last executing test programs: 1m43.773128248s ago: executing program 3 (id=1505): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000001400078008000840000000000800174000000004050005000a000000050001000700000005000400000000000900020073513d31000000000d0003006c6973743a736574"], 0x5c}}, 0x20008184) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) io_setup(0x3ff, &(0x7f0000000500)=0x0) (async, rerun: 64) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fsopen(&(0x7f0000000280)='devpts\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x0) (rerun: 64) 1m43.714248958s ago: executing program 3 (id=1506): socket$inet(0x2, 0x2, 0x0) (async) r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040800}, 0x8080) (async) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040800}, 0x8080) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b0000600", @ANYRES16=r2, @ANYBLOB="050004800000fedbdf250f00000008000300", @ANYRES32=r3, @ANYBLOB="48000e0080000100080211000001ffffffffffffd14417b30991000000000000000000006400840006020400050302de0b3c040103a10772060303030303037107010000fd01f00808000c006400000008000d0000000000300080007107ff01ff000001080000bd060802110000010503035c336512505050505050ffffffffffff0802110000000c001b80050001002c000000"], 0xb0}, 0x1, 0x0, 0x0, 0x40011}, 0x4040000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x140, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000540)={'nat\x00', 0x0, 0x3, 0xa6, [0x7, 0x80000000, 0x6, 0xfffffffffffffff7, 0x5, 0xffffffff], 0x1, &(0x7f0000000440)=[{}], &(0x7f0000000480)=""/166}, &(0x7f0000000600)=0x78) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r5 = socket$kcm(0x2, 0xa, 0x2) socket$igmp6(0xa, 0x3, 0x2) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) fsopen(&(0x7f00000003c0)='jfs\x00', 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000005c0)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000000200)={r10, @in6={{0xa, 0x4e21, 0x4, @remote, 0x8000}}}, &(0x7f00000002c0)=0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r11, 0x89f0, &(0x7f0000000300)={'bond0\x00', @ifru_names='veth0_vlan\x00'}) socket$netlink(0x10, 0x3, 0x0) (async) r12 = socket$netlink(0x10, 0x3, 0x0) writev(r12, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) writev(r12, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x1, 0x1, [@empty]}, 0x14) 1m43.512842165s ago: executing program 3 (id=1516): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000480)={0x8, 0x0, r3}) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='adfs\x00', 0x221000d, 0x0) syz_usb_connect(0x6, 0x2d, &(0x7f0000001580)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b800100000000090400fb015c291d00090509", @ANYBLOB="9dada49785dd621253b9a871235415b5b8aa4eca3da4dc210d056aba8841a4f733621c1cce193a70664b42d0df24ae22b6275fea1dcb0f4512a79130f64901a5f7666a62eadb0150462c2f6133b7c6cfd7efc19513012fcab28d8b4f2a1d153cc54922fe3188b9d26aaa8e1b8d93dac02ebd3bf6ea44fa61b61ee896b14db8c3e693be5bfacf0184dfac21694fa4cf2ce4d946337c203e1eb916776f466637880244d4ed3a3ff912672182ff095892b6d6b751d899d8a10f80ad46987fe1684c4708ca860a926ce19741ff831769f400e4ee63b91d8f7b36e9228a68", @ANYRES64=r2], 0x0) (async) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x4440) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r4, 0x40184152, &(0x7f0000001400)={0x0, &(0x7f00000013c0)=[&(0x7f0000000040)="924388ded80305ae0cb526cfc5898cb85ec3a703b28263202ac35c91a4114891e7bc4723fb11a957b5792db890b7479f5e2925a5f2f4d13ac0fe52", &(0x7f00000000c0)="1c3b165fa0aa638db6f1f5e5b9e8d9c1e2edf6d111", &(0x7f0000000100)="5204087e1deb345446b583bd83f3f63e660b9b142f422caac9384611506b602121f8f4ce1c663d539f5e747f96a1337c6dd470630feaa55dcca2327d061e69954964fb2e3923531742d23db2e2381383225561f258056aeb3982b3161292438b32dbe7f218885fb1ddb8e6f2fef51c508136cf4ca30133e911f915d9168af535af67e0a64b4ab99f5bc1d69ef114d6940cb5", &(0x7f00000001c0)="52c257ce713be2bbcffb4d6b9b35530ace2da1ade24cd3bdb100acd4d248706f8215a86de8be77ce4acf8b07bbb693cf132f15e3a91b1a215ece131ff10c380ffd69544b3e81767f4f297239b5dc676e221bd7d021cffa4ff400d90e70d1c5968cfe07897774c5a42eecf82e3758bc77e1dbc9d231c8b9a1ccb54bfb21a4a7f38414e87c7a152c61f064204d05b95e6589027829a37f1e950c262567be3d4e480f4c4fcfe9e3978eabba9be24b26b7c899a2058580a6b302577e19711f78992ddabef9480535fcc901e6599bb7ec1eed750da63c81e8f09e64836fb831dcd0c8c7b1aaffdcd1970067d5a14888ef25792f51820addaf8f99", &(0x7f00000002c0)="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", &(0x7f00000012c0)="e817c695f265a6c4bcd9954b2d99607ff39760a58071c2bc55c232aa5f2832a2b9154928c001e10d3018b223772285262e83952775ebc69d639df7386fa0a797478b08d2207fb44b59e980d0ed14e08b28adde7466b294edd90131432ee3adcb450fd91b058df6950b7acfe1d237c7e759f5043ce91e0179b758ffa6a521ee85758cfd13fe6788f274f7e6629d8e96cbbaab28cdc05c785b9debb0fd852088d9b774df257bf9060ea114b42c85e5b4043f9a28c1b61ebcafd85d58a5be797b80e334fe45ecb8beb38ef630658064dc4ecfca56b6baf3382df6113878270bdbc154eb0b"], 0x3}) (async) setsockopt$inet6_tcp_TLS_RX(r4, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "b54abcdee591a73b", "6003b68f9317117d3573a5806442a1674a130ade1307ef71dae3a4fc4ba8778b", "0ffc7a1f", "9a8742853253f080"}, 0x38) 1m42.993134666s ago: executing program 3 (id=1534): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000440)=@v3={0x3000000, [{0x6, 0x8}]}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x5f) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400, 0x1ad) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000180)={&(0x7f0000000500)={{@my=0x0, 0x8}, {@local, 0x3}, 0x400, "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"}, 0x418, 0x4}) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/86, 0x56) 1m42.763697708s ago: executing program 3 (id=1541): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@printk={@lx={0x18, 0x1, 0x0, 0xd0}, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x500}}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond0\x00'}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000006000/0x4000)=nil, 0x0, 0x3, 0xa0}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269bb, 0x8031, 0xffffffffffffffff, 0x0) (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/cgroup\x00') ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000480)=0x1) (async) ioctl$TCSETSF2(r3, 0x8910, 0x0) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0x21e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @dccp={{0x4f, 0x4, 0x1, 0x2c, 0x210, 0x67, 0x0, 0xf, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@ra={0x94, 0x4, 0x1}, @end, @lsrr={0x83, 0x7, 0x5c, [@multicast2]}, @cipso={0x86, 0x3b, 0x2, [{0x0, 0x9, "48a1bea8184b19"}, {0x6, 0xc, "212348a22634c8b4615c"}, {0x1, 0x10, "c495e6e800b4178dddea6953360f"}, {0x1, 0xb, "378f9577e89d160a39"}, {0x6, 0x5, "bedecf"}]}, @timestamp_addr={0x44, 0x4, 0x8f, 0x1, 0xa}, @generic={0x89, 0x8, "6f73acc19fe0"}, @timestamp_addr={0x44, 0x44, 0x82, 0x1, 0x8, [{@local}, {@multicast2, 0xa}, {@rand_addr=0x64010102, 0x7}, {@multicast1, 0x2}, {@rand_addr=0x64010102, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x572}, {@broadcast, 0x6}, {@local, 0x2}]}, @timestamp_prespec={0x44, 0x4c, 0xeb, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x21}, 0xbe30}, {@multicast2, 0x2}, {@private=0xa010100, 0xbef}, {@empty, 0x4}, {@multicast1, 0x1}, {@multicast1, 0x6}, {@multicast2, 0xfffffe9e}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x1}]}, @ssrr={0x89, 0x7, 0xd0, [@broadcast]}, @timestamp_prespec={0x44, 0x3c, 0xb, 0x3, 0x0, [{@local, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x6}, {@multicast1, 0x4}, {@private=0xa010101, 0x20}, {@rand_addr=0x64010100, 0x1}, {@private=0xa010102, 0x80000001}]}]}}, {{0x4e21, 0x4e20, 0x4, 0x1, 0x1, 0x0, 0x0, 0x5, 0x0, "7bb060", 0x8, "466315"}, "737e91d2dfd83ddd5b3d8d98faf79168851dda40129e6cf69eb9fb39dd63a62fd69129f41f71ae49871b317d3afd567827282515ca7a1345042f0835b475d515d772716637e22367b058784d29cd3c0a8a3d8d48fe8aa0a88dbdde47fd9743de2cdd17562cf4677cf39ddc8012b8febbf8ec211bd3032393dd16f9532960e7ccc8b3ad96359d13ea2783873f893824b72907a77e9a0816ae747b9d905eeab6428edb352e472d6148de3dba9fed1aa22571bd0134046daca51a985cfae1586d3ee88bd98a"}}}}}, 0x0) 1m42.762513215s ago: executing program 3 (id=1542): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32=r6, @ANYBLOB="0800c30074e800000800c4"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x409, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x463}]}}}]}, 0x3c}}, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r10}}) (async) splice(r9, 0x0, r8, 0x0, 0xffffffffffff8000, 0x0) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x44, r11, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x1f, 0xa8, @random="f85967de79d942cbc423e1987fa0af6065bbef6a18175387c4a804"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x40850) (async) close(0x4) (async) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r12, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x6}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x1}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0xe}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4000080) 1m27.723404588s ago: executing program 32 (id=1542): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32=r6, @ANYBLOB="0800c30074e800000800c4"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x409, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x463}]}}}]}, 0x3c}}, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r10}}) (async) splice(r9, 0x0, r8, 0x0, 0xffffffffffff8000, 0x0) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x44, r11, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x1f, 0xa8, @random="f85967de79d942cbc423e1987fa0af6065bbef6a18175387c4a804"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x40850) (async) close(0x4) (async) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r12, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x6}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x1}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0xe}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4000080) 1m21.763053123s ago: executing program 1 (id=1918): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010001f7f000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f00002400128009000100626f6e64000000001400028008000200", @ANYRES32=0x0, @ANYBLOB="0500010001000000"], 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1m21.761752315s ago: executing program 1 (id=1921): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="040000001000210400000000fedbdf01000000fe", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004800c00010017900000020000000c000100f04ae965cb0b00000c00010004000000002000000c000100001000000900000006000100020000000c0002000a0000000c000000280003800c00010008000000090000000c00010009000000030000000c000100090000000080000008000500", @ANYRES8=r1], 0xb8}}, 0x2) r2 = syz_io_uring_setup(0x1458, &(0x7f00000003c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) (async, rerun: 32) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634) (rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x86253000) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) (async, rerun: 64) io_uring_enter(r2, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) (async, rerun: 64) r6 = socket$kcm(0x21, 0x2, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r8 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10380300000100002800128008000100677470001c00028008000100", @ANYRES32=r8], 0x50}}, 0x24000840) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0xd, 0x8, 0xc82c}) (async, rerun: 64) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1000000000000000100100000e00000018000000000000001001000001"], 0x28}, 0x0) (async, rerun: 64) r9 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x4, 0x8, 0x40, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x13}, 0x20, 0x40, 0x3, 0x220b}}) (async, rerun: 64) r11 = syz_open_dev$loop(&(0x7f0000000000), 0x20007, 0xa402) (async, rerun: 64) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/oops_count', 0x8a883, 0x2) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000000080)={r12, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_SET_BLOCK_SIZE(r11, 0x4c09, 0x200) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@gettfilter={0x34, 0x2e, 0x4, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x3, 0x3}, {0xfff3, 0x7}, {0x0, 0x8}}, [{0x8, 0xb, 0x1200}, {0x8, 0xb, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040040}, 0x4011) (async) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ce\x00'}, 0x58) 1m21.663206906s ago: executing program 1 (id=1922): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f00000000c0)={{[0x6, 0x3, 0x7fff, 0x5]}, 0x0, 0x1, 0x1000, 0x0, &(0x7f0000000000)=[{{@align=0x40, {0x0, 0x2, 0x260, 0x7fff}}, 0x7, 0x0, ':}}\x00'}, {{@_ha_fsid={[0x4, 0x9]}, {0x7, 0xf800, 0x3, 0x101}}, 0xa, 0x0, '\x00'}, {{@_ha_fsid={[0x1, 0xc]}, {0x6, 0xff, 0x1cac, 0x5}}, 0x5, 0x0, '\xaa\xaa\xaa\xaa\xaa'}, {{@align=0xc, {0x800, 0x8eda, 0x4, 0x7}}, 0x80000000, 0x0, '\x00'}]}) syz_emit_ethernet(0x56, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x10000, 0x0, 0x0]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 1m21.662956158s ago: executing program 1 (id=1923): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x7, 0x7800, 0x5, 0x3, {{0x1b, 0x4, 0x1, 0x10, 0x6c, 0x67, 0x0, 0x9, 0x2f, 0x0, @local, @empty, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0x27, 0x3, 0x0, [{@remote, 0xe2db}, {@multicast1, 0x9}, {@remote, 0x6}, {@multicast2, 0x2}]}, @cipso={0x86, 0x1c, 0x3, [{0x1, 0x5, "7681e2"}, {0x0, 0x11, "7429d06c33ccf6f7ff9661f875d421"}]}, @end, @generic={0x83, 0x12, "bfb6a0b396bc6ab3ce5445405a425009"}, @noop]}}}}}) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000740)={@local, @loopback, r2}, 0xc) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) recvmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000000) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r4, 0x1, 0xe, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x27}, @multicast2, @empty}, 0xc) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 1m21.591117448s ago: executing program 1 (id=1924): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x8004, 0x0, @mcast1, 0x9}, 0x1c) (async) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m20.893946989s ago: executing program 1 (id=1925): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000340)={0xe, @sdr={0x35303553, 0x7fffffff}}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x15}, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x5, [{@remote, 0x4e20fffc}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@loopback}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0x800}, {@multicast2}, {@dev, 0x4}]}]}}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x10200, 0x80) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'batadv_slave_1\x00', 0x2000}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x0, 0x2, 0x0, 0x8}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d2, &(0x7f0000000100)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0xa40, 0x0) 1m20.826907696s ago: executing program 33 (id=1925): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000340)={0xe, @sdr={0x35303553, 0x7fffffff}}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x15}, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x5, [{@remote, 0x4e20fffc}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@loopback}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0x800}, {@multicast2}, {@dev, 0x4}]}]}}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x10200, 0x80) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'batadv_slave_1\x00', 0x2000}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x0, 0x2, 0x0, 0x8}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d2, &(0x7f0000000100)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0xa40, 0x0) 58.853297492s ago: executing program 5 (id=1926): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x0, 0x1}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x100000, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xa0000800, 0x0, 0x2000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x200000, 0x0, 0x7fc, 0x2, 0x0, 0x2000079, 0x800400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0xc35, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x7, 0x0, 0x8, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7fff], [0x10000002, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x3, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x80000800, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x100000, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) read$char_usb(r2, &(0x7f00000002c0)=""/134, 0x86) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz1\x00', {0xa284, 0x40, 0x8, 0x8000}, 0xc, [0x8, 0x1, 0x2, 0x7, 0xd, 0x6, 0x7, 0x8, 0x81, 0x8000, 0x7fff, 0x5, 0x2, 0x1ff, 0x4, 0x1, 0x3ea, 0x8, 0x6, 0xb35b, 0x6, 0x9, 0x2, 0x7, 0x7fff, 0x1, 0x2, 0x6, 0x7, 0x10000, 0x7, 0x3, 0x5, 0x4, 0x2, 0x4, 0x9, 0xfffffff9, 0x3, 0x8, 0x1, 0x6, 0x7, 0x80000001, 0xffffffff, 0x4, 0x0, 0x6, 0xb1e, 0x7, 0x7, 0xc0, 0x7ff, 0x2, 0xf821, 0x81, 0x1, 0x4, 0xd, 0x10000, 0x0, 0x7ff, 0x1, 0x14], [0x0, 0x0, 0x8, 0x9, 0x2, 0xee, 0x8, 0xe2, 0xb, 0x7, 0x3, 0x9, 0xe5, 0x1, 0x7, 0x5, 0xfff, 0xfa, 0x6, 0x947, 0x1, 0x8, 0x6, 0x1d3, 0x6, 0x7311, 0x2, 0x5, 0xb, 0x5, 0x80000000, 0x0, 0x8000, 0x8, 0xffffffaf, 0xa, 0x4, 0x7, 0xffffffff, 0x5, 0x4, 0x4, 0xffffffd9, 0x1000, 0xff, 0xa6f, 0x578, 0x2, 0x7fff, 0x7fff, 0x62c, 0x400, 0xff, 0x8, 0x6, 0xffff, 0x2, 0x9, 0x41, 0x5, 0x94, 0xc, 0x8644, 0x1], [0x4, 0xfffffffe, 0x7, 0x80, 0x3, 0x3, 0x0, 0x58, 0x6, 0xffffffc0, 0x6, 0x0, 0x5, 0x19, 0x7, 0x9, 0x45f7, 0x0, 0x10, 0x81, 0x0, 0xfff, 0x0, 0x2, 0x2, 0x3, 0x2, 0x4, 0x7, 0xf3b1, 0x7fffffff, 0x9, 0x1ff, 0x2, 0x0, 0x5, 0x6, 0x5, 0x9, 0x200, 0x5, 0x10000, 0x6, 0x1, 0x80, 0x6, 0x8, 0xfff, 0x8955, 0x7, 0x5, 0x4f, 0x7, 0x1, 0x0, 0x0, 0x8, 0x33, 0x882, 0xe8, 0x8, 0x7, 0xa, 0xa3f], [0x39, 0xd, 0x3, 0x2, 0x1ff, 0x1000, 0x7, 0x96, 0x60c6996, 0x2, 0xc995, 0xf, 0x3, 0x6, 0x4, 0x6, 0x2, 0xaf67, 0xf42, 0x10, 0x5, 0x8000, 0x8, 0x9, 0x416e, 0x9, 0x9, 0x69, 0x6, 0x4, 0xf, 0x9, 0x4e, 0x5, 0x180, 0x5, 0x52, 0xcf7, 0xd8f8, 0x0, 0x8, 0xfffffff9, 0x5, 0x8, 0x1, 0x6419, 0x2, 0xd0a, 0x7fff, 0x10001, 0x4, 0x2, 0x6, 0xfff, 0x200, 0x1, 0x101, 0x5, 0x4, 0x9, 0x7, 0x6, 0x2, 0x3]}, 0x45c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}]}, 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x125e, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 51.542572163s ago: executing program 5 (id=1926): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x0, 0x1}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x100000, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xa0000800, 0x0, 0x2000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x200000, 0x0, 0x7fc, 0x2, 0x0, 0x2000079, 0x800400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0xc35, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x7, 0x0, 0x8, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7fff], [0x10000002, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x3, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x80000800, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x100000, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) read$char_usb(r2, &(0x7f00000002c0)=""/134, 0x86) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz1\x00', {0xa284, 0x40, 0x8, 0x8000}, 0xc, [0x8, 0x1, 0x2, 0x7, 0xd, 0x6, 0x7, 0x8, 0x81, 0x8000, 0x7fff, 0x5, 0x2, 0x1ff, 0x4, 0x1, 0x3ea, 0x8, 0x6, 0xb35b, 0x6, 0x9, 0x2, 0x7, 0x7fff, 0x1, 0x2, 0x6, 0x7, 0x10000, 0x7, 0x3, 0x5, 0x4, 0x2, 0x4, 0x9, 0xfffffff9, 0x3, 0x8, 0x1, 0x6, 0x7, 0x80000001, 0xffffffff, 0x4, 0x0, 0x6, 0xb1e, 0x7, 0x7, 0xc0, 0x7ff, 0x2, 0xf821, 0x81, 0x1, 0x4, 0xd, 0x10000, 0x0, 0x7ff, 0x1, 0x14], [0x0, 0x0, 0x8, 0x9, 0x2, 0xee, 0x8, 0xe2, 0xb, 0x7, 0x3, 0x9, 0xe5, 0x1, 0x7, 0x5, 0xfff, 0xfa, 0x6, 0x947, 0x1, 0x8, 0x6, 0x1d3, 0x6, 0x7311, 0x2, 0x5, 0xb, 0x5, 0x80000000, 0x0, 0x8000, 0x8, 0xffffffaf, 0xa, 0x4, 0x7, 0xffffffff, 0x5, 0x4, 0x4, 0xffffffd9, 0x1000, 0xff, 0xa6f, 0x578, 0x2, 0x7fff, 0x7fff, 0x62c, 0x400, 0xff, 0x8, 0x6, 0xffff, 0x2, 0x9, 0x41, 0x5, 0x94, 0xc, 0x8644, 0x1], [0x4, 0xfffffffe, 0x7, 0x80, 0x3, 0x3, 0x0, 0x58, 0x6, 0xffffffc0, 0x6, 0x0, 0x5, 0x19, 0x7, 0x9, 0x45f7, 0x0, 0x10, 0x81, 0x0, 0xfff, 0x0, 0x2, 0x2, 0x3, 0x2, 0x4, 0x7, 0xf3b1, 0x7fffffff, 0x9, 0x1ff, 0x2, 0x0, 0x5, 0x6, 0x5, 0x9, 0x200, 0x5, 0x10000, 0x6, 0x1, 0x80, 0x6, 0x8, 0xfff, 0x8955, 0x7, 0x5, 0x4f, 0x7, 0x1, 0x0, 0x0, 0x8, 0x33, 0x882, 0xe8, 0x8, 0x7, 0xa, 0xa3f], [0x39, 0xd, 0x3, 0x2, 0x1ff, 0x1000, 0x7, 0x96, 0x60c6996, 0x2, 0xc995, 0xf, 0x3, 0x6, 0x4, 0x6, 0x2, 0xaf67, 0xf42, 0x10, 0x5, 0x8000, 0x8, 0x9, 0x416e, 0x9, 0x9, 0x69, 0x6, 0x4, 0xf, 0x9, 0x4e, 0x5, 0x180, 0x5, 0x52, 0xcf7, 0xd8f8, 0x0, 0x8, 0xfffffff9, 0x5, 0x8, 0x1, 0x6419, 0x2, 0xd0a, 0x7fff, 0x10001, 0x4, 0x2, 0x6, 0xfff, 0x200, 0x1, 0x101, 0x5, 0x4, 0x9, 0x7, 0x6, 0x2, 0x3]}, 0x45c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}]}, 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x125e, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 43.599722684s ago: executing program 4 (id=1797): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f0000000080)) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000005, 0x0, 0x1}]}) 38.083229196s ago: executing program 5 (id=1926): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x0, 0x1}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x100000, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xa0000800, 0x0, 0x2000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x200000, 0x0, 0x7fc, 0x2, 0x0, 0x2000079, 0x800400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0xc35, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x7, 0x0, 0x8, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7fff], [0x10000002, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x3, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x80000800, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x100000, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) read$char_usb(r2, &(0x7f00000002c0)=""/134, 0x86) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz1\x00', {0xa284, 0x40, 0x8, 0x8000}, 0xc, [0x8, 0x1, 0x2, 0x7, 0xd, 0x6, 0x7, 0x8, 0x81, 0x8000, 0x7fff, 0x5, 0x2, 0x1ff, 0x4, 0x1, 0x3ea, 0x8, 