last executing test programs: 6.537411254s ago: executing program 1 (id=531): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000180)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$inet(0x2, 0x1, 0x100) listen(r3, 0x7fff) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="60000000420001000000000000000000030100000f0000003f00010000112233445566778899aabb86dd2c00001c00002c00011100000101010102538758fe6cbdf0357065ae44132403b1fd606412c3258e2b670000b20004000280040003"], 0x60}}, 0x0) syz_usb_connect$uac1(0x3, 0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010102000000203512148040000102030109026800030106400b0904000000010100000a240101000a00020102f203010000010104010e8109050109ef03010500"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) socket$rds(0x15, 0x5, 0x0) mlockall(0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r5 = io_uring_setup(0x1, &(0x7f0000000380)={0x0, 0x0, 0x3800, 0x2}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000002040), 0x101000, 0x0) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r5, 0x24, &(0x7f0000000400), 0x0) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) 3.495027348s ago: executing program 1 (id=544): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x34d403) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x2c00c014) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x22020400) r6 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = dup(r5) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000340)=@x86={0x7, 0x3, 0x6, 0x0, 0x8, 0x7, 0x6, 0x0, 0x4, 0x9, 0x8, 0x9, 0x0, 0x7, 0x401, 0xa, 0x1, 0x40, 0x10, '\x00', 0x4d, 0x55}) epoll_pwait(r1, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$TUNGETSNDBUF(r7, 0x800454d3, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000000)={0x10000001}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x64) 3.340876656s ago: executing program 3 (id=547): shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0xc000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000280)=""/207) r3 = getpid() ptrace$ARCH_SHSTK_UNLOCK(0x1e, r3, 0x3, 0x5004) sched_setaffinity(0x0, 0x28, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100010000000000000020010000000000000000000000000000ac3514aa0000000000000000000000004e220000000000000a0000000000"], 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="a0000000210001000000000004000000ff0100000000000000000000000000010a01010200000000000000000000000000000005000000000a0000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000005000110000000000000000000000000000000001000000000000000000009276bfbd3c92846fdfa7d3ceffffac1e0101ff020000000000000000000000000001fc0200000000000000000000000000003c"], 0xa0}}, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r3, 0x1, 0x5002) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x62, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e0000009000000000000000002000100000000000000000200000000030005000000000002000800"/80], 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) 2.822033181s ago: executing program 2 (id=548): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001080)='./proc\x00', &(0x7f00000010c0)='proc\x00', 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x22242, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) socket(0x18, 0x3, 0x0) r7 = epoll_create1(0x80000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) epoll_pwait2(r7, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080)={r8, r9+60000000}, 0x0, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r10, &(0x7f0000002600)={0x20000000}) socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x1e) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r11 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xffd2, 0x40, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000c80), 0x0) syslog(0x9, &(0x7f0000000d00)=""/132, 0x84) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2100, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) io_submit(r6, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000440)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x419, 0xff, 0x18, 0x3, 0xfff, "29d0199be01ccf5c901a181df2d42543af991fa8970ea51e83906109557daa8e15a4650dd1501ee94307a4973e25ad42e7e1763c3ae1ad9d7f53f3c4168469bc57fdfbb3fa915ad31623e6cf294150df774a0c496b6c8a434e330f317278eb444ba28273861f4ea15deb1e8811b749576ae7162bb69fb88353963266400f9082"}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) execveat(r5, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000c00)={[&(0x7f0000000ac0)='{@-@@&\xfa\xda*\x00', &(0x7f0000000b00)='-\x0e\x00', &(0x7f0000000b40)='syz1\x00']}, &(0x7f0000000cc0)={[&(0x7f0000000c40)='syz1\x00']}, 0x1000) r13 = dup(r12) syz_ublk_setup_queues(r13, r4, &(0x7f0000000b80)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2000, 0x1006, 0x200015a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10002, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x200, 0x2, 0xb9}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5e0, 0x0, 0x0}}, 0x0) write$uinput_user_dev(r13, &(0x7f0000000100)={'syz1\x00', {0xfff3, 0x3f8, 0x7, 0xf001}, 0x4e, [0x100, 0xffffff5a, 0x7, 0x4, 0x1ff, 0x8cf, 0x2, 0x8, 0x7701, 0xfffffff7, 0x3a, 0x0, 0x4, 0xffffffc0, 0x1000, 0xbaf, 0x10001, 0x4, 0x0, 0xff, 0x101, 0x8, 0x2, 0x47, 0x100, 0x100, 0x3, 0x5, 0x4, 0x80, 0x7fff, 0x3, 0x4, 0x4e, 0x16, 0x29, 0x10000, 0x4, 0x7fff, 0x8, 0x4000, 0xd644, 0xfffffffe, 0x0, 0x0, 0x1, 0x7, 0xca86, 0x7, 0x9, 0x6, 0x5, 0x1, 0x7, 0x4, 0xfffffffd, 0x80000001, 0x8000, 0xf03b, 0x5, 0x3, 0xffffe001, 0x5000, 0x9], [0x1, 0x6, 0x3, 0xffffcb85, 0x3, 0x14178b7b, 0x6, 0x1, 0x3, 0x0, 0x9, 0x80, 0x7, 0x8, 0x8, 0x7, 0x8001, 0x1000, 0x7fffffff, 0xfffffff3, 0x31c, 0x5, 0x0, 0x4, 0x1, 0x2, 0xffff8001, 0x8, 0x9, 0xb2c, 0x3, 0x2, 0x3, 0x1, 0x1, 0xfffffff1, 0x3, 0x8, 0x8, 0x8, 0x6, 0x101, 0xffff, 0x0, 0x100, 0x10, 0x5, 0x9, 0xbf27, 0x4, 0x1, 0x1c000000, 0x7ff, 0x6, 0x8001, 0x3, 0x6, 0x1000, 0xe, 0x7, 0x8, 0x3, 0x9, 0xfffffffc], [0x8, 0x5, 0x2, 0x8, 0x5, 0x8, 0x3, 0x1, 0x10, 0x2, 0xf, 0x2, 0x0, 0x3, 0x7f, 0x200, 0x9479, 0x7, 0x40, 0x3, 0xfffffff2, 0x6e, 0x9, 0x5, 0x7, 0x9e, 0x5, 0x5, 0x7, 0x3, 0xdda9, 0x4, 0x8, 0x4, 0x9, 0x0, 0x3, 0xfffffffa, 0x81, 0xffff7fff, 0x100, 0x40, 0x401, 0xd1e4, 0x9, 0x8, 0x8, 0x1, 0xc0000000, 0xfffffff9, 0x8, 0x80000001, 0x6, 0x0, 0xfffff000, 0x6, 0x5, 0x8, 0x4, 0x6, 0x2, 0x8, 0x1, 0x1000], [0xfb, 0x4, 0x3, 0x5, 0x7fffffff, 0xf0, 0x7, 0x9, 0xa1, 0x7f, 0xff, 0x2, 0x1, 0x6, 0x1, 0x100, 0xf42, 0x3, 0x8, 0x4, 0x7, 0x3, 0x1ff, 0x8, 0x5, 0xffff, 0x0, 0x5, 0x602, 0x9, 0x4, 0x101, 0x0, 0x4, 0x0, 0xda2, 0x7, 0xd2ce, 0x4, 0x3, 0x3, 0x8000, 0x8, 0x39, 0x8003, 0x4, 0x6, 0x9, 0xc01, 0xe, 0x1, 0x1, 0x3, 0x27, 0xe, 0x0, 0x7ff, 0x867, 0xfffffff8, 0x1, 0x5a, 0xdbdb, 0x9, 0x3]}, 0x45c) 2.430685027s ago: executing program 3 (id=549): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x3, 0x2) preadv(r0, &(0x7f00000016c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1, 0x9, 0x6) 2.385131551s ago: executing program 0 (id=550): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x800448d2, 0x0) 2.384623376s ago: executing program 3 (id=551): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ec0)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000, 0x2}, {0x10, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x73, 0x4c}, [@algo_crypt={0x59, 0x2, {{'cbc(camellia)\x00'}, 0x88, "51ad34d9ea841223e5d0f932af16e92125"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2.281615978s ago: executing program 0 (id=552): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x60700, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x60}, './file0\x00'}) 2.201569407s ago: executing program 0 (id=553): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000}) 2.110780059s ago: executing program 3 (id=554): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x34d403) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x2c00c014) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x22020400) r6 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = dup(r5) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"a2e3ad09ed1a09f91b37090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f383b6c090890e0879b0a0ac6e70a9b3361959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000340)=@x86={0x7, 0x3, 0x6, 0x0, 0x8, 0x7, 0x6, 0x0, 0x4, 0x9, 0x8, 0x9, 0x0, 0x7, 0x401, 0xa, 0x1, 0x40, 0x10, '\x00', 0x4d, 0x55}) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$TUNGETSNDBUF(r7, 0x800454d3, &(0x7f0000000040)) r9 = epoll_create1(0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x10000001}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x64) 2.110653749s ago: executing program 0 (id=555): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180800"/12, @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000000000085000000a0000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r2, 0x4b47, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0xc0, 0x10c) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_clone3(0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, 0x0, 0x0) r6 = syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r7, 0x0, 0x0) syz_usb_ep_write(r6, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") read$char_usb(r7, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) 2.110091392s ago: executing program 1 (id=556): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x34d403) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x2c00c014) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x22020400) r6 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = dup(r5) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000340)=@x86={0x7, 0x3, 0x6, 0x0, 0x8, 0x7, 0x6, 0x0, 0x4, 0x9, 0x8, 0x9, 0x0, 0x7, 0x401, 0xa, 0x1, 0x40, 0x10, '\x00', 0x4d, 0x55}) epoll_pwait(r1, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$TUNGETSNDBUF(r7, 0x800454d3, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000000)={0x10000001}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x64) 1.55233409s ago: executing program 2 (id=557): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x34d403) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x2c00c014) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x22020400) r6 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = dup(r5) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000340)=@x86={0x7, 0x3, 0x6, 0x0, 0x8, 0x7, 0x6, 0x0, 0x4, 0x9, 0x8, 0x9, 0x0, 0x7, 0x401, 0xa, 0x1, 0x40, 0x10, '\x00', 0x4d, 0x55}) epoll_pwait(r1, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$TUNGETSNDBUF(r7, 0x800454d3, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000000)={0x10000001}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x64) 1.195460009s ago: executing program 1 (id=558): shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0xc000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000280)=""/207) r3 = getpid() ptrace$ARCH_SHSTK_UNLOCK(0x1e, r3, 0x3, 0x5004) sched_setaffinity(0x0, 0x28, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100010000000000000020010000000000000000000000000000ac3514aa0000000000000000000000004e220000000000000a0000000000"], 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="a0000000210001000000000004000000ff0100000000000000000000000000010a01010200000000000000000000000000000005000000000a0000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000005000110000000000000000000000000000000001000000000000000000009276bfbd3c92846fdfa7d3ceffffac1e0101ff020000000000000000000000000001fc0200000000000000000000000000003c"], 0xa0}}, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r3, 0x1, 0x5002) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x62, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e0000009000000000000000002000100000000000000000200000000030005000000000002000800"/80], 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) 1.195312111s ago: executing program 3 (id=559): setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) setpriority(0x1, 0x0, 0x80000000) 1.191134696s ago: executing program 0 (id=566): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x34d403) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x2c00c014) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x22020400) r6 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = dup(r5) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"a2e3ad09ed1a09f91b37090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f383b6c090890e0879b0a0ac6e70a9b3361959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000340)=@x86={0x7, 0x3, 0x6, 0x0, 0x8, 0x7, 0x6, 0x0, 0x4, 0x9, 0x8, 0x9, 0x0, 0x7, 0x401, 0xa, 0x1, 0x40, 0x10, '\x00', 0x4d, 0x55}) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$TUNGETSNDBUF(r7, 0x800454d3, &(0x7f0000000040)) r9 = epoll_create1(0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x10000001}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x64) 293.58806ms ago: executing program 0 (id=560): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="d7e599ada862a2ce97c1419e8610000000040000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000154000181100"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800002b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0xff2e) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x80000000}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x0, 0x13, "00170000ff000000fe645ea200"}) r5 = syz_open_pts(r2, 0x8182) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) lseek(0xffffffffffffffff, 0x249f0, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r6, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x2}}, 0x20) syz_emit_vhci(&(0x7f0000000740)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xb) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) dup3(r5, r2, 0x0) syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x1, 0x42}, 0x0, &(0x7f0000011000), &(0x7f0000000000)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x3) 293.403152ms ago: executing program 3 (id=561): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x88000, 0x0) ioctl$MEMREADOOB(0xffffffffffffffff, 0xc00c4d04, &(0x7f0000000640)={0x5, 0x0, &(0x7f0000000400)}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000101010100000000000000000a00000200001080000001400000000500000240fffffffb08001a4000000009c9ff6ace00000100200000100800034000002000"], 0x60}}, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x5, &(0x7f0000000140)) timer_settime(r3, 0x1, &(0x7f0000000240)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp']) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xfea7) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r5, r5, 0xd, 0x0, 0x0, 0xb, 0xf9, 0x10cf, 0x3737, 0x8b, 0x2, 0x9, 'syz0\x00'}) socket(0x2, 0x3, 0x6) openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) 290.952485ms ago: executing program 2 (id=569): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x101000, 0x0) ioctl$TIOCMBIS(r0, 0x5416, 0x0) 236.364529ms ago: executing program 2 (id=562): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000140)={0x223e, 0x3, 0x0, 0x5}) 214.6633ms ago: executing program 1 (id=563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 122.197733ms ago: executing program 2 (id=564): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sched_setattr(0x0, &(0x7f0000000000)={0x82, 0x3, 0x3, 0x2, 0x1800000, 0x6, 0x7, 0x4, 0x7, 0xc329}, 0x0) 108.381329ms ago: executing program 2 (id=565): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket$nl_netfilter(0x10, 0x3, 0xc) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$sysctl(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, &(0x7f0000000300)) shutdown(0xffffffffffffffff, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r3, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000040)) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000000)={0x1, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) 0s ago: executing program 1 (id=567): ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f00000000c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008814) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000640)={{0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x16, 0x8}, 0x6, 0x40, 0x9, 0xfffffffffffffffb, 0x0, 0x0, 0xd382}) connect$unix(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x58, 0x12) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r5, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000c140)={&(0x7f000000bf80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x100000001}, [{0x8000000000000000, 0x4}, {0x9, 0x8000000000000001}, {0xb7, 0x6}, {0xffffffff, 0x3}, {0x2f4, 0x40}, {0x1000, 0x98e}, {0x1, 0x6}, {0x2, 0x2}, {0x7}, {0xc, 0xffffffff80000000}, {0x800000000000, 0x1c}, {0xffffffffffffffff, 0x4}, {0x9, 0x9}, {0xe8b0, 0x3aac00000000000}, {0x69b7, 0x5f}, {0x0, 0x5}, {0xa, 0x2}, {0x7fff}, {0x7, 0x4}, {0x7ff, 0x3}, {0x1ff, 0x100000001}, {0xa2e, 0xe}, {0x30fe, 0x1}, {0x8, 0x4}, {0xff, 0x2}, {0xfb9, 0x1}, {0x6, 0x8}, {0x1, 0xfffffffffffffffc}, {0x7, 0x5}, {0x2, 0xffffffffffff7fff}, {0x9, 0x8}, {0x59f, 0x5ff5}, {0x7fff, 0x7}, {0x8, 0x3}, {0xc1d, 0x4077d962}, {0x139b, 0x1089}, {0x5, 0x81}, {0x0, 0x3}, {0x8, 0xb}, {0x5, 0x1}, {0x4a82, 0xb}, {0x200, 