last executing test programs: 1m41.37143088s ago: executing program 2 (id=20): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x2, @loopback, 0x8}, {0xa, 0x4e23, 0x5, @remote, 0x8}, r3, 0x10007}}, 0x48) r4 = syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4090) waitid(0x1, r4, 0x0, 0x2, 0x0) syz_ublk_setup_io_uring(0xfe7, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000480)) 1m41.330300658s ago: executing program 2 (id=21): socket$nl_crypto(0x10, 0x3, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1c}) sendto$unix(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x24040070, &(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x10) syz_io_uring_setup(0x141c, 0x0, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)) lchown(0x0, 0x0, 0x0) syz_io_uring_modify_offsets$generic(0x0, r0, 0x2c, 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$panthor(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) madvise(&(0x7f000038b000/0x7000)=nil, 0x7000, 0x15) 1m41.11201636s ago: executing program 2 (id=23): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m40.98140339s ago: executing program 2 (id=25): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) syz_open_procfs(r1, &(0x7f0000009b40)='pagemap\x00') syz_usb_disconnect(0xffffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1m40.077343853s ago: executing program 2 (id=39): r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) fgetxattr(r0, &(0x7f0000000100)=@known='security.selinux\x00', &(0x7f0000000240)=""/127, 0x7f) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 1m39.86162881s ago: executing program 2 (id=32): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x80800) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x3}, 0x5}], 0x1, 0x2000, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x2, 0x0, 0x0, r2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m24.554349931s ago: executing program 32 (id=32): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x80800) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x3}, 0x5}], 0x1, 0x2000, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x2, 0x0, 0x0, r2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.357334973s ago: executing program 3 (id=597): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x44050) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x80) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 5.436113971s ago: executing program 3 (id=603): socket$rds(0x15, 0x5, 0x0) r0 = syz_ublk_setup_io_uring(0x2261, &(0x7f0000000300)={0x0, 0xd58c, 0x80, 0x2, 0x30b}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) eventfd2(0x1, 0x80001) r4 = eventfd(0xe467) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080)=r4, 0x1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x21, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 3.7822465s ago: executing program 4 (id=611): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) sched_setattr(0x0, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0xb, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x0, 0x255}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x27ffffe, 0xfe78b36d55c77b99, 0x2100, 0x2d8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x0, 0x32e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4, 0xfffffffc, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0xe, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r4, '\x00', {0x3, 0xe0b, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) 3.777783186s ago: executing program 1 (id=612): memfd_create(&(0x7f0000000440)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR\xab\xddt\x96s8\xf4\x1c\bi\xe4^\xd5\xfd+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\x8c\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x9a\xc7sn\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b^\xb9\x00\x00\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4kej\f\x8f\x9b\\\x16\xb3)\xf2\x97;\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\x01\x01\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05}0\xba\xa9\x13\xc4\xd3\xa9\xb6~\x12\xcf.9\xc0\x1e\xbe\x1a:H\xads\x98\xc1m{1YM{d\xec\xff\xff\x8f\xe7j\x9c\xf9+\xc30\x13}\x9e\xff\x8d\xca\xc8)\xc9h(a\xf33\xe8\x90\x03#\xcb\xfb\x14\xe9\x06\xaaQ\x80\xdax=\xf5t-\x88\x9f\xf7\xeavp\aj\xb3\xba\xf4tP>\xf6o\xf2\xb4\xfb\xa9\xe2\x8d\xdf\t\xe9\xcb\xc2wz\x96\xf3)M\xbf\xa8\xba>\xbf\xfe\x16U,Q\x0e\xef\x81\xd55V\n\x8f\xff\xe8d\xc7w;\x92\x19\v\xc0$u\a\xfa\xa7`\xc1@:W<\x96` \xb9\xa1}\x18\xdf\xfbmY\xd2\xb7p<]\\\xec\x84BC\xde\xf3\xf8\x84\xf3f\x99[\xcbD\x93\xbcFo\xd0\xd7\x86\xf7\x98\x95i7\xef\xbe\xf7]z\x17\xd5\xa2\x17\xb5\xa9\x8enU\x0f\b\xa43\x0f\xd1\xfdb\x1eu\xc4\xe9K\xd6\xdf=\xbbL\x8e\xa4o~_\xd7u\xe7+\x86\xf0\x97\xcd\xaa\xbc\x82\xa5\xe3\xe9\x064]5\xa5@\x1bq\xb9\xee\x81.\x1c*I@\xcf\x8b\xa5\xb5\x97|\x8e=\xdc\x18n\x0fA5\x02\xb9\xf4\xb6\xe27_y\xceU\xb0MDS\xf05\a\xdd\x88lP\x0f\xedG\xff\b\xb4@F#T\x81\x11\xb0a\xfcVkr\xd1\x1b\x1b\a\xe5%/\xc1\xca[\x82\x01[\x11\xc0\xc4\xd7+\xe6<\xcbk\x97\xd1^\xe6\xd3\xbc?H\x03\xb0\xd1\x0f\x13', 0x4) userfaultfd(0x80001) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.62115499s ago: executing program 1 (id=613): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x7e}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0x220040000000fff, 0x0, 0x180, 0x0, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffa, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, r4, 0xfffff000) 3.343687977s ago: executing program 1 (id=615): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000009, 0x400}, 0x0, 0x0) 3.340826907s ago: executing program 0 (id=624): setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc4) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x4, 0x5, 0x166}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.124393054s ago: executing program 3 (id=616): capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x0, 0xa}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_ublk_setup_io_uring(0x3cb0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@local, @multicast, @val={@val={0x88a8, 0x2, 0x0, 0x1}, {0x8100, 0x5, 0x0, 0x1}}, {@arp={0x806, @generic={0x6, 0xa00, 0x6, 0x2, 0x8, @remote, "1955", @empty, "0af3d75f11a3"}}}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f00003e9000/0x4000)=nil, 0x4000, 0x4) 3.049905143s ago: executing program 4 (id=617): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000060000000000000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) sendto$packet(r0, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0xe, 0x40000, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x1, 0x10, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 2.682705394s ago: executing program 4 (id=618): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@private=0xa010101, 0x4908, 0x0, 0x1}}, 0x44) r1 = socket$inet(0x2, 0x1, 0x6) connect(r1, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)='devices.allow\x00', 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000540), 0x8) write$cgroup_devices(r2, &(0x7f0000000500)={'b', ' *:* ', 'rwm\x00'}, 0xa) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x6, 0x2, 0x9, 0x42, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r5, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)='%-010d \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r6}, &(0x7f0000000780)=0x40000000, &(0x7f00000007c0)='%pS \x00', 0x2}, 0x20) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0) 1.665414462s ago: executing program 3 (id=620): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@link_local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x2c, 0x0, @private1, @loopback}}}}}}}, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @empty}, 0x10) listen(r0, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20008001, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) accept4(r0, 0x0, 0x0, 0x0) 1.662264859s ago: executing program 1 (id=629): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000180), 0x0, 0x80) ioctl$FE_READ_SIGNAL_STRENGTH(r2, 0x80026f47, &(0x7f0000000000)) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0xfff5, &(0x7f0000000240)={0x77359400}, 0x0, 0x1) r3 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) sendmmsg$unix(r3, &(0x7f0000000080), 0x0, 0x2000c004) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) 1.661191129s ago: executing program 0 (id=621): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b"], 0x120}}, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x400000002, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r2], 0xfe33) 1.661076577s ago: executing program 4 (id=622): r0 = socket$netlink(0x10, 0x3, 0x2) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) fchdir(r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) stat(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.440250067s ago: executing program 4 (id=623): r0 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x80000) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.440004956s ago: executing program 0 (id=625): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003001c0012800b00010067726574617000000c00028008000700ac14142808000a00", @ANYRES32=r3], 0x44}}, 0x20000844) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) sendto$packet(r4, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0xe, 0x48000, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.431503566s ago: executing program 1 (id=633): sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, r0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0xa000200) r3 = semget$private(0x0, 0x4000, 0x0) semctl$SETALL(r3, 0x0, 0x11, &(0x7f00000000c0)=[0x0]) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) 1.228662386s ago: executing program 0 (id=626): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xffffffffb5404c40, 0x0, 0x0, 0x800, 0x2, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r2, r0) r3 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000040)={0x0, 0x30b5, 0x800, 0x2, 0x2ad}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x4, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 1.060845794s ago: executing program 3 (id=627): socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) unshare(0x40000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 513.948785ms ago: executing program 4 (id=628): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, 'bridge_slave_1\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) 508.892726ms ago: executing program 1 (id=630): capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x0, 0xa}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_ublk_setup_io_uring(0x3cb0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@local, @multicast, @val={@val={0x88a8, 0x2, 0x0, 0x1}, {0x8100, 0x5, 0x0, 0x1}}, {@arp={0x806, @generic={0x6, 0xa00, 0x6, 0x2, 0x8, @remote, "1955", @empty, "0af3d75f11a3"}}}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f00003e9000/0x4000)=nil, 0x4000, 0x4) 416.593305ms ago: executing program 0 (id=631): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x30, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x21, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 352.710982ms ago: executing program 0 (id=632): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x80) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) r2 = socket(0x2, 0x3, 0x6) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0x3d1f, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x2, 0x21, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x4, 0xf7, 0x1, 0x8}]}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2, 0x0, 0xe7}}}}}}, 0x0) 0s ago: executing program 3 (id=634): close(0xffffffffffffffff) syz_ublk_setup_io_uring(0x3516, &(0x7f0000000000)={0x0, 0x4c88, 0x8, 0x2, 0xd9}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(0x0, 0xd87, 0x4, 0x1010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQES(0x0, 0x81, 0x2, 0x20010, 0xffffffffffffffff, 0x10000000) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000480)='usbip-vudc.0', 0xc) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f000000f840)={0x1e0, 0x240, 0x80, 0x80, 0x0, 0xd, 0x20, 0x2, {0x9, 0x5}, {0x2, 0x32477c89, 0x1}, {0x10000, 0x4, 0x1}, {0xfff, 0xfffffffb, 0x1}, 0x2, 0x100, 0x4, 0x9, 0x1, 0x200, 0x8, 0xd8b, 0x8000, 0x2, 0x8001, 0x1, 0x6, 0x100, 0x0, 0xb}) kernel console output (not intermixed with test programs): iled: -22 [ 49.873794][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.873834][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.873874][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.873914][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.873953][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.873992][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.874031][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.874070][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.874109][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.874148][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.874191][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.874231][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.874271][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.874310][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.874377][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.874417][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.874457][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.874496][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.874535][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.874575][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.874614][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.874653][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.874693][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.874737][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.874776][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.874815][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.874854][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.874894][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.874938][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.875009][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.875051][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.875091][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.875185][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.875226][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.875265][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.875305][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.875344][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.875383][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.875426][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.875467][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.875507][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.875546][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.875607][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.875646][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.875686][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.875730][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.875770][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.875809][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.875848][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.875887][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.875927][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.875966][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.876005][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.876045][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.876084][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.876124][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.876164][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.876204][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.876243][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.876282][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.876322][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.876361][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.876401][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.876440][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.876479][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.876518][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.876561][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.876601][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.876640][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.876705][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.876767][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.876806][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.876840][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.876875][