last executing test programs: 7.386987244s ago: executing program 1 (id=585): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x186}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ed2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x181}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040040}, 0x4) unshare(0x68040200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)={0x2c, r1, 0x22af6f5a04337dcd, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x29}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) 6.700064657s ago: executing program 3 (id=595): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x50, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @private1}}}]}]}, 0x50}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x1f) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000fc0)={0x40, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x40}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00') getdents(r4, &(0x7f0000001080)=""/4096, 0x1000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) getdents(r4, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000100bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e78270010720596bb3b4d821d976f5843061cc2e3afbae82d7"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.424835098s ago: executing program 3 (id=590): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a300000000058010000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038e3000d400acc20f896064e79c929702145fa63595955b57c5c023e63c8a0b353b0f092392779d44d411d6ad83ca91a8e8b282cc8bfb1ab91caa2ade3593a098f600f3e5645182a9ca5ace4cf126873c040cb3327edf3073be8b51d83cd436a3de9f9797c6d6bbb2a290d1c41dc2d836f9e12779d77160fe31758fff54b25fe4976ec2f65358361ce1aa371dc03936b25fa521423d30d6fd8e686ad9eef8dc1727308b716ab4cb4427bdc9d723e2f68c19720b3e4845cb19a245c71238051c5c201ddb4b8ee1f6c6ca36e130e8b6830d099231338203da1cf819ddd17f9f54507cd815b000c001040000000000000000508000840000044"], 0x1d0}}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000200)='./file0\x00', 0x60) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @private=0xa010100}, 0x4, 0x0, 0x1}}, 0x2e) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x4004) r5 = syz_open_dev$swradio(&(0x7f0000000f80), 0x1, 0x2) read(r5, &(0x7f0000000fc0)=""/4, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000180)) chdir(&(0x7f00000003c0)='./bus\x00') r6 = creat(&(0x7f0000000000)='./file0\x00', 0x2a) setxattr$security_ima(&(0x7f0000000280)='./file1\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=r2, @ANYRESHEX, @ANYRES32=r5, @ANYRESDEC], 0xff02, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) recvmsg(r7, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000004b80), 0x0, 0x4000c000) sendto$inet6(r8, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) 5.30037429s ago: executing program 2 (id=592): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1d0}}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000200)='./file0\x00', 0x60) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @private=0xa010100}, 0x4, 0x0, 0x1}}, 0x2e) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x4004) r5 = syz_open_dev$swradio(&(0x7f0000000f80), 0x1, 0x2) read(r5, &(0x7f0000000fc0)=""/4, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000180)) chdir(&(0x7f00000003c0)='./bus\x00') r6 = creat(&(0x7f0000000000)='./file0\x00', 0x2a) setxattr$security_ima(&(0x7f0000000280)='./file1\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=r2, @ANYRESHEX, @ANYRES32=r5, @ANYRESDEC], 0xff02, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) recvmsg(r7, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000004b80), 0x0, 0x4000c000) sendto$inet6(r8, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) 4.959668506s ago: executing program 1 (id=596): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYBLOB="fc9ce3c6294891424b59e5c361b50a465184b08bf21f89f5295f8b3e93438869905ffd3ecfe6659e5371ac96c1bb34c651b09b556c165f4e52556cab79a9d35df15fb20eba86708e8a3367b196644efea06384250a5790f0e4ec8f7f4d51364979548db9fa21cb80f3eb21d28d4d2137a843dc0a1cdb867a36b52a40e27ea5e15c785a8fa5498e6c15a0", @ANYBLOB="2e2c1f156f58a2951c5dc6d0d0e6d973f9d304fbd16f31a0f3a3a5a636419ed6a282e7"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x90) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f00000001c0)=0x400001, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={0x0, r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe2(0x0, 0x0) io_setup(0x2868b0, &(0x7f0000000240)) ioprio_set$uid(0x3, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) preadv(r1, 0x0, 0xffffffffffffffad, 0x8, 0x20000000) socket(0x0, 0x0, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000180)={0x6}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) 3.949731365s ago: executing program 1 (id=597): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="1b0000001a00010000000000000000000a0000003a01bf17384adae4c8e561ce0000000005988a0000000000902ec9f00000009b47894c5ce82ebbd82f11b194704efc496cf97696063d0da17fae56353b1c82a6d7a83df714f1cd9fc1cbb735ebfa83933cd07b82a5d2c3db36ba8574b926dfddbe99f13c83bf97c91a6ace9494e9b175d4c90d97be6e12a588352e547084b1c035cb4ddd062e1703c3bfee5c8a94075647501e", @ANYRES32=0x0, @ANYBLOB="000000001400010020010000000000000000", @ANYBLOB="76a79c7caf12e51ca93675861fdd6411b861686e0605d32ce5efeca8c470e4220ee470f9cfbcc6d065154abad38828274eee92fe953f87bb865c4a14f8f438af19d589c08915441bd4df0b6b1be091167c289c3e8315c158a5471174c026ec29824edc0967ddb72e29d5ab9c435e465b077cc7f71e02da5784fbab1d7fb248c9c035c5005acb7618b7f8b239371997b4b482a6772e895eda8acf"], 0x30}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000002740)=ANY=[@ANYBLOB="02000000010006000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="0400000000000000", @ANYRES32=0x0, @ANYBLOB="080003", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="080005", @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB="10000100000000002000000000000000"], 0x6c, 0x3) 3.76937846s ago: executing program 2 (id=598): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x1, 0x0, @val=@perf_event}, 0x40) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x2d, 0x0) 3.764768845s ago: executing program 3 (id=607): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a300000000058010000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038e3000d400acc20f896064e79c929702145fa63595955b57c5c023e63c8a0b353b0f092392779d44d411d6ad83ca91a8e8b282cc8bfb1ab91caa2ade3593a098f600f3e5645182a9ca5ace4cf126873c040cb3327edf3073be8b51d83cd436a3de9f9797c6d6bbb2a290d1c41dc2d836f9e12779d77160fe31758fff54b25fe4976ec2f65358361ce1aa371dc03936b25fa521423d30d6fd8e686ad9eef8dc1727308b716ab4cb4427bdc9d723e2f68c19720b3e4845cb19a245c71238051c5c201ddb4b8ee1f6c6ca36e130e8b6830d099231338203da1cf819ddd17f9f54507cd815b000c001040000000000000000508000840000044"], 0x1d0}}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000200)='./file0\x00', 0x60) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @private=0xa010100}, 0x4, 0x0, 0x1}}, 0x2e) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x4004) r5 = syz_open_dev$swradio(&(0x7f0000000f80), 0x1, 0x2) read(r5, &(0x7f0000000fc0)=""/4, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000180)) chdir(&(0x7f00000003c0)='./bus\x00') r6 = creat(&(0x7f0000000000)='./file0\x00', 0x2a) setxattr$security_ima(&(0x7f0000000280)='./file1\x00', &(0x7f0000000100), 0x0, 0xff02, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) recvmsg(r7, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000004b80), 0x0, 0x4000c000) sendto$inet6(r8, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) 3.707138047s ago: executing program 2 (id=609): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1d0}}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000200)='./file0\x00', 0x60) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @private=0xa010100}, 0x4, 0x0, 0x1}}, 0x2e) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x4004) r5 = syz_open_dev$swradio(&(0x7f0000000f80), 0x1, 0x2) read(r5, &(0x7f0000000fc0)=""/4, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000180)) chdir(&(0x7f00000003c0)='./bus\x00') r6 = creat(&(0x7f0000000000)='./file0\x00', 0x2a) setxattr$security_ima(&(0x7f0000000280)='./file1\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=r2, @ANYRESHEX, @ANYRES32=r5, @ANYRESDEC], 0xff02, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) recvmsg(r7, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000004b80), 0x0, 0x4000c000) sendto$inet6(r8, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) 3.629833597s ago: executing program 0 (id=602): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x50, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @private1}}}]}]}, 0x50}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x1f) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000fc0)={0x40, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x40}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00') getdents(r4, &(0x7f0000001080)=""/4096, 0x1000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) getdents(r4, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000100bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e78270010720596bb3b4d821d976f5843061cc2e3afbae82d7"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.389433287s ago: executing program 0 (id=603): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r4, r2, 0x4, r1}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 3.204201569s ago: executing program 0 (id=604): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'syz_tun\x00', 0x400}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe3a) 2.229509785s ago: executing program 3 (id=605): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x48a5, &(0x7f0000000580)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 2.228158462s ago: executing program 0 (id=615): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 2.226903243s ago: executing program 2 (id=606): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYBLOB="fc9ce3c6294891424b59e5c361b50a465184b08bf21f89f5295f8b3e93438869905ffd3ecfe6659e5371ac96c1bb34c651b09b556c165f4e52556cab79a9d35df15fb20eba86708e8a3367b196644efea06384250a5790f0e4ec8f7f4d51364979548db9fa21cb80f3eb21d28d4d2137a843dc0a1cdb867a36b52a40e27ea5e15c785a8fa5498e6c15a0", @ANYBLOB="2e2c1f156f58a2951c5dc6d0d0e6d973f9d304fbd16f31a0f3a3a5a636419ed6a282e7"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x90) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f00000001c0)=0x400001, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={0x0, r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x40}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe2(0x0, 0x0) io_setup(0x2868b0, &(0x7f0000000240)) ioprio_set$uid(0x3, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) preadv(r1, 0x0, 0xffffffffffffffad, 0x8, 0x20000000) socket(0x0, 0x0, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000180)={0x6}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) 2.111945512s ago: executing program 3 (id=608): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1d0}}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000200)='./file0\x00', 0x60) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @private=0xa010100}, 0x4, 0x0, 0x1}}, 0x2e) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x4004) r5 = syz_open_dev$swradio(&(0x7f0000000f80), 0x1, 0x2) read(r5, &(0x7f0000000fc0)=""/4, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000180)) chdir(&(0x7f00000003c0)='./bus\x00') r6 = creat(&(0x7f0000000000)='./file0\x00', 0x2a) setxattr$security_ima(&(0x7f0000000280)='./file1\x00', &(0x7f0000000100), 0x0, 0xff02, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) recvmsg(r7, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000004b80), 0x0, 0x4000c000) sendto$inet6(r8, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) 1.818228885s ago: executing program 2 (id=610): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x186}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ed2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x181}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040040}, 0x4) unshare(0x68040200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)={0x2c, r1, 0x22af6f5a04337dcd, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x29}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) 1.817680704s ago: executing program 1 (id=611): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000300)={'wg1\x00', @random='\x00\x00\x00 \x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@private0, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000080)={@dev, @remote, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r4}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000002c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r9) sendmsg$nl_route_sched_retired(r9, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f00000004c0)=@newtaction={0x80, 0x30, 0x0, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ipt={0x68, 0x0, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x19, 0x6, "f46756d0da560b4c8eabc516cc9648bbe27be15078"}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000480)={&(0x7f0000000700)=@polexpire={0x2dc, 0x1b, 0x400, 0x70bd26, 0x25dfdbff, {{{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4e23, 0x0, 0x4e20, 0x7fff, 0x2, 0x0, 0x20, 0x49, 0x0, r2}, {0x8, 0x27, 0x5, 0x7fffffffffffffff, 0xc, 0xfffffffffffffff7, 0x3ff, 0xe5b4}, {0x0, 0x4, 0x6, 0xbb9}, 0x431b, 0x0, 0x2, 0x1, 0x1, 0x2}, 0x81}, [@address_filter={0x28, 0x1a, {@in=@rand_addr=0x64010100, @in6=@dev={0xfe, 0x80, '\x00', 0xd}, 0x2, 0x9, 0x4}}, @sa={0xe0, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x4e23, 0x6, 0x4e23, 0x588, 0x2, 0x0, 0xa0, 0x5e, r4, r6}, {@in=@broadcast, 0x4d6, 0x2b}, @in=@private=0xa010100, {0x6, 0x1e, 0x0, 0x1, 0x9, 0xf, 0xd, 0xec53}, {0x8, 0x55, 0x9}, {0x52, 0x6, 0x3}, 0x70bd2d, 0x3504, 0x2, 0x0, 0x0, 0x40}}, @address_filter={0x28, 0x1a, {@in6=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xa, 0x7}}, @coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @sa={0xe0, 0x6, {{@in=@dev={0xac, 0x14, 0x14, 0x40}, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x4e21, 0x81e, 0x4e24, 0x4, 0x2, 0x120, 0x20, 0x87, 0x0, r7}, {@in6=@dev={0xfe, 0x80, '\x00', 0x11}, 0x4d6, 0xff}, @in6=@private2, {0x4, 0x80000001, 0x9, 0x9, 0x2, 0x4, 0xd, 0x1}, {0x3, 0x1, 0xb10d, 0x3ff}, {0x4, 0x0, 0x9}, 0x70bd2a, 0x3507, 0x2, 0x2, 0x2, 0x4}}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x4}, 0x24000081) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000003a00090000000000000000000100000004000000080002809dfa5f8a0c0003000000000000000000140005"], 0x40}}, 0x0) 1.270038098s ago: executing program 0 (id=612): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x50}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) fchdir(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001980)={0xf, {"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", 0x1000}}, 0x1006) connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0xa1a) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0x3c}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000056c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0x20}}], 0x2, 0x0) 960.683531ms ago: executing program 1 (id=613): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) sendmmsg(r1, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 665.047105ms ago: executing program 3 (id=614): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f00000005c0)=ANY=[]) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r2, &(0x7f0000000400)=[{&(0x7f0000000200)=""/229, 0xe5}], 0x1) 662.878766ms ago: executing program 0 (id=623): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1d0}}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000200)='./file0\x00', 0x60) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @private=0xa010100}, 0x4, 0x0, 0x1}}, 0x2e) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x4004) r5 = syz_open_dev$swradio(&(0x7f0000000f80), 0x1, 0x2) read(r5, &(0x7f0000000fc0)=""/4, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000180)) chdir(&(0x7f00000003c0)='./bus\x00') r6 = creat(&(0x7f0000000000)='./file0\x00', 0x2a) setxattr$security_ima(&(0x7f0000000280)='./file1\x00', &(0x7f0000000100), 0x0, 0xff02, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) recvmsg(r7, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000004b80), 0x0, 0x4000c000) sendto$inet6(r8, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) 111.624198ms ago: executing program 2 (id=616): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1d0}}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000200)='./file0\x00', 0x60) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @private=0xa010100}, 0x4, 0x0, 0x1}}, 0x2e) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x4004) r5 = syz_open_dev$swradio(&(0x7f0000000f80), 0x1, 0x2) read(r5, &(0x7f0000000fc0)=""/4, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000180)) chdir(&(0x7f00000003c0)='./bus\x00') r6 = creat(&(0x7f0000000000)='./file0\x00', 0x2a) setxattr$security_ima(&(0x7f0000000280)='./file1\x00', &(0x7f0000000100), 0x0, 0xff02, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) recvmsg(r7, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000004b80), 0x0, 0x4000c000) sendto$inet6(r8, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) 0s ago: executing program 1 (id=617): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1d0}}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000200)='./file0\x00', 0x60) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @private=0xa010100}, 0x4, 0x0, 0x1}}, 0x2e) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x4004) r5 = syz_open_dev$swradio(&(0x7f0000000f80), 0x1, 0x2) read(r5, &(0x7f0000000fc0)=""/4, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000180)) chdir(&(0x7f00000003c0)='./bus\x00') r6 = creat(&(0x7f0000000000)='./file0\x00', 0x2a) setxattr$security_ima(&(0x7f0000000280)='./file1\x00', &(0x7f0000000100), 0x0, 0xff02, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) recvmsg(r7, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000004b80), 0x0, 0x4000c000) sendto$inet6(r8, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:50418' (ED25519) to the list of known hosts. [ 41.917849][ T5335] cgroup: Unknown subsys name 'net' [ 42.095683][ T5335] cgroup: Unknown subsys name 'cpuset' [ 42.100259][ T5335] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.326504][ T5335] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.019339][ T5358] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.030158][ T5359] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.033944][ T5359] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.037057][ T5364] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.040446][ T5359] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.042434][ T5364] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.044052][ T5359] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.045186][ T5361] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.045372][ T5364] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.046175][ T5364] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.046388][ T5364] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 47.046646][ T5364] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.047679][ T5364] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.049675][ T5359] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.050247][ T5359] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 47.052126][ T5366] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.055754][ T5359] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.071837][ T5366] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.072632][ T5365] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.079063][ T5365] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 47.081882][ T5365] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.084480][ T5365] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.086838][ T5365] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 47.089431][ T5358] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.353785][ T5348] chnl_net:caif_netlink_parms(): no params data found [ 47.359974][ T5355] chnl_net:caif_netlink_parms(): no params data found [ 47.370841][ T5349] chnl_net:caif_netlink_parms(): no params data found [ 47.438993][ T5360] chnl_net:caif_netlink_parms(): no params data found [ 47.612199][ T5348] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.614820][ T5348] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.617098][ T5348] bridge_slave_0: entered allmulticast mode [ 47.619931][ T5348] bridge_slave_0: entered promiscuous mode [ 47.628072][ T5348] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.630646][ T5348] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.633654][ T5348] bridge_slave_1: entered allmulticast mode [ 47.635956][ T5348] bridge_slave_1: entered promiscuous mode [ 47.638269][ T5355] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.640162][ T5355] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.642354][ T5355] bridge_slave_0: entered allmulticast mode [ 47.644380][ T5355] bridge_slave_0: entered promiscuous mode [ 47.705224][ T5355] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.707585][ T5355] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.710146][ T5355] bridge_slave_1: entered allmulticast mode [ 47.713005][ T5355] bridge_slave_1: entered promiscuous mode [ 47.726527][ T5349] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.728400][ T5349] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.730367][ T5349] bridge_slave_0: entered allmulticast mode [ 47.732845][ T5349] bridge_slave_0: entered promiscuous mode [ 47.748436][ T5360] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.750819][ T5360] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.752800][ T5360] bridge_slave_0: entered allmulticast mode [ 47.755211][ T5360] bridge_slave_0: entered promiscuous mode [ 47.758816][ T5348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.790194][ T5349] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.792724][ T5349] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.795205][ T5349] bridge_slave_1: entered allmulticast mode [ 47.797874][ T5349] bridge_slave_1: entered promiscuous mode [ 47.800439][ T5360] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.803047][ T5360] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.805441][ T5360] bridge_slave_1: entered allmulticast mode [ 47.808107][ T5360] bridge_slave_1: entered promiscuous mode [ 47.826597][ T5348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.830489][ T5355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.835580][ T5355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.881940][ T5360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.923247][ T5349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.927633][ T5360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.932612][ T5348] team0: Port device team_slave_0 added [ 47.936343][ T5355] team0: Port device team_slave_0 added [ 47.939937][ T5349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.968504][ T5348] team0: Port device team_slave_1 added [ 47.971878][ T5355] team0: Port device team_slave_1 added [ 48.033096][ T5349] team0: Port device team_slave_0 added [ 48.037673][ T5360] team0: Port device team_slave_0 added [ 48.054848][ T5355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.057379][ T5355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.067447][ T5355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.073352][ T5349] team0: Port device team_slave_1 added [ 48.075666][ T5360] team0: Port device team_slave_1 added [ 48.088225][ T5348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.090673][ T5348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.100590][ T5348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.105426][ T5355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.107844][ T5355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.116833][ T5355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.148005][ T5348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.150552][ T5348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.159749][ T5348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.182743][ T5360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.184714][ T5360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.191501][ T5360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.195688][ T5360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.197668][ T5360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.204868][ T5360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.210686][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.213516][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.222231][ T5349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.229542][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.232216][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.241048][ T5349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.276933][ T5355] hsr_slave_0: entered promiscuous mode [ 48.279690][ T5355] hsr_slave_1: entered promiscuous mode [ 48.316107][ T5348] hsr_slave_0: entered promiscuous mode [ 48.319252][ T5348] hsr_slave_1: entered promiscuous mode [ 48.322301][ T5348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.325059][ T5348] Cannot create hsr debugfs directory [ 48.430554][ T5360] hsr_slave_0: entered promiscuous mode [ 48.435487][ T5360] hsr_slave_1: entered promiscuous mode [ 48.438964][ T5360] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.441046][ T5360] Cannot create hsr debugfs directory [ 48.459230][ T5349] hsr_slave_0: entered promiscuous mode [ 48.463074][ T5349] hsr_slave_1: entered promiscuous mode [ 48.469848][ T5349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.473564][ T5349] Cannot create hsr debugfs directory [ 48.663585][ T5355] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.669295][ T5355] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.673569][ T5355] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.677612][ T5355] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.704079][ T5360] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.707995][ T5360] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.713332][ T5360] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.717807][ T5360] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.745988][ T5349] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.750239][ T5349] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.759289][ T5349] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.782617][ T5349] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.809765][ T5348] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.818727][ T5348] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.823374][ T5348] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.827727][ T5348] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.836731][ T5355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.865945][ T5355] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.889693][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.892416][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.907414][ T5360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.929994][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.932717][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.969249][ T5360] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.982011][ T5349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.987676][ T5348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.003098][ T5349] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.008136][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.010431][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.017573][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.020204][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.033040][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.035368][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.048363][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.050570][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.054946][ T5348] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.076894][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.079293][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.092777][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.094645][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.099910][ T5360] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.103153][ T5366] Bluetooth: hci0: command tx timeout [ 49.103318][ T5366] Bluetooth: hci1: command tx timeout [ 49.106956][ T5366] Bluetooth: hci3: command tx timeout [ 49.153745][ T5355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.182160][ T5366] Bluetooth: hci2: command tx timeout [ 49.189338][ T5355] veth0_vlan: entered promiscuous mode [ 49.196713][ T5355] veth1_vlan: entered promiscuous mode [ 49.212389][ T5355] veth0_macvtap: entered promiscuous mode [ 49.215335][ T5355] veth1_macvtap: entered promiscuous mode [ 49.234534][ T5355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.239839][ T5349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.253392][ T5355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.265052][ T5360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.270432][ T5355] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.275131][ T5355] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.278095][ T5355] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.281042][ T5355] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.336709][ T5348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.349936][ T5349] veth0_vlan: entered promiscuous mode [ 49.359834][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.364225][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.376745][ T5349] veth1_vlan: entered promiscuous mode [ 49.384983][ T5360] veth0_vlan: entered promiscuous mode [ 49.399095][ T5348] veth0_vlan: entered promiscuous mode [ 49.401200][ T5360] veth1_vlan: entered promiscuous mode [ 49.408456][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.410596][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.411604][ T5348] veth1_vlan: entered promiscuous mode [ 49.422775][ T5349] veth0_macvtap: entered promiscuous mode [ 49.441605][ T5349] veth1_macvtap: entered promiscuous mode [ 49.448543][ T5360] veth0_macvtap: entered promiscuous mode [ 49.453351][ T5355] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.454672][ T5360] veth1_macvtap: entered promiscuous mode [ 49.464459][ T5348] veth0_macvtap: entered promiscuous mode [ 49.468867][ T5348] veth1_macvtap: entered promiscuous mode [ 49.481375][ T5360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.487442][ T5360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.493056][ T5360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.508730][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.518736][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.524147][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.527934][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.534702][ T5348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.537481][ T5349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.540999][ T5349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.545021][ T5349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.549557][ T5349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.555747][ T5349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.559981][ T5349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.565811][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.570198][ T5360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.575542][ T5360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.580124][ T5360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.588486][ T5349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.591458][ T5349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.594812][ T5349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.597837][ T5349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.601750][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.605210][ T5360] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.607825][ T5360] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.610320][ T5360] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.613085][ T5360] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.617024][ C2] Unknown status report in ack skb [ 49.617760][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.623905][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.626612][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.630924][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.634207][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.637945][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.642072][ T5348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.653062][ T5348] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.656456][ T5348] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.659356][ T5348] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.663403][ T5348] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.668118][ T5349] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.670355][ T5349] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.672801][ T5349] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.675148][ T5349] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.683144][ T5417] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6'. [ 49.757242][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.757404][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.759530][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.767910][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.777224][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.779866][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.796660][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.799291][ T5421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7'. [ 49.799342][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.806930][ T5421] netlink: 'syz.3.7': attribute type 6 has an invalid length. [ 49.816516][ T5421] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.819605][ T5421] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.822962][ T5421] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.826037][ T5421] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.830493][ T5421] vxlan0: entered promiscuous mode [ 49.845037][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.847492][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.849651][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.853019][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.145897][ T5436] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.747805][ T5451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'. [ 50.752118][ T5451] bridge0: port 3(netdevsim0) entered blocking state [ 50.754188][ T5451] bridge0: port 3(netdevsim0) entered disabled state [ 50.756222][ T5451] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 50.759236][ T5451] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 50.764198][ T5451] bridge0: port 3(netdevsim0) entered blocking state [ 50.766544][ T5451] bridge0: port 3(netdevsim0) entered forwarding state [ 50.891973][ T25] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 50.961300][ T5458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19'. [ 50.966443][ T5458] netlink: 'syz.1.19': attribute type 20 has an invalid length. [ 51.024185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.049644][ T25] usb 8-1: config 0 has no interfaces? [ 51.052201][ T25] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 51.055802][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.061240][ T25] usb 8-1: config 0 descriptor?? [ 51.112382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.182460][ T5366] Bluetooth: hci0: command tx timeout [ 51.184630][ T5366] Bluetooth: hci3: command tx timeout [ 51.185587][ T5358] Bluetooth: hci1: command tx timeout [ 51.261942][ T5358] Bluetooth: hci2: command tx timeout [ 51.289644][ T5467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23'. [ 51.293326][ T5467] netlink: 'syz.0.23': attribute type 5 has an invalid length. [ 51.305999][ T5467] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.308986][ T5467] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.311815][ T5467] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.314905][ T5467] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.317747][ T5467] vxlan0: entered promiscuous mode [ 51.472742][ T5411] usb 8-1: USB disconnect, device number 2 [ 51.932116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 51.967365][ T5474] Bluetooth: MGMT ver 1.23 [ 52.069978][ T5480] 9pnet_virtio: no channels available for device syz [ 52.165961][ T5486] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 52.369787][ T5504] syz.1.36 uses obsolete (PF_INET,SOCK_PACKET) [ 52.703083][ T5520] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 52.990902][ T5362] IPVS: starting estimator thread 0... [ 53.002192][ T829] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 53.064777][ T5535] syzkaller0: entered allmulticast mode [ 53.091938][ T5531] IPVS: using max 22 ests per chain, 52800 per kthread [ 53.161714][ T829] usb 7-1: Using ep0 maxpacket: 8 [ 53.165930][ T829] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 53.170788][ T829] usb 7-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 53.174858][ T829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.179455][ T829] usb 7-1: config 0 descriptor?? [ 53.186528][ T829] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 53.261724][ T5358] Bluetooth: hci1: command tx timeout [ 53.261771][ T5353] Bluetooth: hci0: command tx timeout [ 53.263329][ T5366] Bluetooth: hci3: command tx timeout [ 53.301693][ T5411] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 53.351828][ T5353] Bluetooth: hci2: command tx timeout [ 53.391382][ T5522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.396263][ T5522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.414884][ T5391] usb 7-1: USB disconnect, device number 2 [ 53.462470][ T5411] usb 5-1: Using ep0 maxpacket: 32 [ 53.465910][ T5411] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 53.468713][ T5411] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 53.472031][ T5411] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 53.474997][ T5411] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 53.478194][ T5411] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 53.481328][ T5411] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 53.486856][ T5411] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 53.489856][ T5411] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.494737][ T5411] usb 5-1: config 0 descriptor?? [ 53.680698][ T5554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.57'. [ 53.712701][ T5411] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 53.719605][ T5411] usb 5-1: USB disconnect, device number 2 [ 53.728959][ T5411] usblp0: removed [ 53.995057][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 54.211697][ T5411] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 54.387485][ T5411] usb 5-1: Using ep0 maxpacket: 32 [ 54.391496][ T5411] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 54.395134][ T5411] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 54.398120][ T5411] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 54.401427][ T5411] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 54.405226][ T5411] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 54.409149][ T5411] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 54.415984][ T5411] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 54.419299][ T5411] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.427843][ T5411] usb 5-1: config 0 descriptor?? [ 54.609590][ T5614] block device autoloading is deprecated and will be removed. [ 54.615332][ T5614] syz.2.78: attempt to access beyond end of device [ 54.615332][ T5614] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 54.650062][ T5411] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 54.658242][ T5617] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 54.721832][ T5536] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 54.871715][ T5536] usb 6-1: Using ep0 maxpacket: 8 [ 54.874637][ T5536] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 54.876779][ T5536] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 54.879249][ T5536] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 54.882180][ T5536] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 54.884821][ T5536] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 54.888161][ T5536] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 54.890635][ T5536] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.113979][ T5536] usb 6-1: usb_control_msg returned -32 [ 55.115581][ T5536] usbtmc 6-1:16.0: can't read capabilities [ 55.200771][ T25] usb 5-1: USB disconnect, device number 3 [ 55.206259][ T25] usblp0: removed [ 55.231702][ T58] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 55.342003][ T5358] Bluetooth: hci3: command tx timeout [ 55.342085][ T5353] Bluetooth: hci0: command tx timeout [ 55.392180][ T58] usb 7-1: Using ep0 maxpacket: 32 [ 55.399032][ T58] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 55.402105][ T58] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 55.405067][ T58] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 55.407531][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 55.410293][ T58] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 55.417502][ T58] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 55.421841][ T5353] Bluetooth: hci2: command tx timeout [ 55.425741][ T58] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 55.428901][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.438363][ T58] usb 7-1: config 0 descriptor?? [ 55.493170][ T5641] input: syz1 as /devices/virtual/input/input5 [ 55.654155][ T58] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 55.659916][ T58] usb 7-1: USB disconnect, device number 3 [ 55.666408][ T58] usblp0: removed [ 56.073919][ T39] audit: type=1326 audit(1728839371.141:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.0.94" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7fc00000 [ 56.091883][ T5391] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 56.241769][ T5391] usb 7-1: Using ep0 maxpacket: 32 [ 56.246563][ T5391] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 56.249515][ T5391] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 56.252655][ T5391] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 56.255763][ T5391] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 56.259386][ T5391] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 56.263408][ T5391] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 56.268179][ T5391] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 56.271269][ T5391] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.277743][ T5391] usb 7-1: config 0 descriptor?? [ 56.485788][ T5391] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 56.688569][ T5391] usb 7-1: USB disconnect, device number 4 [ 56.691361][ T5391] usblp0: removed [ 56.843366][ T39] audit: type=1326 audit(1728839371.911:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.0.94" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf747e579 code=0x7fc00000 [ 57.168980][ T5679] kvm: Disabled LAPIC found during irq injection [ 57.298119][ T5685] dccp_flush_write_queue: CCID did not manage to send all packets [ 57.498944][ T5411] usb 6-1: USB disconnect, device number 2 [ 57.558385][ T5690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.107'. [ 57.565638][ T5690] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.568722][ T5690] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.572321][ T5690] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.575619][ T5690] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.578736][ T5690] vxlan0: entered promiscuous mode [ 58.045723][ T39] audit: type=1326 audit(1728839373.111:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5699 comm="syz.1.112" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 58.053450][ T39] audit: type=1326 audit(1728839373.111:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5699 comm="syz.1.112" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 58.071698][ T39] audit: type=1326 audit(1728839373.121:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5699 comm="syz.1.112" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 58.081393][ T39] audit: type=1326 audit(1728839373.121:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5699 comm="syz.1.112" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 58.096494][ T39] audit: type=1326 audit(1728839373.121:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5699 comm="syz.1.112" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 58.111713][ T39] audit: type=1326 audit(1728839373.121:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5699 comm="syz.1.112" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 58.118584][ T39] audit: type=1326 audit(1728839373.121:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5699 comm="syz.1.112" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 58.125968][ T39] audit: type=1326 audit(1728839373.121:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5699 comm="syz.1.112" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 58.530157][ T5727] dccp_close: ABORT with 65475 bytes unread [ 58.704363][ T5749] vlan2: entered allmulticast mode [ 58.705832][ T5749] vlan1: entered allmulticast mode [ 58.707256][ T5749] veth0_vlan: entered allmulticast mode [ 58.709420][ T5749] bridge0: port 3(vlan2) entered blocking state [ 58.711100][ T5749] bridge0: port 3(vlan2) entered disabled state [ 58.713587][ T5749] vlan2: entered promiscuous mode [ 58.714914][ T5749] vlan1: entered promiscuous mode [ 58.716543][ T5749] bridge0: port 3(vlan2) entered blocking state [ 58.718115][ T5749] bridge0: port 3(vlan2) entered forwarding state [ 58.866610][ T5536] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 58.953349][ T5353] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 58.956161][ T5353] Bluetooth: hci1: Injecting HCI hardware error event [ 58.959657][ T5353] Bluetooth: hci1: hardware error 0x00 [ 58.988230][ T5773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 59.032133][ T5536] usb 6-1: Using ep0 maxpacket: 8 [ 59.034659][ T5536] usb 6-1: config 0 has no interfaces? [ 59.036142][ T5536] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 59.038874][ T5536] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.050226][ T5536] usb 6-1: config 0 descriptor?? [ 59.186753][ T5789] netlink: 'syz.2.150': attribute type 1 has an invalid length. [ 59.216418][ T5789] bond1: (slave veth1_to_hsr): Enslaving as a backup interface with an up link [ 59.259861][ T5536] usb 6-1: USB disconnect, device number 3 [ 59.301821][ T5392] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 59.454514][ T5392] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 59.458428][ T5392] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 59.462594][ T5392] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 59.466529][ T5392] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 59.470873][ T5392] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 59.474474][ T5392] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.483271][ T5392] usb 8-1: config 0 descriptor?? [ 59.485688][ T5780] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 59.895724][ T5392] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 59.899322][ T5392] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 59.905875][ T5392] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 60.002949][ T5804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.156'. [ 60.007240][ T5804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.156'. [ 60.042221][ T5391] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 60.097756][ T5780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.101105][ T5780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.167315][ T5780] plantronics 0003:047F:FFFF.0002: implement() called with too large value 4129042 (n: 0)! (syz.3.144) [ 60.171466][ T5780] plantronics 0003:047F:FFFF.0002: implement() called with too large value 1073741824 (n: 0)! (syz.3.144) [ 60.175261][ T5780] plantronics 0003:047F:FFFF.0002: implement() called with too large value -64385 (n: 0)! (syz.3.144) [ 60.178973][ T5780] plantronics 0003:047F:FFFF.0002: implement() called with too large value 34144512 (n: 0)! (syz.3.144) [ 60.182732][ T5780] plantronics 0003:047F:FFFF.0002: implement() called with too large value 65572 (n: 0)! (syz.3.144) [ 60.186531][ T5780] plantronics 0003:047F:FFFF.0002: implement() called with too large value 150994944 (n: 0)! (syz.3.144) [ 60.190406][ T5780] plantronics 0003:047F:FFFF.0002: implement() called with too large value 352321540 (n: 0)! (syz.3.144) [ 60.194106][ T5780] plantronics 0003:047F:FFFF.0002: implement() called with too large value 3 (n: 0)! (syz.3.144) [ 60.197893][ T5780] plantronics 0003:047F:FFFF.0002: implement() called with too large value 4202761 (n: 0)! (syz.3.144) [ 60.201841][ T5780] plantronics 0003:047F:FFFF.0002: implement() called with too large value 253886720 (n: 0)! (syz.3.144) [ 60.205582][ T5780] plantronics 0003:047F:FFFF.0002: implement() called with too large value -16447232 (n: 0)! (syz.3.144) [ 60.209319][ T5780] plantronics 0003:047F:FFFF.0002: implement() called with too large value -1 (n: 0)! (syz.3.144) [ 60.213004][ T5780] plantronics 0003:047F:FFFF.0002: implement() called with too large value 16777215 (n: 0)! (syz.3.144) [ 60.218577][ C2] vkms_vblank_simulate: vblank timer overrun [ 60.225361][ T5391] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 60.228480][ T5391] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 60.235738][ T5391] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 60.244009][ T5391] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 60.254025][ T5391] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 60.260554][ T5391] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.267733][ T5391] usb 6-1: config 0 descriptor?? [ 60.270949][ T5802] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 60.483384][ T5812] netlink: 20 bytes leftover after parsing attributes in process `syz.0.159'. [ 60.545264][ T5813] overlayfs: failed to resolve './file1': -2 [ 60.718024][ T5817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'. [ 61.022308][ T5353] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 61.217113][ T5391] usbhid 6-1:0.0: can't add hid device: -71 [ 61.219325][ T5391] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 61.226024][ T5391] usb 6-1: USB disconnect, device number 4 [ 61.814563][ T5827] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 61.818394][ T5827] overlayfs: failed to set uuid (53/file1, err=-1); falling back to uuid=null. [ 61.820574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 61.857810][ T5827] evm: overlay not supported [ 61.976305][ T8] usb 8-1: USB disconnect, device number 3 [ 62.121796][ T5411] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 62.281833][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 62.289663][ T5411] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 62.292364][ T5411] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 62.295258][ T5411] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 62.298562][ T5411] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 62.303118][ T5411] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 62.305856][ T5411] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.314733][ T5411] usb 7-1: config 0 descriptor?? [ 62.317240][ T5830] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 62.431729][ T9] usb 5-1: device descriptor read/64, error -71 [ 62.475758][ T5853] netlink: 'syz.1.174': attribute type 4 has an invalid length. [ 62.502774][ T5855] netlink: 20 bytes leftover after parsing attributes in process `syz.3.175'. [ 62.508090][ T5853] syz.1.174 (5853) used greatest stack depth: 21168 bytes left [ 62.576548][ T5858] overlayfs: failed to resolve './file1': -2 [ 62.631846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #141!!! [ 62.634346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 62.691814][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 62.742151][ T5411] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 62.747763][ T5411] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 62.754990][ T5411] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 62.821789][ T9] usb 5-1: device descriptor read/64, error -71 [ 62.932069][ T9] usb usb5-port1: attempt power cycle [ 63.006819][ T5410] usb 7-1: USB disconnect, device number 5 [ 63.271721][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 63.303292][ T9] usb 5-1: device descriptor read/8, error -71 [ 63.546564][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 63.562099][ T9] usb 5-1: device descriptor read/8, error -71 [ 63.587281][ T5866] netlink: 20 bytes leftover after parsing attributes in process `syz.2.179'. [ 63.604100][ T5868] netlink: 56 bytes leftover after parsing attributes in process `syz.3.180'. [ 63.651959][ T5871] overlayfs: failed to resolve './file1': -2 [ 63.681933][ T9] usb usb5-port1: unable to enumerate USB device [ 63.734762][ T5877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'. [ 63.739809][ T5877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.181'. [ 63.848932][ T5353] Bluetooth: hci0: unexpected cc 0x2007 length: 100 > 2 [ 63.904230][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.185'. [ 63.971705][ T5884] netlink: 20 bytes leftover after parsing attributes in process `syz.1.186'. [ 64.042839][ T5885] overlayfs: failed to resolve './file1': -2 [ 64.622284][ T5889] netlink: 20 bytes leftover after parsing attributes in process `syz.3.187'. [ 64.698078][ T5890] overlayfs: failed to resolve './file1': -2 [ 65.092768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.082879][ T39] kauditd_printk_skb: 20 callbacks suppressed [ 66.082890][ T39] audit: type=1804 audit(1728839381.141:32): pid=5916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.198" name="/newroot/44/bus/bus" dev="overlay" ino=256 res=1 errno=0 [ 66.212690][ T5921] netlink: 20 bytes leftover after parsing attributes in process `syz.0.200'. [ 66.271774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.294960][ T5922] overlayfs: failed to resolve './file1': -2 [ 66.461869][ T5353] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 66.464912][ T5353] Bluetooth: hci2: Injecting HCI hardware error event [ 66.467659][ T5353] Bluetooth: hci2: hardware error 0x00 [ 66.478598][ T5928] random: crng reseeded on system resumption [ 66.522928][ T5932] ucma_write: process 102 (syz.1.204) changed security contexts after opening file descriptor, this is not allowed. [ 66.660252][ T5939] netlink: 20 bytes leftover after parsing attributes in process `syz.1.206'. [ 66.713905][ T5940] vivid-004: disconnect [ 66.728390][ T5936] vivid-004: reconnect [ 66.824320][ T5941] overlayfs: failed to resolve './file1': -2 [ 66.858538][ T5944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.207'. [ 67.704004][ T39] audit: type=1326 audit(1728839382.771:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.3.211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 67.709368][ T39] audit: type=1326 audit(1728839382.771:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.3.211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 67.734855][ T39] audit: type=1326 audit(1728839382.801:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.3.211" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 67.751898][ T39] audit: type=1326 audit(1728839382.801:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.3.211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 67.758700][ T39] audit: type=1326 audit(1728839382.801:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.3.211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 67.764834][ T39] audit: type=1326 audit(1728839382.811:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.3.211" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 67.770303][ T39] audit: type=1326 audit(1728839382.811:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.3.211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 67.779706][ T39] audit: type=1326 audit(1728839382.811:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.3.211" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 67.798181][ T39] audit: type=1326 audit(1728839382.821:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.3.211" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 67.875501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.901692][ T5358] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 67.904689][ T5358] Bluetooth: hci0: Injecting HCI hardware error event [ 67.908799][ T5358] Bluetooth: hci0: hardware error 0x00 [ 68.012123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.074529][ T5967] overlayfs: failed to resolve './file1': -2 [ 68.096195][ T5968] ======================================================= [ 68.096195][ T5968] WARNING: The mand mount option has been deprecated and [ 68.096195][ T5968] and is ignored by this kernel. Remove the mand [ 68.096195][ T5968] option from the mount to silence this warning. [ 68.096195][ T5968] ======================================================= [ 68.541701][ T5353] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 69.549000][ T6030] Bluetooth: (null): Invalid header checksum [ 69.845721][ T6045] __nla_validate_parse: 1 callbacks suppressed [ 69.845737][ T6045] netlink: 20 bytes leftover after parsing attributes in process `syz.1.233'. [ 69.922026][ T6046] overlayfs: failed to resolve './file1': -2 [ 69.981843][ T5358] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 69.987468][ T5992] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 69.989486][ T5992] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 70.578369][ T6069] syzkaller0: entered promiscuous mode [ 70.579919][ T6069] syzkaller0: entered allmulticast mode [ 70.582702][ T1199] syzkaller0: tun_net_xmit 48 [ 70.612157][ T6069] syzkaller0: tun_net_xmit 1280 [ 70.615103][ T6069] syzkaller0: create flow: hash 2239539214 index 1 [ 70.653773][ T6068] syzkaller0: delete flow: hash 2239539214 index 1 [ 70.654587][ T6071] netlink: 20 bytes leftover after parsing attributes in process `syz.3.242'. [ 70.710363][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.712682][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.717849][ T6072] overlayfs: failed to resolve './file1': -2 [ 70.888390][ T6077] netlink: 20 bytes leftover after parsing attributes in process `syz.2.244'. [ 70.954791][ T6078] overlayfs: failed to resolve './file1': -2 [ 72.341628][ T6103] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan1, syncid = 0, id = 0 [ 72.474070][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.256'. [ 72.808197][ T5410] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 72.881656][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 72.953068][ T5410] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 72.956826][ T5410] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 72.959566][ T5410] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 72.981648][ T5410] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 72.986070][ T5410] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.989098][ T5410] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.003634][ T5410] usb 6-1: config 0 descriptor?? [ 73.005862][ T6113] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 73.032943][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.035878][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.038528][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 73.040850][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.045168][ T9] usb 5-1: config 0 descriptor?? [ 73.384516][ T6123] netlink: 20 bytes leftover after parsing attributes in process `syz.3.261'. [ 73.419415][ T5410] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 73.421650][ T5410] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 73.424899][ T5410] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 73.427048][ T5410] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 73.429171][ T5410] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 73.431145][ T5410] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 73.436168][ T5410] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 73.438228][ T5410] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 73.440613][ T5410] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 73.442737][ T5410] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 73.443769][ T6124] overlayfs: failed to resolve './file1': -2 [ 73.444785][ T5410] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 73.444844][ T5410] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 73.444887][ T5410] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 73.454294][ T5410] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 73.455609][ T9] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 73.458305][ T5410] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 73.458405][ T9] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 73.462405][ T9] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 73.462666][ T5410] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 73.464453][ T9] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 73.468938][ T9] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 73.469335][ T5410] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 73.471089][ T9] cm6533_jd 0003:0D8C:0022.0005: No inputs registered, leaving [ 73.501285][ T9] cm6533_jd 0003:0D8C:0022.0005: hiddev1,hidraw2: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 73.741653][ T6113] usb 6-1: language id specifier not provided by device, defaulting to English [ 73.764010][ T5536] usb 5-1: USB disconnect, device number 8 [ 74.150923][ T6113] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 74.154406][ T6113] overlayfs: missing 'lowerdir' [ 74.160431][ T9] usb 6-1: USB disconnect, device number 5 [ 74.761677][ T5410] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 74.914173][ T6155] netlink: 52 bytes leftover after parsing attributes in process `syz.1.272'. [ 74.933008][ T5410] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 74.939646][ T5410] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.951183][ T5410] usb 5-1: config 0 descriptor?? [ 75.077868][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'. [ 75.115084][ T6169] capability: warning: `syz.1.277' uses 32-bit capabilities (legacy support in use) [ 75.172798][ T6174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.279'. [ 75.182139][ T5410] ath6kl: Failed to submit usb control message: -71 [ 75.184651][ T5410] ath6kl: unable to send the bmi data to the device: -71 [ 75.187212][ T5410] ath6kl: Unable to send get target info: -71 [ 75.191022][ T5410] ath6kl: Failed to init ath6kl core: -71 [ 75.196458][ T5410] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 75.205365][ T5410] usb 5-1: USB disconnect, device number 9 [ 75.346961][ T6183] trusted_key: syz.3.283 sent an empty control message without MSG_MORE. [ 75.419537][ T5536] libceph: connect (1)[c::]:6789 error -101 [ 75.423207][ T5536] libceph: mon0 (1)[c::]:6789 connect error [ 75.515157][ T6187] ceph: No mds server is up or the cluster is laggy [ 75.572669][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 75.721842][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 75.725747][ T6207] netlink: 20 bytes leftover after parsing attributes in process `syz.1.290'. [ 75.729796][ T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 314 [ 75.736544][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 75.739684][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.746774][ T9] usb 7-1: Product: syz [ 75.749021][ T9] usb 7-1: Manufacturer: syz [ 75.751384][ T9] usb 7-1: SerialNumber: syz [ 75.759913][ T6180] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 75.807487][ T6212] overlayfs: failed to resolve './file1': -2 [ 75.825233][ T64] cfg80211: failed to load regulatory.db [ 75.836955][ T6211] binder_alloc: 6210: binder_alloc_buf, no vma [ 75.896799][ T6215] binder: 6214:6215 ioctl 8010661b 20000000 returned -22 [ 75.988441][ T9] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 76.124710][ T6226] netlink: 20 bytes leftover after parsing attributes in process `syz.3.295'. [ 76.190403][ T6227] overlayfs: failed to resolve './file1': -2 [ 76.212239][ C3] usblp0: nonzero write bulk status received: -71 [ 76.217383][ T57] usb 7-1: USB disconnect, device number 6 [ 76.221881][ T57] usblp0: removed [ 76.830443][ T6233] netlink: 28 bytes leftover after parsing attributes in process `syz.0.304'. [ 76.851956][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'. [ 77.294060][ T6245] netlink: 20 bytes leftover after parsing attributes in process `syz.1.300'. [ 77.387778][ T6251] overlayfs: failed to resolve './file1': -2 [ 77.399228][ T6248] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 77.401197][ T6248] overlayfs: failed to set xattr on upper [ 77.405670][ T6248] overlayfs: ...falling back to redirect_dir=nofollow. [ 77.407540][ T6248] overlayfs: ...falling back to index=off. [ 77.409691][ T6248] overlayfs: ...falling back to uuid=null. [ 77.580590][ T6255] binder: 6254:6255 ioctl c0306201 20005dc0 returned -11 [ 78.233891][ T6273] process 'syz.0.310' launched './file0' with NULL argv: empty string added [ 78.239820][ T6278] netlink: 20 bytes leftover after parsing attributes in process `syz.2.313'. [ 78.245714][ T6280] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.328089][ T6283] overlayfs: failed to resolve './file1': -2 [ 78.919864][ T39] kauditd_printk_skb: 20 callbacks suppressed [ 78.919879][ T39] audit: type=1800 audit(1728839393.981:62): pid=6273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.310" name="/" dev="fuse" ino=0 res=0 errno=0 [ 79.186930][ T6301] netlink: 20 bytes leftover after parsing attributes in process `syz.3.320'. [ 79.281294][ T6309] overlayfs: failed to resolve './file1': -2 [ 79.340311][ T6313] netlink: 'syz.0.323': attribute type 10 has an invalid length. [ 79.351419][ T6313] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 79.515376][ T6318] binder_alloc: 6317: binder_alloc_buf, no vma [ 80.028088][ T6330] netlink: 28 bytes leftover after parsing attributes in process `syz.2.329'. [ 80.182867][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 80.321945][ T5411] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 80.351806][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 80.357700][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.363245][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.367149][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 80.370268][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.377396][ T9] usb 5-1: config 0 descriptor?? [ 80.478327][ T5411] usb 7-1: config 0 has no interfaces? [ 80.480513][ T5411] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 80.485968][ T5411] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.495444][ T5411] usb 7-1: config 0 descriptor?? [ 80.712505][ T5536] usb 7-1: USB disconnect, device number 7 [ 80.792827][ T9] wacom 0003:056A:0016.0006: unknown main item tag 0x0 [ 80.795774][ T9] wacom 0003:056A:0016.0006: Unknown device_type for 'HID 056a:0016'. Assuming pen. [ 80.802310][ T9] wacom 0003:056A:0016.0006: hidraw1: USB HID v0.06 Device [HID 056a:0016] on usb-dummy_hcd.0-1/input0 [ 80.808131][ T9] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:056A:0016.0006/input/input8 [ 81.049301][ T9] usb 5-1: USB disconnect, device number 10 [ 81.518605][ T6357] IPv4: Oversized IP packet from 172.20.20.24 [ 81.522677][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 81.525880][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 81.571321][ T6362] binder: transaction release 39 bad handle 1, ret = -22 [ 83.078402][ T6401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.353'. [ 83.168390][ T6402] overlayfs: failed to resolve './file1': -2 [ 83.376992][ T6411] syz.3.356: attempt to access beyond end of device [ 83.376992][ T6411] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 83.383413][ T6411] syz.3.356: attempt to access beyond end of device [ 83.383413][ T6411] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 83.388487][ T6411] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 83.393062][ T6411] syz.3.356: attempt to access beyond end of device [ 83.393062][ T6411] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 83.400869][ T6411] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 83.404994][ T6411] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 83.408479][ T6411] UDF-fs: Scanning with blocksize 512 failed [ 83.417396][ T6411] syz.3.356: attempt to access beyond end of device [ 83.417396][ T6411] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 83.424320][ T6411] syz.3.356: attempt to access beyond end of device [ 83.424320][ T6411] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 83.429290][ T6411] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 83.433494][ T6411] syz.3.356: attempt to access beyond end of device [ 83.433494][ T6411] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 83.438214][ T6411] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 83.441907][ T6411] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 83.444882][ T6411] UDF-fs: Scanning with blocksize 1024 failed [ 83.447746][ T6411] syz.3.356: attempt to access beyond end of device [ 83.447746][ T6411] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 83.452984][ T6411] syz.3.356: attempt to access beyond end of device [ 83.452984][ T6411] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 83.459464][ T6411] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 83.463413][ T6411] syz.3.356: attempt to access beyond end of device [ 83.463413][ T6411] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 83.469709][ T6411] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 83.475128][ T6411] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 83.478175][ T6411] UDF-fs: Scanning with blocksize 2048 failed [ 83.481017][ T6411] syz.3.356: attempt to access beyond end of device [ 83.481017][ T6411] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 83.486313][ T6411] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 83.489949][ T6411] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 83.494389][ T6411] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 83.497299][ T6411] UDF-fs: Scanning with blocksize 4096 failed [ 83.499618][ T6411] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 84.015987][ T6438] syz.3.364[6438] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.016063][ T6438] syz.3.364[6438] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.020322][ T6438] syz.3.364[6438] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.118640][ T6441] netlink: 20 bytes leftover after parsing attributes in process `syz.3.365'. [ 84.155728][ T6439] Bluetooth: MGMT ver 1.23 [ 84.188226][ T6443] overlayfs: failed to resolve './file1': -2 [ 84.706166][ T6447] kernel profiling enabled (shift: 0) [ 84.738882][ T6449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.367'. [ 85.408550][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.372'. [ 85.410923][ T6468] bridge_slave_1: left allmulticast mode [ 85.417729][ T6468] bridge_slave_1: left promiscuous mode [ 85.421165][ T6468] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.440712][ T6468] bridge_slave_0: left allmulticast mode [ 85.445115][ T6468] bridge_slave_0: left promiscuous mode [ 85.450534][ T6468] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.154591][ T5410] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 86.348166][ T5410] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 86.352829][ T5410] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.356426][ T5410] usb 7-1: Product: syz [ 86.358511][ T5410] usb 7-1: Manufacturer: syz [ 86.360596][ T5410] usb 7-1: SerialNumber: syz [ 86.379557][ T5410] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 86.411248][ T30] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 86.806797][ T9] usb 7-1: USB disconnect, device number 8 [ 86.811646][ T5420] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 86.973484][ T5420] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 86.979264][ T5420] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 86.982166][ T5420] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 86.985654][ T5420] usb 6-1: config 0 interface 0 has no altsetting 0 [ 86.990186][ T5420] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 86.993827][ T5420] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 86.997560][ T5420] usb 6-1: config 0 interface 0 has no altsetting 0 [ 87.003488][ T5420] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.010391][ T5420] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.015584][ T5420] usb 6-1: config 0 interface 0 has no altsetting 0 [ 87.023553][ T5420] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.026455][ T5420] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.030056][ T5420] usb 6-1: config 0 interface 0 has no