last executing test programs: 42.392157591s ago: executing program 1 (id=1412): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0xa000000) r3 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r3, 0x8931, &(0x7f0000000080)={'dummy0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x20040011}}], 0x1, 0x80) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 41.914243838s ago: executing program 1 (id=1413): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x80000000, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 41.827466831s ago: executing program 1 (id=1415): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) ioctl$TCSETSW2(0xffffffffffffffff, 0x5408, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000009c0)={0xffffffffffffffff, 0x0, 0x25, 0x8, @val=@tcx}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000001200)=[{{&(0x7f0000000180)=@xdp, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)=""/46, 0x2e}, {&(0x7f0000000300)=""/156, 0x9c}, {&(0x7f0000000440)=""/28, 0x1c}, {&(0x7f0000000500)=""/81, 0x51}], 0x4}, 0xffffff7f}, {{&(0x7f0000000680)=@ax25={{0x3, @default}, [@default, @null, @default, @bcast, @bcast, @netrom, @netrom, @netrom]}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000880)=""/81, 0x51}, {&(0x7f0000000900)=""/53, 0x35}, {&(0x7f0000000a00)=""/203, 0xcb}, {&(0x7f0000000b00)=""/54, 0x36}, {&(0x7f0000000b40)=""/187, 0xbb}], 0x6, &(0x7f0000000c40)=""/79, 0x4f}, 0x6}, {{&(0x7f0000000cc0), 0x80, &(0x7f0000001140)=[{&(0x7f0000000d40)=""/101, 0x65}, {&(0x7f0000000dc0)=""/38, 0x26}, {&(0x7f0000000e00)=""/5, 0x5}, {&(0x7f0000000e40)=""/25, 0x19}, {&(0x7f0000000e80)=""/154, 0x9a}, {&(0x7f0000000f40)=""/104, 0x68}, {&(0x7f0000000fc0)=""/163, 0xa3}, {&(0x7f0000001080)=""/122, 0x7a}, {&(0x7f0000001100)=""/3, 0x3}], 0x9, &(0x7f00000011c0)=""/17, 0x11}, 0x20}], 0x3, 0x40010000, &(0x7f0000001280)={0x0, 0x989680}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffc}], 0x0, 0x0, 0x0}) 41.825526496s ago: executing program 1 (id=1416): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r2 = socket(0x11, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000004a80)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xffffffff, @remote, 0x1}, 0x1c, &(0x7f0000001880)=[{&(0x7f00000006c0)='\a', 0x1}], 0x1}}, {{&(0x7f0000001900)={0xa, 0x4e21, 0x6, @local, 0x4}, 0x1c, &(0x7f0000001f80)=[{&(0x7f0000001940)="01", 0x1}], 0x1}}], 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$describe(0x1d, r4, &(0x7f0000000300)=""/182, 0xb6) keyctl$get_security(0x11, r4, &(0x7f0000002b00)=""/4096, 0x1000) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffc, 0x86}, &(0x7f0000000040)=0x90) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace(0x10, r5) ptrace$peeksig(0x4209, r5, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) prctl$PR_SCHED_CORE(0x3e, 0x4, r5, 0x3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) mknodat(r6, &(0x7f0000000100)='./file7\x00', 0x1140, 0x7bcb) getdents64(r6, &(0x7f0000000240)=""/131, 0x83) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="65844100c5dc"], 0xdd12}], 0x1}, 0x200488d4) 39.839999395s ago: executing program 1 (id=1422): r0 = syz_usb_connect(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0600ccb4529708070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001a80)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x1, 0x0, &(0x7f0000000040)="a1"}) syz_usb_disconnect(r0) close(r1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0x29, 0x0, 0x0) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/heartbeat/dead_threshold\x00', 0x1, 0x0) write(r4, &(0x7f00000005c0)='11', 0x2) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000280)=0x0) r6 = syz_open_procfs(r5, &(0x7f0000000000)='ns\x00') fchdir(r6) mount$9p_unix(&(0x7f0000000780)='./mnt\x00', &(0x7f0000000040)='./mnt\x00', 0x0, 0x291095, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x3ff, 0xe7}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={r7, @in={{0x2, 0x4e21, @rand_addr=0x64010100}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000140)={r8, 0xffffffff, 0x2a00}, 0x10) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r9, r9) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) setpgid(0x0, r9) sched_setscheduler(r9, 0x0, &(0x7f0000000000)) 39.085152464s ago: executing program 1 (id=1429): write$tun(0xffffffffffffffff, 0x0, 0xfdef) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020}, 0x2020) syz_open_dev$hidraw(0x0, 0x82, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x801}, 0xc8c4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="59dcfa311443ff3125f6caddcd030333581e502b", 0x14}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="10ffffffeb2986ca4ea6fdf9c7305abdea3886a7143302abdff3ca66f671962437b7520ba118180fc8f16f580a0eb7e21305534975a25709185e4e9ff0d9e3efa27ca786780735bc401111c74193bee3ea682c2fbcb8e8844c4b05aaf1853fda9748408b2daf4f8b8a31f027ade66b63c14cc75003e9c3fae66c9fcb8ade9fea839d1bac9a75f4fe496ffc8de0b917b9acd03ae9abe4c31b06afd24c1afb"], 0x10}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x100008, 0x1, 0xc05}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CEC_ADAP_G_CAPS(0xffffffffffffffff, 0xc04c6100, &(0x7f0000002440)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000000)=0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000100)={0x0, 0x3500, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4810}, 0x0) 38.583256758s ago: executing program 32 (id=1429): write$tun(0xffffffffffffffff, 0x0, 0xfdef) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020}, 0x2020) syz_open_dev$hidraw(0x0, 0x82, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x801}, 0xc8c4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="59dcfa311443ff3125f6caddcd030333581e502b", 0x14}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="10ffffffeb2986ca4ea6fdf9c7305abdea3886a7143302abdff3ca66f671962437b7520ba118180fc8f16f580a0eb7e21305534975a25709185e4e9ff0d9e3efa27ca786780735bc401111c74193bee3ea682c2fbcb8e8844c4b05aaf1853fda9748408b2daf4f8b8a31f027ade66b63c14cc75003e9c3fae66c9fcb8ade9fea839d1bac9a75f4fe496ffc8de0b917b9acd03ae9abe4c31b06afd24c1afb"], 0x10}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x100008, 0x1, 0xc05}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CEC_ADAP_G_CAPS(0xffffffffffffffff, 0xc04c6100, &(0x7f0000002440)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000000)=0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000100)={0x0, 0x3500, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4810}, 0x0) 3.094464863s ago: executing program 4 (id=1729): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0xff000000}}, 0x1c) 3.093810505s ago: executing program 2 (id=1730): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0x2, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x7}, {0x0, 0x9}, {0xfffe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x200400d5) r0 = syz_open_dev$radio(0x0, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES64], 0x24}, 0x1, 0x0, 0x0, 0x640040c4}, 0x1000c0c1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f00000002c0)="0015", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0xffffffffffffffff, 0x0, 0x4004) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x1cb842, 0x104) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r5, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x10000000, 0x0, 0x0, 0x1, 0x0, r4, 0x0, 0x500, 0x600}]) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) r6 = socket$netlink(0x10, 0x3, 0xa) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020073797a3200000000080041007278650014003300c57a7468315f746f5f687372000000000900020073797a30000000000800410072786500140033006873723000b7b183e000020000ad814b00"/96], 0x60}, 0x1, 0x1000000, 0x0, 0x80c9}, 0x20000040) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2902, 0x0) write$sndseq(r7, &(0x7f0000000600)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4, 0x5}, {}, @addr={0xec, 0x5b}}, {0x0, 0x0, 0x0, 0x0, @tick=0x1, {}, {0x5, 0x6}, @quote={{0x5, 0x5}}}, {0x0, 0x0, 0x0, 0x0, @tick=0xfe, {0x0, 0x8}, {0x2}, @addr={0x1, 0x6}}, {0x1, 0x1, 0x1, 0x0, @tick=0x7fffffff, {0x4, 0x1}, {0x7, 0x8}, @quote={{0x2, 0xd8}, 0x8}}], 0x70) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x4, 0xfffff038}, {0x20, 0xe, 0x0, 0x46}, {0x6, 0x0, 0x0, 0x6ce3}]}, 0x8) sendmmsg(r8, &(0x7f0000001c00), 0x400000000000159, 0x40840) 2.944732234s ago: executing program 4 (id=1731): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000001240)="14051b5ae730a16b38ec3c25a36f", 0x0, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) 2.944382177s ago: executing program 4 (id=1732): lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x3, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x4}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000340)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9e}}}, 0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f00000001c0), r6, 0x24640) r8 = dup(r7) write$P9_RREADDIR(r8, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) setreuid(0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) r9 = syz_clone(0x0, 0x0, 0x39, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x100006, 0x2, 0x87, 0xffffffff, 0x40}) capget(&(0x7f00000000c0)={0x19980330, r9}, &(0x7f0000000100)={0xb, 0x834, 0x0, 0x7, 0x1, 0x3}) r10 = socket$nl_crypto(0x10, 0x3, 0x15) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) sendmsg$nl_crypto(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="e0000000110001"], 0xe0}, 0x1, 0x0, 0x0, 0x4042090}, 0x850) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'}) syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902a63b01000010000904"], 0x0) r12 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x21002) ioctl$I2C_RDWR(r12, 0x707, &(0x7f0000000080)={&(0x7f0000000280)=[{0x8b7, 0x2c00, 0xff23, 0x0}], 0x1}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x40000000c000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.189931655s ago: executing program 2 (id=1738): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)}], 0x1) ioctl$TCSETSW2(0xffffffffffffffff, 0x5408, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000009c0)={0xffffffffffffffff, 0x0, 0x25, 0x8, @val=@tcx}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000001200)=[{{&(0x7f0000000180)=@xdp, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)=""/46, 0x2e}, {&(0x7f0000000300)=""/156, 0x9c}, {&(0x7f0000000440)=""/28, 0x1c}, {&(0x7f0000000500)=""/81, 0x51}], 0x4}, 0xffffff7f}, {{&(0x7f0000000680)=@ax25={{0x3, @default}, [@default, @null, @default, @bcast, @bcast, @netrom, @netrom, @netrom]}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000880)=""/81, 0x51}, {&(0x7f0000000900)=""/53, 0x35}, {&(0x7f0000000a00)=""/203, 0xcb}, {&(0x7f0000000b00)=""/54, 0x36}, {&(0x7f0000000b40)=""/187, 0xbb}], 0x6, &(0x7f0000000c40)=""/79, 0x4f}, 0x6}, {{&(0x7f0000000cc0), 0x80, &(0x7f0000001140)=[{&(0x7f0000000d40)=""/101, 0x65}, {&(0x7f0000000dc0)=""/38, 0x26}, {&(0x7f0000000e00)=""/5, 0x5}, {&(0x7f0000000e40)=""/25, 0x19}, {&(0x7f0000000e80)=""/154, 0x9a}, {&(0x7f0000000f40)=""/104, 0x68}, {&(0x7f0000000fc0)=""/163, 0xa3}, {&(0x7f0000001080)=""/122, 0x7a}, {&(0x7f0000001100)=""/3, 0x3}], 0x9, &(0x7f00000011c0)=""/17, 0x11}, 0x20}], 0x3, 0x40010000, &(0x7f0000001280)={0x0, 0x989680}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffc}], 0x0, 0x0, 0x0}) 1.142573779s ago: executing program 2 (id=1739): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000008c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0xa0031718561a00d8, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x50) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)={0x28, 0x4, 0x0, {0x1, 0x7, 0x0, 0x1000000}}, 0x28) 1.121498173s ago: executing program 3 (id=1740): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r0 = socket(0x1, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f0000000100)) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20004810) close(r1) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) statx(0xffffffffffffff9c, &(0x7f0000003280)='./file0\x00', 0x4000, 0x7ff, &(0x7f00000032c0)) 1.096758614s ago: executing program 2 (id=1741): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x23, 0x301, 0x270bd22, 0x25dfdbfa, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0xffff0000}, 0xc004) 995.13388ms ago: executing program 3 (id=1744): ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000b0601080000000000000000020000000900020073797a310000000005000100070000002c000780060004404e2100000500070011"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 989.04621ms ago: executing program 3 (id=1746): r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x96cd, 0x400, 0x0, 0x277}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r4 = eventfd2(0x42, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000040)=r4, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x40, 0x0, 0xffffffffffffffff, 0x9, 0x3, 0x2f05, 0x18, 0x0, {0x1}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 984.559636ms ago: executing program 2 (id=1747): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)}], 0x1) ioctl$TCSETSW2(0xffffffffffffffff, 0x5408, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000009c0)={0xffffffffffffffff, 0x0, 0x25, 0x8, @val=@tcx}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000001200)=[{{&(0x7f0000000180)=@xdp, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)=""/46, 0x2e}, {&(0x7f0000000300)=""/156, 0x9c}, {&(0x7f0000000440)=""/28, 0x1c}, {&(0x7f0000000500)=""/81, 0x51}], 0x4}, 0xffffff7f}, {{&(0x7f0000000680)=@ax25={{0x3, @default}, [@default, @null, @default, @bcast, @bcast, @netrom, @netrom, @netrom]}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000880)=""/81, 0x51}, {&(0x7f0000000900)=""/53, 0x35}, {&(0x7f0000000a00)=""/203, 0xcb}, {&(0x7f0000000b00)=""/54, 0x36}, {&(0x7f0000000b40)=""/187, 0xbb}], 0x6, &(0x7f0000000c40)=""/79, 0x4f}, 0x6}, {{&(0x7f0000000cc0), 0x80, &(0x7f0000001140)=[{&(0x7f0000000d40)=""/101, 0x65}, {&(0x7f0000000dc0)=""/38, 0x26}, {&(0x7f0000000e00)=""/5, 0x5}, {&(0x7f0000000e40)=""/25, 0x19}, {&(0x7f0000000e80)=""/154, 0x9a}, {&(0x7f0000000f40)=""/104, 0x68}, {&(0x7f0000000fc0)=""/163, 0xa3}, {&(0x7f0000001080)=""/122, 0x7a}, {&(0x7f0000001100)=""/3, 0x3}], 0x9, &(0x7f00000011c0)=""/17, 0x11}, 0x20}], 0x3, 0x40010000, &(0x7f0000001280)={0x0, 0x989680}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffc}], 0x0, 0x0, 0x0}) 939.357708ms ago: executing program 3 (id=1749): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x8, 0x4, 0x4, 0xbf22, 0x810, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x9c) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x9, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r4}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0x67, 0x3, 0x0, 0x0, 0x20}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5, 0x0, 0x0, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) socket(0x28, 0x5, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r7, 0xc0745645, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockname$packet(r2, &(0x7f00000001c0), &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xf, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x24000000) sendto$inet(r6, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x28}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34005c30e000ffcf4786b01f8d08ebf4de", @ANYRES16=0x0, @ANYBLOB="010000000000fcdbdf250100000000000000014100000008001700000021000000007564703a73797a3100000000"], 0x34}}, 0x0) recvfrom$inet(r6, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 876.989465ms ago: executing program 2 (id=1751): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000080911222220000000001545d6e88d2fb128ae7beff30f2797c58a1e6dcdb4b8ae6ae108fdbd8ecb71cbd2343056bb419f5c93c9b8a327cbf86c5c4bb22bb2f31250bfc2da1f94403fa37ceef6aaf3b0a077b764f44fc4292623be35693812887bb9ce97381d8f26707d190e3c451f7c8bb7bd4876a611932c25452f1000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x6c}, 0x0, @in6=@local, 0xfffffffc, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getpid() sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="f8000000160033060000000000000080ff0100000000000000000000000000017f0000010000000000000000000000000000007756433f60e1d54916c6be9255a300000000000a0020205e000000e7d82100530d61a159490572fc5cafcf1a109d42d4127c58a76379ec6301662ccc636d75625072fcfbe7583547255167f69c755c587fdc2f3e67b5ff14b2faabf7b81e8096c9c070e5721a49b2c7fe32e61b24094eb189584b835144e99010de8a986c33560e5fb910e72280f1cac900108c9c2bcfada8680d1a9336dd4a2d1a56ed5e324916f45aa50e2cb493ecdacadfd4ef62b89019f183c632a4475c7d210845ef9b17a1a4a944c9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d23200000000000000000000000000000000000001000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000ffffffffffffffff0000000000000000c10000000000000004000000020000000000000006000000020000000a000418190000000c0015005c07350001000000"], 0xf8}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000000), 0x560c89bb) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x20) splice(r8, 0x0, r10, 0x0, 0x8000, 0x0) setresuid(0x0, 0xee00, 0x0) 790.950011ms ago: executing program 4 (id=1754): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg/2:0:0:0\x00', 0x8000, 0x0) ioctl$BSG_IO(r0, 0x2285, &(0x7f0000000200)={0x51, 0x0, 0x0, 0x1, &(0x7f0000000080)='i', 0x4, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0xeb}) quotactl_fd$Q_SYNC(r0, 0xffffffff80000102, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xfff1}, {0xc, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x20}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x97, 0x7, 0xa9, 0x2, 0x500000}}, {0x4}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) fcntl$addseals(r1, 0x409, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, 0x0, &(0x7f0000000240)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r7 = socket(0x1e, 0x802, 0x0) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000002c0)={0x40002001}) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000180), 