last executing test programs: 6.72176677s ago: executing program 0 (id=1108): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000a40)={&(0x7f00000000c0)=[{0x18, 0x8611, 0x1, &(0x7f0000000040)='\x00'}], 0x1}) 5.519854952s ago: executing program 0 (id=1117): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.590789471s ago: executing program 0 (id=1123): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5, 0x480082) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0x98, &(0x7f0000000200)=ANY=[@ANYBLOB="12011003000000106b1d01014000010203010902860003010140750904000000010100000a24010600080201020904010000010200000904010101010200000b2402"], 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60980, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) r3 = socket(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000000740)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000400)="1b5e", 0x2}], 0x1}, 0x20008040) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 4.228435971s ago: executing program 1 (id=1127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x7, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x10) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x1, 0x2, 0xa}, {0x2}], 0x10, 0x8}, 0x94) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1000000004000000f10296430100000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="100000000400000004000000"], 0x48) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x32}, 0x20) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r2, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)}], 0x1}}], 0x3, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x10, &(0x7f0000000000), 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 4.186194573s ago: executing program 1 (id=1128): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000002000), 0x7, 0x0) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f0000002080)={0x0, 0x4, 0x3, '\x00', &(0x7f0000002040)=0x7}) r3 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0) io_uring_enter(r3, 0x7277, 0x0, 0x0, 0x0, 0x0) 4.030153051s ago: executing program 0 (id=1129): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000002000), 0x7, 0x0) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f0000002080)={0x0, 0x4, 0x3, '\x00', &(0x7f0000002040)=0x7}) r3 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0) io_uring_enter(r3, 0x7277, 0x0, 0x0, 0x0, 0x0) 3.328309069s ago: executing program 1 (id=1132): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x844}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.163866609s ago: executing program 0 (id=1133): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x3, @loopback, 0x3}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="1201410130f56920ac05190272f001020301"], 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc010643a, 0x0) shutdown(r0, 0x1) 2.711184539s ago: executing program 3 (id=1137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000000008010900000000000000000700000e090001007379"], 0x44}, 0x1, 0x0, 0x0, 0x2000c084}, 0x8c080) 2.708745843s ago: executing program 3 (id=1145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x7, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x10) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x1, 0x2, 0xa}, {0x2}], 0x10, 0x8}, 0x94) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1000000004000000f10296430100000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="100000000400000004000000"], 0x48) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x32}, 0x20) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)}], 0x1}}], 0x3, 0x0) close(0xffffffffffffffff) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 2.458482524s ago: executing program 3 (id=1139): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r0, 0x501, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x10) 2.391541181s ago: executing program 3 (id=1140): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)={0x88, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x69, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @default, 0x4001, @void, @val, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0x10, 0x97, 0x0, 0x2}}, @void, @val={0x5, 0x3, {0x0, 0x37, 0x2}}, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x3, 0x0, {0x2, 0xf34, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3}, 0x7, 0x6, 0x4}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x6, "7d1bf50528ba"}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x404000) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x2, 0x0, &(0x7f0000000180)="aff7", 0x0, 0x7}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d8d60bd0111a8a237a1536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798bbe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9cde5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4d57b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d050331ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d7441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656d9a28f81f6a9465aec94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be184d4ebb942f99581a6fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bbb4ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855cb18b23517ca935a0fa1b630d70c4ca9acbaf0f08910f327fba506d834029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17ecd996d7dea947ee8ce55fa2dea5a000000000000000000000000006f0143d8d4038ef9f57d9e9336f3559558710d1febe7394cf8b02f59dab24d07db3d3c1ebff58f973ba3fc0c3e2fb2c2a674a188614520ecb1d22b49e3550263bf9d669fba198b65ee3512db0e710d2070b5847face7ada12c83f0aea3a8c9e84e6c7406732c952c5695d43bca33d481ef9d442697875e114f4c759af306b3fc8224fdec89bf199234bff488b81438cbe89e4cabdc007139352b5cb69d7987cdf37ab549b7639eeadafd5315d9c9f0e8c9223102e6deaca4ae9cb943a3ad188bcad95e8f97d7fee7c47ea50d222fe67085b4fb3fecfb67dec23b6ab5ee19a5ca5367bff058149acf90a6c4014dea2b763389f77301ea8574d112625300906f480c36f41f82f84991800c37863de349f7"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r8, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x91, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x50) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) 1.489467525s ago: executing program 3 (id=1141): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000002000), 0x7, 0x0) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f0000002080)={0x0, 0x4, 0x3, '\x00', &(0x7f0000002040)=0x7}) r3 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0) io_uring_enter(r3, 0x7277, 0x0, 0x0, 0x0, 0x0) 1.488252531s ago: executing program 1 (id=1150): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) 1.421710516s ago: executing program 2 (id=1143): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$sock(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="5b63392b41febc78767f2c24eb5b020ff1b2de985295fe3c67b1be419eeb1d13daf9", 0x22}], 0x1}, 0x8000) sendto$inet(r0, &(0x7f0000000200)=';', 0x1, 0x4004000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 1.421483949s ago: executing program 2 (id=1144): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) readv(r1, &(0x7f0000000340), 0x0) 1.420221399s ago: executing program 2 (id=1146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000000008010900000000000000000700000e0900010073797a30000000000600024088a800"], 0x44}, 0x1, 0x0, 0x0, 0x2000c084}, 0x8c080) 1.341149778s ago: executing program 2 (id=1147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x7, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x10) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x1, 0x2, 0xa}, {0x2}], 0x10, 0x8}, 0x94) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1000000004000000f10296430100000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="100000000400000004000000"], 0x48) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x32}, 0x20) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r2, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)}], 0x1}}], 0x3, 0x0) close(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 1.340897489s ago: executing program 2 (id=1148): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000002000), 0x7, 0x0) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f0000002080)={0x0, 0x4, 0x3, '\x00', &(0x7f0000002040)=0x7}) r3 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) io_uring_enter(r3, 0x7277, 0x0, 0x0, 0x0, 0x0) 955.949918ms ago: executing program 1 (id=1149): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)={0x88, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x69, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @default, 0x4001, @void, @val, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0x10, 0x97, 0x0, 0x2}}, @void, @val={0x5, 0x3, {0x0, 0x37, 0x2}}, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x3, 0x0, {0x2, 0xf34, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3}, 0x7, 0x6, 0x4}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x6, "7d1bf50528ba"}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x404000) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x2, 0x0, &(0x7f0000000180)="aff7", 0x0, 0x7}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d8d60bd0111a8a237a1536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798bbe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9cde5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4d57b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d050331ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d7441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656d9a28f81f6a9465aec94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be184d4ebb942f99581a6fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bbb4ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855cb18b23517ca935a0fa1b630d70c4ca9acbaf0f08910f327fba506d834029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17ecd996d7dea947ee8ce55fa2dea5a000000000000000000000000006f0143d8d4038ef9f57d9e9336f3559558710d1febe7394cf8b02f59dab24d07db3d3c1ebff58f973ba3fc0c3e2fb2c2a674a188614520ecb1d22b49e3550263bf9d669fba198b65ee3512db0e710d2070b5847face7ada12c83f0aea3a8c9e84e6c7406732c952c5695d43bca33d481ef9d442697875e114f4c759af306b3fc8224fdec89bf199234bff488b81438cbe89e4cabdc007139352b5cb69d7987cdf37ab549b7639eeadafd5315d9c9f0e8c9223102e6deaca4ae9cb943a3ad188bcad95e8f97d7fee7c47ea50d222fe67085b4fb3fecfb67dec23b6ab5ee19a5ca5367bff058149acf90a6c4014dea2b763389f77301ea8574d112625300906f480c36f41f82f84991800c37863de349f7"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r8, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x91, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x50) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) 571.747256ms ago: executing program 3 (id=1151): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000002000), 0x7, 0x0) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f0000002080)={0x0, 0x4, 0x3, '\x00', &(0x7f0000002040)=0x7}) r3 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0) socket(0x10, 0x3, 0x0) io_uring_enter(r3, 0x7277, 0x0, 0x0, 0x0, 0x0) 474.076603ms ago: executing program 2 (id=1152): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)={0x88, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x69, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @default, 0x4001, @void, @val, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0x10, 0x97, 0x0, 0x2}}, @void, @val={0x5, 0x3, {0x0, 0x37, 0x2}}, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x3, 0x0, {0x2, 0xf34, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3}, 0x7, 0x6, 0x4}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x6, "7d1bf50528ba"}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x404000) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x2, 0x0, &(0x7f0000000180)="aff7", 0x0, 0x7}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r8, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x91, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x50) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) 90.657176ms ago: executing program 0 (id=1153): r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0xdc) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r2 = socket(0x2, 0x2, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r3, 0xab03) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x14, 0x0) 0s ago: executing program 1 (id=1154): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5001e, 0x502}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x2008880) kernel console output (not intermixed with test programs): valid descriptor for endpoint zero, skipping [ 72.803779][ T6036] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.807962][ T6036] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 72.810778][ T6036] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.818061][ T6036] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 72.834237][ T6036] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 73.270653][ T6477] loop6: detected capacity change from 0 to 63 [ 73.275771][ T6118] buffer_io_error: 18134 callbacks suppressed [ 73.275780][ T6118] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.280830][ T6477] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.283376][ T6477] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.286156][ T6477] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.288800][ T6477] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.291450][ T6477] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.294153][ T6477] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.296882][ T6477] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.299504][ T6477] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.302141][ T6477] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.251369][ T6484] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 74.349036][ T6486] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 75.200670][ T1463] usb 7-1: USB disconnect, device number 4 [ 75.312585][ T59] usb 8-1: USB disconnect, device number 7 [ 75.378133][ T6494] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 75.654572][ T59] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 75.816501][ T59] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 75.821986][ T59] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 75.828451][ T59] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 75.834291][ T59] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 75.837295][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.848750][ T59] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 75.851339][ T59] usb 8-1: invalid MIDI out EP 0 [ 75.886854][ T59] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 76.051825][ T5871] usb 8-1: USB disconnect, device number 8 [ 76.427006][ T6508] input: syz0 as /devices/virtual/input/input22 [ 76.717475][ T6515] tipc: Started in network mode [ 76.719152][ T6515] tipc: Node identity a6366d27108f, cluster identity 4711 [ 76.721457][ T6515] tipc: Enabled bearer , priority 0 [ 76.725394][ T6515] syzkaller0: entered promiscuous mode [ 76.727169][ T6515] syzkaller0: entered allmulticast mode [ 76.736640][ T6515] tipc: Resetting bearer [ 76.740343][ T5976] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 76.743471][ T6514] tipc: Resetting bearer [ 76.749233][ T6514] tipc: Disabling bearer [ 77.214824][ T6055] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 77.289972][ T6525] loop6: detected capacity change