0x6, 0xb35b, 0x6, 0x9, 0x2, 0x7, 0x7fff, 0x1, 0x2, 0x6, 0x7, 0x10000, 0x7, 0x3, 0x5, 0x4, 0x2, 0x4, 0x9, 0xfffffff9, 0x3, 0x8, 0x1, 0x6, 0x7, 0x80000001, 0xffffffff, 0x4, 0x0, 0x6, 0xb1e, 0x7, 0x7, 0xc0, 0x7ff, 0x2, 0xf821, 0x81, 0x1, 0x4, 0xd, 0x10000, 0x0, 0x7ff, 0x1, 0x14], [0x0, 0x0, 0x8, 0x9, 0x2, 0xee, 0x8, 0xe2, 0xb, 0x7, 0x3, 0x9, 0xe5, 0x1, 0x7, 0x5, 0xfff, 0xfa, 0x6, 0x947, 0x1, 0x8, 0x6, 0x1d3, 0x6, 0x7311, 0x2, 0x5, 0xb, 0x5, 0x80000000, 0x0, 0x8000, 0x8, 0xffffffaf, 0xa, 0x4, 0x7, 0xffffffff, 0x5, 0x4, 0x4, 0xffffffd9, 0x1000, 0xff, 0xa6f, 0x578, 0x2, 0x7fff, 0x7fff, 0x62c, 0x400, 0xff, 0x8, 0x6, 0xffff, 0x2, 0x9, 0x41, 0x5, 0x94, 0xc, 0x8644, 0x1], [0x4, 0xfffffffe, 0x7, 0x80, 0x3, 0x3, 0x0, 0x58, 0x6, 0xffffffc0, 0x6, 0x0, 0x5, 0x19, 0x7, 0x9, 0x45f7, 0x0, 0x10, 0x81, 0x0, 0xfff, 0x0, 0x2, 0x2, 0x3, 0x2, 0x4, 0x7, 0xf3b1, 0x7fffffff, 0x9, 0x1ff, 0x2, 0x0, 0x5, 0x6, 0x5, 0x9, 0x200, 0x5, 0x10000, 0x6, 0x1, 0x80, 0x6, 0x8, 0xfff, 0x8955, 0x7, 0x5, 0x4f, 0x7, 0x1, 0x0, 0x0, 0x8, 0x33, 0x882, 0xe8, 0x8, 0x7, 0xa, 0xa3f], [0x39, 0xd, 0x3, 0x2, 0x1ff, 0x1000, 0x7, 0x96, 0x60c6996, 0x2, 0xc995, 0xf, 0x3, 0x6, 0x4, 0x6, 0x2, 0xaf67, 0xf42, 0x10, 0x5, 0x8000, 0x8, 0x9, 0x416e, 0x9, 0x9, 0x69, 0x6, 0x4, 0xf, 0x9, 0x4e, 0x5, 0x180, 0x5, 0x52, 0xcf7, 0xd8f8, 0x0, 0x8, 0xfffffff9, 0x5, 0x8, 0x1, 0x6419, 0x2, 0xd0a, 0x7fff, 0x10001, 0x4, 0x2, 0x6, 0xfff, 0x200, 0x1, 0x101, 0x5, 0x4, 0x9, 0x7, 0x6, 0x2, 0x3]}, 0x45c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}]}, 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x125e, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 31.324090099s ago: executing program 4 (id=1797): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f0000000080)) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000005, 0x0, 0x1}]}) 29.790612653s ago: executing program 5 (id=1926): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x0, 0x1}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x100000, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xa0000800, 0x0, 0x2000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x200000, 0x0, 0x7fc, 0x2, 0x0, 0x2000079, 0x800400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0xc35, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x7, 0x0, 0x8, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7fff], [0x10000002, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x3, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x80000800, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x100000, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) read$char_usb(r2, &(0x7f00000002c0)=""/134, 0x86) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz1\x00', {0xa284, 0x40, 0x8, 0x8000}, 0xc, [0x8, 0x1, 0x2, 0x7, 0xd, 0x6, 0x7, 0x8, 0x81, 0x8000, 0x7fff, 0x5, 0x2, 0x1ff, 0x4, 0x1, 0x3ea, 0x8, 0x6, 0xb35b, 0x6, 0x9, 0x2, 0x7, 0x7fff, 0x1, 0x2, 0x6, 0x7, 0x10000, 0x7, 0x3, 0x5, 0x4, 0x2, 0x4, 0x9, 0xfffffff9, 0x3, 0x8, 0x1, 0x6, 0x7, 0x80000001, 0xffffffff, 0x4, 0x0, 0x6, 0xb1e, 0x7, 0x7, 0xc0, 0x7ff, 0x2, 0xf821, 0x81, 0x1, 0x4, 0xd, 0x10000, 0x0, 0x7ff, 0x1, 0x14], [0x0, 0x0, 0x8, 0x9, 0x2, 0xee, 0x8, 0xe2, 0xb, 0x7, 0x3, 0x9, 0xe5, 0x1, 0x7, 0x5, 0xfff, 0xfa, 0x6, 0x947, 0x1, 0x8, 0x6, 0x1d3, 0x6, 0x7311, 0x2, 0x5, 0xb, 0x5, 0x80000000, 0x0, 0x8000, 0x8, 0xffffffaf, 0xa, 0x4, 0x7, 0xffffffff, 0x5, 0x4, 0x4, 0xffffffd9, 0x1000, 0xff, 0xa6f, 0x578, 0x2, 0x7fff, 0x7fff, 0x62c, 0x400, 0xff, 0x8, 0x6, 0xffff, 0x2, 0x9, 0x41, 0x5, 0x94, 0xc, 0x8644, 0x1], [0x4, 0xfffffffe, 0x7, 0x80, 0x3, 0x3, 0x0, 0x58, 0x6, 0xffffffc0, 0x6, 0x0, 0x5, 0x19, 0x7, 0x9, 0x45f7, 0x0, 0x10, 0x81, 0x0, 0xfff, 0x0, 0x2, 0x2, 0x3, 0x2, 0x4, 0x7, 0xf3b1, 0x7fffffff, 0x9, 0x1ff, 0x2, 0x0, 0x5, 0x6, 0x5, 0x9, 0x200, 0x5, 0x10000, 0x6, 0x1, 0x80, 0x6, 0x8, 0xfff, 0x8955, 0x7, 0x5, 0x4f, 0x7, 0x1, 0x0, 0x0, 0x8, 0x33, 0x882, 0xe8, 0x8, 0x7, 0xa, 0xa3f], [0x39, 0xd, 0x3, 0x2, 0x1ff, 0x1000, 0x7, 0x96, 0x60c6996, 0x2, 0xc995, 0xf, 0x3, 0x6, 0x4, 0x6, 0x2, 0xaf67, 0xf42, 0x10, 0x5, 0x8000, 0x8, 0x9, 0x416e, 0x9, 0x9, 0x69, 0x6, 0x4, 0xf, 0x9, 0x4e, 0x5, 0x180, 0x5, 0x52, 0xcf7, 0xd8f8, 0x0, 0x8, 0xfffffff9, 0x5, 0x8, 0x1, 0x6419, 0x2, 0xd0a, 0x7fff, 0x10001, 0x4, 0x2, 0x6, 0xfff, 0x200, 0x1, 0x101, 0x5, 0x4, 0x9, 0x7, 0x6, 0x2, 0x3]}, 0x45c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}]}, 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x125e, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23.910889197s ago: executing program 4 (id=1797): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f0000000080)) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000005, 0x0, 0x1}]}) 21.391960933s ago: executing program 5 (id=1926): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x0, 0x1}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x100000, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xa0000800, 0x0, 0x2000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x200000, 0x0, 0x7fc, 0x2, 0x0, 0x2000079, 0x800400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0xc35, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x7, 0x0, 0x8, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7fff], [0x10000002, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x3, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x80000800, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x100000, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) read$char_usb(r2, &(0x7f00000002c0)=""/134, 0x86) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz1\x00', {0xa284, 0x40, 0x8, 0x8000}, 0xc, [0x8, 0x1, 0x2, 0x7, 0xd, 0x6, 0x7, 0x8, 0x81, 0x8000, 0x7fff, 0x5, 0x2, 0x1ff, 0x4, 0x1, 0x3ea, 0x8, 0x6, 0xb35b, 0x6, 0x9, 0x2, 0x7, 0x7fff, 0x1, 0x2, 0x6, 0x7, 0x10000, 0x7, 0x3, 0x5, 0x4, 0x2, 0x4, 0x9, 0xfffffff9, 0x3, 0x8, 0x1, 0x6, 0x7, 0x80000001, 0xffffffff, 0x4, 0x0, 0x6, 0xb1e, 0x7, 0x7, 0xc0, 0x7ff, 0x2, 0xf821, 0x81, 0x1, 0x4, 0xd, 0x10000, 0x0, 0x7ff, 0x1, 0x14], [0x0, 0x0, 0x8, 0x9, 0x2, 0xee, 0x8, 0xe2, 0xb, 0x7, 0x3, 0x9, 0xe5, 0x1, 0x7, 0x5, 0xfff, 0xfa, 0x6, 0x947, 0x1, 0x8, 0x6, 0x1d3, 0x6, 0x7311, 0x2, 0x5, 0xb, 0x5, 0x80000000, 0x0, 0x8000, 0x8, 0xffffffaf, 0xa, 0x4, 0x7, 0xffffffff, 0x5, 0x4, 0x4, 0xffffffd9, 0x1000, 0xff, 0xa6f, 0x578, 0x2, 0x7fff, 0x7fff, 0x62c, 0x400, 0xff, 0x8, 0x6, 0xffff, 0x2, 0x9, 0x41, 0x5, 0x94, 0xc, 0x8644, 0x1], [0x4, 0xfffffffe, 0x7, 0x80, 0x3, 0x3, 0x0, 0x58, 0x6, 0xffffffc0, 0x6, 0x0, 0x5, 0x19, 0x7, 0x9, 0x45f7, 0x0, 0x10, 0x81, 0x0, 0xfff, 0x0, 0x2, 0x2, 0x3, 0x2, 0x4, 0x7, 0xf3b1, 0x7fffffff, 0x9, 0x1ff, 0x2, 0x0, 0x5, 0x6, 0x5, 0x9, 0x200, 0x5, 0x10000, 0x6, 0x1, 0x80, 0x6, 0x8, 0xfff, 0x8955, 0x7, 0x5, 0x4f, 0x7, 0x1, 0x0, 0x0, 0x8, 0x33, 0x882, 0xe8, 0x8, 0x7, 0xa, 0xa3f], [0x39, 0xd, 0x3, 0x2, 0x1ff, 0x1000, 0x7, 0x96, 0x60c6996, 0x2, 0xc995, 0xf, 0x3, 0x6, 0x4, 0x6, 0x2, 0xaf67, 0xf42, 0x10, 0x5, 0x8000, 0x8, 0x9, 0x416e, 0x9, 0x9, 0x69, 0x6, 0x4, 0xf, 0x9, 0x4e, 0x5, 0x180, 0x5, 0x52, 0xcf7, 0xd8f8, 0x0, 0x8, 0xfffffff9, 0x5, 0x8, 0x1, 0x6419, 0x2, 0xd0a, 0x7fff, 0x10001, 0x4, 0x2, 0x6, 0xfff, 0x200, 0x1, 0x101, 0x5, 0x4, 0x9, 0x7, 0x6, 0x2, 0x3]}, 0x45c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}]}, 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x125e, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 15.639413569s ago: executing program 4 (id=1797): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f0000000080)) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000005, 0x0, 0x1}]}) 13.841359082s ago: executing program 5 (id=1926): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x0, 0x1}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x100000, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xa0000800, 0x0, 0x2000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x200000, 0x0, 0x7fc, 0x2, 0x0, 0x2000079, 0x800400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0xc35, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x7, 0x0, 0x8, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7fff], [0x10000002, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x3, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x80000800, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x100000, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) read$char_usb(r2, &(0x7f00000002c0)=""/134, 0x86) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz1\x00', {0xa284, 0x40, 0x8, 0x8000}, 0xc, [0x8, 0x1, 0x2, 0x7, 0xd, 0x6, 0x7, 0x8, 0x81, 0x8000, 0x7fff, 0x5, 0x2, 0x1ff, 0x4, 0x1, 0x3ea, 0x8, 0x6, 0xb35b, 0x6, 0x9, 0x2, 0x7, 0x7fff, 0x1, 0x2, 0x6, 0x7, 0x10000, 0x7, 0x3, 0x5, 0x4, 0x2, 0x4, 0x9, 0xfffffff9, 0x3, 0x8, 0x1, 0x6, 0x7, 0x80000001, 0xffffffff, 0x4, 0x0, 0x6, 0xb1e, 0x7, 0x7, 0xc0, 0x7ff, 0x2, 0xf821, 0x81, 0x1, 0x4, 0xd, 0x10000, 0x0, 0x7ff, 0x1, 0x14], [0x0, 0x0, 0x8, 0x9, 0x2, 0xee, 0x8, 0xe2, 0xb, 0x7, 0x3, 0x9, 0xe5, 0x1, 0x7, 0x5, 0xfff, 0xfa, 0x6, 0x947, 0x1, 0x8, 0x6, 0x1d3, 0x6, 0x7311, 0x2, 0x5, 0xb, 0x5, 0x80000000, 0x0, 0x8000, 0x8, 0xffffffaf, 0xa, 0x4, 0x7, 0xffffffff, 0x5, 0x4, 0x4, 0xffffffd9, 0x1000, 0xff, 0xa6f, 0x578, 0x2, 0x7fff, 0x7fff, 0x62c, 0x400, 0xff, 0x8, 0x6, 0xffff, 0x2, 0x9, 0x41, 0x5, 0x94, 0xc, 0x8644, 0x1], [0x4, 0xfffffffe, 0x7, 0x80, 0x3, 0x3, 0x0, 0x58, 0x6, 0xffffffc0, 0x6, 0x0, 0x5, 0x19, 0x7, 0x9, 0x45f7, 0x0, 0x10, 0x81, 0x0, 0xfff, 0x0, 0x2, 0x2, 0x3, 0x2, 0x4, 0x7, 0xf3b1, 0x7fffffff, 0x9, 0x1ff, 0x2, 0x0, 0x5, 0x6, 0x5, 0x9, 0x200, 0x5, 0x10000, 0x6, 0x1, 0x80, 0x6, 0x8, 0xfff, 0x8955, 0x7, 0x5, 0x4f, 0x7, 0x1, 0x0, 0x0, 0x8, 0x33, 0x882, 0xe8, 0x8, 0x7, 0xa, 0xa3f], [0x39, 0xd, 0x3, 0x2, 0x1ff, 0x1000, 0x7, 0x96, 0x60c6996, 0x2, 0xc995, 0xf, 0x3, 0x6, 0x4, 0x6, 0x2, 0xaf67, 0xf42, 0x10, 0x5, 0x8000, 0x8, 0x9, 0x416e, 0x9, 0x9, 0x69, 0x6, 0x4, 0xf, 0x9, 0x4e, 0x5, 0x180, 0x5, 0x52, 0xcf7, 0xd8f8, 0x0, 0x8, 0xfffffff9, 0x5, 0x8, 0x1, 0x6419, 0x2, 0xd0a, 0x7fff, 0x10001, 0x4, 0x2, 0x6, 0xfff, 0x200, 0x1, 0x101, 0x5, 0x4, 0x9, 0x7, 0x6, 0x2, 0x3]}, 0x45c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}]}, 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x125e, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 7.711156518s ago: executing program 4 (id=1797): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f0000000080)) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000005, 0x0, 0x1}]}) 6.164571484s ago: executing program 4 (id=1797): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f0000000080)) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000005, 0x0, 0x1}]}) 1.181912584s ago: executing program 0 (id=2850): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/127, 0x7f}], 0x1}, 0x3}], 0x1, 0x40000021, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r3 = syz_open_dev$cec(&(0x7f00000001c0), 0x0, 0x2400) ioctl$CEC_DQEVENT(r3, 0xc0506107, &(0x7f0000000280)) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000080)={0xf, r0, 0x4, {0x5, 0xde2}, 0x2}, 0x1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x18, &(0x7f0000000300)=@raw=[@exit, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @generic={0x9, 0x9, 0x9, 0x3, 0x5}, @generic={0xc, 0x2, 0x3, 0x5, 0x92000}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xd}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) (async) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x42, 0x0, 0x0, 0x3c}}}}}}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001f40), r4) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0xc) (async, rerun: 32) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x44, r6, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 1.179405496s ago: executing program 0 (id=2851): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r0 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b540007600", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000000ffff000000000800080009030000"], 0x34}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b540007600", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000000ffff000000000800080009030000"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) (async) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x1, 0x1, &(0x7f0000000240)=""/119, &(0x7f0000000340)=""/201, &(0x7f00000005c0)=""/194, 0xf7ff1000}) syz_usb_disconnect(r4) syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[], 0x0) (async) r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r6 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r6, 0xc0844123, &(0x7f0000002180)) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r7, 0x0, 0x0) 242.744475ms ago: executing program 0 (id=2853): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191540d2b06728e684bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000340)='memory.pressure\x00', 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000840)="66b98303000066b80000000066ba008000000f300fc76192660f3882a745a6baf80c66b88ce2858066efbafc0c66ed660f388227de650f66b9800000c00f326635010000000f300fd7cf67f20fc272882abaf80c66b8587e368466efbafc0c66ed", 0x61}], 0x1, 0x0, &(0x7f0000000280)=[@dstype3={0x7, 0x5}, @dstype0={0x6, 0x7}], 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000010c0), r5) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="050327bd7000fcdbdf25040000001ed3e54f533e705fa63723b3b2698c99c5f0"], 0x14}, 0x1, 0x0, 0x0, 0x40008c0}, 0x80) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r7, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "53bb467d04f14562c5f463273ef4a720564f485a"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @private=0xa010100}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001ffffc000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003001c0012800b00010067726574617000000c00028005000900fb000000"], 0x3c}}, 0x804) r9 = socket$kcm(0x10, 0x5, 0x0) r10 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r11 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) ioctl$SIOCGSTAMPNS(r11, 0x8907, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000000)={'pimreg0\x00', 0x1000}) accept(r10, 0x0, 0x0) sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e000000115e000000000000004cb92e0a483137df00000069bd6efb2502eaf60d000300020400bf052005001201789037f9a36f9be72b4dbf953bf50d4001bd41559a1da2080a5884a4e940fca4aae867115a16cc43a5bf33a5aecfd0aa3f7edeb42fd19932fe9054fe7352bf3aea9e455d83c864218ad12f1bed7981462a7c29caeb31f05fb5212b4683a1d6d11fa22e35338515df45026a005ca4a9ddc5fda418faba669590f3825af073670c618edfb211e98b38e05699560df0a425be5158d7e331d4b8c90270ad03168fd6409f7e0afe69b79d5f9116afdf37723a9b6b898d4613bcdcf57d2c29e5963c56b9c30b3a", 0xf2}], 0x1}, 0x48010) 242.507191ms ago: executing program 2 (id=2854): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000180)) lsetxattr$security_selinux(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000040), &(0x7f0000000100)='/sbin/dhclient\x00', 0xf, 0x2) landlock_restrict_self(r1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 133.398881ms ago: executing program 2 (id=2855): r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000280), 0x141040, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000002c0)=0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b500, 0x0) ioctl$XFS_IOC_FSGROWFSDATA(r1, 0x4010586e, &(0x7f0000000040)={0x7, 0x1c}) mount(&(0x7f0000000300)=@sg0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='jfs\x00', 0x0, &(0x7f0000000000)='usrquota') 133.010899ms ago: executing program 2 (id=2856): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_newnexthop={0x40, 0x68, 0x20, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x3, 0x0, 0x1}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x3ddb}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUP_TYPE={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007c2000/0x4000)=nil, &(0x7f00009dc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000726000/0x13000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008890) listen(r0, 0x4) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000200)={@remote, @broadcast}, &(0x7f0000000240)=0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020026bd7000fbdbdf250100000008000200070000005400018014000400fe8000000000000000000000000000aa060005004e2300000500020008000000060001000a000000060001000200000014000400fc000000000000000000000000000001060005004e2300000800040007000000"], 0x78}, 0x1, 0x0, 0x0, 0x20000840}, 0x44014) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) 52.77322ms ago: executing program 2 (id=2857): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x16) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000080)={0x10203, 0x0, &(0x7f0000ffe000/0x2000)=nil}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) (async) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r5, 0x1, 0x14, &(0x7f0000000140)=0x4, 0x4) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r4) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x12, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000005000000000000000800000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b70300000000000800000009010000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000253b0001fcffffffbf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000540)='syzkaller\x00', 0x6, 0x5b, &(0x7f0000000580)=""/91, 0x41000, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000600)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0x2, 0xeef, 0xef}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000680)=[r3], &(0x7f00000006c0)=[{0x3, 0x5, 0x4, 0x9}, {0x0, 0x3, 0xd, 0xc}], 0x10, 0x9}, 0x94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xc, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000300000000000000610a000018217700", @ANYRES32, @ANYRESHEX=0x0], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x73, &(0x7f0000000340)=""/115, 0x41000, 0x29, '\x00', 0x0, @fallback=0x2d, r6, 0x8, &(0x7f0000000400)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0xb7, 0x101}, 0x10, r8, r9, 0x5, &(0x7f0000000880)=[r10], &(0x7f00000008c0)=[{0x2, 0x2, 0xb, 0xc}, {0x4, 0x3, 0x2, 0x9}, {0x0, 0x3, 0x5, 0x6}, {0x3, 0x4, 0x5, 0x4}, {0x5, 0x1, 0x9, 0xc}]}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x44b}, 0x38) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r12) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) socket$netlink(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, 0x0) 52.191331ms ago: executing program 0 (id=2858): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0000102, 0x0, 0x6}]}) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) (async) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x7fff, 0x41, &(0x7f0000000980)='$', 0x1, 0x0, 0x9, 0xffffffff, 0x5, 0x6, 0x0}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, r5, 0x95c0b000) close(r5) (async) r6 = add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r7, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) (async) setsockopt$inet_int(r7, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) (async) bind$inet(r7, &(0x7f00000003c0)={0x2, 0x4e20, @multicast2}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}, 0x0) (async) add_key$keyring(&(0x7f0000000440), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, r6) (async) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="140100002f00010000000000ffdbdf25010100800c00220000000000000000001400010001"], 0x114}], 0x1}, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r9, &(0x7f0000004340)={0x2020}, 0x2020) (async) mmap$binder(&(0x7f0000f1c000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xfff) (async) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000400)={0x54, 0x0, &(0x7f0000000500)=[@clear_death={0x400c630f, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x1, 0x2, 0x1a}, @flat=@handle={0x73682a85, 0x100, 0x2}, @fda={0x66646185, 0xa, 0x2, 0x33}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}}], 0x84, 0x0, &(0x7f0000000580)="58560b5bcb90409a51278283387768e444789fc17ce9b5ae33e1ec2ce2da6e9cdc5988c9092ed53688af1c2e0ecb986b1ca07a67a3ecd29fd01abc6a806da6b2ca1a6d5853ded98c8ec46afd6a86317c0149b12456fbc61ae61b7d78ae3282e5a6eaed12cf11f95175f2ca243f84e007952377674b8a8712f3f09e525a578916a69140d9"}) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0xffffffffffffffe1, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000040)='nfs4\x00', 0x0, &(0x7f00000000c0)='rdma') 52.080167ms ago: executing program 2 (id=2859): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x440202, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0x8ad) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fe0000010000000008000100000001"], 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) 1.61892ms ago: executing program 2 (id=2860): r0 = socket$kcm(0x29, 0x7, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6}, [@tail_call, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x4, 0x3, 0x7fff, 0xd}, 0x10, 0x1ab65, 0xffffffffffffffff, 0x3, &(0x7f0000000100)=[0x1, 0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000140)=[{0x0, 0x4, 0x7, 0xc}, {0x2, 0x4, 0xd, 0x8}, {0x2, 0x2, 0xb, 0x4}], 0x10, 0x1}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000240)={r1, r2}) getsockname(r1, &(0x7f0000000280)=@nfc, &(0x7f0000000300)=0x80) r3 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x151000) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000380)=""/160) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000440), 0x2840c0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000480)={@private, @initdev, 0x0}, &(0x7f00000004c0)=0xc) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7a, 0x7a, 0x7, [@datasec={0xa, 0x8, 0x0, 0xf, 0x2, [{0x2, 0x27f, 0xf}, {0x2, 0x7fffffff, 0xfffff037}, {0x2, 0x10001, 0x800}, {0x4, 0xf1, 0x8001}, {0x4, 0x4, 0x7}, {0x5, 0x0, 0x800}, {0x3, 0x81, 0x8000}, {0x2, 0x7, 0x8}], ']='}, @float={0x6, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x0, 0x0, 0x30, 0x61, 0x30]}}, &(0x7f00000005c0)=""/72, 0x9b, 0x48, 0x1, 0x83}, 0x28) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x2, '\x00', r5, r6, 0x1, 0x3, 0x1}, 0x50) syz_genetlink_get_family_id$team(&(0x7f0000000700), r4) write$cgroup_subtree(r4, &(0x7f0000000740)={[{0x2d, 'io'}, {0x2b, 'cpuacct'}, {0x2d, 'devices'}, {0x2d, 'cpuacct'}, {0x2d, 'memory'}]}, 0x27) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000780)={@remote, @multicast2}, &(0x7f00000007c0)=0xc) syz_genetlink_get_family_id$team(&(0x7f0000000800), r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a40)=0xffffffffffffffff, 