0x405}, {0x1c508f61, 0x1a5b5e17}, {0xc, 0x7fffffff}, {0xff, 0x7d71}, {0x8000000000000001}, {0x10, 0x6}, {0x7, 0x8}, {0x5, 0x200}, {0xfffffffffffffffb, 0x6}, {0x7f, 0x6}, {0x80000001, 0x1}, {0x70, 0x9}, {0x1, 0x1}, {0x3, 0x2}, {0x81, 0x5}, {0x5, 0x9}, {0x8, 0x101}, {0x3, 0x7}, {0x9, 0x3}, {0x180, 0x59f}, {0xffff, 0x2}, {0x5}, {0x7, 0x80000000}, {0x10, 0x7fffffff}, {0x9, 0x9}, {0x1, 0x6}, {0x76, 0xfffffffffffffffc}, {0x40, 0x6}, {0x100000000, 0x200}, {0x4, 0x8}, {0x0, 0xf}, {0xd9, 0x63da50e0}, {0x2, 0xa987}, {0xf, 0xf800000000000000}, {0x8, 0xf405}, {0x2, 0x4}, {0x0, 0x80000001}, {0x2, 0x9}, {0x0, 0x2}, {0x5, 0x4}, {0x5, 0x7}, {0x2, 0x80000000}, {0x400000000000, 0xdb6}, {0x34c0}, {0x94, 0xfffffffffffffffa}, {0x0, 0xead5}, {0x7ff, 0x8001}, {0x5, 0x2}, {0xffffffffffff7fff}, {0xa, 0x1}, {0x0, 0x99}, {0xb9, 0x8001}, {0x7, 0x6de}, {0x2}, {0xfffffffffffffff7, 0x99b1}, {0x6, 0x4}, {0xda, 0x5}, {0x2, 0x8}, {0xd8, 0x4}, {0x8, 0xb6ea}, {0x4, 0xc27}, {0x2, 0x8000000000000000}, {0x3, 0x1}, {0x4, 0x6}, {0x2125, 0xffffffffffffff14}, {0x0, 0x7}, {0x0, 0x80}, {0x2, 0xfffffc0000000000}, {0x4e9a, 0x7}, {0x10001, 0x8}, {0x7fff, 0x200}, {0x5, 0x3}, {0x7, 0x3}, {0x100, 0x3}, {0x8, 0x5}, {0x3, 0x8000000000000000}, {0x4, 0x200}, {0x5, 0x5}, {0x2, 0x6}, {0x9, 0x9}, {0xa, 0x5}, {0x7, 0xd97}, {0xff, 0x5173}, {0x2}, {0x1, 0x81}, {0x6, 0x1ff}, {0x0, 0x6}, {0x9, 0x140000000000}, {0x26, 0x7}, {0x4, 0x6}, {0x0, 0xa}, {0x3}, {0xb, 0x5}, {0x9, 0x7}, {0x7, 0x1}, {0x1, 0x1}, {0x1e12, 0x5}, {0x5, 0x4}, {0x3, 0x6}, {0x5, 0x3}, {0x4003, 0xffffffff}, {0x1, 0x5}, {0x100000000, 0x3}, {0x90a6, 0x9}, {0x9, 0x107}, {0xf, 0x80000000}, {0x9, 0x101}, {0x9, 0x7fff}, {0x0, 0x1}, {0x6, 0x40}, {0x2, 0x10001}, {0x7, 0x6}, {0x200}, {0x3, 0xffff}, {0x5, 0x793}, {0x6, 0x100000000}, {0x3, 0xda}, {0xb0, 0xffffffff}, {0x6, 0x2}, {0x6, 0x2}, {0x4, 0x1}, {0x6, 0xa}, {0x5d, 0x8001}, {0x38, 0x5f0}, {0x4, 0x7}, {0xffffffff, 0x5a2}, {0x1, 0x2}, {0x8, 0x1}, {0xe9, 0xfffffffffffff7b6}, {0x8e, 0x7fff}, {0x80000000, 0x8000000000000001}, {0xffffffff, 0xfda9}, {0xe5, 0xffffffffffffff41}, {0x24, 0x8}, {0x5, 0x4}, {0x187, 0xa2}, {0xd6, 0xffffffffffffffa3}, {0x1, 0xa807}, {0x3723, 0x6}, {0xfffffffffffff801, 0xa9}, {}, {0x2, 0xfffffffffffffffa}, {0x10001, 0x8000000000}, {0xfffffffffffff000, 0x3}, {0x3, 0xf9e}, {0x2321, 0x8}, {0x7ff}, {0x10001, 0xffffffff}, {0x5, 0x3}, {0x7ff, 0x9}, {0x4, 0x3e}, {0x3bd14045, 0x8001}, {0xff, 0x7}, {0x8, 0xffff}, {0x575, 0x2}, {0x3, 0x2}, {0x1, 0xe}, {0x5, 0xe}, {0x7, 0x9c}, {0x3ff, 0x8001}, {0x8, 0xffffffffffff0001}, {0x0, 0x7}, {0x3, 0x1}, {0xfffffffffffffffb, 0x4}, {0x7, 0x9}, {0x7, 0x1649}, {0x3ff, 0x7}, {0xf, 0xe6a}, {0x8, 0x1}, {0x10000, 0x5}, {0x7, 0x6}, {0x1, 0xb5}, {0x7, 0xdd1}, {0xffff, 0x66e}, {0x0, 0x4}, {0x3, 0x30580c97}, {0x8001, 0xf6}, {0x6, 0x800}, {0xcaa, 0x5}, {0x9, 0xb}, {0x0, 0xb12}, {0x7, 0x8}, {0xfaa, 0x6}, {0x8, 0x5}, {0xfffffffffffff801, 0x951}, {0x7, 0x101}, {0x7, 0x910000}, {0x2, 0x5b}, {0xa8, 0x8}, {0x619, 0x1}, {0x8, 0xfffffffffffff775}, {0x3, 0x3}, {0x1ff, 0x8}, {0x2000000000000, 0x80000000}, {0xfff, 0x1}, {0x2, 0x868}, {0x2ef, 0x2}, {0x0, 0x8000000000000000}, {0x3, 0xfffffffffffffffc}, {0x1, 0x1}, {0x7, 0x7}, {0x57, 0x7}, {0x401, 0x6}, {0x5, 0x73}, {0x80000001, 0xc91}, {0x800, 0x7ff}, {0x777b, 0x9}, {0xb3, 0x8}, {0x4, 0x1}, {0x7, 0x6}, {0xd5}, {0x3, 0x401}, {0x1, 0x2}, {0x2, 0xfffffffffffff27a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r7, 0x10c, 0x4, &(0x7f0000000000), &(0x7f00000002c0)=0x4) capset(&(0x7f0000000040)={0x19980330, r0}, &(0x7f0000000080)={0x0, 0xc, 0x4, 0x2, 0x330d, 0x6}) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2e}, @void, @val={0xc, 0x99, {0x9, 0x43}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20044040}, 0x20008000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000300)={0x0, 'vlan1\x00'}) kernel console output (not intermixed with test programs): [ T5738] hsr_slave_0: entered promiscuous mode [ 48.715647][ T5738] hsr_slave_1: entered promiscuous mode [ 48.716107][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 48.716118][ T5738] Cannot create hsr debugfs directory [ 48.721566][ T5737] team0: Port device team_slave_1 added [ 48.759638][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.759655][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.759677][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.775068][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.775083][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.775105][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.878476][ T5737] hsr_slave_0: entered promiscuous mode [ 48.879330][ T5737] hsr_slave_1: entered promiscuous mode [ 48.879616][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 48.879627][ T5737] Cannot create hsr debugfs directory [ 48.988267][ T5736] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.993263][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.001092][ T5736] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.008232][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.008701][ T5736] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.011727][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.039588][ T5736] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.043417][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.137237][ T5738] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.140105][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.140994][ T5738] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.144676][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.157615][ T5738] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.160384][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.170538][ T5738] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.174802][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.236453][ T5749] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.238999][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.241745][ T5749] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.246850][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.249394][ T5749] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.254942][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.258509][ T5749] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.265178][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.333742][ T5737] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.337207][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.342421][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.342721][ T5737] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.344901][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.349990][ T5737] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.352442][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.352856][ T5737] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.354846][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.380884][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.412942][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.413046][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.418204][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.430688][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.430733][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.457032][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.468243][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.468408][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.478411][ T5749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.479961][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.480046][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.510830][ T5749] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.529011][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.529091][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.543564][ T5738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.549129][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.549174][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.557138][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.566466][ T5739] Bluetooth: hci1: command tx timeout [ 49.566791][ T5739] Bluetooth: hci2: command tx timeout [ 49.566885][ T5096] Bluetooth: hci0: command tx timeout [ 49.567062][ T5739] Bluetooth: hci3: command tx timeout [ 49.599467][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.624206][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.624287][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.629046][ T5749] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.629059][ T5749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.650405][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.650506][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.696976][ T5737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.862396][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.890538][ T5738] veth0_vlan: entered promiscuous mode [ 49.894771][ T5738] veth1_vlan: entered promiscuous mode [ 49.910537][ T5738] veth0_macvtap: entered promiscuous mode [ 49.912832][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.915222][ T5738] veth1_macvtap: entered promiscuous mode [ 49.929065][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.937700][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.942546][ T5749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.980241][ T5736] veth0_vlan: entered promiscuous mode [ 49.999419][ T5736] veth1_vlan: entered promiscuous mode [ 50.007641][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.034453][ T5749] veth0_vlan: entered promiscuous mode [ 50.043498][ T5749] veth1_vlan: entered promiscuous mode [ 50.046830][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.074007][ T124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.074021][ T124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.091920][ T5736] veth0_macvtap: entered promiscuous mode [ 50.104649][ T5736] veth1_macvtap: entered promiscuous mode [ 50.112662][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.112675][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.134670][ T5749] veth0_macvtap: entered promiscuous mode [ 50.149043][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.150504][ T5749] veth1_macvtap: entered promiscuous mode [ 50.159168][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.166988][ T5738] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.167223][ T5737] veth0_vlan: entered promiscuous mode [ 50.175117][ T5738] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.176649][ T5816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.176786][ T5816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.176853][ T5816] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.186147][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.187929][ T5738] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.188531][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.188701][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.188940][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.189184][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.192249][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.194116][ T5738] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.215005][ T5738] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.216624][ T5737] veth1_vlan: entered promiscuous mode [ 50.274434][ T124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.274448][ T124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.277285][ T5816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.277317][ T5816] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.277342][ T5816] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.277360][ T5816] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.330748][ T5737] veth0_macvtap: entered promiscuous mode [ 50.348597][ T124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.348618][ T124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.358802][ T5737] veth1_macvtap: entered promiscuous mode [ 50.397067][ T124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.397087][ T124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.461208][ T234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.461773][ T234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.655004][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.722027][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.796908][ T5816] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.856805][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.872061][ T234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.872074][ T234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.909591][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.909604][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.957264][ T5906] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 50.957285][ T5906] CPU: 2 UID: 0 PID: 5906 Comm: syz.1.5 Not tainted syzkaller #0 PREEMPT(full) [ 50.957309][ T5906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.957321][ T5906] Call Trace: [ 50.957327][ T5906] [ 50.957335][ T5906] dump_stack_lvl+0x100/0x190 [ 50.957367][ T5906] sysfs_warn_dup.cold+0x1c/0x28 [ 50.957408][ T5906] sysfs_create_dir_ns+0x24b/0x2b0 [ 50.957433][ T5906] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 50.957454][ T5906] ? find_held_lock+0x2b/0x80 [ 50.957476][ T5906] ? kobject_add_internal+0x25f/0x930 [ 50.957504][ T5906] ? kobject_add_internal+0x25f/0x930 [ 50.957536][ T5906] ? class_dir_child_ns_type+0xd/0x60 [ 50.957559][ T5906] kobject_add_internal+0x2c8/0x930 [ 50.957592][ T5906] kobject_add+0x16a/0x1e0 [ 50.957621][ T5906] ? __pfx_kobject_add+0x10/0x10 [ 50.957650][ T5906] ? get_device_parent+0x1b3/0x4c0 [ 50.957680][ T5906] ? kobject_put+0xb9/0x640 [ 50.957712][ T5906] device_add+0x294/0x1970 [ 50.957730][ T5906] ? lockdep_init_map_type+0x5c/0x250 [ 50.957760][ T5906] ? __pfx_device_add+0x10/0x10 [ 50.957779][ T5906] ? lockdep_init_map_type+0x5c/0x250 [ 50.957841][ T5906] ? __init_waitqueue_head+0xca/0x150 [ 50.957867][ T5906] tty_register_device_attr+0x388/0x7f0 [ 50.957897][ T5906] ? lockdep_init_map_type+0x5c/0x250 [ 50.957926][ T5906] ? __pfx_tty_register_device_attr+0x10/0x10 [ 50.957962][ T5906] ? tty_port_init+0x156/0x1c0 [ 50.957983][ T5906] gsm_activate_mux+0x155/0x2a0 [ 50.958013][ T5906] gsmld_ioctl+0xbbc/0x15c0 [ 50.958040][ T5906] ? __pfx_gsmld_ioctl+0x10/0x10 [ 50.958079][ T5906] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.958113][ T5906] ? __pfx_gsmld_ioctl+0x10/0x10 [ 50.958132][ T5906] tty_compat_ioctl+0x396/0x420 [ 50.958160][ T5906] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 50.958189][ T5906] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 50.958214][ T5906] __do_fast_syscall_32+0x13a/0x8b0 [ 50.958241][ T5906] do_fast_syscall_32+0x32/0x70 [ 50.958264][ T5906] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 50.958289][ T5906] RIP: 0023:0xf7fd2fec [ 50.958311][ T5906] Code: Unable to access opcode bytes at 0xf7fd2fc2. [ 50.958319][ T5906] RSP: 002b:00000000f547550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 50.958339][ T5906] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000404c4701 [ 50.958352][ T5906] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.958365][ T5906] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 50.958384][ T5906] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 50.958395][ T5906] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.958420][ T5906] [ 50.958441][ T5906] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 50.966887][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.966924][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.051376][ T5906] faux_driver vgem: [drm] Unknown color mode 55359; guessing buffer size. [ 51.080350][ T5906] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5'. [ 51.647176][ T5739] Bluetooth: hci0: command tx timeout [ 51.647208][ T5739] Bluetooth: hci3: command tx timeout [ 51.647226][ T5739] Bluetooth: hci2: command tx timeout [ 51.647244][ T5739] Bluetooth: hci1: command tx timeout [ 53.146597][ T62] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 53.361296][ T62] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 53.364445][ T62] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 53.364473][ T62] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 53.364491][ T62] usb 6-1: config 0 interface 0 has no altsetting 0 [ 53.371673][ T62] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 53.371695][ T62] usb 6-1: Product: syz [ 53.371706][ T62] usb 6-1: Manufacturer: syz [ 53.371717][ T62] usb 6-1: SerialNumber: syz [ 53.394976][ T62] usb 6-1: config 0 descriptor?? [ 53.399282][ T5935] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 53.411155][ T62] usb 6-1: selecting invalid altsetting 0 [ 53.458029][ T1278] nvmet: connect request for invalid subsystem testsubsys! [ 53.459189][ T5939] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 53.510539][ T5942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 53.567202][ T5905] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 53.567226][ T5905] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 53.567768][ T38] wlan1: authenticated [ 53.570527][ T5942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 53.576951][ T38] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 53.614373][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.614587][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.614788][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.614961][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.615132][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.615298][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.616266][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.616450][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.616610][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.616765][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.616928][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.617095][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.617267][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.617429][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.617585][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.617739][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.617968][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.618141][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.618641][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.618817][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.618980][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.619156][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.619318][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.619477][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.619645][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.619804][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.620032][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.620332][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.620532][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.620698][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.620860][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.621019][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.621188][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.621346][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.621504][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.621669][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.621850][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.622011][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.622182][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.622342][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.622501][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.622667][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.622830][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.622998][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.623161][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.623323][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.623489][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.623648][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.623808][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.623972][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.624135][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.624293][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.624458][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.624617][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.624804][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.624967][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.625132][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.625302][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.625462][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.625691][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.625880][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.626042][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.626218][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.626485][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.626653][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.626832][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.626994][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.627155][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.627326][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.627488][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.627651][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.627829][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.627993][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.628163][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.628334][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.628355][ T38] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 53.628498][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.628666][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.628810][ T5942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 53.628891][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.629057][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.629225][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.629399][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.629560][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.629641][ T38] wlan1: associated [ 53.629726][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.629950][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.630191][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.630488][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.630769][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.630992][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.631155][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.631319][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.631487][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.631648][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.631814][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.631980][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.632142][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.632340][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.632507][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.632673][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.632842][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.633009][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.633177][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.633344][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.633510][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.633674][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.633865][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.634027][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.634188][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.634354][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.634520][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.634824][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.635050][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.635272][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.635455][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.635861][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.636025][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.636192][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.636354][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.636518][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.636683][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.636849][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.637014][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.637174][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.637337][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.637502][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.637661][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.637843][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.638012][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.638170][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.638330][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.638496][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.638657][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.638826][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.638986][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.639145][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.639310][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.639469][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.639628][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.639792][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.640015][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.640214][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.640383][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.640545][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.640711][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.640877][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.641037][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.641205][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.641366][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.641527][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.641694][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.641878][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.642079][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.642249][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.642413][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.642573][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.642738][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.642903][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.643073][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.643233][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.643394][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.643562][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.643723][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.643885][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.644050][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.644212][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.644374][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.644540][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.644711][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.644896][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.645058][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.645219][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.645392][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.645675][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.645859][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.646028][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.646204][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.646368][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.646537][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.646697][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.646867][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.647027][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.647187][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.647354][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.647515][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.647703][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.647972][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.648133][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.648294][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.648461][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.648621][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.648789][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.648953][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.649112][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.649277][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.649454][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.649617][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.649802][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.650010][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.650189][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.650462][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.650659][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.650838][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.650997][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.651156][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.651323][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.651482][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.651640][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.651805][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.651968][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.652126][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.652290][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.652451][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.652617][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.652776][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.652938][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.653106][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.653268][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.653429][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.653596][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.653754][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.653938][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.654104][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.654263][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.654430][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.654592][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.654769][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.654940][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.655098][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.655256][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.655470][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.656043][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.656206][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.656374][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.656534][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.656700][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.656873][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.657033][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.657200][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.657364][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.657576][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.657745][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.657945][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.658105][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.658271][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.658431][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.658596][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.658755][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.658917][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.659082][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.659241][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.659400][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.659567][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.659758][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.659976][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.660274][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.660537][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.661364][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.661540][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.661702][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.661892][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.662054][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.662213][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.664062][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.664229][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.664389][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.664564][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.664741][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.664914][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.665085][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.665243][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.665409][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.665650][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.665859][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.666038][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.666236][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.666399][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.666566][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.666726][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.666885][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.667057][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.667217][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.667385][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.667547][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.667706][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.672479][ T5935] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 53.726343][ T5739] Bluetooth: hci3: command tx timeout [ 53.738966][ T5739] Bluetooth: hci0: command tx timeout [ 53.764170][ T5905] usb 6-1: USB disconnect, device number 2 [ 54.081704][ T5949] process 'syz.1.11' launched '/dev/fd/10' with NULL argv: empty string added [ 54.929252][ T5958] syz.0.15 (5958): attempted to duplicate a private mapping with mremap. This is not supported. [ 55.244902][ T5972] 0x000000000001-0x000000010001 : "" [ 55.255421][ T5972] ftl_cs: FTL header not found. [ 55.362717][ T5976] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19'. [ 55.364695][ T5976] Zero length message leads to an empty skb [ 55.365028][ T5976] netlink: 'syz.0.19': attribute type 39 has an invalid length. [ 55.496262][ T5739] Bluetooth: hci2: command tx timeout [ 55.496284][ T5739] Bluetooth: hci1: command tx timeout [ 55.501728][ T5977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.501751][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.660494][ T5977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.661760][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.806770][ T5739] Bluetooth: hci3: command tx timeout [ 55.806812][ T5096] Bluetooth: hci0: command tx timeout [ 55.945764][ T5987] syzkaller0: entered allmulticast mode [ 56.101031][ T5996] netlink: 'syz.1.27': attribute type 3 has an invalid length. [ 56.101052][ T5996] netlink: 'syz.1.27': attribute type 1 has an invalid length. [ 56.101062][ T5996] netlink: 216 bytes leftover after parsing attributes in process `syz.1.27'. [ 56.108741][ T5996] nbd: nbd1 already in use [ 56.266382][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 56.434534][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 56.438748][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 56.438804][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 56.438823][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.629466][ T5991] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 56.764024][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 57.313183][ T9] usb 5-1: USB disconnect, device number 2 [ 58.299941][ T5096] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 58.300609][ T5096] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200' [ 58.300623][ T5096] CPU: 3 UID: 0 PID: 5096 Comm: kworker/u34:1 Not tainted syzkaller #0 PREEMPT(full) [ 58.300637][ T5096] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.300644][ T5096] Workqueue: hci1 hci_rx_work [ 58.300667][ T5096] Call Trace: [ 58.300671][ T5096] [ 58.300676][ T5096] dump_stack_lvl+0x100/0x190 [ 58.300695][ T5096] sysfs_warn_dup.cold+0x1c/0x28 [ 58.300713][ T5096] sysfs_create_dir_ns+0x24b/0x2b0 [ 58.300730][ T5096] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 58.300745][ T5096] ? find_held_lock+0x2b/0x80 [ 58.300758][ T5096] ? kobject_add_internal+0x25f/0x930 [ 58.300775][ T5096] ? kobject_add_internal+0x25f/0x930 [ 58.300794][ T5096] ? do_raw_spin_unlock+0x145/0x1e0 [ 58.300807][ T5096] kobject_add_internal+0x2c8/0x930 [ 58.300828][ T5096] kobject_add+0x16a/0x1e0 [ 58.300844][ T5096] ? __pfx_kobject_add+0x10/0x10 [ 58.300859][ T5096] ? class_to_subsys+0x10f/0x150 [ 58.300876][ T5096] ? kobject_put+0xb9/0x640 [ 58.300890][ T5096] ? _raw_spin_unlock+0x28/0x50 [ 58.300905][ T5096] device_add+0x294/0x1970 [ 58.300917][ T5096] ? __pfx_dev_set_name+0x10/0x10 [ 58.300932][ T5096] ? __pfx_device_add+0x10/0x10 [ 58.300943][ T5096] ? find_held_lock+0x2b/0x80 [ 58.300955][ T5096] ? hci_find_link_key+0x1a4/0x3c0 [ 58.300967][ T5096] ? hci_find_link_key+0x1a4/0x3c0 [ 58.300983][ T5096] hci_conn_add_sysfs+0x1a3/0x260 [ 58.300997][ T5096] hci_conn_complete_evt+0x5bb/0x13f0 [ 58.301016][ T5096] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 58.301033][ T5096] ? __skb_clone+0x570/0x760 [ 58.301050][ T5096] ? skb_pull_data+0x15f/0x1e0 [ 58.301065][ T5096] hci_event_packet+0x8e9/0xcd0 [ 58.301082][ T5096] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 58.301099][ T5096] ? __pfx_hci_event_packet+0x10/0x10 [ 58.301119][ T5096] ? lockdep_hardirqs_on+0x7d/0x110 [ 58.301135][ T5096] hci_rx_work+0x451/0xfc0 [ 58.301154][ T5096] process_one_work+0xac7/0x1b10 [ 58.301175][ T5096] ? __pfx_process_one_work+0x10/0x10 [ 58.301190][ T5096] ? lock_acquire+0x1d1/0x380 [ 58.301210][ T5096] ? __pfx_hci_rx_work+0x10/0x10 [ 58.301228][ T5096] worker_thread+0x5ef/0xe50 [ 58.301246][ T5096] ? __pfx_worker_thread+0x10/0x10 [ 58.301261][ T5096] ? kthread+0x13a/0x450 [ 58.301272][ T5096] ? __pfx_worker_thread+0x10/0x10 [ 58.301286][ T5096] kthread+0x373/0x450 [ 58.301297][ T5096] ? __pfx_kthread+0x10/0x10 [ 58.301311][ T5096] ret_from_fork+0x730/0xd60 [ 58.301323][ T5096] ? __pfx_ret_from_fork+0x10/0x10 [ 58.301334][ T5096] ? __switch_to+0x800/0x10f0 [ 58.301349][ T5096] ? __pfx_kthread+0x10/0x10 [ 58.301362][ T5096] ret_from_fork_asm+0x1a/0x30 [ 58.301381][ T5096] [ 58.301392][ T5096] kobject: kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 58.301410][ T5096] Bluetooth: hci1: failed to register connection device [ 58.644899][ T6030] comedi comedi1: dt2815: I/O base address or length out of range [ 60.375616][ T5739] Bluetooth: hci1: command tx timeout [ 61.155667][ T50] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 61.326430][ T50] usb 6-1: Using ep0 maxpacket: 8 [ 61.326943][ T50] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 61.327864][ T50] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 61.327877][ T50] usb 6-1: config 0 has no interface number 0 [ 61.327893][ T50] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 61.327905][ T50] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 61.327917][ T50] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 61.327929][ T50] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 61.327947][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.330744][ T50] usb 6-1: config 0 descriptor?? [ 61.351015][ T50] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 61.890289][ T6053] syz.2.39 uses obsolete (PF_INET,SOCK_PACKET) [ 61.999127][ T9] usb 6-1: USB disconnect, device number 3 [ 62.023966][ T9] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 62.114542][ T43] audit: type=1326 audit(1790541312.617:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6059 comm="syz.3.42" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x0 [ 62.446015][ T5739] Bluetooth: hci1: command tx timeout [ 62.449157][ T6068] 9p: Bad value for 'rfdno' [ 62.845694][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 62.878265][ T50] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 62.971528][ T6077] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 62.971664][ T6077] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 63.000513][ T6077] fuse: Unknown parameter 'v' [ 63.005898][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 63.006442][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 63.007260][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.007272][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 63.007289][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.008730][ T9] usb 6-1: config 0 descriptor?? [ 63.036196][ T50] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 63.038589][ T50] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 63.038603][ T50] usb 5-1: config 0 has no interface number 0 [ 63.038620][ T50] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 63.040258][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.040270][ T50] usb 5-1: Product: syz [ 63.040277][ T50] usb 5-1: Manufacturer: syz [ 63.040284][ T50] usb 5-1: SerialNumber: syz [ 63.042493][ T50] usb 5-1: config 0 descriptor?? [ 63.051623][ T6080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.49'. [ 63.078577][ T50] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 63.222584][ T50] usb 6-1: USB disconnect, device number 4 [ 63.996049][ T6093] Bluetooth: MGMT ver 1.23 [ 64.196399][ T6102] null_blk: nullb1: using native zone append [ 64.236379][ T6102] null_blk: disk nullb1 created [ 64.294031][ T6102] nvmet: adding nsid 1 to subsystem testsubsys [ 64.326675][ T1278] nvmet: connect request for invalid subsystem testsubsys! [ 64.327536][ T6102] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 64.514388][ T6115] fuse: Bad value for 'fd' [ 64.555716][ T5739] Bluetooth: hci1: command tx timeout [ 64.799074][ T6122] loop5: detected capacity change from 0 to 6 [ 64.816348][ T6122] Dev loop5: unable to read RDB block 6 [ 64.816456][ T6122] loop5: unable to read partition table [ 64.817078][ T6122] loop5: partition table beyond EOD, truncated [ 64.817214][ T6122] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 65.259503][ T5905] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 65.326866][ C1] usb 5-1: yurex_control_callback - control failed: -2 [ 65.336837][ T9] usb 5-1: USB disconnect, device number 3 [ 65.377597][ T9] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 65.420536][ T5905] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 65.454371][ T5905] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 65.454476][ T5905] usb 7-1: config 1 has no interface number 0 [ 65.454718][ T5905] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 65.454816][ T5905] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 65.454974][ T5905] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.502100][ T5905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.502200][ T5905] usb 7-1: Product: syz [ 65.502287][ T5905] usb 7-1: Manufacturer: syz [ 65.502376][ T5905] usb 7-1: SerialNumber: syz [ 65.547854][ T6124] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 65.681446][ T6143] Bluetooth: MGMT ver 1.23 [ 65.690163][ T6143] netlink: 20 bytes leftover after parsing attributes in process `syz.3.60'. [ 65.843369][ T6124] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 66.120876][ T6153] netlink: 48 bytes leftover after parsing attributes in process `syz.0.61'. [ 66.331555][ T1032] cfg80211: failed to load regulatory.db [ 66.630516][ T6124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.636220][ T6124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.692625][ T5905] sierra_net 7-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 66.845890][ T42] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 67.006881][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 67.009604][ T42] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 67.013732][ T42] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.013745][ T42] usb 6-1: config 0 has no interfaces? [ 67.019195][ T42] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 67.019233][ T42] usb 6-1: Product: syz [ 67.019412][ T42] usb 6-1: Manufacturer: syz [ 67.019421][ T42] usb 6-1: SerialNumber: syz [ 67.080160][ T42] usb 6-1: config 0 descriptor?? [ 67.130544][ T6124] random: crng reseeded on system resumption [ 67.223622][ T5905] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71 [ 67.223639][ T5905] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71 [ 67.223950][ T5905] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71 [ 67.223961][ T5905] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71 [ 67.237646][ T5905] usb 7-1: USB disconnect, device number 2 [ 67.240933][ T5905] sierra_net 7-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem [ 67.298543][ T5905] sierra_net 7-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 67.345419][ T35] usb 6-1: USB disconnect, device number 5 [ 67.849439][ T6195] binder: 6194:6195 ioctl c00c6211 0 returned -14 [ 67.990322][ T6198] netlink: zone id is out of range [ 67.990577][ T6198] netlink: zone id is out of range [ 67.990758][ T6198] netlink: zone id is out of range [ 67.994406][ T6198] netlink: zone id is out of range [ 67.996727][ T6198] netlink: zone id is out of range [ 67.997758][ T6198] netlink: zone id is out of range [ 67.997781][ T6198] netlink: zone id is out of range [ 67.999337][ T6198] netlink: zone id is out of range [ 67.999851][ T6198] netlink: zone id is out of range [ 68.001686][ T6198] netlink: zone id is out of range [ 68.062587][ T6198] capability: warning: `syz.2.64' uses 32-bit capabilities (legacy support in use) [ 68.509958][ T6210] SQUASHFS error: Failed to read block 0x0: -5 [ 70.860017][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.860060][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.279082][ T6196] syz.2.64 (6196): drop_caches: 1 [ 71.807545][ T6241] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 71.878288][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'. [ 72.041073][ T6247] jffs2: notice: (6247) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 72.830049][ T43] audit: type=1326 audit(1790541323.337:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.0.81" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 72.831713][ T43] audit: type=1326 audit(1790541323.337:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.0.81" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 72.832889][ T43] audit: type=1326 audit(1790541323.337:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.0.81" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 72.834078][ T43] audit: type=1326 audit(1790541323.337:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.0.81" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 72.835479][ T43] audit: type=1326 audit(1790541323.337:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.0.81" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 72.870877][ T43] audit: type=1326 audit(1790541323.377:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.0.81" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 72.874561][ T43] audit: type=1326 audit(1790541323.377:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.0.81" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 72.874605][ T43] audit: type=1326 audit(1790541323.377:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.0.81" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 72.901031][ T43] audit: type=1326 audit(1790541323.377:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.0.81" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 72.901082][ T43] audit: type=1326 audit(1790541323.407:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.0.81" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 73.026999][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'. [ 73.625647][ T62] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 73.785805][ T62] usb 8-1: Using ep0 maxpacket: 32 [ 73.786292][ T62] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 73.787094][ T62] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.787113][ T62] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 73.792362][ T62] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.792376][ T62] usb 8-1: Product: syz [ 73.792384][ T62] usb 8-1: Manufacturer: syz [ 73.792391][ T62] usb 8-1: SerialNumber: syz [ 73.794507][ T62] usb 8-1: config 0 descriptor?? [ 73.810587][ T6281] No buffer was provided with the request [ 74.288441][ T6274] kvm: apic: phys broadcast and lowest prio [ 74.860898][ T6274] e1000e 0000:00:02.0 eth1: removed PHC [ 75.008845][ T6274] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 75.746177][ T5905] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 76.127132][ T5739] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 76.127218][ T5739] Bluetooth: hci2: Injecting HCI hardware error event [ 76.128109][ T5739] Bluetooth: hci2: hardware error 0x00 [ 76.945826][ T9] usb 8-1: USB disconnect, device number 2 [ 78.288106][ T5739] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 79.412912][ T6377] net_ratelimit: 9 callbacks suppressed [ 79.412932][ T6377] Set syz0 is full, maxelem 0 reached [ 80.656325][ T6383] bridge_slave_0: left allmulticast mode [ 80.656343][ T6383] bridge_slave_0: left promiscuous mode [ 80.658797][ T6383] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.678720][ T6383] bridge_slave_1: left allmulticast mode [ 80.678736][ T6383] bridge_slave_1: left promiscuous mode [ 80.678829][ T6383] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.711792][ T6383] bond0: (slave bond_slave_0): Releasing backup interface [ 80.773475][ T6383] bond0: (slave bond_slave_1): Releasing backup interface [ 80.898160][ T6383] team0: Port device team_slave_0 removed [ 80.915208][ T6383] team0: Port device team_slave_1 removed [ 80.933877][ T6383] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 