from 0 to 63 [ 77.389273][ T6055] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 77.392703][ T6055] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 77.395832][ T6055] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 77.398852][ T6055] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 77.401648][ T6055] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.417072][ T6055] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 77.466625][ T6055] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 77.500447][ T6530] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 77.667807][ T6533] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 78.342294][ T6540] loop6: detected capacity change from 0 to 63 [ 78.348073][ T6118] buffer_io_error: 24314 callbacks suppressed [ 78.348083][ T6118] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.352720][ T6118] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.358190][ T6118] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.360904][ T6118] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.363577][ T6118] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.377741][ T6540] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.380318][ T6540] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.385874][ T6540] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.388475][ T6540] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.390994][ T6540] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.591819][ T6545] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 78.704469][ T29] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 78.856543][ T29] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 78.863547][ T29] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 78.869773][ T29] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.873917][ T29] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 78.878245][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.890303][ T29] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 78.894186][ T29] usb 6-1: invalid MIDI out EP 0 [ 78.958684][ T29] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 79.097048][ T29] usb 6-1: USB disconnect, device number 4 [ 79.444517][ T59] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 79.604473][ T59] usb 7-1: Using ep0 maxpacket: 32 [ 79.607432][ T59] usb 7-1: config 0 has no interfaces? [ 79.610767][ T59] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 79.613550][ T59] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.616244][ T59] usb 7-1: Product: syz [ 79.617576][ T59] usb 7-1: Manufacturer: syz [ 79.619005][ T59] usb 7-1: SerialNumber: syz [ 79.621904][ T59] usb 7-1: config 0 descriptor?? [ 79.745836][ T6552] input: syz0 as /devices/virtual/input/input23 [ 79.830532][ T59] usb 7-1: USB disconnect, device number 5 [ 79.889541][ T6036] usb 5-1: USB disconnect, device number 4 [ 80.324655][ T59] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 80.365068][ T6564] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 80.476783][ T59] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 80.480325][ T59] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 80.483770][ T59] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 80.487228][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.497108][ T6562] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 80.504635][ T59] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 81.175938][ T9] cfg80211: failed to load regulatory.db [ 82.235092][ T6589] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 82.610365][ T6595] tipc: Enabled bearer , priority 0 [ 82.613227][ T6595] syzkaller0: entered promiscuous mode [ 82.615485][ T6595] syzkaller0: entered allmulticast mode [ 82.636294][ T6594] tipc: Resetting bearer [ 82.675558][ T6594] tipc: Disabling bearer [ 83.006681][ T6055] usb 5-1: USB disconnect, device number 5 [ 83.047524][ T6604] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 83.056823][ T1463] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 83.224624][ T1463] usb 7-1: Using ep0 maxpacket: 32 [ 83.236132][ T1463] usb 7-1: config 0 has no interfaces? [ 83.247824][ T1463] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 83.250812][ T1463] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.253298][ T1463] usb 7-1: Product: syz [ 83.254935][ T1463] usb 7-1: Manufacturer: syz [ 83.256442][ T1463] usb 7-1: SerialNumber: syz [ 83.264721][ T1463] usb 7-1: config 0 descriptor?? [ 83.469679][ T6036] usb 7-1: USB disconnect, device number 6 [ 83.567687][ T6610] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 84.143293][ T6618] input: syz0 as /devices/virtual/input/input24 [ 84.868271][ T5333] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 85.270419][ T6634] input: syz0 as /devices/virtual/input/input25 [ 86.074499][ T1741] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 86.079494][ T6652] loop6: detected capacity change from 0 to 63 [ 86.086205][ T6118] buffer_io_error: 10431 callbacks suppressed [ 86.086239][ T6118] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.097835][ T6652] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.100455][ T6652] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.102940][ T6652] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.107077][ T6118] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.109789][ T6118] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.112512][ T6118] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.115715][ T6118] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.120590][ T6652] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.123417][ T6652] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.252644][ T1741] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 86.256679][ T1741] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 86.260432][ T1741] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 86.266965][ T1741] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.276138][ T6642] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 86.437447][ T1741] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 86.922846][ T6663] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 87.340137][ T5976] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 87.404478][ T59] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 87.566476][ T59] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 87.570006][ T59] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 87.573033][ T59] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 87.576039][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.581466][ T6671] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 87.585717][ T59] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 88.741336][ T2294] usb 6-1: USB disconnect, device number 5 [ 88.790306][ T6686] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 89.987172][ T6705] loop6: detected capacity change from 0 to 63 [ 90.108378][ T2294] usb 7-1: USB disconnect, device number 7 [ 90.321989][ T6710] input: syz0 as /devices/virtual/input/input26 [ 90.467747][ T6713] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 91.179319][ T6720] input: syz0 as /devices/virtual/input/input27 [ 91.200333][ T6723] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 92.234188][ T5333] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 92.684549][ T6055] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 92.835884][ T6055] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 92.839296][ T6055] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 92.842315][ T6055] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 92.854500][ T29] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 92.857995][ T6055] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.866401][ T6732] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 92.875536][ T6055] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 93.005649][ T29] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 93.009148][ T29] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 93.012244][ T29] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 93.015229][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.019867][ T6744] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 93.025414][ T29] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 94.490997][ T6757] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 94.581517][ T6760] input: syz0 as /devices/virtual/input/input28 [ 95.057229][ T1463] usb 5-1: USB disconnect, device number 6 [ 95.255026][ T6765] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 95.306909][ T1463] usb 7-1: USB disconnect, device number 8 [ 95.673565][ T5333] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 95.688636][ T6777] loop6: detected capacity change from 0 to 63 [ 95.693566][ T6777] buffer_io_error: 17726 callbacks suppressed [ 95.693576][ T6777] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.698883][ T6777] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.701518][ T6777] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.704190][ T6777] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.706904][ T6777] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.709496][ T6777] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.712076][ T6777] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.714714][ T6777] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.717422][ T6777] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.720000][ T6777] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.102938][ T6055] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 96.296494][ T6055] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 96.299989][ T6055] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 96.303072][ T6055] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 96.307825][ T6055] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 96.310706][ T6055] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.323911][ T6055] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 96.382639][ T6055] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 96.535572][ T6055] usb 8-1: USB disconnect, device number 9 [ 96.676264][ T6795] input: syz0 as /devices/virtual/input/input29 [ 96.914614][ T1463] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 96.918838][ T6800] input: syz0 as /devices/virtual/input/input30 [ 97.085942][ T1463] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 97.095003][ T1463] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 97.098945][ T1463] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 97.102359][ T1463] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.109343][ T6796] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 97.113841][ T1463] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 97.154207][ T6808] syzkaller0: entered promiscuous mode [ 97.157292][ T6808] syzkaller0: entered allmulticast mode [ 97.534528][ T6055] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 97.686004][ T6055] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 97.689455][ T6055] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 97.692462][ T6055] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 97.695505][ T6055] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.700544][ T6809] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 97.705164][ T6055] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 99.580220][ T2294] usb 7-1: USB disconnect, device number 9 [ 99.610192][ T6811] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 99.657173][ T6814] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 99.664596][ T6815] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 100.155310][ T59] usb 8-1: USB disconnect, device number 10 [ 101.034643][ T5976] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 101.126840][ T6837] loop6: detected capacity change from 0 to 63 [ 101.132104][ T6118] buffer_io_error: 8897 callbacks suppressed [ 101.132113][ T6118] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.144938][ T6118] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.148691][ T6118] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.151367][ T6118] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.154073][ T6118] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.156941][ T6837] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.159334][ T6837] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.161611][ T6837] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.163871][ T6837] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.167696][ T6837] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.484489][ T5871] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 101.646742][ T5871] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 101.650248][ T5871] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 101.653280][ T5871] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 101.656406][ T5871] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 101.659224][ T5871] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.665346][ T5871] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 101.712977][ T5871] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 101.867759][ T59] usb 8-1: USB disconnect, device number 11 [ 102.052787][ T6850] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 102.473835][ T29] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 102.980840][ T29] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 102.984376][ T29] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 102.988439][ T29] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 102.991345][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.001616][ T6855] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 103.007269][ T29] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 103.075492][ T6864] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 103.874458][ T6037] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 104.057227][ T6037] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 104.060664][ T6037] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 104.068840][ T6037] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 104.072848][ T6037] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.080683][ T6875] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 104.097775][ T6037] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 104.266909][ T6882] input: syz0 as /devices/virtual/input/input31 [ 104.348823][ T6888] loop6: detected capacity change from 0 to 63 [ 104.768834][ T6890] syzkaller0: entered promiscuous mode [ 104.770612][ T6890] syzkaller0: entered allmulticast mode [ 105.043503][ T5871] usb 6-1: USB disconnect, device number 6 [ 105.144508][ T6055] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 105.241180][ T6902] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 105.356559][ T6055] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 105.360257][ T6055] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 105.363473][ T6055] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 105.366541][ T6055] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.407398][ T6894] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 105.414318][ T6055] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 105.741223][ T6037] usb 5-1: USB disconnect, device number 7 [ 106.290282][ T6912] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 106.302969][ T6915] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 106.386980][ T2294] usb 8-1: USB disconnect, device number 12 [ 106.544977][ T6037] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 106.718458][ T6037] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 106.726213][ T6037] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 106.729327][ T6037] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 106.732232][ T6037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.739413][ T6917] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 106.743894][ T6037] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 106.894513][ T2294] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 106.978394][ T6037] usb 5-1: USB disconnect, device number 8 [ 107.071898][ T2294] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 107.075486][ T2294] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 107.078600][ T2294] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 107.081478][ T2294] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.090148][ T6924] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 107.094270][ T2294] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 107.440820][ T6926] syzkaller0: entered promiscuous mode [ 107.442578][ T6926] syzkaller0: entered allmulticast mode [ 107.864475][ T2294] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 108.027346][ T2294] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 108.030764][ T2294] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 108.033808][ T2294] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 108.036697][ T2294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.041192][ T6935] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 108.045849][ T2294] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 108.416957][ T6942] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 109.234549][ T6037] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 109.414438][ T6037] usb 6-1: Using ep0 maxpacket: 32 [ 109.417336][ T6037] usb 6-1: config 0 has no interfaces? [ 109.420650][ T6037] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 109.423554][ T6037] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.426411][ T6037] usb 6-1: Product: syz [ 109.427823][ T6037] usb 6-1: Manufacturer: syz [ 109.434509][ T6037] usb 6-1: SerialNumber: syz [ 109.443881][ T6036] usb 8-1: USB disconnect, device number 13 [ 109.445995][ T6037] usb 6-1: config 0 descriptor?? [ 109.486288][ T6948] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 109.525078][ T6950] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 109.653671][ T61] usb 6-1: USB disconnect, device number 7 [ 110.523786][ T6037] usb 5-1: USB disconnect, device number 9 [ 110.626341][ T6960] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 110.812037][ T61] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 111.134468][ T6036] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 111.312765][ T6036] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 111.315950][ T6036] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 111.318756][ T6036] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 111.321344][ T6036] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.335830][ T6971] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 111.342931][ T6036] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 111.607926][ T61] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 111.610987][ T61] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 111.613707][ T61] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 111.624539][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.636666][ T6956] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 111.640777][ T61] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 111.796347][ T6973] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 111.960991][ T61] usb 6-1: USB disconnect, device number 8 [ 112.316229][ T6037] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 112.476868][ T6037] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 112.480291][ T6037] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 112.483321][ T6037] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 112.486230][ T6037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.491191][ T6979] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 112.497324][ T6037] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 112.604865][ T6981] input: syz0 as /devices/virtual/input/input32 [ 113.336135][ T6986] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 113.759396][ T6037] usb 7-1: USB disconnect, device number 10 [ 114.333818][ T6999] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 114.443729][ T7003] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 114.885487][ T6037] usb 5-1: USB disconnect, device number 10 [ 115.265382][ T6037] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 115.437373][ T6037] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 115.441189][ T6037] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 115.445269][ T6037] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 115.449778][ T6037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.603897][ T7009] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 115.616246][ T6037] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 115.683219][ T7016] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 115.767489][ T7018] input: syz0 as /devices/virtual/input/input33 [ 115.808670][ T6037] usb 5-1: USB disconnect, device number 11 [ 116.801353][ T6036] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 117.001177][ T6036] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 117.004678][ T6036] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 117.007767][ T6036] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 117.010556][ T6036] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.019518][ T7031] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 117.026572][ T6036] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 117.690159][ T7041] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 118.802680][ T7061] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.281'. [ 118.806702][ T7059] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.281'. [ 119.154509][ T29] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 119.306895][ T29] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 119.310603][ T29] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 119.313670][ T29] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 119.316699][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.322054][ T7066] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 119.326342][ T29] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 119.421181][ T29] usb 5-1: USB disconnect, device number 12 [ 119.533514][ T7068] input: syz0 as /devices/virtual/input/input34 [ 119.536744][ T9] usb 6-1: USB disconnect, device number 9 [ 119.627926][ T7075] syzkaller0: entered promiscuous mode [ 119.629704][ T7075] syzkaller0: entered allmulticast mode [ 119.747128][ T7079] syzkaller0: entered promiscuous mode [ 119.748915][ T7079] syzkaller0: entered allmulticast mode [ 120.411815][ T7093] syzkaller0: entered promiscuous mode [ 120.413643][ T7093] syzkaller0: entered allmulticast mode [ 120.692114][ T7097] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 120.696708][ T7097] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 120.708767][ T7097] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 120.714719][ T7097] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 120.719322][ T7097] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 120.721250][ T7097] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 120.726127][ T7097] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 120.728669][ T7097] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 120.731858][ T7097] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 120.733876][ T7097] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 120.737875][ T7097] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 120.740475][ T7097] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 120.742839][ T7097] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 120.745383][ T7097] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 120.748963][ T7097] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 120.751907][ T7097] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 120.776216][ T7105] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 120.860658][ T7110] input: syz0 as /devices/virtual/input/input35 [ 121.241155][ T7120] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 121.324529][ T1463] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 121.475912][ T1463] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 121.479541][ T1463] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 121.482655][ T1463] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 121.486701][ T1463] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.490966][ T7118] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 121.497426][ T1463] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 122.644499][ T5976] Bluetooth: hci0: command 0x0406 tx timeout [ 122.770133][ T7142] syzkaller0: entered promiscuous mode [ 122.772030][ T7142] syzkaller0: entered allmulticast mode [ 122.794509][ T5976] Bluetooth: hci3: command 0x0406 tx timeout [ 122.796450][ T5976] Bluetooth: hci2: command 0x0406 tx timeout [ 122.798318][ T5976] Bluetooth: hci1: command 0x0406 tx timeout [ 123.592438][ T7156] input: syz0 as /devices/virtual/input/input36 [ 123.857570][ T7162] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 123.979843][ T6037] usb 8-1: USB disconnect, device number 14 [ 124.007943][ T7161] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 124.010753][ T7161] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 124.012758][ T7161] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 124.015830][ T7161] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 124.072512][ T7168] syzkaller0: entered promiscuous mode [ 124.074285][ T7168] syzkaller0: entered allmulticast mode [ 124.113665][ T7169] input: syz0 as /devices/virtual/input/input37 [ 124.216947][ T7173] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 124.413240][ T7177] syzkaller0: entered promiscuous mode [ 124.415265][ T7177] syzkaller0: entered allmulticast mode [ 124.555880][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 124.613053][ T7183] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 124.935718][ T7189] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 126.004454][ T5976] Bluetooth: hci0: command 0x0406 tx timeout [ 126.074660][ T5976] Bluetooth: hci3: command 0x0406 tx timeout [ 126.074941][ T5986] Bluetooth: hci2: command 0x0406 tx timeout [ 126.077111][ T5976] Bluetooth: hci1: command 0x0406 tx timeout [ 126.559631][ T7199] syzkaller0: entered promiscuous mode [ 126.561447][ T7199] syzkaller0: entered allmulticast mode [ 126.695599][ T7214] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 126.820302][ T7210] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.822581][ T7210] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 126.824747][ T7210] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 126.826764][ T7210] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 126.977238][ T7228] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.335'. [ 126.980850][ T7226] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.335'. [ 127.122862][ T7225] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 127.126604][ T7225] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 127.129498][ T7225] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 127.131720][ T7225] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 127.242743][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'. [ 127.849751][ T7247] input: syz0 as /devices/virtual/input/input38 [ 128.355578][ T7252] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 128.357704][ T7252] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 128.359675][ T7252] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 128.361646][ T7252] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 128.557811][ T7255] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 128.561807][ T7255] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 128.564272][ T7255] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 128.566489][ T7255] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 128.659023][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.347'. [ 128.682523][ T7262] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 129.055028][ T7274] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.351'. [ 129.059990][ T7273] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.351'. [ 130.474744][ T5333] Bluetooth: hci0: command 0x0406 tx timeout [ 130.614696][ T7279] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 130.634635][ T5333] Bluetooth: hci2: command 0x0406 tx timeout [ 130.634667][ T5976] Bluetooth: hci3: command 0x0406 tx timeout [ 130.638617][ T63] Bluetooth: hci1: command 0x0406 tx timeout [ 130.737577][ T7286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.355'. [ 130.876295][ T7282] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 130.878960][ T7282] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 130.881043][ T7282] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 130.883603][ T7282] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.918249][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.359'. [ 131.872753][ T7314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.364'. [ 131.914956][ T7311] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 132.318492][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.320513][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.638712][ T7324] input: syz0 as /devices/virtual/input/input39 [ 132.874480][ T5976] Bluetooth: hci0: command 0x0406 tx timeout [ 132.954523][ T5976] Bluetooth: hci3: command 0x0406 tx timeout [ 132.956857][ T5976] Bluetooth: hci2: command 0x0406 tx timeout [ 132.958932][ T5333] Bluetooth: hci1: command 0x0406 tx timeout [ 133.232850][ T7330] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 133.234958][ T7330] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 133.236926][ T7330] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 133.239623][ T7330] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 133.313247][ T7342] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 133.507698][ T7350] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 134.271968][ T7355] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 134.317798][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'. [ 134.727207][ T7364] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 134.823709][ T7369] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 135.194670][ T63] Bluetooth: hci0: command 0x0406 tx timeout [ 135.274472][ T63] Bluetooth: hci2: command 0x0406 tx timeout [ 135.274528][ T5986] Bluetooth: hci1: command 0x0406 tx timeout [ 135.284604][ T5986] Bluetooth: hci3: command 0x0406 tx timeout [ 135.671848][ T7381] syzkaller0: entered promiscuous mode [ 135.673649][ T7381] syzkaller0: entered