit: type=1400 audit(2000001073.691:2118): avc: denied { bind } for pid=5476 comm="syz.0.5065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2459.799880][ T5479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5066'. [ 2459.835262][ T5480] netlink: 'syz.0.5065': attribute type 1 has an invalid length. [ 2459.843308][ T5480] netlink: 'syz.0.5065': attribute type 2 has an invalid length. [ 2459.864225][ T5480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5065'. [ 2459.879840][ T30] audit: type=1400 audit(2000001073.711:2119): avc: denied { listen } for pid=5476 comm="syz.0.5065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2459.928470][ T5480] netlink: 'syz.0.5065': attribute type 4 has an invalid length. [ 2459.976154][ T5480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=5480 comm=syz.0.5065 [ 2461.313597][ T5494] overlayfs: missing 'lowerdir' [ 2461.450417][ T5496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5069'. [ 2461.533773][ T5497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5069'. [ 2462.693331][ T5514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5514 comm=syz.0.5070 [ 2464.111421][ T30] audit: type=1400 audit(2000001077.201:2120): avc: denied { link } for pid=5521 comm="syz.4.5072" name="#bb" dev="tmpfs" ino=5566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2464.133857][ T30] audit: type=1400 audit(2000001077.201:2121): avc: denied { rename } for pid=5521 comm="syz.4.5072" name="#bc" dev="tmpfs" ino=5566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2465.357558][ T5541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5541 comm=syz.2.5076 [ 2467.158083][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.165012][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.338405][ T5557] tipc: Resetting bearer [ 2467.399485][ T5559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5078'. [ 2467.408518][ T5559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5078'. [ 2468.226324][ T5565] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 2468.232957][ T5565] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2468.240932][ T5565] vhci_hcd vhci_hcd.0: Device attached [ 2468.359449][ T5566] vhci_hcd: connection closed [ 2468.450235][T15845] vhci_hcd: stop threads [ 2468.570041][ T5557] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2468.616020][T15845] vhci_hcd: release socket [ 2468.620727][T15845] vhci_hcd: disconnect device [ 2469.745542][ T5606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5606 comm=syz.4.5084 [ 2471.376666][ T5628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5085'. [ 2471.739667][ T5634] openvswitch: netlink: VXLAN extension message has 22 unknown bytes. [ 2472.063661][ T5637] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=5637 comm=syz.3.5091 [ 2472.238088][ T5639] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5092'. [ 2472.249951][ T5639] netlink: 'syz.1.5092': attribute type 1 has an invalid length. [ 2472.257712][ T5639] netlink: 'syz.1.5092': attribute type 2 has an invalid length. [ 2472.288739][ T5641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5091'. [ 2472.640579][ T5637] overlayfs: failed to clone upperpath [ 2473.662905][ T5665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2473.684830][ T5666] bridge0: entered allmulticast mode [ 2475.797467][ T5693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5693 comm=syz.3.5101 [ 2476.600995][ T5708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5104'. [ 2476.858048][ T30] audit: type=1400 audit(2000001090.711:2122): avc: denied { map } for pid=5705 comm="syz.0.5104" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 2478.781531][ T5729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5109'. [ 2479.480002][ T5724] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=5724 comm=syz.3.5108 [ 2479.597789][ T5730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5108'. [ 2479.792765][ T5735] binder: 5732:5735 ioctl c0306201 2000000003c0 returned -14 [ 2480.489068][ T5730] overlayfs: failed to clone upperpath [ 2482.092037][ T5746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5113'. [ 2482.192952][ T5748] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=5748 comm=syz.4.5114 [ 2482.366546][ T5756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5114'. [ 2482.418134][ T5758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5758 comm=syz.3.5116 [ 2483.438162][ T5771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5771 comm=syz.1.5127 [ 2484.548308][ T5780] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5119'. [ 2484.557535][ T5780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2485.838805][ T5763] [U]  [ 2487.750233][T13590] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2487.759502][T13590] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2487.770626][T13590] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2487.779108][T13590] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2487.803582][T13590] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2487.811963][T13590] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2487.820621][T13590] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2487.828836][T13590] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2489.225043][ T30] audit: type=1326 audit(2000001103.101:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.1.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81298ebe9 code=0x7ffc0000 [ 2490.459759][ T30] audit: type=1326 audit(2000001103.221:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.1.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb81298ebe9 code=0x7ffc0000 [ 2490.601395][ T30] audit: type=1326 audit(2000001103.221:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.1.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81298ebe9 code=0x7ffc0000 [ 2490.639331][ T30] audit: type=1326 audit(2000001103.221:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.1.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81298ebe9 code=0x7ffc0000 [ 2490.668848][ T30] audit: type=1326 audit(2000001103.221:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.1.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb81298ebe9 code=0x7ffc0000 [ 2490.698033][ T30] audit: type=1326 audit(2000001103.221:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.1.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81298ebe9 code=0x7ffc0000 [ 2490.833824][ T30] audit: type=1326 audit(2000001103.221:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.1.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81298ebe9 code=0x7ffc0000 [ 2490.902448][ T30] audit: type=1326 audit(2000001103.221:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.1.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb81298ebe9 code=0x7ffc0000 [ 2491.179485][ T30] audit: type=1326 audit(2000001103.221:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.1.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81298ebe9 code=0x7ffc0000 [ 2491.757382][ T30] audit: type=1326 audit(2000001103.221:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.1.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81298ebe9 code=0x7ffc0000 [ 2491.861691][ T5940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2491.872620][ T5940] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5135'. [ 2492.289778][ T5944] netlink: 'syz.3.5137': attribute type 10 has an invalid length. [ 2492.553911][ T5944] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5137'. [ 2492.597542][ T5944] team0: entered promiscuous mode [ 2492.607534][ T5944] C: entered promiscuous mode [ 2492.620453][ T5944] team0: entered allmulticast mode [ 2492.630928][ T5944] C: entered allmulticast mode [ 2492.703396][ T5944] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2493.129511][ T5955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2493.608142][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5142'. [ 2494.153049][ T5974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5974 comm=syz.4.5146 [ 2495.205871][ T5988] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 2495.212413][ T5988] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2495.220438][ T5988] vhci_hcd vhci_hcd.0: Device attached [ 2495.241299][ T5988] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5148'. [ 2495.250486][ T5988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5148'. [ 2496.000565][ T5989] vhci_hcd: connection closed [ 2496.001049][ T8972] vhci_hcd: stop threads [ 2496.259688][ T8972] vhci_hcd: release socket [ 2496.363674][ T8972] vhci_hcd: disconnect device [ 2496.488283][ T5996] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2496.798649][T30320] usb 33-1: new high-speed USB device number 7 using vhci_hcd [ 2496.806450][T30320] usb 33-1: enqueue for inactive port 0 [ 2496.889771][T30320] vhci_hcd: vhci_device speed not set [ 2497.294372][ T6008] raw_sendmsg: syz.2.5151 forgot to set AF_INET. Fix it! [ 2498.288701][ T6012] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2500.750220][T26119] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2501.173230][ T6078] ip6erspan0: entered promiscuous mode [ 2501.518587][ T6084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5162'. [ 2502.216566][ T6097] tipc: Enabling of bearer rejected, failed to enable media [ 2502.229691][ T6097] siw: device registration error -23 [ 2502.619877][ T6094] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=6094 comm=syz.0.5163 [ 2502.745183][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 2502.765371][ T30] audit: type=1326 audit(2000001116.661:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.3.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558cf8ebe9 code=0x7ffc0000 [ 2503.100061][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5163'. [ 2503.193543][ T30] audit: type=1326 audit(2000001116.661:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.3.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558cf8ebe9 code=0x7ffc0000 [ 2503.329030][ T6110] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2504.701095][T25830] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2504.859737][T25830] usb 3-1: Using ep0 maxpacket: 8 [ 2504.876112][T25830] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2504.971315][T25830] usb 3-1: config 7 has an invalid interface number: 59 but max is 0 [ 2504.991228][T25830] usb 3-1: config 7 has no interface number 0 [ 2505.002973][T25830] usb 3-1: config 7 interface 59 has no altsetting 0 [ 2505.020025][T25830] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=cc.70 [ 2505.029946][T25830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2505.038475][T25830] usb 3-1: Product: syz [ 2505.042846][T25830] usb 3-1: Manufacturer: syz [ 2505.050990][T25830] usb 3-1: SerialNumber: syz [ 2505.102424][ T6092] [U]  [ 2505.211962][ T6129] wg1 speed is unknown, defaulting to 1000 [ 2505.270918][ T6129] lo speed is unknown, defaulting to 1000 [ 2505.432681][T25830] kobil_sct 3-1:7.59: KOBIL USB smart card terminal converter detected [ 2505.475428][T25830] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2505.571321][ T6129] lo speed is unknown, defaulting to 1000 [ 2505.643453][T25830] usb 3-1: USB disconnect, device number 67 [ 2505.692786][T25830] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2505.717650][T25830] kobil_sct 3-1:7.59: device disconnected [ 2505.733322][ T6129] lo speed is unknown, defaulting to 1000 [ 2506.260366][ T6172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5174'. [ 2508.985909][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5178'. [ 2508.995841][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5178'. [ 2511.256801][ T6277] random: crng reseeded on system resumption [ 2511.263182][ T30] audit: type=1400 audit(2000001125.171:2162): avc: denied { write } for pid=6274 comm="syz.0.5187" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2511.936926][ T6278] input: syz0 as /devices/virtual/input/input38 [ 2515.840075][ T30] audit: type=1400 audit(2000001129.761:2163): avc: denied { setopt } for pid=6342 comm="syz.2.5195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2516.831518][ T30] audit: type=1400 audit(2000001129.761:2164): avc: denied { getopt } for pid=6342 comm="syz.2.5195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2516.960154][ T30] audit: type=1400 audit(2000001129.871:2165): avc: denied { setattr } for pid=6342 comm="syz.2.5195" name="midiC2D0" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 2518.272642][ T6370] /dev/nullb0: Can't open blockdev [ 2518.869637][ T30] audit: type=1400 audit(2000001132.781:2166): avc: denied { mounton } for pid=6361 comm="syz.4.5200" path="/1046/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 2519.103405][ T6370] orangefs_mount: mount request failed with -4 [ 2519.253090][ T30] audit: type=1400 audit(2000001132.831:2167): avc: denied { append } for pid=6361 comm="syz.4.5200" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2521.278197][ T6403] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5209'. [ 2521.288019][ T6403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5209'. [ 2521.673432][ T6408] wg1 speed is unknown, defaulting to 1000 [ 2521.695940][ T6408] lo speed is unknown, defaulting to 1000 [ 2521.785536][ T6408] lo speed is unknown, defaulting to 1000 [ 2521.988118][ T6408] lo speed is unknown, defaulting to 1000 [ 2522.711919][ T6428] tipc: Started in network mode [ 2522.717013][ T6428] tipc: Node identity 4, cluster identity 4711 [ 2522.723448][ T6428] tipc: Node number set to 4 [ 2524.720772][ T6446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5216'. [ 2528.700005][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.707305][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.955849][ T6518] siw: device registration error -23 [ 2535.524507][ T6595] wg1 speed is unknown, defaulting to 1000 [ 2535.531189][ T6595] lo speed is unknown, defaulting to 1000 [ 2535.537613][ T6595] lo speed is unknown, defaulting to 1000 [ 2535.544073][ T6595] lo speed is unknown, defaulting to 1000 [ 2536.324972][ T6630] mkiss: ax0: crc mode is auto. [ 2536.888654][ T30] audit: type=1400 audit(2000001148.804:2168): avc: denied { read } for pid=6641 comm="syz.0.5241" path="socket:[117715]" dev="sockfs" ino=117715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2540.183567][T27318] libceph: connect (1)[c::]:6789 error -22 [ 2540.219925][T27318] libceph: mon0 (1)[c::]:6789 connect error [ 2540.235130][ T6680] ceph: No mds server is up or the cluster is laggy [ 2540.369310][ T6686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5247'. [ 2540.494565][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5247'. [ 2541.120849][ T6714] ip6erspan0: entered promiscuous mode [ 2541.736721][ T6721] CIFS mount error: No usable UNC path provided in device string! [ 2541.736721][ T6721] [ 2541.747104][ T6721] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2544.369790][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5255'. [ 2544.451813][ T6736] overlayfs: failed to clone upperpath [ 2544.458288][ T6741] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 2544.464800][ T6741] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2544.473938][ T6741] vhci_hcd vhci_hcd.0: Device attached [ 2544.485015][ T6742] vhci_hcd: connection closed [ 2544.485474][ T8972] vhci_hcd: stop threads [ 2544.589220][ T6746] Invalid option length (1048557) for dns_resolver key [ 2544.602838][ T8972] vhci_hcd: release socket [ 2544.607473][ T8972] vhci_hcd: disconnect device [ 2544.701429][ T6754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2544.729899][ T6754] bridge0: entered allmulticast mode [ 2545.021752][ T5992] vhci_hcd: vhci_device speed not set [ 2545.103865][ T6756] fuse: Unknown parameter 'ÿ' [ 2545.784003][ T6772] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2546.325289][ T30] audit: type=1400 audit(2000001158.244:2169): avc: denied { setopt } for pid=6781 comm="syz.2.5264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2547.911755][ T6792] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2549.667092][ T6812] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5270'. [ 2549.676547][ T6812] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5270'. [ 2549.763195][ T5992] Process accounting resumed [ 2550.095854][ T6812] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5270'. [ 2550.105313][ T6812] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5270'. [ 2550.728764][ T6834] batman_adv: batadv0: Interface deactivated: ipvlan0 [ 2550.735974][ T6834] batman_adv: batadv0: Removing interface: ipvlan0 [ 2554.494624][ T6873] /dev/nullb0: Can't lookup blockdev [ 2554.838625][ T6872] ceph: No mds server is up or the cluster is laggy [ 2555.310708][ T6880] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=6880 comm=syz.2.5282 [ 2555.433394][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5282'. [ 2556.449632][T21294] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2556.518776][ T6901] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5285'. [ 2557.679654][T21294] usb 3-1: Using ep0 maxpacket: 8 [ 2557.707844][T21294] usb 3-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config [ 2557.720960][T21294] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2557.730040][T21294] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2557.743476][T21294] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2557.752666][T21294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2557.765010][T21294] hub 3-1:1.0: bad descriptor, ignoring hub [ 2557.790243][T21294] hub 3-1:1.0: probe with driver hub failed with error -5 [ 2557.813603][T21294] cdc_wdm 3-1:1.0: skipping garbage [ 2557.819856][T21294] cdc_wdm 3-1:1.0: skipping garbage [ 2557.820664][ T6917] CIFS: VFS: Malformed UNC in devname [ 2557.831038][T21294] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2557.945366][ T6884] [U]  [ 2558.091945][T30320] usb 3-1: USB disconnect, device number 68 [ 2559.813006][ T6960] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2560.235845][ T6951] siw: device registration error -23 [ 2561.199912][ T6970] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2562.628673][ T6991] CIFS: VFS: Malformed UNC in devname [ 2562.658974][ T6994] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=6994 comm=syz.0.5302 [ 2562.739059][ T6999] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=6999 comm=syz.4.5304 [ 2562.764869][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5302'. [ 2563.353427][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5304'. [ 2563.912168][ T7026] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5306'. [ 2565.459869][ T7041] No control pipe specified [ 2565.479241][ T7041] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20000 [ 2565.486772][ T30] audit: type=1400 audit(2000001177.389:2170): avc: denied { setopt } for pid=7039 comm="syz.2.5309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2565.785461][ T7045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2566.261195][ T6999] [U]  [ 2566.631556][ T7063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2567.338157][ T7070] bridge0: port 2(gretap0) entered blocking state [ 2567.345152][ T7070] bridge0: port 2(gretap0) entered disabled state [ 2567.358557][ T7070] gretap0: entered allmulticast mode [ 2567.430647][ T7070] gretap0: entered promiscuous mode [ 2567.480568][ T7070] bridge0: port 2(gretap0) entered blocking state [ 2567.487564][ T7070] bridge0: port 2(gretap0) entered forwarding state [ 2567.813258][ T7072] could not allocate digest TFM handle cryptd(blake2b-160) [ 2567.893096][ T7089] CIFS: VFS: Malformed UNC in devname [ 2567.982333][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5318'. [ 2567.994500][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5318'. [ 2568.789848][ T7103] wg1 speed is unknown, defaulting to 1000 [ 2568.804417][ T7103] lo speed is unknown, defaulting to 1000 [ 2568.818645][ T7103] lo speed is unknown, defaulting to 1000 [ 2568.860687][ T7103] lo speed is unknown, defaulting to 1000 [ 2570.254445][ T7140] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=7140 comm=syz.1.5322 [ 2570.974573][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5322'. [ 2571.377432][ T7156] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2572.040012][ T7163] CIFS: VFS: Malformed UNC in devname [ 2572.467373][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5330'. [ 2572.516585][ T7180] overlayfs: failed to clone upperpath [ 2572.659209][ T7191] CIFS: VFS: Malformed UNC in devname [ 2573.579163][ T7202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5336'. [ 2574.239703][ T7219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2574.650340][ T7222] CIFS: VFS: Malformed UNC in devname [ 2574.715591][ T7227] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=7227 comm=syz.2.5344 [ 2574.941401][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5344'. [ 2575.507508][T30320] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2576.129785][T30320] usb 3-1: Using ep0 maxpacket: 8 [ 2576.144613][T30320] usb 3-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config [ 2576.186301][T30320] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2576.869230][T30320] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2576.951340][T30320] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2576.984116][T30320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2577.020158][T30320] hub 3-1:1.0: bad descriptor, ignoring hub [ 2577.103079][T30320] hub 3-1:1.0: probe with driver hub failed with error -5 [ 2577.134650][T30320] cdc_wdm 3-1:1.0: skipping garbage [ 2577.140597][T30320] cdc_wdm 3-1:1.0: skipping garbage [ 2577.145850][T30320] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2577.232034][T30320] usb 3-1: USB disconnect, device number 69 [ 2577.234809][ T7226] [U]  [ 2577.352189][ T7264] CIFS: VFS: Malformed UNC in devname [ 2577.365551][ T7265] netlink: 'syz.0.5353': attribute type 27 has an invalid length. [ 2578.010397][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5353'. [ 2578.019332][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5353'. [ 2578.647725][ T7286] futex_wake_op: syz.4.5355 tries to shift op by -1; fix this program [ 2578.940559][ T7301] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 2581.806000][ T7330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2583.373984][ T7349] CIFS: VFS: Malformed UNC in devname [ 2583.580860][ T7351] netlink: 'syz.1.5369': attribute type 27 has an invalid length. [ 2583.643097][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5369'. [ 2583.653780][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5369'. [ 2583.666171][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5370'. [ 2583.769754][ T7359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2585.384685][ T7378] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5374'. [ 2585.496643][ T7378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5374'. [ 2587.994976][ T7410] tipc: Enabling of bearer rejected, failed to enable media [ 2588.003847][ T7410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5379'. [ 2588.061796][ T7409] syz_tun: entered allmulticast mode [ 2588.214528][ T7405] syz_tun: left allmulticast mode [ 2588.384245][ T7425] netlink: 'syz.0.5383': attribute type 27 has an invalid length. [ 