81.814011][ T6398] netlink: 'syz.0.104': attribute type 12 has an invalid length. [ 82.193025][ T6405] ªªªªªª: renamed from vlan0 (while UP) [ 82.623694][ T6405] netlink: 16 bytes leftover after parsing attributes in process `syz.1.106'. [ 82.623717][ T6405] netlink: 16 bytes leftover after parsing attributes in process `syz.1.106'. [ 82.623727][ T6405] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22) [ 82.636106][ T62] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 82.803469][ T62] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 82.804509][ T62] usb 5-1: Dual-Role OTG device on HNP port [ 82.809102][ T62] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.856982][ T6421] jffs2: notice: (6421) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 82.950006][ T62] gspca_main: spca501-2.14.0 probing 0000:0000 [ 82.950287][ T62] gspca_spca501: reg write: error -32 [ 82.950300][ T62] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 82.950332][ T62] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 83.088693][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.110'. [ 84.287370][ T6447] ======================================================= [ 84.287370][ T6447] WARNING: The mand mount option has been deprecated and [ 84.287370][ T6447] and is ignored by this kernel. Remove the mand [ 84.287370][ T6447] option from the mount to silence this warning. [ 84.287370][ T6447] ======================================================= [ 84.297586][ T6447] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 84.362045][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'. [ 84.410149][ T6447] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 84.410228][ T6447] overlayfs: failed to look up (tracing) for ino (-66) [ 84.902469][ T6454] xt_hl: Unknown TTL match mode: 255 [ 86.208311][ T6477] fuse: Unknown parameter '0x0000000000000006' [ 86.475700][ T3268] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 86.739091][ T3268] usb 8-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 86.743905][ T3268] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 86.744388][ T3268] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 86.753932][ T3268] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 86.753971][ T3268] usb 8-1: Product: syz [ 86.753979][ T3268] usb 8-1: Manufacturer: syz [ 86.850247][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.123'. [ 86.897753][ T3268] iuu_phoenix 8-1:1.0: iuu_phoenix converter detected [ 86.931443][ T3268] usb 8-1: iuu_phoenix converter now attached to ttyUSB0 [ 87.101518][ T6477] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 87.101556][ T6477] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 87.555622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.725719][ T5905] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 88.876116][ T5905] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 88.876140][ T5905] usb 7-1: too many configurations: 248, using maximum allowed: 8 [ 88.876923][ T5905] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 88.876936][ T5905] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.876945][ T5905] usb 7-1: config 0 has no interfaces? [ 88.878552][ T5905] usb 7-1: config index 1 descriptor too short (expected 28277, got 36) [ 88.878565][ T5905] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.878574][ T5905] usb 7-1: config 0 has no interfaces? [ 88.879318][ T5905] usb 7-1: config index 2 descriptor too short (expected 28277, got 36) [ 88.879329][ T5905] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.879338][ T5905] usb 7-1: config 0 has no interfaces? [ 88.880207][ T5905] usb 7-1: config index 3 descriptor too short (expected 28277, got 36) [ 88.880227][ T5905] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.880241][ T5905] usb 7-1: config 0 has no interfaces? [ 88.881155][ T5905] usb 7-1: config index 4 descriptor too short (expected 28277, got 36) [ 88.881172][ T5905] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.881186][ T5905] usb 7-1: config 0 has no interfaces? [ 88.882111][ T5905] usb 7-1: config index 5 descriptor too short (expected 28277, got 36) [ 88.882129][ T5905] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.882142][ T5905] usb 7-1: config 0 has no interfaces? [ 88.883065][ T5905] usb 7-1: config index 6 descriptor too short (expected 28277, got 36) [ 88.883083][ T5905] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.883096][ T5905] usb 7-1: config 0 has no interfaces? [ 88.883989][ T5905] usb 7-1: config index 7 descriptor too short (expected 28277, got 36) [ 88.884008][ T5905] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.884022][ T5905] usb 7-1: config 0 has no interfaces? [ 88.884045][ T5905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.886244][ T5905] usb 7-1: config 0 descriptor?? [ 88.966853][ T6484] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 89.043933][ T5905] usb 8-1: USB disconnect, device number 3 [ 89.057074][ T5905] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 89.057843][ T5905] iuu_phoenix 8-1:1.0: device disconnected [ 89.208501][ T42] usb 7-1: USB disconnect, device number 3 [ 89.310362][ T6493] syz.0.125 (6493): drop_caches: 1 [ 89.344394][ T6493] syz.0.125 (6493): drop_caches: 1 [ 90.173313][ T6514] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 91.539835][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'. [ 92.115795][ T50] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 92.261816][ T6551] jffs2: notice: (6551) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 92.265915][ T50] usb 8-1: Using ep0 maxpacket: 8 [ 92.266570][ T50] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 92.267375][ T50] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 92.267388][ T50] usb 8-1: config 0 has no interface number 0 [ 92.267405][ T50] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 92.267416][ T50] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 92.267427][ T50] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 92.267439][ T50] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 92.267458][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.269046][ T50] usb 8-1: config 0 descriptor?? [ 92.279402][ T50] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 92.982000][ T6558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.140'. [ 93.890175][ T43] kauditd_printk_skb: 347 callbacks suppressed [ 93.890190][ T43] audit: type=1800 audit(1790541344.397:360): pid=6564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.139" name="bus" dev="ramfs" ino=11220 res=0 errno=0 [ 93.893886][ T6575] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 94.213264][ T6582] ªªªªªª: renamed from vlan0 (while UP) [ 94.368066][ T6588] jffs2: notice: (6588) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 95.597486][ T9] usb 8-1: USB disconnect, device number 4 [ 95.599608][ T9] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 95.897799][ T6595] netlink: 20 bytes leftover after parsing attributes in process `syz.1.148'. [ 96.473355][ T6604] fuse: Unknown parameter '0x0000000000000006' [ 96.486200][ T6604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.487839][ T6604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.514589][ T6604] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.514603][ T6604] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.632291][ T6598] netlink: 16 bytes leftover after parsing attributes in process `syz.2.147'. [ 96.632313][ T6598] netlink: 16 bytes leftover after parsing attributes in process `syz.2.147'. [ 96.632323][ T6598] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22) [ 96.946528][ T6611] futex_wake_op: syz.1.151 tries to shift op by 144; fix this program [ 96.946693][ T6611] futex_wake_op: syz.1.151 tries to shift op by 144; fix this program [ 97.119168][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'. [ 97.122211][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'. [ 97.123115][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'. [ 97.125027][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'. [ 97.125357][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'. [ 97.320805][ T6616] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 98.812189][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'. [ 99.805138][ T43] audit: type=1326 audit(1790541350.307:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6637 comm="syz.3.168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 99.808496][ T43] audit: type=1326 audit(1790541350.307:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6637 comm="syz.3.168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 99.809060][ T6640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.809479][ T6640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.811424][ T43] audit: type=1326 audit(1790541350.317:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6637 comm="syz.3.168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 99.813922][ T43] audit: type=1326 audit(1790541350.317:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6637 comm="syz.3.168" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 99.813954][ T43] audit: type=1326 audit(1790541350.317:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6637 comm="syz.3.168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 99.813981][ T43] audit: type=1326 audit(1790541350.317:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6637 comm="syz.3.168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 99.814006][ T43] audit: type=1326 audit(1790541350.317:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6637 comm="syz.3.168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 99.814406][ T43] audit: type=1326 audit(1790541350.317:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6637 comm="syz.3.168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 99.814618][ T43] audit: type=1326 audit(1790541350.317:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6637 comm="syz.3.168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 99.817707][ T43] audit: type=1326 audit(1790541350.317:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6637 comm="syz.3.168" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 99.871019][ T6640] kvm: apic: phys broadcast and lowest prio [ 100.295643][ T35] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 100.417505][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 100.422624][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 100.447141][ T35] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 100.447238][ T35] usb 6-1: too many configurations: 248, using maximum allowed: 8 [ 100.449413][ T35] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 100.449476][ T35] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.449487][ T35] usb 6-1: config 0 has no interfaces? [ 100.450365][ T35] usb 6-1: config index 1 descriptor too short (expected 28277, got 36) [ 100.450424][ T35] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.450434][ T35] usb 6-1: config 0 has no interfaces? [ 100.452339][ T35] usb 6-1: config index 2 descriptor too short (expected 28277, got 36) [ 100.452384][ T35] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.452394][ T35] usb 6-1: config 0 has no interfaces? [ 100.453415][ T35] usb 6-1: config index 3 descriptor too short (expected 28277, got 36) [ 100.453427][ T35] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.453435][ T35] usb 6-1: config 0 has no interfaces? [ 100.454365][ T35] usb 6-1: config index 4 descriptor too short (expected 28277, got 36) [ 100.454377][ T35] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.454385][ T35] usb 6-1: config 0 has no interfaces? [ 100.455437][ T35] usb 6-1: config index 5 descriptor too short (expected 28277, got 36) [ 100.455449][ T35] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.455458][ T35] usb 6-1: config 0 has no interfaces? [ 100.456690][ T35] usb 6-1: config index 6 descriptor too short (expected 28277, got 36) [ 100.456707][ T35] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.456720][ T35] usb 6-1: config 0 has no interfaces? [ 100.458345][ T35] usb 6-1: config index 7 descriptor too short (expected 28277, got 36) [ 100.458363][ T35] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.458376][ T35] usb 6-1: config 0 has no interfaces? [ 100.458393][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.465009][ T35] usb 6-1: config 0 descriptor?? [ 100.708962][ T42] usb 6-1: USB disconnect, device number 6 [ 101.668864][ T110] IPVS: starting estimator thread 0... [ 101.776063][ T6671] IPVS: using max 42 ests per chain, 100800 per kthread [ 101.877192][ T6673] xt_hl: Unknown TTL match mode: 255 [ 102.144751][ T6687] __nla_validate_parse: 4 callbacks suppressed [ 102.144764][ T6687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.170'. [ 103.764985][ T6712] netlink: 72 bytes leftover after parsing attributes in process `syz.2.176'. [ 103.918152][ T6714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.918460][ T6714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.138189][ T6723] sctp: [Deprecated]: syz.3.179 (pid 6723) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.138189][ T6723] Use struct sctp_sack_info instead [ 105.271702][ T6741] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 105.554115][ T6734] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 105.845197][ T6752] ªªªªªª: renamed from vlan0 (while UP) [ 105.885995][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 105.890067][ T43] kauditd_printk_skb: 1232 callbacks suppressed [ 105.890083][ T43] audit: type=1326 audit(1790541356.397:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.2.185" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 105.890890][ T43] audit: type=1326 audit(1790541356.397:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.2.185" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 105.890928][ T43] audit: type=1326 audit(1790541356.397:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.2.185" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 105.891085][ T43] audit: type=1326 audit(1790541356.397:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.2.185" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 105.891443][ T43] audit: type=1326 audit(1790541356.397:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.2.185" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 105.892201][ T43] audit: type=1326 audit(1790541356.397:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.2.185" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 105.892567][ T43] audit: type=1326 audit(1790541356.397:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.2.185" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 105.892715][ T43] audit: type=1326 audit(1790541356.397:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.2.185" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 105.893560][ T43] audit: type=1326 audit(1790541356.397:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.2.185" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 105.900007][ T43] audit: type=1326 audit(1790541356.407:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.2.185" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 106.729034][ T6759] xt_hl: Unknown TTL match mode: 255 [ 106.788363][ T6763] syz_tun: entered allmulticast mode [ 106.880093][ T6752] netlink: 16 bytes leftover after parsing attributes in process `syz.3.186'. [ 106.880108][ T6752] netlink: 16 bytes leftover after parsing attributes in process `syz.3.186'. [ 106.880115][ T6752] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22) [ 107.324246][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 107.604420][ T6756] syz_tun: left allmulticast mode [ 108.122149][ T6781] netlink: 144 bytes leftover after parsing attributes in process `syz.0.193'. [ 108.630128][ T6785] hugetlbfs: Unknown parameter '' [ 108.683848][ T6789] netlink: 'syz.3.195': attribute type 3 has an invalid length. [ 108.683896][ T6789] netlink: 72 bytes leftover after parsing attributes in process `syz.3.195'. [ 110.413891][ T6810] lo speed is unknown, defaulting to 1000 [ 110.414006][ T6810] lo speed is unknown, defaulting to 1000 [ 110.425383][ T6810] lo speed is unknown, defaulting to 1000 [ 110.430685][ T6810] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 110.430722][ T6810] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 110.430895][ T6810] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 110.493285][ T6810] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 110.617343][ T6810] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 110.663785][ T6810] lo speed is unknown, defaulting to 1000 [ 110.673016][ T6810] lo speed is unknown, defaulting to 1000 [ 110.674839][ T6810] lo speed is unknown, defaulting to 1000 [ 110.681323][ T6810] lo speed is unknown, defaulting to 1000 [ 111.036924][ T43] kauditd_printk_skb: 877 callbacks suppressed [ 111.036937][ T43] audit: type=1800 audit(1790541361.547:2490): pid=6811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.198" name="bus" dev="ramfs" ino=14437 