0x4) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b40)=@o_path={&(0x7f0000000b00)='./file0\x00', 0x0, 0x4010, r7}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x18, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x82b, 0x0, 0x0, 0x0, 0x303dabb0}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000009c0)='GPL\x00', 0xffff, 0x0, 0x0, 0x40f00, 0x45, '\x00', r9, 0x25, r10, 0x8, &(0x7f0000000a80)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000ac0)={0x4, 0xa, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000b80)=[r4, r7, r11, r1, r7, r4, r4, r4], &(0x7f0000000bc0)=[{0x4, 0x1, 0x8, 0x7}, {0x4, 0x2, 0x8, 0xd}, {0x3, 0x3, 0x7, 0x1}, {0x0, 0x2, 0x1, 0x4}, {0x0, 0x5, 0xd, 0x5}, {0x5, 0x2, 0x8, 0x2}, {0x4, 0x4, 0x6, 0x5}, {0x1, 0x2, 0x2, 0xb}, {0x1, 0x3, 0x2, 0x4}], 0x10, 0x80000}, 0x94) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000d40)={0x401, {{0x2, 0x4e24, @rand_addr=0x64010100}}}, 0x88) r12 = socket$netlink(0x10, 0x3, 0x14) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001f00)={r7, &(0x7f0000000e00)="f09effeccf5f51ed2a7d36b8de5325ae8843ab53f4f02a47378643698f865eb09d58663eaed8a21effff638e5b54d2947642ca38e10f94e72a171611a6d580cc490dfcecf14dd731ef02fd4601d97831a9c536f6dbb001cb48bd5ed86f662ee6f09fc5910e5a0ceeff61dc0a37ef24bfc3ce7c9d9e3c2d90c77f3934c554af632054c4bba9a85c4e4cc42bfed02192b8e666d142f99b95c3a114bf0a0765e2d179f2559738d859d86f385d4c4f694e58c2f379a8d5e51812f0cfef7cdc612d9b38054ee4323372665d5b2e8a332637d6e1545c5f8791a27a", &(0x7f0000000f00)=""/4096}, 0x20) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001f40)=0x0) sched_setscheduler(r13, 0x3, &(0x7f0000001f80)=0x7) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000001fc0)={0xffffffffffffffff, 0x4, 0x3, 0xffffffff, @vifc_lcl_addr=@multicast1, @local}, 0x10) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000002000), 0x4) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002080), r12) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000002400)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000023c0)={&(0x7f00000020c0)={0x2c8, r14, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xcf9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb59}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x908}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x63}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_BEARER={0x124, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @local, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x98b}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x10, @loopback, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6gre0\x00'}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x10, @loopback, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dvmrp0\x00'}}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7b1f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd51c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x402692ab}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x43f7c2e}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$EVIOCGBITSND(r4, 0x80404532, &(0x7f0000002440)=""/79) 381.471µs ago: executing program 0 (id=2861): r0 = syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) 0s ago: executing program 0 (id=2862): clock_gettime(0x6, &(0x7f0000006980)={0x0, 0x0}) clock_settime(0x0, &(0x7f00000069c0)={r0, r1+10000000}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3d}, 0x200, 0x0, 0x4, 0xc, 0x0, 0x4}, 0x20) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'virt_wifi0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r3}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) unshare(0x22020400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = syz_usb_connect$cdc_ncm(0x3, 0x76, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000200600fe8000000000000000000000000000aafe8000000000000000000000000000aa80004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80080000"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000980)=0x14) r8 = syz_usb_connect$cdc_ncm(0x0, 0xdc, &(0x7f0000000280)=ANY=[@ANYBLOB="12011003020000ff2505a1a44000010203010902ca00020108e00c0904000001020d00000800000001a95fb105240000000d240f0106000000020004000406241a03000108240705030001010c241b7039ff0709060200024b24130aed689dd630b2af29b6a76e1b8c95ed4e4a33df0df804087c76cc0268e4c317bdefd673b25fa8d16a12653e5a35bbb4d14f09bd39499761305678c8b4f45294d75d4eda6914203d0c240702060002000300a10d0905810308000640000904010000020d00000904010102020d00000905820200060b0852090503024000050004"], &(0x7f00000007c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x0, 0x1, 0x2, 0xff, 0x81}, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00'], 0x6, [{0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="7703bb11f991bb7d808cae58b262264ba34025cf91ece354673429f5f50fea53ecccbd241424726c8547bb4a9e3bab458beb830fc8a3058af9924a1b0da89279523e7b0c82ecd7acd2774793829ca154972e9830894da9e3f3a76c88080212a27a8c641006d3cc7079387e10b82976c22fe6f3f3946211cb2609056dc492e460f7c2843f506d2183c74e76d0d52bbf831041302e4d78e9cdffd5a799ecf0b0fd1a1b114b2f703b5cbe2228518aab0ca7e4d043fa6b74e346febe4db366a48dba1f7423128eafbe77810229eb1f42a0049ec41ce88bf3fca4cfae458f583969df79f3154e113b6a29fd6904b89591d8ffe4"]}, {0xcc, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xc09}}, {0xd6, &(0x7f00000006c0)=ANY=[@ANYBLOB="d603692bbc6497b19873164aec5e13a813463914e5b574a3fcfd8036332db49e3a7e002985b7a7ed3066b3e418368af5ff667a32210dbb3bc8a5384f79130a0a9eee2d59ac2d65caf8416f99b61627791dbba056ecb02b3d19662919282dfdddfa849ed4dd783962e39fab20533103fab74a7fdd196f6d4c7b6f67c4b99e70b9a25680cd61373754309b4708bf9566bfc3fee30110c6292d8aa6108540f581fe7f7952eb176e51b6a17cff43945e3db27bf49df4b3e33b37da01d80a77936eb0cfb7234c7a281776548ec3cb14"]}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x423}}, {0x76, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"]}]}) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000001000370400001b419000000000", @ANYRESDEC=r6, @ANYRESHEX=0x0, @ANYRES32=r8, @ANYBLOB="06000f0003000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r6) bind$alg(r5, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000580)="2c385aa3", 0x4) r9 = accept4(r5, 0x0, 0x0, 0x800) writev(r9, &(0x7f0000001c80)=[{&(0x7f0000001ac0)="b1fe7906f2f31d009cf8844b68df83203ab8dd85a982cfeac1df5e4c7dec5b9967a641709c1bef140f29e53bb0dd158ea6c55a8c67854a3c496a5e08fc6f8cd14a5b277735cfff033d1b2d47456bb675f516", 0x52}, {&(0x7f0000001b40)="fc6e98a4d38f0cee505706df857eebe25fbc8a103326e0618b069b33fca5f5df40e9ff1ae3fa309523baf0b8191d6be3f3d13dfc12d3cc98b75417757f2f98512d8656632ccf0ca9ead8d9655509fbbcdf74073814a5", 0x56}], 0x2) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e23, 0x9, @local, 0xffff}, 0x1c) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)=ANY=[@ANYRESOCT=r8, @ANYRES32, @ANYRESOCT=r8, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="05000000f3ef00000200000000000000000000000040000000000000"], 0x50) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xb, 0x15, &(0x7f0000000500)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=r12, @ANYRESDEC=r2, @ANYRES32=r5, @ANYRES8], &(0x7f0000000ac0)='GPL\x00', 0x1, 0x8e, &(0x7f0000000b00)=""/142, 0x41100, 0x4, '\x00', r7, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x5, 0x8001, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000e00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r10, r11], &(0x7f0000000e40)=[{0x4, 0x1, 0x3}, {0x1, 0x1, 0x6, 0x5}, {0x2, 0x4, 0x2, 0x9}, {0x2, 0x4, 0xa, 0x1}], 0x10, 0x6a}, 0x94) kernel console output (not intermixed with test programs): r after parsing attributes in process `syz.2.1303'. [ 124.128919][T12713] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1305'. [ 124.204855][ T6009] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 124.207237][ T6009] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 124.209605][ T6009] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 124.211910][ T6009] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 124.217754][ T6009] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 124.221443][ T6009] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 124.403211][T12659] i2c i2c-2: unsupported multi-msg i2c transaction [ 124.406063][ T6009] usb 6-1: USB disconnect, device number 8 [ 124.560436][T12763] netlink: 'syz.2.1312': attribute type 32 has an invalid length. [ 124.869743][T12787] ip6_vti0: entered promiscuous mode [ 124.873853][T12787] tmpfs: Unknown parameter 'nkswap' [ 124.903477][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 124.903489][ T40] audit: type=1400 audit(1771577963.392:662): avc: denied { audit_write } for pid=12790 comm="syz.2.1321" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 124.912204][ T40] audit: type=1400 audit(1771577963.392:663): avc: denied { create } for pid=12790 comm="syz.2.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.918697][ T40] audit: type=1400 audit(1771577963.392:664): avc: denied { bind } for pid=12790 comm="syz.2.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.926177][ T40] audit: type=1400 audit(1771577963.392:665): avc: denied { setopt } for pid=12790 comm="syz.2.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.933145][ T40] audit: type=1400 audit(1771577963.392:666): avc: denied { accept } for pid=12790 comm="syz.2.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.939288][ T40] audit: type=1400 audit(1771577963.392:667): avc: denied { write } for pid=12790 comm="syz.2.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.946575][ T40] audit: type=1400 audit(1771577963.392:668): avc: denied { read } for pid=12790 comm="syz.2.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.952754][ T40] audit: type=1400 audit(1771577963.422:669): avc: denied { connect } for pid=12794 comm="syz.1.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 124.972616][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 124.997726][ T40] audit: type=1400 audit(1771577963.482:670): avc: denied { read write } for pid=12794 comm="syz.1.1322" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 125.007344][ T5931] Bluetooth: hci3: link tx timeout [ 125.007487][ T5931] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 125.013282][ T40] audit: type=1400 audit(1771577963.482:671): avc: denied { open } for pid=12794 comm="syz.1.1322" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 125.042708][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 125.051779][T12802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=12802 comm=syz.0.1324 [ 125.056139][T12802] netlink: 'syz.0.1324': attribute type 7 has an invalid length. [ 125.207537][T12826] team0: Device gtp1 is up. Set it down before adding it as a team port [ 125.334654][T12843] Failed to initialize the IGMP autojoin socket (err -2) [ 125.417954][T12846] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 125.476618][T12843] mac80211_hwsim hwsim3 : renamed from wlan1 [ 125.717573][T12867] netlink: 'syz.2.1334': attribute type 2 has an invalid length. [ 125.724105][T12870] overlayfs: failed to clone upperpath [ 125.754971][T12874] wireguard: wg2: Could not create IPv4 socket [ 125.759065][T12877] SQUASHFS error: Failed to read block 0x0: -5 [ 125.787312][T12884] netlink: del zone limit has 4 unknown bytes [ 125.880548][ T6008] libceph: mon0 (1)[c::]:6789 connect error [ 125.942619][ T6008] libceph: mon0 (1)[c::]:6789 connect error [ 126.022632][ T5673] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 126.082624][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 126.152736][ T6008] libceph: mon0 (1)[c::]:6789 connect error [ 126.162696][ T5673] usb 6-1: device descriptor read/64, error -71 [ 126.202807][ T6008] libceph: mon0 (1)[c::]:6789 connect error [ 126.315656][T12919] delete_channel: no stack [ 126.412704][ T5673] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 126.463055][T12937] __nla_validate_parse: 10 callbacks suppressed [ 126.463067][T12937] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1353'. [ 126.554547][ T5673] usb 6-1: device descriptor read/64, error -71 [ 126.673013][ T6008] libceph: mon0 (1)[c::]:6789 connect error [ 126.673160][ T5673] usb usb6-port1: attempt power cycle [ 126.707245][T12899] ceph: No mds server is up or the cluster is laggy [ 126.711317][T12906] ceph: No mds server is up or the cluster is laggy [ 126.726224][ T6008] libceph: mon0 (1)[c::]:6789 connect error [ 126.772259][T12964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1358'. [ 126.786670][T12964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.908281][T13021] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1365'. [ 127.012634][ T5673] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 127.033262][ T5673] usb 6-1: device descriptor read/8, error -71 [ 127.042698][ T5931] Bluetooth: hci3: command 0x0406 tx timeout [ 127.042711][T13028] new mount options do not match the existing superblock, will be ignored [ 127.088906][T13031] 9pnet: Found fid 0 not clunked [ 127.132681][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 127.282791][ T5673] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 127.302987][ T5673] usb 6-1: device descriptor read/8, error -71 [ 127.377194][T13041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1371'. [ 127.413682][ T5673] usb usb6-port1: unable to enumerate USB device [ 127.558322][T13057] netlink: 'syz.0.1377': attribute type 29 has an invalid length. [ 127.564647][T13057] netlink: 'syz.0.1377': attribute type 29 has an invalid length. [ 127.568278][T13057] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1377'. [ 128.162632][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 128.458114][T13081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1382'. [ 128.536067][T13091] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=13091 comm=syz.3.1387 [ 128.678577][T13112] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1393'. [ 128.748461][T13120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1396'. [ 128.925813][T13141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1404'. [ 128.967673][T13141] 8021q: adding VLAN 0 to HW filter on device bond4 [ 129.017116][T13193] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=13193 comm=syz.1.1408 [ 129.017949][T13192] 9p: Bad value for 'rfdno' [ 129.098341][T13202] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1412'. [ 129.212575][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 130.082910][T13279] IPv6: NLM_F_CREATE should be specified when creating new route [ 130.242580][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 130.612835][T13312] 9pnet_fd: p9_fd_create_tcp (13312): problem creating socket [ 130.791439][T13338] bridge2: port 1(veth3) entered blocking state [ 130.792179][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 130.792189][ T40] audit: type=1400 audit(1771577969.272:682): avc: denied { checkpoint_restore } for pid=13390 comm="syz.0.1452" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 130.795053][T13338] bridge2: port 1(veth3) entered disabled state [ 130.805624][T13338] veth3: entered allmulticast mode [ 130.808183][T13338] veth3: entered promiscuous mode [ 130.825958][T13338] vlan0: entered allmulticast mode [ 130.828216][T13338] veth1: entered allmulticast mode [ 130.953394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 131.282568][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 131.783101][T13450] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 132.000283][T13482] __nla_validate_parse: 6 callbacks suppressed [ 132.000296][T13482] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1474'. [ 132.322541][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 132.422996][ T40] audit: type=1400 audit(1771577970.912:683): avc: denied { write } for pid=13518 comm="syz.1.1481" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 132.508615][ T40] audit: type=1400 audit(1771577970.992:684): avc: denied { read } for pid=13535 comm="syz.1.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 132.586156][T13542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1487'. [ 132.590070][T13542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1487'. [ 132.620616][T13542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1487'. [ 132.725009][ T40] audit: type=1400 audit(1771577971.212:685): avc: denied { bind } for pid=13544 comm="syz.1.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 132.854579][ T40] audit: type=1400 audit(1771577971.342:686): avc: denied { watch } for pid=13571 comm="syz.3.1497" path="/382/file0" dev="tmpfs" ino=2054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 132.861684][ T40] audit: type=1400 audit(1771577971.342:687): avc: denied { watch_sb } for pid=13571 comm="syz.3.1497" path="/382/file0" dev="tmpfs" ino=2054 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 132.912404][T13580] program syz.1.1499 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.916597][T13582] program syz.1.1499 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.006213][T13594] overlayfs: failed to clone upperpath [ 133.011681][T13596] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 133.021278][T13596] CIFS mount error: No usable UNC path provided in device string! [ 133.021278][T13596] [ 133.039183][T13596] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 133.059005][T13596] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 133.079094][T13604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1504'. [ 133.099638][T13596] netlink: 'syz.1.1503': attribute type 63 has an invalid length. [ 133.111435][T13596] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1503'. [ 133.122538][T13596] gretap0: entered allmulticast mode [ 133.125227][T13596] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 133.191698][T13622] binder: 13621:13622 ioctl c00c620f 200000000500 returned -22 [ 133.203880][T13624] : entered promiscuous mode [ 133.207592][T13624] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1509'. [ 133.264913][T13633] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1511'. [ 133.280732][T13641] openvswitch: netlink: EtherType 50a is less than min 600 [ 133.295826][ T40] audit: type=1400 audit(1771577971.782:688): avc: denied { append } for pid=13638 comm="syz.1.1512" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 133.330129][T13648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1514'. [ 133.333400][T13647] macsec2: entered promiscuous mode [ 133.333540][T13648] netlink: 'syz.1.1514': attribute type 7 has an invalid length. [ 133.335546][T13647] macsec2: entered allmulticast mode [ 133.339827][T13648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1514'. [ 133.344467][T13648] netlink: 'syz.1.1514': attribute type 7 has an invalid length. [ 133.362598][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 133.365784][T13655] Failed to initialize the IGMP autojoin socket (err -2) [ 133.413009][T13663] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 133.438672][T13667] 9p: Unknown Cache mode or invalid value fs [ 133.567547][T13687] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 133.682810][ T1341] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 133.812583][ T1341] usb 6-1: device descriptor read/64, error -71 [ 134.037300][ T40] audit: type=1400 audit(1771577972.522:689): avc: denied { mounton } for pid=13726 comm="syz.2.1538" path="/" dev="ramfs" ino=33361 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 134.072575][ T1341] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 134.212636][ T1341] usb 6-1: device descriptor read/64, error -71 [ 134.322951][ T1341] usb usb6-port1: attempt power cycle [ 134.402693][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 134.561472][T13805] bridge_slave_0: left allmulticast mode [ 134.563457][T13805] bridge_slave_0: left promiscuous mode [ 134.565328][T13805] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.672748][ T1341] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 134.693407][ T1341] usb 6-1: device descriptor read/8, error -71 [ 134.714909][T13812] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 134.861210][ T40] audit: type=1400 audit(1771577973.342:690): avc: denied { map } for pid=13825 comm="syz.2.1555" path="socket:[31487]" dev="sockfs" ino=31487 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 134.911980][ T40] audit: type=1400 audit(1771577973.392:691): avc: denied { lock } for pid=13825 comm="syz.2.1555" path="socket:[31487]" dev="sockfs" ino=31487 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 134.962902][ T1341] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 134.993190][ T1341] usb 6-1: device descriptor read/8, error -71 [ 135.112802][ T1341] usb usb6-port1: unable to enumerate USB device [ 135.442643][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 135.811245][T13866] ptrace attach of "/syz-executor exec"[13867] was attempted by "/syz-executor exec"[13866] [ 135.815628][ T40] audit: type=1326 audit(1771577974.302:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13865 comm="syz.2.1569" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83caf9c629 code=0x0 [ 136.137873][T13872] netlink: 'syz.0.1571': attribute type 30 has an invalid length. [ 136.189162][T13877] netlink: 'syz.0.1571': attribute type 30 has an invalid length. [ 136.445163][T13895] netlink: 'syz.0.1573': attribute type 21 has an invalid length. [ 136.482616][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 137.188695][ T40] audit: type=1400 audit(1771577975.672:693): avc: denied { mounton } for pid=13954 comm="syz.1.1590" path="/274/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 137.357724][ T40] audit: type=1400 audit(1771577975.842:694): avc: denied { ioctl } for pid=13963 comm="syz.2.1593" path="socket:[31543]" dev="sockfs" ino=31543 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 137.407529][T13966] __nla_validate_parse: 7 callbacks suppressed [ 137.407541][T13966] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1594'. [ 137.414439][T13966] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1594'. [ 137.454458][T13969] 9p: Could not find request transport: virtio¹xÃèoreqv [ 137.464015][T13969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1595'. [ 137.522598][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 137.765063][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.767293][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.925732][T13998] overlayfs: failed to clone lowerpath [ 138.020832][ T40] audit: type=1400 audit(1771577976.502:695): avc: denied { connect } for pid=14001 comm="syz.0.