0x4) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x3) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400eb001000010000000000000000000000000a140000001100010000000000000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x24004000) sendto$unix(r9, &(0x7f00000003c0)="4b4c2a6604c4163fd785e5f4f1c1de35d5272f1ae22312f4a48306b9d091590d8afa27f71f847e80db83ab61c6fc77414bedfecfdf531651dcc760342741bf8f28c54bc24a54", 0x46, 0x4000001, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000e600c7d95aba2825821d1bd23fb5491c02c130288d78297f1c053ba3ae3c6b2a80c61e3fffd346795032f7c29ca8c1e9ee18069d2d0ac3828276", @ANYRES16=r12, @ANYBLOB="100026bd7000ffdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 617.671607ms ago: executing program 4 (id=1755): ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000b0601080000000000000000020000000900020073797a310000000005000100070000002c000780060004404e2100000500070011"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 543.159739ms ago: executing program 4 (id=1756): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000004f00)={0x0, 0x0, &(0x7f0000004ec0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="140000002600030328bd700d000000251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x24000844) recvmmsg(r0, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x160, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000140), 0x5, 0x80000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000040)='./mount_sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mount_sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./mount_sys/fs/ocfs2/cluster_stack\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='user', 0x4) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/platform/devices/snd_aloop.0/driver/unbind\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='snd_aloop.0\x00', 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0xd0, &(0x7f0000000280)=0x1000, 0x4) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x240}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="080028bd7000fddbdf257900000008000300", @ANYRES32=r7, @ANYBLOB="30ebe6ce18c6e87ce32232ebe968906f47b65356df94b1c3d65437800d4d64efe7df20db46effaf6c831f23d0ee9ec06d769d996d89cca8756cb0d4b06c83e69ab680e88be3a69b5"], 0x20}, 0x1, 0x0, 0x0, 0x49005}, 0x4000010) 296.060448ms ago: executing program 0 (id=1759): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) ioctl$TCSETSW2(0xffffffffffffffff, 0x5408, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000009c0)={0xffffffffffffffff, 0x0, 0x25, 0x8, @val=@tcx}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000001200)=[{{&(0x7f0000000180)=@xdp, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)=""/46, 0x2e}, {&(0x7f0000000300)=""/156, 0x9c}, {&(0x7f0000000440)=""/28, 0x1c}, {&(0x7f0000000500)=""/81, 0x51}], 0x4}, 0xffffff7f}, {{&(0x7f0000000680)=@ax25={{0x3, @default}, [@default, @null, @default, @bcast, @bcast, @netrom, @netrom, @netrom]}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000880)=""/81, 0x51}, {&(0x7f0000000900)=""/53, 0x35}, {&(0x7f0000000a00)=""/203, 0xcb}, {&(0x7f0000000b00)=""/54, 0x36}, {&(0x7f0000000b40)=""/187, 0xbb}], 0x6, &(0x7f0000000c40)=""/79, 0x4f}, 0x6}, {{&(0x7f0000000cc0), 0x80, &(0x7f0000001140)=[{&(0x7f0000000d40)=""/101, 0x65}, {&(0x7f0000000dc0)=""/38, 0x26}, {&(0x7f0000000e00)=""/5, 0x5}, {&(0x7f0000000e40)=""/25, 0x19}, {&(0x7f0000000e80)=""/154, 0x9a}, {&(0x7f0000000f40)=""/104, 0x68}, {&(0x7f0000000fc0)=""/163, 0xa3}, {&(0x7f0000001080)=""/122, 0x7a}, {&(0x7f0000001100)=""/3, 0x3}], 0x9, &(0x7f00000011c0)=""/17, 0x11}, 0x20}], 0x3, 0x40010000, &(0x7f0000001280)={0x0, 0x989680}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffc}], 0x0, 0x0, 0x0}) 259.898235ms ago: executing program 0 (id=1760): add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff69000000000001000000c000fe0006000200861f", 0x1d, 0xffffffffffffffff) 165.269969ms ago: executing program 0 (id=1761): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x8000, 0x6c00, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xdd86, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}}}}}}}, 0x0) 164.823629ms ago: executing program 0 (id=1762): futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x400}], 0x1, &(0x7f0000000080), &(0x7f00000000c0)={[0x1, 0x4]}, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={&(0x7f0000000180)="64f18761ed069bfd64d8a83927034c30c2cdd8fba7806fa0586976a4eb8e3e633762e08094e0c897b8951c90481747225b55821ea4b2a2dbe157", &(0x7f0000000400)="dade483405354293e62df61ce6de7781288f9bb92dcddf51a8e15c447a9819b85c79031c8c3fa6504aef3ee660eb86875aaed577b9e3b047bad78575554cc09f866d31f627256c25ed8c519cfe0d5f62baa6a4903c02cd032dc1eb64051689f7993727ba45043de397a7fb451e12e58b8665bbf5b6882a5964b87220288c8b3bf666c671239e684c23e132fd15773b99da6827cb6cdf95ac3d62825953bc07c5b59017a28011b087721db9d7abfe9f54554ee5975371ece602edab37779767a8be699eea61521b04350a7a73ba06a5e9f5c9b24d3b"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x5) sendmmsg$inet(r2, 0x0, 0x0, 0x4040040) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x6}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000500)={r6, @in={{0x2, 0x4e24, @rand_addr=0x64010102}}, 0x8, 0x7fff}, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004180)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x1000, 0x800, 0x5ff, 0xfff, 0x7fff, 0x3a9a, 0xfff, 0xfffffffa, 0x6, 0x2, 0x8001, 0xdc, 0x1, 0x8, 0x4, 0x3, 0x5242, 0x0, 0x114e, 0x9, 0x6, 0x101, 0x3, 0xff, 0x7ff, 0xfffffffb, 0x80000000, 0x6177d997, 0xb63b8771, 0x1, 0xc, 0x1, 0x123a9273, 0x4, 0xff, 0x5, 0x100, 0x6, 0x5, 0x6, 0x4, 0x20, 0x4, 0x0, 0x9, 0x7ff, 0x3, 0x1, 0x7, 0x7, 0xd, 0xfffffffd, 0x7, 0x488, 0xc, 0xf74d, 0x8, 0x3d, 0x401, 0x5, 0x1, 0x7ff, 0x3, 0x9, 0xc, 0x3ff, 0x4139df5d, 0x9, 0xfffffff7, 0x1, 0x2, 0x1, 0x8f2c, 0x8000, 0x0, 0x2, 0x100, 0x66, 0x3, 0x5, 0x2, 0x200, 0x9, 0x76, 0x4, 0x10001, 0x4, 0x9, 0xe, 0x0, 0xf9, 0x9, 0x4ade, 0x3, 0x4000008, 0x4, 0xff, 0x0, 0x1, 0x800, 0x2bc, 0xffff, 0x7fff, 0x3b0a, 0x2, 0x0, 0x3, 0x200, 0x2, 0x9, 0x6, 0x9, 0x4, 0xc34d, 0x80000000, 0x8, 0x8, 0x0, 0xe, 0x6, 0x4, 0x4, 0x3, 0xe256, 0x80000000, 0xb, 0x7, 0x3, 0x5, 0x7, 0x5, 0x6, 0x6, 0x200, 0x7, 0xffffffff, 0x2, 0x5, 0x4, 0x10c, 0x8000, 0x8, 0x6, 0x2, 0x7ff, 0x5, 0x6, 0xaa, 0x8, 0x6, 0x8, 0x4, 0x9, 0x3000, 0x3ff, 0x7, 0x40, 0x1, 0x4, 0x0, 0x7, 0x10000, 0x8, 0x7, 0x3, 0x417, 0x7fff, 0x6, 0x3, 0x7, 0x5, 0x2, 0x5, 0x9, 0x1, 0x0, 0x7, 0x5, 0x7, 0x0, 0x80000001, 0x10000, 0x6, 0xfff, 0x5e, 0x7fff, 0x6, 0xa159, 0x4, 0x1, 0x7, 0x4, 0x2, 0x8, 0x80, 0xfffffffc, 0x9e, 0x61aa91f9, 0x7, 0x81, 0xffff21e7, 0x4, 0x6, 0x7, 0x5, 0x3, 0x4ea, 0xfffffffd, 0x6d1, 0x8, 0x5, 0x6, 0x3, 0x6, 0x8, 0xfffffffb, 0x8, 0x1, 0xffff, 0x6, 0xfa9, 0x8, 0x10000, 0x2, 0x5635, 0x3ff, 0x3, 0x400, 0xedc, 0x8, 0x7, 0xd, 0xea1, 0xbef, 0x9, 0x3, 0xffff0000, 0x4, 0x335e, 0x3, 0xffffffff, 0x210f993b, 0x5, 0x6, 0x7, 0x6, 0x9, 0x2e6, 0xb, 0x0, 0x6, 0xffffffff, 0x2947, 0x8, 0x2]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xd616, 0x2, 0x8, 0x2, 0x67, {0x5, 0x0, 0x7, 0x9, 0x101, 0xffffffff}, {0x9, 0x0, 0x6, 0xfd, 0x3, 0x2}, 0xffffffff, 0x80000000, 0x100}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x400c810) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "5335572af7aa9ec3", "0bb3bbceae3b6d56e33a5c51cbf284c6", "1363cf10", "5c892ebd183c8c13"}, 0x28) recvmsg(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000380)=""/84, 0x54}], 0x1}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) r8 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x30, 0x0) landlock_restrict_self(r8, 0xe) futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, &(0x7f0000048000), 0x0) 77.753105ms ago: executing program 0 (id=1763): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) close(r0) r1 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000180), 0x8200, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000300)=""/114, &(0x7f0000000380)=0x72) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x9}}]}, 0x2c}}, 0x20040084) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r4, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000001c0)={'sit0\x00', r4, 0x7800, 0x8720, 0x5, 0xfa71, {{0x27, 0x4, 0x3, 0x25, 0x9c, 0x65, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @remote, {[@cipso={0x86, 0x15, 0x3, [{0x2, 0x6, "28c69534"}, {0x1, 0x2}, {0x1, 0x2}, {0x0, 0x5, "0e1f00"}]}, @rr={0x7, 0x1b, 0xbf, [@empty, @multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x21}, @remote]}, @timestamp_prespec={0x44, 0x1c, 0xc3, 0x3, 0x2, [{@remote, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffd}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x8}]}, @ssrr={0x89, 0xf, 0x87, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @loopback]}, @timestamp_addr={0x44, 0x2c, 0x73, 0x1, 0x9, [{@loopback, 0x6}, {@remote, 0x5aa}, {@broadcast, 0x7}, {@broadcast, 0x2}, {@empty, 0x5}]}]}}}}}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1900, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff80}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xb0ffffff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 56.564645ms ago: executing program 3 (id=1764): ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000b0601080000000000000000020000000900020073797a310000000005000100070000002c000780060004404e2100000500070011"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 4.265086ms ago: executing program 0 (id=1765): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0xdddd0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xff, 0x7fff0003}]}) close_range(r3, r3, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x208200, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x51, 0x10, r4, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3 (id=1766): r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x96cd, 0x400, 0x0, 0x277}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r4 = eventfd2(0x42, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000040)=r4, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x40, 0x0, 0xffffffffffffffff, 0x9, 0x3, 0x2f05, 0x18, 0x0, {0x1}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) kernel console output (not intermixed with test programs): terrupt_callback - nonzero urb status, -71 [ 293.044813][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.047259][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.049717][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.052033][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.054927][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.057370][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.059884][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.062224][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.064738][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.067374][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.069812][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.072235][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.075472][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.078625][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.081796][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.085015][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.088169][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.091324][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.093832][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.096415][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.099473][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.103635][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.107582][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.110776][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.113939][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.116949][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.120191][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.123060][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.126111][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.128818][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.131267][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.133739][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.136630][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.139368][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.141892][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.144279][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.147167][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.149586][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.154977][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.158208][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.161276][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.164548][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.167706][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.170831][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.173364][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.175924][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.178373][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.180823][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.183251][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.189061][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.192322][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.195713][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.199102][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.202604][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.205608][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.208039][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.210457][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.212932][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.215522][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.217973][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.220482][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.222897][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.225505][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.228046][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.230508][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.232784][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.235175][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.237466][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.239806][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.242085][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.244589][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.247539][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.250450][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.252846][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.255222][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.257597][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.259921][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.262248][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.264836][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.267525][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.270149][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.272748][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.275449][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.277945][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.280312][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.282700][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.285230][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.287588][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.289917][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.292239][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.294685][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.297356][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.299858][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.302310][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.304381][T12791] binder_alloc: 12790: binder_alloc_buf, no vma [ 