last executing test programs: 8.962137154s ago: executing program 2 (id=2947): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xfffe, r5, 0x0}]) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf) write$UHID_INPUT(r4, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) socket$netlink(0x10, 0x3, 0x15) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chown(&(0x7f00000003c0)='./cgroup\x00', 0x0, 0x0) stat(&(0x7f0000000240)='./file0/file0\x00', 0x0) 7.880648776s ago: executing program 1 (id=2954): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xfffe, r5, 0x0}]) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf) write$UHID_INPUT(r4, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) socket$netlink(0x10, 0x3, 0x15) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chown(&(0x7f00000003c0)='./cgroup\x00', 0x0, 0x0) stat(&(0x7f0000000240)='./file0/file0\x00', 0x0) 6.855334544s ago: executing program 2 (id=2959): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, 0x0) io_submit(0x0, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xfffe, r3, 0x0}]) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) 5.939538795s ago: executing program 1 (id=2963): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = gettid() ptrace$ARCH_SHSTK_STATUS(0x1e, r2, &(0x7f0000000740), 0x5005) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x5, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048880}, 0x10) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000840), 0x101040, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x4c4201, 0x3c) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x8, 0xff49, 0x0, 0x86, 0xb7, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000006c0)={0x6, &(0x7f0000000680)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r5, 0xc0286429, &(0x7f0000000800)={r8, 0x6, &(0x7f0000000700)=[0x0, 0x0, 0xfffffc01, 0x7, 0x2, 0x100], &(0x7f0000000740), 0x63, 0x7, 0x400, &(0x7f0000000780)=[0x401, 0x9, 0x8, 0x8, 0x40, 0x9, 0x2], &(0x7f00000007c0)=[0x3]}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 5.656828449s ago: executing program 0 (id=2967): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073"], 0x7c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073"], 0xec}, 0x1, 0x0, 0x0, 0x840}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYRES32=0x0, @ANYRESHEX=r6, @ANYBLOB="db10130b39268548be5b43919eedcbe8cfc6a8716b0e7b4eb45be3c7b450b4bb1413920bb5a90306ff745d8f63ee5597631d5c244e4e93270b4e81539d90468cb315454098", @ANYRES16=0x0, @ANYRESDEC=r1], 0x90}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) r7 = socket(0x10, 0x80002, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r8, 0x0, 0x1, &(0x7f0000004200)=""/4087, &(0x7f00000003c0)=0xfffffffffffffe9f) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r9) mmap(&(0x7f0000479000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x11, r9, 0x0) syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) 4.971430291s ago: executing program 1 (id=2968): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x2c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETVESABLANK(r6, 0x560e, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r7, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000040)) r8 = dup(r3) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = syz_io_uring_setup(0x83b, &(0x7f00000000c0)={0x0, 0xc2f6, 0x0, 0x1, 0x319}, &(0x7f0000000500)=0x0, &(0x7f0000000400)=0x0) r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x0, 0xfffffff9, 0x3, 0xca60, r8, 0x5, '\x00', 0x0, r8, 0x2, 0x3, 0x3, 0x0, @value=r8}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x19, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x31887ab3, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x0, 0x5, 0x7, 0x9, 0x20, 0x999d1e2a512ef073}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x80000000, 0x68, &(0x7f0000000440)=""/104, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x10, 0x6, 0x76}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[r8, r8, r8, r8, r13, 0x1, r8], &(0x7f0000000600)=[{0x2, 0x4, 0x6, 0x6}, {0x1, 0x5, 0xa, 0x6}, {0x4, 0x4, 0xe, 0x9}, {0x5, 0x5, 0xf, 0xe}, {0x1, 0x1, 0x0, 0xa}], 0x10, 0x5}, 0x94) ioctl$TIOCSETD(r12, 0x5423, &(0x7f0000000040)=0x5) ioctl$TIOCSTI(r12, 0x5412, &(0x7f0000000200)=0xc0) prctl$PR_SET_SECUREBITS(0x1c, 0x73) setuid(0xee01) r14 = socket(0x1d, 0x2, 0x6) setsockopt$SO_ATTACH_FILTER(r14, 0x1, 0x1a, &(0x7f0000000180)={0x0, &(0x7f0000000140)}, 0x8) syz_io_uring_submit(r10, r11, 0x0) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 4.909030401s ago: executing program 3 (id=2969): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317"], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_open_pts(r4, 0x101000) ioctl$KDDISABIO(r6, 0x4b37) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff0200000000000000000000000000012c"], 0x0) 4.50334613s ago: executing program 0 (id=2970): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000100)=""/24, 0xfffffffffffffd5b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4.466062801s ago: executing program 0 (id=2971): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x83, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x46) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/45, 0x2d) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x5, 0x0, 0x5, 0x4}}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x415a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000000010073797a300000000048000000030a010100000000000000000100000008000b400000000014000480080002400000000008000140000000000900010073797a31000000000900030073797a3000000000140000001000010000000000000000000000000a"], 0x90}}, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) process_madvise(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000400)="8524d5e68c5f73d7b65b2fa844745f0ba3", 0x11}], 0x1, 0x15, 0x0) sendmsg$NL80211_CMD_START_NAN(r5, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4) lstat64(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000a00)) 4.343106764s ago: executing program 2 (id=2972): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000100)=""/24, 0xfffffffffffffd5b, 0xc9100120, 0x0, 0xfffffffffffffd25) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 4.279357561s ago: executing program 2 (id=2973): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200"], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_open_pts(r4, 0x101000) ioctl$KDDISABIO(r6, 0x4b37) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff0200000000000000000000000000012c"], 0x0) 3.280290609s ago: executing program 1 (id=2974): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xfffe, r5, 0x0}]) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf) write$UHID_INPUT(r4, &(0x7f0000001040)={0xe, {"a2e3ad21ed0d52f90b9b6e0987f70e06d038e7ff7fc6e5539b3248298b089b0708346d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d1780700523c921b1b9b31070d075d0936cd3b78130daa61f94b61404d64aec1b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c088215ec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6f44ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d208001349b41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2a15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee53259289d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c1980778efa5ea567b7b7430acc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a0700d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8440daaa69bf5c8f4350aeae9ca1207e76061b28f27da19acc7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211c7847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e781171e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b906ce2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7ae288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289d8523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c78e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e7c7b2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df06720ba2b26bbfcc807c8aabb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db38b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1040}}, 