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 138.088666][ T40] audit: type=1400 audit(1771577976.572:696): avc: denied { ioctl } for pid=14009 comm="syz.1.1607" path="socket:[32559]" dev="sockfs" ino=32559 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 138.093102][T14010] netlink: 'syz.1.1607': attribute type 2 has an invalid length. [ 138.098323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 138.101501][T14010] netlink: 'syz.1.1607': attribute type 1 has an invalid length. [ 138.107270][T14011] netlink: 'syz.1.1607': attribute type 2 has an invalid length. [ 138.110019][T14011] netlink: 'syz.1.1607': attribute type 1 has an invalid length. [ 138.153273][T14014] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1608'. [ 138.442778][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 138.572579][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 138.606495][ T9] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 138.610528][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.613706][ T9] usb 6-1: Product: syz [ 138.615493][ T9] usb 6-1: Manufacturer: syz [ 138.617591][ T9] usb 6-1: SerialNumber: syz [ 138.622165][ T9] usb 6-1: config 0 descriptor?? [ 138.627479][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 138.634838][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 138.639388][ T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 138.643448][ T9] usb 6-1: media controller created [ 138.653911][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.689032][ T9] DVB: Unable to find symbol mt352_attach() [ 138.717014][ T9] DVB: Unable to find symbol nxt6000_attach() [ 138.719747][ T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 138.727391][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input10 [ 138.735029][ T9] dvb-usb: schedule remote query interval to 1000 msecs. [ 138.738145][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 138.742276][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 138.744798][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 138.828743][T14021] dvb-usb: bulk message failed: -22 (7/0) [ 138.836533][T14021] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 138.842686][ T9] usb 6-1: USB disconnect, device number 17 [ 138.865306][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 139.410367][T14069] ip6erspan0: entered promiscuous mode [ 139.411026][T14064] netlink: 'syz.1.1614': attribute type 21 has an invalid length. [ 139.612686][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 139.624281][T14089] program syz.1.1620 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.657428][ T40] audit: type=1400 audit(1771577978.142:697): avc: denied { bind } for pid=14098 comm="syz.2.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 139.686062][T14103] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 139.695542][T14103] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10) [ 139.698668][T14103] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 139.711090][T14103] vhci_hcd vhci_hcd.0: Device attached [ 139.714962][T14105] vhci_hcd: connection closed [ 139.724576][ T8104] vhci_hcd vhci_hcd.1: stop threads [ 139.731189][ T8104] vhci_hcd vhci_hcd.1: release socket [ 139.739114][ T8104] vhci_hcd vhci_hcd.1: disconnect device [ 139.762734][T14118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1626'. [ 139.765879][T14118] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1626'. [ 139.794196][T14126] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1628'. [ 139.981056][T14148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1630'. [ 140.008911][T14153] cgroup2: Unknown parameter 'mem' [ 140.010774][T14153] cgroup2: Unknown parameter 'mem' [ 140.013331][T14153] cgroup2: Unknown parameter 'mem' [ 140.015096][T14153] cgroup2: Unknown parameter 'mem' [ 140.044781][T14159] geneve3: entered promiscuous mode [ 140.047086][T14159] geneve3: entered allmulticast mode [ 140.642597][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 140.812362][T14249] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1639'. [ 140.843413][T14251] team_slave_0: entered promiscuous mode [ 140.845445][T14251] team_slave_1: entered promiscuous mode [ 140.847637][T14251] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 140.897440][T14261] xt_socket: unknown flags 0x20 [ 141.094178][T14283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1649'. [ 141.131477][ T40] audit: type=1400 audit(1771577979.612:698): avc: denied { getopt } for pid=14287 comm="syz.1.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 141.141258][T14288] io-wq is not configured for unbound workers [ 141.207104][T14297] bridge1: entered promiscuous mode [ 141.210796][T14297] bridge1: entered allmulticast mode [ 141.214823][T14300] netlink: 'syz.0.1653': attribute type 1 has an invalid length. [ 141.221365][T14297] bridge0: port 3(team0) entered blocking state [ 141.224829][T14297] bridge0: port 3(team0) entered disabled state [ 141.227871][T14297] team0: entered allmulticast mode [ 141.229788][T14297] team_slave_0: entered allmulticast mode [ 141.231801][T14297] team_slave_1: entered allmulticast mode [ 141.236141][T14297] team0: left allmulticast mode [ 141.238423][T14297] team_slave_0: left allmulticast mode [ 141.240582][T14297] team_slave_1: left allmulticast mode [ 141.442335][T14309] Failed to initialize the IGMP autojoin socket (err -2) [ 141.670217][T14314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.679337][T14314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.686677][T14314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.692636][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 141.693619][T14314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.704559][T14314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.711044][T14314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.716759][T14314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.722325][T14314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.730362][T14314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.736338][T14314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.989495][T14318] netlink: 'syz.2.1659': attribute type 1 has an invalid length. [ 141.995393][T14318] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 142.371826][T14456] pim6reg1: entered promiscuous mode [ 142.378485][T14456] pim6reg1: entered allmulticast mode [ 142.630459][ T40] audit: type=1400 audit(1771577981.112:699): avc: denied { append } for pid=14490 comm="syz.1.1686" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 142.675307][T14502] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 142.732547][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 142.809541][T14519] 8021q: adding VLAN 0 to HW filter on device bond7 [ 142.912629][ T34] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 143.064427][ T34] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 143.067930][ T34] usb 6-1: config 0 has no interface number 0 [ 143.075301][ T34] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 143.079127][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.083059][ T34] usb 6-1: Product: syz [ 143.084891][ T34] usb 6-1: Manufacturer: syz [ 143.086898][ T34] usb 6-1: SerialNumber: syz [ 143.091237][ T34] usb 6-1: config 0 descriptor?? [ 143.152469][ T40] audit: type=1400 audit(1771577981.632:700): avc: denied { map } for pid=14572 comm="syz.0.1697" path="socket:[36894]" dev="sockfs" ino=36894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 143.216279][T14581] __nla_validate_parse: 10 callbacks suppressed [ 143.216359][T14581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1700'. [ 143.222769][T14582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=14582 comm=syz.2.1698 [ 143.269837][ T40] audit: type=1326 audit(1771577981.752:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14588 comm="syz.2.1702" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83caf9c629 code=0x0 [ 143.414498][T14599] cgroup: Unknown subsys name 'smackfsroot' [ 143.510804][T14606] jfs: Unknown parameter 'disd' [ 143.708193][ T34] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 143.711414][ T34] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 143.718408][ T34] asix 6-1:0.251: probe with driver asix failed with error -5 [ 143.722405][ T34] usb 6-1: USB disconnect, device number 18 [ 143.772633][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 143.776599][T14616] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1711'. [ 143.781696][ T40] audit: type=1400 audit(1771577982.262:702): avc: denied { create } for pid=14615 comm="syz.0.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 143.788833][ T40] audit: type=1400 audit(1771577982.272:703): avc: denied { write } for pid=14615 comm="syz.0.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 144.244592][T14637] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1715'. [ 144.256162][ T40] audit: type=1400 audit(1771577982.742:704): avc: denied { append } for pid=14643 comm="syz.1.1716" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 144.256781][T14646] 9p: Unknown Cache mode or invalid value fsaacðc‘N¼’™¹ô“fÏubhe [ 144.335115][ T40] audit: type=1400 audit(1771577982.822:705): avc: denied { accept } for pid=14656 comm="syz.1.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 144.339834][T14659] netlink: 'syz.2.1720': attribute type 1 has an invalid length. [ 144.349018][T14659] netlink: 'syz.2.1720': attribute type 2 has an invalid length. [ 144.380601][T14661] XFS (nbd1): SB validate failed with error -5. [ 144.546663][T14690] netlink: 'syz.0.1729': attribute type 4 has an invalid length. [ 144.548272][T14689] netlink: 'syz.0.1729': attribute type 4 has an invalid length. [ 144.550062][T14690] netlink: 'syz.0.1729': attribute type 4 has an invalid length. [ 144.558858][T14690] netlink: 'syz.0.1729': attribute type 4 has an invalid length. [ 144.562277][T14690] netlink: 'syz.0.1729': attribute type 4 has an invalid length. [ 144.581673][T14689] netlink: 'syz.0.1729': attribute type 4 has an invalid length. [ 144.584995][T14690] netlink: 'syz.0.1729': attribute type 4 has an invalid length. [ 144.585095][T14690] netlink: 'syz.0.1729': attribute type 4 has an invalid length. [ 144.597358][T14695] netem: unknown loss type 0 [ 144.599329][T14695] netem: change failed [ 144.708494][ T40] audit: type=1400 audit(1771577983.192:706): avc: denied { read } for pid=14709 comm="syz.0.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 144.802739][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 145.764639][T14757] openvswitch: netlink: IP tunnel dst address not specified [ 145.790484][T14762] bridge_slave_0: invalid flags given to default FDB implementation [ 145.842669][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 146.862385][T14848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1754'. [ 146.892606][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 147.012018][T14854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1755'. [ 147.021946][T14854] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1755'. [ 147.173900][T14876] team0 (unregistering): Port device team_slave_0 removed [ 147.182775][T14876] team0 (unregistering): Port device team_slave_1 removed [ 147.289781][ T6009] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 147.303296][ T6009] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 147.342442][T14898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1767'. [ 147.345721][T14893] fido_id[14893]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 147.437071][ T40] audit: type=1400 audit(1771577985.922:707): avc: denied { write } for pid=14911 comm="syz.1.1770" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 147.437888][T14912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1770'. [ 147.447451][T14912] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1770'. [ 147.849175][T14923] pim6reg1: entered promiscuous mode [ 147.851272][T14923] pim6reg1: entered allmulticast mode [ 147.922541][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 148.680036][T14954] Failed to initialize the IGMP autojoin socket (err -2) [ 148.889787][T14964] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1788'. [ 148.972561][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 148.972721][ T40] audit: type=1326 audit(1771577987.452:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14971 comm="syz.0.1790" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b679c629 code=0x7ffc0000 [ 148.983827][ T40] audit: type=1326 audit(1771577987.462:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14971 comm="syz.0.1790" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b679c629 code=0x7ffc0000 [ 149.007187][ T40] audit: type=1326 audit(1771577987.462:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14971 comm="syz.0.1790" exe="/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f65b679c629 code=0x7ffc0000 [ 149.009820][T14975] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 149.017497][ T40] audit: type=1326 audit(1771577987.462:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14971 comm="syz.0.1790" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b679c629 code=0x7ffc0000 [ 149.037374][ T40] audit: type=1326 audit(1771577987.462:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14971 comm="syz.0.1790" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f65b679c629 code=0x7ffc0000 [ 149.050047][ T40] audit: type=1326 audit(1771577987.462:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14971 comm="syz.0.1790" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b679c629 code=0x7ffc0000 [ 149.066606][ T40] audit: type=1326 audit(1771577987.462:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14971 comm="syz.0.1790" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b679c629 code=0x7ffc0000 [ 149.125601][ T40] audit: type=1400 audit(1771577987.612:715): avc: denied { execute } for pid=15000 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 149.134811][ T40] audit: type=1400 audit(1771577987.612:716): avc: denied { execute_no_trans } for pid=15000 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 149.175502][T15003] Failed to initialize the IGMP autojoin socket (err -2) [ 149.201228][T15005] overlayfs: failed to clone upperpath [ 149.245750][ T5939] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 149.250045][ T5939] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.263092][ T5939] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 149.275395][ T5939] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 149.278882][ T5939] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.297661][T15011] Failed to initialize the IGMP autojoin socket (err -2) [ 149.322623][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 149.471312][T15011] chnl_net:caif_netlink_parms(): no params data found [ 149.493026][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 149.493310][T15078] netlink: 1192 bytes leftover after parsing attributes in process `syz.2.1807'. [ 149.500277][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.513749][T15078] openvswitch: netlink: Flow key attr not present in new flow. [ 149.516792][T15078] netlink: 1192 bytes leftover after parsing attributes in process `syz.2.1807'. [ 149.518295][ T9] usb 6-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 149.520298][T15078] openvswitch: netlink: Flow key attr not present in new flow. [ 149.520387][T15078] netlink: 1192 bytes leftover after parsing attributes in process `syz.2.1807'. [ 149.529344][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 149.534987][T15078] openvswitch: netlink: Flow key attr not present in new flow. [ 149.536397][ T9] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 149.545736][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.551589][T15078] netlink: 1192 bytes leftover after parsing attributes in process `syz.2.1807'. [ 149.559695][T15078] openvswitch: netlink: Flow key attr not present in new flow. [ 149.573056][ T9] usb 6-1: config 0 descriptor?? [ 149.576216][T15078] netlink: 1192 bytes leftover after parsing attributes in process `syz.2.1807'. [ 149.585618][ T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 149.590122][T15078] openvswitch: netlink: Flow key attr not present in new flow. [ 149.630542][T15078] netlink: 1192 bytes leftover after parsing attributes in process `syz.2.1807'. [ 149.645350][T15011] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.649749][T15078] openvswitch: netlink: Flow key attr not present in new flow. [ 149.650959][T15011] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.658797][T15011] bridge_slave_0: entered allmulticast mode [ 149.660525][T15078] netlink: 1192 bytes leftover after parsing attributes in process `syz.2.1807'. [ 149.666892][T15011] bridge_slave_0: entered promiscuous mode [ 149.675284][T15078] openvswitch: netlink: Flow key attr not present in new flow. [ 149.678130][T15011] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.678259][T15078] netlink: 1192 bytes leftover after parsing attributes in process `syz.2.1807'. [ 149.691596][T15011] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.694737][T15011] bridge_slave_1: entered allmulticast mode [ 149.697780][T15011] bridge_slave_1: entered promiscuous mode [ 149.698537][T15078] openvswitch: netlink: Flow key attr not present in new flow. [ 149.705602][T15078] netlink: 1192 bytes leftover after parsing attributes in process `syz.2.1807'. [ 149.713279][T15078] openvswitch: netlink: Flow key attr not present in new flow. [ 149.769964][T15011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.807368][T15011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.855246][T15011] team0: Port device team_slave_0 added [ 149.871239][T15011] team0: Port device team_slave_1 added [ 149.899593][T15011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.901911][T15011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.912392][T15011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.916428][T15259] ªªªªªª: renamed from lo [ 149.923783][T15011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.926125][T15011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.934940][T15011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.001166][T15011] hsr_slave_0: entered promiscuous mode [ 150.004622][T15011] hsr_slave_1: entered promiscuous mode [ 150.007009][T15011] debugfs: 'hsr0' already exists in 'hsr' [ 150.009030][T15011] Cannot create hsr debugfs directory [ 150.297188][T15011] netdevsim netdevsim4 netdevsim0: renamed from eth2 [ 150.307950][T15011] netdevsim netdevsim4 netdevsim1: renamed from eth3 [ 150.318682][T15011] netdevsim netdevsim4 netdevsim2: renamed from eth4 [ 150.340274][T15011] netdevsim netdevsim4 netdevsim3: renamed from eth5 [ 150.474471][T15011] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.493408][ T8121] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.495790][ T8121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.511317][ T8104] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.513713][ T8104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.659520][T15549] overlayfs: failed to clone upperpath [ 150.761234][T15011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.779359][ T5932] block nbd64: NBD_DISCONNECT [ 150.909994][ T6156] udevd[6156]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 150.985141][T15011] veth0_vlan: entered promiscuous mode [ 150.991082][T15011] veth1_vlan: entered promiscuous mode [ 151.052230][T15636] validate_nla: 124 callbacks suppressed [ 151.052242][T15636] netlink: 'syz.0.1827': attribute type 3 has an invalid length. [ 151.059982][T15011] veth0_macvtap: entered promiscuous mode [ 151.071233][T15011] veth1_macvtap: entered promiscuous mode [ 151.090753][T15670] CIFS mount error: No usable UNC path provided in device string! [ 151.090753][T15670] [ 151.094286][T15670] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 151.138041][T15011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.158934][T15011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.172269][T15011] wireguard: wg0: Could not create IPv4 socket [ 151.179426][T15011] wireguard: wg1: Could not create IPv4 socket [ 151.183244][T15011] wireguard: wg2: Could not create IPv4 socket [ 151.927737][T15776] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 151.930691][T15776] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 152.072869][ T9] usb 6-1: USB disconnect, device number 19 [ 152.092845][T15797] IPVS: Error during creation of socket; terminating [ 152.170994][T15811] overlayfs: failed to clone upperpath [ 152.420105][T15854] vlan5: entered allmulticast mode [ 152.425047][T15854] macsec0: entered allmulticast mode [ 152.427360][T15854] veth1_macvtap: entered allmulticast mode [ 152.602393][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 152.602405][ T40] audit: type=1400 audit(1771577991.082:722): avc: denied { set_context_mgr } for pid=15871 comm="syz.1.