altsetting 0 [ 87.036346][ T5420] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.039307][ T5420] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.048530][ T5420] usb 6-1: config 0 interface 0 has no altsetting 0 [ 87.057730][ T5420] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.066502][ T5420] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.071719][ T5420] usb 6-1: config 0 interface 0 has no altsetting 0 [ 87.080166][ T5420] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.083343][ T5420] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.087340][ T5420] usb 6-1: config 0 interface 0 has no altsetting 0 [ 87.092586][ T5420] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.096053][ T5420] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.099870][ T5420] usb 6-1: config 0 interface 0 has no altsetting 0 [ 87.105649][ T5420] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 87.108591][ T5420] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 87.111321][ T5420] usb 6-1: Product: syz [ 87.116350][ T5420] usb 6-1: Manufacturer: syz [ 87.117886][ T5420] usb 6-1: SerialNumber: syz [ 87.121147][ T5420] usb 6-1: config 0 descriptor?? [ 87.130417][ T5420] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 87.232085][ T6498] netlink: 20 bytes leftover after parsing attributes in process `syz.0.381'. [ 87.339524][ T5420] usb 6-1: USB disconnect, device number 6 [ 87.351786][ T6499] overlayfs: failed to resolve './file1': -2 [ 87.379512][ T5420] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 87.424148][ T30] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 87.426906][ T30] ath9k_htc: Failed to initialize the device [ 87.438375][ T9] usb 7-1: ath9k_htc: USB layer deinitialized [ 87.443230][ T6502] netlink: 20 bytes leftover after parsing attributes in process `syz.2.382'. [ 87.552683][ T6504] overlayfs: failed to resolve './file1': -2 [ 89.484083][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.387'. [ 89.496215][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'. [ 89.691820][ T5392] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 89.842439][ T5392] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 89.846014][ T5392] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.849185][ T5392] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.856512][ T5392] usb 6-1: config 0 interface 0 has no altsetting 0 [ 89.860644][ T5392] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.864260][ T5392] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.868072][ T5392] usb 6-1: config 0 interface 0 has no altsetting 0 [ 89.878475][ T5392] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.881007][ T5392] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.885869][ T5392] usb 6-1: config 0 interface 0 has no altsetting 0 [ 89.888606][ T5392] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.890928][ T5392] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.894235][ T5392] usb 6-1: config 0 interface 0 has no altsetting 0 [ 89.896651][ T5392] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.898949][ T5392] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.904483][ T5392] usb 6-1: config 0 interface 0 has no altsetting 0 [ 89.906919][ T5392] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.909228][ T5392] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.912343][ T5392] usb 6-1: config 0 interface 0 has no altsetting 0 [ 89.914769][ T5392] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.917090][ T5392] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.919868][ T5392] usb 6-1: config 0 interface 0 has no altsetting 0 [ 89.922362][ T5392] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.924700][ T5392] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.927483][ T5392] usb 6-1: config 0 interface 0 has no altsetting 0 [ 89.930525][ T5392] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 89.934523][ T5392] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 89.936695][ T5392] usb 6-1: Product: syz [ 89.937795][ T5392] usb 6-1: Manufacturer: syz [ 89.939018][ T5392] usb 6-1: SerialNumber: syz [ 89.943160][ T5392] usb 6-1: config 0 descriptor?? [ 89.946300][ T5392] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 90.211537][ T6541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.394'. [ 90.397611][ T6553] syzkaller0: entered promiscuous mode [ 90.399830][ T6553] syzkaller0: entered allmulticast mode [ 90.522788][ T6557] syzkaller0: entered promiscuous mode [ 90.524616][ T6557] syzkaller0: entered allmulticast mode [ 90.612736][ T39] audit: type=1326 audit(1728839405.681:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.2.399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 90.620444][ T39] audit: type=1326 audit(1728839405.681:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.2.399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 90.627528][ T39] audit: type=1326 audit(1728839405.681:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.2.399" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 90.634673][ T39] audit: type=1326 audit(1728839405.681:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.2.399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 90.640445][ T39] audit: type=1326 audit(1728839405.681:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.2.399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 90.647506][ T39] audit: type=1326 audit(1728839405.681:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.2.399" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 90.654746][ T39] audit: type=1326 audit(1728839405.681:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.2.399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 90.660649][ T39] audit: type=1326 audit(1728839405.681:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.2.399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 90.666949][ T39] audit: type=1326 audit(1728839405.691:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.2.399" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 90.674003][ T39] audit: type=1326 audit(1728839405.691:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.2.399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 91.955551][ T6563] netlink: 20 bytes leftover after parsing attributes in process `syz.0.401'. [ 92.036472][ T6564] overlayfs: failed to resolve './file1': -2 [ 92.243040][ C3] usb 6-1: yurex_control_callback - control failed: -2 [ 92.247791][ T9] usb 6-1: USB disconnect, device number 7 [ 92.251054][ T9] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 92.450196][ T6573] block device autoloading is deprecated and will be removed. [ 92.456064][ T6572] md: md2 stopped. [ 93.651920][ T5536] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 93.805138][ T5536] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.809053][ T5536] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.812104][ T5536] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.821643][ T5536] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.831359][ T5536] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.840808][ T5536] usb 6-1: config 0 descriptor?? [ 93.854126][ T6590] macsec1: entered allmulticast mode [ 93.856070][ T6590] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 93.860552][ T6590] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 94.111078][ T6599] syz.0.412 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 94.253514][ T5536] plantronics 0003:047F:FFFF.0007: ignoring exceeding usage max [ 94.256953][ T5536] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 94.285134][ T5536] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 94.384252][ T6605] netlink: 20 bytes leftover after parsing attributes in process `syz.3.415'. [ 94.451208][ T6608] overlayfs: failed to resolve './file1': -2 [ 95.454966][ T829] usb 6-1: USB disconnect, device number 8 [ 96.725292][ T39] audit: type=1804 audit(1728839411.791:73): pid=6624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.427" name="/newroot/98/file0" dev="fuse" ino=1 res=1 errno=0 [ 97.359146][ T6632] overlayfs: failed to resolve './file1': -2 [ 98.399536][ T6646] netlink: 20 bytes leftover after parsing attributes in process `syz.1.426'. [ 98.479813][ T6647] overlayfs: failed to resolve './file1': -2 [ 99.173840][ T6651] netlink: 20 bytes leftover after parsing attributes in process `syz.2.428'. [ 99.246118][ T6652] overlayfs: failed to resolve './file1': -2 [ 99.621792][ T57] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 99.771708][ T57] usb 5-1: Using ep0 maxpacket: 8 [ 99.774767][ T57] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 99.778121][ T57] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 99.780576][ T57] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.791766][ T57] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.801924][ T57] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 99.804394][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.019605][ T57] usb 5-1: GET_CAPABILITIES returned 0 [ 100.021209][ T57] usbtmc 5-1:16.0: can't read capabilities [ 100.406157][ T5393] usb 5-1: USB disconnect, device number 11 [ 100.531185][ T6662] 9pnet_fd: Insufficient options for proto=fd [ 100.602561][ T6667] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 100.611629][ T6667] CIFS: Unable to determine destination address [ 100.785066][ T6684] netlink: 20 bytes leftover after parsing attributes in process `syz.3.437'. [ 100.845072][ T6689] netlink: 20 bytes leftover after parsing attributes in process `syz.3.440'. [ 100.919163][ T6691] overlayfs: failed to resolve './file1': -2 [ 101.017084][ T6696] netlink: 20 bytes leftover after parsing attributes in process `syz.0.441'. [ 101.095864][ T6701] overlayfs: failed to resolve './file1': -2 [ 101.124930][ T6698] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 102.870371][ T6720] mmap: syz.0.448 (6720) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.875897][ T6720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.984662][ T5410] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 104.143145][ T5410] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 104.147682][ T5410] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 104.151061][ T5410] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 104.154537][ T5410] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.160464][ T6738] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 104.167857][ T5410] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 104.307451][ T6745] netlink: 20 bytes leftover after parsing attributes in process `syz.0.455'. [ 104.381880][ T6746] overlayfs: failed to resolve './file1': -2 [ 104.428336][ T6749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.456'. [ 104.437784][ T5536] usb 8-1: USB disconnect, device number 4 [ 104.526392][ T6751] overlayfs: failed to resolve './file1': -2 [ 105.157048][ T6757] netlink: 20 bytes leftover after parsing attributes in process `syz.2.457'. [ 105.229678][ T6758] overlayfs: failed to resolve './file1': -2 [ 105.307745][ C2] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 106.250553][ T6770] bridge0: port 3(syz_tun) entered blocking state [ 106.255635][ T6770] bridge0: port 3(syz_tun) entered disabled state [ 106.257538][ T6770] syz_tun: entered allmulticast mode [ 106.261441][ T6770] syz_tun: entered promiscuous mode [ 106.264133][ T6770] bridge0: port 3(syz_tun) entered blocking state [ 106.266256][ T6770] bridge0: port 3(syz_tun) entered forwarding state [ 106.680547][ T39] audit: type=1326 audit(1728839421.741:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6786 comm="syz.1.466" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x0 [ 106.871714][ T5393] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 107.051603][ T5393] usb 8-1: Using ep0 maxpacket: 8 [ 107.054753][ T5393] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 107.056778][ T5393] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 107.061617][ T5393] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.065492][ T5393] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 107.069119][ T5393] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 107.072991][ T5393] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 107.074980][ T5393] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 107.077906][ T5393] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.080932][ T5393] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 107.084014][ T5393] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 107.087878][ T5393] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 107.089867][ T5393] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 107.093071][ T5393] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.096321][ T5393] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 107.099516][ T5393] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 107.105119][ T5393] usb 8-1: string descriptor 0 read error: -22 [ 107.106919][ T5393] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 107.109273][ T5393] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.117131][ T5393] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 107.452210][ T5536] usb 8-1: USB disconnect, device number 5 [ 107.751461][ T6801] binder: 6800:6801 ioctl c018620c 20000140 returned -22 [ 108.121797][ T5420] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 108.282541][ T5420] usb 5-1: Using ep0 maxpacket: 8 [ 108.286000][ T5420] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 108.290111][ T5420] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 108.293882][ T5420] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 108.297431][ T5420] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.302704][ T5420] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 108.305965][ T5420] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.341421][ T39] audit: type=1326 audit(1728839423.401:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.1.474" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x0 [ 108.481136][ T6818] netlink: 20 bytes leftover after parsing attributes in process `syz.2.475'. [ 108.545345][ T5420] usb 5-1: GET_CAPABILITIES returned 0 [ 108.547374][ T5420] usbtmc 5-1:16.0: can't read capabilities [ 108.560892][ T6819] overlayfs: failed to resolve './file1': -2 [ 108.829658][ C3] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 108.832855][ T6807] usbtmc 5-1:16.0: Unable to send data, error -71 [ 108.843791][ T829] usb 5-1: USB disconnect, device number 12 [ 109.198907][ T6827] netlink: 24 bytes leftover after parsing attributes in process `syz.1.477'. [ 109.210264][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.477'. [ 109.310835][ T6829] netlink: 'syz.1.478': attribute type 7 has an