0x1006) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) socket$netlink(0x10, 0x3, 0x15) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chown(&(0x7f00000003c0)='./cgroup\x00', 0x0, 0x0) stat(&(0x7f0000000240)='./file0/file0\x00', 0x0) 2.95039583s ago: executing program 0 (id=2975): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, 0x0) 2.84654168s ago: executing program 0 (id=2976): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317"], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_open_pts(r4, 0x101000) ioctl$KDDISABIO(r6, 0x4b37) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff0200000000000000000000000000012c"], 0x0) 2.218213804s ago: executing program 3 (id=2977): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x83, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x46) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/45, 0x2d) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x5, 0x0, 0x5, 0x4}}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x415a, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000000010073797a300000000048000000030a010100000000000000000100000008000b400000000014000480080002400000000008000140000000000900010073797a31000000000900030073797a3000000000140000001000010000000000000000000000000a"], 0x90}}, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) process_madvise(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000400)="8524d5e68c5f73d7b65b2fa844745f0ba3", 0x11}], 0x1, 0x15, 0x0) sendmsg$NL80211_CMD_START_NAN(r6, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4) lstat64(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000a00)) 1.537317019s ago: executing program 1 (id=2978): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x36b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x40045010, &(0x7f0000000080)=0xd8eb) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, 0x0, 0x20044000) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(0x0, 0x7, 0x220042) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000380)={0x3, r9, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000440)={0x5, r9}) syz_io_uring_setup(0x7a72, &(0x7f0000000480)={0x0, 0x2d12, 0x1000, 0x2, 0x306}, &(0x7f0000000140), &(0x7f0000000280)) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6eb"], 0x10}}, 0x0) 1.345199412s ago: executing program 2 (id=2979): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = gettid() ptrace$ARCH_SHSTK_STATUS(0x1e, r2, &(0x7f0000000740), 0x5005) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x5, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048880}, 0x10) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000840), 0x101040, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x4c4201, 0x3c) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x8, 0xff49, 0x0, 0x86, 0xb7, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000006c0)={0x6, &(0x7f0000000680)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r5, 0xc0286429, &(0x7f0000000800)={r8, 0x6, &(0x7f0000000700)=[0x0, 0x0, 0xfffffc01, 0x7, 0x2, 0x100], &(0x7f0000000740), 0x63, 0x7, 0x400, &(0x7f0000000780)=[0x401, 0x9, 0x8, 0x8, 0x40, 0x9, 0x2], &(0x7f00000007c0)=[0x3]}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r4, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x6000000000000000, 0x0, 0x0) 1.276884654s ago: executing program 3 (id=2980): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, 0x0, 0x0, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000100)=""/24, 0xfffffffffffffd5b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.096681813s ago: executing program 3 (id=2981): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000100)=""/24, 0xfffffffffffffd5b, 0xc9100120, 0x0, 0xfffffffffffffd25) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 906.812467ms ago: executing program 3 (id=2982): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x36b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x40045010, &(0x7f0000000080)=0xd8eb) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x20044000) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(0x0, 0x7, 0x220042) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000380)={0x3, r9, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000440)={0x5, r9}) syz_io_uring_setup(0x7a72, &(0x7f0000000480)={0x0, 0x2d12, 0x1000, 0x2, 0x306}, &(0x7f0000000140), &(0x7f0000000280)) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6eb"], 0x10}}, 0x0) 577.071516ms ago: executing program 1 (id=2983): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073"], 0x7c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073"], 0xec}, 0x1, 0x0, 0x0, 0x840}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYRES32=0x0, @ANYRESHEX=r6, @ANYBLOB="db10130b39268548be5b43919eedcbe8cfc6a8716b0e7b4eb45be3c7b450b4bb1413920bb5a90306ff745d8f63ee5597631d5c244e4e93270b4e81539d90468cb315454098", @ANYRES16=0x0, @ANYRESDEC=r1], 0x90}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) r7 = socket(0x10, 0x80002, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r8, 0x0, 0x1, &(0x7f0000004200)=""/4087, &(0x7f00000003c0)=0xfffffffffffffe9f) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r9) mmap(&(0x7f0000479000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x11, r9, 0x0) syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) 524.220761ms ago: executing program 0 (id=2984): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r0, 0x0, 0x0, 0x40, 0x0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000140)={0x74, 0x0, 0x90accf24a4511d13}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x2090}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @local}]}}}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x44}, 0x1, 0x2}, 0x4050) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xff}, {0x6, 0x0, 0x0, 0x6}]}, 0x8) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x20040000) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r9}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x1, 0x2ff}, &(0x7f0000000140), &(0x7f0000000280)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r11, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r11, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r11, &(0x7f0000000100)={0x2, 0xfc}, 0x2) sendmsg$NFNL_MSG_CTHELPER_NEW(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x70, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7ff}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x70}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 362.987271ms ago: executing program 2 (id=2985): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317"], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_open_pts(r4, 0x101000) ioctl$KDDISABIO(r6, 0x4b37) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff0200000000000000000000000000012c"], 0x0) 0s ago: executing program 3 (id=2986): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x36b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x40045010, &(0x7f0000000080)=0xd8eb) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x20044000) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(0x0, 0x7, 0x220042) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000380)={0x3, r9, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000440)={0x5, r9}) syz_io_uring_setup(0x7a72, &(0x7f0000000480)={0x0, 0x2d12, 0x1000, 0x2, 0x306}, &(0x7f0000000140), &(0x7f0000000280)) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6eb"], 0x10}}, 0x0) kernel console output (not intermixed with test programs): 04][T14867] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 694.671672][T14867] vhci_hcd vhci_hcd.0: Device attached [ 694.991132][T14878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2074'. [ 