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.876909][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.876944][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.876982][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.877017][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.877051][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.877087][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.877141][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.877179][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.877214][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.877248][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.877283][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.877318][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.877353][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.877387][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.877422][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.877457][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.877492][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.877526][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.877561][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.877595][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.877633][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.877667][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.877709][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.877744][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.877797][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.877832][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.877867][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.877902][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.877937][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.877971][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.878009][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.878044][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.878079][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.878113][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.878148][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.878183][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.878218][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.878253][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.878288][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.878323][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.878358][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.878393][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.878428][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.878462][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.878497][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.878532][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.878567][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.878601][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.878639][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.878674][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.878712][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.878747][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.878783][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.878818][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.878853][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.878887][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.878922][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.878957][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.878991][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.879027][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.879061][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.879096][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.879131][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.879165][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.879200][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.879235][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.879270][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.879305][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.879339][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.879374][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.879408][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.879442][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.879477][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.879574][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.879928][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.879964][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.880002][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.880035][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.880069][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.880103][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.880155][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.880189][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.880222][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.880256][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.880289][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.880323][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.880357][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.880390][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.880423][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.880456][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.880490][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.880524][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.880557][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.880590][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.880624][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.880659][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.880692][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.880731][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.880764][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.880943][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.881046][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.881081][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.881114][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.881170][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.881206][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.881240][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.881273][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.881307][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.881342][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.881375][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.881409][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.881443][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.881476][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.881510][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.881543][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.881576][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.881636][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.881672][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.881712][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.881746][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.881779][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.881813][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.881847][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.881881][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.881915][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.881948][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.881982][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.882016][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.882049][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.882083][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.882116][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.882150][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.882201][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.882235][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.882268][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.882301][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.882352][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.882386][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.882419][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.882452][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.882486][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.882519][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.882552][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.882586][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.882619][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.882652][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.882686][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.882724][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.882758][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.882831][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.882868][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.882902][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.882935][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.882969][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.883002][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.883035][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.883072][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.883153][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.883188][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.883222][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.883258][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.883292][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.883325][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.883359][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.883396][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.883429][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.883466][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.883500][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.883534][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.883567][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.883601][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.883635][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.883669][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.883708][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.883743][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.883777][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.883811][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.883844][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.883878][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.883912][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.883946][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.883980][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.884013][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.884047][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.884080][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.884113][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.884147][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.884181][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.884231][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.884266][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.884299][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.884332][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.884377][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.884410][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.884445][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.884478][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.884512][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.884545][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.884578][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.884612][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.884646][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.884680][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.884718][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.884751][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.884785][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.884819][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.884852][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.884886][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.884919][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.884953][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.884986][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.885020][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.885053][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.885087][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.885143][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.885180][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.885363][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.885400][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.885434][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.885468][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.885518][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.885552][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.885586][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.885620][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.885653][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.885686][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.885726][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.885760][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.885793][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.885827][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.885860][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.885894][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.885929][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.885962][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.885995][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.886030][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.886064][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.886097][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.886131][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.886164][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.886199][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.886233][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.886266][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.886300][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.886349][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.886384][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.886417][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.886451][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.886505][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.886539][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.886572][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.886611][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.886644][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.886678][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.886715][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.886749][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.886782][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.886815][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.886849][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.886882][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.886915][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.886949][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.886982][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.887016][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.887049][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.887083][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.887116][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.887149][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.887182][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.887215][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.887249][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.887282][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.887332][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.887366][