293.304822][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.309736][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.312200][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.315213][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.317642][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.320101][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.322537][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.325103][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.327617][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.330032][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.332498][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.335328][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.338452][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.341544][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.344312][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.346834][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.349315][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.351854][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.354447][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.357152][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.359644][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.362281][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.365454][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.367908][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.370720][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.373244][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.375978][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.378471][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.380962][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.383422][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.386149][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.388667][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.391068][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.393494][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.396096][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.398498][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.400914][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.403328][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.405806][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.408323][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.410789][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.413242][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.415878][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.418432][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.420801][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.423208][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.425811][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.428661][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.431173][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.433584][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.436018][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.438431][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.440818][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.443760][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.446204][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.448641][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.451078][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.453472][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.455863][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.458161][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.460576][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.463003][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.465479][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.467889][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.470297][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.472757][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.475210][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.477607][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.479917][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.482260][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.484667][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.487172][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.489586][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.491994][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.494445][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.497323][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.499767][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.502141][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.504599][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.507057][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.509471][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.511360][T12802] tipc: Enabled bearer , priority 10 [ 293.511802][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.515959][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.518379][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.520820][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.523255][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.525734][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.528186][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.530627][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.533089][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.535536][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.537916][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.540362][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.542790][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.545245][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.547672][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.550093][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.552529][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.554995][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.557371][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.559753][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.562067][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.564494][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.566854][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.569182][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.571528][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.573948][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.576375][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.578779][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.581197][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.583649][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.586320][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.588740][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.591046][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.593384][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.595821][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.598236][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.600668][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.603096][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.605538][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.607977][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.610414][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.612829][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.615260][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.617630][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.620094][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.622535][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.625041][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.627494][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.629930][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.632378][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.634834][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.637295][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.639759][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.644588][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.647071][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.647125][T12801] tipc: Resetting bearer [ 293.649456][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.653594][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.656051][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.658471][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.664564][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.674626][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.684169][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.689222][T12801] tipc: Disabling bearer [ 293.690438][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.698899][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.706018][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.708463][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.711801][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.714298][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.716725][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.721794][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.724289][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.726863][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.729425][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.731928][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.734493][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.736944][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.739359][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.741765][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.744272][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.746717][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.749146][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.751602][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.754051][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.756471][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.758878][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.761305][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.763792][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.766225][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.768642][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.771068][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.773526][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.776086][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.778504][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.780911][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.783336][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.785782][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.788207][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.790555][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.793767][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.796911][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.799844][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.802242][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.804770][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.807322][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.809712][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.812132][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.814883][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.817294][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.819948][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.822577][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.825101][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.827553][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.829998][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.832454][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.834932][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.837369][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.839810][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.842222][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.844748][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.847610][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.850064][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.852536][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.855038][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.858045][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.860620][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.863046][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.868183][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.873191][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.876185][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.880677][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.883311][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.885843][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.888278][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.890707][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.893151][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.895616][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.898046][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.900478][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.902880][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.905493][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.907961][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.912746][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.920393][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.930683][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.937564][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.943692][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.947858][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.950381][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.952830][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.955418][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.957773][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.960199][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.962599][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.965106][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.967529][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.969903][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.972284][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.974730][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.977182][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.980032][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.982516][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.985416][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.988297][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.991217][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.994289][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.996882][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 293.999673][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.002123][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.005394][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.008411][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.011432][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.014321][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.016732][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.019167][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.021611][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.024106][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.027708][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.030120][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.032545][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.035589][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.038025][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.040468][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.044827][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.047217][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.049633][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.052059][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.054460][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.056759][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.059155][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.061806][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.064992][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.067609][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.070018][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.072441][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.074906][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.077353][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.079766][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.082178][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.084645][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.087076][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.089497][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.091940][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.094606][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.100502][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.103326][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.105962][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.108945][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.112116][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.114710][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.117745][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.120217][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.123299][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.126528][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.129423][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.132658][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.135988][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.141539][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.150132][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.153417][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.156750][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.160011][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.163257][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.166114][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.168865][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.171936][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.175266][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.178480][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.181735][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.184277][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.186926][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.189433][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.191896][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.194443][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.197166][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.199660][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.202119][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.204628][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.207239][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.209738][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.212194][