695.058397][ T9] usb usb38-port1: attempt power cycle [ 695.066336][T14880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2083'. [ 695.265232][ T7438] usb 40-1: device descriptor read/8, error -110 [ 695.812088][ T5298] Bluetooth: hci4: command 0x1003 tx timeout [ 695.815354][ T5948] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 695.815995][ T7438] usb usb40-port1: attempt power cycle [ 695.822782][ T9] usb usb38-port1: unable to enumerate USB device [ 696.145720][T14868] vhci_hcd: connection closed [ 696.145944][ T13] vhci_hcd vhci_hcd.3: stop threads [ 696.150073][ T13] vhci_hcd vhci_hcd.3: release socket [ 696.152610][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 696.395682][ T7438] usb usb40-port1: unable to enumerate USB device [ 696.555269][T14890] netlink: 'syz.0.2077': attribute type 1 has an invalid length. [ 696.558644][T14890] netlink: 'syz.0.2077': attribute type 2 has an invalid length. [ 697.019766][T14898] netlink: 'syz.3.2080': attribute type 1 has an invalid length. [ 697.023217][T14898] netlink: 'syz.3.2080': attribute type 2 has an invalid length. [ 697.151401][T14904] netlink: 'syz.2.2082': attribute type 1 has an invalid length. [ 697.154876][T14904] netlink: 'syz.2.2082': attribute type 2 has an invalid length. [ 697.177980][T14908] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2084'. [ 697.689895][T14915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2085'. [ 698.055422][T14924] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 698.057656][T14924] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 698.092271][T14924] vhci_hcd vhci_hcd.0: Device attached [ 698.278923][T14927] mkiss: ax0: crc mode is auto. [ 698.895123][T14925] vhci_hcd: connection reset by peer [ 698.898286][ T8250] vhci_hcd vhci_hcd.3: stop threads [ 698.900794][ T8250] vhci_hcd vhci_hcd.3: release socket [ 698.903515][ T5986] usb 44-1: device descriptor read/8, error -110 [ 698.903720][ T8250] vhci_hcd vhci_hcd.3: disconnect device [ 699.095598][ T5298] Bluetooth: hci4: command 0x1003 tx timeout [ 699.099625][ T5948] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 699.316142][ T5986] usb usb44-port1: attempt power cycle [ 699.670986][T14942] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 699.673927][T14942] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 699.688536][T14942] vhci_hcd vhci_hcd.0: Device attached [ 699.895730][ T5986] usb usb44-port1: unable to enumerate USB device [ 699.955282][ T63] usb 42-1: SetAddress Request (34) to port 0 [ 699.957581][ T63] usb 42-1: new SuperSpeed USB device number 34 using vhci_hcd [ 700.349938][T14943] vhci_hcd: connection reset by peer [ 700.353054][T13950] vhci_hcd vhci_hcd.2: stop threads [ 700.355347][T13950] vhci_hcd vhci_hcd.2: release socket [ 700.357744][T13950] vhci_hcd vhci_hcd.2: disconnect device [ 701.129176][T14957] netlink: 'syz.1.2093': attribute type 1 has an invalid length. [ 701.132740][T14957] netlink: 'syz.1.2093': attribute type 2 has an invalid length. [ 701.325292][ T5948] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 701.325315][ T5942] Bluetooth: hci4: command 0x1003 tx timeout [ 701.444475][T14963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2094'. [ 701.521483][T14964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2095'. [ 701.885206][ T5298] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 704.925229][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 704.925248][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 705.005327][ T63] usb 42-1: device descriptor read/8, error -110 [ 705.025604][T14999] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 705.028326][T14999] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 705.032766][T14999] vhci_hcd vhci_hcd.0: Device attached [ 705.095235][ T5298] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 705.305224][T11291] usb 44-1: SetAddress Request (19) to port 0 [ 705.307673][T11291] usb 44-1: new SuperSpeed USB device number 19 using vhci_hcd [ 705.354619][T15002] vhci_hcd: connection reset by peer [ 705.357246][ T8250] vhci_hcd vhci_hcd.3: stop threads [ 705.359212][ T8250] vhci_hcd vhci_hcd.3: release socket [ 705.361285][ T8250] vhci_hcd vhci_hcd.3: disconnect device [ 705.395732][ T63] usb usb42-port1: attempt power cycle [ 705.405157][ T5948] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 705.405216][ T5298] Bluetooth: hci6: command 0x1003 tx timeout [ 705.790418][T15014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2105'. [ 705.823484][T15015] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 705.826621][T15015] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 705.860340][T15015] vhci_hcd vhci_hcd.0: Device attached [ 705.955974][ T63] usb usb42-port1: unable to enumerate USB device [ 706.135219][ T6022] usb 38-1: SetAddress Request (48) to port 0 [ 706.137619][ T6022] usb 38-1: new SuperSpeed USB device number 48 using vhci_hcd [ 706.431268][T15023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2107'. [ 706.576897][T15016] vhci_hcd: connection reset by peer [ 706.580076][ T7198] vhci_hcd vhci_hcd.0: stop threads [ 706.582762][ T7198] vhci_hcd vhci_hcd.0: release socket [ 706.585483][ T7198] vhci_hcd vhci_hcd.0: disconnect device [ 707.245224][ T5948] Bluetooth: hci4: command 0x1003 tx timeout [ 707.245245][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 707.622980][T15037] netlink: 'syz.0.2110': attribute type 1 has an invalid length. [ 707.630469][T15037] netlink: 'syz.0.2110': attribute type 2 has an invalid length. [ 708.571711][T15053] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 708.574298][T15053] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 708.577280][T15053] vhci_hcd vhci_hcd.0: Device attached [ 709.370971][T15054] vhci_hcd: connection closed [ 709.371380][ T92] vhci_hcd vhci_hcd.0: stop threads [ 709.375577][ T92] vhci_hcd vhci_hcd.0: release socket [ 709.377799][ T92] vhci_hcd vhci_hcd.0: disconnect device [ 709.885297][ T5951] Bluetooth: hci5: command 0x1003 tx timeout [ 709.885307][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 709.885312][T12619] Bluetooth: hci4: command 0x1003 tx timeout [ 709.885916][ T5948] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 710.257451][T15064] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 710.260363][T15064] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 710.265432][T15064] vhci_hcd vhci_hcd.0: Device attached [ 710.318919][T15063] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 710.321673][T15063] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 710.326258][T15063] vhci_hcd vhci_hcd.0: Device attached [ 710.365406][T11291] usb 44-1: device descriptor read/8, error -110 [ 710.525264][ T5298] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 710.525371][ T5942] Bluetooth: hci6: command 0x1003 tx timeout [ 710.541174][ T54] usb 40-1: SetAddress Request (32) to port 0 [ 710.550301][ T54] usb 40-1: new SuperSpeed USB device number 32 using vhci_hcd [ 710.595228][ T5986] usb 42-1: SetAddress Request (38) to port 0 [ 710.598521][ T5986] usb 42-1: new SuperSpeed USB device number 38 using vhci_hcd [ 710.756079][T11291] usb usb44-port1: attempt power cycle [ 710.784239][T15076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2125'. [ 710.838149][T15067] vhci_hcd: connection reset by peer [ 710.840842][ T7005] vhci_hcd vhci_hcd.2: stop threads [ 710.843379][ T7005] vhci_hcd vhci_hcd.2: release socket [ 710.847408][ T7005] vhci_hcd vhci_hcd.2: disconnect device [ 710.871697][T15065] vhci_hcd: connection reset by peer [ 710.878157][ T1146] vhci_hcd vhci_hcd.1: stop threads [ 710.880991][ T1146] vhci_hcd vhci_hcd.1: release socket [ 710.885469][ T1146] vhci_hcd vhci_hcd.1: disconnect device [ 711.165271][ T6022] usb 38-1: device descriptor read/8, error -110 [ 711.316407][T11291] usb usb44-port1: unable to enumerate USB device [ 711.568650][ T6022] usb usb38-port1: attempt power cycle [ 711.671396][T15082] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2118'. [ 712.188420][T15092] mkiss: ax0: crc mode is auto. [ 712.789031][ T6022] usb usb38-port1: unable to enumerate USB device [ 712.849428][T15099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2122'. [ 712.925250][ T5942] Bluetooth: hci4: command 0x1003 tx timeout [ 712.935379][ T5298] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 713.796233][T15109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2124'. [ 713.943000][T15115] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 713.945593][T15115] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 713.959394][T15115] vhci_hcd vhci_hcd.0: Device attached [ 715.057421][T15116] vhci_hcd: connection closed [ 715.062665][ T1146] vhci_hcd vhci_hcd.2: stop threads [ 715.067929][ T1146] vhci_hcd vhci_hcd.2: release socket [ 715.107103][ T1146] vhci_hcd vhci_hcd.2: disconnect device [ 715.641395][T15135] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 715.643682][T15135] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 715.645197][ T5986] usb 42-1: device descriptor read/8, error -110 [ 715.648024][ T54] usb 40-1: device descriptor read/8, error -110 [ 715.648858][T15135] vhci_hcd vhci_hcd.0: Device attached [ 715.719317][T15139] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 715.722600][T15139] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 715.763187][T15139] vhci_hcd vhci_hcd.0: Device attached [ 715.815898][T15138] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 715.819187][T15138] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 715.823224][T15138] vhci_hcd vhci_hcd.0: Device attached [ 715.895179][ T54] usb 40-1: SetAddress Request (33) to port 0 [ 715.904670][ T54] usb 40-1: new SuperSpeed USB device number 33 using vhci_hcd [ 715.915184][ T6022] usb 38-1: SetAddress Request (52) to port 0 [ 715.917955][ T6022] usb 38-1: new SuperSpeed USB device number 52 using vhci_hcd [ 716.046153][ T5986] usb usb42-port1: attempt power cycle [ 716.105188][T11291] usb 44-1: SetAddress Request (23) to port 0 [ 716.112391][T11291] usb 44-1: new SuperSpeed USB device number 23 using vhci_hcd [ 716.173352][T15143] vhci_hcd: connection reset by peer [ 716.173795][ T12] vhci_hcd vhci_hcd.3: stop threads [ 716.173813][ T12] vhci_hcd vhci_hcd.3: release socket [ 716.173867][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 716.288387][T15148] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2131'. [ 716.803823][T15136] vhci_hcd: connection reset by peer [ 716.806331][ T1146] vhci_hcd vhci_hcd.0: stop threads [ 716.808097][ T1146] vhci_hcd vhci_hcd.0: release socket [ 716.809951][ T1146] vhci_hcd vhci_hcd.0: disconnect device [ 716.851543][ T5986] usb usb42-port1: unable to enumerate USB device [ 717.054332][T15140] vhci_hcd: connection reset by peer [ 717.060138][T13950] vhci_hcd vhci_hcd.1: stop threads [ 717.062012][T13950] vhci_hcd vhci_hcd.1: release socket [ 717.064105][T13950] vhci_hcd vhci_hcd.1: disconnect device [ 717.382114][T15155] mkiss: ax0: crc mode is auto. [ 719.207446][T15179] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 719.209660][T15179] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 719.212701][T15179] vhci_hcd vhci_hcd.0: Device attached [ 719.645183][ T5298] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 720.169689][T15180] vhci_hcd: connection closed [ 720.169983][ T92] vhci_hcd vhci_hcd.3: stop threads [ 720.174254][ T92] vhci_hcd vhci_hcd.3: release socket [ 720.176675][ T92] vhci_hcd vhci_hcd.3: disconnect device [ 720.285146][ T5942] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 720.285238][T12619] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 720.285323][ T5951] Bluetooth: hci5: command 0x1003 tx timeout [ 720.515983][T15194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2139'. [ 720.615510][T15195] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 720.617875][T15195] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 720.627154][T15195] vhci_hcd vhci_hcd.0: Device attached [ 721.005319][ T6022] usb 38-1: device descriptor read/8, error -110 [ 721.166292][T11291] usb 44-1: device descriptor read/8, error -110 [ 721.406697][ T6022] usb usb38-port1: attempt power cycle [ 721.443671][T15196] vhci_hcd: connection reset by peer [ 721.445754][ T1141] vhci_hcd vhci_hcd.1: stop threads [ 721.447843][ T1141] vhci_hcd vhci_hcd.1: release socket [ 721.450399][ T54] usb 40-1: device descriptor read/8, error -110 [ 721.450424][ T1141] vhci_hcd vhci_hcd.1: disconnect device [ 721.548910][T15201] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 721.552188][T15201] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 721.556393][ T54] usb usb40-port1: attempt power cycle [ 721.565288][T15201] vhci_hcd vhci_hcd.0: Device attached [ 721.615239][T11291] usb 44-1: SetAddress Request (24) to port 0 [ 721.619348][T11291] usb 44-1: new SuperSpeed USB device number 24 using vhci_hcd [ 721.867766][T15202] vhci_hcd: connection reset by peer [ 721.870067][ T92] vhci_hcd vhci_hcd.3: stop threads [ 721.871956][ T92] vhci_hcd vhci_hcd.3: release socket [ 721.873846][ T92] vhci_hcd vhci_hcd.3: disconnect device [ 721.965305][T12619] Bluetooth: hci4: command 0x1003 tx timeout [ 721.965317][ T5298] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 721.986811][ T6022] usb usb38-port1: unable to enumerate USB device [ 722.136475][ T54] usb usb40-port1: unable to enumerate USB device [ 722.385436][T15215] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 722.387766][T15215] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 722.390679][T15215] vhci_hcd vhci_hcd.0: Device attached [ 722.745338][ T9] usb 42-1: SetAddress Request (42) to port 0 [ 722.748323][ T9] usb 42-1: new SuperSpeed USB device number 42 using vhci_hcd [ 723.017212][T15216] vhci_hcd: connection reset by peer [ 723.020555][ T1146] vhci_hcd vhci_hcd.2: stop threads [ 723.022960][ T1146] vhci_hcd vhci_hcd.2: release socket [ 723.025426][ T1146] vhci_hcd vhci_hcd.2: disconnect device [ 723.095497][T15224] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 723.098914][T15224] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 723.103046][T15224] vhci_hcd vhci_hcd.0: Device attached [ 723.594307][T15225] vhci_hcd: connection closed [ 723.594739][ T1146] vhci_hcd vhci_hcd.3: stop threads [ 723.604695][ T1146] vhci_hcd vhci_hcd.3: release socket [ 723.607688][ T1146] vhci_hcd vhci_hcd.3: disconnect device [ 724.809680][T15241] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 724.812673][T15241] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 724.816666][T15241] vhci_hcd vhci_hcd.0: Device attached [ 724.889485][T15246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2149'. [ 725.137598][T15251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2148'. [ 725.185335][ T7438] usb 38-1: SetAddress Request (56) to port 0 [ 725.192984][ T7438] usb 38-1: new SuperSpeed USB device number 56 using vhci_hcd [ 725.905189][T15242] vhci_hcd: connection reset by peer [ 725.914609][ T13] vhci_hcd vhci_hcd.0: stop threads [ 725.916761][ T13] vhci_hcd vhci_hcd.0: release socket [ 725.919157][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 726.265289][T15264] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 726.267561][T15264] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 726.288614][T15264] vhci_hcd vhci_hcd.0: Device attached [ 726.316624][T15268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2153'. [ 726.686634][T11291] usb 44-1: device descriptor read/8, error -110 [ 726.721533][ T10] usb 40-1: SetAddress Request (36) to port 0 [ 726.728881][ T10] usb 40-1: new SuperSpeed USB device number 36 using vhci_hcd [ 726.821590][T11291] usb usb44-port1: attempt power cycle [ 727.179190][T15276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2155'. [ 