allmulticast mode [ 135.873309][ T7387] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 136.215641][ T7394] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 136.855814][ T7405] input: syz0 as /devices/virtual/input/input40 [ 137.066847][ T7411] syz_tun: entered allmulticast mode [ 137.083717][ T7410] syz_tun: left allmulticast mode [ 137.094548][ T1463] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 137.155695][ T7415] syzkaller0: entered promiscuous mode [ 137.157473][ T7415] syzkaller0: entered allmulticast mode [ 137.274590][ T1463] usb 6-1: Using ep0 maxpacket: 32 [ 137.277785][ T1463] usb 6-1: config 0 has no interfaces? [ 137.281542][ T1463] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 137.282547][ T7419] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 137.291133][ T1463] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.294317][ T1463] usb 6-1: Product: syz [ 137.296793][ T1463] usb 6-1: Manufacturer: syz [ 137.298599][ T1463] usb 6-1: SerialNumber: syz [ 137.304730][ T1463] usb 6-1: config 0 descriptor?? [ 137.354576][ T5976] Bluetooth: hci3: command 0x0406 tx timeout [ 137.511447][ T9] usb 6-1: USB disconnect, device number 10 [ 137.676620][ T7426] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 138.061169][ T7430] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 138.261228][ T7436] syz_tun: entered allmulticast mode [ 138.270228][ T7436] dvmrp1: entered allmulticast mode [ 138.280108][ T7435] syz_tun: left allmulticast mode [ 139.426181][ T7450] input: syz0 as /devices/virtual/input/input41 [ 139.434845][ T5976] Bluetooth: hci3: command 0x0406 tx timeout [ 139.664498][ T6036] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 139.824457][ T6036] usb 5-1: Using ep0 maxpacket: 32 [ 139.828061][ T6036] usb 5-1: config 0 has no interfaces? [ 139.831340][ T6036] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 139.834183][ T6036] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.836849][ T6036] usb 5-1: Product: syz [ 139.838172][ T6036] usb 5-1: Manufacturer: syz [ 139.839633][ T6036] usb 5-1: SerialNumber: syz [ 139.842666][ T6036] usb 5-1: config 0 descriptor?? [ 140.050486][ T6036] usb 5-1: USB disconnect, device number 13 [ 140.271577][ T7461] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 140.334506][ T7463] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 140.591856][ T7469] syzkaller0: entered promiscuous mode [ 140.593632][ T7469] syzkaller0: entered allmulticast mode [ 140.645699][ T7471] syzkaller0: entered promiscuous mode [ 140.647475][ T7471] syzkaller0: entered allmulticast mode [ 140.764060][ T7473] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 140.812812][ T7475] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 141.515656][ T5976] Bluetooth: hci3: command 0x0406 tx timeout [ 142.357848][ T7488] input: syz0 as /devices/virtual/input/input42 [ 142.440367][ T7491] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 142.916347][ T7497] syzkaller0: entered promiscuous mode [ 142.918525][ T7497] syzkaller0: entered allmulticast mode [ 143.001940][ T7500] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 143.054799][ T7502] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 143.222063][ T7508] syzkaller0: entered promiscuous mode [ 143.223946][ T7508] syzkaller0: entered allmulticast mode [ 143.594497][ T5976] Bluetooth: hci3: command 0x0406 tx timeout [ 144.357052][ T7517] input: syz0 as /devices/virtual/input/input43 [ 144.551291][ T7520] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 144.655960][ T7527] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 145.220421][ T7531] input: syz0 as /devices/virtual/input/input44 [ 145.420314][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.435'. [ 145.609324][ T7542] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.437'. [ 145.612606][ T7539] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.437'. [ 145.744636][ T7544] syz_tun: entered allmulticast mode [ 145.754099][ T7544] dvmrp1: entered allmulticast mode [ 145.770787][ T7543] syz_tun: left allmulticast mode [ 145.814889][ T29] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 145.984511][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 145.989093][ T29] usb 8-1: config 0 has no interfaces? [ 145.993074][ T29] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 145.997079][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.999535][ T29] usb 8-1: Product: syz [ 146.000854][ T29] usb 8-1: Manufacturer: syz [ 146.002307][ T29] usb 8-1: SerialNumber: syz [ 146.006896][ T29] usb 8-1: config 0 descriptor?? [ 146.131341][ T7549] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 146.219413][ T34] usb 8-1: USB disconnect, device number 15 [ 146.336256][ T7553] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 146.660741][ T7557] input: syz0 as /devices/virtual/input/input45 [ 146.747543][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.444'. [ 147.303937][ T7572] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 147.635391][ T7577] input: syz0 as /devices/virtual/input/input46 [ 147.674215][ T7578] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 147.934018][ T7585] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.450'. [ 147.941763][ T7584] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.450'. [ 148.568110][ T7587] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 148.802764][ T7593] syzkaller0: entered promiscuous mode [ 148.804803][ T7593] syzkaller0: entered allmulticast mode [ 148.834503][ T6036] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 148.985660][ T6036] usb 8-1: Using ep0 maxpacket: 32 [ 148.988651][ T6036] usb 8-1: config 0 has no interfaces? [ 148.992039][ T6036] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 148.995727][ T6036] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.998233][ T6036] usb 8-1: Product: syz [ 148.999549][ T6036] usb 8-1: Manufacturer: syz [ 149.001022][ T6036] usb 8-1: SerialNumber: syz [ 149.004304][ T6036] usb 8-1: config 0 descriptor?? [ 149.064094][ T7597] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 149.209974][ T34] usb 8-1: USB disconnect, device number 16 [ 150.008380][ T7611] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 150.166436][ T7617] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.461'. [ 150.169609][ T7616] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.461'. [ 150.858294][ T7619] input: syz0 as /devices/virtual/input/input47 [ 150.929150][ T7622] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 151.083457][ T7628] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 151.891466][ T7639] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 152.034768][ T6037] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 152.184535][ T6037] usb 5-1: Using ep0 maxpacket: 32 [ 152.204678][ T6037] usb 5-1: config 0 has no interfaces? [ 152.219162][ T6037] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 152.222032][ T6037] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.234646][ T6037] usb 5-1: Product: syz [ 152.236026][ T6037] usb 5-1: Manufacturer: syz [ 152.237603][ T6037] usb 5-1: SerialNumber: syz [ 152.245959][ T6037] usb 5-1: config 0 descriptor?? [ 152.451957][ T6055] usb 5-1: USB disconnect, device number 14 [ 152.477035][ T7646] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.470'. [ 152.482407][ T7645] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.470'. [ 153.166857][ T7655] sctp: [Deprecated]: syz.0.472 (pid 7655) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.166857][ T7655] Use struct sctp_sack_info instead [ 153.355374][ T7657] sctp: [Deprecated]: syz.2.473 (pid 7657) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.355374][ T7657] Use struct sctp_sack_info instead [ 153.508435][ T7661] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 153.544139][ T7663] input: syz0 as /devices/virtual/input/input48 [ 154.051846][ T7675] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 154.102094][ T7677] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 155.287178][ T7692] tipc: Enabled bearer , priority 0 [ 155.290753][ T7692] syzkaller0: entered promiscuous mode [ 155.293012][ T7692] syzkaller0: entered allmulticast mode [ 155.295725][ T6036] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 155.308193][ T7692] tipc: Resetting bearer [ 155.312839][ T7691] tipc: Resetting bearer [ 155.319376][ T7691] tipc: Disabling bearer [ 155.445361][ T6036] usb 6-1: Using ep0 maxpacket: 32 [ 155.456011][ T6036] usb 6-1: config 0 has no interfaces? [ 155.459887][ T6036] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 155.462736][ T6036] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.465475][ T6036] usb 6-1: Product: syz [ 155.466836][ T6036] usb 6-1: Manufacturer: syz [ 155.468431][ T6036] usb 6-1: SerialNumber: syz [ 155.471215][ T6036] usb 6-1: config 0 descriptor?? [ 155.676112][ T6037] usb 6-1: USB disconnect, device number 11 [ 155.681710][ T7700] sctp: [Deprecated]: syz.2.484 (pid 7700) Use of struct sctp_assoc_value in delayed_ack socket option. [ 155.681710][ T7700] Use struct sctp_sack_info instead [ 155.973887][ T7702] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 156.258932][ T7708] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 156.377470][ T7712] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 156.435975][ T7710] sctp: [Deprecated]: syz.2.488 (pid 7710) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.435975][ T7710] Use struct sctp_sack_info instead [ 157.165913][ T7724] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 157.975563][ T34] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 158.124555][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 158.129437][ T34] usb 6-1: config 0 has no interfaces? [ 158.133003][ T34] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 158.136376][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.138952][ T34] usb 6-1: Product: syz [ 158.140293][ T34] usb 6-1: Manufacturer: syz [ 158.141758][ T34] usb 6-1: SerialNumber: syz [ 158.238161][ T34] usb 6-1: config 0 descriptor?? [ 158.488244][ T6037] usb 6-1: USB disconnect, device number 12 [ 158.668715][ T7744] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 158.713903][ T7745] input: syz0 as /devices/virtual/input/input49 [ 158.935150][ T7749] tipc: Enabled bearer , priority 0 [ 158.939133][ T7749] syzkaller0: entered promiscuous mode [ 158.940952][ T7749] syzkaller0: entered allmulticast mode [ 158.955084][ T7749] tipc: Resetting bearer [ 158.960857][ T7748] tipc: Resetting bearer [ 158.967754][ T7748] tipc: Disabling bearer [ 159.050761][ T7751] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 159.150440][ T7755] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 159.527582][ T7761] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 161.334124][ T7786] input: syz0 as /devices/virtual/input/input50 [ 161.424542][ T5871] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 161.584487][ T5871] usb 7-1: Using ep0 maxpacket: 32 [ 161.587672][ T5871] usb 7-1: config 0 has no interfaces? [ 161.591467][ T5871] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 161.595588][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.598370][ T5871] usb 7-1: Product: syz [ 161.599876][ T5871] usb 7-1: Manufacturer: syz [ 161.601887][ T5871] usb 7-1: SerialNumber: syz [ 161.607216][ T5871] usb 7-1: config 0 descriptor?? [ 161.688244][ T7788] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 161.815288][ T1463] usb 7-1: USB disconnect, device number 11 [ 161.969521][ T7795] input: syz0 as /devices/virtual/input/input51 [ 162.155587][ T7799] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 162.375366][ T7805] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 163.115806][ T7816] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 164.298912][ T7828] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 164.534554][ T1463] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 164.688676][ T7835] input: syz0 as /devices/virtual/input/input52 [ 164.702008][ T1463] usb 7-1: Using ep0 maxpacket: 32 [ 164.706179][ T1463] usb 7-1: config 0 has no interfaces? [ 164.716075][ T1463] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 164.719906][ T1463] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.723271][ T1463] usb 7-1: Product: syz [ 164.727705][ T1463] usb 7-1: Manufacturer: syz [ 164.730728][ T1463] usb 7-1: SerialNumber: syz [ 164.744896][ T1463] usb 7-1: config 0 descriptor?? [ 164.950255][ T1463] usb 7-1: USB disconnect, device number 12 [ 165.794593][ T6055] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 165.964461][ T6055] usb 6-1: Using ep0 maxpacket: 32 [ 166.018445][ T6055] usb 6-1: config 0 has no interfaces? [ 166.025228][ T6055] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 166.028167][ T6055] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.030723][ T6055] usb 6-1: Product: syz [ 166.032229][ T6055] usb 6-1: Manufacturer: syz [ 166.033898][ T6055] usb 6-1: SerialNumber: syz [ 166.175788][ T6055] usb 6-1: config 0 descriptor?? [ 166.387676][ T1463] usb 6-1: USB disconnect, device number 13 [ 166.467897][ T7866] syz_tun: entered allmulticast mode [ 166.471209][ T7865] syz_tun: left allmulticast mode [ 166.560670][ T7872] tipc: Enabled bearer , priority 0 [ 166.563849][ T7872] syzkaller0: entered promiscuous mode [ 166.565741][ T7872] syzkaller0: entered allmulticast mode [ 166.571394][ T7872] Zero length message leads to an empty skb [ 166.576049][ T7872] tipc: Resetting bearer [ 166.581603][ T7871] tipc: Resetting bearer [ 166.589759][ T7871] tipc: Disabling bearer [ 167.608597][ T7887] syz_tun: entered allmulticast mode [ 167.618088][ T7887] dvmrp1: entered allmulticast mode [ 167.665452][ T7890] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 168.041975][ T7902] syz_tun: entered allmulticast mode [ 168.054511][ T7901] syz_tun: left allmulticast mode [ 169.714875][ T7934] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 170.466505][ T7940] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 170.864723][ T7956] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.564'. [ 170.869525][ T7955] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.564'. [ 171.771155][ T7969] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.573'. [ 171.775730][ T7967] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.573'. [ 172.824561][ T1463] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 172.994510][ T1463] usb 5-1: Using ep0 maxpacket: 32 [ 172.997686][ T1463] usb 5-1: config 0 has no interfaces? [ 173.001772][ T1463] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 173.005742][ T1463] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.008661][ T1463] usb 5-1: Product: syz [ 173.010233][ T1463] usb 5-1: Manufacturer: syz [ 173.011975][ T1463] usb 5-1: SerialNumber: syz [ 173.016133][ T1463] usb 5-1: config 0 descriptor?? [ 173.027043][ T7983] sctp: [Deprecated]: syz.2.574 (pid 7983) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.027043][ T7983] Use struct sctp_sack_info instead [ 173.224857][ T1463] usb 5-1: USB disconnect, device number 15 [ 173.296770][ T7987] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 174.091700][ T8000] sctp: [Deprecated]: syz.0.586 (pid 8000) Use of struct sctp_assoc_value in delayed_ack socket option. [ 174.091700][ T8000] Use struct sctp_sack_info instead [ 174.313767][ T8007] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.579'. [ 