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.887399][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.887433][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.887484][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.887517][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.887551][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.887585][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.887618][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.887652][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.887686][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.887723][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.887757][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.887791][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.887824][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.887858][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.887891][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.887929][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.887962][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.887997][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.888030][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.888064][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.888097][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.888130][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.888164][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.888197][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.888230][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.888264][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.888317][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.888351][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.888384][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.888418][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.888467][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.888501][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.888535][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.888568][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.888601][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.888635][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.888669][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.888707][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.888741][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.888778][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.888816][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.888854][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.888892][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.888930][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.888968][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.889006][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.889043][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.889081][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.889234][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.889286][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.889326][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.889367][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.889405][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.889444][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.889504][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.889543][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.889581][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.889619][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.889678][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.889723][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.889762][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.889805][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.889847][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.889889][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.889928][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.889966][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.890004][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.890042][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.890080][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.890118][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.890156][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.890195][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.890236][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.890275][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.890313][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.890352][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.890390][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.890429][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.890468][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.890506][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.890544][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.890583][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.890624][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.890662][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.890700][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.890745][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.890786][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.890824][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.890863][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.890904][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.890943][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.890982][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.891020][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.891058][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.891096][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.891135][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.891174][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.891215][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.891253][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.891292][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.891331][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.891369][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.891407][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.891445][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.891546][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.891596][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.891638][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.891680][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.891721][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.891767][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.891813][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.891855][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.891896][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.891937][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.892002][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.892044][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.892085][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.892126][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.892167][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.892208][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.892251][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.892292][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.892333][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.892373][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.892414][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.892455][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.892496][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.892537][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.892578][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.892620][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.892661][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.892706][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.892750][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.892863][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.892908][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.892949][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.892991][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.893031][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.893076][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.893138][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.893186][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.893227][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.893273][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.893314][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.893356][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.893398][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.893440][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.893486][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.893527][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.893567][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.893608][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.893650][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.893691][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.893733][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.893776][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.893812][ T6034] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.894723][ T6040] syzkaller0: entered promiscuous mode [ 49.894737][ T6040] syzkaller0: entered allmulticast mode [ 50.032717][ T6046] syzkaller0: entered promiscuous mode [ 50.032740][ T6046] syzkaller0: entered allmulticast mode [ 50.103559][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.44'. [ 55.544339][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.150289][ T5739] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.154453][ T5739] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.157173][ T5739] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.159569][ T5739] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.160996][ T5739] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.183022][ T49] IPVS: starting estimator thread 0... [ 61.198011][ T6073] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 61.273137][ T6078] IPVS: using max 37 ests per chain, 88800 per kthread [ 61.616160][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.767753][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.938997][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.993754][ T6105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.63'. [ 62.205758][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.441694][ T6110] team0: entered allmulticast mode [ 62.448719][ T6110] xfrm0: entered allmulticast mode [ 62.520017][ T13] bridge_slave_1: left allmulticast mode [ 62.520101][ T13] bridge_slave_1: left promiscuous mode [ 62.521729][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.532524][ T13] bridge_slave_0: left allmulticast mode [ 62.532596][ T13] bridge_slave_0: left promiscuous mode [ 62.540263][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.632739][ T6121] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 62.636577][ T6121] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 62.694484][ T5739] Bluetooth: hci0: connection err: -111 [ 62.873282][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.893283][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.914714][ T13] bond0 (unregistering): Released all slaves [ 62.926851][ T13] bond1 (unregistering): Released all slaves [ 62.954452][ T6068] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.954619][ T6068] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.954755][ T6068] bridge_slave_0: entered allmulticast mode [ 62.956308][ T6068] bridge_slave_0: entered promiscuous mode [ 62.959280][ T6068] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.959364][ T6068] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.959470][ T6068] bridge_slave_1: entered allmulticast mode [ 62.962749][ T6068] bridge_slave_1: entered promiscuous mode [ 63.036487][ T6068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.051457][ T6068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.142235][ T6068] team0: Port device team_slave_0 added [ 63.149875][ T6068] team0: Port device team_slave_1 added [ 63.201196][ T6068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.201242][ T6068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.201298][ T6068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.203418][ T6068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.203429][ T6068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.203442][ T6068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.224834][ T5739] Bluetooth: hci4: command tx timeout [ 63.438535][ T6068] hsr_slave_0: entered promiscuous mode [ 63.441784][ T6068] hsr_slave_1: entered promiscuous mode [ 63.449705][ T6068] debugfs: 'hsr0' already exists in 'hsr' [ 63.449764][ T6068] Cannot create hsr debugfs directory [ 63.563409][ T5452] 8021q: adding VLAN 0 to HW filter on device eth2 [ 63.804584][ T13] hsr_slave_0: left promiscuous mode [ 63.807212][ T13] hsr_slave_1: left promiscuous mode [ 63.811112][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.814714][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.819450][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.823208][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.845980][ T13] veth1_macvtap: left promiscuous mode [ 63.848446][ T13] veth0_macvtap: left promiscuous mode [ 63.851030][ T13] veth1_vlan: left promiscuous mode [ 63.855165][ T13] veth0_vlan: left promiscuous mode [ 64.021008][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.69'. [ 64.076488][ T13] team0 (unregistering): Port device team_slave_1 removed [ 64.082397][ T13] team0 (unregistering): Port device team_slave_0 removed [ 64.198401][ T6152] vlan2: entered allmulticast mode [ 64.198463][ T6152] geneve1: entered allmulticast mode [ 64.305550][ T6068] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.320090][ T6068] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.320818][ T6068] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.328191][ T6068] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.329722][ T6068] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.339188][ T6068] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.374349][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 64.374415][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.70'. [ 64.402543][ T6166] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 64.408599][ T6161] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.413768][ T6068] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.418516][ T6068] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.466172][ T6161] netlink: 'syz.3.70': attribute type 4 has an invalid length. [ 64.466225][ T6161] netlink: 152 bytes leftover after parsing attributes in process `syz.3.70'. [ 64.472363][ T6164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.478550][ T6164] bond1: (slave bond0): Enslaving as an active interface with a down link [ 64.485745][ T5452] 8021q: adding VLAN 0 to HW filter on device eth3 [ 64.487318][ T6161] .