727.346225][T15265] vhci_hcd: connection reset by peer [ 727.382540][T10959] vhci_hcd vhci_hcd.1: stop threads [ 727.385289][T10959] vhci_hcd vhci_hcd.1: release socket [ 727.385563][T11291] usb usb44-port1: unable to enumerate USB device [ 727.387247][T10959] vhci_hcd vhci_hcd.1: disconnect device [ 727.907942][ T9] usb 42-1: device descriptor read/8, error -110 [ 727.940450][T15285] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 727.942730][T15285] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 727.965694][T15285] vhci_hcd vhci_hcd.0: Device attached [ 728.076382][T15288] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 728.078615][T15288] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 728.093220][T15288] vhci_hcd vhci_hcd.0: Device attached [ 728.145179][ T9] usb 42-1: SetAddress Request (43) to port 0 [ 728.155220][ T9] usb 42-1: new SuperSpeed USB device number 43 using vhci_hcd [ 728.385200][T11291] usb 44-1: SetAddress Request (27) to port 0 [ 728.387883][T11291] usb 44-1: new SuperSpeed USB device number 27 using vhci_hcd [ 729.145744][T15286] vhci_hcd: connection reset by peer [ 729.150098][T13950] vhci_hcd vhci_hcd.2: stop threads [ 729.153143][T13950] vhci_hcd vhci_hcd.2: release socket [ 729.180423][T13950] vhci_hcd vhci_hcd.2: disconnect device [ 729.188655][T15289] vhci_hcd: connection reset by peer [ 729.196150][T13950] vhci_hcd vhci_hcd.3: stop threads [ 729.198391][T13950] vhci_hcd vhci_hcd.3: release socket [ 729.202090][T13950] vhci_hcd vhci_hcd.3: disconnect device [ 729.664141][T15303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2161'. [ 730.148836][T15311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2163'. [ 730.525166][ T7438] usb 38-1: device descriptor read/8, error -110 [ 730.628986][T15321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2172'. [ 730.742994][T15323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2164'. [ 731.050388][ T7438] usb usb38-port1: attempt power cycle [ 731.636380][T15330] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 731.638930][T15330] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 731.646627][T15330] vhci_hcd vhci_hcd.0: Device attached [ 731.657841][ T7438] usb usb38-port1: unable to enumerate USB device [ 732.125452][ T5298] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 732.360506][T15331] vhci_hcd: connection reset by peer [ 732.378228][ T6649] vhci_hcd vhci_hcd.1: stop threads [ 732.381115][ T6649] vhci_hcd vhci_hcd.1: release socket [ 732.383817][ T10] usb 40-1: device descriptor read/8, error -110 [ 732.384032][ T6649] vhci_hcd vhci_hcd.1: disconnect device [ 732.754136][T15343] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 732.756597][T15343] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 732.770292][T15343] vhci_hcd vhci_hcd.0: Device attached [ 732.856724][ T10] usb usb40-port1: attempt power cycle [ 733.033520][T15350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2168'. [ 733.055140][ T54] usb 38-1: SetAddress Request (60) to port 0 [ 733.057352][ T54] usb 38-1: new SuperSpeed USB device number 60 using vhci_hcd [ 733.225633][T15344] vhci_hcd: connection reset by peer [ 733.236001][T10959] vhci_hcd vhci_hcd.0: stop threads [ 733.237818][T10959] vhci_hcd vhci_hcd.0: release socket [ 733.239647][T10959] vhci_hcd vhci_hcd.0: disconnect device [ 733.245126][ T9] usb 42-1: device descriptor read/8, error -110 [ 733.365310][ T9] usb usb42-port1: attempt power cycle [ 733.425660][ T10] usb usb40-port1: unable to enumerate USB device [ 733.495380][T11291] usb 44-1: device descriptor read/8, error -110 [ 733.517186][T15356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2169'. [ 733.885227][T12619] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 733.885317][ T5298] Bluetooth: hci5: command 0x1003 tx timeout [ 733.895987][T11291] usb usb44-port1: attempt power cycle [ 733.963437][ T9] usb usb42-port1: unable to enumerate USB device [ 734.194303][T15366] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 734.197209][T15366] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 734.227774][T15366] vhci_hcd vhci_hcd.0: Device attached [ 734.466564][T11291] usb usb44-port1: unable to enumerate USB device [ 734.495335][ T6039] usb 42-1: SetAddress Request (46) to port 0 [ 734.497984][ T6039] usb 42-1: new SuperSpeed USB device number 46 using vhci_hcd [ 734.855577][T15367] vhci_hcd: connection reset by peer [ 734.858176][ T6649] vhci_hcd vhci_hcd.2: stop threads [ 734.860270][ T6649] vhci_hcd vhci_hcd.2: release socket [ 734.862355][ T6649] vhci_hcd vhci_hcd.2: disconnect device [ 736.375234][ T5942] Bluetooth: hci4: command 0x1003 tx timeout [ 736.375254][T12619] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 736.445272][T12619] Bluetooth: hci5: command 0x1003 tx timeout [ 736.448252][ T5298] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 736.700464][T15393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2178'. [ 737.037839][T15400] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2179'. [ 738.125509][ T54] usb 38-1: device descriptor read/8, error -110 [ 738.700293][ T54] usb usb38-port1: attempt power cycle [ 739.116443][T15421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2185'. [ 739.397637][ T54] usb usb38-port1: unable to enumerate USB device [ 739.482303][T15423] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 739.485351][T15423] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 739.495149][T15423] vhci_hcd vhci_hcd.0: Device attached [ 739.575825][ T6039] usb 42-1: device descriptor read/8, error -110 [ 739.835142][ T10] usb 40-1: SetAddress Request (40) to port 0 [ 739.837368][ T10] usb 40-1: new SuperSpeed USB device number 40 using vhci_hcd [ 740.014112][ T6039] usb usb42-port1: attempt power cycle [ 740.637322][ T6039] usb usb42-port1: unable to enumerate USB device [ 740.673723][T15424] vhci_hcd: connection reset by peer [ 740.745307][ T1199] vhci_hcd vhci_hcd.1: stop threads [ 740.747669][ T1199] vhci_hcd vhci_hcd.1: release socket [ 740.749802][ T1199] vhci_hcd vhci_hcd.1: disconnect device [ 740.946725][T15445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2188'. [ 741.011408][T15447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2189'. [ 741.069731][T15448] overlayfs: failed to resolve './bus': -2 [ 742.048978][T15462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2192'. [ 743.645242][ T5298] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 743.645732][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 744.041587][T15490] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 744.044444][T15490] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 744.072130][T15490] vhci_hcd vhci_hcd.0: Device attached [ 744.325205][ T54] usb 38-1: SetAddress Request (64) to port 0 [ 744.327567][ T54] usb 38-1: new SuperSpeed USB device number 64 using vhci_hcd [ 744.781349][T15491] vhci_hcd: connection reset by peer [ 744.784045][ T7198] vhci_hcd vhci_hcd.0: stop threads [ 744.786479][ T7198] vhci_hcd vhci_hcd.0: release socket [ 744.788972][ T7198] vhci_hcd vhci_hcd.0: disconnect device [ 744.936300][ T10] usb 40-1: device descriptor read/8, error -110 [ 745.175321][T12619] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 745.175344][ T5948] Bluetooth: hci5: command 0x1003 tx timeout [ 745.366954][ T10] usb usb40-port1: attempt power cycle [ 745.600106][T15497] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 745.602360][T15497] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 745.640343][T15497] vhci_hcd vhci_hcd.0: Device attached [ 745.725231][T12619] Bluetooth: hci6: command 0x1003 tx timeout [ 745.725248][ T5942] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 745.745170][ T10] usb 40-1: SetAddress Request (42) to port 0 [ 745.751768][ T10] usb 40-1: new SuperSpeed USB device number 42 using vhci_hcd [ 745.965179][ T5298] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 