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 152.685409][ T40] audit: type=1326 audit(1771577991.172:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15874 comm="syz.0.1863" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65b679c629 code=0x0 [ 152.817487][T15897] ALSA: seq fatal error: cannot create timer (-19) [ 152.961394][ T5939] Bluetooth: hci1: unexpected event for opcode 0x0c7d [ 152.967240][T15920] IPv6: NLM_F_CREATE should be specified when creating new route [ 152.969502][ T5939] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 152.995862][T15925] netlink: 'syz.1.1871': attribute type 10 has an invalid length. [ 153.000327][T15925] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 153.013346][T15925] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 153.017204][T15925] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 153.194466][T15961] 9p: Bad value for 'version' [ 153.212031][ T40] audit: type=1400 audit(1771577991.692:724): avc: denied { map } for pid=15996 comm="syz.1.1878" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 153.315153][T16008] netlink: 'syz.1.1880': attribute type 5 has an invalid length. [ 153.321717][T16008] ip6erspan0: entered promiscuous mode [ 153.344498][T16008] can0: slcan on pts0. [ 153.434313][T16007] can0 (unregistered): slcan off pts0. [ 153.545600][T16046] netlink: 'syz.1.1885': attribute type 2 has an invalid length. [ 153.790417][ T5931] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.794968][ T5931] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.798251][ T5931] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.801124][ T5931] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.804328][T16078] netlink: 'syz.2.1893': attribute type 32 has an invalid length. [ 153.808309][ T5931] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.820727][T16070] Failed to initialize the IGMP autojoin socket (err -2) [ 154.162690][ C2] net_ratelimit: 30 callbacks suppressed [ 154.162708][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 154.464225][ T40] audit: type=1400 audit(1771577992.952:725): avc: denied { shutdown } for pid=16154 comm="syz.1.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.561440][ T40] audit: type=1400 audit(1771577993.042:726): avc: denied { create } for pid=16160 comm="syz.1.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 154.567955][ T40] audit: type=1400 audit(1771577993.042:727): avc: denied { setopt } for pid=16160 comm="syz.1.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 154.666335][ T40] audit: type=1400 audit(1771577993.152:728): avc: denied { setcheckreqprot } for pid=16171 comm="syz.1.1907" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 154.751531][T16179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.759770][T16180] batadv_slave_1: entered promiscuous mode [ 154.770358][T16180] batadv_slave_1: left promiscuous mode [ 154.797796][T16185] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 154.805970][T16185] __nla_validate_parse: 40 callbacks suppressed [ 154.805980][T16185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1910'. [ 154.810962][T16185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1910'. [ 154.978160][T16210] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1915'. [ 155.114252][ T40] audit: type=1326 audit(1771577993.602:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16265 comm="syz.0.1920" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65b679c629 code=0x0 [ 155.202573][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 155.379297][T16070] netdevsim netdevsim4 netdevsim0: renamed from eth2 [ 155.385509][T16070] netdevsim netdevsim4 netdevsim1: renamed from eth3 [ 155.392246][T16070] netdevsim netdevsim4 netdevsim2: renamed from eth4 [ 155.399415][T16070] netdevsim netdevsim4 netdevsim3: renamed from eth5 [ 155.609648][ T8103] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.614678][ T8103] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.693102][T16070] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 155.701926][ T8103] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.706384][ T8103] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.718837][T16070] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 155.727884][T16070] wireguard: wg0: Could not create IPv4 socket [ 155.732047][T16070] wireguard: wg1: Could not create IPv4 socket [ 155.736871][T16070] wireguard: wg2: Could not create IPv4 socket [ 155.778990][ T8103] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.784338][ T8103] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.856769][ T8103] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.860757][ T8103] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.089743][ T8103] bridge_slave_1: left allmulticast mode [ 156.093883][ T8103] bridge_slave_1: left promiscuous mode [ 156.096308][ T40] audit: type=1326 audit(1771577994.582:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16385 comm="syz.0.1928" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f65b679c629 code=0x0 [ 156.104356][ T8103] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.116459][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.120508][ T8103] bridge_slave_0: left allmulticast mode [ 156.123509][ T8103] bridge_slave_0: left promiscuous mode [ 156.123560][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.126088][ T8103] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.130165][ T5939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.137946][ T5939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.140636][ T5939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.242567][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 156.659031][ T8103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.664435][ T8103] bond0 (unregistering): Released all slaves [ 156.672037][ T8103] bond1 (unregistering): Released all slaves [ 156.682862][ T8103] bond2 (unregistering): Released all slaves [ 156.692980][ T8103] bond3 (unregistering): Released all slaves [ 156.702765][ T8103] bond4 (unregistering): Released all slaves [ 156.728536][T16388] Failed to initialize the IGMP autojoin socket (err -2) [ 156.877081][ T8103] tipc: Disabling bearer [ 156.884005][ T8103] tipc: Left network mode [ 157.008517][T16444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1930'. [ 157.039552][ T40] audit: type=1804 audit(1771577995.522:731): pid=16446 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1931" name="file0" dev="tmpfs" ino=3078 res=1 errno=0 [ 157.087717][T16458] netlink: 'syz.2.1932': attribute type 10 has an invalid length. [ 157.107141][T16458] dummy0: left promiscuous mode [ 157.168540][T16473] netlink: 'syz.2.1933': attribute type 4 has an invalid length. [ 157.175050][T16473] netlink: 'syz.2.1933': attribute type 39 has an invalid length. [ 157.282617][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 157.397487][T16501] netlink: 'syz.2.1934': attribute type 4 has an invalid length. [ 157.436670][ T8103] hsr_slave_0: left promiscuous mode [ 157.444984][ T8103] hsr_slave_1: left promiscuous mode [ 157.447737][ T8103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.450322][ T8103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.456708][ T8103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.459818][ T8103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.479636][ T8103] veth1_macvtap: left promiscuous mode [ 157.482065][ T8103] veth0_macvtap: left promiscuous mode [ 157.484219][ T8103] veth1_vlan: left promiscuous mode [ 157.485900][ T8103] veth0_vlan: left promiscuous mode [ 157.711494][T16388] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 157.721259][T16528] netlink: 'syz.0.1938': attribute type 10 has an invalid length. [ 157.721298][T16388] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 157.740459][T16528] dummy0: entered promiscuous mode [ 157.745510][T16528] team0: Port device dummy0 added [ 157.750184][T16528] netlink: 'syz.0.1938': attribute type 10 has an invalid length. [ 157.750608][T16388] wireguard: wg0: Could not create IPv4 socket [ 157.759900][T16528] dummy0: left promiscuous mode [ 157.766387][T16528] team0: Port device dummy0 removed [ 157.770760][T16388] wireguard: wg1: Could not create IPv4 socket [ 157.777482][T16388] wireguard: wg2: Could not create IPv4 socket [ 158.322619][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 158.421882][T16655] rdma_op ffff88803f9959f0 conn xmit_rdma 0000000000000000 [ 158.446161][ T40] audit: type=1326 audit(1771577996.932:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16658 comm="syz.0.1946" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b679c629 code=0x7ff00000 [ 158.457648][ T40] audit: type=1326 audit(1771577996.932:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16658 comm="syz.0.1946" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b679c629 code=0x7ff00000 [ 158.471021][ T40] audit: type=1326 audit(1771577996.932:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16658 comm="syz.0.1946" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b679c629 code=0x7ff00000 [ 158.480899][ T40] audit: type=1326 audit(1771577996.932:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16658 comm="syz.0.1946" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b679c629 code=0x7ff00000 [ 158.490515][ T40] audit: type=1326 audit(1771577996.932:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16658 comm="syz.0.1946" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b679c629 code=0x7ff00000 [ 158.499949][ T40] audit: type=1326 audit(1771577996.932:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16658 comm="syz.0.1946" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b679c629 code=0x7ff00000 [ 158.510094][ T40] audit: type=1326 audit(1771577996.932:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16658 comm="syz.0.1946" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b679c629 code=0x7ff00000 [ 158.520071][ T40] audit: type=1326 audit(1771577996.932:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16658 comm="syz.0.1946" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b679c629 code=0x7ff00000 [ 158.530287][ T40] audit: type=1326 audit(1771577996.932:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16658 comm="syz.0.1946" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b679c629 code=0x7ff00000 [ 158.539788][ T40] audit: type=1326 audit(1771577996.932:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16658 comm="syz.0.1946" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b679c629 code=0x7ff00000 [ 158.717647][T16678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1949'. [ 158.911374][T16694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1951'. [ 159.009475][T16703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1954'. [ 159.025988][T16700] netlink: 'syz.0.1953': attribute type 39 has an invalid length. [ 159.103423][T16722] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1957'. [ 159.206508][T16732] Failed to initialize the IGMP autojoin socket (err -2) [ 159.372582][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 159.574186][T16772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1966'. [ 159.615255][T16778] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 159.619336][T16778] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 159.626281][T16778] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 159.770122][T16795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16795 comm=syz.2.1970 [ 160.006029][T16811] bond0: (slave vlan3): Opening slave failed [ 160.124900][T16824] 9p: Bad value for 'rfdno' [ 160.169958][T16831] netlink: 328 bytes leftover after parsing attributes in process `syz.0.1975'. [ 160.412569][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 160.903253][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 160.908296][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 160.912083][ T5939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 160.927905][ T5939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 160.930584][ T5939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 160.949168][T16866] Failed to initialize the IGMP autojoin socket (err -2) [ 161.096001][T16895] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1983'. [ 161.098932][T16895] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1983'. [ 161.312793][T16925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1982'. [ 161.350688][T16931] netlink: 'syz.2.1988': attribute type 1 has an invalid length. [ 161.353516][T16931] netlink: 'syz.2.1988': attribute type 1 has an invalid length. [ 161.355983][T16931] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.1988'. [ 161.442719][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 161.458061][T16942] bridge_slave_1: left allmulticast mode [ 161.460081][T16942] bridge_slave_1: left promiscuous mode [ 161.461876][T16942] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.473145][T16942] bond0: (slave bridge_slave_1): Enslaving as a backup interface with an up link [ 161.753232][T16963] geneve3: entered promiscuous mode [ 161.965805][T16990] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1997'. [ 161.975862][T16990] overlay: ./file0 is not a directory [ 162.482690][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 162.555530][T17028] afs: Unknown parameter '€â' [ 162.631461][T17034] erspan1: entered promiscuous mode [ 162.781171][ T5931] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 162.785942][ T5931] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 162.790087][ T5931] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 162.801000][ T5931] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 162.814596][ T5931] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 162.835517][T17044] Failed to initialize the IGMP autojoin socket (err -2) [ 162.966934][T17071] overlayfs: missing 'workdir' [ 162.972686][ T5939] Bluetooth: hci3: command tx timeout [ 163.214337][ T5931] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 163.216439][T16866] netdevsim netdevsim4 netdevsim0: renamed from eth10 [ 163.219967][ T5931] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 163.226796][ T5931] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 163.228386][T16866] netdevsim netdevsim4 netdevsim1: renamed from eth11 [ 163.230433][ T5931] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 163.235419][ T5931] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 163.238024][T16866] netdevsim netdevsim4 netdevsim2: renamed from eth12 [ 163.253775][T16866] netdevsim netdevsim4 netdevsim3: renamed from eth13 [ 163.270696][T17122] Failed to initialize the IGMP autojoin socket (err -2) [ 163.522573][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 163.530269][ T5939] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 163.536651][ T5939] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 163.540274][ T5939] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 163.545071][ T5939] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 163.548353][ T5939] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 163.567972][T17170] Failed to initialize the IGMP autojoin socket (err -2) [ 163.645728][T17185] netlink: 'syz.2.2016': attribute type 2 has an invalid length. [ 163.658328][T16866] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 163.667562][T16866] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 163.678489][T16866] wireguard: wg0: Could not create IPv4 socket [ 163.685848][T16866] wireguard: wg1: Could not create IPv4 socket [ 163.692333][T16866] wireguard: wg2: Could not create IPv4 socket [ 164.267110][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 164.270685][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 164.272343][T17247] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 164.278745][ T5939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 164.297023][ T5939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 164.299465][ T40] kauditd_printk_skb: 7534 callbacks suppressed [ 164.299479][ T40] audit: type=1400 audit(1771578002.782:8276): avc: denied { getopt } for pid=17251 comm="syz.2.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 164.311203][ T5939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 164.338186][T17245] Failed to initialize the IGMP autojoin socket (err -2) [ 164.354741][T17263] netlink: zone id is out of range [ 164.357062][T17263] netlink: zone id is out of range [ 164.359598][T17263] netlink: set zone limit has 8 unknown bytes [ 164.572548][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 164.648962][T17329] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 164.730504][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2031'. [ 164.734600][T17339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2031'. [ 164.743573][T17339] overlayfs: failed to clone upperpath [ 164.747181][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2031'. [ 165.399992][T17245] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 165.408734][T17245] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 165.419455][T17245] wireguard: wg0: Could not create IPv4 socket [ 165.423357][T17245] wireguard: wg1: Could not create IPv4 socket [ 165.427794][T17245] wireguard: wg2: Could not create IPv4 socket [ 165.602556][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 165.650132][T17444] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2040'. [ 165.703624][T17449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2041'. [ 165.772081][T17461] bond9: option resend_igmp: invalid value (65536) [ 165.775266][T17461] bond9: option resend_igmp: allowed values 0 - 255 [ 165.779423][T17461] bond9 (unregistering): Released all slaves [ 165.844594][T17533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=17533 comm=syz.0.2046 [ 165.867391][T17536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2047'. [ 165.919573][T17545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2049'. [ 165.920444][T17547] 9pnet_virtio: no channels available for device 127.0.0.1 [ 166.347658][ T40] audit: type=1400 audit(1771578004.832:8277): avc: denied { sys_nice } for pid=17602 comm="syz.2.2062" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 166.652586][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 166.855351][T17680] netlink: 'syz.2.2080': attribute type 16 has an invalid length. [ 166.857903][T17680] netlink: 'syz.2.2080': attribute type 17 has an invalid length. [ 166.868316][T17680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17680 comm=syz.2.2080 [ 166.895181][T17684] futex_wake_op: syz.2.2081 tries to shift op by 32; fix this program [ 167.161106][T17702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2085'. [ 167.163828][T17702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2085'. [ 167.166381][T17702] netlink: 'syz.0.2085': attribute type 7 has an invalid length. [ 167.272949][T17714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2087'. [ 167.692632][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 167.906775][T17747] netlink: 'syz.2.2091': attribute type 39 has an invalid length. [ 167.954376][T17753] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2093'. [ 168.123943][T17762] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2095'. [ 168.179635][ T40] audit: type=1400 audit(1771578006.662:8278): avc: denied { shutdown } for pid=17769 comm="syz.2.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 168.186400][ T40] audit: type=1400 audit(1771578006.662:8279): avc: denied { ioctl } for pid=17769 comm="syz.2.2097" path="socket:[40889]" dev="sockfs" ino=40889 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 168.256329][T17778] netlink: 'syz.2.2099': attribute type 1 has an invalid length. [ 168.259725][T17778] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2099'. [ 168.263908][T17778] netlink: 'syz.2.2099': attribute type 1 has an invalid length. [ 168.338058][T17786] hsr_slave_0: left promiscuous mode [ 168.340445][T17786] hsr_slave_1: left promiscuous mode [ 168.493832][ T40] audit: type=1800 audit(1771578006.982:8280): pid=17803 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2102" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 168.708126][ T5931] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 168.712312][ T5931] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 168.716328][ T5931] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 168.719092][ T5931] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 168.721673][ T5931] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 168.724152][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 168.740174][T17818] Failed to initialize the IGMP autojoin socket (err -2) [ 168.984238][ T40] audit: type=1400 audit(1771578007.472:8281): avc: denied { map } for pid=17858 comm="syz.0.2110" path="socket:[42150]" dev="sockfs" ino=42150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 169.199005][T17877] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17877 comm=syz.0.2112 [ 169.762620][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 170.787664][T17818] netdevsim netdevsim4 netdevsim0: renamed from eth10 [ 170.799340][T17818] netdevsim netdevsim4 netdevsim1: renamed from eth11 [ 170.802542][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 170.804979][ T5939] Bluetooth: hci3: command tx timeout [ 170.814246][T17818] netdevsim netdevsim4 netdevsim2: renamed from eth12 [ 170.819949][T17818] netdevsim netdevsim4 netdevsim3: renamed from eth13 [ 171.109224][ T5931] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 171.122668][ T5931] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 171.126019][ T5931] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 171.128922][ T5931] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 171.131718][ T5931] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 171.149124][T18049] Failed to initialize the IGMP autojoin socket (err -2) [ 171.197073][T17818] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 171.204615][T18061] __nla_validate_parse: 6 callbacks suppressed [ 171.204626][T18061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2132'. [ 171.209545][T17818] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 171.219751][T17818] wireguard: wg0: Could not create IPv4 socket [ 171.220133][T18061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18061 comm=syz.2.2132 [ 171.223522][T17818] wireguard: wg1: Could not create IPv4 socket [ 171.229164][T17818] wireguard: wg2: Could not create IPv4 socket [ 171.276548][T18061] netlink: 'syz.2.2132': attribute type 28 has an invalid length. [ 171.279094][T18061] netlink: 'syz.2.2132': attribute type 3 has an invalid length. [ 171.281415][T18061] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2132'. [ 171.852575][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 172.099107][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 172.104047][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 172.109412][ T5939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 172.113349][ T5939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 172.116504][ T5939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 172.131175][T18120] Failed to initialize the IGMP autojoin socket (err -2) [ 172.461642][T18204] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode [ 172.475182][ T40] audit: type=1400 audit(1771578010.942:8282): avc: denied { mount } for pid=18203 comm="syz.2.2135" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 172.548449][T18218] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2136'. [ 172.580166][T18221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2137'. [ 172.585152][T18221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2137'. [ 172.633240][ T40] audit: type=1400 audit(1771578011.122:8283): avc: denied { nlmsg_write } for pid=18225 comm="syz.2.