`: renamed from bond0 (while UP) [ 64.554874][ T42] audit: type=1326 audit(1788664571.836:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6178 comm="syz.0.75" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x0 [ 64.571587][ T6175] syzkaller0: entered promiscuous mode [ 64.571680][ T6175] syzkaller0: entered allmulticast mode [ 64.630258][ T6182] null_blk: disk nullb1 created [ 64.763308][ T6068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.784052][ T6068] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.792416][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.792608][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.802455][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.802592][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.813884][ T5452] 8021q: adding VLAN 0 to HW filter on device eth4 [ 64.901466][ T6068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.161632][ T5452] 8021q: adding VLAN 0 to HW filter on device eth5 [ 65.303099][ T5739] Bluetooth: hci4: command tx timeout [ 65.325490][ T6068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.562365][ T6068] veth0_vlan: entered promiscuous mode [ 65.571213][ T6068] veth1_vlan: entered promiscuous mode [ 65.618846][ T6068] veth0_macvtap: entered promiscuous mode [ 65.625724][ T6068] veth1_macvtap: entered promiscuous mode [ 65.640358][ T6068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.654274][ T6068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.690715][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.691021][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.719408][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.719475][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.737674][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.737740][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.739429][ T6245] mmap: syz.1.86 (6245) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 65.772990][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.824846][ T5786] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.997100][ T6260] binder_alloc: 6259: binder_alloc_buf, no vma [ 66.080833][ T6268] syzkaller0: entered promiscuous mode [ 66.080911][ T6268] syzkaller0: entered allmulticast mode [ 66.496575][ T6276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.94'. [ 66.614285][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.97'. [ 67.383950][ T5739] Bluetooth: hci4: command tx timeout [ 68.074116][ T6309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.105'. [ 68.086348][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.104'. [ 69.330627][ T6329] syzkaller0: entered promiscuous mode [ 69.330698][ T6329] syzkaller0: entered allmulticast mode [ 69.474816][ T5739] Bluetooth: hci4: command tx timeout [ 69.563678][ T853] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 69.728739][ T6330] syz.4.109 (6330): drop_caches: 2 [ 69.732961][ T853] usb 6-1: Using ep0 maxpacket: 16 [ 69.734417][ T853] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 69.737223][ T853] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 69.737258][ T853] usb 6-1: config 0 interface 0 has no altsetting 0 [ 69.739946][ T853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.739973][ T853] usb 6-1: Product: syz [ 69.739986][ T853] usb 6-1: Manufacturer: syz [ 69.740003][ T853] usb 6-1: SerialNumber: syz [ 69.756203][ T853] usb 6-1: config 0 descriptor?? [ 69.978186][ C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 69.984952][ T853] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input6 [ 69.997803][ T853] imon:send_packet: packet tx failed (-71) [ 70.012934][ T853] imon 6-1:0.0: panel buttons/knobs setup failed [ 70.104599][ T853] rc_core: IR keymap rc-imon-pad not found [ 70.104670][ T853] Registered IR keymap rc-empty [ 70.104767][ T853] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 70.104784][ T853] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 70.105749][ T853] imon:send_packet: packet tx failed (-71) [ 70.123023][ T853] imon 6-1:0.0: remote input dev register failed [ 70.123251][ T853] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 70.151660][ T853] imon 6-1:0.0: unable to initialize intf0, err 0 [ 70.151724][ T853] imon:imon_probe: failed to initialize context! [ 70.152032][ T853] imon 6-1:0.0: unable to register, err -19 [ 70.159860][ T853] usb 6-1: USB disconnect, device number 3 [ 70.543158][ T853] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 70.706132][ T853] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 70.719583][ T853] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 70.721051][ T853] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 70.721115][ T853] usb 6-1: config 0 interface 0 has no altsetting 0 [ 70.729915][ T853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.729939][ T853] usb 6-1: Product: syz [ 70.729952][ T853] usb 6-1: Manufacturer: syz [ 70.729964][ T853] usb 6-1: SerialNumber: syz [ 70.776965][ T853] usb 6-1: config 0 descriptor?? [ 70.809256][ T6332] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 70.911188][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.911334][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.917290][ T35] cfg80211: failed to load regulatory.db [ 71.165415][ C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 71.186493][ T853] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input8 [ 71.412946][ T853] rc_core: IR keymap rc-imon-pad not found [ 71.413335][ T853] Registered IR keymap rc-empty [ 71.413394][ T853] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 71.413405][ T853] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 71.535006][ T853] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 71.539527][ T853] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input9 [ 71.548868][ T853] imon 6-1:0.0: iMON device (15c2:0045, intf0) on usb<6:4> initialized [ 71.853979][ T6387] imon:lcd_write: invalid payload size: 0 (expected 8) [ 71.937677][ T6391] fuse: fd is not a fuse device [ 72.026936][ T1036] usb 6-1: USB disconnect, device number 4 [ 72.486689][ T6401] netlink: 14 bytes leftover after parsing attributes in process `syz.3.132'. [ 73.152417][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'. [ 73.152475][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'. [ 73.169846][ T6418] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.170218][ T6418] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.230896][ T6418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.246577][ T6418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.413069][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.413154][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.413220][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.413275][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.474978][ T6434] FAULT_INJECTION: forcing a failure. [ 73.474978][ T6434] name failslab, interval 1, probability 0, space 0, times 1 [ 73.475036][ T6434] CPU: 1 UID: 0 PID: 6434 Comm: syz.4.143 Not tainted syzkaller #0 PREEMPT(full) [ 73.475060][ T6434] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.475070][ T6434] Call Trace: [ 73.475075][ T6434] [ 73.475081][ T6434] dump_stack_lvl+0x100/0x190 [ 73.475101][ T6434] should_fail_ex.cold+0x5/0xa [ 73.475117][ T6434] should_failslab+0xc2/0x120 [ 73.475134][ T6434] __kvmalloc_node_noprof+0x113/0x9b0 [ 73.475150][ T6434] ? stack_trace_save+0x8e/0xc0 [ 73.475165][ T6434] ? v4l2_ctrl_new+0x4a6/0x23a0 [ 73.475188][ T6434] v4l2_ctrl_new+0x4a6/0x23a0 [ 73.475208][ T6434] ? asm_exc_alignment_check+0x10/0x30 [ 73.475222][ T6434] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 73.475246][ T6434] v4l2_ctrl_new_std+0x1bb/0x290 [ 73.475269][ T6434] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 73.475286][ T6434] ? rcu_is_watching+0x13/0xc0 [ 73.475301][ T6434] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 73.475320][ T6434] ? media_request_object_init+0x105/0x180 [ 73.475347][ T6434] vicodec_open+0x1b2/0xf70 [ 73.475364][ T6434] ? kobject_get_unless_zero+0x156/0x200 [ 73.475390][ T6434] v4l2_open+0x1d2/0x490 [ 73.475407][ T6434] ? __pfx_v4l2_open+0x10/0x10 [ 73.475425][ T6434] chrdev_open+0x234/0x6a0 [ 73.475444][ T6434] ? __pfx_apparmor_file_open+0x10/0x10 [ 73.475471][ T6434] ? __pfx_chrdev_open+0x10/0x10 [ 73.475485][ T6434] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 73.475504][ T6434] do_dentry_open+0x6ab/0x14d0 [ 73.475516][ T6434] ? __pfx_chrdev_open+0x10/0x10 [ 73.475532][ T6434] vfs_open+0x82/0x3f0 [ 73.475550][ T6434] path_openat+0x19fa/0x2440 [ 73.475567][ T6434] ? __pfx_path_openat+0x10/0x10 [ 73.475585][ T6434] do_file_open+0x20e/0x430 [ 73.475600][ T6434] ? __pfx_do_file_open+0x10/0x10 [ 73.475623][ T6434] ? _raw_spin_unlock+0x28/0x50 [ 73.475636][ T6434] ? alloc_fd+0x471/0x7a0 [ 73.475652][ T6434] do_sys_openat2+0x10f/0x1e0 [ 73.475673][ T6434] ? __pfx_do_sys_openat2+0x10/0x10 [ 73.475691][ T6434] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 73.475707][ T6434] __ia32_compat_sys_openat+0x12d/0x210 [ 73.475725][ T6434] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 73.475749][ T6434] do_int80_emulation+0x166/0x650 [ 73.475768][ T6434] asm_int80_emulation+0x1a/0x20 [ 73.475781][ T6434] RIP: 0023:0xf72075ab [ 73.475792][ T6434] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 73.475804][ T6434] RSP: 002b:00000000f54bd03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 73.475816][ T6434] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f54bd100 [ 73.475823][ T6434] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.475830][ T6434] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 73.475837][ T6434] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 73.475843][ T6434] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.475861][ T6434] [ 73.794860][ T6443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.147'. [ 73.804669][ T6443] vlan2: entered allmulticast mode [ 73.804732][ T6443] macvlan0: entered allmulticast mode [ 73.804777][ T6443] veth1_vlan: entered allmulticast mode [ 74.103034][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.132919][ T853] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 74.283820][ T853] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 74.285424][ T853] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 74.285450][ T853] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 74.285474][ T853] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.288003][ T853] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 74.288027][ T853] usb 9-1: Product: syz [ 74.288041][ T853] usb 9-1: Manufacturer: syz [ 74.288056][ T853] usb 9-1: SerialNumber: syz [ 74.512171][ T6451] netlink: 'syz.3.150': attribute type 1 has an invalid length. [ 74.526824][ T853] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 74.611207][ T6451] bridge1: entered promiscuous mode [ 74.619912][ T6451] bond0: (slave bridge1): making interface the new active one [ 74.624363][ T6451] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 74.725470][ T853] usb 9-1: USB disconnect, device number 2 [ 74.733687][ T853] usblp0: removed [ 75.313882][ T6460] fuse: fd is not a fuse device [ 75.631184][ T6470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.164'. [ 75.631244][ T6470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.164'. [ 76.288511][ T6491] syzkaller0: entered promiscuous mode [ 76.288597][ T6491] syzkaller0: entered allmulticast mode [ 76.404395][ T6493] bridge_slave_0: left allmulticast mode [ 76.404509][ T6493] bridge_slave_0: left promiscuous mode [ 76.404758][ T6493] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.411838][ T6493] bridge_slave_1: left allmulticast mode [ 76.411862][ T6493] bridge_slave_1: left promiscuous mode [ 76.412074][ T6493] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.441057][ T6493] bond0: (slave bond_slave_0): Releasing backup interface [ 76.448434][ T6493] bond0: (slave bond_slave_1): Releasing backup interface [ 76.460347][ T6493] team0: Port device team_slave_0 removed [ 76.466980][ T6493] team0: Port device team_slave_1 removed [ 76.470156][ T6493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.473180][ T6493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.477421][ T6493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.480037][ T6493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.484050][ T6493] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 76.495610][ T6498] team0: Port device xfrm0 added [ 76.513752][ T6499] syzkaller0: entered promiscuous mode [ 76.513796][ T6499] syzkaller0: entered allmulticast mode [ 76.546772][ T6501] netlink: 188 bytes leftover after parsing attributes in process `syz.3.165'. [ 76.593676][ T6493] tipc: Started in network mode [ 76.593754][ T6493] tipc: Node identity c26541edeadc, cluster identity 4711 [ 76.594710][ T6493] tipc: Enabled bearer , priority 0 [ 76.768332][ T6512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.169'. [ 76.794311][ T6514] tipc: Enabling of bearer rejected, failed to enable media [ 76.798071][ T6512] bond1: entered promiscuous mode [ 76.798136][ T6512] bond1: entered allmulticast mode [ 76.882094][ T6520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 77.592934][ T1478] tipc: Node number set to 683229677 [ 78.033726][ T6557] bridge_slave_0: left allmulticast mode [ 78.033793][ T6557] bridge_slave_0: left promiscuous mode [ 78.034087][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.047016][ T6557] bridge_slave_1: left allmulticast mode [ 78.047112][ T6557] bridge_slave_1: left promiscuous mode [ 78.047333][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.078767][ T6557] bond0: (slave bond_slave_0): Releasing backup interface [ 78.087964][ T6557] bond0: (slave bond_slave_1): Releasing backup interface [ 78.162603][ T6557] team0: Port device team_slave_0 removed [ 78.190297][ T6557] team0: Port device team_slave_1 removed [ 78.190602][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.238099][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.254944][ T6557] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 78.277290][ T6563] team0: Port device xfrm0 added [ 78.283123][ T6566] tipc: Started in network mode [ 78.283187][ T6566] tipc: Node identity ca6a46bf959c, cluster identity 4711 [ 78.283349][ T6566] tipc: Enabled bearer , priority 0 [ 78.314153][ T35] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 78.475532][ T35] usb 8-1: Using ep0 maxpacket: 8 [ 78.476436][ T35] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 78.477260][ T35] usb 8-1: config 0 has no interfaces? [ 78.477291][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.480823][ T35] usb 8-1: config 0 descriptor?? [ 78.787521][ T1036] usb 8-1: USB disconnect, device number 2 [ 78.975163][ T6598] syzkaller0: entered promiscuous mode [ 78.975233][ T6598] syzkaller0: entered allmulticast mode [ 79.163530][ T6607] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 79.173015][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'. [ 79.173069][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'. [ 79.185300][ T6605] tipc: Resetting bearer [ 79.398785][ T6609] team0: Port device xfrm0 removed [ 79.399136][ T6609] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 79.406009][ T5813] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.406059][ T5813] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.406089][ T5813] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.406119][ T5813] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.407293][ T6612] team0: Mode changed to "random" [ 79.408031][ T6613] vlan0: entered promiscuous mode [ 79.412618][ T1036] tipc: Node number set to 1609975487 [ 79.440432][ T6609] tipc: Enabling of bearer rejected, already enabled [ 81.883252][ T30] libceph: connect (1)[c::]:6789 error -101 [ 81.883486][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 81.997557][ T6687] ceph: No mds server is up or the cluster is laggy [ 82.808592][ T6709] overlayfs: failed to clone upperpath [ 82.908455][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.220'. [ 83.107573][ T6715] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.107894][ T6715] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.116995][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.221'. [ 83.117060][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.221'. [ 83.193897][ T6715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.196302][ T6715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.215736][ T6715] veth1_vlan: left allmulticast mode [ 83.323471][ T5786] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.323570][ T5786] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.323636][ T5786] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.323670][ T5786] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.450563][ T42] audit: type=1804 audit(1788664590.736:3): pid=6728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.225" name="file0" dev="tmpfs" ino=353 res=1 errno=0 [ 83.569089][ T6732] syzkaller0: entered promiscuous mode [ 83.569189][ T6732] syzkaller0: entered allmulticast mode [ 84.179058][ T42] audit: type=1326 audit(1788664591.466:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.0.228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 84.207217][ T42] audit: type=1326 audit(1788664591.496:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.0.228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 84.230635][ T42] audit: type=1326 audit(1788664591.516:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.0.228" exe="/syz-executor" sig=0 arch=40000003 syscall=249 compat=1 ip=0xf704efec code=0x7ffc0000 [ 84.308951][ T42] audit: type=1326 audit(1788664591.596:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.0.228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 84.319155][ T42] audit: type=1326 audit(1788664591.606:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.0.228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 84.328877][ T42] audit: type=1326 audit(1788664591.616:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.0.228" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704efec code=0x7ffc0000 [ 84.339236][ T42] audit: type=1326 