745.991286][T15509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2200'. [ 746.163068][T15498] vhci_hcd: connection reset by peer [ 746.173570][ T6649] vhci_hcd vhci_hcd.1: stop threads [ 746.176986][ T6649] vhci_hcd vhci_hcd.1: release socket [ 746.180431][ T6649] vhci_hcd vhci_hcd.1: disconnect device [ 747.023798][T15521] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 747.026144][T15521] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 747.029422][T15521] vhci_hcd vhci_hcd.0: Device attached [ 747.051846][T15524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2202'. [ 747.325297][ T6056] usb 44-1: SetAddress Request (31) to port 0 [ 747.328036][ T6056] usb 44-1: new SuperSpeed USB device number 31 using vhci_hcd [ 747.514872][T15530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2203'. [ 748.175153][T15522] vhci_hcd: connection reset by peer [ 748.177533][ T6649] vhci_hcd vhci_hcd.3: stop threads [ 748.179368][ T6649] vhci_hcd vhci_hcd.3: release socket [ 748.181930][ T6649] vhci_hcd vhci_hcd.3: disconnect device [ 748.457769][T15538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2205'. [ 749.405288][ T54] usb 38-1: device descriptor read/8, error -110 [ 749.446686][T15554] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 749.448880][T15554] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 749.452098][T15554] vhci_hcd vhci_hcd.0: Device attached [ 749.523935][T15557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2208'. [ 749.540349][T15557] overlayfs: failed to resolve './bus': -2 [ 749.805641][ T54] usb usb38-port1: attempt power cycle [ 750.291888][T15555] vhci_hcd: connection closed [ 750.292521][ T13] vhci_hcd vhci_hcd.3: stop threads [ 750.296397][ T13] vhci_hcd vhci_hcd.3: release socket [ 750.299574][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 750.375785][ T54] usb usb38-port1: unable to enumerate USB device [ 750.685401][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 750.845367][ T10] usb 40-1: device descriptor read/8, error -110 [ 750.901412][T15566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2211'. [ 751.085304][ T5298] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 751.255863][ T10] usb usb40-port1: unable to enumerate USB device [ 751.264425][T15571] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2213'. [ 751.451855][T15570] netlink: 'syz.3.2212': attribute type 1 has an invalid length. [ 751.455431][T15570] netlink: 'syz.3.2212': attribute type 2 has an invalid length. [ 751.729225][T15579] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 751.732087][T15579] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 751.738545][T15579] vhci_hcd vhci_hcd.0: Device attached [ 752.015214][ T76] usb 40-1: SetAddress Request (44) to port 0 [ 752.017623][ T76] usb 40-1: new SuperSpeed USB device number 44 using vhci_hcd [ 752.026152][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.029164][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.265291][T15580] vhci_hcd: connection reset by peer [ 752.275565][ T12] vhci_hcd vhci_hcd.1: stop threads [ 752.278073][ T12] vhci_hcd vhci_hcd.1: release socket [ 752.280476][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 752.365573][ T6056] usb 44-1: device descriptor read/8, error -110 [ 752.799559][ T6056] usb usb44-port1: attempt power cycle [ 752.867247][T15588] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 752.870085][T15588] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 752.873056][T15588] vhci_hcd vhci_hcd.0: Device attached [ 753.165155][ T54] usb 38-1: SetAddress Request (68) to port 0 [ 753.168018][ T54] usb 38-1: new SuperSpeed USB device number 68 using vhci_hcd [ 753.365634][ T6056] usb usb44-port1: unable to enumerate USB device [ 753.465750][T15600] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 753.468057][T15600] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 753.470955][T15600] vhci_hcd vhci_hcd.0: Device attached [ 753.978651][T15593] vhci_hcd: connection reset by peer [ 753.981779][ T7198] vhci_hcd vhci_hcd.0: stop threads [ 753.984098][ T7198] vhci_hcd vhci_hcd.0: release socket [ 753.986641][ T7198] vhci_hcd vhci_hcd.0: disconnect device [ 754.564260][T15601] vhci_hcd: connection closed [ 754.565522][ T1146] vhci_hcd vhci_hcd.1: stop threads [ 754.571247][ T1146] vhci_hcd vhci_hcd.1: release socket [ 754.573137][ T1146] vhci_hcd vhci_hcd.1: disconnect device [ 757.085299][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 757.085571][ T76] usb 40-1: device descriptor read/8, error -110 [ 757.488796][ T76] usb usb40-port1: attempt power cycle [ 757.565301][ T5298] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 757.680742][T15637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2225'. [ 757.965156][T12619] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 757.965217][ T5942] Bluetooth: hci6: command 0x1003 tx timeout [ 758.057064][ T76] usb usb40-port1: unable to enumerate USB device [ 758.205482][ T5948] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 758.207304][T12619] Bluetooth: hci7: command 0x1003 tx timeout [ 758.209732][ T54] usb 38-1: device descriptor read/8, error -110 [ 758.450734][T15648] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 758.452996][T15648] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 758.470649][T15648] vhci_hcd vhci_hcd.0: Device attached [ 758.606000][ T54] usb usb38-port1: attempt power cycle [ 758.746136][T15653] misc userio: No port type given on /dev/userio [ 758.748523][T15653] misc userio: The device must be registered before sending interrupts [ 758.755549][T15653] netlink: 'syz.1.2228': attribute type 1 has an invalid length. [ 758.758650][T15653] netlink: 'syz.1.2228': attribute type 2 has an invalid length. [ 758.887538][ T6056] usb 42-1: SetAddress Request (50) to port 0 [ 758.889867][ T6056] usb 42-1: new SuperSpeed USB device number 50 using vhci_hcd [ 759.176046][ T54] usb usb38-port1: unable to enumerate USB device [ 759.276125][T15649] vhci_hcd: connection reset by peer [ 759.279121][ T7198] vhci_hcd vhci_hcd.2: stop threads [ 759.280970][ T7198] vhci_hcd vhci_hcd.2: release socket [ 759.282858][ T7198] vhci_hcd vhci_hcd.2: disconnect device [ 759.628222][T15661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2229'. [ 759.664212][T15661] overlayfs: failed to resolve './bus': -2 [ 759.805224][ T5948] Bluetooth: hci4: command 0x1003 tx timeout [ 759.805986][ T5298] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 761.524203][T15682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2235'. [ 761.549386][T15682] overlayfs: failed to resolve './bus': -2 [ 762.585894][T15693] misc userio: No port type given on /dev/userio [ 762.595225][T15693] misc userio: The device must be registered before sending interrupts [ 762.605710][T15693] netlink: 'syz.0.2238': attribute type 1 has an invalid length. [ 762.609223][T15693] netlink: 'syz.0.2238': attribute type 2 has an invalid length. [ 764.009420][ T6056] usb 42-1: device descriptor read/8, error -110 [ 764.043330][T15710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2242'. [ 764.106089][T15710] overlayfs: failed to resolve './bus': -2 [ 764.348672][T15713] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 764.351228][T15713] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 764.355595][T15713] vhci_hcd vhci_hcd.0: Device attached [ 764.406098][ T6056] usb usb42-port1: attempt power cycle [ 764.556910][T15714] vhci_hcd: connection closed [ 764.647827][ T1144] vhci_hcd vhci_hcd.0: stop threads [ 764.652922][ T1144] vhci_hcd vhci_hcd.0: release socket [ 764.655628][ T1144] vhci_hcd vhci_hcd.0: disconnect device [ 764.705301][ T7438] usb 38-1: enqueue for inactive port 0 [ 765.046125][ T6056] usb usb42-port1: unable to enumerate USB device [ 765.082813][T15721] mkiss: ax0: crc mode is auto. [ 765.211107][ T7438] usb usb38-port1: attempt power cycle [ 