2588.447594][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5383'. [ 2588.489617][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5383'. [ 2590.033427][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.042004][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2593.219813][ T30] audit: type=1400 audit(2000001205.129:2171): avc: denied { mount } for pid=7521 comm="syz.0.5396" name="/" dev="configfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 2593.291381][ T30] audit: type=1400 audit(2000001205.129:2172): avc: denied { search } for pid=7521 comm="syz.0.5396" name="/" dev="configfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2593.314641][ T30] audit: type=1400 audit(2000001205.129:2173): avc: denied { search } for pid=7521 comm="syz.0.5396" name="/" dev="configfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2593.319737][T21294] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2593.337694][ T30] audit: type=1400 audit(2000001205.129:2174): avc: denied { search } for pid=7521 comm="syz.0.5396" name="/" dev="configfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2593.685116][T21294] usb 3-1: config 0 has no interfaces? [ 2593.787536][ T7540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2594.119388][T21294] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2594.180069][T21294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2594.189342][T21294] usb 3-1: Product: syz [ 2594.193878][T21294] usb 3-1: Manufacturer: syz [ 2594.198564][T21294] usb 3-1: SerialNumber: syz [ 2594.204867][T21294] usb 3-1: config 0 descriptor?? [ 2595.870600][ T7563] netlink: 'syz.3.5402': attribute type 5 has an invalid length. [ 2596.267970][ T7567] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 2596.746936][ T30] audit: type=1400 audit(2000001208.579:2175): avc: denied { unmount } for pid=26115 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2597.518433][ T7590] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2597.876490][T30320] usb 3-1: USB disconnect, device number 70 [ 2598.002398][ T7599] dvmrp0: entered allmulticast mode [ 2601.656041][ T7654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5417'. [ 2602.706006][ T30] audit: type=1400 audit(2000001214.619:2176): avc: denied { write } for pid=7679 comm="syz.4.5423" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 2603.706754][ T7683] CIFS: VFS: Malformed UNC in devname [ 2604.554137][ T7696] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5425'. [ 2604.563308][ T7696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5425'. [ 2605.457786][ T7694] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 2605.464391][ T7694] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2605.490651][ T7694] vhci_hcd vhci_hcd.0: Device attached [ 2605.500969][ T7695] vhci_hcd: connection closed [ 2605.509241][ T1144] vhci_hcd: stop threads [ 2605.911815][ T1144] vhci_hcd: release socket [ 2605.929648][ T5992] usb 41-1: new high-speed USB device number 9 using vhci_hcd [ 2605.937955][ T1144] vhci_hcd: disconnect device [ 2606.787914][ T7720] ubi: mtd0 is already attached to ubi31 [ 2608.015008][ T7741] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=7741 comm=syz.2.5433 [ 2608.649773][T25830] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2608.849772][T25830] usb 3-1: Using ep0 maxpacket: 8 [ 2608.865317][T25830] usb 3-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config [ 2608.879836][T25830] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2608.907991][T25830] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2609.147893][T25830] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2609.204288][T25830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2609.282885][T25830] hub 3-1:1.0: bad descriptor, ignoring hub [ 2609.302297][T25830] hub 3-1:1.0: probe with driver hub failed with error -5 [ 2609.326659][T25830] cdc_wdm 3-1:1.0: skipping garbage [ 2609.341246][T25830] cdc_wdm 3-1:1.0: skipping garbage [ 2609.351725][T25830] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2610.966569][ T7781] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2611.081340][ T5992] vhci_hcd: vhci_device speed not set [ 2611.642360][ T7787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7787 comm=syz.0.5440 [ 2612.040564][ T7791] overlayfs: failed to clone upperpath [ 2612.375688][ T7743] [U]  [ 2612.380272][T30320] usb 3-1: USB disconnect, device number 71 [ 2612.436790][ T7794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2613.380544][ T7828] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5448'. [ 2613.469898][ T30] audit: type=1400 audit(2000001225.349:2177): avc: denied { bind } for pid=7820 comm="syz.2.5448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2613.493934][ T7829] CIFS: VFS: Malformed UNC in devname [ 2613.649014][ T7833] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.5450'. [ 2615.116053][ T7848] infiniband syz!: set down [ 2615.120614][ T7848] infiniband syz!: added team_slave_0 [ 2615.148030][ T7848] RDS/IB: syz!: added [ 2615.152345][ T7848] smc: adding ib device syz! with port count 1 [ 2615.158481][ T7848] smc: ib device syz! port 1 has pnetid [ 2615.678620][ T7860] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5456'. [ 2615.687605][ T7860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5456'. [ 2615.978403][ T7862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7862 comm=syz.4.5455 [ 2616.375070][ T7864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2616.544669][ T7871] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=7871 comm=syz.3.5459 [ 2617.042939][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5459'. [ 2617.227748][ T7871] overlayfs: failed to clone upperpath [ 2618.888628][ T7895] 9pnet: Found fid 0 not clunked [ 2618.994340][ T7897] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 2619.000974][ T7897] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2619.008817][ T7897] vhci_hcd vhci_hcd.0: Device attached [ 2619.030757][ T7897] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5463'. [ 2619.039839][ T7897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5463'. [ 2619.799558][ T7898] vhci_hcd: connection closed [ 2619.802591][ T6298] vhci_hcd: stop threads [ 2619.815392][ T6298] vhci_hcd: release socket [ 2619.820590][ T6298] vhci_hcd: disconnect device [ 2620.071170][ T7907] CIFS: VFS: Malformed UNC in devname [ 2620.573367][ T7910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5466'. [ 2621.757851][ T7919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7919 comm=syz.0.5468 [ 2622.315399][ T7930] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 2622.321936][ T7930] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2622.330127][ T7930] vhci_hcd vhci_hcd.0: Device attached [ 2622.356569][ T7930] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5470'. [ 2622.365803][ T7930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5470'. [ 2623.343896][ T7931] vhci_hcd: connection closed [ 2623.366444][ T6298] vhci_hcd: stop threads [ 2623.375764][ T6298] vhci_hcd: release socket [ 2623.383890][ T6298] vhci_hcd: disconnect device [ 2624.263482][ T7951] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=7951 comm=syz.0.5476 [ 2625.854594][ T7971] CIFS: VFS: Malformed UNC in devname [ 2628.218454][ T7985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7985 comm=syz.2.5482 [ 2629.276395][ T7955] [U]  [ 2629.325609][ T7996] team0: left promiscuous mode [ 2629.330633][ T7996] C: left promiscuous mode [ 2629.335710][ T7996] team0: left allmulticast mode [ 2629.347724][ T7996] C: left allmulticast mode [ 2629.967566][ T7996] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2630.118230][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5485'. [ 2630.142220][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5485'. [ 2631.595473][ T8031] afs: Unknown parameter 'GPL' [ 2631.933493][ T8045] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=8045 comm=syz.1.5493 [ 2632.212545][ T8050] wg1 speed is unknown, defaulting to 1000 [ 2632.226975][ T8050] lo speed is unknown, defaulting to 1000 [ 2632.241196][ T8050] lo speed is unknown, defaulting to 1000 [ 2632.255543][ T8050] lo speed is unknown, defaulting to 1000 [ 2633.254005][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5494'. [ 2633.435787][ T8085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5493'. [ 2633.553651][ T8089] overlayfs: failed to clone upperpath [ 2634.366393][ T8108] CIFS: VFS: Malformed UNC in devname [ 2636.160800][ T8125] kvm: user requested TSC rate below hardware speed [ 2636.170908][ T8125] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 2637.089121][ T30] audit: type=1400 audit(2000001248.979:2178): avc: denied { connect } for pid=8124 comm="syz.0.5500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2637.113196][ T8137] C: renamed from team_slave_0 [ 2637.152627][ T8137] netlink: 'syz.1.5501': attribute type 1 has an invalid length. [ 2637.160565][ T8137] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5501'. [ 2637.169771][ T8137] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2638.470723][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5505'. [ 2640.196936][ T8172] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=8172 comm=syz.3.5508 [ 2640.213866][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5508'. [ 2640.343282][ T8172] overlayfs: failed to clone upperpath [ 2640.349663][T25830] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 2640.902179][T25830] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 2640.911139][T25830] usb 3-1: config 0 has no interface number 0 [ 2640.920384][T25830] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2640.939006][T25830] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2640.967941][T25830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2640.980699][T25830] usb 3-1: Product: syz [ 2640.986703][T25830] usb 3-1: Manufacturer: syz [ 2640.994440][T25830] usb 3-1: SerialNumber: syz [ 2641.062936][T25830] usb 3-1: config 0 descriptor?? [ 2641.307083][T25830] usb 3-1: can't set config #0, error -71 [ 2641.329356][T25830] usb 3-1: USB disconnect, device number 72 [ 2642.493286][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5522'. [ 2642.515431][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5522'. [ 2642.515441][ T8203] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2644.185572][ T8232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2644.785645][ T8240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5520'. [ 2644.893643][ T8241] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5520'. [ 2644.992688][ T8243] Invalid source name [ 2644.996700][ T8243] UBIFS error (pid: 8243): cannot open "./file0", error -22 [ 2644.998572][ T8243] binder: 8235:8243 ioctl 40046210 0 returned -14 [ 2645.013518][ T8243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5519'. [ 2645.322560][ T8253] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=8253 comm=syz.2.5524 [ 2645.761791][ T8256] wg1 speed is unknown, defaulting to 1000 [ 2645.769083][ T8256] lo speed is unknown, defaulting to 1000 [ 2645.776343][ T8256] lo speed is unknown, defaulting to 1000 [ 2645.783633][ T8256] lo speed is unknown, defaulting to 1000 [ 2647.017348][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5524'. [ 2647.726153][T27318] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 2648.123901][T27318] usb 3-1: Using ep0 maxpacket: 8 [ 2648.139297][T27318] usb 3-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config [ 2648.156201][T27318] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2648.171405][T27318] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2648.342587][T27318] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2648.813238][T27318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2648.844812][ T8251] [U]  [ 2648.853050][T27318] usb 3-1: can't set config #1, error -71 [ 2648.911208][T27318] usb 3-1: USB disconnect, device number 73 [ 2649.131264][ T30] audit: type=1400 audit(2000001261.039:2179): avc: denied { getopt } for pid=8337 comm="syz.2.5529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2649.245564][ T8339] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5529'. [ 2649.260871][ T8339] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2649.492398][ T8339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5529'. [ 2651.476913][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.483384][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2653.869594][ T8411] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 2653.876229][ T8411] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2653.884098][ T8411] vhci_hcd vhci_hcd.0: Device attached [ 2654.437472][ T8411] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5537'. [ 2654.446635][ T8411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5537'. [ 2654.471585][ T5992] usb 33-1: new high-speed USB device number 8 using vhci_hcd [ 2654.615484][ T8412] vhci_hcd: connection reset by peer [ 2654.624753][ T6010] vhci_hcd: stop threads [ 2654.635992][ T6010] vhci_hcd: release socket [ 2654.670011][ T6010] vhci_hcd: disconnect device [ 2654.952557][ T8423] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2654.980465][ T8427] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5541'. [ 2654.989433][ T8427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5541'. [ 2655.319426][ T8432] sctp: [Deprecated]: syz.1.5542 (pid 8432) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2655.319426][ T8432] Use struct sctp_sack_info instead [ 2656.974654][ T8450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8450 comm=syz.3.5545 [ 2659.619647][ T5992] vhci_hcd: vhci_device speed not set [ 2662.304439][ T8523] siw: device registration error -23 [ 2665.748547][ T8517] delete_channel: no stack [ 2665.765190][ T30] audit: type=1400 audit(2000001277.679:2180): avc: denied { map } for pid=8563 comm="syz.2.5565" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2665.810007][ T30] audit: type=1400 audit(2000001277.709:2181): avc: denied { execute } for pid=8563 comm="syz.2.5565" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2666.444077][T27318] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2666.742652][T27318] usb 3-1: Using ep0 maxpacket: 16 [ 2666.945796][T27318] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2667.252895][T27318] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2667.329541][T27318] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 2667.359643][T27318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2667.390611][T27318] usb 3-1: config 0 descriptor?? [ 2668.617339][ T8606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8606 comm=syz.3.5570 [ 2669.082127][ T8612] fuse: Unknown parameter 'grou00000000000000000000' [ 2669.292529][ T8614] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2669.305296][ T8614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2670.464447][ T30] audit: type=1400 audit(2000001282.379:2182): avc: denied { unmount } for pid=26115 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2671.310730][T27318] usb 3-1: string descriptor 0 read error: -71 [ 2671.426608][T27318] usb 3-1: USB disconnect, device number 74 [ 2671.440775][ T8635] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=8635 comm=syz.1.5576 [ 2671.586004][ T8640] overlayfs: failed to clone upperpath [ 2674.245708][ T8678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8678 comm=syz.0.5583 [ 2674.659364][ T30] audit: type=1400 audit(2000001286.569:2183): avc: denied { write } for pid=8671 comm="syz.4.5584" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2675.018031][ T8685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2676.238660][ T30] audit: type=1326 audit(2000001287.779:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.4.5588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d578ebe9 code=0x7ffc0000 [ 2676.299632][ T30] audit: type=1326 audit(2000001287.779:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.4.5588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d578ebe9 code=0x7ffc0000 [ 2676.325103][ T30] audit: type=1326 audit(2000001287.789:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.4.5588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f12d578ebe9 code=0x7ffc0000 [ 2676.901977][ T8692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2676.918621][ T30] audit: type=1326 audit(2000001287.789:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.4.5588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d578ebe9 code=0x7ffc0000 [ 2676.942029][ C0] vkms_vblank_simulate: vblank timer overrun [ 2676.950639][ T30] audit: type=1326 audit(2000001287.789:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.4.5588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d578ebe9 code=0x7ffc0000 [ 2676.973990][ C0] vkms_vblank_simulate: vblank timer overrun [ 2676.982135][ T30] audit: type=1326 audit(2000001287.789:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.4.5588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f12d578ebe9 code=0x7ffc0000 [ 2677.005413][ C0] vkms_vblank_simulate: vblank timer overrun [ 2677.012374][ T30] audit: type=1326 audit(2000001287.789:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.4.5588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d578ebe9 code=0x7ffc0000 [ 2677.053047][ T30] audit: type=1326 audit(2000001287.789:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.4.5588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d578ebe9 code=0x7ffc0000 [ 2677.076600][ C0] vkms_vblank_simulate: vblank timer overrun [ 2677.105216][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5587'. [ 2677.110235][ T30] audit: type=1326 audit(2000001287.789:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.4.5588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f12d578ebe9 code=0x7ffc0000 [ 2677.137567][ C0] vkms_vblank_simulate: vblank timer overrun [ 2677.155237][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5587'. [ 2677.182666][ T8705] netlink: 6 bytes leftover after parsing attributes in process `syz.3.5591'. [ 2677.193252][ T8705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2679.025621][ T8717] mkiss: ax0: crc mode is auto. [ 2679.273349][ T8738] CIFS: VFS: Malformed UNC in devname [ 2679.779292][ T8749] bridge0: entered allmulticast mode [ 2680.363043][ T8752] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5602'. [ 2680.372289][ T8752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5602'. [ 2682.922787][ T8792] overlayfs: failed to clone upperpath [ 2685.642448][ T8806] CIFS: VFS: Malformed UNC in devname [ 2686.851392][ T8823] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 2686.857938][ T8823] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2686.865787][ T8823] vhci_hcd vhci_hcd.0: Device attached [ 2686.957428][ T8823] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5615'. [ 2686.966528][ T8823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5615'. [ 2687.129583][T27318] usb 33-1: new high-speed USB device number 9 using vhci_hcd [ 2688.066835][ T8824] vhci_hcd: connection reset by peer [ 2688.096378][ T6298] vhci_hcd: stop threads [ 2688.142300][ T6298] vhci_hcd: release socket [ 2688.196326][ T6298] vhci_hcd: disconnect device [ 2689.115954][ T8840] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5619'. [ 2690.572939][ T8860] wg1 speed is unknown, defaulting to 1000 [ 2690.585137][ T8860] lo speed is unknown, defaulting to 1000 [ 2690.592496][ T8860] lo speed is unknown, defaulting to 1000 [ 2690.599604][ T8860] lo speed is unknown, defaulting to 1000 [ 2692.769938][T27318] vhci_hcd: vhci_device speed not set [ 2693.395656][ T8926] CIFS: VFS: Malformed UNC in devname [ 2694.382211][ T8942] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=8942 comm=syz.0.5629 [ 2697.543448][ T8975] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5636'. [ 2697.688476][ T8974] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5636'. [ 2697.791969][ T8980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2698.237649][ T8983] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=8983 comm=syz.3.5638 [ 2698.311035][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5638'. [ 2698.567044][ T8983] overlayfs: failed to clone upperpath [ 2699.226475][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 2699.226493][ T30] audit: type=1400 audit(2000001311.139:2195): avc: denied { ioctl } for pid=8990 comm="syz.4.5640" path="socket:[125102]" dev="sockfs" ino=125102 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2699.235434][ T8942] [U]  [ 2699.469621][ T30] audit: type=1400 audit(2000001311.369:2196): avc: denied { read } for pid=8990 comm="syz.4.5640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2699.561567][ T30] audit: type=1400 audit(2000001311.459:2197): avc: denied { read } for pid=8990 comm="syz.4.5640" path="socket:[125114]" dev="sockfs" ino=125114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2700.691938][ T9025] overlayfs: failed to clone upperpath [ 2701.071630][ T9036] overlayfs: failed to clone upperpath [ 2701.523186][ T9042] virtio-fs: tag not found [ 2701.566502][ T9042] syz.2.5648: attempt to access beyond end of device [ 2701.566502][ T9042] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 2701.579938][ T9042] gfs2: error -5 reading superblock [ 2701.931468][ T9048] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=9048 comm=syz.3.5651 [ 2702.015220][ T9048] overlayfs: failed to clone upperpath [ 2702.674393][ T9060] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=9060 comm=syz.4.5653 [ 2702.742239][ T9062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5653'. [ 2703.337020][ T9078] CIFS: VFS: Malformed UNC in devname [ 2703.621514][ T9073] netlink: 'syz.2.5654': attribute type 39 has an invalid length. [ 2704.347404][ T9090] dvmrp0: entered allmulticast mode [ 2704.545786][ T9094] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=9094 comm=syz.1.5658 [ 2705.190149][ T9104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5660'. [ 2705.228565][ T9103] overlayfs: failed to clone upperpath [ 2705.251463][ T9064] [U]  [ 2705.459280][ T9115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2706.220191][ T9114] bridge0: port 2(gretap0) entered disabled state [ 2706.230158][ T9114] bridge0: entered promiscuous mode [ 2706.532966][ T9120] bridge0: port 2(gretap0) entered blocking state [ 2706.539529][ T9120] bridge0: port 2(gretap0) entered forwarding state [ 2707.657595][ T9134] ksmbd: Unknown IPC event: 3, ignore. [ 2707.726368][ T9134] usb usb8: usbfs: process 9134 (syz.4.5665) did not claim interface 0 before use [ 2708.103402][ T9144] pimreg: entered allmulticast mode [ 2708.757461][ T9155] trusted_key: encrypted_key: keyword 'updat `Êfault' not recognized [ 2711.157222][ T9187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2712.348401][ T9193] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 2712.355047][ T9193] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2712.390967][ T9193] vhci_hcd vhci_hcd.0: Device attached [ 2712.462013][ T9194] vhci_hcd: connection closed [ 2712.499779][T15845] vhci_hcd: stop threads [ 2712.504080][ T9198] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=9198 comm=syz.1.5678 [ 2712.548256][T15845] vhci_hcd: release socket [ 2712.575890][ T9200] overlayfs: failed to clone upperpath [ 2712.601971][T15845] vhci_hcd: disconnect device [ 2712.924236][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2712.930852][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.931726][ T30] audit: type=1400 audit(2000001325.819:2198): avc: denied { setopt } for pid=9222 comm="syz.0.5683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2715.135507][ T9249] CIFS: VFS: Malformed UNC in devname [ 2715.701930][ T9256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5687'. [ 2715.811655][ T9258] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 2716.920211][T27318] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2717.269540][T27318] usb 3-1: Using ep0 maxpacket: 8 [ 2717.279894][T27318] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2717.291056][T27318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2717.375829][T27318] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2717.419147][T27318] pvrusb2: ********** [ 2717.423561][T27318] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2717.460424][T27318] pvrusb2: Important functionality might not be entirely working. [ 2717.469965][T27318] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2717.518467][T27318] pvrusb2: ********** [ 2717.587299][ T9270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2717.597335][ T9270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2717.947455][ T2336] pvrusb2: Invalid write control endpoint [ 2718.355937][ T2336] pvrusb2: Invalid write control endpoint [ 2718.373086][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2718.399955][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2718.424756][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2718.507849][ T2336] pvrusb2: Device being rendered inoperable [ 2718.521090][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2718.534377][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2718.556608][ T2336] pvrusb2: Attached sub-driver cx25840 [ 2718.567865][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2718.585075][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2718.645519][ T9251] [U]  [ 2719.245041][ T9313] libceph: resolve '4..' (ret=-3): failed [ 2719.400560][ T30] audit: type=1400 audit(2000001331.239:2199): avc: denied { bind } for pid=9310 comm="syz.0.5695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2719.420424][ C1] vkms_vblank_simulate: vblank timer overrun [ 2719.692193][T27318] usb 3-1: USB disconnect, device number 75 [ 2720.983733][ T9351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5701'. [ 2721.875609][ T30] audit: type=1400 audit(2000001333.789:2200): avc: denied { read } for pid=5201 comm="acpid" name="event8" dev="devtmpfs" ino=3401 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 2721.899184][ T30] audit: type=1400 audit(2000001333.789:2201): avc: denied { open } for pid=5201 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=3401 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 2722.016041][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5703'. [ 2722.037959][ T9364] syz.0.5703: attempt to access beyond end of device [ 2722.037959][ T9364] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2722.166022][ T30] audit: type=1400 audit(2000001333.789:2202): avc: denied { ioctl } for pid=5201 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=3401 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 2723.177965][ T9375] tipc: Resetting bearer [ 2723.202044][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5707'. [ 2723.211105][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5707'. [ 2723.225798][ T9375] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2723.751283][ T9385] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2723.890950][ T9387] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2724.718797][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5710'. [ 2724.718813][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5710'. [ 2724.843261][ T9409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5712'. [ 2727.187362][ T9422] wg1 speed is unknown, defaulting to 1000 [ 2727.198863][ T9422] lo speed is unknown, defaulting to 1000 [ 2727.210477][ T9422] lo speed is unknown, defaulting to 1000 [ 2727.222107][ T9422] lo speed is unknown, defaulting to 1000 [ 2728.954925][ T9437] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 2728.961484][ T9437] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2728.970193][ T9437] vhci_hcd vhci_hcd.0: Device attached [ 2728.983694][ T9439] vhci_hcd: connection closed [ 2729.134844][T15845] vhci_hcd: stop threads [ 2729.148080][T15845] vhci_hcd: release socket [ 2729.164091][T15845] vhci_hcd: disconnect device [ 2729.222277][ T9441] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5718'. [ 2729.234280][ T976] vhci_hcd: vhci_device speed not set [ 2729.453952][ T9448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5719'. [ 2729.463009][ T9448] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2732.010366][ T9516] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5725'. [ 2732.019365][ T9516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5725'. [ 2732.812338][ T9527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5727'. [ 2733.026692][ T9527] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5727'. [ 2733.489120][ T5992] libceph: connect (1)[c::]:6789 error -22 [ 2733.500717][ T9539] CIFS: VFS: Malformed UNC in devname [ 2733.528699][ T5992] libceph: mon0 (1)[c::]:6789 connect error [ 2733.529534][ T9531] ceph: No mds server is up or the cluster is laggy [ 2733.729895][ T30] audit: type=1400 audit(2000001345.639:2203): avc: denied { accept } for pid=9542 comm="syz.1.5730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2734.421924][ T9557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2734.469694][ T9560] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=9560 comm=syz.3.5733 [ 2735.028658][ T9567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5733'. [ 2735.062875][ T9567] overlayfs: failed to clone upperpath [ 2736.257172][ T9573] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 2736.263791][ T9573] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2736.354912][ T9579] Device name cannot be null; rc = [-22] [ 2736.440114][ T30] audit: type=1400 audit(2000001348.359:2204): avc: denied { ioctl } for pid=9577 comm="syz.2.5736" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2736.629568][ T9573] vhci_hcd vhci_hcd.0: Device attached [ 2736.648327][ T9574] vhci_hcd: connection closed [ 2736.693821][ T6010] vhci_hcd: stop threads [ 2736.720158][ T6010] vhci_hcd: release socket [ 2736.735993][ T6010] vhci_hcd: disconnect device [ 2736.898813][ T9588] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5737'. [ 2736.908111][ T9588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5737'. [ 2738.155007][ T9587] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 2738.161640][ T9587] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2738.169785][ T9587] vhci_hcd vhci_hcd.0: Device attached [ 2739.158908][ T9589] vhci_hcd: connection closed [ 2739.177224][T15829] vhci_hcd: stop threads [ 2739.186934][T15829] vhci_hcd: release socket [ 2739.211490][T15829] vhci_hcd: disconnect device [ 2739.665640][ T9613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9613 comm=syz.2.5743 [ 2740.379845][ T9608] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5741'. [ 2740.492528][ T9624] CIFS: VFS: Malformed UNC in devname [ 2740.828115][ T9627] sp0: Synchronizing with TNC [ 2741.016326][ T9625] [U] è [ 2741.549705][ T9638] wg1 speed is unknown, defaulting to 1000 [ 2741.581316][ T9638] lo speed is unknown, defaulting to 1000 [ 2741.609621][ T9638] lo speed is unknown, defaulting to 1000 [ 2741.616694][ T9638] lo speed is unknown, defaulting to 1000 [ 2742.698734][ T9688] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=9688 comm=syz.3.5748 [ 2742.783000][ T9693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5748'. [ 2742.857963][ T9688] overlayfs: failed to clone upperpath [ 2744.090462][ T9712] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5752'. [ 2744.099571][ T9712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5752'. [ 2744.390476][ T9710] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 2744.397101][ T9710] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2744.404985][ T9710] vhci_hcd vhci_hcd.0: Device attached [ 2744.936030][ T9711] vhci_hcd: connection closed [ 2744.980697][ T6010] vhci_hcd: stop threads [ 2744.999243][ T6010] vhci_hcd: release socket [ 2745.003852][ T6010] vhci_hcd: disconnect device [ 2745.066324][ T9717] netlink: 332 bytes leftover after parsing attributes in process `syz.2.5753'. [ 2745.075932][ T9717] netlink: 160 bytes leftover after parsing attributes in process `syz.2.5753'. [ 2745.793296][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5754'. [ 2745.816660][ T9723] openvswitch: : Dropping previously announced user features [ 2746.881603][ T9743] CIFS: VFS: Malformed UNC in devname [ 2747.997005][ T30] audit: type=1326 audit(2000001359.869:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9750 comm="syz.3.5760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558cf8ebe9 code=0x7ffc0000 [ 2748.305987][ T30] audit: type=1326 audit(2000001359.869:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9750 comm="syz.3.5760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558cf8ebe9 code=0x7ffc0000 [ 2748.332160][ T30] audit: type=1326 audit(2000001359.879:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9750 comm="syz.3.5760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f558cf8ebe9 code=0x7ffc0000 [ 2748.403225][ T30] audit: type=1326 audit(2000001359.879:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9750 comm="syz.3.5760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558cf8ebe9 code=0x7ffc0000 [ 2748.434844][ T30] audit: type=1326 audit(2000001359.879:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9750 comm="syz.3.5760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558cf8ebe9 code=0x7ffc0000 [ 2748.462211][ T30] audit: type=1326 audit(2000001359.889:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9750 comm="syz.3.5760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f558cf8ebe9 code=0x7ffc0000 [ 2748.499343][ T30] audit: type=1326 audit(2000001359.889:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9750 comm="syz.3.5760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558cf8ebe9 code=0x7ffc0000 [ 2748.609681][ T30] audit: type=1326 audit(2000001359.889:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9750 comm="syz.3.5760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558cf8ebe9 code=0x7ffc0000 [ 2748.637458][ T30] audit: type=1326 audit(2000001359.889:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9750 comm="syz.3.5760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f558cf8ebe9 code=0x7ffc0000 [ 2748.696826][ T30] audit: type=1326 audit(2000001359.889:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9750 comm="syz.3.5760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558cf8ebe9 code=0x7ffc0000 [ 2749.652957][ T9772] netlink: 'syz.3.5765': attribute type 11 has an invalid length. [ 2750.410261][ T9778] IPv6: NLM_F_REPLACE set, but no existing node found! [ 2750.542077][ T9758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5761'. [ 2750.557443][ T9758] dummy0: left allmulticast mode [ 2750.661902][ T9758] dummy0: left promiscuous mode [ 2750.681052][ T9758] bridge0: port 4(dummy0) entered disabled state [ 2750.743893][ T9758] bridge_slave_1: left allmulticast mode [ 2750.753533][ T9758] bridge_slave_1: left promiscuous mode [ 2750.768247][ T9758] bridge0: port 2(bridge_slave_1) entered disabled state [ 