174.317954][ T8006] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.579'. [ 174.441518][ T8009] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 176.091185][ T8048] input: syz0 as /devices/virtual/input/input53 [ 176.189621][ T8055] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.597'. [ 176.193633][ T8053] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.597'. [ 176.285728][ T8056] input: syz0 as /devices/virtual/input/input54 [ 176.977344][ T8062] input: syz0 as /devices/virtual/input/input55 [ 177.043595][ T8064] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 178.113560][ T8083] netlink: 56 bytes leftover after parsing attributes in process `syz.1.606'. [ 178.254967][ T8088] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.608'. [ 178.258038][ T8087] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.608'. [ 178.554116][ T8091] input: syz0 as /devices/virtual/input/input56 [ 178.926103][ T8104] netlink: 56 bytes leftover after parsing attributes in process `syz.0.616'. [ 179.001926][ T8108] input: syz0 as /devices/virtual/input/input57 [ 179.242559][ T8117] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.619'. [ 179.260022][ T8116] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.619'. [ 180.117789][ T8140] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 180.584286][ T8155] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.629'. [ 180.588185][ T8152] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.629'. [ 180.761436][ T8154] sctp: [Deprecated]: syz.2.630 (pid 8154) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.761436][ T8154] Use struct sctp_sack_info instead [ 180.960218][ T8161] sctp: [Deprecated]: syz.2.632 (pid 8161) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.960218][ T8161] Use struct sctp_sack_info instead [ 181.019380][ T8167] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 181.477724][ T8172] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 182.023264][ T8181] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 182.696224][ T8185] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 183.333886][ T8203] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.642'. [ 183.337459][ T8202] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.642'. [ 183.844553][ T6037] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 183.850182][ T8215] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 183.965416][ T8221] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 184.004570][ T6037] usb 6-1: Using ep0 maxpacket: 32 [ 184.010543][ T6037] usb 6-1: config 0 has no interfaces? [ 184.019052][ T6037] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 184.023365][ T6037] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.029449][ T6037] usb 6-1: Product: syz [ 184.031906][ T6037] usb 6-1: Manufacturer: syz [ 184.037420][ T6037] usb 6-1: SerialNumber: syz [ 184.042818][ T6037] usb 6-1: config 0 descriptor?? [ 184.311808][ T61] usb 6-1: USB disconnect, device number 14 [ 184.924813][ T8233] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 185.000510][ T8231] sctp: [Deprecated]: syz.2.652 (pid 8231) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.000510][ T8231] Use struct sctp_sack_info instead [ 185.699987][ T8246] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 186.020387][ T8252] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.656'. [ 186.024226][ T8251] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.656'. [ 186.329735][ T5976] Bluetooth: hci0: ISO packet too small [ 186.434494][ T6054] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 186.584514][ T6054] usb 7-1: Using ep0 maxpacket: 32 [ 186.589287][ T6054] usb 7-1: config 0 has no interfaces? [ 186.598032][ T6054] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 186.601026][ T6054] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.603544][ T6054] usb 7-1: Product: syz [ 186.605019][ T6054] usb 7-1: Manufacturer: syz [ 186.606533][ T6054] usb 7-1: SerialNumber: syz [ 186.612570][ T6054] usb 7-1: config 0 descriptor?? [ 186.770304][ T8268] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 186.808840][ T8269] sctp: [Deprecated]: syz.1.662 (pid 8269) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.808840][ T8269] Use struct sctp_sack_info instead [ 186.847540][ T5871] usb 7-1: USB disconnect, device number 13 [ 187.274681][ T8277] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 187.900010][ T5382] udevd[5382]: worker [6454] terminated by signal 33 (Unknown signal 33) [ 187.902658][ T5382] udevd[5382]: worker [6454] failed while handling '/devices/virtual/block/loop0' [ 188.376391][ T5976] Bluetooth: hci2: ISO packet too small [ 188.765002][ T8319] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 188.824085][ T8325] input: syz0 as /devices/virtual/input/input58 [ 189.447579][ T8346] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 190.071884][ T8354] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.693'. [ 190.549333][ T8363] sctp: [Deprecated]: syz.0.697 (pid 8363) Use of struct sctp_assoc_value in delayed_ack socket option. [ 190.549333][ T8363] Use struct sctp_sack_info instead [ 190.795426][ T5976] Bluetooth: hci3: ISO packet too small [ 191.230073][ T8392] fuse: Bad value for 'fd' [ 191.616291][ T40] audit: type=1326 audit(1754509721.445:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8401 comm="syz.3.713" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x0 [ 191.824551][ T6037] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 191.977164][ T6037] usb 7-1: config 0 has no interfaces? [ 191.980425][ T6037] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 191.983256][ T6037] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.985834][ T6037] usb 7-1: Product: syz [ 191.987154][ T6037] usb 7-1: Manufacturer: syz [ 191.988624][ T6037] usb 7-1: SerialNumber: syz [ 191.991204][ T6037] usb 7-1: config 0 descriptor?? [ 192.091035][ T8404] netlink: 20 bytes leftover after parsing attributes in process `syz.1.714'. [ 192.125723][ T8406] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 192.229873][ T8408] sctp: [Deprecated]: syz.0.716 (pid 8408) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.229873][ T8408] Use struct sctp_sack_info instead [ 192.306959][ T61] usb 7-1: USB disconnect, device number 14 [ 193.074524][ T6037] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 193.204500][ T6037] usb 7-1: device descriptor read/64, error -71 [ 193.401166][ T8431] netlink: 20 bytes leftover after parsing attributes in process `syz.3.723'. [ 193.458600][ T6037] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 193.517801][ T8439] sctp: [Deprecated]: syz.1.727 (pid 8439) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.517801][ T8439] Use struct sctp_sack_info instead [ 193.528118][ T8441] sctp: [Deprecated]: syz.3.728 (pid 8441) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.528118][ T8441] Use struct sctp_sack_info instead [ 193.594469][ T6037] usb 7-1: device descriptor read/64, error -71 [ 193.715623][ T6037] usb usb7-port1: attempt power cycle [ 193.757090][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.759215][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.935693][ T8460] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 194.065638][ T6037] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 194.096084][ T6037] usb 7-1: device descriptor read/8, error -71 [ 194.334640][ T6037] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 194.355368][ T6037] usb 7-1: device descriptor read/8, error -71 [ 194.474567][ T6037] usb usb7-port1: unable to enumerate USB device [ 194.514598][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.734'. [ 194.643170][ T8470] sctp: [Deprecated]: syz.1.738 (pid 8470) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.643170][ T8470] Use struct sctp_sack_info instead [ 194.676434][ T8475] sctp: [Deprecated]: syz.3.740 (pid 8475) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.676434][ T8475] Use struct sctp_sack_info instead [ 194.701765][ T8477] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 195.672410][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'. [ 195.881034][ T8501] sctp: [Deprecated]: syz.0.750 (pid 8501) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.881034][ T8501] Use struct sctp_sack_info instead [ 195.886359][ T8505] sctp: [Deprecated]: syz.3.751 (pid 8505) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.886359][ T8505] Use struct sctp_sack_info instead [ 195.973663][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'. [ 195.976480][ T8513] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 196.848483][ T8538] sctp: [Deprecated]: syz.1.763 (pid 8538) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.848483][ T8538] Use struct sctp_sack_info instead [ 196.904482][ T6037] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 196.997475][ T8543] sctp: [Deprecated]: syz.1.765 (pid 8543) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.997475][ T8543] Use struct sctp_sack_info instead [ 197.034471][ T6037] usb 8-1: device descriptor read/64, error -71 [ 197.275711][ T6037] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 197.406391][ T6037] usb 8-1: device descriptor read/64, error -71 [ 197.527045][ T6037] usb usb8-port1: attempt power cycle [ 197.680152][ T8557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.772'. [ 197.703086][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.773'. [ 197.822087][ T8562] sctp: [Deprecated]: syz.1.774 (pid 8562) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.822087][ T8562] Use struct sctp_sack_info instead [ 197.864523][ T6037] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 197.885012][ T6037] usb 8-1: device descriptor read/8, error -71 [ 197.923089][ T8565] sctp: [Deprecated]: syz.1.775 (pid 8565) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.923089][ T8565] Use struct sctp_sack_info instead [ 198.124484][ T6037] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 198.146042][ T6037] usb 8-1: device descriptor read/8, error -71 [ 198.255435][ T6037] usb usb8-port1: unable to enumerate USB device [ 198.364815][ T6036] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 198.514538][ T6036] usb 5-1: Using ep0 maxpacket: 32 [ 198.517669][ T6036] usb 5-1: config 0 has no interfaces? [ 198.528558][ T6036] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 198.531383][ T6036] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.533876][ T6036] usb 5-1: Product: syz [ 198.535349][ T6036] usb 5-1: Manufacturer: syz [ 198.536860][ T6036] usb 5-1: SerialNumber: syz [ 198.539524][ T6036] usb 5-1: config 0 descriptor?? [ 198.594516][ T8582] netlink: 56 bytes leftover after parsing attributes in process `syz.1.783'. [ 198.701504][ T8586] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 198.757974][ T8573] netlink: 'syz.0.779': attribute type 12 has an invalid length. [ 198.761913][ T6036] usb 5-1: USB disconnect, device number 16 [ 199.341622][ T8595] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 199.755988][ T8602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.789'. [ 199.944537][ T6036] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 200.094512][ T6036] usb 7-1: device descriptor read/64, error -71 [ 200.285646][ T8608] netlink: 56 bytes leftover after parsing attributes in process `syz.0.792'. [ 200.334156][ T8606] sctp: [Deprecated]: syz.1.791 (pid 8606) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.334156][ T8606] Use struct sctp_sack_info instead [ 200.339150][ T6036] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 200.484493][ T6036] usb 7-1: device descriptor read/64, error -71 [ 200.607125][ T6036] usb usb7-port1: attempt power cycle [ 200.756624][ T8625] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 200.954539][ T6036] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 200.974865][ T6036] usb 7-1: device descriptor read/8, error -71 [ 201.251301][ T8629] sctp: [Deprecated]: syz.3.801 (pid 8629) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.251301][ T8629] Use struct sctp_sack_info instead [ 201.254612][ T6036] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 201.275094][ T6036] usb 7-1: device descriptor read/8, error -71 [ 201.403630][ T6036] usb usb7-port1: unable to enumerate USB device [ 201.461616][ T8649] loop2: detected capacity change from 0 to 7 [ 201.467099][ T8649] Dev loop2: unable to read RDB block 7 [ 201.468967][ T8649] loop2: unable to read partition table [ 201.470811][ T8649] loop2: partition table beyond EOD, truncated [ 201.472775][ T8649] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 202.044569][ T8657] sctp: [Deprecated]: syz.0.811 (pid 8657) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.044569][ T8657] Use struct sctp_sack_info instead [ 202.184621][ T59] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 202.218159][ T8665] sctp: [Deprecated]: syz.0.821 (pid 8665) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.218159][ T8665] Use struct sctp_sack_info instead [ 202.344493][ T59] usb 6-1: Using ep0 maxpacket: 32 [ 202.347473][ T59] usb 6-1: config 0 has no interfaces? [ 202.350835][ T59] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 202.353731][ T59] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.356396][ T59] usb 6-1: Product: syz [ 202.357728][ T59] usb 6-1: Manufacturer: syz [ 202.359205][ T59] usb 6-1: SerialNumber: syz [ 202.361834][ T59] usb 6-1: config 0 descriptor?? [ 202.571093][ T8656] netlink: 'syz.1.812': attribute type 12 has an invalid length. [ 202.575345][ T59] usb 6-1: USB disconnect, device number 15 [ 202.784870][ T8675] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 203.182695][ T8688] loop2: detected capacity change from 0 to 7 [ 203.185887][ T8688] Dev loop2: unable to read RDB block 7 [ 203.187734][ T8688] loop2: unable to read partition table [ 203.189664][ T8688] loop2: partition table beyond EOD, truncated [ 203.191618][ T8688] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 203.474458][ T6036] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 203.624460][ T6036] usb 6-1: device descriptor read/64, error -71 [ 203.745537][ T40] audit: type=1326 audit(1754509733.575:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8694 comm="syz.0.827" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x0 [ 203.776066][ T8696] sctp: [Deprecated]: syz.2.828 (pid 8696) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.776066][ T8696] Use struct sctp_sack_info instead [ 203.874527][ T6036] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 204.024482][ T6036] usb 6-1: device descriptor read/64, error -71 [ 204.135113][ T6036] usb usb6-port1: attempt power cycle [ 204.474532][ T6036] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 204.494873][ T6036] usb 6-1: device descriptor read/8, error -71 [ 204.734532][ T6036] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 204.756106][ T6036] usb 6-1: device descriptor read/8, error -71 [ 204.864708][ T6036] usb usb6-port1: unable to enumerate USB device [ 205.619096][ T8720] sctp: [Deprecated]: syz.2.837 (pid 8720) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.619096][ T8720] Use struct sctp_sack_info instead [ 205.660391][ T8723] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 206.247348][ T40] audit: type=1326 