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 172.642121][ T40] audit: type=1107 audit(1771578011.122:8284): pid=18225 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 172.661370][ T40] audit: type=1400 audit(1771578011.142:8285): avc: denied { watch watch_reads } for pid=18225 comm="syz.2.2138" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.892580][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 173.187708][T18268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2141'. [ 173.190631][T18268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2141'. [ 173.251449][T18120] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 173.265511][T18120] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 173.276155][T18120] wireguard: wg0: Could not create IPv4 socket [ 173.280683][T18120] wireguard: wg1: Could not create IPv4 socket [ 173.285638][T18120] wireguard: wg2: Could not create IPv4 socket [ 173.394789][ T40] audit: type=1400 audit(1771578011.882:8286): avc: denied { accept } for pid=18290 comm="syz.0.2142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 173.457768][T18294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2143'. [ 173.475125][T18298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2144'. [ 173.667744][T18310] netlink: 'syz.0.2148': attribute type 13 has an invalid length. [ 173.671048][T18310] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2148'. [ 173.677774][T18310] syz_tun: refused to change device tx_queue_len [ 173.932637][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 173.939223][T18329] netlink: 'syz.0.2150': attribute type 1 has an invalid length. [ 173.993517][T18329] 8021q: adding VLAN 0 to HW filter on device bond6 [ 173.998052][T18329] bond5: (slave bond6): making interface the new active one [ 174.001139][T18329] bond5: (slave bond6): Enslaving as an active interface with an up link [ 174.024515][ T40] audit: type=1400 audit(1771578012.512:8287): avc: denied { write } for pid=18397 comm="syz.2.2151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 174.962593][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 175.594738][T18495] team_slave_0: left promiscuous mode [ 175.597495][T18495] team_slave_1: left promiscuous mode [ 175.682659][ T5284] Bluetooth: hci0: command 0x0406 tx timeout [ 175.686595][ T5284] Bluetooth: hci2: command 0x0406 tx timeout [ 176.002564][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 176.082838][T18524] openvswitch: netlink: Missing key (keys=40, expected=100) [ 176.123934][ T40] audit: type=1326 audit(1771578014.612:8288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18525 comm="syz.2.2170" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83caf9c629 code=0x0 [ 176.162659][ C2] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 176.170879][T18528] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 176.171004][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 176.175312][T18528] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 176.181511][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 176.185751][ T5939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 176.196233][ T5939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 176.198939][ T5939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.210938][T18529] Failed to initialize the IGMP autojoin socket (err -2) [ 176.280457][ T40] audit: type=1326 audit(1771578014.762:8289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18541 comm="syz.0.2174" exe="/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f65b679c629 code=0x0 [ 177.052532][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 177.140317][T18574] __nla_validate_parse: 4 callbacks suppressed [ 177.140330][T18574] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2175'. [ 177.147247][T18574] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2175'. [ 177.227875][T18591] tmpfs: Invalid gid '0x00000000ffffffff' [ 178.092595][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 178.252823][ T5931] Bluetooth: hci3: command tx timeout [ 178.439404][T18529] netdevsim netdevsim4 netdevsim0: renamed from eth10 [ 178.454139][T18529] netdevsim netdevsim4 netdevsim1: renamed from eth11 [ 178.466240][T18529] netdevsim netdevsim4 netdevsim2: renamed from eth12 [ 178.476183][T18529] netdevsim netdevsim4 netdevsim3: renamed from eth13 [ 178.778019][T18529] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 178.786622][T18529] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 178.792879][T18529] wireguard: wg0: Could not create IPv4 socket [ 178.795945][T18529] wireguard: wg1: Could not create IPv4 socket [ 178.799215][T18529] wireguard: wg2: Could not create IPv4 socket [ 178.886296][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.891250][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.895922][ T5939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.901460][ T5939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.913865][ T5939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.931382][T18727] Failed to initialize the IGMP autojoin socket (err -2) [ 179.055237][T18722] veth0_to_bridge: entered promiscuous mode [ 179.122528][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 179.132013][T18721] veth0_to_bridge: left promiscuous mode [ 179.181598][T18778] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2183'. [ 179.368689][ T40] audit: type=1800 audit(1772102305.846:8290): pid=18815 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2191" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 179.440335][T18825] Cache volume key already in use (9p,syz,) [ 179.865338][T18896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2200'. [ 180.087016][T18727] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 180.107591][T18727] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 180.119880][T18727] wireguard: wg0: Could not create IPv4 socket [ 180.126287][T18727] wireguard: wg1: Could not create IPv4 socket [ 180.136743][T18727] wireguard: wg2: Could not create IPv4 socket [ 180.138290][T18925] trusted_key: encrypted_key: keyword 'u' not recognized [ 180.162748][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 180.389306][T18954] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2210'. [ 180.641769][ T5931] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 180.960580][T19024] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 181.047681][T19034] trusted_key: encrypted_key: master key parameter is missing [ 181.105040][T19038] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2220'. [ 181.212780][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 181.412757][T19091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2223'. [ 181.607459][T19103] 9p: Bad value for 'rfdno' [ 181.807089][ T5931] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 181.809305][ T5931] Bluetooth: Wrong link type (-22) [ 181.993999][ T40] audit: type=1400 audit(1772102564.476:8291): avc: denied { ioctl } for pid=19133 comm="syz.2.2230" path="socket:[44550]" dev="sockfs" ino=44550 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 182.045429][T19145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19145 comm=syz.0.2231 [ 182.105922][ T40] audit: type=1400 audit(1772102564.586:8292): avc: denied { map } for pid=19156 comm="syz.0.2232" path="socket:[44560]" dev="sockfs" ino=44560 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 182.128470][T19164] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2234'. [ 182.167373][T19168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2236'. [ 182.242755][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 182.255384][T19174] can: request_module (can-proto-0) failed. [ 182.330826][ T8104] tipc: Subscription rejected, illegal request [ 182.373468][T19195] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2243'. [ 182.399336][T19195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=19195 comm=syz.2.2243 [ 182.405233][T19195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2243'. [ 182.476669][T19265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2245'. [ 182.516748][T19265] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19265 comm=syz.2.2245 [ 182.529131][T19265] openvswitch: netlink: Flow actions attr not present in new flow. [ 182.644837][T19344] netlink: 'syz.2.2250': attribute type 10 has an invalid length. [ 182.651084][T19344] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 182.780656][T19367] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2256'. [ 182.846694][T19374] netlink: zone id is out of range [ 182.848919][T19374] netlink: zone id is out of range [ 182.851040][T19374] netlink: zone id is out of range [ 182.853765][T19374] netlink: zone id is out of range [ 183.021170][T19423] overlayfs: failed to clone upperpath [ 183.373283][T19470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2271'. [ 183.377074][T19470] netlink: 'syz.2.2271': attribute type 30 has an invalid length. [ 183.380363][T19470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2271'. [ 183.472499][T19480] netlink: 'syz.0.2274': attribute type 2 has an invalid length. [ 183.497933][T19482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2275'. [ 183.501715][T19482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2275'. [ 183.588841][T19494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2279'. [ 184.311151][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 184.320543][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 184.325255][ T5939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 184.334215][ T5939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 184.337805][ T5939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 184.351868][T19522] Failed to initialize the IGMP autojoin socket (err -2) [ 184.995335][T19584] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1171844089/1171844090 [ 185.222615][T19604] wireguard: wireguard0: Could not create IPv4 socket [ 185.228058][T19604] wireguard0: entered allmulticast mode [ 185.362843][ C2] net_ratelimit: 430 callbacks suppressed [ 185.362862][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 185.763694][ T8103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.928946][T19522] netdevsim netdevsim4 netdevsim0: renamed from eth10 [ 185.936630][T19522] netdevsim netdevsim4 netdevsim1: renamed from eth11 [ 185.946187][T19522] netdevsim netdevsim4 netdevsim2: renamed from eth12 [ 185.958121][T19522] netdevsim netdevsim4 netdevsim3: renamed from eth13 [ 186.287871][ T5931] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 186.292565][ T5931] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 186.304518][ T5931] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 186.308209][ T5931] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 186.310538][T19522] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 186.317263][ T5931] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 186.322232][T19522] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 186.326130][T19702] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 186.331299][T19522] wireguard: wg0: Could not create IPv4 socket [ 186.335971][T19702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.338356][T19702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.366472][T19522] wireguard: wg1: Could not create IPv4 socket [ 186.369351][T19695] Failed to initialize the IGMP autojoin socket (err -2) [ 186.369942][T19522] wireguard: wg2: Could not create IPv4 socket [ 186.402750][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 186.412916][ T5931] Bluetooth: hci3: command tx timeout [ 186.596438][T19770] netlink: 'syz.0.2299': attribute type 13 has an invalid length. [ 186.620830][T19770] gretap0: refused to change device tx_queue_len [ 186.628667][T19770] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 186.777640][T19799] fuse: Bad value for 'rootmode' [ 186.909553][T19816] overlayfs: cannot append lower layer [ 186.964299][T19822] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 187.000233][T19832] overlayfs: failed to clone upperpath [ 187.009408][T19832] bond0: entered allmulticast mode [ 187.011550][T19832] bridge_slave_1: entered allmulticast mode [ 187.023352][T19832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.027384][T19832] team0: Port device bond0 added [ 187.287440][T19875] netlink: 'syz.2.2320': attribute type 10 has an invalid length. [ 187.289989][T19875] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 187.295353][T19875] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 187.306693][T19875] bond0: (slave bond_slave_0): Releasing backup interface [ 187.311683][T19875] bond0: (slave bond_slave_1): Releasing backup interface [ 187.319436][T19875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.323124][T19875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.328204][T19875] bond0: (slave netdevsim0): Releasing backup interface [ 187.335526][T19875] bond0: (slave wlan1): Releasing backup interface [ 187.348892][T19875] bond2: (slave geneve2): Releasing active interface [ 187.361525][T19875] bond3: (slave veth5): Releasing active interface [ 187.370902][ T8103] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.374896][ T8103] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.378240][ T8103] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.381133][ T8103] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.442891][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 187.681620][T19899] __nla_validate_parse: 7 callbacks suppressed [ 187.681637][T19899] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2323'. [ 188.176288][T19926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2324'. [ 188.341740][T19945] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2329'. [ 188.370927][T19948] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2326'. [ 188.376235][ T5931] Bluetooth: hci0: Malformed LE Event: 0x1b [ 188.412808][ T5931] Bluetooth: hci4: command tx timeout [ 188.492780][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 188.595106][T19969] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2334'. [ 188.659986][T19973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2336'. [ 188.668267][T19973] bond0: entered promiscuous mode [ 188.671232][T19973] gretap0: entered promiscuous mode [ 188.676253][T19973] debugfs: 'hsr0' already exists in 'hsr' [ 188.678531][T19973] Cannot create hsr debugfs directory [ 188.680483][T19973] hsr0: entered promiscuous mode [ 188.690585][T19973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2336'. [ 188.804112][T19981] wg1 speed is unknown, defaulting to 1000 [ 188.808262][T19981] wg1 speed is unknown, defaulting to 1000 [ 188.812569][T19981] wg1 speed is unknown, defaulting to 1000 [ 188.857377][T19982] vlan0: entered promiscuous mode [ 188.945647][T19981] infiniband syz2: set down [ 188.948134][ T50] wg1 speed is unknown, defaulting to 1000 [ 188.950162][T19981] infiniband syz2: added wg1 [ 188.953213][T19981] syz2: rxe_create_qp: returned err = -2 [ 188.955210][T19981] infiniband syz2: Couldn't create ib_mad QP1 [ 188.957492][T19981] infiniband syz2: Couldn't open port 1 [ 188.979434][T19981] RDS/IB: syz2: added [ 188.982132][T19981] smc: adding ib device syz2 with port count 1 [ 188.986576][T19981] smc: ib device syz2 port 1 has no pnetid [ 188.989962][ T6008] wg1 speed is unknown, defaulting to 1000 [ 188.994451][T19981] wg1 speed is unknown, defaulting to 1000 [ 189.104391][T19981] wg1 speed is unknown, defaulting to 1000 [ 189.251325][T19981] wg1 speed is unknown, defaulting to 1000 [ 189.507881][T20005] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2346'. [ 189.516126][T20008] netlink: 'syz.2.2347': attribute type 8 has an invalid length. [ 189.519428][T20008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2347'. [ 189.590399][T20017] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2350'. [ 190.410309][ T40] audit: type=1400 audit(1772102572.886:8293): avc: denied { mounton } for pid=20072 comm="syz.0.2362" path="/798/file0" dev="tmpfs" ino=4300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 190.485108][ T5931] Bluetooth: hci4: command tx timeout [ 190.503956][T20077] netlink: 'syz.0.2363': attribute type 1 has an invalid length. [ 190.507290][T20077] netlink: 'syz.0.2363': attribute type 2 has an invalid length. [ 190.562719][ C2] net_ratelimit: 2 callbacks suppressed [ 190.562731][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 190.899418][ T5931] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 190.993879][T20110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20110 comm=syz.2.2368 [ 191.533254][ T8109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.602786][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 192.086566][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 192.091425][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 192.095329][ T5939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 192.098944][ T5939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 192.102404][ T5939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 192.125856][T20164] Failed to initialize the IGMP autojoin socket (err -2) [ 192.191673][ T40] audit: type=1400 audit(1772102574.666:8294): avc: denied { remount } for pid=20173 comm="syz.2.2379" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 192.563214][ T5939] Bluetooth: hci4: command tx timeout [ 192.642822][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 193.095756][ T5931] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 193.104683][ T5931] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 193.108118][ T5931] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 193.115829][ T5931] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 193.119389][ T5931] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 193.137809][T20214] Failed to initialize the IGMP autojoin socket (err -2) [ 193.224224][T20232] Failed to initialize the IGMP autojoin socket (err -2) [ 193.387543][T19695] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 193.396097][T19695] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 193.402358][T19695] wireguard: wg0: Could not create IPv4 socket [ 193.410905][T19695] wireguard: wg1: Could not create IPv4 socket [ 193.415011][T19695] wireguard: wg2: Could not create IPv4 socket [ 193.682802][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 194.082937][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 194.223837][ T40] audit: type=1400 audit(1772102576.706:8295): avc: denied { create } for pid=20276 comm="syz.0.2392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 194.240457][ T5931] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 194.247210][ T5931] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 194.250006][ T5931] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 194.251091][ T40] audit: type=1400 audit(1772102576.706:8296): avc: denied { setopt } for pid=20276 comm="syz.0.2392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 194.257054][ T5931] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 194.267511][ T5931] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 194.286777][T20281] Failed to initialize the IGMP autojoin socket (err -2) [ 194.722712][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 194.789562][ T5931] Bluetooth: hci1: unexpected event for opcode 0x042c [ 194.964425][ T5931] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 194.967387][ T5931] Bluetooth: hci0: Injecting HCI hardware error event [ 194.970810][ T5931] Bluetooth: hci0: hardware error 0x00 [ 195.488882][T20390] openvswitch: netlink: IP tunnel dst address not specified [ 195.534926][T20390] __nla_validate_parse: 8 callbacks suppressed [ 195.534939][T20390] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2406'. [ 195.541715][T20394] openvswitch: netlink: IP tunnel dst address not specified [ 195.747579][T20420] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2414'. [ 195.762707][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 195.783807][T20422] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2415'. [ 195.793891][T20422] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2415'. [ 195.885456][T20433] netlink: 'syz.0.2419': attribute type 1 has an invalid length. [ 195.888639][T20433] netlink: 'syz.0.2419': attribute type 2 has an invalid length. [ 196.334182][ T5939] Bluetooth: hci3: command tx timeout [ 196.667395][ T5939] Bluetooth: hci0: unexpected event 0x14 length: 10 > 6 [ 196.729308][T20434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.802870][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 196.823835][T20448] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2425'. [ 196.934022][T20457] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2428'. [ 197.052723][ T5931] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 197.076882][T20470] tmpfs: Bad value for 'mpol' [ 197.150549][T20474] tmpfs: Unknown parameter 'Ö&üæBEï>Û]Ûõœ']ÔoRù1KU£' [ 197.153964][T20474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2434'. [ 197.486526][T20548] tmpfs: Unknown parameter 'usrquota‘%|| Žz­TÈ å‰¿#2™¡`ÃÏÓ®Ò©¥^ÿõ• <Á™‰rá?