audit(1788664591.626:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.0.228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 84.339326][ T42] audit: type=1326 audit(1788664591.626:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.0.228" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704efec code=0x7ffc0000 [ 84.339356][ T42] audit: type=1326 audit(1788664591.626:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.0.228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 86.483673][ T6774] netlink: 188 bytes leftover after parsing attributes in process `syz.4.239'. [ 86.506028][ T6772] uprobe: syz.1.237:6772 failed to unregister, leaking uprobe [ 86.714220][ T853] hid-generic 0005:0007:0009.0002: unknown main item tag 0x0 [ 86.724709][ T853] hid-generic 0005:0007:0009.0002: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 86.961633][ T6783] fido_id[6783]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 87.356705][ T6787] random: crng reseeded on system resumption [ 87.912621][ T6797] cgroup: fork rejected by pids controller in /syz3 [ 88.355257][ T6850] syzkaller0: entered promiscuous mode [ 88.355320][ T6850] syzkaller0: entered allmulticast mode [ 88.451369][ T6857] syzkaller0: entered promiscuous mode [ 88.451423][ T6857] syzkaller0: entered allmulticast mode [ 88.600076][ T6863] netlink: 188 bytes leftover after parsing attributes in process `syz.0.250'. [ 88.883391][ T1036] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 89.032972][ T1036] usb 6-1: Using ep0 maxpacket: 32 [ 89.033827][ T1036] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 89.034952][ T1036] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 89.034990][ T1036] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 89.035014][ T1036] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 89.035038][ T1036] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 89.057821][ T1036] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.061758][ T1036] usb 6-1: Product: syz [ 89.061772][ T1036] usb 6-1: Manufacturer: syz [ 89.061781][ T1036] usb 6-1: SerialNumber: syz [ 89.074486][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 89.080493][ T1036] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input10 [ 89.239320][ T6876] tipc: Resetting bearer [ 89.250915][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 89.254689][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 89.305796][ T1036] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 89.309798][ T1036] (id 0x00) [ 89.395699][ T1036] rc_core: IR keymap rc-imon-pad not found [ 89.395733][ T1036] Registered IR keymap rc-empty [ 89.395804][ T1036] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 89.395828][ T1036] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 89.452997][ T5786] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.453079][ T5786] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.453745][ T5786] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.453781][ T5786] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.493631][ T1036] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 89.500038][ T1036] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input11 [ 89.507431][ T1036] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:5> initialized [ 89.809391][ T6886] syzkaller0: entered promiscuous mode [ 89.812049][ T6886] syzkaller0: entered allmulticast mode [ 91.209343][ T6901] imon:send_packet: packet tx failed (-71) [ 91.213216][ T35] usb 6-1: USB disconnect, device number 5 [ 91.223223][ T6901] imon:vfd_write: send packet #5 failed [ 91.492282][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.273'. [ 91.694486][ T6918] fuse: fd is not a fuse device [ 91.747689][ T6922] syzkaller0: entered promiscuous mode [ 91.747773][ T6922] syzkaller0: entered allmulticast mode [ 93.327813][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 93.327912][ T42] audit: type=1804 audit(1788664600.616:39): pid=6955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.278" name="/newroot/53/file0" dev="tmpfs" ino=295 res=1 errno=0 [ 93.351375][ T6955] uprobe: syz.4.278:6955 failed to unregister, leaking uprobe [ 93.615211][ T6959] netlink: 'syz.4.280': attribute type 11 has an invalid length. [ 93.706165][ T6959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.710097][ T6959] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.724661][ T6959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.800374][ T6959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.805676][ T6959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.815228][ T6959] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.815323][ T6959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.827213][ T6959] veth1_vlan: left promiscuous mode [ 93.831952][ T6959] veth0_vlan: left promiscuous mode [ 93.843441][ T6959] veth0_vlan: entered promiscuous mode [ 93.845510][ T6959] veth1_vlan: entered promiscuous mode [ 93.845532][ T6959] veth1_vlan: entered allmulticast mode [ 93.849752][ T6959] veth1_macvtap: left promiscuous mode [ 93.853853][ T6959] veth0_macvtap: left promiscuous mode [ 93.854797][ T6959] veth0_macvtap: entered promiscuous mode [ 93.859999][ T6959] veth1_macvtap: entered promiscuous mode [ 93.878843][ T6959] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.882436][ T6959] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.883082][ T6959] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.889544][ T6959] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.940291][ T6833] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.940465][ T6833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.945244][ T6833] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.945335][ T6833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.164168][ T5786] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.164236][ T5786] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.166432][ T5786] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.166456][ T5786] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.660019][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.287'. [ 95.272280][ T7005] netlink: 'syz.0.292': attribute type 13 has an invalid length. [ 95.567300][ T7022] syzkaller0: entered promiscuous mode [ 95.571031][ T7022] syzkaller0: entered allmulticast mode [ 96.041436][ T7034] macsec1: entered promiscuous mode [ 96.044400][ T7034] bridge0: entered promiscuous mode [ 97.502913][ T35] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 97.653291][ T35] usb 6-1: Using ep0 maxpacket: 16 [ 97.654031][ T35] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 97.656183][ T35] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.656200][ T35] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 97.657989][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.658011][ T35] usb 6-1: Product: syz [ 97.658024][ T35] usb 6-1: Manufacturer: syz [ 97.658037][ T35] usb 6-1: SerialNumber: syz [ 97.666579][ T35] usb 6-1: config 0 descriptor?? [ 97.881916][ T1036] usb 6-1: USB disconnect, device number 6 [ 98.285999][ T7057] fuse: fd is not a fuse device [ 98.297168][ T7056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.327719][ T1036] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 98.327788][ T1036] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 98.328654][ T6834] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 98.328775][ T6834] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 98.328827][ T6834] wlan1: authentication with 08:02:11:00:00:00 timed out [ 98.352918][ T7061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.429163][ T7063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.307134][ T7090] netlink: 'syz.1.319': attribute type 13 has an invalid length. [ 99.751790][ T42] audit: type=1804 audit(1788664607.036:40): pid=7103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.323" name="/newroot/83/file0" dev="fuse" ino=1 res=1 errno=0 [ 99.834371][ T7111] syzkaller0: entered promiscuous mode [ 99.834455][ T7111] syzkaller0: entered allmulticast mode [ 100.033495][ T7113] overlayfs: missing 'workdir' [ 100.101281][ T7116] syzkaller0: entered promiscuous mode [ 100.101369][ T7116] syzkaller0: entered allmulticast mode [ 101.118767][ T7145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.334'. [ 101.183058][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 101.880833][ T7183] Bluetooth: MGMT ver 1.23 [ 102.057280][ T7194] syzkaller0: entered promiscuous mode [ 102.057373][ T7194] syzkaller0: entered allmulticast mode [ 102.196126][ T7201] netlink: 'syz.1.340': attribute type 1 has an invalid length. [ 102.232684][ T7201] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.297799][ T7201] bond2: (slave veth3): Enslaving as an active interface with a down link [ 102.330312][ T7201] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 102.335806][ T7201] bond2: (slave batadv1): making interface the new active one [ 102.337074][ T7201] batadv1: entered promiscuous mode [ 102.341642][ T7201] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 102.371465][ T7201] bond2 (unregistering): (slave veth3): Releasing active interface [ 102.381418][ T7201] bond2 (unregistering): (slave batadv1): Releasing active interface [ 102.381489][ T7201] batadv1: left promiscuous mode [ 102.389121][ T7201] bond2 (unregistering): Released all slaves [ 102.521850][ T7213] netlink: 'syz.1.344': attribute type 11 has an invalid length. [ 102.576240][ T7213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.577033][ T7213] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.577218][ T7213] tipc: Resetting bearer [ 102.579513][ T7213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.617178][ T7213] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 102.617247][ T7213] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.628336][ T7213] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 102.629713][ T7213] veth1_vlan: left promiscuous mode [ 102.632585][ T7213] veth1_vlan: entered promiscuous mode [ 102.639669][ T7213] veth1_macvtap: left promiscuous mode [ 102.640484][ T7213] veth0_macvtap: left promiscuous mode [ 102.643648][ T7213] veth0_macvtap: entered promiscuous mode [ 102.644474][ T7213] veth1_macvtap: entered promiscuous mode [ 102.654602][ T7213] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.655533][ T7213] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.656080][ T7213] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.656600][ T7213] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.658922][ T7213] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.660637][ T7213] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 102.683479][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.735671][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.741239][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.883787][ T5813] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.883946][ T5813] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.884063][ T5813] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.884144][ T5813] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.624480][ T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.691320][ T7236] syzkaller0: entered promiscuous mode [ 103.691391][ T7236] syzkaller0: entered allmulticast mode [ 103.695025][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.699266][ T7236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.705745][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.847524][ T7238] ======================================================= [ 103.847524][ T7238] WARNING: The mand mount option has been deprecated and [ 103.847524][ T7238] and is ignored by this kernel. Remove the mand [ 103.847524][ T7238] option from the mount to silence this warning. [ 103.847524][ T7238] ======================================================= [ 104.385015][ T7249] overlayfs: failed to clone upperpath [ 104.493853][ T7254] MTD: Couldn't look up './dev/mtdblock0': -2 [ 104.624207][ T7260] FAULT_INJECTION: forcing a failure. [ 104.624207][ T7260] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 104.624854][ T7260] CPU: 1 UID: 0 PID: 7260 Comm: syz.1.361 Not tainted syzkaller #0 PREEMPT(full) [ 104.624915][ T7260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.624929][ T7260] Call Trace: [ 104.624937][ T7260] [ 104.624946][ T7260] dump_stack_lvl+0x100/0x190 [ 104.624978][ T7260] should_fail_ex.cold+0x5/0xa [ 104.624998][ T7260] ? prepare_alloc_pages+0x16d/0x5b0 [ 104.625024][ T7260] should_fail_alloc_page+0xeb/0x140 [ 104.625050][ T7260] prepare_alloc_pages+0x1f0/0x5b0 [ 104.625075][ T7260] ? __lock_acquire+0x4c5/0x1ec0 [ 104.625101][ T7260] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 104.625135][ T7260] ? lock_acquire+0x1d1/0x380 [ 104.625159][ T7260] ? do_raw_spin_lock+0x128/0x260 [ 104.625191][ T7260] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 104.625221][ T7260] ? _raw_spin_unlock_irq+0x2e/0x50 [ 104.625243][ T7260] ? snd_seq_timer_open+0x438/0x5c0 [ 104.625266][ T7260] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 104.625293][ T7260] ? do_raw_spin_lock+0x128/0x260 [ 104.625323][ T7260] ? find_held_lock+0x2b/0x80 [ 104.625346][ T7260] ? mark_held_locks+0x40/0x70 [ 104.625369][ T7260] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 104.625392][ T7260] ? lockdep_hardirqs_on+0x7d/0x110 [ 104.625417][ T7260] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 104.625439][ T7260] ? snd_seq_queue_alloc+0x3c8/0x540 [ 104.625472][ T7260] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 104.625501][ T7260] ? policy_nodemask+0xed/0x4f0 [ 104.625527][ T7260] alloc_pages_mpol+0x201/0x550 [ 104.625553][ T7260] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 104.625578][ T7260] ? alloc_seq_queue+0x121/0x180 [ 104.625605][ T7260] ___kmalloc_large_node+0xe8/0x130 [ 104.625632][ T7260] __kmalloc_large_node_noprof+0x1c/0x70 [ 104.625658][ T7260] __kmalloc_noprof+0x5a8/0x840 [ 104.625677][ T7260] ? find_held_lock+0x2b/0x80 [ 104.625695][ T7260] ? snd_seq_oss_readq_new+0x70/0x210 [ 104.625718][ T7260] snd_seq_oss_readq_new+0x70/0x210 [ 104.625739][ T7260] snd_seq_oss_open+0x476/0xa10 [ 104.625767][ T7260] odev_open+0x6f/0x90 [ 104.625787][ T7260] ? __pfx_odev_open+0x10/0x10 [ 104.625808][ T7260] soundcore_open+0x2e3/0x5a0 [ 104.625834][ T7260] ? __pfx_soundcore_open+0x10/0x10 [ 104.625856][ T7260] chrdev_open+0x234/0x6a0 [ 104.625876][ T7260] ? __pfx_apparmor_file_open+0x10/0x10 [ 104.625904][ T7260] ? __pfx_chrdev_open+0x10/0x10 [ 104.625928][ T7260] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 104.625959][ T7260] do_dentry_open+0x6ab/0x14d0 [ 104.626055][ T7260] ? __pfx_chrdev_open+0x10/0x10 [ 104.626088][ T7260] vfs_open+0x82/0x3f0 [ 104.626116][ T7260] path_openat+0x19fa/0x2440 [ 104.626141][ T7260] ? __pfx_path_openat+0x10/0x10 [ 104.626200][ T7260] do_file_open+0x20e/0x430 [ 104.626227][ T7260] ? __pfx_do_file_open+0x10/0x10 [ 104.626266][ T7260] ? _raw_spin_unlock+0x28/0x50 [ 104.626287][ T7260] ? alloc_fd+0x471/0x7a0 [ 104.626316][ T7260] do_sys_openat2+0x10f/0x1e0 [ 104.626341][ T7260] ? __pfx_do_sys_openat2+0x10/0x10 [ 104.626367][ T7260] ? __pfx_sched_core_share_pid+0x10/0x10 [ 104.626395][ T7260] __ia32_compat_sys_openat+0x12d/0x210 [ 104.626425][ T7260] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 104.626463][ T7260] __do_fast_syscall_32+0x13a/0x8b0 [ 104.626493][ T7260] do_fast_syscall_32+0x32/0x70 [ 104.626519][ T7260] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 104.626543][ T7260] RIP: 0023:0xf6ffefec [ 104.626563][ T7260] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 104.626578][ T7260] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 104.626599][ T7260] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000300 [ 104.626610][ T7260] RDX: 0000000000080200 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.626621][ T7260] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.626633][ T7260] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 104.626644][ T7260] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.626668][ T7260] [ 105.125798][ T7265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.365'. [ 105.612475][ T7278] syzkaller0: entered promiscuous mode [ 105.612540][ T7278] syzkaller0: entered allmulticast mode [ 106.663320][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.872234][ T42] audit: type=1804 audit(1788664615.156:41): pid=7311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.374" name="/newroot/86/file0" dev="fuse" ino=1 res=1 errno=0 [ 108.117897][ T7331] syzkaller0: entered promiscuous mode [ 108.117942][ T7331] syzkaller0: entered allmulticast mode [ 108.252604][ T7334] syz.3.382 (7334): drop_caches: 2 [ 108.447607][ T7348] syzkaller0: entered promiscuous mode [ 108.448339][ T7348] syzkaller0: entered allmulticast mode [ 108.681666][ T7354] 8021q: adding VLAN 0 to HW filter on device .