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.214703][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.217286][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.219822][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.222283][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.224865][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.227393][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.229932][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.232416][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.234937][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.238131][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.240675][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.243225][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.245698][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.248538][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.251429][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.254103][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.257316][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.260557][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.263742][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.266952][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.270069][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.272755][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.277683][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.280816][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.283433][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.286098][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.289136][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.292295][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.295555][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.298513][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.301540][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.306722][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.309595][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.312790][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.316056][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.318874][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.322020][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.325217][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.328307][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.331348][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.333859][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.336485][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.339336][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.342078][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.346186][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.351029][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.353584][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.356158][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.359270][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.362486][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.365733][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.368982][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.371524][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.374833][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.377554][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.380187][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.383086][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.386356][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.389574][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.392778][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.394667][T12827] sctp_transport_update_pmtu: 42 callbacks suppressed [ 294.394678][T12827] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 294.396048][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.398718][T12827] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 294.402107][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.405098][T12827] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 294.408556][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.412074][T12827] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 294.414921][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.421510][T12827] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 294.424180][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.427613][T12827] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 294.430250][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.434024][T12827] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 294.436287][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.440112][T12827] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 294.441647][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.446325][T12827] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 294.447461][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.453339][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.454090][T12827] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 294.458662][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.462037][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.465806][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.468787][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.471885][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.475163][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.478271][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.483466][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.490611][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.493839][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.497132][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.500008][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.503060][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.505896][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.508553][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.511599][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.513937][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.516286][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.519251][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.521971][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.524552][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.527718][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.530757][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.533104][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.535726][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.538388][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.541240][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.544113][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.546905][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.549640][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.552858][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.556106][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.559266][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.562472][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.565630][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.568843][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.571711][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.574765][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.577898][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.581100][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.583609][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.586399][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.589216][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.591616][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.594031][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.596656][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.602392][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.605607][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.608217][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.610724][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.613396][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.615884][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.618446][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.620899][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.623538][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.626376][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.629052][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.631852][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.634807][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.637457][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.640076][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.642617][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.645716][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.648906][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.651751][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.654503][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.657075][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.660143][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.662620][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.665337][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.667889][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.670472][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.673004][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.675617][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.678859][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.681396][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.683880][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.686655][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.689934][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.693225][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.696290][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.699207][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.702448][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.705404][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.708555][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.711750][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.714986][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.717798][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.721177][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.724365][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.727568][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.730607][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.733794][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.737068][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.740287][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.743520][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.746779][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.749950][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.753054][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.758263][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.761382][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.764072][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.767325][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.770571][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.773832][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.777069][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.780271][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.783473][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.786939][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.790080][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.792946][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.795956][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.799178][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.802368][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.805741][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.808893][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.811479][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.814537][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.817418][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.820437][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.823306][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.827429][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.830548][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.833773][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.836862][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.839510][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.841970][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.844445][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.846908][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.849348][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.851807][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.854329][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.856800][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.859271][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.861758][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.864942][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.867395][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.869857][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.872351][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.874857][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.877339][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.879826][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.882259][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.884798][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.887236][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.889823][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.892674][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.895266][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.898043][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.900493][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.902909][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.905403][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.907844][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.910282][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.912743][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.915247][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.917621][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.920041][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.922487][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.924975][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.927460][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.929898][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.932371][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.934946][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.937415][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.939831][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.942259][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.944779][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.947232][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.955235][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.962794][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.970851][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.974837][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.977379][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.979844][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.982264][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.984819][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.987288][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.989766][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 294.992208][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.000575][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.020844][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.027386][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.028423][T12844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1526'. [ 295.032887][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.037289][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.039769][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.042268][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.044744][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.050018][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.052475][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.055099][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.057540][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.058659][T12832] batadv_slave_1: entered promiscuous mode [ 295.059872][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.064157][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.066591][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.069060][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.071412][T12832] macvlan3: entered allmulticast mode [ 295.071527][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.075632][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.077012][T12848] overlayfs: failed to resolve './file0': -2 [ 