res=0 errno=0 [ 111.196060][ T6822] siw: device registration error -23 [ 111.233027][ T6819] xt_hl: Unknown TTL match mode: 255 [ 111.323425][ T43] audit: type=1326 audit(1790541361.827:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.1.203" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 111.323783][ T43] audit: type=1326 audit(1790541361.827:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.1.203" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 111.323948][ T43] audit: type=1326 audit(1790541361.827:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.1.203" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 111.324363][ T43] audit: type=1326 audit(1790541361.827:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.1.203" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 111.326658][ T43] audit: type=1326 audit(1790541361.827:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.1.203" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 111.326943][ T43] audit: type=1326 audit(1790541361.837:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.1.203" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 111.327370][ T43] audit: type=1326 audit(1790541361.837:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.1.203" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 111.330386][ T43] audit: type=1326 audit(1790541361.837:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.1.203" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 111.337079][ T43] audit: type=1326 audit(1790541361.837:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.1.203" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 112.197690][ T6833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.204'. [ 112.740827][ T6851] netlink: 20 bytes leftover after parsing attributes in process `syz.2.206'. [ 113.377653][ T6851] syz.2.206 (6851) used greatest stack depth: 19256 bytes left [ 113.449926][ T6857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.211'. [ 113.612535][ T6867] siw: device registration error -23 [ 114.978148][ T6874] netlink: 14 bytes leftover after parsing attributes in process `syz.0.224'. [ 115.867931][ T6893] kAFS: bad VL server IP address [ 116.059117][ T43] kauditd_printk_skb: 464 callbacks suppressed [ 116.059190][ T43] audit: type=1326 audit(1790541366.557:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.2.220" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 116.061604][ T43] audit: type=1326 audit(1790541366.567:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.2.220" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 116.062197][ T43] audit: type=1326 audit(1790541366.567:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.2.220" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 116.062624][ T43] audit: type=1326 audit(1790541366.567:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.2.220" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 116.089135][ T43] audit: type=1326 audit(1790541366.567:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.2.220" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 116.089615][ T43] audit: type=1326 audit(1790541366.597:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.2.220" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 116.108535][ T43] audit: type=1326 audit(1790541366.617:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.2.220" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 116.157548][ T43] audit: type=1326 audit(1790541366.657:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.2.220" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 116.157829][ T43] audit: type=1326 audit(1790541366.657:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.2.220" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 116.158001][ T43] audit: type=1326 audit(1790541366.657:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.2.220" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 117.117453][ T6929] siw: device registration error -23 [ 119.829570][ T6964] netlink: 76 bytes leftover after parsing attributes in process `syz.1.235'. [ 120.014984][ T6964] 9pnet_fd: p9_fd_create_tcp (6964): problem connecting socket to 127.0.0.1 [ 121.337779][ T43] kauditd_printk_skb: 265 callbacks suppressed [ 121.337792][ T43] audit: type=1326 audit(1790541370.844:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.3.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 121.338332][ T43] audit: type=1326 audit(1790541370.844:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.3.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 121.339011][ T43] audit: type=1326 audit(1790541370.844:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.3.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 121.339147][ T43] audit: type=1326 audit(1790541370.844:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.3.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 121.339290][ T43] audit: type=1326 audit(1790541370.844:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.3.241" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 121.339632][ T43] audit: type=1326 audit(1790541370.844:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.3.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 121.340062][ T43] audit: type=1326 audit(1790541370.844:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.3.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 121.340291][ T43] audit: type=1326 audit(1790541370.844:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.3.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 121.340465][ T43] audit: type=1326 audit(1790541370.844:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.3.241" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 121.340685][ T43] audit: type=1326 audit(1790541370.844:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.3.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 121.955941][ T6994] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 121.955959][ T6994] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 121.993867][ T5739] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 121.993883][ T5739] Bluetooth: unknown link type 96 [ 121.993906][ T5739] Bluetooth: hci3: connection err: -111 [ 121.994773][ T6994] vhci_hcd vhci_hcd.0: Device attached [ 122.205976][ T6989] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 122.221726][ T6989] pci 0000:00:02.0: BAR 0 [mem 0xfea80000-0xfea9ffff] [ 122.221877][ T6989] pci 0000:00:02.0: BAR 1 [mem 0xfeaa0000-0xfeabffff] [ 122.221974][ T6989] pci 0000:00:02.0: BAR 2 [io 0xc080-0xc09f] [ 122.222064][ T6989] pci 0000:00:02.0: BAR 3 [mem 0xfeaf0000-0xfeaf3fff] [ 122.222332][ T6989] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 122.223539][ T6989] pci 0000:00:02.0: enabling Extended Tags [ 122.235764][ T3268] usb 38-1: SetAddress Request (2) to port 0 [ 122.235799][ T3268] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 122.293904][ T6989] pci 0000:00:02.0: Adding to iommu group 2 [ 122.353666][ T6989] pci 0000:00:02.0: ROM [mem 0x80000000-0x8003ffff pref]: assigned [ 122.354516][ T6989] pci 0000:00:02.0: BAR 0 [mem 0x80040000-0x8005ffff]: assigned [ 122.356488][ T6989] pci 0000:00:02.0: BAR 1 [mem 0x80060000-0x8007ffff]: assigned [ 122.357684][ T6989] pci 0000:00:02.0: BAR 3 [mem 0x80080000-0x80083fff]: assigned [ 122.358841][ T6989] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 122.438661][ T7012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.251'. [ 122.591984][ T6989] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 122.619539][ T6999] vhci_hcd: connection reset by peer [ 122.630150][ T13] vhci_hcd vhci_hcd.0: stop threads [ 122.643472][ T13] vhci_hcd vhci_hcd.0: release socket [ 122.649105][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 122.676613][ T6989] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 122.770700][ T6989] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 122.770721][ T6989] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 122.770892][ T6989] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 123.201714][ T7019] siw: device registration error -23 [ 124.133852][ T5451] 8021q: adding VLAN 0 to HW filter on device eth1 [ 124.410438][ T7044] xt_hl: Unknown TTL match mode: 255 [ 124.610415][ T30] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 124.924676][ T7063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.262'. [ 125.053741][ T5739] Bluetooth: hci3: Malformed Event: 0x13 [ 125.732817][ T7079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.268'. [ 126.346095][ T43] kauditd_printk_skb: 581 callbacks suppressed [ 126.346109][ T43] audit: type=1326 audit(1790541375.844:3830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.2.267" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71e75ab code=0x7ffc0000 [ 126.346135][ T43] audit: type=1326 audit(1790541375.844:3831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.2.267" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71e75ab code=0x7ffc0000 [ 126.347552][ T7098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.277'. [ 126.382667][ T43] audit: type=1326 audit(1790541375.854:3832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.2.267" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71e75ab code=0x7ffc0000 [ 126.382702][ T43] audit: type=1326 audit(1790541375.854:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.2.267" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71e75ab code=0x7ffc0000 [ 126.382722][ T43] audit: type=1326 audit(1790541375.854:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.2.267" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71e75ab code=0x7ffc0000 [ 126.382742][ T43] audit: type=1326 audit(1790541375.854:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.2.267" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71e75ab code=0x7ffc0000 [ 126.382761][ T43] audit: type=1326 audit(1790541375.854:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.2.267" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71e75ab code=0x7ffc0000 [ 126.382781][ T43] audit: type=1326 audit(1790541375.864:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.2.267" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71e75ab code=0x7ffc0000 [ 126.382800][ T43] audit: type=1326 audit(1790541375.864:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.2.267" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71e75ab code=0x7ffc0000 [ 126.426225][ T43] audit: type=1326 audit(1790541375.864:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.2.267" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71e75ab code=0x7ffc0000 [ 126.985346][ T7107] siw: device registration error -23 [ 127.168430][ T124] rpcbind: server 127.0.0.1 not responding, timed out [ 127.328252][ T3268] usb 38-1: device descriptor read/8, error -110 [ 127.786425][ T3268] usb usb38-port1: attempt power cycle [ 128.243093][ T5739] Bluetooth: hci1: hcon ffff888024924000 sent 1 < count 47384 [ 128.268383][ T5739] Bluetooth: hci1: hcon ffff88802a318000 sent 1 < count 255 [ 128.446198][ T3268] usb usb38-port1: unable to enumerate USB device [ 128.647979][ T7152] netlink: 220 bytes leftover after parsing attributes in process `syz.1.297'. [ 128.689857][ T7153] netlink: 20 bytes leftover after parsing attributes in process `syz.0.293'. [ 130.166279][ T1032] libceph: mon0 (1)[c::]:6789 socket error on write [ 130.176617][ T42] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 130.446227][ T42] libceph: mon0 (1)[c::]:6789 socket error on write [ 130.822207][ T7201] netlink: 28 bytes leftover after parsing attributes in process `syz.0.311'. [ 130.931273][ T7184] ceph: No mds server is up or the cluster is laggy [ 130.973416][ T42] libceph: mon0 (1)[c::]:6789 socket error on write [ 131.620959][ T7206] netlink: 28 bytes leftover after parsing attributes in process `syz.1.312'. [ 131.731433][ T7213] netlink: 20 bytes leftover after parsing attributes in process `syz.3.313'. [ 132.147369][ T43] kauditd_printk_skb: 817 callbacks suppressed [ 132.147381][ T43] audit: type=1326 audit(1790541381.654:4657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7210 comm="syz.2.314" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 132.147407][ T43] audit: type=1326 audit(1790541381.654:4658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7210 comm="syz.2.314" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 132.147427][ T43] audit: type=1326 audit(1790541381.654:4659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7210 comm="syz.2.314" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 132.147613][ T43] audit: type=1326 audit(1790541381.654:4660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7210 comm="syz.2.314" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 132.147892][ T43] audit: type=1326 audit(1790541381.654:4661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7210 comm="syz.2.314" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 132.148320][ T43] audit: type=1326 audit(1790541381.654:4663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7210 comm="syz.2.314" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 132.148676][ T43] audit: type=1326 audit(1790541381.654:4664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7210 comm="syz.2.314" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 132.148698][ T43] audit: type=1326 audit(1790541381.654:4662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7210 comm="syz.2.314" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 132.152902][ T43] audit: type=1326 audit(1790541381.654:4665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7210 comm="syz.2.314" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 132.154488][ T43] audit: type=1326 audit(1790541381.654:4666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7210 comm="syz.2.314" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 132.290688][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.290737][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.185877][ T7249] netlink: 20 bytes leftover after parsing attributes in process `syz.2.323'. [ 134.690024][ T7252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.324'. [ 135.199074][ T7261] siw: device registration error -23 [ 136.293290][ T7288] netlink: 28 bytes leftover after parsing attributes in process `syz.3.330'. [ 137.277107][ T7312] netlink: 20 bytes leftover after parsing attributes in process `syz.3.335'. [ 138.436298][ T7320] siw: device registration error -23 [ 138.938032][ T43] kauditd_printk_skb: 1096 callbacks suppressed [ 138.938045][ T43] audit: type=1326 audit(1790541388.434:5763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.2.339" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 138.938070][ T43] audit: type=1326 audit(1790541388.434:5764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.2.339" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 138.938090][ T43] audit: type=1326 audit(1790541388.434:5765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.2.339" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 138.938250][ T43] audit: type=1326 audit(1790541388.434:5766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.2.339" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 138.942971][ T43] audit: type=1326 audit(1790541388.444:5767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.2.339" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 138.943686][ T43] audit: type=1326 audit(1790541388.444:5768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.2.339" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 138.943712][ T43] audit: type=1326 audit(1790541388.444:5769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.2.339" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 138.946046][ T43] audit: type=1326 audit(1790541388.454:5770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.2.339" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 138.955654][ T43] audit: type=1326 audit(1790541388.454:5771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.2.339" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 138.963974][ T43] audit: type=1326 audit(1790541388.464:5773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.2.339" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 139.178175][ T7338] netlink: 28 bytes leftover after parsing attributes in process `syz.3.341'. [ 139.857593][ T7348] netlink: 20 bytes leftover after parsing attributes in process `syz.1.345'. [ 140.396423][ T7353] netlink: 'syz.2.348': attribute type 3 has an invalid length. [ 144.240060][ T43] kauditd_printk_skb: 527 callbacks suppressed [ 144.240105][ T43] audit: type=1326 audit(1790541393.744:6300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7430 comm="syz.0.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 144.240542][ T43] audit: type=1326 audit(1790541393.744:6301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7430 comm="syz.0.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 144.240573][ T43] audit: type=1326 audit(1790541393.744:6302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7430 comm="syz.0.