2750.800470][ T9758] bridge_slave_0: left allmulticast mode [ 2750.936749][ T9758] bridge_slave_0: left promiscuous mode [ 2751.115593][ T9758] bridge0: port 1(bridge_slave_0) entered disabled state [ 2751.651323][ T9758] bond0: (slave bridge0): Releasing backup interface [ 2751.679156][ T9758] bridge0 (unregistering): left allmulticast mode [ 2751.764957][ T9802] netlink: 'syz.3.5771': attribute type 6 has an invalid length. [ 2752.560068][ T9821] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2753.267154][ T9831] CIFS: VFS: Malformed UNC in devname [ 2757.351779][ T9877] trusted_key: encrypted_key: keyword 'updat `Êfault' not recognized [ 2757.622223][ T9874] rdma_rxe: rxe_newlink: failed to add wg1 [ 2757.670020][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5787'. [ 2759.146438][ T9903] CIFS: VFS: Malformed UNC in devname [ 2759.703810][ T9908] netlink: 'syz.0.5793': attribute type 4 has an invalid length. [ 2759.711757][ T9908] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5793'. [ 2762.298475][ T9938] syz.0.5799: attempt to access beyond end of device [ 2762.298475][ T9938] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2762.565117][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5800'. [ 2762.581029][ T9951] syz.4.5800: attempt to access beyond end of device [ 2762.581029][ T9951] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2764.098246][ T9966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2764.651069][ T9977] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2765.648139][ T9994] dns_resolver: Unsupported server list version (0) [ 2765.682060][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2765.682087][ T30] audit: type=1400 audit(2000001377.569:2216): avc: denied { create } for pid=9988 comm="syz.3.5811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 2767.991722][T10031] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2769.218451][T10051] ksmbd: Unknown IPC event: 3, ignore. [ 2769.495494][T10053] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2769.929963][T10056] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2771.496942][T10069] wg1 speed is unknown, defaulting to 1000 [ 2771.508608][T10069] lo speed is unknown, defaulting to 1000 [ 2771.521017][T10069] lo speed is unknown, defaulting to 1000 [ 2771.532552][T10069] lo speed is unknown, defaulting to 1000 [ 2773.974718][T10102] No control pipe specified [ 2773.980827][T10102] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20000 [ 2774.059824][T10103] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.5828'. [ 2774.420695][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.427214][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.149552][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5832'. [ 2775.477103][T10117] openvswitch: : Dropping previously announced user features [ 2776.129178][T10134] trusted_key: encrypted_key: keyword 'updat `Êfault' not recognized [ 2776.381145][T10135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5833'. [ 2776.503511][T10137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5835'. [ 2776.818235][T10141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5837'. [ 2778.634829][T10154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2778.663361][T10158] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5840'. [ 2778.791366][T10160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5841'. [ 2778.849784][T10160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5841'. [ 2780.443011][T10197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5846'. [ 2780.457711][T10197] openvswitch: : Dropping previously announced user features [ 2781.170945][T27318] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2782.096271][T10218] syz.0.5849 (10218): drop_caches: 2 [ 2782.281353][T27318] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2782.312029][T27318] usb 3-1: config 0 has no interfaces? [ 2782.322165][T27318] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2782.397671][T27318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2782.501823][T27318] usb 3-1: config 0 descriptor?? [ 2785.731820][T10252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2785.758898][T10253] CIFS: VFS: Malformed UNC in devname [ 2786.095724][T10259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5860'. [ 2786.171104][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5860'. [ 2786.198173][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5860'. [ 2786.277247][T27318] usb 3-1: string descriptor 0 read error: -71 [ 2786.297925][T27318] usb 3-1: USB disconnect, device number 76 [ 2786.311946][T10193] delete_channel: no stack [ 2786.538546][T10272] CIFS: VFS: Malformed UNC in devname [ 2789.475875][T10315] CIFS: VFS: Malformed UNC in devname [ 2790.989552][T10340] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2791.373462][T10346] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2792.287211][T10363] netlink: 'syz.4.5878': attribute type 1 has an invalid length. [ 2792.540470][T10363] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2792.554496][T10368] vlan0: entered allmulticast mode [ 2792.559803][T10368] veth1: entered allmulticast mode [ 2792.566788][T10368] bond1: (slave vlan0): Opening slave failed [ 2793.562955][T10416] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5881'. [ 2794.578909][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5881'. [ 2795.408685][ T30] audit: type=1400 audit(2000001407.270:2217): avc: denied { bind } for pid=10429 comm="syz.0.5885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2795.830380][T10449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5887'. [ 2795.844539][T10449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2795.852902][T10449] batadv_slave_0: entered promiscuous mode [ 2796.910034][T10453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10453 comm=syz.4.5889 [ 2797.646108][T10472] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5891'. [ 2797.679584][T10464] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 2797.686117][T10464] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2797.693582][T10464] vhci_hcd vhci_hcd.0: Device attached [ 2797.879553][T27318] vhci_hcd: vhci_device speed not set [ 2797.939501][T27318] usb 41-1: new high-speed USB device number 10 using vhci_hcd [ 2798.089497][T10478] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=10478 comm=syz.0.5894 [ 2798.170064][T10478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5894'. [ 2798.415693][T10486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5895'. [ 2800.424423][T10466] vhci_hcd: connection reset by peer [ 2800.496829][ T8972] vhci_hcd: stop threads [ 2800.560842][ T8972] vhci_hcd: release socket [ 2800.565697][ T8972] vhci_hcd: disconnect device [ 2800.958059][T10521] syz.4.5901 (10521): drop_caches: 2 [ 2800.964319][T10521] syz.4.5901 (10521): drop_caches: 2 [ 2801.032627][T10487] [U]  [ 2801.227221][T10533] SELinux: failed to load policy [ 2801.278390][ T30] audit: type=1400 audit(2000001413.140:2218): avc: denied { load_policy } for pid=10528 comm="syz.2.5902" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 2801.670860][T10544] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2801.687563][T10544] bridge0: entered allmulticast mode [ 2802.956447][T10551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5907'. [ 2803.139504][T27318] vhci_hcd: vhci_device speed not set [ 2804.365640][T10572] wg1 speed is unknown, defaulting to 1000 [ 2804.379931][T10572] lo speed is unknown, defaulting to 1000 [ 2804.393880][T10572] lo speed is unknown, defaulting to 1000 [ 2804.433064][T10572] lo speed is unknown, defaulting to 1000 [ 2805.710106][ T30] audit: type=1326 audit(2000001417.210:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10556 comm="syz.2.5909" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f426198ebe9 code=0x0 [ 2806.578303][T10627] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5915'. [ 2806.587381][T10627] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5915'. [ 2806.731429][T10633] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=10633 comm=syz.0.5914 [ 2806.969923][T10637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5914'. [ 2807.302185][T10643] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5916'. [ 2807.311225][T10643] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5916'. [ 2807.356655][T30320] Process accounting resumed [ 2807.561058][T10643] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5916'. [ 2807.570294][T10643] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5916'. [ 2807.826177][T10643] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5916'. [ 2807.835391][T10643] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5916'. [ 2808.527669][T10659] netlink: 'syz.1.5919': attribute type 39 has an invalid length. [ 2808.641330][T10665] Invalid source name [ 2808.645410][T10665] UBIFS error (pid: 10665): cannot open "./file0", error -22 [ 2808.677031][T10665] binder: 10660:10665 ioctl 40046210 0 returned -14 [ 2808.705892][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5918'. [ 2809.003312][T10665] team0: Port device team_slave_1 removed [ 2810.204739][T10678] syz.4.5921: attempt to access beyond end of device [ 2810.204739][T10678] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2810.465804][T10637] [U]  [ 2812.789715][ T30] audit: type=1400 audit(2000001424.690:2220): avc: denied { connect } for pid=10715 comm="syz.0.5936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2813.462972][T10721] macsec1: entered promiscuous mode [ 2813.468268][T10721] bridge0: entered promiscuous mode [ 2813.476211][T10721] bridge0: port 1(macsec1) entered blocking state [ 2813.489826][T10721] bridge0: port 1(macsec1) entered disabled state [ 2813.501438][T10721] macsec1: entered allmulticast mode [ 2814.171927][T10721] macsec1: left allmulticast mode [ 2814.323185][T10721] bridge0: left promiscuous mode [ 2815.251272][T10744] wg1 speed is unknown, defaulting to 1000 [ 2815.258431][T10744] lo speed is unknown, defaulting to 1000 [ 2815.265085][T10744] lo speed is unknown, defaulting to 1000 [ 2815.271582][T10744] lo speed is unknown, defaulting to 1000 [ 2816.654883][T10800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5934'. [ 2817.095177][T10808] overlayfs: failed to resolve './file0': -2 [ 2817.112852][T10808] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 2817.125126][T10808] tmpfs: Unknown parameter 'qu_inode_hardlimit' [ 2817.133477][ T30] audit: type=1400 audit(2000001429.040:2221): avc: denied { relabelto } for pid=10804 comm="syz.1.5935" name="bus" dev="tmpfs" ino=7119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:mouse_device_t:s0" [ 2817.614431][ T30] audit: type=1400 audit(2000001429.040:2222): avc: denied { associate } for pid=10804 comm="syz.1.5935" name="bus" dev="tmpfs" ino=7119 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:mouse_device_t:s0" [ 2817.750691][T10819] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2819.549614][ T30] audit: type=1326 audit(2000001431.380:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10835 comm="syz.2.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426198ebe9 code=0x7ffc0000 [ 2819.632869][ T30] audit: type=1326 audit(2000001431.380:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10835 comm="syz.2.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f426198ebe9 code=0x7ffc0000 [ 2819.865597][T10851] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5944'. [ 2819.923545][T10851] netem: invalid attributes len -4 [ 2819.993765][T10851] netem: change failed [ 2820.017063][ T30] audit: type=1326 audit(2000001431.380:2225): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10835 comm="syz.2.