295.077996][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.078175][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.078355][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.078534][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.078721][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.078954][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.079135][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.079317][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.079496][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.079674][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.079853][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.080032][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.080210][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.080391][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.112375][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.114724][T12832] batadv_slave_1: entered allmulticast mode [ 295.114914][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.119032][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.121502][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.123983][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.126459][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.128932][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.131416][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.133773][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.136764][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.139255][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.141698][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.144214][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.146669][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.149169][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.151653][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.154135][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.156657][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.159115][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.161637][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.164135][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.166384][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.168729][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.171144][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.173599][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.176078][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.178556][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.181003][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.183457][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.188645][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.191101][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.193594][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.196046][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.198490][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.200909][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.203365][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.205885][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.208351][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.210780][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.213254][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.215761][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.218211][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.220664][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.223061][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.225663][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.228109][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.230574][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.233092][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.235594][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.238064][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.240511][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.242970][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.245454][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.247919][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.250354][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.252801][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.255255][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.257706][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.260130][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.262550][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.264956][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.267329][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.269809][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.272232][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.274737][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.277150][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.279650][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.280566][T12832] batman_adv: batadv0: Adding interface: macvlan3 [ 295.282047][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.283987][T12832] batman_adv: batadv0: Interface activated: macvlan3 [ 295.286399][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.290871][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.293324][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.295800][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.298245][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.300682][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.303185][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.305656][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.308105][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.310531][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.312968][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.316130][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.318585][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.320999][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.323433][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.325873][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.328303][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.330711][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.333272][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.335898][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.338368][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.340791][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.343155][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.346062][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.348488][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.350900][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.353335][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.358155][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.360650][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.363114][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.365737][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.368724][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.371139][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.373682][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.376121][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.378602][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.381048][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.383855][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.386713][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.389254][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.391881][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.394409][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.396784][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.399348][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.401649][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.404078][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.406583][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.409034][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.411478][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.413916][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.416187][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.418630][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.421065][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.423463][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.428750][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.431349][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.433776][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.436304][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.438730][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.441120][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.443493][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.446117][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.448552][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.451023][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.453467][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.455922][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.458348][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.460783][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.463247][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.465783][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.468268][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.470679][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.473130][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.475624][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.477988][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.480342][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.482942][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.485405][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.487874][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.490292][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.492711][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.495250][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.497711][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.500130][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.502560][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.505087][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.507532][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.509949][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.512401][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.514900][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.517403][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.520389][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.522857][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.525389][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.527834][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.530240][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.532662][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.535136][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.537486][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.539925][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.542365][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.544857][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.547326][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.549759][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.552263][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.554784][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.557130][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.559531][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.561915][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.564512][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.567043][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.570308][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.572856][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.575330][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.577790][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.580368][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.582826][T12866] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.582835][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.583024][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.593722][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.596233][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.598653][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.601102][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.603602][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.606079][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.608519][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.610971][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.613399][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.615862][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.618301][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.620749][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.623212][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.625786][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.628244][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.630668][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.633105][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.635569][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.637864][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.640165][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.642466][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.644823][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.647181][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.649519][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.651870][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.654210][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.656538][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.658902][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.661226][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.663602][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.674050][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.677692][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.680492][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.682906][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.685385][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.687857][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.690282][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.692642][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.695162][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.697588][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.700038][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.702448][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.704916][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.707357][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.710126][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.712645][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.716990][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.719336][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.721661][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.723979][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.726759][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.729201][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.731567][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.733992][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.736432][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.738763][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.741149][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.743594][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.746245][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.748689][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.750973][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.753241][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.755621][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.758190][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.760633][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.763065][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.766177][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.768617][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.771604][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.774041][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.776439][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.778799][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.781134][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.783577][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.786096][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.788457][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.790749][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.793114][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.795486][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.797903][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.800444][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.802889][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.805372][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.808031][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.810427][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.813029][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.814148][T12885] 9pnet_virtio: no channels available for device syz [ 