audit(1754509736.075:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.1.843" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x0 [ 207.734305][ T8750] sctp: [Deprecated]: syz.1.849 (pid 8750) Use of struct sctp_assoc_value in delayed_ack socket option. [ 207.734305][ T8750] Use struct sctp_sack_info instead [ 207.804770][ T8756] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 207.833923][ T8758] netlink: 64 bytes leftover after parsing attributes in process `syz.0.853'. [ 207.920221][ T8766] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 208.006797][ T8767] netlink: 16 bytes leftover after parsing attributes in process `syz.0.854'. [ 209.170472][ T8773] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 209.888244][ T8782] netlink: 16 bytes leftover after parsing attributes in process `syz.2.859'. [ 210.005568][ T5986] Bluetooth: hci2: command 0x0406 tx timeout [ 210.255588][ T8784] sctp: [Deprecated]: syz.0.860 (pid 8784) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.255588][ T8784] Use struct sctp_sack_info instead [ 210.497748][ T8794] sctp: [Deprecated]: syz.1.866 (pid 8794) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.497748][ T8794] Use struct sctp_sack_info instead [ 211.300122][ T8807] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 211.483060][ T8813] sctp: [Deprecated]: syz.0.871 (pid 8813) Use of struct sctp_assoc_value in delayed_ack socket option. [ 211.483060][ T8813] Use struct sctp_sack_info instead [ 211.693114][ T5986] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 211.914544][ T5976] Bluetooth: hci3: command 0x0406 tx timeout [ 212.286042][ T8822] sctp: [Deprecated]: syz.1.875 (pid 8822) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.286042][ T8822] Use struct sctp_sack_info instead [ 212.330949][ T8825] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 212.628522][ T8838] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.879'. [ 212.631714][ T8836] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.879'. [ 213.459697][ T8843] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 213.525393][ T8845] kvm: pic: non byte read [ 213.534507][ T8845] kvm: pic: non byte read [ 213.542301][ T8845] kvm: pic: single mode not supported [ 213.542409][ T8845] kvm: pic: level sensitive irq not supported [ 213.561922][ T8845] kvm: pic: non byte read [ 213.567226][ T8845] kvm: pic: non byte read [ 213.569590][ T8845] kvm: pic: single mode not supported [ 213.569602][ T8845] kvm: pic: level sensitive irq not supported [ 213.572109][ T8845] kvm: pic: non byte read [ 213.579352][ T8845] kvm: pic: non byte read [ 213.583813][ T8845] kvm: pic: non byte read [ 213.589341][ T8845] kvm: pic: single mode not supported [ 213.589351][ T8845] kvm: pic: level sensitive irq not supported [ 213.592254][ T8845] kvm: pic: non byte read [ 213.600060][ T8845] kvm: pic: non byte read [ 213.675428][ T8852] sctp: [Deprecated]: syz.0.884 (pid 8852) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.675428][ T8852] Use struct sctp_sack_info instead [ 213.818682][ T5976] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 213.855555][ T8860] netlink: 16 bytes leftover after parsing attributes in process `syz.2.886'. [ 214.023639][ T8865] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 214.936538][ T8873] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 215.360065][ T8884] netlink: 64 bytes leftover after parsing attributes in process `syz.3.893'. [ 215.515190][ T8886] sctp: [Deprecated]: syz.3.894 (pid 8886) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.515190][ T8886] Use struct sctp_sack_info instead [ 215.567742][ T5986] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 215.659057][ T8891] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 216.192723][ T8896] sctp: [Deprecated]: syz.2.897 (pid 8896) Use of struct sctp_assoc_value in delayed_ack socket option. [ 216.192723][ T8896] Use struct sctp_sack_info instead [ 216.258424][ T8902] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 216.500690][ T5976] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 216.506348][ T8910] netlink: 16 bytes leftover after parsing attributes in process `syz.3.901'. [ 217.149703][ T8913] netlink: 16 bytes leftover after parsing attributes in process `syz.1.902'. [ 217.301593][ T8915] sctp: [Deprecated]: syz.2.903 (pid 8915) Use of struct sctp_assoc_value in delayed_ack socket option. [ 217.301593][ T8915] Use struct sctp_sack_info instead [ 217.405438][ T8919] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 218.019107][ T8927] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 218.382680][ T5976] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 218.516189][ T8937] netlink: 64 bytes leftover after parsing attributes in process `syz.2.909'. [ 218.597308][ T8940] sctp: [Deprecated]: syz.3.908 (pid 8940) Use of struct sctp_assoc_value in delayed_ack socket option. [ 218.597308][ T8940] Use struct sctp_sack_info instead [ 218.719365][ T8945] sctp: [Deprecated]: syz.3.912 (pid 8945) Use of struct sctp_assoc_value in delayed_ack socket option. [ 218.719365][ T8945] Use struct sctp_sack_info instead [ 218.782129][ T8955] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 218.885125][ T8960] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 219.099169][ T8965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.919'. [ 219.194495][ T5976] Bluetooth: hci1: command 0x0406 tx timeout [ 219.271292][ T8967] sctp: [Deprecated]: syz.1.920 (pid 8967) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.271292][ T8967] Use struct sctp_sack_info instead [ 219.771882][ T8976] sctp: [Deprecated]: syz.3.923 (pid 8976) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.771882][ T8976] Use struct sctp_sack_info instead [ 219.992599][ T8993] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 220.004675][ T5976] Bluetooth: hci0: command 0x0406 tx timeout [ 220.181441][ T8998] sctp: [Deprecated]: syz.1.932 (pid 8998) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.181441][ T8998] Use struct sctp_sack_info instead [ 220.502702][ T5986] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 220.506703][ T9008] netlink: 16 bytes leftover after parsing attributes in process `syz.1.942'. [ 220.946190][ T9011] loop2: detected capacity change from 0 to 7 [ 220.950386][ T9011] Dev loop2: unable to read RDB block 7 [ 220.952256][ T9011] loop2: AHDI p1 p2 p3 [ 220.953632][ T9011] loop2: partition table partially beyond EOD, truncated [ 220.956151][ T9011] loop2: p1 start 1601398130 is beyond EOD, truncated [ 220.958714][ T9011] loop2: p2 start 1702059890 is beyond EOD, truncated [ 221.037169][ T9017] kvm: pic: non byte read [ 221.039803][ T9017] kvm: pic: level sensitive irq not supported [ 221.040044][ T9017] kvm: pic: non byte read [ 221.045216][ T9017] kvm: pic: level sensitive irq not supported [ 221.049078][ T9017] kvm: pic: non byte read [ 221.056024][ T9017] kvm: pic: level sensitive irq not supported [ 221.056308][ T9017] kvm: pic: non byte read [ 221.065652][ T9017] kvm: pic: level sensitive irq not supported [ 221.065886][ T9017] kvm: pic: non byte read [ 221.070312][ T9017] kvm: pic: level sensitive irq not supported [ 221.070544][ T9017] kvm: pic: non byte read [ 221.076349][ T9017] kvm: pic: level sensitive irq not supported [ 221.076581][ T9017] kvm: pic: non byte read [ 221.080985][ T9017] kvm: pic: level sensitive irq not supported [ 221.081215][ T9017] kvm: pic: non byte read [ 221.091200][ T9017] kvm: pic: level sensitive irq not supported [ 221.091435][ T9017] kvm: pic: non byte read [ 221.314982][ T5986] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 221.319429][ T9021] netlink: 16 bytes leftover after parsing attributes in process `syz.2.939'. [ 221.510554][ T9025] kvm: pic: non byte read [ 221.513197][ T9025] kvm: pic: level sensitive irq not supported [ 221.515838][ T9025] kvm: pic: level sensitive irq not supported [ 221.672879][ T9030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.943'. [ 221.711129][ T9034] netlink: 20 bytes leftover after parsing attributes in process `syz.1.946'. [ 221.840752][ T5976] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 221.841295][ T9037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.947'. [ 222.137795][ T5986] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 222.139914][ T9040] netlink: 16 bytes leftover after parsing attributes in process `syz.0.948'. [ 222.494528][ T9042] sctp: [Deprecated]: syz.2.949 (pid 9042) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.494528][ T9042] Use struct sctp_sack_info instead [ 222.657384][ T9055] netlink: 56 bytes leftover after parsing attributes in process `syz.2.955'. [ 223.028367][ T9062] sctp: [Deprecated]: syz.3.958 (pid 9062) Use of struct sctp_assoc_value in delayed_ack socket option. [ 223.028367][ T9062] Use struct sctp_sack_info instead [ 223.159424][ T9072] netlink: 20 bytes leftover after parsing attributes in process `syz.3.963'. [ 223.170784][ T9074] netlink: 56 bytes leftover after parsing attributes in process `syz.1.964'. [ 223.228969][ T9082] loop2: detected capacity change from 0 to 7 [ 223.232366][ T9082] Dev loop2: unable to read RDB block 7 [ 223.236878][ T9082] loop2: AHDI p1 p2 p3 [ 223.238612][ T9082] loop2: partition table partially beyond EOD, truncated [ 223.241469][ T9082] loop2: p1 start 1601398130 is beyond EOD, truncated [ 223.244265][ T9082] loop2: p2 start 1702059890 is beyond EOD, truncated [ 223.305679][ T9081] sctp: [Deprecated]: syz.3.967 (pid 9081) Use of struct sctp_assoc_value in delayed_ack socket option. [ 223.305679][ T9081] Use struct sctp_sack_info instead [ 223.399439][ T5976] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 223.510635][ T9088] sctp: [Deprecated]: syz.1.977 (pid 9088) Use of struct sctp_assoc_value in delayed_ack socket option. [ 223.510635][ T9088] Use struct sctp_sack_info instead [ 223.674643][ T5976] Bluetooth: hci0: command 0x0406 tx timeout [ 224.171080][ T5976] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 224.174366][ T9110] __nla_validate_parse: 3 callbacks suppressed [ 224.174376][ T9110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.979'. [ 224.386686][ T9113] loop2: detected capacity change from 0 to 7 [ 224.389086][ T9113] Dev loop2: unable to read RDB block 7 [ 224.390844][ T9113] loop2: AHDI p1 p2 p3 [ 224.392190][ T9113] loop2: partition table partially beyond EOD, truncated [ 224.394550][ T9113] loop2: p1 start 1601398130 is beyond EOD, truncated [ 224.396718][ T9113] loop2: p2 start 1702059890 is beyond EOD, truncated [ 224.606425][ T9119] sctp: [Deprecated]: syz.3.983 (pid 9119) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.606425][ T9119] Use struct sctp_sack_info instead [ 225.061526][ T9130] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 225.219188][ T9135] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 225.664864][ T9141] sctp: [Deprecated]: syz.1.993 (pid 9141) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.664864][ T9141] Use struct sctp_sack_info instead [ 226.320457][ T9147] picdev_read: 17 callbacks suppressed [ 226.320469][ T9147] kvm: pic: non byte read [ 226.326371][ T9147] pic_ioport_write: 14 callbacks suppressed [ 226.326381][ T9147] kvm: pic: level sensitive irq not supported [ 226.328515][ T9147] kvm: pic: non byte read [ 226.333026][ T9147] kvm: pic: level sensitive irq not supported [ 226.333259][ T9147] kvm: pic: non byte read [ 226.338379][ T9147] kvm: pic: level sensitive irq not supported [ 226.338611][ T9147] kvm: pic: non byte read [ 226.343158][ T9147] kvm: pic: level sensitive irq not supported [ 226.343393][ T9147] kvm: pic: non byte read [ 226.348004][ T9147] kvm: pic: level sensitive irq not supported [ 226.348234][ T9147] kvm: pic: non byte read [ 226.353786][ T9147] kvm: pic: level sensitive irq not supported [ 226.354017][ T9147] kvm: pic: non byte read [ 226.360857][ T9147] kvm: pic: level sensitive irq not supported [ 226.361090][ T9147] kvm: pic: non byte read [ 226.366449][ T9147] kvm: pic: level sensitive irq not supported [ 226.366682][ T9147] kvm: pic: non byte read [ 226.573258][ T9159] sctp: [Deprecated]: syz.0.1000 (pid 9159) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.573258][ T9159] Use struct sctp_sack_info instead [ 226.705902][ T5986] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 226.713398][ T9162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1001'. [ 226.968951][ T9167] sctp: [Deprecated]: syz.1.1002 (pid 9167) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.968951][ T9167] Use struct sctp_sack_info instead [ 227.029027][ T5976] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 227.030167][ T9168] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1003'. [ 227.816459][ T5976] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 228.202368][ T9183] sctp: [Deprecated]: syz.1.1009 (pid 9183) Use of struct sctp_assoc_value in delayed_ack socket option. [ 228.202368][ T9183] Use struct sctp_sack_info instead [ 228.477118][ T9191] sctp: [Deprecated]: syz.3.1012 (pid 9191) Use of struct sctp_assoc_value in delayed_ack socket option. [ 228.477118][ T9191] Use struct sctp_sack_info instead [ 228.915561][ T9198] kvm: pic: non byte read [ 229.024678][ T9198] kvm: pic: level sensitive irq not supported [ 229.026752][ T9198] kvm: pic: level sensitive irq not supported [ 229.446702][ T9207] sctp: [Deprecated]: syz.1.1018 (pid 9207) Use of struct sctp_assoc_value in delayed_ack socket option. [ 229.446702][ T9207] Use struct sctp_sack_info instead [ 229.576179][ T9210] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 229.736802][ T9217] sctp: [Deprecated]: syz.1.1021 (pid 9217) Use of struct sctp_assoc_value in delayed_ack socket option. [ 229.736802][ T9217] Use struct sctp_sack_info instead [ 229.821286][ T5986] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 229.827309][ T9220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1022'. [ 229.846037][ T5986] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 230.359530][ T9234] sctp: [Deprecated]: syz.0.1028 (pid 9234) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.359530][ T9234] Use struct sctp_sack_info instead [ 230.468678][ T5986] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 230.470708][ T9239] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 230.472170][ T9240] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1029'. [ 230.985136][ T9244] sctp: [Deprecated]: syz.1.1031 (pid 9244) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.985136][ T9244] Use struct sctp_sack_info instead [ 231.159598][ T5986] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 231.237653][ T9258] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 231.536096][ T5986] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 231.693132][ T5986] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 231.984504][ T6054] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 232.147586][ T6054] usb 8-1: config 0 has no interfaces? [ 232.151264][ T6054] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 232.154085][ T6054] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.156695][ T6054] usb 8-1: Product: syz [ 232.162142][ T6054] usb 8-1: Manufacturer: syz [ 232.164130][ T6054] usb 8-1: SerialNumber: syz [ 232.171147][ T6054] usb 8-1: config 0 descriptor?? [ 232.205505][ T6037] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 232.374489][ T6037] usb 7-1: Using ep0 maxpacket: 32 [ 232.377308][ T6037] usb 7-1: config 0 has no interfaces? [ 