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426198ebe9 code=0x7ffc0000 [ 2820.138526][ T30] audit: type=1326 audit(2000001431.380:2226): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10835 comm="syz.2.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f426198ebe9 code=0x7ffc0000 [ 2820.630058][ T30] audit: type=1326 audit(2000001431.390:2227): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10835 comm="syz.2.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426198ebe9 code=0x7ffc0000 [ 2821.061638][T10863] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5944'. [ 2821.094435][ T30] audit: type=1326 audit(2000001431.390:2228): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10835 comm="syz.2.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426198ebe9 code=0x7ffc0000 [ 2821.263225][T10872] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10872 comm=syz.3.5948 [ 2821.407744][ T30] audit: type=1326 audit(2000001431.390:2229): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10835 comm="syz.2.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f426198ebe9 code=0x7ffc0000 [ 2821.943884][ T30] audit: type=1326 audit(2000001431.400:2230): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10848 comm="syz.2.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f42619c14a5 code=0x7ffc0000 [ 2822.070835][ T30] audit: type=1326 audit(2000001431.400:2231): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10835 comm="syz.2.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426198ebe9 code=0x7ffc0000 [ 2822.128113][ T30] audit: type=1326 audit(2000001431.400:2232): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10835 comm="syz.2.5943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426198ebe9 code=0x7ffc0000 [ 2822.242586][T10863] bond0 (unregistering): Released all slaves [ 2822.257795][T10885] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=10885 comm=syz.2.5951 [ 2822.497583][T10901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5951'. [ 2822.799519][T30320] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2822.949779][T30320] usb 3-1: Using ep0 maxpacket: 8 [ 2822.958845][T30320] usb 3-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config [ 2822.970951][T30320] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2823.025826][T30320] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2823.120337][T10899] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 2823.131151][T10899] bridge2: entered allmulticast mode [ 2823.139576][T10925] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2823.179431][T30320] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2823.208799][T30320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2823.525732][T30320] hub 3-1:1.0: bad descriptor, ignoring hub [ 2823.563288][T30320] hub 3-1:1.0: probe with driver hub failed with error -5 [ 2823.598627][T30320] cdc_wdm 3-1:1.0: skipping garbage [ 2823.617853][T30320] cdc_wdm 3-1:1.0: skipping garbage [ 2823.640995][T30320] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2823.677791][T10883] [U]  [ 2823.690272][T30320] usb 3-1: USB disconnect, device number 77 [ 2823.959248][T10964] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2827.486944][T10996] siw: device registration error -23 [ 2827.964976][T11003] fuse: Unknown parameter '0x0000000000000007' [ 2827.995728][T11005] 9pnet_fd: Insufficient options for proto=fd [ 2830.099739][T11025] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 2830.106300][T11025] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2830.557661][T11026] vhci_hcd: connection closed [ 2830.564589][T11025] vhci_hcd vhci_hcd.0: Device attached [ 2830.580536][T15841] vhci_hcd: stop threads [ 2830.686170][T15841] vhci_hcd: release socket [ 2830.727198][T11037] bridge10: the hash_elasticity option has been deprecated and is always 16 [ 2830.736221][T11037] bridge10: entered allmulticast mode [ 2830.859488][ T976] usb 33-1: new high-speed USB device number 11 using vhci_hcd [ 2830.929727][T15841] vhci_hcd: disconnect device [ 2834.385181][T11087] syz.0.5981: attempt to access beyond end of device [ 2834.385181][T11087] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2834.402502][T11087] syz.0.5981: attempt to access beyond end of device [ 2834.402502][T11087] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 2834.418758][T11087] Mount JFS Failure: -5 [ 2834.690197][T11092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2835.797955][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2835.903576][T11103] tipc: Enabled bearer , priority 10 [ 2835.919729][T11103] siw: device registration error -23 [ 2835.999919][ T976] vhci_hcd: vhci_device speed not set [ 2836.249540][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.826955][T11109] pimreg3: entered allmulticast mode [ 2836.855407][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 2836.855423][ T30] audit: type=1400 audit(2000001448.710:2263): avc: denied { bind } for pid=11105 comm="syz.1.5988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2836.903099][T11110] bond10: entered promiscuous mode [ 2836.908248][T11110] bond10: entered allmulticast mode [ 2836.913733][T11110] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2837.288959][T11154] wg1 speed is unknown, defaulting to 1000 [ 2837.301619][T11154] lo speed is unknown, defaulting to 1000 [ 2837.311839][T11154] lo speed is unknown, defaulting to 1000 [ 2837.322819][T11154] lo speed is unknown, defaulting to 1000 [ 2842.245573][T11213] loop6: detected capacity change from 0 to 2560 [ 2842.256011][T11213] buffer_io_error: 6 callbacks suppressed [ 2842.256040][T11213] Buffer I/O error on dev loop6, logical block 0, async page read [ 2842.270756][T11213] Buffer I/O error on dev loop6, logical block 0, async page read [ 2842.280437][T11213] Buffer I/O error on dev loop6, logical block 0, async page read [ 2842.485077][T11213] Buffer I/O error on dev loop6, logical block 0, async page read [ 2842.494982][T11213] Buffer I/O error on dev loop6, logical block 0, async page read [ 2842.504028][T11213] Buffer I/O error on dev loop6, logical block 0, async page read [ 2842.512854][T11213] Buffer I/O error on dev loop6, logical block 0, async page read [ 2842.521276][T11213] Buffer I/O error on dev loop6, logical block 0, async page read [ 2842.529435][T11213] ldm_validate_partition_table(): Disk read failed. [ 2842.536195][T11213] Buffer I/O error on dev loop6, logical block 0, async page read [ 2842.545094][T11213] Buffer I/O error on dev loop6, logical block 0, async page read [ 2842.554966][T11213] Dev loop6: unable to read RDB block 0 [ 2842.562945][T11213] loop6: unable to read partition table [ 2842.569760][T11213] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2842.877407][T11226] ksmbd: Unknown IPC event: 3, ignore. [ 2843.352748][T11238] bridge0: left promiscuous mode [ 2843.451848][T11238] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2843.575351][ T30] audit: type=1400 audit(2000001455.460:2264): avc: denied { setopt } for pid=11223 comm="syz.2.6001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2844.418603][T11247] 9pnet_fd: Insufficient options for proto=fd [ 2844.435571][T11247] siw: device registration error -23 [ 2845.117866][T11248] wg1 speed is unknown, defaulting to 1000 [ 2845.124978][T11248] lo speed is unknown, defaulting to 1000 [ 2845.131932][T11248] lo speed is unknown, defaulting to 1000 [ 2845.138806][T11248] lo speed is unknown, defaulting to 1000 [ 2848.241664][T11330] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6011'. [ 2848.267642][T11335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6010'. [ 2848.283560][ T30] audit: type=1400 audit(2000001460.200:2265): avc: denied { associate } for pid=11329 comm="syz.4.6011" name="cpu.stat" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2848.308936][T11332] netlink: 'syz.4.6011': attribute type 2 has an invalid length. [ 2848.316885][T11332] netlink: 1192 bytes leftover after parsing attributes in process `syz.4.6011'. [ 2849.448858][T11350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2850.149330][T11368] netlink: 'syz.2.6016': attribute type 10 has an invalid length. [ 2850.234681][T11368] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6016'. [ 2850.300234][T11368] 9pnet_fd: Insufficient options for proto=fd [ 2854.802995][T11450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2855.606855][T11457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2855.863381][T11468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2856.077502][T11471] syz.2.6031 (11471): drop_caches: 2 [ 2856.153348][T11471] syz.2.6031 (11471): drop_caches: 2 [ 2858.428903][T11506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2859.807815][T11515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6042'. [ 2860.610586][T11531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2861.109913][T11535] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=11535 comm=syz.3.6046 [ 2861.181721][T11538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6046'. [ 2861.261721][T11538] overlayfs: failed to clone upperpath [ 2861.849945][T11542] CIFS: VFS: Malformed UNC in devname [ 2862.476938][T11516] [U]  [ 2864.903492][T11581] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2864.913180][T11581] /dev/nullb0: Can't open blockdev [ 2865.747086][T11590] wg1 speed is unknown, defaulting to 1000 [ 2865.761274][T11590] lo speed is unknown, defaulting to 1000 [ 2865.774718][T11590] lo speed is unknown, defaulting to 1000 [ 2865.788347][T11590] lo speed is unknown, defaulting to 1000 [ 2867.429930][T11646] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=11646 comm=syz.1.6058 [ 2867.534096][T11649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6058'. [ 2867.587757][T11646] overlayfs: failed to clone upperpath [ 2867.767724][T11654] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2868.230408][T11665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6061'. [ 2868.334370][T11665] overlayfs: failed to clone upperpath [ 2869.367691][T11683] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2870.026178][T11694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6067'. [ 2870.140081][T11701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6068'. [ 2870.430147][ T976] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2870.589732][ T976] usb 3-1: Using ep0 maxpacket: 8 [ 2870.599621][ T976] usb 3-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config [ 2870.619398][ T976] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2870.628464][ T976] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2870.685841][T11716] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2870.815726][ T976] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2870.825594][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2870.894851][ T976] hub 3-1:1.0: bad descriptor, ignoring hub [ 2871.251372][T11686] [U]  [ 2871.259289][ T976] hub 3-1:1.0: probe with driver hub failed with error -5 [ 2871.388098][ T976] cdc_wdm 3-1:1.0: skipping garbage [ 2871.413334][ T976] cdc_wdm 3-1:1.0: skipping garbage [ 2871.423480][ T976] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2871.450412][T11731] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2871.490429][ T976] usb 3-1: USB disconnect, device number 78 [ 2872.004388][T11744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6074'. [ 2872.739520][T11759] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 2872.837026][T11759] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6076'. [ 2873.205626][T11763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6077'. [ 