295.817278][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.821971][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.824458][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.827314][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.829881][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.832185][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.834706][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.837986][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.841291][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.844552][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.847817][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.850474][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.853601][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.856692][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.859119][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.861433][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.863761][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.866336][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.868949][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.871414][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.873884][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.876589][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.879122][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.881543][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.884182][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.886776][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.889241][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.891665][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.894139][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.896995][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.899588][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.902052][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.907029][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.909495][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.911919][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.914377][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.917112][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.919572][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.921971][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.924477][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.926982][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.929332][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.931921][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.934375][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.937098][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.939528][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.941957][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.944417][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.947118][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.949572][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.952242][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.954771][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.957483][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.960352][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.963074][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.965919][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.968629][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.971067][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.974117][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.976884][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.980148][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.983376][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.986367][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.988647][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.990865][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.993622][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.996158][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 295.998536][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.000914][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.003454][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.005950][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.008514][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.010856][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.013420][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.015865][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.018237][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.020654][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.023130][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.025926][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.028842][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.031213][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.033624][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.036098][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.038507][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.041123][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.043538][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.046044][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.048502][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.050922][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.053315][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.055924][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.058306][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.060666][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.063143][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.065858][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.068357][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.070985][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.073519][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.076413][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.078926][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.081437][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.083995][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.086921][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.089497][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.092201][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.095293][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.098355][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.101300][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.104012][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.106748][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.109321][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.111886][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.114480][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.117177][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.119916][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.122357][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.124984][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.128118][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.131395][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.134746][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.137996][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.141248][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.144507][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.147619][T12641] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 296.147661][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.154821][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.157703][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.160253][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.163294][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.164389][T12641] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 296.166188][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 296.172048][ C2] usb 9-1: ti_interrupt_callback - resubmit interrupt urb failed, -1 [ 296.176519][ T7271] usb 9-1: USB disconnect, device number 2 [ 296.204993][ T7271] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 296.225009][ T7271] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 296.240059][ T7271] ti_usb_3410_5052 9-1:2.0: device disconnected [ 296.301671][T12911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1535'. [ 296.445646][T12922] FAULT_INJECTION: forcing a failure. [ 296.445646][T12922] name failslab, interval 1, probability 0, space 0, times 0 [ 296.451079][T12922] CPU: 3 UID: 0 PID: 12922 Comm: syz.4.1537 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.451122][T12922] Tainted: [L]=SOFTLOCKUP [ 296.451129][T12922] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 296.451140][T12922] Call Trace: [ 296.451147][T12922] [ 296.451155][T12922] dump_stack_lvl+0x100/0x190 [ 296.451185][T12922] should_fail_ex.cold+0x5/0xa [ 296.451207][T12922] should_failslab+0xc2/0x120 [ 296.451234][T12922] __kmalloc_noprof+0xfc/0x820 [ 296.451254][T12922] ? rcu_is_watching+0x12/0xc0 [ 296.451276][T12922] ? vhost_dev_set_owner+0x3b2/0xa30 [ 296.451306][T12922] vhost_dev_set_owner+0x3b2/0xa30 [ 296.451343][T12922] vhost_dev_ioctl+0x521/0xe20 [ 296.451372][T12922] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 296.451400][T12922] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 296.451429][T12922] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 296.451459][T12922] vhost_vsock_dev_ioctl+0x320/0xb60 [ 296.451487][T12922] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 296.451511][T12922] ? hook_file_ioctl_common+0x140/0x440 [ 296.451540][T12922] ? __fget_files+0x21f/0x3d0 [ 296.451562][T12922] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 296.451587][T12922] compat_ptr_ioctl+0x6e/0xa0 [ 296.451610][T12922] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 296.451635][T12922] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 296.451665][T12922] __do_fast_syscall_32+0xe7/0x970 [ 296.451690][T12922] ? lockdep_hardirqs_on+0x78/0x100 [ 296.451718][T12922] do_fast_syscall_32+0x32/0x70 [ 296.451741][T12922] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 296.451764][T12922] RIP: 0023:0xf70befec [ 296.451788][T12922] Code: Unable to access opcode bytes at 0xf70befc2. [ 296.451797][T12922] RSP: 002b:00000000f548c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 296.451815][T12922] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000000000af01 [ 296.451825][T12922] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 296.451836][T12922] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 296.451845][T12922] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 296.451853][T12922] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 296.451875][T12922] [ 297.453702][T12941] netlink: 'syz.4.1544': attribute type 10 has an invalid length. [ 297.453709][T12942] netlink: 'syz.4.1544': attribute type 10 has an invalid length. [ 297.479368][T12942] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1544'. [ 297.482457][T12943] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1544'. [ 297.542608][T12941] syz.4.1544: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 297.553511][T12941] CPU: 3 UID: 0 PID: 12941 Comm: syz.4.1544 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.553534][T12941] Tainted: [L]=SOFTLOCKUP [ 297.553538][T12941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 297.553545][T12941] Call Trace: [ 297.553551][T12941] [ 297.553570][T12941] dump_stack_lvl+0x100/0x190 [ 297.553591][T12941] warn_alloc.cold+0x94/0xa8 [ 297.553604][T12941] ? __pfx_warn_alloc+0x10/0x10 [ 297.553621][T12941] ? __lock_acquire+0x49f/0x1a40 [ 297.553654][T12941] ? __lock_acquire+0x49f/0x1a40 [ 297.553684][T12941] __vmalloc_node_range_noprof+0x136c/0x1630 [ 297.553705][T12941] ? __lock_acquire+0x49f/0x1a40 [ 297.553724][T12941] ? do_replace+0x1c6/0x490 [ 297.553742][T12941] ? do_raw_spin_lock+0x128/0x260 [ 297.553755][T12941] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 297.553774][T12941] ? __lock_acquire+0x49f/0x1a40 [ 297.553792][T12941] ? __lock_acquire+0x49f/0x1a40 [ 297.553809][T12941] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 297.553826][T12941] ? do_replace+0x1c6/0x490 [ 297.553838][T12941] __vmalloc_node_noprof+0xad/0xf0 [ 297.553855][T12941] ? do_replace+0x1c6/0x490 [ 297.553870][T12941] __vmalloc_noprof+0xa3/0x120 [ 297.553886][T12941] ? __pfx___vmalloc_noprof+0x10/0x10 [ 297.553908][T12941] do_replace+0x1c6/0x490 [ 297.553923][T12941] ? __pfx_do_replace+0x10/0x10 [ 297.553941][T12941] ? __lock_acquire+0x49f/0x1a40 [ 297.553958][T12941] ? register_lock_class+0x40/0x560 [ 297.553978][T12941] compat_do_replace+0x589/0x7a0 [ 297.553993][T12941] ? __pfx_compat_do_replace+0x10/0x10 [ 297.554016][T12941] ? bpf_lsm_capable+0x9/0x10 [ 297.554029][T12941] ? security_capable+0x80/0x260 [ 297.554043][T12941] do_ebt_set_ctl+0x3f4/0x4a0 [ 297.554058][T12941] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 297.554074][T12941] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 297.554105][T12941] ? futex_wake+0x4ea/0x5e0 [ 297.554124][T12941] ? nf_sockopt_find.isra.0+0x222/0x290 [ 297.554142][T12941] nf_setsockopt+0x8d/0xf0 [ 297.554158][T12941] ip_setsockopt+0xcb/0xf0 [ 297.554179][T12941] tcp_setsockopt+0xa7/0x100 [ 297.554192][T12941] smc_setsockopt+0x1b6/0xa40 [ 297.554206][T12941] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 297.554220][T12941] ? __pfx_smc_setsockopt+0x10/0x10 [ 297.554234][T12941] ? aa_sock_opt_perm+0xfe/0x1b0 [ 297.554246][T12941] ? __pfx_smc_setsockopt+0x10/0x10 [ 297.554259][T12941] do_sock_setsockopt+0xf3/0x1d0 [ 297.554279][T12941] __sys_setsockopt+0x119/0x190 [ 297.554298][T12941] __ia32_sys_setsockopt+0xbc/0x160 [ 297.554313][T12941] ? __do_fast_syscall_32+0x98/0x970 [ 297.554330][T12941] ? lockdep_hardirqs_on+0x78/0x100 [ 297.554344][T12941] __do_fast_syscall_32+0xe7/0x970 [ 297.554362][T12941] do_fast_syscall_32+0x32/0x70 [ 297.554378][T12941] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 297.554394][T12941] RIP: 0023:0xf70befec [ 297.554408][T12941] Code: Unable to access opcode bytes at 0xf70befc2. [ 297.554414][T12941] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 297.554426][T12941] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000000 [ 297.554433][T12941] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108 [ 297.554440][T12941] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 297.554447][T12941] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 297.554454][T12941] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 297.554468][T12941] [ 297.721443][T12941] Mem-Info: [ 297.722523][T12941] active_anon:12791 inactive_anon:11 isolated_anon:0 [ 297.722523][T12941] active_file:8485 inactive_file:33212 isolated_file:0 [ 297.722523][T12941] unevictable:1768 dirty:204 writeback:0 [ 297.722523][T12941] slab_reclaimable:7939 slab_unreclaimable:58325 [ 297.722523][T12941] mapped:28549 shmem:7802 pagetables:1269 [ 297.722523][T12941] sec_pagetables:303 bounce:0 [ 297.722523][T12941] kernel_misc_reclaimable:0 [ 297.722523][T12941] free:33241 free_pcp:12651 free_cma:0 [ 297.738286][T12941] Node 0 active_anon:8kB inactive_anon:12kB active_file:12kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8608kB pagetables:1220kB sec_pagetables:1152kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 297.749043][T12941] Node 1 active_anon:51324kB inactive_anon:32kB active_file:33928kB inactive_file:132848kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:114180kB dirty:812kB writeback:0kB shmem:27672kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5516kB pagetables:3868kB sec_pagetables:60kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 297.759988][T12941] Node 0 DMA free:2052kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:600kB local_pcp:120kB free_cma:0kB [ 297.769563][T12941] lowmem_reserve[]: 0 280 280 280 280 [ 297.771429][T12941] Node 0 DMA32 free:15036kB boost:0kB min:12772kB low:15964kB high:19156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:12kB active_file:8kB inactive_file:0kB unevictable:3536kB writepending:0kB zspages:0kB present:1032196kB managed:286888kB mlocked:0kB bounce:0kB free_pcp:11856kB local_pcp:3856kB free_cma:0kB [ 297.783820][T12941] lowmem_reserve[]: 0 0 0 0 0 [ 297.785526][T12941] Node 1 DMA32 free:117572kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:50024kB inactive_anon:32kB active_file:33928kB inactive_file:132848kB unevictable:3536kB writepending:812kB zspages:1800kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:37856kB local_pcp:13100kB free_cma:0kB [ 297.796423][T12941] lowmem_reserve[]: 0 0 0 0 0 [ 297.799995][T12941] Node 0 DMA: 27*4kB (UM) 35*8kB (UM) 14*16kB (UM) 9*32kB (UM) 4*64kB (UM) 3*128kB (M) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2052kB [ 297.807654][T12941] Node 0 DMA32: 225*4kB (UE) 101*8kB (UE) 35*16kB (UME) 41*32kB (UME) 27*64kB (UME) 10*128kB (UME) 5*256kB (UME) 4*512kB (UME) 5*1024kB (UM) 0*2048kB 0*4096kB = 15036kB [ 297.813925][T12941] Node 1 DMA32: 259*4kB (UME) 52*8kB (UME) 19*16kB (UME) 30*32kB (ME) 69*64kB (UME) 95*128kB (ME) 42*256kB (UME) 21*512kB (UME) 35*1024kB (UME) 10*2048kB (UME) 5*4096kB (UM) = 117596kB [ 297.821093][T12941] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 297.824388][T12941] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 297.828097][T12941] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 297.831268][T12941] Node 1 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 297.834169][T12941] 50167 total pagecache pages [ 297.835961][T12941] 146 pages in swap cache [ 297.837553][T12941] Free swap = 122340kB [ 297.838895][T12941] Total swap = 124996kB [ 297.853509][T12941] 524155 pages RAM [ 297.855320][T12941] 0 pages HighMem/MovableOnly [ 297.858485][T12941] 211540 pages reserved [ 297.859819][T12941] 0 pages cma reserved [ 297.913294][T12961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1550'. [ 298.217624][ T7271] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 298.224898][ T2321] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 298.375719][ T2321] usb 7-1: Using ep0 maxpacket: 16 [ 298.380315][ T2321] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.385259][ T2321] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 298.390572][ T2321] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 298.396716][ T2321] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.404854][ T2321] usb 7-1: config 0 descriptor?? [ 298.410843][T12998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.428115][T12998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.449369][T12970] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 298.466319][ T7271] usb 8-1: unable to get BOS descriptor or descriptor too short [ 298.470888][ T7271] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 298.473457][ T7271] usb 8-1: can't read configurations, error -71 [ 298.574036][ T5834] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 298.582168][ T5834] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 298.691451][T13028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1553'. [ 298.713312][T13028] gretap0: left promiscuous mode [ 298.739986][T13028] macvlan2: left promiscuous mode [ 298.741631][T13028] bond1: left promiscuous mode [ 298.743595][T13028] A link change request failed with some changes committed already. Interface syzkaller1 may have been left with an inconsistent configuration, please check. [ 298.887041][ T2321] usbhid 7-1:0.0: can't add hid device: -71 [ 298.892482][ T2321] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 298.905373][ T2321] usb 7-1: USB disconnect, device number 20 [ 298.960011][T13054] 9p: Bad value for 'rfdno' [ 298.972411][T13056] binder: 13055:13056 ioctl c00c6211 0 returned -14 [ 299.164116][T13074] 9p: Bad value for 'rfdno' [ 299.177343][T13074] 9p: Bad value for 'rfdno' [ 300.018517][T13100] binder_alloc: 13099: binder_alloc_buf, no vma [ 300.380440][T13115] FAULT_INJECTION: forcing a failure. [ 300.380440][T13115] name failslab, interval 1, probability 0, space 0, times 0 [ 300.389618][T13115] CPU: 3 UID: 0 PID: 13115 Comm: syz.3.1577 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.389639][T13115] Tainted: [L]=SOFTLOCKUP [ 300.389643][T13115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 300.389650][T13115] Call Trace: [ 300.389655][T13115] [ 300.389660][T13115] dump_stack_lvl+0x100/0x190 [ 300.389680][T13115] should_fail_ex.cold+0x5/0xa [ 300.389694][T13115] should_failslab+0xc2/0x120 [ 300.389711][T13115] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 300.389727][T13115] ? __alloc_skb+0x140/0x710 [ 300.389746][T13115] __alloc_skb+0x140/0x710 [ 300.389760][T13115] ? __alloc_skb+0x5b7/0x710 [ 300.389775][T13115] ? __pfx___alloc_skb+0x10/0x10 [ 300.389789][T13115] ? genl_rcv_msg+0x4be/0x800 [ 300.389808][T13115] netlink_ack+0x117/0xb80 [ 300.389829][T13115] netlink_rcv_skb+0x333/0x420 [ 300.389842][T13115] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.389858][T13115] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 300.389876][T13115] ? netlink_deliver_tap+0x1ae/0xcc0 [ 300.389891][T13115] genl_rcv+0x28/0x40 [ 300.389904][T13115] netlink_unicast+0x585/0x850 [ 300.389919][T13115] ? __pfx_netlink_unicast+0x10/0x10 [ 300.389936][T13115] netlink_sendmsg+0x8b0/0xda0 [ 300.389951][T13115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.389966][T13115] ? apparmor_socket_sendmsg+0x15b/0x270 [ 300.389982][T13115] ____sys_sendmsg+0xa4d/0xbe0 [ 300.389994][T13115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.390008][T13115] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.390027][T13115] ___sys_sendmsg+0x190/0x1e0 [ 300.390041][T13115] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.390061][T13115] ? find_held_lock+0x2b/0x80 [ 300.390084][T13115] __sys_sendmsg+0x160/0x210 [ 300.390101][T13115] ? __pfx___sys_sendmsg+0x10/0x10 [ 300.390121][T13115] ? __pfx_ksys_write+0x10/0x10 [ 300.390135][T13115] __do_fast_syscall_32+0xe7/0x970 [ 300.390153][T13115] ? lockdep_hardirqs_on+0x78/0x100 [ 300.390168][T13115] do_fast_syscall_32+0x32/0x70 [ 300.390184][T13115] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 300.390200][T13115] RIP: 0023:0xf7f33fec [ 300.390215][T13115] Code: Unable to access opcode bytes at 0xf7f33fc2. [ 300.390220][T13115] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 300.390232][T13115] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 300.390239][T13115] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 300.390246][T13115] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 300.390252][T13115] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 300.390259][T13115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 300.390273][T13115] [ 300.493701][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 300.493713][ T42] audit: type=1326 audit(1785688093.074:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13109 comm="syz.2.1574" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 300.502572][ T42] audit: type=1326 audit(1785688093.074:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13109 comm="syz.2.1574" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 300.559539][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 300.564131][ T9] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 300.572129][ T42] audit: type=1326 audit(1785688093.154:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13109 comm="syz.2.1574" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 300.594322][ T42] audit: type=1326 audit(1785688093.154:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13109 comm="syz.2.1574" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 300.612872][ T42] audit: type=1326 audit(1785688093.154:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13109 comm="syz.2.1574" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 300.630504][ T42] audit: type=1326 audit(1785688093.154:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13109 comm="syz.2.1574" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 301.145753][ T42] audit: type=1326 audit(1785688093.734:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13109 comm="syz.2.1574" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 301.153947][ T42] audit: type=1326 audit(1785688093.734:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13109 comm="syz.2.1574" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 301.772858][T13113] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request [ 301.843496][ T42] audit: type=1326 audit(1785688094.424:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13109 comm="syz.2.1574" exe="/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 301.850855][ T42] audit: type=1326 audit(1785688094.434:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13109 comm="syz.2.1574" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 302.141157][ T5892] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 302.152093][ T5892] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 302.179341][T13227] fuse: Bad value for 'fd' [ 302.236854][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1590'. [ 302.252895][T13234] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1590'. [ 302.259274][T13234] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1590'. [ 302.440384][T13192] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input28 [ 303.412152][T13290] openvswitch: netlink: Key 3 has unexpected len 16 expected 4 [ 303.442034][T13293] block2mtd: device name too long [ 303.457598][T13296] netlink: 'syz.4.1603': attribute type 1 has an invalid length. [ 303.463466][T13296] macvtap0: Device is already in use. [ 303.466724][T13296] macvtap0: Device is already in use. [ 303.626918][T13310] syzkaller0: entered promiscuous mode [ 303.628681][T13310] syzkaller0: entered allmulticast mode [ 303.848322][T13283] virt_wifi0 speed is unknown, defaulting to 1000 [ 303.908908][T13283] lo speed is unknown, defaulting to 1000 [ 304.769434][T13342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1609'. [ 306.033607][T13412] siw: device registration error -23 [ 306.385318][ T5834] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 306.545826][ T5834] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.549435][ T5834] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 306.552375][ T5834] usb 9-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 306.558807][ T5834] usb 9-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 306.561723][ T5834] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.564828][ T5834] usb 9-1: Product: syz [ 306.566563][ T5834] usb 9-1: Manufacturer: syz [ 306.568223][ T5834] usb 9-1: SerialNumber: syz [ 306.799458][ T5755] Bluetooth: hci3: unknown advertising packet type: 0x6b [ 306.799586][ T5755] Bluetooth: hci3: unknown advertising packet type: 0x40 [ 306.803096][ T5755] Bluetooth: hci3: Dropping invalid advertising data [ 306.811523][ T5755] Bluetooth: hci3: Malformed LE Event: 0x02 [ 306.870418][ T5834] usb 9-1: USB disconnect, device number 3 [ 306.911877][T11757] udevd[11757]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.028048][T13467] tipc: Enabled bearer , priority 0 [ 307.032552][T13466] tipc: Disabling bearer [ 307.474424][ T5834] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 307.475283][T13498] i2c i2c-0: Failed to register i2c client wcd9390-usbss at 0x04 (-16) [ 307.604346][ T5834] usb 8-1: device descriptor read/64, error -71 [ 307.844305][ T5834] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 307.984326][ T5834] usb 8-1: device descriptor read/64, error -71 [ 308.094688][ T5834] usb usb8-port1: attempt power cycle [ 308.353111][T13528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1642'. [ 308.370774][T13528] bond2: entered promiscuous mode [ 308.372940][T13528] 8021q: adding VLAN 0 to HW filter on device bond2 [ 308.384856][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1642'. [ 308.395637][T13528] tipc: Enabling of bearer rejected, already enabled [ 308.454495][ T5834] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 308.485303][ T5834] usb 8-1: device descriptor read/8, error -71 [ 308.734522][ T5834] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 308.755117][ T5834] usb 8-1: device descriptor read/8, error -71 [ 308.865187][ T5834] usb usb8-port1: unable to enumerate USB device [ 309.206001][T13584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1651'. [ 309.227553][T13584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.250851][T13584] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 309.260540][T13584] bond0: entered promiscuous mode [ 309.262140][T13584] dummy0: entered promiscuous mode [ 309.264079][T13584] bond0: entered allmulticast mode [ 309.268829][T13584] dummy0: entered allmulticast mode [ 309.335783][T13628] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 309.337897][T13628] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 309.341016][T13628] vhci_hcd vhci_hcd.0: Device attached [ 309.389485][T13637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1653'. [ 309.442258][T13640] binder_alloc: 13639: binder_alloc_buf, no vma [ 309.624846][ T5847] usb 42-1: SetAddress Request (10) to port 0 [ 309.627037][ T5847] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 309.871417][T13629] vhci_hcd: connection reset by peer [ 309.915262][ T8049] vhci_hcd vhci_hcd.2: stop threads [ 309.916985][ T8049] vhci_hcd vhci_hcd.2: release socket [ 309.918826][ T8049] vhci_hcd vhci_hcd.2: disconnect device [ 310.697821][T13658] netlink: 'syz.3.1659': attribute type 1 has an invalid length. [ 310.700300][T13658] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 310.702529][T13658] IPv6: NLM_F_CREATE should be set when creating new route [ 310.705043][T13658] IPv6: NLM_F_CREATE should be set when creating new route [ 310.713581][T13658] netlink: 'syz.3.1659': attribute type 1 has an invalid length. [ 310.720765][T13658] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 310.772527][T13671] binder_alloc: 13670: binder_alloc_buf, no vma [ 310.778722][T13666] netlink: 'syz.3.1659': attribute type 1 has an invalid length. [ 310.782034][T13666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1659'. [ 311.224358][ T2321] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 311.355276][ T2321] usb 7-1: device descriptor read/64, error -71 [ 311.578345][T13695] virt_wifi0 speed is unknown, defaulting to 1000 [ 311.592377][T13695] lo speed is unknown, defaulting to 1000 [ 311.844520][ T9] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 311.864394][ T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 312.003358][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 312.024291][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 312.028666][ T24] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.043316][ T9] usb 8-1: config 0 has no interfaces? [ 312.050420][ T24] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.056049][ T9] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 312.056612][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 312.059762][ T9] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 312.066861][ T9] usb 8-1: Product: syz [ 312.068874][ T9] usb 8-1: Manufacturer: syz [ 312.069787][ T24] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 312.070975][ T9] usb 8-1: SerialNumber: syz [ 312.081485][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.091683][ T24] usb 9-1: config 0 descriptor?? [ 312.123785][ T9] usb 8-1: config 0 descriptor?? [ 312.517796][ T24] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 312.520196][ T24] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 312.522448][ T24] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 312.525130][ T24] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 312.527593][ T24] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 312.530296][ T24] mcp2221 0003:04D8:00DD.0010: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 312.683821][ T2321] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 312.720415][ T24] usb 9-1: USB disconnect, device number 4 [ 313.006446][ T9] usb 8-1: USB disconnect, device number 30 [ 313.124433][ T2321] usb 7-1: device descriptor read/64, error -71 [ 313.236589][ T2321] usb usb7-port1: attempt power cycle [ 313.294906][T13795] binder_alloc: 13794: binder_alloc_buf, no vma [ 313.581483][T13822] FAULT_INJECTION: forcing a failure. [ 313.581483][T13822] name failslab, interval 1, probability 0, space 0, times 0 [ 313.585075][ T2321] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 313.590420][T13822] CPU: 0 UID: 0 PID: 13822 Comm: syz.3.1681 Tainted: G L syzkaller #0 PREEMPT(full) [ 313.590450][T13822] Tainted: [L]=SOFTLOCKUP [ 313.590458][T13822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 313.590469][T13822] Call Trace: [ 313.590476][T13822] [ 313.590483][T13822] dump_stack_lvl+0x100/0x190 [ 313.590515][T13822] should_fail_ex.cold+0x5/0xa [ 313.590536][T13822] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 313.590559][T13822] should_failslab+0xc2/0x120 [ 313.590587][T13822] kmem_cache_alloc_noprof+0x91/0x6a0 [ 313.590614][T13822] ? skb_clone+0x190/0x400 [ 313.590649][T13822] skb_clone+0x190/0x400 [ 313.590678][T13822] netlink_deliver_tap+0xaed/0xcc0 [ 313.590705][T13822] netlink_unicast+0x62b/0x850 [ 313.590731][T13822] ? __pfx_netlink_unicast+0x10/0x10 [ 313.590760][T13822] netlink_sendmsg+0x8b0/0xda0 [ 313.590787][T13822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.590812][T13822] ? apparmor_socket_sendmsg+0x15b/0x270 [ 313.590839][T13822] ____sys_sendmsg+0xa4d/0xbe0 [ 313.590858][T13822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.590883][T13822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 313.590914][T13822] ___sys_sendmsg+0x190/0x1e0 [ 313.590960][T13822] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.590994][T13822] ? find_held_lock+0x2b/0x80 [ 313.591034][T13822] __sys_sendmsg+0x160/0x210 [ 313.591062][T13822] ? __pfx___sys_sendmsg+0x10/0x10 [ 313.591097][T13822] ? __pfx_ksys_write+0x10/0x10 [ 313.591119][T13822] __do_fast_syscall_32+0xe7/0x970 [ 313.591150][T13822] ? lockdep_hardirqs_on+0x78/0x100 [ 313.591177][T13822] do_fast_syscall_32+0x32/0x70 [ 313.591202][T13822] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 313.591225][T13822] RIP: 0023:0xf7f33fec [ 313.591255][T13822] Code: Unable to access opcode bytes at 0xf7f33fc2. [ 313.591264][T13822] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 313.591283][T13822] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 313.591296][T13822] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 313.591306][T13822] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 313.591316][T13822] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 313.591328][T13822] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 313.591351][T13822] [ 313.591374][T13822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1681'. [ 313.625980][ T2321] usb 7-1: device descriptor read/8, error -71 [ 313.646599][T13813] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 313.698640][T13813] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 313.701061][T13813] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 313.703013][T13813] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 313.735822][T13813] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 313.873435][T13845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1689'. [ 313.907629][ T2321] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 313.924633][T13853] binder_alloc: 13852: binder_alloc_buf, no vma [ 314.099467][T13875] netlink: 'syz.0.1690': attribute type 10 has an invalid length. [ 314.107762][T13875] syz_tun: entered promiscuous mode [ 314.134694][ T2321] usb 7-1: device not accepting address 24, error -71 [ 314.145962][ T2321] usb usb7-port1: unable to enumerate USB device [ 314.214554][ T34] usb 8-1: new full-speed USB device number 31 using dummy_hcd [ 314.386583][ T34] usb 8-1: not running at top speed; connect to a high speed hub [ 314.397572][ T34] usb 8-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.40 [ 314.404279][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.414414][ T34] usb 