½u˜ÃøÒQ#Æg …ÖG…X' [ 197.492979][T20548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2438'. [ 197.498643][T20548] : entered promiscuous mode [ 197.538992][T20552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2439'. [ 197.717316][T20561] netlink: zone id is out of range [ 197.719772][T20561] netlink: zone id is out of range [ 197.722301][T20561] netlink: set zone limit has 8 unknown bytes [ 197.761046][ T40] audit: type=1326 audit(1772102580.236:8297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20567 comm="syz.0.2445" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65b679c629 code=0x0 [ 197.842831][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 198.134208][T20581] overlayfs: failed to resolve './bus': -2 [ 198.406069][ T5931] Bluetooth: hci3: command tx timeout [ 198.882737][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 199.204235][T20281] netdevsim netdevsim4 netdevsim0: renamed from eth10 [ 199.217265][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.219329][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.220394][T20281] netdevsim netdevsim4 netdevsim1: renamed from eth11 [ 199.228604][T20281] netdevsim netdevsim4 netdevsim2: renamed from eth12 [ 199.234447][T20281] netdevsim netdevsim4 netdevsim3: renamed from eth13 [ 199.497415][T20281] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 199.509650][T20281] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 199.518083][T20281] wireguard: wg0: Could not create IPv4 socket [ 199.524402][T20281] wireguard: wg1: Could not create IPv4 socket [ 199.527577][T20281] wireguard: wg2: Could not create IPv4 socket [ 199.922755][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 199.927534][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 199.933848][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 199.937687][ T5939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 199.942175][ T5939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 199.951325][ T5939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 199.992183][T20676] Failed to initialize the IGMP autojoin socket (err -2) [ 200.597001][T20733] Failed to initialize the IGMP autojoin socket (err -2) [ 200.972736][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 201.213188][T20676] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 201.220566][T20676] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 201.235033][T20676] wireguard: wg0: Could not create IPv4 socket [ 201.244640][T20676] wireguard: wg1: Could not create IPv4 socket [ 201.257323][T20676] wireguard: wg2: Could not create IPv4 socket [ 201.425307][T20785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2469'. [ 201.436273][T20785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2469'. [ 201.447629][T20785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2469'. [ 201.452228][T20785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2469'. [ 201.803859][T20835] openvswitch: netlink: Missing key (keys=40, expected=80) [ 201.919931][ T5931] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 201.969565][T20847] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.012809][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 202.138162][T20853] netlink: 'syz.2.2485': attribute type 8 has an invalid length. [ 202.141501][T20853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2485'. [ 202.294375][ T5931] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 202.299262][T20863] batadv_slave_1: entered promiscuous mode [ 202.317727][T20863] netlink: 'syz.2.2487': attribute type 1 has an invalid length. [ 202.351080][T20862] batadv_slave_1: left promiscuous mode [ 202.375283][T20866] netlink: 'syz.2.2488': attribute type 1 has an invalid length. [ 202.377811][T20866] netlink: 'syz.2.2488': attribute type 1 has an invalid length. [ 202.398713][T20868] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2489'. [ 202.431900][T20868] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2489'. [ 203.042935][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 203.655873][ T5931] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 204.082705][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 204.206182][T20928] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2506'. [ 204.262467][ T40] audit: type=1400 audit(1772102586.737:8298): avc: denied { map } for pid=20927 comm="syz.2.2506" path="socket:[48874]" dev="sockfs" ino=48874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 204.302902][ T40] audit: type=1400 audit(1772102586.747:8299): avc: denied { read write } for pid=20927 comm="syz.2.2506" path="socket:[48874]" dev="sockfs" ino=48874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 204.568016][T20943] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 204.574727][T20943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2509'. [ 204.616546][ T40] audit: type=1400 audit(1772102587.097:8300): avc: denied { watch_with_perm } for pid=20953 comm="syz.2.2512" path="/888/bus" dev="tmpfs" ino=4755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 205.122828][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 206.172639][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 206.580709][ T40] audit: type=1400 audit(1772102589.057:8301): avc: denied { setopt } for pid=20981 comm="syz.2.2520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 206.603375][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 206.608089][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 206.611507][ T5939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 206.618116][ T5939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 206.620056][ T40] audit: type=1326 audit(1772102589.097:8302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20989 comm="syz.0.2521" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65b679c629 code=0x0 [ 206.621637][ T5939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 206.648984][T20984] Failed to initialize the IGMP autojoin socket (err -2) [ 206.932973][T21046] netlink: 'syz.0.2529': attribute type 1 has an invalid length. [ 207.202694][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 207.335584][T20984] netdevsim netdevsim4 netdevsim0: renamed from eth10 [ 207.345911][T20984] netdevsim netdevsim4 netdevsim1: renamed from eth11 [ 207.353869][T20984] netdevsim netdevsim4 netdevsim2: renamed from eth12 [ 207.361601][T20984] netdevsim netdevsim4 netdevsim3: renamed from eth13 [ 207.705343][T20984] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 207.711617][T20984] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 207.718673][T20984] wireguard: wg0: Could not create IPv4 socket [ 207.721806][T20984] wireguard: wg1: Could not create IPv4 socket [ 207.725227][T20984] wireguard: wg2: Could not create IPv4 socket [ 208.242731][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 208.254977][ T5931] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.262425][ T5931] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.267158][ T5931] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.270063][ T5931] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.284798][ T5931] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.287333][T21138] trusted_key: encrypted_key: insufficient parameters specified [ 208.311331][T21130] Failed to initialize the IGMP autojoin socket (err -2) [ 208.322022][T21142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2537'. [ 208.413592][T21135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2535'. [ 208.416828][T21135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2535'. [ 208.420394][T21135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2535'. [ 208.424223][T21135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2535'. [ 208.604416][T21191] IPv6: Can't replace route, no match found [ 208.928916][T21216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2547'. [ 209.086298][ T40] audit: type=1400 audit(1772102591.567:8303): avc: denied { accept } for pid=21243 comm="syz.2.2551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 209.282755][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 209.293353][T21280] netlink: 'syz.2.2556': attribute type 10 has an invalid length. [ 209.298523][T21280] netlink: 'syz.2.2556': attribute type 10 has an invalid length. [ 209.382396][T21130] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 209.391019][T21130] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 209.399660][T21130] wireguard: wg0: Could not create IPv4 socket [ 209.404195][T21130] wireguard: wg1: Could not create IPv4 socket [ 209.407411][T21130] wireguard: wg2: Could not create IPv4 socket [ 209.460828][T21295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2558'. [ 209.464404][T21295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2558'. [ 209.469754][T21295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2558'. [ 209.512627][ T40] audit: type=1400 audit(1772102591.987:8304): avc: denied { map } for pid=21294 comm="syz.0.2558" path="socket:[52543]" dev="sockfs" ino=52543 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 209.520195][ T40] audit: type=1400 audit(1772102591.987:8305): avc: denied { read } for pid=21294 comm="syz.0.2558" path="socket:[52543]" dev="sockfs" ino=52543 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 209.720899][T21329] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2564'. [ 209.724606][T21329] openvswitch: netlink: Flow actions attr not present in new flow. [ 210.332730][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 210.556522][T21368] tipc: Enabling of bearer rejected, failed to enable media [ 210.561308][T21368] tipc: Enabling of bearer rejected, failed to enable media [ 211.000995][T21397] overlayfs: failed to clone upperpath [ 211.147146][ T40] audit: type=1400 audit(1772102593.627:8306): avc: denied { setattr } for pid=21405 comm="syz.0.2585" name="[io_uring]" dev="anon_inodefs" ino=52798 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 211.363060][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 211.869032][T21431] overlayfs: failed to clone upperpath [ 212.044531][T21444] cgroup: Unknown subsys name '€' [ 212.046962][T21444] cgroup: Unknown subsys name '€' [ 212.049364][T21444] cgroup: Unknown subsys name '€' [ 212.051726][T21444] cgroup: Unknown subsys name '€' [ 212.057791][T21444] cgroup: Unknown subsys name '€' [ 212.059960][T21444] cgroup: Unknown subsys name '€' [ 212.062249][T21444] cgroup: Unknown subsys name '€' [ 212.065770][T21444] cgroup: Unknown subsys name '€' [ 212.068172][T21444] cgroup: Unknown subsys name '€' [ 212.070477][T21444] cgroup: Unknown subsys name '€' [ 212.073257][T21444] cgroup: Unknown subsys name '€' [ 212.075565][T21444] cgroup: Unknown subsys name '€' [ 212.078042][T21444] cgroup: Unknown subsys name '€' [ 212.080352][T21444] cgroup: Unknown subsys name '€' [ 212.083750][T21444] cgroup: Unknown subsys name '€' [ 212.086057][T21444] cgroup: Unknown subsys name '€' [ 212.088064][T21444] cgroup: Unknown subsys name '€' [ 212.089833][T21444] cgroup: Unknown subsys name '€' [ 212.092064][T21444] cgroup: Unknown subsys name '€' [ 212.094439][T21444] cgroup: Unknown subsys name '€' [ 212.096160][T21444] cgroup: Unknown subsys name '€' [ 212.098259][T21444] cgroup: Unknown subsys name '€' [ 212.100552][T21444] cgroup: Unknown subsys name '€' [ 212.103296][T21444] cgroup: Unknown subsys name '€' [ 212.105675][T21444] cgroup: Unknown subsys name '€' [ 212.108083][T21444] cgroup: Unknown subsys name '€' [ 212.110521][T21444] cgroup: Unknown subsys name '€' [ 212.113894][T21444] cgroup: Unknown subsys name '€' [ 212.116267][T21444] cgroup: Unknown subsys name '€' [ 212.118618][T21444] cgroup: Unknown subsys name '€' [ 212.120911][T21444] cgroup: Unknown subsys name '€' [ 212.123016][T21444] cgroup: Unknown subsys name '€' [ 212.125383][T21444] cgroup: Unknown subsys name '€' [ 212.127749][T21444] cgroup: Unknown subsys name '€' [ 212.130078][T21444] cgroup: Unknown subsys name '€' [ 212.132507][T21444] cgroup: Unknown subsys name '€' [ 212.135663][T21444] cgroup: Unknown subsys name '€' [ 212.138008][T21444] cgroup: Unknown subsys name '€' [ 212.140251][T21444] cgroup: Unknown subsys name '€' [ 212.142342][T21444] cgroup: Unknown subsys name '€' [ 212.144993][T21444] cgroup: Unknown subsys name '€' [ 212.146776][T21444] cgroup: Unknown subsys name '€' [ 212.148503][T21444] cgroup: Unknown subsys name '€' [ 212.150265][T21444] cgroup: Unknown subsys name '€' [ 212.152220][T21444] cgroup: Unknown subsys name '€' [ 212.154445][T21444] cgroup: Unknown subsys name '€' [ 212.156279][T21444] cgroup: Unknown subsys name '€' [ 212.158020][T21444] cgroup: Unknown subsys name '€' [ 212.159771][T21444] cgroup: Unknown subsys name '€' [ 212.161750][T21444] cgroup: Unknown subsys name '€' [ 212.163818][T21444] cgroup: Unknown subsys name '€' [ 212.165932][T21444] cgroup: Unknown subsys name '€' [ 212.168371][T21444] cgroup: Unknown subsys name '€' [ 212.170687][T21444] cgroup: Unknown subsys name '€' [ 212.174002][T21444] cgroup: Unknown subsys name '€' [ 212.176362][T21444] cgroup: Unknown subsys name '€' [ 212.178794][T21444] cgroup: Unknown subsys name '€' [ 212.181088][T21444] cgroup: Unknown subsys name '€' [ 212.183812][T21444] cgroup: Unknown subsys name '€' [ 212.186115][T21444] cgroup: Unknown subsys name '€' [ 212.188465][T21444] cgroup: Unknown subsys name '€' [ 212.190899][T21444] cgroup: Unknown subsys name '€' [ 212.193771][T21444] cgroup: Unknown subsys name '€' [ 212.196143][T21444] cgroup: Unknown subsys name '€' [ 212.198456][T21444] cgroup: Unknown subsys name '€' [ 212.402705][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 213.442763][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 214.119409][ T5931] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.124388][ T5931] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.127244][ T5931] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.129838][ T5931] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.132345][ T5931] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.152293][T21480] Failed to initialize the IGMP autojoin socket (err -2) [ 214.482702][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 215.162074][T21527] __nla_validate_parse: 69 callbacks suppressed [ 215.162094][T21527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2614'. [ 215.291296][T21539] overlayfs: failed to clone lowerpath [ 215.294092][T21539] overlayfs: failed to clone lowerpath [ 215.297904][T21539] overlayfs: failed to clone lowerpath [ 215.320518][T21544] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2618'. [ 215.335976][T21544] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.340975][T21544] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.346349][T21544] .` (unregistering): Released all slaves [ 215.522757][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 215.809941][T21480] netdevsim netdevsim4 netdevsim0: renamed from eth10 [ 215.817507][T21480] netdevsim netdevsim4 netdevsim1: renamed from eth11 [ 215.825288][T21480] netdevsim netdevsim4 netdevsim2: renamed from eth12 [ 215.830472][T21480] netdevsim netdevsim4 netdevsim3: renamed from eth13 [ 216.078193][T21480] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 216.086076][T21480] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 216.092245][T21480] wireguard: wg0: Could not create IPv4 socket [ 216.099388][T21480] wireguard: wg1: Could not create IPv4 socket [ 216.103751][T21480] wireguard: wg2: Could not create IPv4 socket [ 216.562722][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 216.790488][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.795127][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.799052][ T5939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.802771][ T5939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.807526][ T5939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.823614][T21620] Failed to initialize the IGMP autojoin socket (err -2) [ 217.602777][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 217.654426][T21681] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2622'. [ 217.786191][T21702] Failed to initialize the IGMP autojoin socket (err -2) [ 217.842557][T21705] netlink: zone id is out of range [ 217.844209][T21705] netlink: get zone limit has 4 unknown bytes [ 217.894819][T21620] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 217.904764][T21620] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 217.920619][T21620] wireguard: wg0: Could not create IPv4 socket [ 217.924942][T21620] wireguard: wg1: Could not create IPv4 socket [ 217.928056][T21620] wireguard: wg2: Could not create IPv4 socket [ 217.938226][T21712] overlayfs: failed to clone upperpath [ 218.160010][T21769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2641'. [ 218.257762][T21783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2646'. [ 218.351812][T21789] tipc: Enabled bearer , priority 10 [ 218.506167][T21799] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2652'. [ 218.509152][T21799] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2652'. [ 218.564894][ T40] audit: type=1400 audit(1772102601.047:8307): avc: denied { getopt } for pid=21809 comm="syz.0.2654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 218.642833][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 218.681437][T21819] openvswitch: netlink: Actions may not be safe on all matching packets [ 218.751880][T21825] trusted_key: encrypted_key: keylen parameter is missing [ 218.828773][T21836] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2662'. [ 218.884890][T21842] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2665'. [ 218.990411][T21854] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2669'. [ 219.222331][ T40] audit: type=1400 audit(1772102601.697:8308): avc: denied { relabelfrom } for pid=21878 comm="syz.2.2677" name="" dev="pipefs" ino=53148 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 219.411218][T21905] IPVS: Error during creation of socket; terminating [ 219.682867][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 219.982908][T21968] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 220.723086][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 221.762865][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 222.526855][T22030] overlayfs: failed to clone upperpath [ 222.538986][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 222.542356][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 222.545885][ T5939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 222.549639][ T5939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 222.552332][ T5939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 222.568325][T22031] Failed to initialize the IGMP autojoin socket (err -2) [ 222.684112][T22050] __nla_validate_parse: 6 callbacks suppressed [ 222.684126][T22050] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2720'. [ 222.727283][T22064] netlink: 'syz.2.2721': attribute type 8 has an invalid length. [ 222.730417][T22064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2721'. [ 222.802806][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 222.888875][T22076] 9pnet_virtio: no channels available for device syz [ 223.461730][T22031] netdevsim netdevsim4 netdevsim0: renamed from eth10 [ 223.466889][T22031] netdevsim netdevsim4 netdevsim1: renamed from eth11 [ 223.474438][T22031] netdevsim netdevsim4 netdevsim2: renamed from eth12 [ 223.481932][T22031] netdevsim netdevsim4 netdevsim3: renamed from eth13 [ 223.741515][T22031] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 223.749437][T22031] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 223.757235][T22031] wireguard: wg0: Could not create IPv4 socket [ 223.760405][T22031] wireguard: wg1: Could not create IPv4 socket [ 223.763902][T22031] wireguard: wg2: Could not create IPv4 socket [ 223.842733][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 224.473785][ T5931] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 224.478246][ T5931] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 224.481248][ T5931] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 224.486168][ T5931] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 224.493191][ T5931] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 224.520012][T22154] Failed to initialize the IGMP autojoin socket (err -2) [ 224.892696][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 225.424812][T22217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2733'. [ 225.429030][T22217] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2733'. [ 225.922712][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 226.223110][T22219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2735'. [ 226.251764][T22219] bond11: entered promiscuous mode [ 226.253797][T22219] 8021q: adding VLAN 0 to HW filter on device bond11 [ 226.263923][T22219] 8021q: adding VLAN 0 to HW filter on device bond11 [ 226.266222][T22219] bond11: (slave sit2): The slave device specified does not support setting the MAC address [ 226.269745][T22219] bond11: (slave sit2): Error -95 calling set_mac_address [ 226.562818][ T5939] Bluetooth: hci3: command tx timeout [ 226.962729][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 227.025239][ T40] audit: type=1400 audit(1772102609.507:8309): avc: denied { bind } for pid=22310 comm="syz.0.2753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 227.418077][ T40] audit: type=1804 audit(1772102609.897:8310): pid=22345 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.2762" name="file0" dev="ramfs" ino=55036 res=1 errno=0 [ 227.429232][T22342] bond12: up delay (8) is not a multiple of miimon (5), value rounded to 5 ms [ 227.432155][T22342] bond12: entered allmulticast mode [ 227.449776][T22342] bond13: up delay (8) is not a multiple of miimon (5), value rounded to 5 ms [ 227.453284][T22342] bond13: entered allmulticast mode [ 227.493289][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 227.864838][T22437] netlink: 'syz.2.2771': attribute type 1 has an invalid length. [ 227.886812][T22437] 8021q: adding VLAN 0 to HW filter on device bond14 [ 227.940186][ T40] audit: type=1400 audit(1772102610.417:8311): avc: denied { read } for pid=22473 comm="syz.2.2773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 228.012760][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 228.642726][ T5939] Bluetooth: hci3: command tx timeout [ 228.820305][ T5939] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 228.844013][T22488] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22488 comm=syz.2.2777 [ 229.052734][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 229.124394][T22510] tipc: Enabling of bearer rejected, failed to enable media [ 230.082732][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 