232.383217][ T6037] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 232.386139][ T6037] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.388629][ T6037] usb 7-1: Product: syz [ 232.389965][ T6037] usb 7-1: Manufacturer: syz [ 232.391448][ T6037] usb 7-1: SerialNumber: syz [ 232.394104][ T6037] usb 7-1: config 0 descriptor?? [ 232.405407][ T9273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.408282][ T9273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.458699][ T5986] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 232.496312][ T6037] usb 8-1: USB disconnect, device number 21 [ 232.607667][ T6054] usb 7-1: USB disconnect, device number 23 [ 232.724495][ T6061] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 232.876827][ T6061] usb 6-1: config 0 has no interfaces? [ 232.880139][ T6061] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 232.882993][ T6061] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.885571][ T6061] usb 6-1: Product: syz [ 232.886901][ T6061] usb 6-1: Manufacturer: syz [ 232.888462][ T6061] usb 6-1: SerialNumber: syz [ 232.891243][ T6061] usb 6-1: config 0 descriptor?? [ 233.109757][ T9280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.112594][ T9280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.195676][ T6061] usb 6-1: USB disconnect, device number 20 [ 233.644162][ T9309] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 233.901488][ T5986] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 233.906432][ T9317] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1056'. [ 234.778409][ T5986] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 235.028853][ T5986] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 235.029156][ T9341] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1063'. [ 235.044927][ T9343] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 236.185707][ T6054] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 236.344447][ T6054] usb 7-1: Using ep0 maxpacket: 32 [ 236.346522][ T6054] usb 7-1: no configurations [ 236.347929][ T6054] usb 7-1: can't read configurations, error -22 [ 236.484471][ T6054] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 236.634499][ T6054] usb 7-1: Using ep0 maxpacket: 32 [ 236.636571][ T6054] usb 7-1: no configurations [ 236.638052][ T6054] usb 7-1: can't read configurations, error -22 [ 236.640266][ T6054] usb usb7-port1: attempt power cycle [ 236.994472][ T6054] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 237.024869][ T6054] usb 7-1: Using ep0 maxpacket: 32 [ 237.026998][ T6054] usb 7-1: no configurations [ 237.028476][ T6054] usb 7-1: can't read configurations, error -22 [ 237.174464][ T6054] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 237.205574][ T6054] usb 7-1: Using ep0 maxpacket: 32 [ 237.207703][ T6054] usb 7-1: no configurations [ 237.209175][ T6054] usb 7-1: can't read configurations, error -22 [ 237.211290][ T6054] usb usb7-port1: unable to enumerate USB device [ 238.972255][ T5986] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 239.066876][ T5986] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 239.087652][ T9375] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 239.434456][ T2294] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 239.434509][ T6037] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 239.604439][ T2294] usb 7-1: Using ep0 maxpacket: 32 [ 239.604546][ T6037] usb 5-1: Using ep0 maxpacket: 32 [ 239.609788][ T6037] usb 5-1: config 0 has no interfaces? [ 239.612895][ T2294] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 239.613137][ T6037] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 239.615408][ T2294] usb 7-1: can't read configurations, error -61 [ 239.618491][ T6037] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.622799][ T6037] usb 5-1: Product: syz [ 239.624146][ T6037] usb 5-1: Manufacturer: syz [ 239.625927][ T6037] usb 5-1: SerialNumber: syz [ 239.629004][ T6037] usb 5-1: config 0 descriptor?? [ 239.774884][ T2294] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 239.839413][ T6036] usb 5-1: USB disconnect, device number 17 [ 239.914512][ T8691] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 239.934600][ T2294] usb 7-1: Using ep0 maxpacket: 32 [ 239.939306][ T2294] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 239.941680][ T2294] usb 7-1: can't read configurations, error -61 [ 239.943856][ T2294] usb usb7-port1: attempt power cycle [ 240.088047][ T8691] usb 8-1: config 0 has no interfaces? [ 240.091343][ T8691] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 240.094158][ T8691] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.096885][ T8691] usb 8-1: Product: syz [ 240.098210][ T8691] usb 8-1: Manufacturer: syz [ 240.099683][ T8691] usb 8-1: SerialNumber: syz [ 240.102485][ T8691] usb 8-1: config 0 descriptor?? [ 240.184553][ T53] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 240.304443][ T2294] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 240.323383][ T9388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.326873][ T9388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.329428][ T2294] usb 7-1: Using ep0 maxpacket: 32 [ 240.332626][ T2294] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 240.335338][ T2294] usb 7-1: can't read configurations, error -61 [ 240.346117][ T53] usb 6-1: config 0 has no interfaces? [ 240.349337][ T53] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 240.352155][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.355376][ T53] usb 6-1: Product: syz [ 240.357004][ T53] usb 6-1: Manufacturer: syz [ 240.358893][ T53] usb 6-1: SerialNumber: syz [ 240.361716][ T53] usb 6-1: config 0 descriptor?? [ 240.369054][ T5986] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 240.397437][ T6037] usb 8-1: USB disconnect, device number 22 [ 240.464475][ T2294] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 240.472241][ T9398] sctp: [Deprecated]: syz.0.1086 (pid 9398) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.472241][ T9398] Use struct sctp_sack_info instead [ 240.494820][ T2294] usb 7-1: Using ep0 maxpacket: 32 [ 240.497971][ T2294] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 240.500494][ T2294] usb 7-1: can't read configurations, error -61 [ 240.502717][ T2294] usb usb7-port1: unable to enumerate USB device [ 240.579853][ T9390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.582666][ T9390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.656382][ T2294] usb 6-1: USB disconnect, device number 21 [ 241.060357][ T9410] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 241.316872][ T5986] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 241.379208][ T9417] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 242.055190][ T2294] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 242.216979][ T2294] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 242.219624][ T2294] usb 8-1: config 0 has no interface number 0 [ 242.221682][ T2294] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 242.224703][ T2294] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.228404][ T2294] usb 8-1: config 0 descriptor?? [ 242.231692][ T2294] usb 8-1: selecting invalid altsetting 1 [ 242.234005][ T2294] dvb_ttusb_budget: ttusb_init_controller: error [ 242.237156][ T2294] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 242.266370][ T2294] DVB: Unable to find symbol cx22700_attach() [ 242.286414][ T2294] DVB: Unable to find symbol tda10046_attach() [ 242.288475][ T2294] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 242.366884][ T9424] sctp: [Deprecated]: syz.2.1094 (pid 9424) Use of struct sctp_assoc_value in delayed_ack socket option. [ 242.366884][ T9424] Use struct sctp_sack_info instead [ 242.480413][ T9429] sctp: [Deprecated]: syz.2.1095 (pid 9429) Use of struct sctp_assoc_value in delayed_ack socket option. [ 242.480413][ T9429] Use struct sctp_sack_info instead [ 242.495883][ T10] usb 8-1: USB disconnect, device number 23 [ 242.694467][ T6061] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 242.774469][ T5871] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 242.844571][ T6061] usb 6-1: Using ep0 maxpacket: 32 [ 242.847427][ T6061] usb 6-1: config 0 has no interfaces? [ 242.850617][ T6061] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 242.853410][ T6061] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.855976][ T6061] usb 6-1: Product: syz [ 242.857276][ T6061] usb 6-1: Manufacturer: syz [ 242.858709][ T6061] usb 6-1: SerialNumber: syz [ 242.861274][ T6061] usb 6-1: config 0 descriptor?? [ 242.926003][ T5871] usb 7-1: config 0 has no interfaces? [ 242.929227][ T5871] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 242.932036][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.935632][ T5871] usb 7-1: Product: syz [ 242.936951][ T5871] usb 7-1: Manufacturer: syz [ 242.938417][ T5871] usb 7-1: SerialNumber: syz [ 242.940960][ T5871] usb 7-1: config 0 descriptor?? [ 243.048640][ T9441] syz.3.1101: attempt to access beyond end of device [ 243.048640][ T9441] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 243.053341][ T9441] syz.3.1101: attempt to access beyond end of device [ 243.053341][ T9441] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 243.057701][ T9441] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 243.061003][ T9441] syz.3.1101: attempt to access beyond end of device [ 243.061003][ T9441] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 243.066315][ T9441] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 243.069317][ T9441] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 243.070965][ T6037] usb 6-1: USB disconnect, device number 22 [ 243.071663][ T9441] UDF-fs: Scanning with blocksize 512 failed [ 243.076413][ T9441] syz.3.1101: attempt to access beyond end of device [ 243.076413][ T9441] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 243.080454][ T9441] syz.3.1101: attempt to access beyond end of device [ 243.080454][ T9441] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 243.084489][ T9441] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 243.087579][ T9441] syz.3.1101: attempt to access beyond end of device [ 243.087579][ T9441] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 243.091583][ T9441] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 243.094621][ T9441] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 243.096980][ T9441] UDF-fs: Scanning with blocksize 1024 failed [ 243.099251][ T9441] syz.3.1101: attempt to access beyond end of device [ 243.099251][ T9441] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 243.103273][ T9441] syz.3.1101: attempt to access beyond end of device [ 243.103273][ T9441] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 243.107383][ T9441] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 243.110444][ T9441] syz.3.1101: attempt to access beyond end of device [ 243.110444][ T9441] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 243.114572][ T9441] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 243.117504][ T9441] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 243.119876][ T9441] UDF-fs: Scanning with blocksize 2048 failed [ 243.122085][ T9441] syz.3.1101: attempt to access beyond end of device [ 243.122085][ T9441] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 243.126815][ T9441] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 243.129828][ T9441] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 243.132828][ T9441] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 243.135310][ T9441] UDF-fs: Scanning with blocksize 4096 failed [ 243.137222][ T9441] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 243.159213][ T9432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.162329][ T9432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.217174][ T5871] usb 7-1: USB disconnect, device number 32 [ 243.225458][ T9446] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 243.267727][ T9448] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 243.271573][ T9448] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 243.275131][ T9448] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 243.277729][ T9448] UDF-fs: Scanning with blocksize 512 failed [ 243.280182][ T9448] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 243.283765][ T9448] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 243.287067][ T9448] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 243.289425][ T9448] UDF-fs: Scanning with blocksize 1024 failed [ 243.291697][ T9448] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 243.295068][ T9448] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 243.297994][ T9448] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 243.300350][ T9448] UDF-fs: Scanning with blocksize 2048 failed [ 243.302547][ T9448] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 243.305683][ T9448] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 243.308593][ T9448] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 243.310925][ T9448] UDF-fs: Scanning with blocksize 4096 failed [ 243.312829][ T9448] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 243.823598][ T9452] sctp: [Deprecated]: syz.2.1105 (pid 9452) Use of struct sctp_assoc_value in delayed_ack socket option. [ 243.823598][ T9452] Use struct sctp_sack_info instead [ 243.854516][ T6036] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 244.009530][ T9444] block nbd3: shutting down sockets [ 244.034619][ T6036] usb 6-1: Using ep0 maxpacket: 32 [ 244.038922][ T6036] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 244.041317][ T6036] usb 6-1: can't read configurations, error -61 [ 244.174667][ T6036] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 244.177579][ T9463] sctp: [Deprecated]: syz.3.1107 (pid 9463) Use of struct sctp_assoc_value in delayed_ack socket option. [ 244.177579][ T9463] Use struct sctp_sack_info instead [ 244.317794][ T9465] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 244.320912][ T9465] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 244.323880][ T9465] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 244.324474][ T6036] usb 6-1: Using ep0 maxpacket: 32 [ 244.328134][ T9465] UDF-fs: Scanning with blocksize 1024 failed [ 244.330480][ T6036] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 244.330501][ T9465] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 244.332887][ T6036] usb 6-1: can't read configurations, error -61 [ 244.337125][ T9465] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 244.339168][ T6036] usb usb6-port1: attempt power cycle [ 244.340872][ T9465] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 244.345179][ T9465] UDF-fs: Scanning with blocksize 2048 failed [ 244.347458][ T9465] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 244.350452][ T9465] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 244.353428][ T9465] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 244.355952][ T9465] UDF-fs: Scanning with blocksize 4096 failed [ 244.357884][ T9465] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 244.404587][ T6011] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 244.563909][ T6011] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 244.566478][ T6011] usb 5-1: config 0 has no interface number 0 [ 244.568458][ T6011] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 244.571203][ T6011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.574830][ T6011] usb 5-1: config 0 descriptor?? [ 244.577944][ T6011] usb 5-1: selecting invalid altsetting 1 [ 244.579792][ T6011] dvb_ttusb_budget: ttusb_init_controller: error [ 244.581736][ T6011] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 244.603483][ T6011] DVB: Unable to find symbol cx22700_attach() [ 244.622353][ T6011] DVB: Unable to find symbol tda10046_attach() [ 244.624597][ T6011] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 244.674545][ T6036] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 244.696213][ T6036] usb 6-1: Using ep0 maxpacket: 32 [ 244.699345][ T6036] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 244.701741][ T6036] usb 6-1: can't read configurations, error -61 [ 244.785530][ T2294] usb 5-1: USB disconnect, device number 18 [ 244.834543][ T6036] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 244.855904][ T6036] usb 6-1: Using ep0 maxpacket: 32 [ 244.859976][ T6036] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 244.862381][ T6036] usb 6-1: can't read configurations, error -61 [ 244.864603][ T6036] usb usb6-port1: unable to enumerate USB device [ 245.016349][ T9480] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 245.019554][ T9480] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 245.022501][ T9480] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 245.026524][ T9480] UDF-fs: Scanning with blocksize 512 failed [ 245.029051][ T9480] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 245.032121][ T9480] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 245.035357][ T9480] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 245.037745][ T9480] UDF-fs: Scanning with blocksize 1024 failed [ 245.040008][ T9480] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 245.043044][ T9480] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 245.046920][ T9480] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 245.049277][ T9480] UDF-fs: Scanning with blocksize 2048 failed [ 245.051485][ T9480] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 245.054609][ T9480] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 245.057544][ T9480] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 245.059902][ T9480] UDF-fs: Scanning with blocksize 4096 failed [ 245.061817][ T9480] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 245.069327][ T9479] block nbd2: shutting down sockets [ 245.381938][ T9491] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 246.000433][ T9494] sctp: [Deprecated]: syz.2.1118 (pid 9494) Use of struct sctp_assoc_value in delayed_ack socket option. [ 246.000433][ T9494] Use struct sctp_sack_info instead [ 246.270595][ T9503] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1121'. [ 246.673479][ T9516] sctp: [Deprecated]: syz.1.1127 (pid 9516) Use of struct sctp_assoc_value in delayed_ack socket option. [ 246.673479][ T9516] Use struct sctp_sack_info instead [ 247.608237][ T9533] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 248.004672][ T6036] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 248.066288][ T9541] sctp: [Deprecated]: syz.3.1134 (pid 9541) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.066288][ T9541] Use struct sctp_sack_info instead [ 248.142582][ T9545] sctp: [Deprecated]: syz.3.1136 (pid 9545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.142582][ T9545] Use struct sctp_sack_info instead [ 248.174467][ T6036] usb 5-1: Using ep0 maxpacket: 32 [ 248.176462][ T9547] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1137'. [ 248.177669][ T6036] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 248.182397][ T6036] usb 5-1: can't read configurations, error -61 [ 248.324467][ T6036] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 248.484961][ T6036] usb 5-1: Using ep0 maxpacket: 32 [ 248.488261][ T6036] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 248.490621][ T6036] usb 5-1: can't read configurations, error -61 [ 248.492832][ T6036] usb usb5-port1: attempt power cycle [ 248.834452][ T6036] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 248.864827][ T6036] usb 5-1: Using ep0 maxpacket: 32 [ 248.868228][ T6036] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 248.870735][ T6036] usb 5-1: can't read configurations, error -61 [ 249.004464][ T6036] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 249.024840][ T6036] usb 5-1: Using ep0 maxpacket: 32 [ 249.028006][ T6036] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 249.030458][ T6036] usb 5-1: can't read configurations, error -61 [ 249.032717][ T6036] usb usb5-port1: unable to enumerate USB device [ 249.507133][ T9572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1146'. [ 250.901684][ T9593] bio_check_eod: 35 callbacks suppressed [ 250.901695][ T9593] syz.0.1153: attempt to access beyond end of device [ 250.901695][ T9593] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 250.911959][ T9593] syz.0.1153: attempt to access beyond end of device [ 250.911959][ T9593] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 250.917041][ T9593] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 250.920415][ T9593] ------------[ cut here ]------------ [ 250.922215][ T9593] WARNING: CPU: 1 PID: 9593 at fs/buffer.c:1125 __getblk_slow+0x4cc/0x560 [ 250.924962][ T9593] Modules linked in: [ 250.926623][ T9593] CPU: 1 UID: 0 PID: 9593 Comm: syz.0.1153 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 250.931614][ T9593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 250.935044][ T9593] RIP: 0010:__getblk_slow+0x4cc/0x560 [ 250.936751][ T9593] Code: c0 8b 48 89 df e8 c4 09 bc ff 90 0f 0b e8 1c 54 74 ff 48 c7 c6 a0 56 c0 8b 48 89 df e8 ad 09 bc ff 90 0f 0b e8 05 54 74 ff 90 <0f> 0b 90 8b 74 24 0c 89 ea 48 c7 c7 00 58 c0 8b 31 db e8 cd 19 53 [ 250.942712][ T9593] RSP: 0018:ffffc900262277d0 EFLAGS: 00010287 [ 250.944714][ T9593] RAX: 0000000000004cb1 RBX: 0000000000000200 RCX: ffffc9000ca32000 [ 250.947202][ T9593] RDX: 0000000000080000 RSI: ffffffff8246bbbb RDI: 0000000000000005 [ 250.949676][ T9593] RBP: 0000000000000400 R08: 0000000000000005 R09: 0000000000000000 [ 250.952164][ T9593] R10: 0000000000000200 R11: 0000000000000000 R12: ffff8880448cae00 [ 250.954776][ T9593] R13: 0000000000000200 R14: 0000000000000200 R15: ffff8880448cae00 [ 250.957375][ T9593] FS: 0000000000000000(0000) GS:ffff8880975cc000(0063) knlGS:00000000f542eb40 [ 250.960215][ T9593] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 250.962294][ T9593] CR2: 0000000032103ffc CR3: 000000006e204000 CR4: 0000000000352ef0 [ 250.964903][ T9593] Call Trace: [ 250.965988][ T9593] [ 250.966971][ T9593] ? __pfx___might_resched+0x10/0x10 [ 250.968659][ T9593] bdev_getblk+0xd4/0xe0 [ 250.970036][ T9593] __bread_gfp+0x86/0x3c0 [ 250.971436][ T9593] udf_read_tagged+0xae/0x740 [ 250.972947][ T9593] udf_check_anchor_block+0x89/0x4b0 [ 250.974726][ T9593] ? udf_get_last_block+0x1ce/0x2a0 [ 250.976431][ T9593] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 250.978330][ T9593] udf_load_vrs+0x682/0x1070 [ 250.979829][ T9593] ? __pfx_udf_load_vrs+0x10/0x10 [ 250.981425][ T9593] ? __pfx_udf_get_last_session+0x10/0x10 [ 250.983240][ T9593] ? lockdep_init_map_type+0x5c/0x280 [ 250.985022][ T9593] udf_fill_super+0x791/0x1df0 [ 250.986546][ T9593] ? __pfx_udf_fill_super+0x10/0x10 [ 250.988212][ T9593] ? do_raw_spin_lock+0x12c/0x2b0 [ 250.989822][ T9593] ? find_held_lock+0x2b/0x80 [ 250.991339][ T9593] ? sb_set_blocksize+0x176/0x1d0 [ 250.992955][ T9593] ? setup_bdev_super+0x369/0x730 [ 250.994621][ T9593] get_tree_bdev_flags+0x38c/0x620 [ 250.996261][ T9593] ? __pfx_udf_fill_super+0x10/0x10 [ 250.997904][ T9593] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 250.999693][ T9593] ? apparmor_capable+0x114/0x1d0 [ 251.001387][ T9593] ? bpf_lsm_capable+0x9/0x10 [ 251.002921][ T9593] ? security_capable+0x7e/0x260 [ 251.004583][ T9593] vfs_get_tree+0x8b/0x340 [ 251.006017][ T9593] path_mount+0x1482/0x1fd0 [ 251.007490][ T9593] ? __pfx_path_mount+0x10/0x10 [ 251.009060][ T9593] ? kmem_cache_free+0x2d1/0x4d0 [ 251.010623][ T9593] ? putname+0x154/0x1a0 [ 251.012006][ T9593] ? getname_flags.part.0+0x1c5/0x550 [ 251.013701][ T9593] ? __ia32_sys_mount+0x28b/0x310 [ 251.015383][ T9593] __ia32_sys_mount+0x28b/0x310 [ 251.016931][ T9593] ? __pfx___ia32_sys_mount+0x10/0x10 [ 251.018625][ T9593] ? rcu_is_watching+0x12/0xc0 [ 251.020163][ T9593] __do_fast_syscall_32+0x7c/0x3a0 [ 251.021795][ T9593] do_fast_syscall_32+0x32/0x80 [ 251.023357][ T9593] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 251.025413][ T9593] RIP: 0023:0xf703e579 [ 251.026723][ T9593] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 251.032718][ T9593] RSP: 002b:00000000f542e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 251.035399][ T9593] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000080004a00 [ 251.037876][ T9593] RDX: 0000000080000080 RSI: 0000000000000014 RDI: 0000000000000000 [ 251.040381][ T9593] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 251.042855][ T9593] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 251.045408][ T9593] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 251.047897][ T9593] [ 251.048907][ T9593] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 251.051188][ T9593] CPU: 1 UID: 0 PID: 9593 Comm: syz.0.1153 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 251.054781][ T9593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 251.058106][ T9593] Call Trace: [ 251.059198][ T9593] [ 251.060149][ T9593] dump_stack_lvl+0x3d/0x1f0 [ 251.061620][ T9593] vpanic+0x6e8/0x7a0 [ 251.062914][ T9593] ? __pfx_vpanic+0x10/0x10 [ 251.064373][ T9593] ? __getblk_slow+0x4cc/0x560 [ 251.065931][ T9593] panic+0xca/0xd0 [ 251.067162][ T9593] ? __pfx_panic+0x10/0x10 [ 251.068599][ T9593] check_panic_on_warn+0xab/0xb0 [ 251.070192][ T9593] __warn+0xf6/0x3c0 [ 251.071465][ T9593] ? __getblk_slow+0x4cc/0x560 [ 251.073003][ T9593] report_bug+0x3c3/0x580 [ 251.074393][ T9593] ? __getblk_slow+0x4cc/0x560 [ 251.075923][ T9593] handle_bug+0x184/0x210 [ 251.077302][ T9593] exc_invalid_op+0x17/0x50 [ 251.078741][ T9593] asm_exc_invalid_op+0x1a/0x20 [ 251.080294][ T9593] RIP: 0010:__getblk_slow+0x4cc/0x560 [ 251.081973][ T9593] Code: c0 8b 48 89 df e8 c4 09 bc ff 90 0f 0b e8 1c 54 74 ff 48 c7 c6 a0 56 c0 8b 48 89 df e8 ad 09 bc ff 90 0f 0b e8 05 54 74 ff 90 <0f> 0b 90 8b 74 24 0c 89 ea 48 c7 c7 00 58 c0 8b 31 db e8 cd 19 53 [ 251.088625][ T9593] RSP: 0018:ffffc900262277d0 EFLAGS: 00010287 [ 251.091017][ T9593] RAX: 0000000000004cb1 RBX: 0000000000000200 RCX: ffffc9000ca32000 [ 251.094121][ T9593] RDX: 0000000000080000 RSI: ffffffff8246bbbb RDI: 0000000000000005 [ 251.097224][ T9593] RBP: 0000000000000400 R08: 0000000000000005 R09: 0000000000000000 [ 251.100326][ T9593] R10: 0000000000000200 R11: 0000000000000000 R12: ffff8880448cae00 [ 251.103425][ T9593] R13: 0000000000000200 R14: 0000000000000200 R15: ffff8880448cae00 [ 251.106512][ T9593] ? __getblk_slow+0x4cb/0x560 [ 251.108421][ T9593] ? __pfx___might_resched+0x10/0x10 [ 251.110171][ T9593] bdev_getblk+0xd4/0xe0 [ 251.111534][ T9593] __bread_gfp+0x86/0x3c0 [ 251.112924][ T9593] udf_read_tagged+0xae/0x740 [ 251.114431][ T9593] udf_check_anchor_block+0x89/0x4b0 [ 251.116099][ T9593] ? udf_get_last_block+0x1ce/0x2a0 [ 251.117736][ T9593] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 251.119619][ T9593] udf_load_vrs+0x682/0x1070 [ 251.121090][ T9593] ? __pfx_udf_load_vrs+0x10/0x10 [ 251.122678][ T9593] ? __pfx_udf_get_last_session+0x10/0x10 [ 251.124482][ T9593] ? lockdep_init_map_type+0x5c/0x280 [ 251.126170][ T9593] udf_fill_super+0x791/0x1df0 [ 251.127690][ T9593] ? __pfx_udf_fill_super+0x10/0x10 [ 251.129328][ T9593] ? do_raw_spin_lock+0x12c/0x2b0 [ 251.130916][ T9593] ? find_held_lock+0x2b/0x80 [ 251.132415][ T9593] ? sb_set_blocksize+0x176/0x1d0 [ 251.134017][ T9593] ? setup_bdev_super+0x369/0x730 [ 251.135604][ T9593] get_tree_bdev_flags+0x38c/0x620 [ 251.137211][ T9593] ? __pfx_udf_fill_super+0x10/0x10 [ 251.138854][ T9593] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 251.140615][ T9593] ? apparmor_capable+0x114/0x1d0 [ 251.142196][ T9593] ? bpf_lsm_capable+0x9/0x10 [ 251.143690][ T9593] ? security_capable+0x7e/0x260 [ 251.145251][ T9593] vfs_get_tree+0x8b/0x340 [ 251.146658][ T9593] path_mount+0x1482/0x1fd0 [ 251.148112][ T9593] ? __pfx_path_mount+0x10/0x10 [ 251.149670][ T9593] ? kmem_cache_free+0x2d1/0x4d0 [ 251.151253][ T9593] ? putname+0x154/0x1a0 [ 251.152632][ T9593] ? getname_flags.part.0+0x1c5/0x550 [ 251.154337][ T9593] ? __ia32_sys_mount+0x28b/0x310 [ 251.155934][ T9593] __ia32_sys_mount+0x28b/0x310 [ 251.157476][ T9593] ? __pfx___ia32_sys_mount+0x10/0x10 [ 251.159187][ T9593] ? rcu_is_watching+0x12/0xc0 [ 251.160698][ T9593] __do_fast_syscall_32+0x7c/0x3a0 [ 251.162319][ T9593] do_fast_syscall_32+0x32/0x80 [ 251.163866][ T9593] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 251.165847][ T9593] RIP: 0023:0xf703e579 [ 251.167157][ T9593] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 251.173118][ T9593] RSP: 002b:00000000f542e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 251.175695][ T9593] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000080004a00 [ 251.178149][ T9593] RDX: 0000000080000080 RSI: 0000000000000014 RDI: 0000000000000000 [ 251.180632][ T9593] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 251.183091][ T9593] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 251.185589][ T9593] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 251.188071][ T9593] [ 251.189610][ T9593] Kernel Offset: disabled [ 251.191133][ T9593] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:49:40 Registers: info registers vcpu 0 CPU#0 RAX=0000000000ce67c9 RBX=0000000000000000 RCX=ffffffff8b8f7bf9 RDX=0000000000000000 RSI=ffffffff8de47f9c RDI=ffffffff8c161580 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab2990 R15=0000000000000000 RIP=ffffffff8b8f675f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974cc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080000080 CR3=000000006da45000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85609b15 RDI=ffffffff9b0f07c0 RBP=ffffffff9b0f0780 RSP=ffffc90026227140 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b0f0780 R15=ffffffff85609ab0 RIP=ffffffff85609b3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975cc000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032103ffc CR3=000000006e204000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000006af831 RBX=0000000000000002 RCX=ffffffff8b8f7bf9 RDX=0000000000000000 RSI=ffffffff8de47f9c RDI=ffffffff8c161580 RBP=ffffed1003a59910 RSP=ffffc9000047fdf8 R8 =0000000000000001 R9 =ffffed1005686655 R10=ffff88802b4332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801d2cc880 R14=ffffffff90ab2990 R15=0000000000000000 RIP=ffffffff8b8f675f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976cc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f71f3b10 CR3=00000000678ba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000060bdad RBX=0000000000000003 RCX=ffffffff8b8f7bf9 RDX=0000000000000000 RSI=ffffffff8de47f9c RDI=ffffffff8c161580 RBP=ffffed10037e1000 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801bf08000 R14=ffffffff90ab2990 R15=0000000000000000 RIP=ffffffff8b8f675f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977cc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000320f7ffc CR3=000000006f3f2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000