` [ 108.708042][ T7354] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.710977][ T7354] tipc: Resetting bearer [ 108.714583][ T7354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.716675][ T7356] process 'syz.4.389' launched '/dev/fd/3' with NULL argv: empty string added [ 108.752066][ T7354] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.756803][ T7354] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.767749][ T7354] veth1_vlan: left promiscuous mode [ 108.770634][ T7354] veth0_vlan: left promiscuous mode [ 108.773565][ T7354] veth0_vlan: entered promiscuous mode [ 108.776839][ T7354] veth1_vlan: entered promiscuous mode [ 108.782318][ T7354] veth1_macvtap: left promiscuous mode [ 108.788352][ T7354] veth0_macvtap: left promiscuous mode [ 108.792206][ T7354] veth0_macvtap: entered promiscuous mode [ 108.795224][ T7354] veth1_macvtap: entered promiscuous mode [ 108.800107][ T7354] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.805448][ T7354] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.810202][ T7354] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.814277][ T7354] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.820886][ T7354] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.822950][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.824597][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.828970][ T7354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.829889][ T7354] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.832979][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.886610][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.890572][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.912967][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.933330][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.934102][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.934137][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.962881][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.982945][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.996704][ T7365] netlink: 14 bytes leftover after parsing attributes in process `syz.4.391'. [ 109.273270][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.303493][ T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.476670][ T7373] syzkaller0: entered promiscuous mode [ 109.476763][ T7373] syzkaller0: entered allmulticast mode [ 109.982942][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.284966][ T7388] syzkaller0: entered promiscuous mode [ 110.285033][ T7388] syzkaller0: entered allmulticast mode [ 110.607873][ T1036] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 110.612147][ T7396] ceph: No mds server is up or the cluster is laggy [ 110.858420][ T7409] netlink: 188 bytes leftover after parsing attributes in process `syz.1.401'. [ 111.994397][ T7435] netlink: 144 bytes leftover after parsing attributes in process `syz.1.408'. [ 112.518935][ T6832] IPVS: starting estimator thread 0... [ 112.591571][ T7446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.413'. [ 112.602994][ T7444] IPVS: using max 44 ests per chain, 105600 per kthread [ 112.719112][ T7448] ubi0: attaching mtd0 [ 112.727961][ T7448] ubi0: scanning is finished [ 112.728001][ T7448] ubi0: empty MTD device detected [ 112.827523][ T7450] UBIFS error (pid: 7450): cannot open "ubi0:testvol", error -19 [ 112.989074][ T7448] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 112.989147][ T7448] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 112.989413][ T7448] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 112.989425][ T7448] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 112.989435][ T7448] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 112.989447][ T7448] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 112.989457][ T7448] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2641904178 [ 112.989470][ T7448] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 112.993729][ T7451] ubi0: background thread "ubi_bgt0d" started, PID 7451 [ 113.015447][ T7453] netlink: 'syz.4.415': attribute type 1 has an invalid length. [ 113.033970][ T7453] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.169652][ T7453] bond1: (slave veth3): Enslaving as an active interface with a down link [ 113.173218][ T7455] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 113.175942][ T7455] bond1: (slave batadv1): making interface the new active one [ 113.177754][ T7455] batadv1: entered promiscuous mode [ 113.181311][ T7455] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 113.246858][ T7453] bond1 (unregistering): (slave veth3): Releasing active interface [ 113.257407][ T7453] bond1 (unregistering): (slave batadv1): Releasing active interface [ 113.257485][ T7453] batadv1: left promiscuous mode [ 113.265325][ T7453] bond1 (unregistering): Released all slaves [ 113.578709][ T7470] netlink: 84 bytes leftover after parsing attributes in process `syz.4.420'. [ 113.583706][ T7470] netlink: 'syz.4.420': attribute type 1 has an invalid length. [ 113.728753][ T7476] syzkaller0: entered promiscuous mode [ 113.728815][ T7476] syzkaller0: entered allmulticast mode [ 114.153005][ C0] net_ratelimit: 4 callbacks suppressed [ 114.153068][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.418300][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.430'. [ 114.419273][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.430'. [ 114.491296][ T7504] macsec1: entered promiscuous mode [ 114.491439][ T7504] bridge0: entered promiscuous mode [ 114.753002][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 114.913509][ T10] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 114.913576][ T10] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 114.914449][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.914471][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.914485][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 114.915294][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.915314][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.915327][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 114.916119][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.916139][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.916152][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 114.917064][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.917086][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.917098][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 114.918732][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.918760][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.918774][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 114.920033][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.920055][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.920068][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 114.921059][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.921079][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.921093][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 114.922171][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.922191][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.922205][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 114.924189][ T10] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 114.924203][ T10] usb 6-1: Product: syz [ 114.924212][ T10] usb 6-1: Manufacturer: syz [ 114.924220][ T10] usb 6-1: SerialNumber: syz [ 114.928013][ T10] usb 6-1: config 0 descriptor?? [ 114.934417][ T10] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 115.073926][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.172912][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.358285][ T10] usb 6-1: USB disconnect, device number 7 [ 115.362717][ T10] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 115.920185][ T7540] netlink: 'syz.4.443': attribute type 3 has an invalid length. [ 116.097775][ T7553] syzkaller0: entered promiscuous mode [ 116.097813][ T7553] syzkaller0: entered allmulticast mode [ 116.213480][ T7560] syzkaller0: entered promiscuous mode [ 116.213543][ T7560] syzkaller0: entered allmulticast mode [ 116.261134][ T7562] syzkaller0: entered promiscuous mode [ 116.261214][ T7562] syzkaller0: entered allmulticast mode [ 116.306557][ T7564] netlink: 'syz.3.453': attribute type 1 has an invalid length. [ 116.318177][ T7564] 8021q: adding VLAN 0 to HW filter on device bond3 [ 116.332918][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.367927][ T7564] bond3: (slave veth3): Enslaving as an active interface with a down link [ 116.396066][ T7564] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 116.398493][ T7564] bond3: (slave batadv1): making interface the new active one [ 116.399069][ T7564] batadv1: entered promiscuous mode [ 116.401096][ T7564] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 116.432986][ T50] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 116.453776][ T7564] bond3 (unregistering): (slave veth3): Releasing active interface [ 116.463828][ T7564] bond3 (unregistering): (slave batadv1): Releasing active interface [ 116.463886][ T7564] batadv1: left promiscuous mode [ 116.469750][ T7564] bond3 (unregistering): Released all slaves [ 116.583348][ T50] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 116.587423][ T50] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.587488][ T50] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 116.587515][ T50] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 116.587541][ T50] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 116.587567][ T50] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 116.587592][ T50] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 116.587616][ T50] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 14 [ 116.615766][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.615804][ T50] usb 6-1: Product: syz [ 116.615846][ T50] usb 6-1: Manufacturer: syz [ 116.615869][ T50] usb 6-1: SerialNumber: syz [ 116.624985][ T7559] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 116.627111][ T7559] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 116.627172][ T7559] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 116.627239][ T7559] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 116.636448][ T50] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 116.636742][ T50] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 87 [ 116.636831][ T50] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 7 [ 116.648022][ T50] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 116.652288][ T50] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 116.654931][ T50] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 85 [ 116.657624][ T50] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 5 [ 116.668601][ T50] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 116.674649][ T50] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 3 [ 116.677310][ T50] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 4 [ 116.680279][ T50] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 86 [ 116.683518][ T50] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 116.689665][ T50] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 116.922000][ T7576] macsec1: entered promiscuous mode [ 116.925094][ T7576] bridge0: entered promiscuous mode [ 116.984484][ T61] usb 6-1: USB disconnect, device number 8 [ 116.999210][ T7579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.457'. [ 117.010377][ T61] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 117.024897][ T61] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 117.026198][ T61] keyspan 6-1:1.0: device disconnected [ 117.292969][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.528240][ T7585] syzkaller0: entered promiscuous mode [ 117.528337][ T7585] syzkaller0: entered allmulticast mode [ 118.273155][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.402948][ T73] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 118.563773][ T73] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 118.565210][ T73] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 118.565250][ T73] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.566334][ T73] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 118.566353][ T73] usb 6-1: Manufacturer: syz [ 118.569089][ T73] usb 6-1: config 0 descriptor?? [ 119.333624][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.520334][ T73] rc_core: IR keymap rc-hauppauge not found [ 119.520409][ T73] Registered IR keymap rc-empty [ 119.521123][ T73] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 119.522377][ T73] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input12 [ 119.586606][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.470'. [ 119.691484][ T7618] netlink: Conntrack attr has 8 unknown bytes [ 119.691571][ T7618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.710599][ T10] usb 6-1: USB disconnect, device number 9 [ 120.172935][ T50] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 120.343510][ T50] usb 9-1: Using ep0 maxpacket: 16 [ 120.346501][ T50] usb 9-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 120.352371][ T50] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 120.352483][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.352531][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.352571][ T50] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 120.352629][ T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.357890][ T50] usb 9-1: config 0 descriptor?? [ 120.432981][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.787940][ T50] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5013.0003/input/input13 [ 120.833127][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.845587][ T7655] netlink: 'syz.0.474': attribute type 1 has an invalid length. [ 120.870279][ T50] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5013.0003/input/input14 [ 120.888779][ T7655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.987989][ T50] kye 0003:0458:5013.0003: input,hiddev0,hidraw1: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 121.004861][ T50] usb 9-1: USB disconnect, device number 3 [ 121.069704][ T7661] fido_id[7661]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb9/9-1/report_descriptor': No such file or directory [ 121.144291][ T7655] bond1: (slave veth3): Enslaving as an active interface with a down link [ 121.184690][ T7660] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 121.190259][ T7660] bond1: (slave batadv1): making interface the new active one [ 121.190916][ T7660] batadv1: entered promiscuous mode [ 121.195999][ T7660] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 121.213900][ T7663] bond1 (unregistering): (slave veth3): Releasing active interface [ 121.230694][ T7663] bond1 (unregistering): (slave batadv1): Releasing active interface [ 121.230747][ T7663] batadv1: left promiscuous mode [ 121.244366][ T7663] bond1 (unregistering): Released all slaves [ 121.453016][ T61] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 121.502953][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.579116][ T7671] ceph: No mds server is up or the cluster is laggy [ 121.582621][ T853] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 121.590459][ T7675] netlink: 'syz.1.488': attribute type 1 has an invalid length. [ 121.616760][ T7675] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.622918][ T61] usb 8-1: Using ep0 maxpacket: 8 [ 121.623720][ T61] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 121.624869][ T61] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.624906][ T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.630093][ T61] usb 8-1: config 0 descriptor?? [ 121.744827][ T7675] bond2: (slave veth5): Enslaving as an active interface with a down link [ 121.755170][ T7678] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 121.759192][ T7678] bond2: (slave batadv2): making interface the new active one [ 121.762737][ T7678] batadv2: entered promiscuous mode [ 121.764743][ T7678] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 121.815099][ T7675] bond2 (unregistering): (slave veth5): Releasing active interface [ 121.822144][ T7675] bond2 (unregistering): (slave batadv2): Releasing active interface [ 121.822297][ T7675] batadv2: left promiscuous mode [ 121.831636][ T7675] bond2 (unregistering): Released all slaves [ 121.839313][ T61] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 122.096931][ T10] usb 8-1: USB disconnect, device number 3 [ 122.292935][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 122.443010][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 122.445856][ T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 122.450837][ T9] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 122.450892][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.450978][ T9] usb 6-1: config 0 has