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 144.240711][ T43] audit: type=1326 audit(1790541393.744:6304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7430 comm="syz.0.373" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 144.240914][ T43] audit: type=1326 audit(1790541393.744:6303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7430 comm="syz.0.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 144.241045][ T43] audit: type=1326 audit(1790541393.744:6305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7430 comm="syz.0.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 144.241232][ T43] audit: type=1326 audit(1790541393.744:6306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7430 comm="syz.0.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 144.241379][ T43] audit: type=1326 audit(1790541393.744:6308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7430 comm="syz.0.373" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 144.241633][ T43] audit: type=1326 audit(1790541393.744:6307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7430 comm="syz.0.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 144.243425][ T43] audit: type=1326 audit(1790541393.744:6309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7430 comm="syz.0.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 145.050812][ T7443] syzkaller0: entered allmulticast mode [ 145.058637][ T9] usb 5-1: USB disconnect, device number 5 [ 146.164538][ T7472] netlink: 20 bytes leftover after parsing attributes in process `syz.1.382'. [ 146.584139][ T7480] random: crng reseeded on system resumption [ 148.905646][ T3268] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 149.055624][ T3268] usb 6-1: Using ep0 maxpacket: 8 [ 149.056613][ T3268] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 149.057489][ T3268] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.057503][ T3268] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 149.057515][ T3268] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.057526][ T3268] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.057545][ T3268] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.274621][ T3268] usb 6-1: GET_CAPABILITIES returned 0 [ 149.274645][ T3268] usbtmc 6-1:16.0: can't read capabilities [ 149.475896][ T3268] usb 6-1: USB disconnect, device number 7 [ 150.024085][ T7558] binder: 7557:7558 ioctl c00c6211 0 returned -14 [ 150.222534][ T7565] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 150.481222][ T43] kauditd_printk_skb: 937 callbacks suppressed [ 150.481240][ T43] audit: type=1326 audit(1790541399.984:7247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7567 comm="syz.0.407" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 150.482419][ T43] audit: type=1326 audit(1790541399.984:7248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7567 comm="syz.0.407" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 150.482458][ T43] audit: type=1326 audit(1790541399.984:7249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7567 comm="syz.0.407" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 150.484713][ T43] audit: type=1326 audit(1790541399.984:7250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7567 comm="syz.0.407" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 150.484941][ T43] audit: type=1326 audit(1790541399.984:7251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7567 comm="syz.0.407" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 150.485921][ T43] audit: type=1326 audit(1790541399.994:7252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7567 comm="syz.0.407" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 150.486054][ T43] audit: type=1326 audit(1790541399.994:7253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7567 comm="syz.0.407" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 150.488160][ T43] audit: type=1326 audit(1790541399.994:7254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7567 comm="syz.0.407" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 150.492002][ T43] audit: type=1326 audit(1790541399.994:7255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7567 comm="syz.0.407" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 150.507022][ T43] audit: type=1326 audit(1790541400.004:7256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7567 comm="syz.0.407" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 155.613342][ T43] kauditd_printk_skb: 2059 callbacks suppressed [ 155.613357][ T43] audit: type=1326 audit(1790541405.114:9316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.0.430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 155.613444][ T43] audit: type=1326 audit(1790541405.114:9317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.0.430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 155.613465][ T43] audit: type=1326 audit(1790541405.114:9318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.0.430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 155.613486][ T43] audit: type=1326 audit(1790541405.114:9319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.0.430" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 155.613628][ T43] audit: type=1326 audit(1790541405.114:9320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.0.430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 155.613839][ T43] audit: type=1326 audit(1790541405.114:9322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.0.430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 155.613887][ T43] audit: type=1326 audit(1790541405.114:9323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.0.430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 155.614200][ T43] audit: type=1326 audit(1790541405.114:9321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.0.430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 155.614277][ T43] audit: type=1326 audit(1790541405.114:9324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.0.430" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 155.614387][ T43] audit: type=1326 audit(1790541405.114:9325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.0.430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 157.584100][ T7700] netlink: 28 bytes leftover after parsing attributes in process `syz.1.437'. [ 159.205608][ T5601] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 160.616221][ T43] kauditd_printk_skb: 1412 callbacks suppressed [ 160.616234][ T43] audit: type=1326 audit(1790541410.124:10738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.3.446" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 160.616391][ T43] audit: type=1326 audit(1790541410.124:10739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.3.446" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 160.616900][ T43] audit: type=1326 audit(1790541410.124:10741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.3.446" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 160.616990][ T43] audit: type=1326 audit(1790541410.124:10740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.3.446" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 160.617244][ T43] audit: type=1326 audit(1790541410.124:10743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.3.446" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 160.617348][ T43] audit: type=1326 audit(1790541410.124:10742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.3.446" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 160.617570][ T43] audit: type=1326 audit(1790541410.124:10745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.3.446" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 160.617654][ T43] audit: type=1326 audit(1790541410.124:10744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.3.446" exe="/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 160.634261][ T43] audit: type=1326 audit(1790541410.134:10746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7730 comm="syz.1.445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 160.634294][ T43] audit: type=1326 audit(1790541410.134:10747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7730 comm="syz.1.445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fec code=0x7ffc0000 [ 160.837816][ T7749] netlink: 28 bytes leftover after parsing attributes in process `syz.2.448'. [ 164.049356][ T5170] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 164.399693][ T7801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.460'. [ 165.528236][ T7823] netlink: zone id is out of range [ 165.528853][ T7823] netlink: zone id is out of range [ 165.530039][ T7823] netlink: zone id is out of range [ 165.530709][ T7823] netlink: zone id is out of range [ 165.532015][ T7823] netlink: zone id is out of range [ 165.532465][ T7823] netlink: zone id is out of range [ 165.532559][ T7823] netlink: zone id is out of range [ 165.533403][ T7823] netlink: zone id is out of range [ 165.533754][ T7823] netlink: zone id is out of range [ 165.534544][ T7823] netlink: zone id is out of range [ 167.044795][ T43] kauditd_printk_skb: 1127 callbacks suppressed [ 167.044807][ T43] audit: type=1326 audit(1790541416.544:11875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.0.466" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 167.044991][ T43] audit: type=1326 audit(1790541416.544:11876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.0.466" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 167.087994][ T43] audit: type=1326 audit(1790541416.594:11877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.0.466" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 167.089204][ T43] audit: type=1326 audit(1790541416.594:11879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.0.466" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 167.091311][ T43] audit: type=1326 audit(1790541416.594:11878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.0.466" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 167.095323][ T43] audit: type=1326 audit(1790541416.594:11880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.0.466" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 167.096141][ T43] audit: type=1326 audit(1790541416.604:11881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.0.466" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 167.098176][ T43] audit: type=1326 audit(1790541416.604:11882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.0.466" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 167.101078][ T43] audit: type=1326 audit(1790541416.604:11883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.0.466" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 167.104444][ T43] audit: type=1326 audit(1790541416.604:11884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.0.466" exe="/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf7f24fec code=0x7ffc0000 [ 167.328432][ T7811] syz.1.465 (7811): drop_caches: 1 [ 168.508475][ T7848] libceph: resolve '1270.1' (ret=-3): failed [ 170.206857][ T5096] Bluetooth: hci0: command 0x0406 tx timeout [ 170.206909][ T5746] Bluetooth: hci1: command 0x0406 tx timeout [ 170.336800][ T7873] netlink: 20 bytes leftover after parsing attributes in process `syz.2.475'. [ 171.695885][ T7874] syz.0.478 (7874): drop_caches: 1 [ 173.822903][ T7946] net_ratelimit: 28 callbacks suppressed [ 173.822918][ T7946] netlink: zone id is out of range [ 173.823029][ T7946] netlink: zone id is out of range [ 173.823237][ T7946] netlink: zone id is out of range [ 173.823422][ T7946] netlink: zone id is out of range [ 173.823683][ T7946] netlink: zone id is out of range [ 173.823804][ T7946] netlink: zone id is out of range [ 173.823824][ T7946] netlink: zone id is out of range [ 173.824187][ T7946] netlink: zone id is out of range [ 173.824259][ T7946] netlink: zone id is out of range [ 173.824409][ T7946] netlink: zone id is out of range [ 173.929170][ T7942] syz.3.494 (7942): drop_caches: 1 [ 174.942198][ T7942] syz.3.494 (7942): drop_caches: 1 [ 175.305697][ T35] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 175.455676][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 175.456412][ T35] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 175.457351][ T35] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 175.457370][ T35] usb 7-1: config 0 has no interface number 0 [ 175.457399][ T35] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 175.457417][ T35] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 175.457436][ T35] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 175.457455][ T35] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 175.457485][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.460242][ T35] usb 7-1: config 0 descriptor?? [ 175.470519][ T35] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 176.034949][ T35] usb 7-1: USB disconnect, device number 6 [ 176.041348][ T35] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 176.827339][ T43] kauditd_printk_skb: 870 callbacks suppressed [ 176.827352][ T43] audit: type=1326 audit(1790541426.334:12755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.3.507" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 176.828402][ T43] audit: type=1326 audit(1790541426.334:12756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.3.507" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 176.828459][ T43] audit: type=1326 audit(1790541426.334:12757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.3.507" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 176.832410][ T43] audit: type=1326 audit(1790541426.334:12758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.3.507" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 176.838968][ T43] audit: type=1326 audit(1790541426.334:12759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.3.507" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 176.838999][ T43] audit: type=1326 audit(1790541426.334:12760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.3.507" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 176.839021][ T43] audit: type=1326 audit(1790541426.334:12761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.3.507" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 176.839052][ T43] audit: type=1326 audit(1790541426.334:12762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.3.507" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 176.839085][ T43] audit: type=1326 audit(1790541426.334:12763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.3.507" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 176.858362][ T43] audit: type=1326 audit(1790541426.354:12764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.3.507" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 177.815913][ T7997] libceph: resolve '1270.1' (ret=-3): failed [ 179.035958][ T8022] kAFS: bad VL server IP address [ 179.275647][ T5905] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 179.435645][ T5905] usb 8-1: Using ep0 maxpacket: 8 [ 179.436364][ T5905] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 179.437570][ T5905] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 179.437591][ T5905] usb 8-1: config 0 has no interface number 0 [ 179.437620][ T5905] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 179.437638][ T5905] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 179.437658][ T5905] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 179.437677][ T5905] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 179.437708][ T5905] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.441299][ T5905] usb 8-1: config 0 descriptor?? [ 179.451764][ T5905] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 179.895485][ T8042] netlink: 76 bytes leftover after parsing attributes in process `syz.2.519'. [ 180.057118][ T8042] 9pnet_fd: p9_fd_create_tcp (8042): problem connecting socket to 127.0.0.1 [ 181.796563][ T30] usb 8-1: USB disconnect, device number 6 [ 181.804924][ T30] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 185.265610][ T5170] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 185.745300][ T8114] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 186.153626][ T8131] netlink: 72 bytes leftover after parsing attributes in process `syz.0.537'. [ 186.163691][ T46] IPVS: starting estimator thread 0... [ 186.265709][ T8132] IPVS: using max 42 ests per chain, 100800 per kthread [ 187.951369][ T43] kauditd_printk_skb: 347 callbacks suppressed [ 187.951382][ T43] audit: type=1800 audit(1790541434.448:13112): pid=8166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.547" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 187.952267][ T8164] netlink: 76 bytes leftover after parsing attributes in process `syz.0.545'. [ 188.234569][ T8170] netlink: 72 bytes leftover after parsing attributes in process `syz.3.547'. [ 188.450437][ T234] IPVS: starting estimator thread 0... [ 188.545677][ T8172] IPVS: using max 43 ests per chain, 103200 per kthread [ 188.841793][ T8164] 9pnet_fd: p9_fd_create_tcp (8164): problem connecting socket to 127.0.0.1 [ 190.431538][ T110] IPVS: starting estimator thread 0... [ 190.434727][ T8235] netlink: 72 bytes leftover after parsing attributes in process `syz.1.558'. [ 190.525619][ T8236] IPVS: using max 28 ests per chain, 67200 per kthread [ 191.158199][ T8246] netlink: 76 bytes leftover after parsing attributes in process `syz.3.561'. [ 191.384177][ T43] audit: type=1326 audit(1790541437.888:13113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8251 comm="syz.2.565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 191.385466][ T43] audit: type=1326 audit(1790541437.888:13114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8251 comm="syz.2.565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 191.389616][ T43] audit: type=1326 audit(1790541437.898:13115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8251 comm="syz.2.565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 191.399614][ T5905] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 191.402372][ T43] audit: type=1326 audit(1790541437.898:13116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8251 comm="syz.2.565" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 191.416840][ T43] audit: type=1326 audit(1790541437.928:13117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8251 comm="syz.2.565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 191.417060][ T43] audit: type=1326 audit(1790541437.928:13118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8251 comm="syz.2.565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 191.417298][ T43] audit: type=1326 audit(1790541437.928:13119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8251 comm="syz.2.565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 191.417463][ T43] audit: type=1326 audit(1790541437.928:13120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8251 comm="syz.2.565" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 191.419864][ T43] audit: type=1326 audit(1790541437.928:13121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8251 comm="syz.2.565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 191.555605][ T5905] usb 5-1: Using ep0 maxpacket: 8 [ 191.556229][ T5905] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 191.557134][ T5905] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 191.557166][ T5905] usb 5-1: config 0 has no interface number 0 [ 191.557184][ T5905] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 191.557196][ T5905] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 191.557208][ T5905] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 191.557220][ T5905] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 191.557243][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.558642][ T5905] usb 5-1: config 0 descriptor?? [ 191.562238][ T5905] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 191.757487][ T8261] net_ratelimit: 9 callbacks suppressed [ 191.757526][ T8261] netlink: zone id is out of range [ 191.758378][ T8261] netlink: zone id is out of range [ 191.760237][ T8261] netlink: zone id is out of range [ 191.761670][ T8261] netlink: zone id is out of range [ 191.763723][ T8261] netlink: zone id is out of range [ 191.768380][ T8261] netlink: zone id is out of range [ 191.768731][ T8261] netlink: zone id is out of range [ 191.769810][ T8261] netlink: zone id is out of range [ 191.770383][ T8261] netlink: zone id is out of range [ 191.771318][ T8261] netlink: zone id is out of range [ 191.909891][ C2] ================================================================== [ 191.909903][ C2] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0 [ 191.909923][ C2] Read of size 1 at addr ffff88804cfff4e8 by task syz.0.560/8237 [ 191.909931][ C2] [ 191.909938][ C2] CPU: 2 UID: 0 PID: 8237 Comm: syz.0.560 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.909954][ C2] Tainted: [L]=SOFTLOCKUP [ 191.909958][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.909965][ C2] Call Trace: [ 191.909969][ C2] [ 191.909974][ C2] dump_stack_lvl+0x100/0x190 [ 191.909990][ C2] print_report+0x13d/0x4b0 [ 191.910007][ C2] ? __virt_addr_valid+0x239/0x430 [ 191.910024][ C2] ? find_endpoint+0x2a3/0x2c0 [ 191.910036][ C2] kasan_report+0xdf/0x1c0 [ 191.910053][ C2] ? find_endpoint+0x2a3/0x2c0 [ 191.910067][ C2] find_endpoint+0x2a3/0x2c0 [ 191.910081][ C2] dummy_timer+0x500/0x3700 [ 191.910097][ C2] ? do_raw_spin_lock+0x128/0x260 [ 191.910109][ C2] ? find_held_lock+0x2b/0x80 [ 191.910122][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 191.910139][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 191.910156][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 191.910170][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 191.910187][ C2] ? __pfx_debug_object_deactivate+0x10/0x10 [ 191.910205][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 191.910219][ C2] ? rcu_is_watching+0x13/0xc0 [ 191.910247][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 191.910260][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 191.910274][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 191.910289][ C2] hrtimer_run_softirq+0x1ca/0x360 [ 191.910302][ C2] handle_softirqs+0x1e6/0x9d0 [ 191.910324][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 191.910343][ C2] ? _raw_spin_unlock+0x28/0x50 [ 191.910353][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 191.910368][ C2] __irq_exit_rcu+0x16a/0x210 [ 191.910383][ C2] irq_exit_rcu+0x9/0x30 [ 191.910398][ C2] sysvec_apic_timer_interrupt+0x56/0xc0 [ 191.910411][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 191.910423][ C2] RIP: 0023:0xf702f153 [ 191.910432][ C2] Code: 89 54 24 04 80 bb 90 d2 02 00 00 89 44 24 08 89 54 24 0c 74 3c 81 e1 ff 0f 00 00 83 f1 3d 8d 14 c9 89 d3 c1 eb 04 89 d8 31 d0 <69> c0 2d eb d4 27 89 c2 c1 ea 0f 31 d0 31 d2 25 ff 0f 00 00 89 d3 [ 191.910443][ C2] RSP: 002b:00000000fff4fac0 EFLAGS: 00000206 [ 191.910452][ C2] RAX: 00000000000056a3 RBX: 0000000000000539 RCX: 000000000000094a [ 191.910459][ C2] RDX: 000000000000539a RSI: 0000000000000e29 RDI: 00000000f73e5080 [ 191.910466][ C2] RBP: 00000000f7f15610 R08: 0000000000000000 R09: 0000000000000000 [ 191.910473][ C2] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 191.910479][ C2] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 191.910489][ C2] [ 191.910493][ C2] [ 191.910495][ C2] Allocated by task 12: [ 191.910500][ C2] kasan_save_stack+0x30/0x50 [ 191.910514][ C2] kasan_save_track+0x14/0x30 [ 191.910526][ C2] __kasan_kmalloc+0xaa/0xb0 [ 191.910538][ C2] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 191.910549][ C2] batadv_forw_packet_alloc+0x3a9/0x4d0 [ 191.910561][ C2] batadv_iv_ogm_aggregate_new+0x11e/0x4c0 [ 191.910572][ C2] batadv_iv_ogm_schedule_buff+0x110a/0x15d0 [ 191.910583][ C2] batadv_iv_send_outstanding_bat_ogm_packet+0x517/0x7d0 [ 191.910595][ C2] process_one_work+0xac7/0x1b10 [ 191.910608][ C2] worker_thread+0x5ef/0xe50 [ 191.910619][ C2] kthread+0x373/0x450 [ 191.910630][ C2] ret_from_fork+0x730/0xd60 [ 191.910638][ C2] ret_from_fork_asm+0x1a/0x30 [ 191.910648][ C2] [ 191.910650][ C2] Freed by task 12: [ 191.910655][ C2] kasan_save_stack+0x30/0x50 [ 191.910667][ C2] kasan_save_track+0x14/0x30 [ 191.910679][ C2] kasan_save_free_info+0x3b/0x70 [ 191.910689][ C2] __kasan_slab_free+0x5f/0x80 [ 191.910702][ C2] kfree+0x22b/0x6d0 [ 191.910711][ C2] batadv_iv_send_outstanding_bat_ogm_packet+0x22f/0x7d0 [ 191.910726][ C2] process_one_work+0xac7/0x1b10 [ 191.910738][ C2] worker_thread+0x5ef/0xe50 [ 191.910750][ C2] kthread+0x373/0x450 [ 191.910760][ C2] ret_from_fork+0x730/0xd60 [ 191.910768][ C2] ret_from_fork_asm+0x1a/0x30 [ 191.910777][ C2] [ 191.910779][ C2] Last potentially related work creation: [ 191.910783][ C2] kasan_save_stack+0x30/0x50 [ 191.910795][ C2] kasan_record_aux_stack+0xa7/0xc0 [ 191.910805][ C2] insert_work+0x36/0x230 [ 191.910816][ C2] __queue_work+0x481/0x1370 [ 191.910827][ C2] call_timer_fn+0x198/0x5f0 [ 191.910840][ C2] __run_timers+0x570/0xb00 [ 191.910854][ C2] run_timer_base+0x114/0x190 [ 191.910867][ C2] run_timer_softirq+0x1a/0x50 [ 191.910881][ C2] handle_softirqs+0x1e6/0x9d0 [ 191.910895][ C2] __irq_exit_rcu+0x16a/0x210 [ 191.910909][ C2] irq_exit_rcu+0x9/0x30 [ 191.910923][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 191.910934][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 191.910944][ C2] [ 191.910947][ C2] The buggy address belongs to the object at ffff88804cfff400 [ 191.910947][ C2] which belongs to the cache kmalloc-512 of size 512 [ 191.910955][ C2] The buggy address is located 232 bytes inside of [ 191.910955][ C2] freed 512-byte region [ffff88804cfff400, ffff88804cfff600) [ 191.910966][ C2] [ 191.910968][ C2] The buggy address belongs to the physical page: [ 191.910973][ C2] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804cffe800 pfn:0x4cffc [ 191.910983][ C2] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 191.910991][ C2] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 191.911002][ C2] page_type: f5(slab) [ 191.911011][ C2] raw: 04fff00000000240 ffff88801c042c80 ffffea00014da010 ffffea0001c12e10 [ 191.911021][ C2] raw: ffff88804cffe800 0000000000100005 00000000f5000000 0000000000000000 [ 191.911030][ C2] head: 04fff00000000240 ffff88801c042c80 ffffea00014da010 ffffea0001c12e10 [ 191.911039][ C2] head: ffff88804cffe800 0000000000100005 00000000f5000000 0000000000000000 [ 191.911048][ C2] head: 04fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 191.911057][ C2] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 191.911063][ C2] page dumped because: kasan: bad access detected [ 191.911068][ C2] page_owner tracks the page as allocated [ 191.911072][ C2] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6407, tgid 6401 (syz.3.105), ts 82355116395 [ 191.911089][ C2] post_alloc_hook+0xfd/0x120 [ 191.911098][ C2] get_page_from_freelist+0x110d/0x35d0 [ 191.911110][ C2] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 191.911121][ C2] new_slab+0xa9/0x6e0 [ 191.911130][ C2] refill_objects+0xe3/0x410 [ 191.911140][ C2] __pcs_replace_empty_main+0x35e/0x650 [ 191.911150][ C2] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 191.911160][ C2] snd_mixer_oss_build_test+0x7a/0x380 [ 191.911176][ C2] snd_mixer_oss_build_test_all+0x33c/0x6e0 [ 191.911191][ C2] snd_mixer_oss_build_input+0x139/0xd50 [ 191.911200][ C2] snd_mixer_oss_notify_handler+0x48d/0x990 [ 191.911210][ C2] snd_card_register+0x2af/0x760 [ 191.911222][ C2] f_midi2_bind+0x1198/0x2770 [ 191.911231][ C2] usb_add_function+0x219/0x890 [ 191.911243][ C2] configfs_composite_bind+0xd83/0x1960 [ 191.911254][ C2] gadget_bind_driver+0x28c/0xbf0 [ 191.911269][ C2] page last free pid 5148 tgid 5148 ts 76119100719 stack trace: [ 191.911275][ C2] __free_frozen_pages+0x79f/0x10f0 [ 191.911290][ C2] qlist_free_all+0x47/0xf0 [ 191.911301][ C2] kasan_quarantine_reduce+0x1a0/0x1f0 [ 191.911313][ C2] __kasan_slab_alloc+0x69/0x90 [ 191.911327][ C2] __kmalloc_noprof+0x2cc/0x840 [ 191.911338][ C2] tomoyo_realpath_from_path+0xb6/0x690 [ 191.911350][ C2] tomoyo_check_open_permission+0x2af/0x3c0 [ 191.911360][ C2] tomoyo_file_open+0x6b/0x90 [ 191.911373][ C2] security_file_open+0xb5/0x1e0 [ 191.911384][ C2] do_dentry_open+0x588/0x14d0 [ 191.911396][ C2] vfs_open+0x82/0x3f0 [ 191.911410][ C2] path_openat+0x19fa/0x2440 [ 191.911423][ C2] do_file_open+0x20e/0x430 [ 191.911435][ C2] do_sys_openat2+0x10f/0x1e0 [ 191.911449][ C2] __x64_sys_openat+0x12d/0x210 [ 191.911458][ C2] do_syscall_64+0x121/0x770 [ 191.911469][ C2] [ 191.911471][ C2] Memory state around the buggy address: [ 191.911476][ C2] ffff88804cfff380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 191.911483][ C2] ffff88804cfff400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 191.911490][ C2] >ffff88804cfff480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 191.911495][ C2] ^ [ 191.911505][ C2] ffff88804cfff500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 191.911514][ C2] ffff88804cfff580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 191.911520][ C2] ================================================================== [ 191.911525][ C2] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 192.240332][ C2] CPU: 2 UID: 0 PID: 8237 Comm: syz.0.560 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.244465][ C2] Tainted: [L]=SOFTLOCKUP [ 192.246091][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.249809][ C2] Call Trace: [ 192.251196][ C2] [ 192.252299][ C2] dump_stack_lvl+0x100/0x190 [ 192.254056][ C2] vpanic+0x553/0x970 [ 192.255564][ C2] ? __pfx_vpanic+0x10/0x10 [ 192.257261][ C2] ? __pfx_vprintk_emit+0x10/0x10 [ 192.259126][ C2] ? find_endpoint+0x2a3/0x2c0 [ 192.260939][ C2] panic+0xd1/0xe0 [ 192.262343][ C2] ? __pfx_panic+0x10/0x10 [ 192.264002][ C2] ? end_report.part.0+0x23/0x90 [ 192.265867][ C2] ? rcu_is_watching+0x13/0xc0 [ 192.267642][ C2] ? end_report.part.0+0x23/0x90 [ 192.269533][ C2] check_panic_on_warn.cold+0x19/0x34 [ 192.271534][ C2] end_report.part.0+0x3a/0x90 [ 192.273318][ C2] kasan_report.cold+0xe/0x18 [ 192.275084][ C2] ? find_endpoint+0x2a3/0x2c0 [ 192.276854][ C2] find_endpoint+0x2a3/0x2c0 [ 192.278584][ C2] dummy_timer+0x500/0x3700 [ 192.280406][ C2] ? do_raw_spin_lock+0x128/0x260 [ 192.282526][ C2] ? find_held_lock+0x2b/0x80 [ 192.284302][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 192.286403][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 192.288467][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 192.290789][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 192.293111][ C2] ? __pfx_debug_object_deactivate+0x10/0x10 [ 192.295635][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 192.297701][ C2] ? rcu_is_watching+0x13/0xc0 [ 192.299566][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 192.301711][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 192.303535][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 192.305476][ C2] hrtimer_run_softirq+0x1ca/0x360 [ 192.307356][ C2] handle_softirqs+0x1e6/0x9d0 [ 192.309155][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 192.311145][ C2] ? _raw_spin_unlock+0x28/0x50 [ 192.312944][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 192.315040][ C2] __irq_exit_rcu+0x16a/0x210 [ 192.316792][ C2] irq_exit_rcu+0x9/0x30 [ 192.318386][ C2] sysvec_apic_timer_interrupt+0x56/0xc0 [ 192.320492][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 192.322718][ C2] RIP: 0023:0xf702f153 [ 192.324236][ C2] Code: 89 54 24 04 80 bb 90 d2 02 00 00 89 44 24 08 89 54 24 0c 74 3c 81 e1 ff 0f 00 00 83 f1 3d 8d 14 c9 89 d3 c1 eb 04 89 d8 31 d0 <69> c0 2d eb d4 27 89 c2 c1 ea 0f 31 d0 31 d2 25 ff 0f 00 00 89 d3 [ 192.331530][ C2] RSP: 002b:00000000fff4fac0 EFLAGS: 00000206 [ 192.333862][ C2] RAX: 00000000000056a3 RBX: 0000000000000539 RCX: 000000000000094a [ 192.336755][ C2] RDX: 000000000000539a RSI: 0000000000000e29 RDI: 00000000f73e5080 [ 192.339678][ C2] RBP: 00000000f7f15610 R08: 0000000000000000 R09: 0000000000000000 [ 192.342568][ C2] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 192.345469][ C2] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.348376][ C2] [ 192.350170][ C2] Kernel Offset: disabled [ 192.351773][ C2] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:37:22 Registers: info registers vcpu 0 CPU#0 RAX=00000002000008fd RBX=ffff88801c0f3f04 RCX=0000000000000830 RDX=0000000000000002 RSI=00000000000000fd RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000c19f7d8 R8 =0000000000000000 R9 =fffffbfff228b10b R10=ffffffff9145885f R11=0000000000000000 R12=0000000000000004 R13=1ffff92001833eff R14=ffffc9000c19f818 R15=0000000000000010 RIP=ffffffff81b7ebda RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096955000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000336f6ff8 CR3=000000004c67b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000003 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000004 RSI=ffffffff8e391eab RDI=0000000000000001 RBP=ffff888013275c00 RSP=ffffc900290f7b00 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000000 R12=ffff88804d769e28 R13=00000000000000fd R14=ffff888013275c08 R15=0000000000000001 RIP=ffffffff820b90f0 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a55000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080001000 CR3=000000007472b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85afe035 RDI=ffffffff9bc624a0 RBP=ffffffff9bc62460 RSP=ffffc90003edf300 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=000000000000002e R14=000000000000000c R15=ffffc90003edf618 RIP=ffffffff85afe05f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096b55000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000033610ff8 CR3=000000004c90f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000614b37 RBX=ffff88801cf08000 RCX=ffffffff8bd07215 RDX=0000000000000001 RSI=ffffffff8e391eab RDI=ffffffff8c623f80 RBP=ffffed10039e1000 RSP=ffffc9000049fe00 R8 =0000000000000001 R9 =ffffed10056a67bd R10=ffff88802b533deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000093fc4 R15=dffffc0000000000 RIP=ffffffff8bd0574f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096c55000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080202018 CR3=00000000665f7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000