230.446891][T22515] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2785'. [ 230.504293][ T5931] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 230.508033][ T5931] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 230.510931][ T5931] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 230.515012][ T5931] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 230.519043][ T5931] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 230.536819][T22523] Failed to initialize the IGMP autojoin socket (err -2) [ 230.606307][T22540] cgroup: release_agent respecified [ 230.633949][T22542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2792'. [ 230.722675][ T5939] Bluetooth: hci3: command tx timeout [ 230.726571][T22558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2796'. [ 231.122719][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 231.487713][T22154] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 231.498771][T22154] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 231.508526][T22154] wireguard: wg0: Could not create IPv4 socket [ 231.513392][T22154] wireguard: wg1: Could not create IPv4 socket [ 231.517993][T22154] wireguard: wg2: Could not create IPv4 socket [ 232.172702][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 232.177069][T22610] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=6 sclass=netlink_xfrm_socket pid=22610 comm=syz.0.2799 [ 232.210647][T22610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=22610 comm=syz.0.2799 [ 232.211062][ T5931] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 232.219609][ T5931] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 232.223493][ T5931] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 232.226675][ T5931] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 232.229321][ T5931] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 232.255327][T22614] Failed to initialize the IGMP autojoin socket (err -2) [ 232.407659][T22654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2805'. [ 232.455659][T22660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2806'. [ 232.461181][T22660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2806'. [ 232.545925][T22672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2806'. [ 232.970406][T22695] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2812'. [ 233.040794][T22699] Failed to initialize the IGMP autojoin socket (err -2) [ 233.212683][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 233.423771][T22720] netlink: 'syz.0.2819': attribute type 1 has an invalid length. [ 233.525048][T22728] openvswitch: netlink: IP tunnel dst address not specified [ 234.252691][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 234.255039][ T5939] Bluetooth: hci3: command tx timeout [ 234.338576][T22743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2824'. [ 234.341956][T22743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2824'. [ 234.345949][T22743] netlink: 'syz.0.2824': attribute type 7 has an invalid length. [ 234.911334][ T40] audit: type=1400 audit(1772102617.387:8312): avc: denied { setopt } for pid=22760 comm="syz.2.2831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 235.175708][ T40] audit: type=1400 audit(1772102617.657:8313): avc: denied { nlmsg_read } for pid=22781 comm="syz.2.2840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 235.282710][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 236.322781][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 236.325219][ T5939] Bluetooth: hci3: command tx timeout [ 236.549934][T22831] __nla_validate_parse: 1 callbacks suppressed [ 236.549952][T22831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2852'. [ 236.645505][T22837] SELinux: Context /sbin/dhclient is not valid (left unmapped). [ 236.650930][ T40] audit: type=1400 audit(1772102619.127:8314): avc: denied { relabelto } for pid=22836 comm="syz.2.2854" name="file2" dev="tmpfs" ino=5544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="/sbin/dhclient" [ 236.672638][ T40] audit: type=1400 audit(1772102619.127:8315): avc: denied { associate } for pid=22836 comm="syz.2.2854" name="file2" dev="tmpfs" ino=5544 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="/sbin/dhclient" [ 236.692620][ T40] audit: type=1400 audit(1772102619.167:8316): avc: denied { unlink } for pid=5924 comm="syz-executor" name="file2" dev="tmpfs" ino=5544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="/sbin/dhclient" [ 236.753727][T22835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2853'. [ 236.887550][T22865] ================================================================== [ 236.890942][T22865] BUG: KASAN: slab-use-after-free in __list_add_valid_or_report+0x105/0x130 [ 236.894761][T22865] Read of size 8 at addr ffff88801f6b9400 by task syz.0.2862/22865 [ 236.899714][T22865] [ 236.901116][T22865] CPU: 2 UID: 0 PID: 22865 Comm: syz.0.2862 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.901145][T22865] Tainted: [L]=SOFTLOCKUP [ 236.901153][T22865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 236.901165][T22865] Call Trace: [ 236.901172][T22865] [ 236.901179][T22865] dump_stack_lvl+0x100/0x190 [ 236.901212][T22865] print_report+0x156/0x4c9 [ 236.901236][T22865] ? __virt_addr_valid+0x81/0x620 [ 236.901263][T22865] ? __phys_addr+0xe8/0x180 [ 236.901289][T22865] ? __list_add_valid_or_report+0x105/0x130 [ 236.901309][T22865] kasan_report+0xdf/0x1e0 [ 236.901336][T22865] ? __list_add_valid_or_report+0x105/0x130 [ 236.901366][T22865] __list_add_valid_or_report+0x105/0x130 [ 236.901387][T22865] clone_mnt+0x633/0x930 [ 236.901413][T22865] copy_tree+0xfc/0xbf0 [ 236.901431][T22865] ? __pfx_down_write+0x10/0x10 [ 236.901455][T22865] copy_mnt_ns+0x2bd/0xc30 [ 236.901476][T22865] ? create_new_namespaces+0x30/0xac0 [ 236.901500][T22865] ? rcu_is_watching+0x12/0xc0 [ 236.901521][T22865] create_new_namespaces+0xd3/0xac0 [ 236.901546][T22865] ? bpf_lsm_capable+0x9/0x10 [ 236.901562][T22865] ? security_capable+0x80/0x260 [ 236.901590][T22865] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 236.901613][T22865] ksys_unshare+0x455/0xab0 [ 236.901639][T22865] ? __pfx_ksys_unshare+0x10/0x10 [ 236.901668][T22865] __x64_sys_unshare+0x31/0x40 [ 236.901693][T22865] do_syscall_64+0x106/0xf80 [ 236.901710][T22865] ? clear_bhb_loop+0x40/0x90 [ 236.901730][T22865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.901748][T22865] RIP: 0033:0x7f65b679c629 [ 236.901764][T22865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.901781][T22865] RSP: 002b:00007f65b7621028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 236.901800][T22865] RAX: ffffffffffffffda RBX: 00007f65b6a15fa0 RCX: 00007f65b679c629 [ 236.901812][T22865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020400 [ 236.901823][T22865] RBP: 00007f65b6832b39 R08: 0000000000000000 R09: 0000000000000000 [ 236.901834][T22865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.901844][T22865] R13: 00007f65b6a16038 R14: 00007f65b6a15fa0 R15: 00007ffe746264f8 [ 236.901863][T22865] [ 236.901869][T22865] [ 236.902659][ T40] audit: type=1400 audit(1772102619.377:8317): avc: denied { write } for pid=5848 comm="syz-executor" path="pipe:[2535]" dev="pipefs" ino=2535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 236.906372][T22865] Allocated by task 21933: [ 236.906386][T22865] kasan_save_stack+0x30/0x50 [ 237.006773][T22865] kasan_save_track+0x14/0x30 [ 237.008480][T22865] __kasan_slab_alloc+0x89/0x90 [ 237.010259][T22865] kmem_cache_alloc_noprof+0x241/0x6e0 [ 237.012230][T22865] alloc_vfsmnt+0x23/0x6a0 [ 237.013854][T22865] clone_mnt+0x4b/0x930 [ 237.015308][T22865] vfs_open_tree+0xb02/0x1500 [ 237.017037][T22865] __x64_sys_open_tree+0xa3/0x150 [ 237.018881][T22865] do_syscall_64+0x106/0xf80 [ 237.020565][T22865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.022727][T22865] [ 237.023625][T22865] Freed by task 33: [ 237.025061][T22865] kasan_save_stack+0x30/0x50 [ 237.026820][T22865] kasan_save_track+0x14/0x30 [ 237.028638][T22865] kasan_save_free_info+0x3b/0x70 [ 237.030470][T22865] __kasan_slab_free+0x5f/0x80 [ 237.032212][T22865] kmem_cache_free+0x124/0x6a0 [ 237.033976][T22865] rcu_core+0x5a2/0x10d0 [ 237.035640][T22865] handle_softirqs+0x1eb/0x9e0 [ 237.037408][T22865] run_ksoftirqd+0x38/0x60 [ 237.039045][T22865] smpboot_thread_fn+0x3d3/0xaa0 [ 237.040849][T22865] kthread+0x370/0x450 [ 237.042361][T22865] ret_from_fork+0x754/0xd80 [ 237.044062][T22865] ret_from_fork_asm+0x1a/0x30 [ 237.045834][T22865] [ 237.046750][T22865] Last potentially related work creation: [ 237.048806][T22865] kasan_save_stack+0x30/0x50 [ 237.050576][T22865] kasan_record_aux_stack+0xa7/0xc0 [ 237.052472][T22865] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 237.054732][T22865] task_work_run+0x150/0x240 [ 237.056220][T22865] exit_to_user_mode_loop+0x100/0x4a0 [ 237.058018][T22865] do_syscall_64+0x67c/0xf80 [ 237.059561][T22865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.061474][T22865] [ 237.062275][T22865] Second to last potentially related work creation: [ 237.064411][T22865] kasan_save_stack+0x30/0x50 [ 237.065944][T22865] kasan_record_aux_stack+0xa7/0xc0 [ 237.067684][T22865] task_work_add+0x28b/0x3b0 [ 237.069461][T22865] mntput_no_expire_slowpath+0x3da/0xb00 [ 237.071276][T22865] mntput_no_expire+0x1fd/0x220 [ 237.072843][T22865] mntput+0x6b/0xa0 [ 237.074099][T22865] vfs_open_tree+0x1235/0x1500 [ 237.075647][T22865] __x64_sys_open_tree+0xa3/0x150 [ 237.077338][T22865] do_syscall_64+0x106/0xf80 [ 237.078848][T22865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.080732][T22865] [ 237.081470][T22865] The buggy address belongs to the object at ffff88801f6b9340 [ 237.081470][T22865] which belongs to the cache mnt_cache of size 352 [ 237.085777][T22865] The buggy address is located 192 bytes inside of [ 237.085777][T22865] freed 352-byte region [ffff88801f6b9340, ffff88801f6b94a0) [ 237.090130][T22865] [ 237.090922][T22865] The buggy address belongs to the physical page: [ 237.092967][T22865] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801f6b8540 pfn:0x1f6b8 [ 237.096141][T22865] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 237.098878][T22865] memcg:ffff888036c23501 [ 237.100246][T22865] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 237.102940][T22865] page_type: f5(slab) [ 237.104266][T22865] raw: 00fff00000000240 ffff88801d6ac280 ffffea0000ec6510 ffffea0000968c90 [ 237.107018][T22865] raw: ffff88801f6b8540 0000000800120010 00000000f5000000 ffff888036c23501 [ 237.109765][T22865] head: 00fff00000000240 ffff88801d6ac280 ffffea0000ec6510 ffffea0000968c90 [ 237.112439][T22865] head: ffff88801f6b8540 0000000800120010 00000000f5000000 ffff888036c23501 [ 237.115174][T22865] head: 00fff00000000001 ffffea00007dae01 00000000ffffffff 00000000ffffffff [ 237.118044][T22865] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 237.120786][T22865] page dumped because: kasan: bad access detected [ 237.122828][T22865] page_owner tracks the page as allocated [ 237.124688][T22865] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 36, tgid 36 (kdevtmpfs), ts 2209449613, free_ts 0 [ 237.130893][T22865] post_alloc_hook+0x153/0x170 [ 237.132444][T22865] get_page_from_freelist+0x111d/0x3140 [ 237.134224][T22865] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 237.136112][T22865] new_slab+0xa6/0x6d0 [ 237.137456][T22865] refill_objects+0x26b/0x400 [ 237.138994][T22865] __pcs_replace_empty_main+0x19f/0x600 [ 237.140854][T22865] kmem_cache_alloc_noprof+0x480/0x6e0 [ 237.142616][T22865] alloc_vfsmnt+0x23/0x6a0 [ 237.144198][T22865] clone_mnt+0x4b/0x930 [ 237.145561][T22865] copy_tree+0xfc/0xbf0 [ 237.146994][T22865] copy_mnt_ns+0x2bd/0xc30 [ 237.148574][T22865] create_new_namespaces+0xd3/0xac0 [ 237.150254][T22865] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 237.152053][T22865] ksys_unshare+0x455/0xab0 [ 237.153523][T22865] devtmpfs_setup+0x14/0xb0 [ 237.155056][T22865] devtmpfsd+0x15/0x50 [ 237.156417][T22865] page_owner free stack trace missing [ 237.158132][T22865] [ 237.158915][T22865] Memory state around the buggy address: [ 237.160706][T22865] ffff88801f6b9300: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 237.163240][T22865] ffff88801f6b9380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 237.165843][T22865] >ffff88801f6b9400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 237.168435][T22865] ^ [ 237.169777][T22865] ffff88801f6b9480: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 237.172675][T22865] ffff88801f6b9500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 237.175258][T22865] ================================================================== [ 237.183826][T22865] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 237.186142][T22865] CPU: 2 UID: 0 PID: 22865 Comm: syz.0.2862 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.189915][T22865] Tainted: [L]=SOFTLOCKUP [ 237.191325][T22865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.194483][T22865] Call Trace: [ 237.195555][T22865] [ 237.196534][T22865] dump_stack_lvl+0x100/0x190 [ 237.198078][T22865] vpanic+0x552/0x970 [ 237.199367][T22865] ? __pfx_vpanic+0x10/0x10 [ 237.200823][T22865] ? __list_add_valid_or_report+0x105/0x130 [ 237.202713][T22865] panic+0xd1/0xe0 [ 237.203929][T22865] ? __pfx_panic+0x10/0x10 [ 237.205351][T22865] ? __list_add_valid_or_report+0x105/0x130 [ 237.207404][T22865] ? preempt_schedule_common+0x42/0xc0 [ 237.209154][T22865] check_panic_on_warn.cold+0x19/0x34 [ 237.210877][T22865] end_report.part.0+0x3a/0x90 [ 237.212402][T22865] kasan_report.cold+0xe/0x18 [ 237.213903][T22865] ? __list_add_valid_or_report+0x105/0x130 [ 237.215814][T22865] __list_add_valid_or_report+0x105/0x130 [ 237.217804][T22865] clone_mnt+0x633/0x930 [ 237.219222][T22865] copy_tree+0xfc/0xbf0 [ 237.220557][T22865] ? __pfx_down_write+0x10/0x10 [ 237.222134][T22865] copy_mnt_ns+0x2bd/0xc30 [ 237.223574][T22865] ? create_new_namespaces+0x30/0xac0 [ 237.225295][T22865] ? rcu_is_watching+0x12/0xc0 [ 237.226936][T22865] create_new_namespaces+0xd3/0xac0 [ 237.228776][T22865] ? bpf_lsm_capable+0x9/0x10 [ 237.230276][T22865] ? security_capable+0x80/0x260 [ 237.231888][T22865] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 237.233676][T22865] ksys_unshare+0x455/0xab0 [ 237.235150][T22865] ? __pfx_ksys_unshare+0x10/0x10 [ 237.236759][T22865] __x64_sys_unshare+0x31/0x40 [ 237.238314][T22865] do_syscall_64+0x106/0xf80 [ 237.239794][T22865] ? clear_bhb_loop+0x40/0x90 [ 237.241323][T22865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.243207][T22865] RIP: 0033:0x7f65b679c629 [ 237.244631][T22865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.251276][T22865] RSP: 002b:00007f65b7621028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 237.254744][T22865] RAX: ffffffffffffffda RBX: 00007f65b6a15fa0 RCX: 00007f65b679c629 [ 237.258125][T22865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020400 [ 237.261399][T22865] RBP: 00007f65b6832b39 R08: 0000000000000000 R09: 0000000000000000 [ 237.264691][T22865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.267998][T22865] R13: 00007f65b6a16038 R14: 00007f65b6a15fa0 R15: 00007ffe746264f8 [ 237.271337][T22865] [ 237.273299][T22865] Kernel Offset: disabled [ 237.275170][T22865] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:56:58 Registers: info registers vcpu 0 CPU#0 RAX=ffffc90003340001 RBX=ffffc9000333f610 RCX=ffffffff9186d04c RDX=ffffc9000333f970 RSI=ffffc9000333f968 RDI=ffffc9000333f620 RBP=ffffc9000333f968 RSP=ffffc9000333f570 R8 =ffffffff9186d050 R9 =0000000000000007 R10=0000000000000200 R11=00000000000174ca R12=0000000000000008 R13=ffffc90003338000 R14=ffffc9000333f970 R15=ffffc9000333f644 RIP=ffffffff81b7f8d8 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f223aaba740 ffffffff 00c00000 GS =0000 ffff8880d6348000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f83cb04e9d3 CR3=00000000379ae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=000000000000003f Opmask02=000000000100003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e2e2e2e2e2e2e2e 2e2e2e2e2e2e2e2e ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b7fea08ee0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f223ac8eb20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff00ff0000ff 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffff00 ff00ff00ff00ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5a415c5e2e194c5e 4f42134b4d4f485c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b5a40472e2e2e2f 2e262e2b2e242e22 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0030303030303031 31323000336d6973 766500303d73656d 616e66692e74656e ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000d0d0d0d0d0d0c 0c0f0d000e50544e 4b58000d004e5850 5c535b5413495853 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0048544150564544 0000000000000021 000039316e616c77 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000080005 0000000000000000 0000000000000000 0007001400000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80410004803e0004 0038326d69737768 0038000c00000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000e0024 0000000000080005 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0007001400000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64615f000a646420 5f61656420205f36 6d20202031342020 203220202031000a ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000009 RCX=0000000000000005 RDX=ffff88803bbb8000 RSI=ffffffff84fe8f4b RDI=0000000000000001 RBP=ffffc90005d3f2f8 RSP=ffffc90005d3f098 R8 =0000000000000001 R9 =0000000000000010 R10=000000000000000b R11=0000000000000000 R12=0000000000000261 R13=ffffc90005d3f150 R14=ffff88812ddc4288 R15=0000000000000a48 RIP=ffffffff82089c2a RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f2ebb75b300 ffffffff 00c00000 GS =0000 ffff8880d6448000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000564299357000 CR3=000000002775f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000b34 0000001000000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200028403400400 0280030280041890 030404001880032a 0000051600000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000401c710000802 4bcc00756d6d6f69 2f7665642f01ffff ffffffffffffe908 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0003000400208982 0800000401c71000 08004da0006e7574 2f74656e2f766564 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f01ffffffffffff ffffe50800031880 0400100002100006 015a8e0008000298 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030c020002960308 02000294032c0400 0290030208000288 0300020002860300 ZMM24=d25a9d11d25a9d11 d25a9d11d25a9d11 d25a9d11d25a9d11 d25a9d11d25a9d11 d25a9d11d25a9d11 d25a9d11d25a9d11 d25a9d11d25a9d11 d25a9d11d25a9d11 ZMM25=d1a26e3bd1a26e3b d1a26e3bd1a26e3b d1a26e3bd1a26e3b d1a26e3bd1a26e3b d1a26e3bd1a26e3b d1a26e3bd1a26e3b d1a26e3bd1a26e3b d1a26e3bd1a26e3b ZMM26=ee868277ee868277 ee868277ee868277 ee868277ee868277 ee868277ee868277 ee868277ee868277 ee868277ee868277 ee868277ee868277 ee868277ee868277 ZMM27=dec1dce5dec1dce5 dec1dce5dec1dce5 dec1dce5dec1dce5 dec1dce5dec1dce5 dec1dce5dec1dce5 dec1dce5dec1dce5 dec1dce5dec1dce5 dec1dce5dec1dce5 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=8d0f00008d0f0000 8d0f00008d0f0000 8d0f00008d0f0000 8d0f00008d0f0000 8d0f00008d0f0000 8d0f00008d0f0000 8d0f00008d0f0000 8d0f00008d0f0000 info registers vcpu 2 CPU#2 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8578f5c5 RDI=ffffffff9b49d940 RBP=ffffffff9b49d900 RSP=ffffc90003e7f648 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3130383838666666 R12=0000000000000000 R13=000000000000000a R14=0000000000000010 R15=ffffffff8578f560 RIP=ffffffff8578f5ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f65b76216c0 ffffffff 00c00000 GS =0000 ffff8880d6548000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f65b69ca020 CR3=000000001301d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe746269e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe746269e6 00007ffe746269ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65b683319f ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65b68331df ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65b6833343 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65b68331d1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65b69eb5f8 00007f65b69eb5c8 00007f65b69eb600 00007f65b69eb5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff84a8a806 RDX=ffff888027ed8000 RSI=ffffffff84a8a747 RDI=ffff888027ed8000 RBP=ffff88802e2c78c0 RSP=ffffc90003e0fbb8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffc90003e0fc28 R13=0000000000000040 R14=ffff88802e2c78c0 R15=ffff88803a939dc0 RIP=ffffffff82089c3f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f223aaba740 ffffffff 00c00000 GS =0000 ffff8880d6648000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f65b6785cc0 CR3=000000002b79a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001800000 Opmask01=0000000000008000 Opmask02=00000000d51303ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe0e69f1e8 00007ffe0e69f1e8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe0e69f6f0 0000003000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff0f 0e0d0c0b0a090807 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f223ac8eb20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000c1 0000726569666974 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1600000000000000 00000000000002ff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 66206e6f69746174 6963696c6f532072 6574756f5220676e 6979616c6564203a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373657264646120 4c4c20726f66206e 6f69746174696369 6c6f532072657475 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 414b4056051f5600 0056564057414144 054c4c05574a4305 4b4a4c5144514c46 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 386566203a367367 616c66726464615f 6669203a73726464 616e7261656c5f66 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b7ff512180 00007ffe0e6a0180 0000000000000014 000055b7ff512120 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffffbabbb bfef7fffff7e7bfe 6f745ff7ff76e57c 9f2077f7ffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 356e616c7720346e 616c7720336e616c 7720326e616c7720 30696669775f7472 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000443 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000