no interface number 0 [ 122.451034][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 122.451075][ T9] usb 6-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.451130][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.482230][ T9] usb 6-1: config 0 descriptor?? [ 122.487534][ T9] ldusb 6-1:0.55: Interrupt in endpoint not found [ 122.552986][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.707473][ T853] usb 6-1: USB disconnect, device number 10 [ 122.890422][ T7709] ceph: No mds server is up or the cluster is laggy [ 122.893564][ T853] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 123.015445][ T7717] netlink: 'syz.4.493': attribute type 1 has an invalid length. [ 123.029286][ T7717] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.108629][ T7717] bond1: (slave veth5): Enslaving as an active interface with a down link [ 123.111327][ T7721] netlink: 'syz.3.494': attribute type 1 has an invalid length. [ 123.115435][ T7722] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 123.119233][ T7722] bond1: (slave batadv2): making interface the new active one [ 123.119842][ T7722] batadv2: entered promiscuous mode [ 123.124857][ T7722] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 123.140599][ T7721] 8021q: adding VLAN 0 to HW filter on device bond3 [ 123.161685][ T7721] bond3: entered allmulticast mode [ 123.183221][ T7725] fuse: fd is not a fuse device [ 123.203533][ T7717] bond1 (unregistering): (slave veth5): Releasing active interface [ 123.211905][ T7717] bond1 (unregistering): (slave batadv2): Releasing active interface [ 123.212487][ T7717] batadv2: left promiscuous mode [ 123.221183][ T7717] bond1 (unregistering): Released all slaves [ 123.247277][ T7729] netlink: 'syz.0.497': attribute type 1 has an invalid length. [ 123.319354][ T7729] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.326760][ T7729] bond1: (slave bond2): making interface the new active one [ 123.336674][ T7729] bond1: (slave bond2): Enslaving as an active interface with an up link [ 123.363169][ T7729] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 123.433009][ T50] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 123.492897][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.614639][ T50] usb 8-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice=65.d2 [ 123.617185][ T50] usb 8-1: config 6 has an invalid interface number: 123 but max is 1 [ 123.617214][ T50] usb 8-1: config 6 has no interface number 1 [ 123.617258][ T50] usb 8-1: config 6 interface 0 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 123.617280][ T50] usb 8-1: config 6 interface 0 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 123.617299][ T50] usb 8-1: config 6 interface 0 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 123.617317][ T50] usb 8-1: config 6 interface 0 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 123.617339][ T50] usb 8-1: config 6 interface 0 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 123.617359][ T50] usb 8-1: config 6 interface 0 altsetting 1 bulk endpoint 0x9 has invalid maxpacket 32 [ 123.617378][ T50] usb 8-1: config 6 interface 0 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 123.617396][ T50] usb 8-1: config 6 interface 0 altsetting 1 endpoint 0xB has invalid maxpacket 1088, setting to 64 [ 123.617427][ T50] usb 8-1: config 6 interface 123 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 123.617445][ T50] usb 8-1: config 6 interface 123 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 123.617464][ T50] usb 8-1: config 6 interface 123 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 123.617483][ T50] usb 8-1: config 6 interface 0 has no altsetting 0 [ 123.620702][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.620726][ T50] usb 8-1: Product: syz [ 123.620739][ T50] usb 8-1: Manufacturer: syz [ 123.620752][ T50] usb 8-1: SerialNumber: syz [ 123.631311][ T7721] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 123.692969][ T35] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 123.844518][ T35] usb 9-1: Using ep0 maxpacket: 8 [ 123.845828][ T35] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 123.847918][ T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 123.847943][ T35] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.849561][ T35] usb 9-1: config 0 descriptor?? [ 123.850896][ T50] snd_usb_podhd 8-1:6.0: Line 6 POD HD500X found [ 123.857549][ T50] snd_usb_podhd 8-1:6.0: set_interface failed [ 123.857822][ T50] snd_usb_podhd 8-1:6.0: Line 6 POD HD500X now disconnected [ 123.858025][ T50] snd_usb_podhd 8-1:6.0: probe with driver snd_usb_podhd failed with error -71 [ 123.874193][ T50] usb 8-1: USB disconnect, device number 4 [ 124.067321][ T35] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 124.306921][ T35] usb 9-1: USB disconnect, device number 4 [ 124.502972][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.427063][ T7759] IPv6: NLM_F_CREATE should be specified when creating new route [ 125.542978][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.342201][ T7774] syz.4.506 (7774) used greatest stack depth: 19768 bytes left [ 126.450170][ T7784] netlink: 'syz.1.510': attribute type 1 has an invalid length. [ 126.498540][ T7784] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.552721][ T7793] bond2: (slave veth7): Enslaving as an active interface with a down link [ 126.613617][ T7784] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 126.616873][ T7784] bond2: (slave batadv3): making interface the new active one [ 126.617751][ T7784] batadv3: entered promiscuous mode [ 126.625976][ T7784] bond2: (slave batadv3): Enslaving as an active interface with an up link [ 126.662894][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.672071][ T7784] bond2 (unregistering): (slave veth7): Releasing active interface [ 126.681220][ T7784] bond2 (unregistering): (slave batadv3): Releasing active interface [ 126.681431][ T7784] batadv3: left promiscuous mode [ 126.688664][ T7784] bond2 (unregistering): Released all slaves [ 127.182981][ T35] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 127.352898][ T35] usb 9-1: Using ep0 maxpacket: 32 [ 127.353770][ T35] usb 9-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 127.354737][ T35] usb 9-1: config 0 has an invalid interface number: 20 but max is 0 [ 127.354755][ T35] usb 9-1: config 0 has no interface number 0 [ 127.354781][ T35] usb 9-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 127.354798][ T35] usb 9-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 127.354814][ T35] usb 9-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 127.356566][ T35] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.356582][ T35] usb 9-1: Product: syz [ 127.356593][ T35] usb 9-1: Manufacturer: syz [ 127.356603][ T35] usb 9-1: SerialNumber: syz [ 127.362390][ T35] usb 9-1: config 0 descriptor?? [ 127.363404][ T7801] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 127.422650][ T7807] netlink: 48 bytes leftover after parsing attributes in process `syz.3.517'. [ 127.430634][ T7807] netlink: 'syz.3.517': attribute type 8 has an invalid length. [ 127.430682][ T7807] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.517'. [ 127.561080][ T61] libceph: connect (1)[c::]:6789 error -101 [ 127.561275][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 127.572304][ T35] usb-storage 9-1:0.20: USB Mass Storage device detected [ 127.577925][ T35] usb-storage 9-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 127.584850][ T35] scsi host6: usb-storage 9-1:0.20 [ 127.593969][ T35] usb 9-1: USB disconnect, device number 5 [ 127.662979][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.709775][ T7812] ceph: No mds server is up or the cluster is laggy [ 127.813147][ T7829] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 127.815515][ T7828] IPVS: stopping backup sync thread 7829 ... [ 128.009824][ T7836] netlink: 'syz.3.524': attribute type 1 has an invalid length. [ 128.034787][ T7836] 8021q: adding VLAN 0 to HW filter on device bond4 [ 128.089499][ T7836] bond4: (slave veth5): Enslaving as an active interface with a down link [ 128.123940][ T7836] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 128.129283][ T7836] bond4: (slave batadv2): making interface the new active one [ 128.137627][ T7836] batadv2: entered promiscuous mode [ 128.138157][ T7836] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 128.182261][ T7836] bond4 (unregistering): (slave veth5): Releasing active interface [ 128.189031][ T7836] bond4 (unregistering): (slave batadv2): Releasing active interface [ 128.192018][ T7836] batadv2: left promiscuous mode [ 128.197434][ T7836] bond4 (unregistering): Released all slaves [ 128.490526][ T7850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.527'. [ 128.672901][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.774003][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.812923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.063007][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.793123][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.346412][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.346500][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.952992][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.124635][ T7933] netlink: 'syz.4.552': attribute type 1 has an invalid length. [ 133.168125][ T7933] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.175334][ T7931] syzkaller0: entered promiscuous mode [ 133.175393][ T7931] syzkaller0: entered allmulticast mode [ 133.191806][ T7933] bond1: entered allmulticast mode [ 133.453059][ T30] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 133.532983][ T50] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 133.604368][ T30] usb 9-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice=65.d2 [ 133.605319][ T30] usb 9-1: config 6 has an invalid interface number: 123 but max is 1 [ 133.605342][ T30] usb 9-1: config 6 has no interface number 1 [ 133.605366][ T30] usb 9-1: config 6 interface 0 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 133.605380][ T30] usb 9-1: config 6 interface 0 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 133.605391][ T30] usb 9-1: config 6 interface 0 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 133.605401][ T30] usb 9-1: config 6 interface 0 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 133.605414][ T30] usb 9-1: config 6 interface 0 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 133.605426][ T30] usb 9-1: config 6 interface 0 altsetting 1 bulk endpoint 0x9 has invalid maxpacket 32 [ 133.605438][ T30] usb 9-1: config 6 interface 0 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 133.605448][ T30] usb 9-1: config 6 interface 0 altsetting 1 endpoint 0xB has invalid maxpacket 1088, setting to 64 [ 133.605472][ T30] usb 9-1: config 6 interface 123 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 133.605483][ T30] usb 9-1: config 6 interface 123 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 133.605494][ T30] usb 9-1: config 6 interface 123 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 133.605505][ T30] usb 9-1: config 6 interface 0 has no altsetting 0 [ 133.607240][ T30] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.607254][ T30] usb 9-1: Product: syz [ 133.607261][ T30] usb 9-1: Manufacturer: syz [ 133.607269][ T30] usb 9-1: SerialNumber: syz [ 133.610094][ T7933] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 133.683593][ T50] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 133.684447][ T50] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 1024 [ 133.684472][ T50] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 133.684525][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.689497][ T7936] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 133.698105][ T50] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 133.701510][ T50] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 133.725386][ T42] audit: type=1804 audit(1788664641.016:42): pid=7938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.554" name="bus" dev="ramfs" ino=18393 res=1 errno=0 [ 133.726392][ T42] audit: type=1804 audit(1788664641.016:43): pid=7938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.554" name="bus" dev="ramfs" ino=18393 res=1 errno=0 [ 133.825484][ T30] snd_usb_podhd 9-1:6.0: Line 6 POD HD500X found [ 133.826523][ T30] snd_usb_podhd 9-1:6.0: set_interface failed [ 133.826618][ T30] snd_usb_podhd 9-1:6.0: Line 6 POD HD500X now disconnected [ 133.826731][ T30] snd_usb_podhd 9-1:6.0: probe with driver snd_usb_podhd failed with error -71 [ 133.834465][ T30] usb 9-1: USB disconnect, device number 6 [ 133.862967][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.063097][ T7936] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 134.066922][ T7936] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 134.071693][ T7936] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 134.193574][ T7936] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 134.295659][ T5842] usb 6-1: USB disconnect, device number 11 [ 134.309539][ T5842] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 134.310217][ T5842] spcp8x5 6-1:1.0: device disconnected [ 134.932956][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.150317][ T7971] netlink: 'syz.1.565': attribute type 1 has an invalid length. [ 135.182752][ T7971] bond2: (slave gretap1): making interface the new active one [ 135.187123][ T7971] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 135.209744][ T7971] netlink: 24 bytes leftover after parsing attributes in process `syz.1.565'. [ 135.211758][ T7971] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.549197][ T7990] netlink: 'syz.0.570': attribute type 1 has an invalid length. [ 135.562355][ T7990] 8021q: adding VLAN 0 to HW filter on device bond3 [ 135.638954][ T7995] gretap2: entered promiscuous mode [ 135.643484][ T7995] bond3: (slave gretap2): making interface the new active one [ 135.646214][ T7995] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 135.660792][ T7995] macvlan2: entered promiscuous mode [ 135.660843][ T7995] macvlan2: entered allmulticast mode [ 135.661343][ T7995] bond3: entered promiscuous mode [ 135.665378][ T7995] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 135.665959][ T7995] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 135.666752][ T7995] bond3: left promiscuous mode [ 135.834409][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 135.971641][ T8004] netlink: 'syz.4.575': attribute type 1 has an invalid length. [ 135.972943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.993860][ T10] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 135.993938][ T10] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 135.996891][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 135.996921][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 135.996936][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 135.997719][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 135.997745][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 135.997760][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 135.998598][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 135.998628][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 135.998642][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 135.999755][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 135.999783][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 135.999801][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 136.001013][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 136.001042][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 136.001059][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 136.002382][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 136.002406][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 136.002421][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 136.003903][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 136.003928][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 136.003942][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 136.008097][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 136.008123][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 136.008137][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 136.009896][ T10] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 136.009911][ T10] usb 8-1: Product: syz [ 136.009919][ T10] usb 8-1: Manufacturer: syz [ 136.009926][ T10] usb 8-1: SerialNumber: syz [ 136.011130][ T10] usb 8-1: config 0 descriptor?? [ 136.033350][ T10] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 136.033512][ T8004] bond2: (slave gretap1): making interface the new active one [ 136.039566][ T8004] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 136.087676][ T8004] netlink: 24 bytes leftover after parsing attributes in process `syz.4.575'. [ 136.091438][ T8004] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.163605][ T8009] syzkaller0: entered promiscuous mode [ 136.163672][ T8009] syzkaller0: entered allmulticast mode [ 136.605110][ T73] usb 8-1: USB disconnect, device number 5 [ 136.617704][ T73] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 136.823813][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.032891][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.787183][ T8055] fuse: fd is not a fuse device [ 138.077630][ T8065] netlink: 'syz.3.591': attribute type 39 has an invalid length. [ 138.112937][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.439574][ T42] audit: type=1326 audit(1788664645.726:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz.1.594" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefec code=0x0 [ 139.102868][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.172870][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.087768][ T8128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.609'. [ 141.087865][ T8128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.609'. [ 141.152894][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.897107][ T8149] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 141.913016][ T8149] kvm: pic: single mode not supported [ 141.913928][ T8149] kvm: pic: non byte read [ 141.917768][ T8149] kvm: pic: level sensitive irq not supported [ 141.918292][ T8149] kvm: pic: non byte read [ 141.919903][ T8149] kvm: pic: level sensitive irq not supported [ 141.920237][ T8149] kvm: pic: non byte read [ 141.921226][ T8149] kvm: pic: level sensitive irq not supported [ 141.921503][ T8149] kvm: pic: non byte read [ 141.924480][ T8149] kvm: pic: level sensitive irq not supported [ 141.924771][ T8149] kvm: pic: non byte read [ 141.926506][ T8149] kvm: pic: level sensitive irq not supported [ 141.926828][ T8149] kvm: pic: non byte read [ 141.928073][ T8149] kvm: pic: level sensitive irq not supported [ 141.928370][ T8149] kvm: pic: non byte read [ 142.262969][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.576803][ T8168] netlink: 'syz.4.617': attribute type 1 has an invalid length. [ 142.782952][ T1478] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 142.867235][ T8168] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.946219][ T1478] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 142.952294][ T1478] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 142.952367][ T1478] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.952407][ T1478] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.952444][ T1478] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 142.974595][ T1478] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 142.974639][ T1478] usb 8-1: Manufacturer: syz [ 142.981395][ T1478] usb 8-1: config 0 descriptor?? [ 142.988003][ T6839] IPVS: starting estimator thread 0... [ 143.073216][ T8174] IPVS: using max 42 ests per chain, 100800 per kthread [ 143.153468][ T8163] lo: Caught tx_queue_len zero misconfig [ 143.153538][ T8163] netlink: 'syz.0.624': attribute type 5 has an invalid length. [ 143.252915][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.424981][ T1478] usbhid 8-1:0.0: can't add hid device: -71 [ 143.425094][ T1478] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 143.436849][ T1478] usb 8-1: USB disconnect, device number 6 [ 143.987719][ T6834] IPVS: starting estimator thread 0... [ 143.992553][ T8185] netlink: 48 bytes leftover after parsing attributes in process `syz.0.621'. [ 144.001944][ T8185] netlink: 'syz.0.621': attribute type 4 has an invalid length. [ 144.005535][ T8185] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.621'. [ 144.083112][ T8183] IPVS: using max 25 ests per chain, 60000 per kthread [ 144.198291][ T8192] netlink: 'syz.0.625': attribute type 1 has an invalid length. [ 144.226536][ T8192] 8021q: adding VLAN 0 to HW filter on device bond4 [ 144.254912][ T8192] bond4: (slave gretap3): making interface the new active one [ 144.258043][ T8192] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 144.283520][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.415374][ T8201] fuse: fd is not a fuse device [ 145.372979][ T50] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 145.413065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.533866][ T50] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 145.535111][ T50] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 145.535146][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.535169][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.535188][ T50] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 145.536242][ T50] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 145.536262][ T50] usb 6-1: Manufacturer: syz [ 145.538618][ T50] usb 6-1: config 0 descriptor?? [ 145.635130][ T8226] ================================================================== [ 145.635167][ T8226] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x18d/0x320 [ 145.635204][ T8226] Read of size 32 at addr ffffffff9bca0120 by task syz.3.634/8226 [ 145.635221][ T8226] [ 145.635231][ T8226] CPU: 1 UID: 0 PID: 8226 Comm: syz.3.634 Not tainted syzkaller #0 PREEMPT(full) [ 145.635252][ T8226] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.635265][ T8226] Call Trace: [ 145.635272][ T8226] [ 145.635280][ T8226] dump_stack_lvl+0x100/0x190 [ 145.635305][ T8226] print_report+0x13d/0x4b0 [ 145.635332][ T8226] ? __virt_addr_valid+0x239/0x430 [ 145.635385][ T8226] ? usb_copy_descriptors+0x18d/0x320 [ 145.635409][ T8226] kasan_report+0xdf/0x1c0 [ 145.635434][ T8226] ? usb_copy_descriptors+0x18d/0x320 [ 145.635462][ T8226] kasan_check_range+0x10f/0x1e0 [ 145.635489][ T8226] __asan_memcpy+0x23/0x60 [ 145.635506][ T8226] usb_copy_descriptors+0x18d/0x320 [ 145.635532][ T8226] usb_assign_descriptors+0xd2/0x470 [ 145.635558][ T8226] f_audio_bind+0x243a/0x3950 [ 145.635579][ T8226] ? __pfx_f_audio_bind+0x10/0x10 [ 145.635595][ T8226] usb_add_function+0x219/0x890 [ 145.635621][ T8226] ? composite_dev_prepare+0x211/0x420 [ 145.635640][ T8226] configfs_composite_bind+0xd83/0x1960 [ 145.635669][ T8226] ? kernfs_create_link+0x1bd/0x240 [ 145.635698][ T8226] gadget_bind_driver+0x28c/0xbf0 [ 145.635719][ T8226] ? __pfx_gadget_bind_driver+0x10/0x10 [ 145.635739][ T8226] really_probe+0x241/0xa60 [ 145.635762][ T8226] __driver_probe_device+0x210/0x460 [ 145.635784][ T8226] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 145.635808][ T8226] driver_probe_device+0x4a/0x140 [ 145.635829][ T8226] __driver_attach+0x21f/0x5b0 [ 145.635852][ T8226] ? __pfx___driver_attach+0x10/0x10 [ 145.635874][ T8226] bus_for_each_dev+0x13e/0x1d0 [ 145.635890][ T8226] ? __pfx_bus_for_each_dev+0x10/0x10 [ 145.635918][ T8226] ? bus_add_driver+0x2b5/0x5b0 [ 145.635940][ T8226] bus_add_driver+0x305/0x5b0 [ 145.635959][ T8226] driver_register+0x1e2/0x360 [ 145.635984][ T8226] usb_gadget_register_driver_owner+0x132/0x210 [ 145.636005][ T8226] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 145.636031][ T8226] configfs_write_iter+0x302/0x4e0 [ 145.636053][ T8226] vfs_write+0x6af/0x1050 [ 145.636070][ T8226] ? __pfx_configfs_write_iter+0x10/0x10 [ 145.636094][ T8226] ? __pfx_vfs_write+0x10/0x10 [ 145.636110][ T8226] ? find_held_lock+0x2b/0x80 [ 145.636136][ T8226] ksys_write+0x12a/0x250 [ 145.636153][ T8226] ? __pfx_ksys_write+0x10/0x10 [ 145.636173][ T8226] __do_fast_syscall_32+0x13a/0x8b0 [ 145.636199][ T8226] ? lockdep_hardirqs_on+0x7d/0x110 [ 145.636239][ T8226] do_fast_syscall_32+0x32/0x70 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 145.636262][ T8226] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 145.636283][ T8226] RIP: 0023:0xf7f45fec [ 145.636302][ T8226] Code: Unable to access opcode bytes at 0xf7f45fc2. [ 145.636311][ T8226] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 145.636331][ T8226] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000480 [ 145.636344][ T8226] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 145.636354][ T8226] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 145.636363][ T8226] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 145.636373][ T8226] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 145.636395][ T8226] [ 145.636402][ T8226] [ 145.636406][ T8226] The buggy address belongs to the variable: [ 145.636413][ T8226] ac_header_desc+0x0/0x40 [ 145.636434][ T8226] [ 145.636437][ T8226] The buggy address belongs to the physical page: [ 145.636445][ T8226] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1bca0 [ 145.636460][ T8226] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 145.636485][ T8226] raw: 00fff00000002000 ffffea00006f2808 ffffea00006f2808 0000000000000000 [ 145.636502][ T8226] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 145.636513][ T8226] page dumped because: kasan: bad access detected [ 145.636523][ T8226] page_owner info is not present (never set?) [ 145.636529][ T8226] [ 145.636532][ T8226] Memory state around the buggy address: [ 145.636539][ T8226] ffffffff9bca0000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 145.636546][ T8226] ffffffff9bca0080: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 145.636554][ T8226] >ffffffff9bca0100: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 145.636560][ T8226] ^ [ 145.636566][ T8226] ffffffff9bca0180: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 145.636573][ T8226] ffffffff9bca0200: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 145.636579][ T8226] ================================================================== [ 145.636701][ T8226] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 145.803696][ T8226] CPU: 1 UID: 0 PID: 8226 Comm: syz.3.634 Not tainted syzkaller #0 PREEMPT(full) [ 145.807080][ T8226] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.810409][ T8226] Call Trace: [ 145.811575][ T8226] [ 145.812527][ T8226] dump_stack_lvl+0x100/0x190 [ 145.814051][ T8226] vpanic+0x553/0x970 [ 145.815421][ T8226] ? __pfx_vpanic+0x10/0x10 [ 145.817109][ T8226] ? mark_held_locks+0x40/0x70 [ 145.818762][ T8226] ? irqentry_exit+0x24d/0xa10 [ 145.821019][ T8226] ? usb_copy_descriptors+0x18d/0x320 [ 145.823069][ T8226] panic+0xd1/0xe0 [ 145.824392][ T8226] ? __pfx_panic+0x10/0x10 [ 145.825826][ T8226] ? usb_copy_descriptors+0x18d/0x320 [ 145.827556][ T8226] ? preempt_schedule_common+0x3c/0xb0 [ 145.829384][ T8226] check_panic_on_warn.cold+0x19/0x34 [ 145.831088][ T8226] end_report.part.0+0x3a/0x90 [ 145.832645][ T8226] kasan_report.cold+0xe/0x18 [ 145.834148][ T8226] ? usb_copy_descriptors+0x18d/0x320 [ 145.835931][ T8226] kasan_check_range+0x10f/0x1e0 [ 145.837714][ T8226] __asan_memcpy+0x23/0x60 [ 145.839361][ T8226] usb_copy_descriptors+0x18d/0x320 [ 145.841328][ T8226] usb_assign_descriptors+0xd2/0x470 [ 145.843078][ T8226] f_audio_bind+0x243a/0x3950 [ 145.844589][ T8226] ? __pfx_f_audio_bind+0x10/0x10 [ 145.846182][ T8226] usb_add_function+0x219/0x890 [ 145.847750][ T8226] ? composite_dev_prepare+0x211/0x420 [ 145.849507][ T8226] configfs_composite_bind+0xd83/0x1960 [ 145.851199][ T8226] ? kernfs_create_link+0x1bd/0x240 [ 145.852821][ T8226] gadget_bind_driver+0x28c/0xbf0 [ 145.854417][ T8226] ? __pfx_gadget_bind_driver+0x10/0x10 [ 145.856299][ T8226] really_probe+0x241/0xa60 [ 145.858032][ T8226] __driver_probe_device+0x210/0x460 [ 145.859917][ T8226] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 145.861831][ T8226] driver_probe_device+0x4a/0x140 [ 145.863493][ T8226] __driver_attach+0x21f/0x5b0 [ 145.864989][ T8226] ? __pfx___driver_attach+0x10/0x10 [ 145.866606][ T8226] bus_for_each_dev+0x13e/0x1d0 [ 145.868387][ T8226] ? __pfx_bus_for_each_dev+0x10/0x10 [ 145.870417][ T8226] ? bus_add_driver+0x2b5/0x5b0 [ 145.872128][ T8226] bus_add_driver+0x305/0x5b0 [ 145.873813][ T8226] driver_register+0x1e2/0x360 [ 145.875445][ T8226] usb_gadget_register_driver_owner+0x132/0x210 [ 145.877592][ T8226] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 145.879843][ T8226] configfs_write_iter+0x302/0x4e0 [ 145.882073][ T8226] vfs_write+0x6af/0x1050 [ 145.883853][ T8226] ? __pfx_configfs_write_iter+0x10/0x10 [ 145.886115][ T8226] ? __pfx_vfs_write+0x10/0x10 [ 145.888201][ T8226] ? find_held_lock+0x2b/0x80 [ 145.890157][ T8226] ksys_write+0x12a/0x250 [ 145.891761][ T8226] ? __pfx_ksys_write+0x10/0x10 [ 145.893744][ T8226] __do_fast_syscall_32+0x13a/0x8b0 [ 145.895815][ T8226] ? lockdep_hardirqs_on+0x7d/0x110 [ 145.898087][ T8226] do_fast_syscall_32+0x32/0x70 [ 145.900081][ T8226] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 145.902482][ T8226] RIP: 0023:0xf7f45fec [ 145.904087][ T8226] Code: Unable to access opcode bytes at 0xf7f45fc2. [ 145.906513][ T8226] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 145.909598][ T8226] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000480 [ 145.912581][ T8226] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 145.915727][ T8226] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 145.919482][ T8226] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 145.922443][ T8226] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 145.925594][ T8226] [ 145.927361][ T8226] Kernel Offset: disabled [ 145.928768][ T8226] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:17:33 Registers: info registers vcpu 0 CPU#0 RAX=000000000016707f RBX=ffffffff8ea91500 RCX=ffffffff8bcdf115 RDX=0000000000000001 RSI=ffffffff8e3f0890 RDI=ffffffff8c622580 RBP=fffffbfff1d522a0 RSP=ffffffff8ea07cf0 R8 =0000000000000001 R9 =ffffed10056467bd R10=ffff88802b233deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d40fa2 R15=dffffc0000000000 RIP=ffffffff8bcdd6bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096963000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f722ea77 CR3=000000005ea21000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85ae5665 RDI=ffffffff9bc541e0 RBP=ffffffff9bc541a0 RSP=ffffc90021e26f20 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000032323854 R12=0000000000000000 R13=0000000000000034 R14=0000000000000004 R15=ffffc90021e27238 RIP=ffffffff85ae568f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096a63000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f46000 CR3=0000000044e4a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000012000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff888058248818 RCX=1ffff1100b04910a RDX=ffff888058248850 RSI=dead000000000122 RDI=ffff888058248818 RBP=ffffc90000548da0 RSP=ffffc90000548c40 R8 =0000000000000001 R9 =fffff520000a917c R10=0000000000000003 R11=0000000000000001 R12=0000000000000000 R13=0000000000000006 R14=0000000000000006 R15=ffff88806eef0690 RIP=ffffffff8bcdf980 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007feaf5625300 ffffffff 00c00000 GS =0000 ffff888096b63000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000563272930168 CR3=0000000025496000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 020100000608060c 0175ae0c80080004 0800220800060174 de1ffffffeb40800 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008060a016ea404 080007fffe08000f ffffffff02010000 0008060fffffffff ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8c03140400078803 0008000780030008 000fffffffff0232 0800020800010000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01ffffffffffffff ffdf080798031dff ffffe40488000790 0302b9c004840007 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000102b80800 0780021208000288 0800010000040806 0a0171f834020009 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b4031ffffffef208 0009ac034c080009 a403060800099c03 1ffff8e2ac080009 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 94030c0400099003 1fffffffee080009 88030a080007b803 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 01ffffffffffffff ffdf080798031dff ffffe40488000790 ZMM25=c28bed4dc28bed4d c28bed4dc28bed4d c28bed4dc28bed4d c28bed4dc28bed4d c28bed4dc28bed4d c28bed4dc28bed4d c28bed4dc28bed4d c28bed4dc28bed4d ZMM26=a0079718a0079718 a0079718a0079718 a0079718a0079718 a0079718a0079718 a0079718a0079718 a0079718a0079718 a0079718a0079718 a0079718a0079718 ZMM27=8d4b07838d4b0783 8d4b07838d4b0783 8d4b07838d4b0783 8d4b07838d4b0783 8d4b07838d4b0783 8d4b07838d4b0783 8d4b07838d4b0783 8d4b07838d4b0783 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=4b0700004b070000 4b0700004b070000 4b0700004b070000 4b0700004b070000 4b0700004b070000 4b0700004b070000 4b0700004b070000 4b0700004b070000 info registers vcpu 3 CPU#3 RAX=00000059745c5438 RBX=ffff88802b523d80 RCX=00000000000006e0 RDX=0000000000000059 RSI=ffffffff81faef85 RDI=ffff88801cbf8000 RBP=00000021e2b8f976 RSP=ffffc900005f8e90 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff920000bf1dc R13=0000000000000001 R14=0000000000000001 R15=ffff88802b523dc0 RIP=ffffffff81faef98 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096c63000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000057bc11fc CR3=000000005ea21000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000