8-1: Product: 钚៛௓Ḣ끪紺궏ං芺痹䢜捧浪ﱀ裟⼜뭣鄺牊ᴁ畋㰠楄撯⧜펃恈篐ᙡ愛팂츁䍷〠❝㨟ᎈɏꃱ矸죠됬椉솱ꮜワ턘ꡪ좆⢬춫驷㿻妔鼶碚ﮬⲕ℮퐝文㌺ህ냕扗辯뒕Ⴂ븅ꔞⳄԌ䂪ᇺ⽜㳜ᢃ省忥놞픊깸戨阖벘怄犟뫌䶾ҽ⏼诱ጴ뜟㲽즷ﰺ䰄׆ᒠ馫ٛ麓鿻 [ 314.444303][ T34] usb 8-1: Manufacturer: 㥐苷꣥㈙᪁₠Ԙ⍩ฉ֩퓘渦냭ꬊ쓍ꙑ냁뛕㫣⏿뤴᪘쉪圶쬒꒽἖뱤쾁᱑し慔ꏑ﬇낤谗懼贂松㖃뫽鑞܀驥볝ꆎ⚠ձ歖ꕞ轷簒刣璮訒醝폵诒텇蠚揱㠭瘐偱༝ﶖ켢﷣㮧䩭凌㊗敌꫘⣈界ᖈӱ걦䗟昧눧₼餉㱩丸隍킋꼲헎籱윢阏ㅶ盘鲠儌郎녤崤硸悮﫽 [ 314.459994][ T34] usb 8-1: SerialNumber: ৶Ⰾ牙ٷ잍㨯ᯔ퓜姄鞥❟⑇螋⸤廛ᗵ巵蒗규⚷⁇ꮐ青策ˌ芃禐닆鼵喹̸䙺컍䬀툑碢덒愣♍琩 [ 314.704744][ T5847] usb 42-1: device descriptor read/8, error -110 [ 314.754794][ T6047] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 314.917584][T13897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1700'. [ 314.927221][ T6047] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 314.929590][ T6047] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 314.947565][ T6047] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 314.961415][ T6047] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 314.968832][ T6047] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 314.980198][ T6047] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 314.982474][ T6047] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 314.997581][ T6047] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 315.015681][ T6047] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 315.029407][ T6047] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 315.038572][T13894] overlayfs: failed to clone lowerpath [ 315.039378][ T6047] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 315.056023][ T6047] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 315.073879][ T6047] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 315.085251][ T6047] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 315.096998][ T6047] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 315.107745][ T5847] usb usb42-port1: attempt power cycle [ 315.118195][ T6047] usb 7-1: string descriptor 0 read error: -22 [ 315.123301][ T6047] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 315.131057][ T6047] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.163101][ T6047] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 315.474421][ T2321] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 315.636363][ T2321] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.641220][ T2321] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 315.645183][ T2321] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 315.649835][ T2321] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.659113][ T2321] usb 9-1: config 0 descriptor?? [ 315.664409][ T5755] Bluetooth: hci1: command 0x040f tx timeout [ 315.667749][ T5847] usb usb42-port1: unable to enumerate USB device [ 315.754525][ T5755] Bluetooth: hci3: command 0x0c1a tx timeout [ 315.754580][ T5748] Bluetooth: hci2: command 0x040f tx timeout [ 315.852479][T13931] fuse: Bad value for 'fd' [ 315.867426][ T2321] usb 9-1: string descriptor 0 read error: -71 [ 315.879177][ T2321] usb 9-1: USB disconnect, device number 5 [ 316.095349][T13948] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1714'. [ 316.334358][T13961] netlink: 'syz.0.1720': attribute type 62 has an invalid length. [ 316.440471][T13964] Cannot find set identified by id 0 to match [ 316.713632][T13968] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1723'. [ 317.023715][ T34] usbhid 8-1:1.0: can't add hid device: -71 [ 317.026679][ T34] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 317.039472][ T34] usb 8-1: USB disconnect, device number 31 [ 317.107680][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.269388][T13982] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 317.288473][T13982] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 317.302415][T13982] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 317.523422][ T7271] usb 7-1: USB disconnect, device number 25 [ 317.573232][T14005] binder_alloc: 14003: binder_alloc_buf, no vma [ 318.103797][T14021] dlm: Using TCP for communications [ 318.528693][T14029] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1733'. [ 318.954353][ T5847] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 319.105470][ T5847] usb 9-1: Using ep0 maxpacket: 32 [ 319.111325][ T5847] usb 9-1: config index 0 descriptor too short (expected 15270, got 18) [ 319.117550][ T5847] usb 9-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 319.121395][ T5847] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.125920][ T5847] usb 9-1: Product: syz [ 319.127586][ T5847] usb 9-1: Manufacturer: syz [ 319.129494][ T5847] usb 9-1: SerialNumber: syz [ 319.140620][ T5847] usb 9-1: config 0 descriptor?? [ 319.154039][ T5847] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 319.158533][ T5847] dvb-usb: bulk message failed: -22 (4/0) [ 319.165430][ T5847] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 319.168919][ T5847] dvb-usb: bulk message failed: -22 (5/0) [ 319.170740][ T5847] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 319.179758][ T5847] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 319.183064][ T5847] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 319.187293][ T5847] usb 9-1: media controller created [ 319.197143][ T5847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 319.210372][ T5847] usb 9-1: selecting invalid altsetting 3 [ 319.212953][ T5847] ttusb2: set interface to alts=3 failed [ 319.238649][ T5847] DVB: Unable to find symbol tda10086_attach() [ 319.240711][ T5847] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 319.245405][ T5847] dvb-usb: bulk message failed: -22 (4/0) [ 319.247810][ T5847] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 319.251950][ T5847] dvb-usb: bulk message failed: -22 (5/0) [ 319.257273][ T5847] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 319.261499][ T5847] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 319.344672][ T5755] Bluetooth: hci2: command 0x040f tx timeout [ 319.346984][ T5748] Bluetooth: hci3: command 0x0c1a tx timeout [ 319.354474][ T5748] Bluetooth: hci1: command 0x040f tx timeout [ 319.358537][ T5847] usb 9-1: USB disconnect, device number 6 [ 319.463940][ T5847] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 319.477853][T14059] binder: BINDER_SET_CONTEXT_MGR already set [ 319.484155][T14059] binder: 14056:14059 ioctl 4018620d 80004a80 returned -16 [ 319.676823][T14080] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1744'. [ 319.765286][T14088] binder_alloc: 14087: binder_alloc_buf, no vma [ 319.890783][T14103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1751'. [ 320.241854][T14125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1756'. [ 320.665574][T14147] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1764'. [ 320.705103][T14095] ================================================================== [ 320.708263][T14095] BUG: KASAN: use-after-free in release_card_device+0x17d/0x1a0 [ 320.711203][T14095] Read of size 1 at addr ffff88804b714909 by task syz.2.1751/14095 [ 320.715701][T14095] [ 320.716868][T14095] CPU: 3 UID: 0 PID: 14095 Comm: syz.2.1751 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.716887][T14095] Tainted: [L]=SOFTLOCKUP [ 320.716891][T14095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 320.716898][T14095] Call Trace: [ 320.716904][T14095] [ 320.716909][T14095] dump_stack_lvl+0x100/0x190 [ 320.716927][T14095] print_report+0x13d/0x4b0 [ 320.716945][T14095] ? __virt_addr_valid+0x239/0x430 [ 320.716959][T14095] ? release_card_device+0x17d/0x1a0 [ 320.716972][T14095] kasan_report+0xdf/0x1c0 [ 320.716988][T14095] ? release_card_device+0x17d/0x1a0 [ 320.717002][T14095] release_card_device+0x17d/0x1a0 [ 320.717014][T14095] ? __pfx_release_card_device+0x10/0x10 [ 320.717027][T14095] device_release+0xd2/0x270 [ 320.717041][T14095] kobject_put+0x1f7/0x640 [ 320.717063][T14095] put_device+0x1f/0x30 [ 320.717074][T14095] snd_card_file_remove+0x38f/0x560 [ 320.717088][T14095] snd_pcm_oss_release+0x217/0x300 [ 320.717101][T14095] ? __pfx_snd_disconnect_release+0x10/0x10 [ 320.717114][T14095] __fput+0x3ff/0xb50 [ 320.717129][T14095] task_work_run+0x150/0x240 [ 320.717147][T14095] ? __pfx_task_work_run+0x10/0x10 [ 320.717165][T14095] exit_to_user_mode_loop+0x1d8/0x6f0 [ 320.717177][T14095] ? rcu_is_watching+0x12/0xc0 [ 320.717193][T14095] __do_fast_syscall_32+0x701/0x970 [ 320.717214][T14095] ? lockdep_hardirqs_on+0x78/0x100 [ 320.717228][T14095] do_fast_syscall_32+0x32/0x70 [ 320.717244][T14095] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 320.717259][T14095] RIP: 0023:0xf7f22fec [ 320.717275][T14095] Code: Unable to access opcode bytes at 0xf7f22fc2. [ 320.717280][T14095] RSP: 002b:00000000ff95f99c EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 320.717292][T14095] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 320.717299][T14095] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 320.717306][T14095] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 320.717313][T14095] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 320.717319][T14095] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.717330][T14095] [ 320.717334][T14095] [ 320.787241][T14095] The buggy address belongs to the physical page: [ 320.789752][T14095] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4b714 [ 320.793415][T14095] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 320.796113][T14095] raw: 04fff00000000000 ffffea00010c6b08 ffff88802b3417c0 0000000000000000 [ 320.798805][T14095] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 320.801705][T14095] page dumped because: kasan: bad access detected [ 320.803738][T14095] page_owner tracks the page as freed [ 320.805433][T14095] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 17283626616, free_ts 320704983431 [ 320.810647][T14095] post_alloc_hook+0xfd/0x120 [ 320.812165][T14095] get_page_from_freelist+0xf48/0x3530 [ 320.813903][T14095] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 320.815854][T14095] alloc_pages_mpol+0x1fb/0x540 [ 320.817600][T14095] ___kmalloc_large_node+0xe5/0x120 [ 320.819824][T14095] __kmalloc_large_node_noprof+0x1c/0x70 [ 320.822173][T14095] __kmalloc_node_track_caller_noprof+0x5ac/0x830 [ 320.824937][T14095] __devres_alloc_node+0x6e/0x1e0 [ 320.827087][T14095] snd_devm_card_new+0x9d/0x190 [ 320.829152][T14095] loopback_probe+0x140/0x11a0 [ 320.831150][T14095] platform_probe+0x106/0x1d0 [ 320.833106][T14095] really_probe+0x241/0xa60 [ 320.835045][T14095] __driver_probe_device+0x20e/0x450 [ 320.837147][T14095] driver_probe_device+0x4a/0x140 [ 320.839261][T14095] __device_attach_driver+0x1df/0x320 [ 320.841458][T14095] bus_for_each_drv+0x159/0x1e0 [ 320.843379][T14095] page last free pid 14119 tgid 14118 stack trace: [ 320.845781][T14095] __free_frozen_pages+0x79f/0x1090 [ 320.847741][T14095] release_nodes+0xc3/0x120 [ 320.849409][T14095] devres_release_all+0x112/0x180 [ 320.851004][T14095] device_unbind_cleanup+0x81/0x270 [ 320.852866][T14095] device_release_driver_internal+0x4c4/0x620 [ 320.855403][T14095] unbind_store+0xf8/0x110 [ 320.857263][T14095] drv_attr_store+0x74/0xb0 [ 320.859228][T14095] sysfs_kf_write+0xf2/0x150 [ 320.861147][T14095] kernfs_fop_write_iter+0x3e0/0x5f0 [ 320.863411][T14095] vfs_write+0x6ac/0x1050 [ 320.865250][T14095] ksys_write+0x12a/0x250 [ 320.866975][T14095] __do_fast_syscall_32+0xe7/0x970 [ 320.868597][T14095] do_fast_syscall_32+0x32/0x70 [ 320.870578][T14095] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 320.873186][T14095] [ 320.874191][T14095] Memory state around the buggy address: [ 320.876391][T14095] ffff88804b714800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 320.879595][T14095] ffff88804b714880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 320.882940][T14095] >ffff88804b714900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 320.886281][T14095] ^ [ 320.888108][T14095] ffff88804b714980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 320.891415][T14095] ffff88804b714a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 320.894768][T14095] ================================================================== [ 320.915314][T14095] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 320.918172][T14095] CPU: 0 UID: 0 PID: 14095 Comm: syz.2.1751 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.922358][T14095] Tainted: [L]=SOFTLOCKUP [ 320.924101][T14095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 320.928026][T14095] Call Trace: [ 320.929341][T14095] [ 320.930514][T14095] dump_stack_lvl+0x100/0x190 [ 320.932376][T14095] vpanic+0x552/0x970 [ 320.933964][T14095] ? __pfx_vpanic+0x10/0x10 [ 320.935762][T14095] ? release_card_device+0x17d/0x1a0 [ 320.937816][T14095] panic+0xd1/0xe0 [ 320.939291][T14095] ? __pfx_panic+0x10/0x10 [ 320.941046][T14095] ? release_card_device+0x17d/0x1a0 [ 320.943134][T14095] ? preempt_schedule_common+0x42/0xc0 [ 320.945277][T14095] ? check_panic_on_warn+0x1f/0x90 [ 320.947305][T14095] check_panic_on_warn.cold+0x19/0x34 [ 320.949388][T14095] end_report.part.0+0x3a/0x90 [ 320.951235][T14095] kasan_report.cold+0xe/0x18 [ 320.953101][T14095] ? release_card_device+0x17d/0x1a0 [ 320.955178][T14095] release_card_device+0x17d/0x1a0 [ 320.957107][T14095] ? __pfx_release_card_device+0x10/0x10 [ 320.959123][T14095] device_release+0xd2/0x270 [ 320.960775][T14095] kobject_put+0x1f7/0x640 [ 320.962384][T14095] put_device+0x1f/0x30 [ 320.963749][T14095] snd_card_file_remove+0x38f/0x560 [ 320.965413][T14095] snd_pcm_oss_release+0x217/0x300 [ 320.967047][T14095] ? __pfx_snd_disconnect_release+0x10/0x10 [ 320.968913][T14095] __fput+0x3ff/0xb50 [ 320.970190][T14095] task_work_run+0x150/0x240 [ 320.971676][T14095] ? __pfx_task_work_run+0x10/0x10 [ 320.973303][T14095] exit_to_user_mode_loop+0x1d8/0x6f0 [ 320.975137][T14095] ? rcu_is_watching+0x12/0xc0 [ 320.976653][T14095] __do_fast_syscall_32+0x701/0x970 [ 320.978289][T14095] ? lockdep_hardirqs_on+0x78/0x100 [ 320.979945][T14095] do_fast_syscall_32+0x32/0x70 [ 320.981479][T14095] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 320.983503][T14095] RIP: 0023:0xf7f22fec [ 320.984810][T14095] Code: Unable to access opcode bytes at 0xf7f22fc2. [ 320.986867][T14095] RSP: 002b:00000000ff95f99c EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 320.989462][T14095] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 320.991940][T14095] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 320.994400][T14095] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 320.996876][T14095] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 320.999357][T14095] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 321.001816][T14095] [ 321.003482][T14095] Kernel Offset: disabled [ 321.004870][T14095] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:11:30 Registers: info registers vcpu 0 CPU#0 RAX=0000000000604bfd RBX=ffffffff8e891480 RCX=ffffffff8bb922d5 RDX=0000000000000000 RSI=ffffffff8e1a99ad RDI=ffffffff8c400a80 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000001 R9 =ffffed100564678d R10=ffff88802b233c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bb9089f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000033b20ff8 CR3=000000004845d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88802b33c680 RCX=ffffc90000590ddc RDX=0000000000000000 RSI=ffffffff8e183b3c RDI=ffffc90000590e90 RBP=0000000000000001 RSP=ffffc90000590e18 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=000000000000aa53 R12=dffffc0000000000 R13=ffff88801c742540 R14=ffffffff81ef0a7d R15=0000000000000000 RIP=ffffffff81ef09d5 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73cb108 CR3=00000000607d8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000606c0000 Opmask01=0000000000000000 Opmask02=0000000027fffeff Opmask03=0000000000000000 Opmask04=00000000fec0e0c0 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000559ecc5c6a00 0000559ecc5c6a00 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000559ecc5b88c0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2221f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2221f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff0000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326edbf2fc103 737326edbf287a53 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737332 737326edbf2f3c73 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000550000706f6f 6c615f646e733a6d 726f6674616c703d 5341494c41444f4d ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005500004d5252 515c5f59534e0750 4f525b495c514d00 5341494c41444f4d ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 008896e18c95e788 a3e298abea8c95e6 978ae38c87e5ba85 efada9e4a7aee333 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 61785c3762785c66 65785ca2bcec96b6 ef9dbce0b181e590 98e7ada0e3b18fe6 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9aa0e88785ed92af e8b58fedb88aefac aaee9d86e992a8e8 ae92e7a388e592b0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e7b7bde89e95eabc 9cef96ade6b1d5a0 9ae28e86eaa78eee 9db3eba5a9e980dc ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b7bde89e95eabc9c ef96ade6b1d5a09a e28e86eaa78eee9d b3eba5a9e980dc9e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=ffffffff8ebe8000 RCX=ffffffff91c57401 RDX=0000000000000000 RSI=0000000000000001 RDI=ffffffff8c400a80 RBP=ffffffff81b806be RSP=ffffc90000538910 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=000000000000c88e R12=ffff88801c7fca80 R13=ffffc900005389c8 R14=0000000000000202 R15=0000000000000002 RIP=ffffffff81e561af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ddf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000563740b8a000 CR3=000000004c3fd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a131f5 RDI=ffffffff9b9f71a0 RBP=ffffffff9b9f7160 RSP=ffffc90008b4f6a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3430383838666666 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b6f71e5 R15=ffffffff85a13190 RIP=ffffffff85a1321f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096edf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7429cec CR3=0000000077402000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000500000258 00000190ffffffdb ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000