2873.456035][T11772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2873.912061][T11774] overlayfs: failed to clone upperpath [ 2875.052084][T11788] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6084'. [ 2875.087028][T11793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2875.177957][T11744] [U]  [ 2875.690824][T11804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6089'. [ 2876.624373][T11824] netlink: 'syz.1.6092': attribute type 3 has an invalid length. [ 2876.632261][T11824] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6092'. [ 2877.942063][T11838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2879.045065][T11851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6095'. [ 2880.310154][T11876] netlink: 'syz.1.6102': attribute type 1 has an invalid length. [ 2880.475097][T11876] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2881.149146][T11920] dlm: non-version read from control device 8224 [ 2881.156423][T11920] dlm: non-version read from control device 8192 [ 2881.163659][T11920] dlm: non-version read from control device 231 [ 2881.390152][T11929] CIFS: VFS: Malformed UNC in devname [ 2881.647202][T11931] CIFS: Unable to determine destination address [ 2882.370521][T11939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2884.269180][ T30] audit: type=1400 audit(2000001496.180:2266): avc: denied { listen } for pid=11959 comm="syz.2.6112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2884.318157][T11965] CIFS: VFS: Malformed UNC in devname [ 2886.690720][T12006] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2887.728842][ T30] audit: type=1400 audit(2000001499.640:2267): avc: denied { relabelfrom } for pid=12022 comm="syz.4.6118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2887.778141][T12024] comedi comedi1: comedi_config --init_data is deprecated [ 2888.407022][ T30] audit: type=1400 audit(2000001499.640:2268): avc: denied { relabelto } for pid=12022 comm="syz.4.6118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2888.431498][ T30] audit: type=1400 audit(2000001499.690:2269): avc: denied { getopt } for pid=12022 comm="syz.4.6118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2890.372202][T12067] netlink: 'syz.2.6122': attribute type 1 has an invalid length. [ 2890.431976][T12067] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2890.641901][T12069] vlan0: entered allmulticast mode [ 2890.877365][T12069] veth1: entered allmulticast mode [ 2890.884775][T12069] bond2: (slave vlan0): Opening slave failed [ 2891.022290][ T30] audit: type=1400 audit(2000001502.940:2270): avc: denied { execheap } for pid=12053 comm="syz.0.6123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2893.277874][T12152] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2893.277874][T12152] program syz.2.6134 not setting count and/or reply_len properly [ 2893.902948][T12152] 9pnet: Could not find request transport: fE [ 2894.998120][T12169] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=12169 comm=syz.3.6137 [ 2895.548566][T12169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6137'. [ 2895.612086][T12169] overlayfs: failed to clone upperpath [ 2895.703950][T12188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6139'. [ 2897.415518][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.421919][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2897.528639][T12227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6143'. [ 2898.265661][T12246] tipc: New replicast peer: 255.255.255.255 [ 2898.273182][T12246] tipc: Enabled bearer , priority 10 [ 2899.909730][T12233] [U]  [ 2901.188507][T12290] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=12290 comm=syz.3.6152 [ 2901.789095][T12297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6152'. [ 2901.830261][T12297] overlayfs: failed to clone upperpath [ 2902.879659][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6155'. [ 2902.888792][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6155'. [ 2904.254046][T12337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2958.673239][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2958.679626][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 3020.112940][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.119281][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 3053.389450][ T31] INFO: task kworker/0:2:92 blocked for more than 143 seconds. [ 3053.397039][ T31] Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 [ 3053.404402][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3053.413119][ T31] task:kworker/0:2 state:D stack:23112 pid:92 tgid:92 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 3053.425191][ T31] Workqueue: usb_hub_wq hub_event [ 3053.430265][ T31] Call Trace: [ 3053.433534][ T31] [ 3053.436446][ T31] __schedule+0x1190/0x5de0 [ 3053.441016][ T31] ? __pfx___schedule+0x10/0x10 [ 3053.445863][ T31] ? find_held_lock+0x2b/0x80 [ 3053.450657][ T31] ? schedule+0x2d7/0x3a0 [ 3053.454985][ T31] schedule+0xe7/0x3a0 [ 3053.459035][ T31] usb_kill_urb+0x253/0x320 [ 3053.463594][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 3053.468629][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 3053.474846][ T31] ? lockdep_init_map_type+0x10/0x280 [ 3053.480248][ T31] usb_start_wait_urb+0x250/0x4b0 [ 3053.485256][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 3053.490862][ T31] ? __asan_memset+0x23/0x50 [ 3053.495466][ T31] usb_control_msg+0x326/0x4a0 [ 3053.500282][ T31] ? __pfx_usb_control_msg+0x10/0x10 [ 3053.505578][ T31] get_bMaxPacketSize0.constprop.0+0xd0/0x1f0 [ 3053.511708][ T31] hub_port_init+0x690/0x3a70 [ 3053.516381][ T31] hub_event+0x2ce1/0x4fe0 [ 3053.520849][ T31] ? __pfx_hub_event+0x10/0x10 [ 3053.525600][ T31] ? __free_object+0x3c0/0x410 [ 3053.530411][ T31] ? rcu_is_watching+0x12/0xc0 [ 3053.535180][ T31] process_one_work+0x9cc/0x1b70 [ 3053.540167][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 3053.545451][ T31] ? __pfx_process_one_work+0x10/0x10 [ 3053.550987][ T31] ? assign_work+0x1a0/0x250 [ 3053.555618][ T31] worker_thread+0x6c8/0xf10 [ 3053.560563][ T31] ? __pfx_worker_thread+0x10/0x10 [ 3053.565673][ T31] kthread+0x3c5/0x780 [ 3053.569840][ T31] ? __pfx_kthread+0x10/0x10 [ 3053.574450][ T31] ? rcu_is_watching+0x12/0xc0 [ 3053.579459][ T31] ? __pfx_kthread+0x10/0x10 [ 3053.584057][ T31] ret_from_fork+0x5d4/0x6f0 [ 3053.588619][ T31] ? __pfx_kthread+0x10/0x10 [ 3053.593236][ T31] ret_from_fork_asm+0x1a/0x30 [ 3053.598000][ T31] [ 3053.601177][ T31] [ 3053.601177][ T31] Showing all locks held in the system: [ 3053.608895][ T31] 1 lock held by khungtaskd/31: [ 3053.613771][ T31] #0: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 3053.623675][ T31] 5 locks held by kworker/0:2/92: [ 3053.628684][ T31] #0: ffff888143ef5148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 3053.639514][ T31] #1: ffffc9000257fd10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 3053.650764][ T31] #2: ffff888145b48198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 3053.659721][ T31] #3: ffff888145b4b518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2981/0x4fe0 [ 3053.669680][ T31] #4: ffff8881457f7968 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x29aa/0x4fe0 [ 3053.679451][ T31] 2 locks held by getty/5601: [ 3053.684110][ T31] #0: ffff88814dd550a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 3053.693879][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 3053.704043][ T31] [ 3053.706346][ T31] ============================================= [ 3053.706346][ T31] [ 3053.714874][ T31] NMI backtrace for cpu 0 [ 3053.714889][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 3053.714907][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3053.714918][ T31] Call Trace: [ 3053.714924][ T31] [ 3053.714931][ T31] dump_stack_lvl+0x116/0x1f0 [ 3053.714960][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 3053.714980][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3053.715008][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 3053.715031][ T31] watchdog+0xf0e/0x1260 [ 3053.715056][ T31] ? __pfx_watchdog+0x10/0x10 [ 3053.715073][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 3053.715101][ T31] ? __kthread_parkme+0x19e/0x250 [ 3053.715128][ T31] ? __pfx_watchdog+0x10/0x10 [ 3053.715147][ T31] kthread+0x3c5/0x780 [ 3053.715164][ T31] ? __pfx_kthread+0x10/0x10 [ 3053.715183][ T31] ? rcu_is_watching+0x12/0xc0 [ 3053.715205][ T31] ? __pfx_kthread+0x10/0x10 [ 3053.715224][ T31] ret_from_fork+0x5d4/0x6f0 [ 3053.715240][ T31] ? __pfx_kthread+0x10/0x10 [ 3053.715258][ T31] ret_from_fork_asm+0x1a/0x30 [ 3053.715292][ T31] [ 3053.715299][ T31] Sending NMI from CPU 0 to CPUs 1: [ 3053.832680][ C1] NMI backtrace for cpu 1 [ 3053.832703][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 3053.832721][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3053.832729][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 3053.832753][ C1] Code: 3c 63 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 62 17 00 fb f4 4c 0d 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 3053.832767][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 3053.832779][ C1] RAX: 000000000e53dfa1 RBX: 0000000000000001 RCX: ffffffff8b92ac29 [ 3053.832789][ C1] RDX: 0000000000000000 RSI: ffffffff8de4e7b1 RDI: ffffffff8c161100 [ 3053.832798][ C1] RBP: ffffed1003c5d488 R08: 0000000000000001 R09: ffffed10170a6655 [ 3053.832806][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 3053.832815][ C1] R13: ffff88801e2ea440 R14: ffffffff90aaff90 R15: 0000000000000000 [ 3053.832824][ C1] FS: 0000000000000000(0000) GS:ffff8881247c4000(0000) knlGS:0000000000000000 [ 3053.832838][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3053.832848][ C1] CR2: 0000561faf4af168 CR3: 000000000e380000 CR4: 00000000003526f0 [ 3053.832857][ C1] Call Trace: [ 3053.832862][ C1] [ 3053.832867][ C1] default_idle+0x13/0x20 [ 3053.832881][ C1] default_idle_call+0x6d/0xb0 [ 3053.832894][ C1] do_idle+0x391/0x510 [ 3053.832912][ C1] ? __pfx_do_idle+0x10/0x10 [ 3053.832928][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 3053.832945][ C1] cpu_startup_entry+0x4f/0x60 [ 3053.832960][ C1] start_secondary+0x21d/0x2b0 [ 3053.832981][ C1] ? __pfx_start_secondary+0x10/0x10 [ 3053.833001][ C1] common_startup_64+0x13e/0x148 [ 3053.833022][ C1] [ 3053.833720][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 3054.011863][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 3054.023295][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3054.033326][ T31] Call Trace: [ 3054.036584][ T31] [ 3054.039495][ T31] dump_stack_lvl+0x3d/0x1f0 [ 3054.044074][ T31] vpanic+0x6e8/0x7a0 [ 3054.048042][ T31] ? __pfx_vpanic+0x10/0x10 [ 3054.052532][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3054.058502][ T31] panic+0xca/0xd0 [ 3054.062207][ T31] ? __pfx_panic+0x10/0x10 [ 3054.066607][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 3054.071966][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 3054.078101][ T31] ? watchdog+0xd78/0x1260 [ 3054.082498][ T31] ? watchdog+0xd6b/0x1260 [ 3054.086893][ T31] watchdog+0xd89/0x1260 [ 3054.091120][ T31] ? __pfx_watchdog+0x10/0x10 [ 3054.095783][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 3054.100982][ T31] ? __kthread_parkme+0x19e/0x250 [ 3054.106000][ T31] ? __pfx_watchdog+0x10/0x10 [ 3054.110667][ T31] kthread+0x3c5/0x780 [ 3054.114723][ T31] ? __pfx_kthread+0x10/0x10 [ 3054.119297][ T31] ? rcu_is_watching+0x12/0xc0 [ 3054.124045][ T31] ? __pfx_kthread+0x10/0x10 [ 3054.128616][ T31] ret_from_fork+0x5d4/0x6f0 [ 3054.133185][ T31] ? __pfx_kthread+0x10/0x10 [ 3054.137755][ T31] ret_from_fork_asm+0x1a/0x30 [ 3054.142510][ T31] [ 3054.145719][ T31] Kernel Offset: disabled [ 3054.150017][ T31] Rebooting in 86400 seconds..