invalid length. [ 109.319180][ T6829] netlink: 'syz.1.478': attribute type 39 has an invalid length. [ 109.363430][ T6829] bridge2: port 1(gretap1) entered blocking state [ 109.366109][ T6829] bridge2: port 1(gretap1) entered disabled state [ 109.371304][ T6829] gretap1: entered allmulticast mode [ 109.376383][ T6829] gretap1: entered promiscuous mode [ 109.407620][ T6829] netlink: 'syz.1.478': attribute type 7 has an invalid length. [ 109.413435][ T6829] netlink: 'syz.1.478': attribute type 39 has an invalid length. [ 109.734725][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'. [ 109.910855][ T6851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.485'. [ 110.044331][ T6854] hub 2-0:1.0: USB hub found [ 110.045807][ T6854] hub 2-0:1.0: 2 ports detected [ 110.071312][ T6854] __vm_enough_memory: pid: 6854, comm: syz.0.486, bytes: 4294963200 not enough memory for the allocation [ 110.107120][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.487'. [ 110.116595][ T6856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.487'. [ 110.821714][ T829] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 110.981785][ T829] usb 6-1: Using ep0 maxpacket: 16 [ 110.987428][ T829] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 110.989821][ T829] usb 6-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 110.993319][ T829] usb 6-1: config 0 has no interface number 0 [ 110.995868][ T829] usb 6-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.001237][ T829] usb 6-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 111.005675][ T829] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 111.007868][ T829] usb 6-1: Product: syz [ 111.009004][ T829] usb 6-1: SerialNumber: syz [ 111.014673][ T829] usb 6-1: config 0 descriptor?? [ 111.017617][ T829] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 111.027611][ T829] snd-usb-audio 6-1:0.2: probe with driver snd-usb-audio failed with error -2 [ 111.048008][ T6249] udevd[6249]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.139376][ T6859] syz.0.488 (6859): drop_caches: 1 [ 111.235563][ T39] audit: type=1326 audit(1728839426.301:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.1.489" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x0 [ 111.721255][ T6876] netlink: 20 bytes leftover after parsing attributes in process `syz.3.494'. [ 111.862353][ T6877] overlayfs: failed to resolve './file1': -2 [ 112.141333][ T39] audit: type=1326 audit(1728839427.201:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.0.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7fc00000 [ 112.252582][ T39] audit: type=1326 audit(1728839427.321:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.0.491" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf747e579 code=0x7fc00000 [ 112.275152][ T6884] netlink: 20 bytes leftover after parsing attributes in process `syz.2.495'. [ 112.278466][ T39] audit: type=1326 audit(1728839427.321:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.0.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7fc00000 [ 112.286355][ T39] audit: type=1326 audit(1728839427.321:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.0.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7fc00000 [ 112.294033][ T39] audit: type=1326 audit(1728839427.321:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.0.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7fc00000 [ 112.299455][ T39] audit: type=1326 audit(1728839427.321:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.0.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7fc00000 [ 112.306134][ T39] audit: type=1326 audit(1728839427.321:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.0.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7fc00000 [ 112.314069][ T39] audit: type=1326 audit(1728839427.321:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.0.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7fc00000 [ 112.323562][ T39] audit: type=1326 audit(1728839427.321:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.0.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7fc00000 [ 112.331333][ T39] audit: type=1326 audit(1728839427.321:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.0.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7fc00000 [ 112.419616][ T6885] overlayfs: failed to resolve './file1': -2 [ 113.323598][ T6893] netlink: 20 bytes leftover after parsing attributes in process `syz.3.497'. [ 113.389775][ T6894] overlayfs: failed to resolve './file1': -2 [ 113.600804][ T5411] usb 6-1: USB disconnect, device number 9 [ 114.583516][ T6917] netlink: 20 bytes leftover after parsing attributes in process `syz.0.501'. [ 114.658305][ T6919] overlayfs: failed to resolve './file1': -2 [ 115.094637][ T6925] team0 (unregistering): Port device team_slave_0 removed [ 115.103633][ T6925] team0 (unregistering): Port device team_slave_1 removed [ 115.287713][ T6925] syz.2.503 (6925) used greatest stack depth: 21072 bytes left [ 116.411496][ T6940] netlink: 20 bytes leftover after parsing attributes in process `syz.0.507'. [ 116.478218][ T6941] overlayfs: failed to resolve './file1': -2 [ 117.661670][ T25] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 117.834283][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.838197][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.851874][ T25] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 117.855329][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.860828][ T25] usb 6-1: config 0 descriptor?? [ 118.057245][ T6960] overlayfs: failed to decode file handle (len=2, type=1, flags=0, err=-22) [ 118.122348][ T25] usbhid 6-1:0.0: can't add hid device: -71 [ 118.124063][ T25] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 118.142790][ T25] usb 6-1: USB disconnect, device number 10 [ 118.373275][ T6974] netlink: 20 bytes leftover after parsing attributes in process `syz.2.524'. [ 118.444151][ T6980] overlayfs: failed to resolve './file1': -2 [ 118.637352][ T6989] netlink: 20 bytes leftover after parsing attributes in process `syz.3.521'. [ 118.645637][ T6987] tipc: Started in network mode [ 118.647168][ T6987] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 118.649433][ T6987] tipc: Enabled bearer , priority 0 [ 118.745178][ T6994] bond_slave_0: entered promiscuous mode [ 118.746950][ T6994] bond_slave_1: entered promiscuous mode [ 118.747712][ T6992] overlayfs: failed to resolve './file1': -2 [ 118.748394][ T6994] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 118.779724][ T6994] bond_slave_0: left promiscuous mode [ 118.784368][ T6994] bond_slave_1: left promiscuous mode [ 118.786028][ T6994] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 118.944191][ T6994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.955190][ T6994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.963832][ T6994] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 118.971202][ T6994] bond0 (unregistering): Released all slaves [ 119.274175][ T7004] netlink: 24 bytes leftover after parsing attributes in process `syz.0.526'. [ 119.572593][ T7008] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 119.707735][ T7012] Cannot find add_set index 0 as target [ 119.740416][ T5411] IPVS: starting estimator thread 0... [ 119.763691][ T30] tipc: Node number set to 11578026 [ 119.851819][ T7015] IPVS: using max 20 ests per chain, 48000 per kthread [ 119.989571][ T7028] overlayfs: failed to decode file handle (len=2, type=1, flags=0, err=-22) [ 120.651341][ T5536] kernel write not supported for file bpf-prog (pid: 5536 comm: kworker/2:4) [ 121.074008][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 121.416262][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.548'. [ 121.430208][ T7071] batman_adv: batadv1: Adding interface: netdevsim0 [ 121.432789][ T7071] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.444062][ T7071] batman_adv: batadv1: Interface activated: netdevsim0 [ 121.554674][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.560'. [ 121.557355][ T7078] netlink: 'syz.3.560': attribute type 5 has an invalid length. [ 121.784029][ T7093] netlink: 20 bytes leftover after parsing attributes in process `syz.1.568'. [ 121.840051][ T7097] overlayfs: failed to resolve './file1': -2 [ 121.841734][ T7096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.561'. [ 121.846496][ T7096] netlink: 'syz.0.561': attribute type 20 has an invalid length. [ 122.554530][ T7109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.565'. [ 122.653880][ T7112] overlayfs: failed to resolve './file1': -2 [ 122.672753][ T7111] netlink: 20 bytes leftover after parsing attributes in process `syz.3.567'. [ 122.753472][ T7116] overlayfs: failed to resolve './file1': -2 [ 124.300242][ T7134] netlink: 20 bytes leftover after parsing attributes in process `syz.1.582'. [ 124.312615][ T7136] netlink: 20 bytes leftover after parsing attributes in process `syz.3.583'. [ 124.370912][ T7138] overlayfs: failed to resolve './file1': -2 [ 124.373883][ T7139] overlayfs: failed to resolve './file1': -2 [ 125.260169][ T7145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.575'. [ 125.267804][ T7145] batman_adv: batadv1: Adding interface: netdevsim0 [ 125.269606][ T7145] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.282058][ T7145] batman_adv: batadv1: Interface activated: netdevsim0 [ 125.477912][ T7149] bond_slave_0: entered promiscuous mode [ 125.479464][ T7149] bond_slave_1: entered promiscuous mode [ 125.489587][ T7149] bond_slave_0: left promiscuous mode [ 125.493853][ T7149] bond_slave_1: left promiscuous mode [ 125.575836][ T7149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.581717][ T7149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.586636][ T7149] bond0 (unregistering): Released all slaves [ 125.766605][ T7159] netlink: 20 bytes leftover after parsing attributes in process `syz.1.581'. [ 125.824115][ T7163] overlayfs: failed to resolve './file1': -2 [ 126.112159][ T5411] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 126.284451][ T5411] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.287652][ T5411] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.290771][ T5411] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 126.293881][ T5411] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.297844][ T5411] usb 7-1: config 0 descriptor?? [ 126.530588][ T5411] usbhid 7-1:0.0: can't add hid device: -71 [ 126.533666][ T5411] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 126.540627][ T5411] usb 7-1: USB disconnect, device number 9 [ 127.191721][ T5536] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 127.352902][ T5536] usb 6-1: config 0 has no interfaces? [ 127.354447][ T5536] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.356868][ T5536] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.359825][ T5536] usb 6-1: config 0 descriptor?? [ 127.576882][ T7182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.588'. [ 127.585047][ T7182] batman_adv: batadv1: Adding interface: netdevsim0 [ 127.586809][ T7182] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.596904][ T7182] batman_adv: batadv1: Not using interface netdevsim0 (retrying later): interface not active [ 128.751159][ T5536] usb 6-1: USB disconnect, device number 11 [ 128.832257][ T7185] netlink: 20 bytes leftover after parsing attributes in process `syz.3.590'. [ 128.898880][ T7190] overlayfs: failed to resolve './file1': -2 [ 128.950693][ T7195] netlink: 20 bytes leftover after parsing attributes in process `syz.2.592'. [ 129.020311][ T7198] overlayfs: failed to resolve './file1': -2 [ 129.038203][ T7201] netlink: 20 bytes leftover after parsing attributes in process `syz.0.594'. [ 129.099313][ T7203] overlayfs: failed to resolve './file1': -2 [ 130.526937][ T7218] netlink: 20 bytes leftover after parsing attributes in process `syz.3.607'. [ 130.591408][ T7224] overlayfs: failed to resolve './file1': -2 [ 130.595123][ T7222] netlink: 20 bytes leftover after parsing attributes in process `syz.2.609'. [ 130.596674][ C3] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 130.653481][ T7229] overlayfs: failed to resolve './file1': -2 [ 132.076125][ T7246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.615'. [ 132.152847][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.154909][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.174614][ T7251] netlink: 20 bytes leftover after parsing attributes in process `syz.3.608'. [ 132.255133][ T7252] overlayfs: failed to resolve './file1': -2 [ 133.091792][ T5536] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 133.243113][ T5536] usb 7-1: config 0 has no interfaces? [ 133.245060][ T5536] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.248366][ T5536] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.253037][ T5536] usb 7-1: config 0 descriptor?? [ 133.594999][ T7270] netlink: 20 bytes leftover after parsing attributes in process `syz.0.623'. [ 133.659970][ T7273] overlayfs: failed to resolve './file1': -2 [ 133.666312][ T5411] usb 7-1: USB disconnect, device number 10 [ 133.831645][ T5392] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 133.991620][ T5392] usb 8-1: Using ep0 maxpacket: 32 [ 133.994349][ T5392] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 133.997409][ T5392] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 134.000392][ T5392] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 134.011729][ T5392] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 134.014885][ T5392] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 134.017865][ T5392] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 134.031659][ T5392] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 134.034328][ T5392] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.042197][ T5392] usb 8-1: config 0 descriptor?? [ 134.237992][ T7277] netlink: 20 bytes leftover after parsing attributes in process `syz.2.616'. [ 134.303156][ T7280] overlayfs: failed to resolve './file1': -2 [ 134.311707][ T7279] netlink: 20 bytes leftover after parsing attributes in process `syz.1.617'. [ 134.465269][ T7279] overlayfs: failed to resolve './file1': -2 [ 134.494517][ T1199] ================================================================== [ 134.497471][ T1199] BUG: KASAN: slab-use-after-free in kvfree_call_rcu+0xb99/0xbe0 [ 134.500335][ T1199] Write of size 8 at addr ffff888062198808 by task kworker/u32:11/1199 [ 134.504974][ T1199] [ 134.505858][ T1199] CPU: 1 UID: 0 PID: 1199 Comm: kworker/u32:11 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 134.509763][ T1199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 134.513608][ T1199] Workqueue: netns cleanup_net [ 134.515405][ T1199] Call Trace: [ 134.516629][ T1199] [ 134.517716][ T1199] dump_stack_lvl+0x116/0x1f0 [ 134.519453][ T1199] print_report+0xc3/0x620 [ 134.521090][ T1199] ? __virt_addr_valid+0x5e/0x590 [ 134.522934][ T1199] ? __phys_addr+0xc6/0x150 [ 134.524592][ T1199] kasan_report+0xd9/0x110 [ 134.526225][ T1199] ? kvfree_call_rcu+0xb99/0xbe0 [ 134.528050][ T1199] ? kvfree_call_rcu+0xb99/0xbe0 [ 134.529857][ T1199] kvfree_call_rcu+0xb99/0xbe0 [ 134.531609][ T1199] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 134.533732][ T1199] _cfg80211_unregister_wdev+0x38c/0x7f0 [ 134.535781][ T1199] ieee80211_remove_interfaces+0x36d/0x760 [ 134.537917][ T1199] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 134.540228][ T1199] ieee80211_unregister_hw+0x55/0x3a0 [ 134.542195][ T1199] mac80211_hwsim_del_radio+0x268/0x370 [ 134.544276][ T1199] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 134.546492][ T1199] ? hwsim_exit_net+0x2f3/0x6d0 [ 134.548280][ T1199] ? __local_bh_enable_ip+0xa4/0x120 [ 134.550192][ T1199] hwsim_exit_net+0x33f/0x6d0 [ 134.551797][ T1199] ? __pfx_hwsim_exit_net+0x10/0x10 [ 134.553612][ T1199] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 134.555565][ T1199] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 134.557632][ T1199] ? __pfx_hwsim_exit_net+0x10/0x10 [ 134.559539][ T1199] ops_exit_list+0xb0/0x180 [ 134.561213][ T1199] cleanup_net+0x5b7/0xb40 [ 134.562866][ T1199] ? __pfx_cleanup_net+0x10/0x10 [ 134.564667][ T1199] ? trace_lock_acquire+0x14a/0x1d0 [ 134.566571][ T1199] ? process_one_work+0x8bb/0x1b30 [ 134.568472][ T1199] ? lock_acquire+0x2f/0xb0 [ 134.570145][ T1199] ? process_one_work+0x8bb/0x1b30 [ 134.572023][ T1199] process_one_work+0x958/0x1b30 [ 134.573839][ T1199] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 134.575905][ T1199] ? __pfx_process_one_work+0x10/0x10 [ 134.577884][ T1199] ? assign_work+0x1a0/0x250 [ 134.579598][ T1199] worker_thread+0x6c8/0xf00 [ 134.581299][ T1199] ? __kthread_parkme+0x148/0x220 [ 134.583185][ T1199] ? __pfx_worker_thread+0x10/0x10 [ 134.585131][ T1199] kthread+0x2c1/0x3a0 [ 134.586677][ T1199] ? _raw_spin_unlock_irq+0x23/0x50 [ 134.588646][ T1199] ? __pfx_kthread+0x10/0x10 [ 134.590344][ T1199] ret_from_fork+0x45/0x80 [ 134.591976][ T1199] ? __pfx_kthread+0x10/0x10 [ 134.593680][ T1199] ret_from_fork_asm+0x1a/0x30 [ 134.595474][ T1199] [ 134.596635][ T1199] [ 134.597533][ T1199] Allocated by task 5898: [ 134.599177][ T1199] kasan_save_stack+0x33/0x60 [ 134.600894][ T1199] kasan_save_track+0x14/0x30 [ 134.602619][ T1199] __kasan_kmalloc+0xaa/0xb0 [ 134.604328][ T1199] __kmalloc_noprof+0x1e8/0x410 [ 134.606110][ T1199] nl80211_set_cqm+0xa19/0x1780 [ 134.607897][ T1199] genl_family_rcv_msg_doit+0x202/0x2f0 [ 134.609920][ T1199] genl_rcv_msg+0x565/0x800 [ 134.611590][ T1199] netlink_rcv_skb+0x165/0x410 [ 134.613344][ T1199] genl_rcv+0x28/0x40 [ 134.614828][ T1199] netlink_unicast+0x53c/0x7f0 [ 134.616581][ T1199] netlink_sendmsg+0x8b8/0xd70 [ 134.618358][ T1199] ____sys_sendmsg+0x9ae/0xb40 [ 134.620196][ T1199] ___sys_sendmsg+0x135/0x1e0 [ 134.621921][ T1199] __sys_sendmsg+0x117/0x1f0 [ 134.623669][ T1199] __do_fast_syscall_32+0x73/0x120 [ 134.625547][ T1199] do_fast_syscall_32+0x32/0x80 [ 134.627339][ T1199] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.629657][ T1199] [ 134.630545][ T1199] Freed by task 112: [ 134.631981][ T1199] kasan_save_stack+0x33/0x60 [ 134.633718][ T1199] kasan_save_track+0x14/0x30 [ 134.635453][ T1199] kasan_save_free_info+0x3b/0x60 [ 134.637285][ T1199] __kasan_slab_free+0x51/0x70 [ 134.639056][ T1199] kfree+0x14f/0x4b0 [ 134.640492][ T1199] kvfree+0x47/0x50 [ 134.641889][ T1199] kvfree_rcu_list+0xf5/0x2c0 [ 134.643622][ T1199] kfree_rcu_monitor+0x503/0x8b0 [ 134.645421][ T1199] kfree_rcu_shrink_scan+0x245/0x3a0 [ 134.647343][ T1199] do_shrink_slab+0x44f/0x11c0 [ 134.649070][ T1199] shrink_slab+0x32b/0x12a0 [ 134.650719][ T1199] shrink_one+0x47e/0x7b0 [ 134.652295][ T1199] shrink_node+0x2452/0x39d0 [ 134.653971][ T1199] balance_pgdat+0xc19/0x18f0 [ 134.655685][ T1199] kswapd+0x5ea/0xbf0 [ 134.657147][ T1199] kthread+0x2c1/0x3a0 [ 134.658632][ T1199] ret_from_fork+0x45/0x80 [ 134.660262][ T1199] ret_from_fork_asm+0x1a/0x30 [ 134.662013][ T1199] [ 134.662911][ T1199] Last potentially related work creation: [ 134.664947][ T1199] kasan_save_stack+0x33/0x60 [ 134.666647][ T1199] __kasan_record_aux_stack+0xba/0xd0 [ 134.668584][ T1199] kvfree_call_rcu+0x74/0xbe0 [ 134.670292][ T1199] _cfg80211_unregister_wdev+0x38c/0x7f0 [ 134.672326][ T1199] ieee80211_remove_interfaces+0x36d/0x760 [ 134.674446][ T1199] ieee80211_unregister_hw+0x55/0x3a0 [ 134.676408][ T1199] mac80211_hwsim_del_radio+0x268/0x370 [ 134.678409][ T1199] hwsim_exit_net+0x33f/0x6d0 [ 134.680134][ T1199] ops_exit_list+0xb0/0x180 [ 134.681787][ T1199] cleanup_net+0x5b7/0xb40 [ 134.683419][ T1199] process_one_work+0x958/0x1b30 [ 134.685221][ T1199] worker_thread+0x6c8/0xf00 [ 134.686945][ T1199] kthread+0x2c1/0x3a0 [ 134.688428][ T1199] ret_from_fork+0x45/0x80 [ 134.690057][ T1199] ret_from_fork_asm+0x1a/0x30 [ 134.691809][ T1199] [ 134.692683][ T1199] Second to last potentially related work creation: [ 134.695071][ T1199] kasan_save_stack+0x33/0x60 [ 134.696794][ T1199] __kasan_record_aux_stack+0xba/0xd0 [ 134.698751][ T1199] kvfree_call_rcu+0x74/0xbe0 [ 134.700489][ T1199] _cfg80211_unregister_wdev+0x38c/0x7f0 [ 134.702534][ T1199] cfg80211_netdev_notifier_call+0xa5c/0x1160 [ 134.704765][ T1199] notifier_call_chain+0xb9/0x410 [ 134.706591][ T1199] call_netdevice_notifiers_info+0xbe/0x140 [ 134.708735][ T1199] __dev_change_net_namespace+0x44f/0x12a0 [ 134.710858][ T1199] cfg80211_switch_netns+0x11e/0x690 [ 134.712765][ T1199] nl80211_wiphy_netns+0x134/0x2b0 [ 134.714621][ T1199] genl_family_rcv_msg_doit+0x202/0x2f0 [ 134.716639][ T1199] genl_rcv_msg+0x565/0x800 [ 134.718297][ T1199] netlink_rcv_skb+0x165/0x410 [ 134.720047][ T1199] genl_rcv+0x28/0x40 [ 134.721504][ T1199] netlink_unicast+0x53c/0x7f0 [ 134.723123][ T1199] netlink_sendmsg+0x8b8/0xd70 [ 134.724355][ T1199] ____sys_sendmsg+0x9ae/0xb40 [ 134.725580][ T1199] ___sys_sendmsg+0x135/0x1e0 [ 134.726810][ T1199] __sys_sendmsg+0x117/0x1f0 [ 134.727998][ T1199] __do_fast_syscall_32+0x73/0x120 [ 134.729311][ T1199] do_fast_syscall_32+0x32/0x80 [ 134.730564][ T1199] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.732189][ T1199] [ 134.732813][ T1199] The buggy address belongs to the object at ffff888062198800 [ 134.732813][ T1199] which belongs to the cache kmalloc-64 of size 64 [ 134.736292][ T1199] The buggy address is located 8 bytes inside of [ 134.736292][ T1199] freed 64-byte region [ffff888062198800, ffff888062198840) [ 134.739676][ T1199] [ 134.740315][ T1199] The buggy address belongs to the physical page: [ 134.741942][ T1199] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x62198 [ 134.744177][ T1199] anon flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 134.746112][ T1199] page_type: f5(slab) [ 134.747148][ T1199] raw: 04fff00000000000 ffff88801ac428c0 ffffea00017aef40 dead000000000005 [ 134.749337][ T1199] raw: 0000000000000000 0000000000200020 00000001f5000000 0000000000000000 [ 134.751516][ T1199] page dumped because: kasan: bad access detected [ 134.753150][ T1199] page_owner tracks the page as allocated [ 134.754603][ T1199] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5424, tgid 5424 (syz-executor), ts 49927932309, free_ts 0 [ 134.759169][ T1199] post_alloc_hook+0x2d1/0x350 [ 134.760402][ T1199] get_page_from_freelist+0x101e/0x3070 [ 134.761824][ T1199] __alloc_pages_noprof+0x223/0x25a0 [ 134.763191][ T1199] alloc_pages_mpol_noprof+0x2c9/0x610 [ 134.764589][ T1199] new_slab+0x2ba/0x3f0 [ 134.765661][ T1199] ___slab_alloc+0xd1d/0x16f0 [ 134.766888][ T1199] __slab_alloc.constprop.0+0x56/0xb0 [ 134.768272][ T1199] __kmalloc_noprof+0x379/0x410 [ 134.769531][ T1199] security_inode_init_security+0x140/0x390 [ 134.771057][ T1199] shmem_symlink+0x138/0x6a0 [ 134.772246][ T1199] vfs_symlink+0x3e8/0x660 [ 134.773407][ T1199] do_symlinkat+0x263/0x310 [ 134.774576][ T1199] __ia32_sys_symlinkat+0x93/0xc0 [ 134.775872][ T1199] __do_fast_syscall_32+0x73/0x120 [ 134.777114][ T1199] do_fast_syscall_32+0x32/0x80 [ 134.778397][ T1199] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.780031][ T1199] page_owner free stack trace missing [ 134.781400][ T1199] [ 134.782022][ T1199] Memory state around the buggy address: [ 134.783468][ T1199] ffff888062198700: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 134.785500][ T1199] ffff888062198780: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 134.787542][ T1199] >ffff888062198800: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 134.789582][ T1199] ^ [ 134.790692][ T1199] ffff888062198880: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 134.792761][ T1199] ffff888062198900: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 134.794810][ T1199] ================================================================== [ 134.796846][ T1199] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 134.798680][ T1199] CPU: 1 UID: 0 PID: 1199 Comm: kworker/u32:11 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 134.801469][ T1199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 134.804227][ T1199] Workqueue: netns cleanup_net [ 134.805488][ T1199] Call Trace: [ 134.806353][ T1199] [ 134.807132][ T1199] dump_stack_lvl+0x3d/0x1f0 [ 134.808387][ T1199] panic+0x71d/0x800 [ 134.809421][ T1199] ? __pfx_panic+0x10/0x10 [ 134.810576][ T1199] ? rcu_is_watching+0x12/0xc0 [ 134.811820][ T1199] ? __pfx_lock_release+0x10/0x10 [ 134.813120][ T1199] ? check_panic_on_warn+0x1f/0xb0 [ 134.814484][ T1199] check_panic_on_warn+0xab/0xb0 [ 134.815782][ T1199] end_report+0x117/0x180 [ 134.816909][ T1199] kasan_report+0xe9/0x110 [ 134.818063][ T1199] ? kvfree_call_rcu+0xb99/0xbe0 [ 134.819353][ T1199] ? kvfree_call_rcu+0xb99/0xbe0 [ 134.820634][ T1199] kvfree_call_rcu+0xb99/0xbe0 [ 134.821875][ T1199] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 134.823392][ T1199] _cfg80211_unregister_wdev+0x38c/0x7f0 [ 134.824838][ T1199] ieee80211_remove_interfaces+0x36d/0x760 [ 134.826336][ T1199] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 134.827968][ T1199] ieee80211_unregister_hw+0x55/0x3a0 [ 134.829367][ T1199] mac80211_hwsim_del_radio+0x268/0x370 [ 134.830796][ T1199] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 134.832394][ T1199] ? hwsim_exit_net+0x2f3/0x6d0 [ 134.833679][ T1199] ? __local_bh_enable_ip+0xa4/0x120 [ 134.835053][ T1199] hwsim_exit_net+0x33f/0x6d0 [ 134.836273][ T1199] ? __pfx_hwsim_exit_net+0x10/0x10 [ 134.837673][ T1199] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 134.839113][ T1199] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 134.840586][ T1199] ? __pfx_hwsim_exit_net+0x10/0x10 [ 134.841931][ T1199] ops_exit_list+0xb0/0x180 [ 134.843133][ T1199] cleanup_net+0x5b7/0xb40 [ 134.844292][ T1199] ? __pfx_cleanup_net+0x10/0x10 [ 134.845568][ T1199] ? trace_lock_acquire+0x14a/0x1d0 [ 134.846918][ T1199] ? process_one_work+0x8bb/0x1b30 [ 134.848242][ T1199] ? lock_acquire+0x2f/0xb0 [ 134.849416][ T1199] ? process_one_work+0x8bb/0x1b30 [ 134.850742][ T1199] process_one_work+0x958/0x1b30 [ 134.852024][ T1199] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 134.853468][ T1199] ? __pfx_process_one_work+0x10/0x10 [ 134.854859][ T1199] ? assign_work+0x1a0/0x250 [ 134.856094][ T1199] worker_thread+0x6c8/0xf00 [ 134.857318][ T1199] ? __kthread_parkme+0x148/0x220 [ 134.858661][ T1199] ? __pfx_worker_thread+0x10/0x10 [ 134.860011][ T1199] kthread+0x2c1/0x3a0 [ 134.861077][ T1199] ? _raw_spin_unlock_irq+0x23/0x50 [ 134.862427][ T1199] ? __pfx_kthread+0x10/0x10 [ 134.863820][ T1199] ret_from_fork+0x45/0x80 [ 134.865014][ T1199] ? __pfx_kthread+0x10/0x10 [ 134.866237][ T1199] ret_from_fork_asm+0x1a/0x30 [ 134.867523][ T1199] [ 135.933709][ T1199] Shutting down cpus with NMI [ 135.935596][ T1199] Kernel Offset: disabled [ 135.936729][ T1199] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:10:49 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000400 RCX=ffffffff877e3d37 RDX=ffff8880254b4880 RSI=ffffffff877e3a3e RDI=0000000000000004 RBP=ffff88801f659d00 RSP=ffffc90003807c48 R8 =0000000000000004 R9 =0000000000000400 R10=000000000000003b R11=0000000000000000 R12=dffffc0000000000 R13=dffffc0000000000 R14=000000000000003b R15=ffff888024d29558 RIP=ffffffff818cb976 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002001c000 CR3=000000001f7fa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85037bc5 RDI=ffffffff9a63c220 RBP=ffffffff9a63c1e0 RSP=ffffc90007087310 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000074697257 R12=0000000000000000 R13=0000000000000066 R14=ffffffff85037b60 R15=0000000000000000 RIP=ffffffff85037bef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f525182a CR3=0000000063e16000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000011400000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff813c583e RDX=ffff888024d62440 RSI=ffffffff813c585b RDI=0000000000000000 RBP=ffff88802b529580 RSP=ffffc900061ff9f8 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffff88802b63fdc0 R15=ffffed10056a52b0 RIP=ffffffff813c585c RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000558fd1d85000 CR3=0000000021bbe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=1a352f1a1a352f1a 1a352f1a1a352f1a 1a352f1a1a352f1a 1a352f1a1a352f1a 1a352f1a1a352f1a 1a352f1a1a352f1a 1a352f1a1a352f1a 1a352f1a1a352f1a ZMM22=0f4d852d0f4d852d 0f4d852d0f4d852d 0f4d852d0f4d852d 0f4d852d0f4d852d 0f4d852d0f4d852d 0f4d852d0f4d852d 0f4d852d0f4d852d 0f4d852d0f4d852d ZMM23=2827fd062827fd06 2827fd062827fd06 2827fd062827fd06 2827fd062827fd06 2827fd062827fd06 2827fd062827fd06 2827fd062827fd06 2827fd062827fd06 ZMM24=15c10bbc15c10bbc 15c10bbc15c10bbc 15c10bbc15c10bbc 15c10bbc15c10bbc 15c10bbc15c10bbc 15c10bbc15c10bbc 15c10bbc15c10bbc 15c10bbc15c10bbc ZMM25=16b1ad6616b1ad66 16b1ad6616b1ad66 16b1ad6616b1ad66 16b1ad6616b1ad66 16b1ad6616b1ad66 16b1ad6616b1ad66 16b1ad6616b1ad66 16b1ad6616b1ad66 ZMM26=c2174e77c2174e77 c2174e77c2174e77 c2174e77c2174e77 c2174e77c2174e77 c2174e77c2174e77 c2174e77c2174e77 c2174e77c2174e77 c2174e77c2174e77 ZMM27=8b63a35f8b63a35f 8b63a35f8b63a35f 8b63a35f8b63a35f 8b63a35f8b63a35f 8b63a35f8b63a35f 8b63a35f8b63a35f 8b63a35f8b63a35f 8b63a35f8b63a35f ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=6d0500006d050000 6d0500006d050000 6d0500006d050000 6d0500006d050000 6d0500006d050000 6d0500006d050000 6d0500006d050000 6d0500006d050000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000022 RCX=ffffffff816a0168 RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff9698cc40 RBP=0000000000000000 RSP=ffffc90000e4f100 R8 =0000000000000000 R9 =fffffbfff2d31988 R10=ffffffff9698cc47 R11=0000000000000002 R12=dffffc0000000000 R13=ffff88802070d3b0 R14=0000000000000002 R15=ffff88802070c880 RIP=ffffffff81edf8f0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000003221fffc CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000