765.374342][T15731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2246'. [ 765.831308][ T7438] usb usb38-port1: unable to enumerate USB device [ 766.803503][T15745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2249'. [ 766.812357][T15746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2248'. [ 766.878536][T15747] overlayfs: failed to resolve './bus': -2 [ 768.973934][T15791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 771.962371][T15845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 772.390214][T15857] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2281'. [ 772.396504][T15857] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 774.565367][T15878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 775.106109][ T5948] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 775.286361][ T5948] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 775.290607][ T5948] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 775.296444][ T5948] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 775.300136][ T5948] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 775.334944][T15887] ip6_vti0 speed is unknown, defaulting to 1000 [ 775.675088][T15883] comedi comedi0: reset error (fatal) [ 775.908219][T10959] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.936829][T15887] chnl_net:caif_netlink_parms(): no params data found [ 776.028567][T10959] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.089130][T15887] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.095165][T15887] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.097616][T15887] bridge_slave_0: entered allmulticast mode [ 776.100682][T15887] bridge_slave_0: entered promiscuous mode [ 776.118394][T15887] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.121716][T15887] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.135443][T15887] bridge_slave_1: entered allmulticast mode [ 776.138757][T15887] bridge_slave_1: entered promiscuous mode [ 776.216839][T10959] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.238790][T15887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.250939][T15887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.294133][T10959] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.304946][T15887] team0: Port device team_slave_0 added [ 776.310969][T15887] team0: Port device team_slave_1 added [ 776.330536][T15887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.333181][T15887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.343350][T15887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.348942][T15887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.351518][T15887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.362448][T15887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.407821][T15887] hsr_slave_0: entered promiscuous mode [ 776.412712][T15887] hsr_slave_1: entered promiscuous mode [ 776.416418][T15887] debugfs: 'hsr0' already exists in 'hsr' [ 776.418933][T15887] Cannot create hsr debugfs directory [ 776.465133][ T6023] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 776.494163][T10959] bridge_slave_1: left allmulticast mode [ 776.497434][T10959] bridge_slave_1: left promiscuous mode [ 776.501503][T10959] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.527432][T10959] bridge_slave_0: left allmulticast mode [ 776.529934][T10959] bridge_slave_0: left promiscuous mode [ 776.532695][T10959] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.617200][ T6023] usb 8-1: config 0 has an invalid interface number: 229 but max is 0 [ 776.620828][ T6023] usb 8-1: config 0 has no interface number 0 [ 776.623539][ T6023] usb 8-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 776.629271][ T6023] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.641121][ T6023] usb 8-1: config 0 descriptor?? [ 776.879624][T10959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 776.885790][T10959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 776.889543][T10959] bond0 (unregistering): Released all slaves [ 776.921242][ T6056] usb 8-1: USB disconnect, device number 11 [ 777.325124][ T5948] Bluetooth: hci4: command tx timeout [ 777.325169][T10959] hsr_slave_0: left promiscuous mode [ 777.331094][T10959] hsr_slave_1: left promiscuous mode [ 777.334516][T10959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 777.355417][T10959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 777.366447][T10959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 777.368941][T10959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 777.384351][T10959] veth1_macvtap: left promiscuous mode [ 777.386844][T10959] veth0_macvtap: left promiscuous mode [ 777.388751][T10959] veth1_vlan: left promiscuous mode [ 777.390614][T10959] veth0_vlan: left promiscuous mode [ 777.801049][T10959] team0 (unregistering): Port device team_slave_1 removed [ 777.862296][T10959] team0 (unregistering): Port device team_slave_0 removed [ 778.437101][T15887] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 778.466397][T15887] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 778.487097][T15887] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 778.497759][ T40] audit: type=1326 audit(1767178467.044:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15935 comm="syz.3.2302" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 778.512799][ T40] audit: type=1326 audit(1767178467.054:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15935 comm="syz.3.2302" exe="/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 778.515718][T15887] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 778.523508][ T40] audit: type=1326 audit(1767178467.054:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15935 comm="syz.3.2302" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 778.538204][ T40] audit: type=1326 audit(1767178467.054:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15935 comm="syz.3.2302" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 778.557787][ T40] audit: type=1326 audit(1767178467.054:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15935 comm="syz.3.2302" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 778.581103][ T40] audit: type=1326 audit(1767178467.054:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15935 comm="syz.3.2302" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 778.591750][ T40] audit: type=1326 audit(1767178467.054:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15935 comm="syz.3.2302" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 778.600614][ T40] audit: type=1326 audit(1767178467.054:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15935 comm="syz.3.2302" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 778.701962][T15887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.801891][T15887] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.822748][ T8250] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.825257][ T8250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.851326][ T1199] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.854018][ T1199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.098562][T15887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 779.147271][T15887] veth0_vlan: entered promiscuous mode [ 779.154298][T15887] veth1_vlan: entered promiscuous mode [ 779.172928][T15887] veth0_macvtap: entered promiscuous mode [ 779.177695][T15887] veth1_macvtap: entered promiscuous mode [ 779.187498][T15887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 779.195658][T15887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 779.204150][ T8250] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.208800][ T8250] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.212218][ T8250] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.216085][ T8250] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.247536][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.250595][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.265586][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.268827][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.345968][ T40] audit: type=1326 audit(1767178467.874:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15967 comm="syz.1.2293" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 779.356141][ T40] audit: type=1326 audit(1767178467.874:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15967 comm="syz.1.2293" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 779.415730][ T5948] Bluetooth: hci4: command tx timeout [ 779.835111][ T6056] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 779.985118][ T6056] usb 8-1: Using ep0 maxpacket: 32 [ 779.989651][ T6056] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.996097][ T6056] usb 8-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 779.999288][ T6056] usb 8-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 780.001980][ T6056] usb 8-1: Manufacturer: syz [ 780.003577][ T6056] usb 8-1: SerialNumber: syz [ 780.024313][ T6056] usb 8-1: config 0 descriptor?? [ 780.247244][ T63] usb 8-1: USB disconnect, device number 12 [ 780.449575][T15980] mmap: syz.0.2306 (15980) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 781.495135][ T5948] Bluetooth: hci4: command tx timeout [ 781.504591][T15996] syz.1.2310 uses obsolete (PF_INET,SOCK_PACKET) [ 781.507359][T15998] ip6_vti0 speed is unknown, defaulting to 1000 [ 782.718083][T16035] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2315'. [ 783.142039][T16058] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2317'. [ 783.145366][T16058] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 783.565279][ T5948] Bluetooth: hci4: command tx timeout [ 785.051681][T16092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2331'. [ 785.056934][T16092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2331'. [ 785.305147][T11291] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 785.455173][T11291] usb 6-1: Using ep0 maxpacket: 8 [ 785.459286][T11291] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.463190][T11291] usb 6-1: config 0 interface 0 has no altsetting 0 [ 785.465835][T11291] usb 6-1: New USB device found, idVendor=056a, idProduct=00e2, bcdDevice= 0.00 [ 785.468822][T11291] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.473628][T11291] usb 6-1: config 0 descriptor?? [ 785.681913][T11291] usbhid 6-1:0.0: can't add hid device: -71 [ 785.684062][T11291] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 785.690922][T11291] usb 6-1: USB disconnect, device number 16 [ 786.520928][T16116] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2335'. [ 787.709192][T16134] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 787.711651][T16134] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 787.735350][T16134] vhci_hcd vhci_hcd.0: Device attached [ 788.025276][ T6023] usb 40-1: SetAddress Request (48) to port 0 [ 788.027389][ T6023] usb 40-1: new SuperSpeed USB device number 48 using vhci_hcd [ 788.113159][T16135] vhci_hcd: connection reset by peer [ 788.115286][ T55] vhci_hcd vhci_hcd.1: stop threads [ 788.117020][ T55] vhci_hcd vhci_hcd.1: release socket [ 788.121954][ T55] vhci_hcd vhci_hcd.1: disconnect device [ 788.670108][T16146] mkiss: ax0: crc mode is auto. [ 788.715179][ T40] kauditd_printk_skb: 56 callbacks suppressed [ 788.715195][ T40] audit: type=1326 audit(1767178477.264:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16147 comm="syz.2.2349" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 788.727665][ T40] audit: type=1326 audit(1767178477.284:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16147 comm="syz.2.2349" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 788.736869][ T40] audit: type=1326 audit(1767178477.294:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16147 comm="syz.2.2349" exe="/syz-executor" sig=0 arch=40000003 syscall=347 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 788.746251][ T40] audit: type=1326 audit(1767178477.294:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16147 comm="syz.2.2349" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 788.756090][ T40] audit: type=1326 audit(1767178477.294:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16147 comm="syz.2.2349" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 788.766184][ T40] audit: type=1326 audit(1767178477.304:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16147 comm="syz.2.2349" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 788.776741][ T40] audit: type=1326 audit(1767178477.304:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16147 comm="syz.2.2349" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 788.789117][ T40] audit: type=1326 audit(1767178477.304:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16147 comm="syz.2.2349" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 788.805323][ T40] audit: type=1326 audit(1767178477.304:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16147 comm="syz.2.2349" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 788.845139][ T40] audit: type=1326 audit(1767178477.304:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16147 comm="syz.2.2349" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 789.928106][T16158] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 789.930725][T16158] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 789.934620][T16158] vhci_hcd vhci_hcd.0: Device attached [ 790.135135][ T5948] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 790.135213][ T5298] Bluetooth: hci3: command 0x1003 tx timeout [ 790.369204][T16161] vhci_hcd: connection closed [ 790.370282][ T7005] vhci_hcd vhci_hcd.1: stop threads [ 790.380552][ T7005] vhci_hcd vhci_hcd.1: release socket [ 790.384117][ T7005] vhci_hcd vhci_hcd.1: disconnect device [ 790.949215][T16176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2355'. [ 791.010556][T16179] overlayfs: failed to resolve './bus': -2 [ 791.830068][T16189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2359'. [ 792.521550][T16202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2360'. [ 793.178422][ T6023] usb 40-1: device descriptor read/8, error -110 [ 793.209756][T16205] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 793.212065][T16205] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 793.229354][T16205] vhci_hcd vhci_hcd.0: Device attached [ 793.379864][T16206] vhci_hcd: connection closed [ 793.380085][ T4004] vhci_hcd vhci_hcd.0: stop threads [ 793.383642][ T4004] vhci_hcd vhci_hcd.0: release socket [ 793.385898][ T4004] vhci_hcd vhci_hcd.0: disconnect device [ 793.575645][ T6023] usb usb40-port1: attempt power cycle [ 793.745438][T16216] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 793.748613][T16216] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 793.753655][T16216] vhci_hcd vhci_hcd.0: Device attached [ 794.075427][ T63] usb 44-1: SetAddress Request (35) to port 0 [ 794.077707][ T63] usb 44-1: new SuperSpeed USB device number 35 using vhci_hcd [ 794.175654][ T6023] usb usb40-port1: unable to enumerate USB device [ 794.314217][T16228] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 794.316468][T16228] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 794.319629][T16228] vhci_hcd vhci_hcd.0: Device attached [ 794.627267][ T5986] usb 40-1: SetAddress Request (52) to port 0 [ 794.629450][ T5986] usb 40-1: new SuperSpeed USB device number 52 using vhci_hcd [ 794.824279][T16217] vhci_hcd: connection reset by peer [ 794.826570][ T7198] vhci_hcd vhci_hcd.3: stop threads [ 794.828390][ T7198] vhci_hcd vhci_hcd.3: release socket [ 794.830283][ T7198] vhci_hcd vhci_hcd.3: disconnect device [ 795.155249][T16229] vhci_hcd: connection reset by peer [ 795.168487][ T7005] vhci_hcd vhci_hcd.1: stop threads [ 795.170475][ T7005] vhci_hcd vhci_hcd.1: release socket [ 795.172714][ T7005] vhci_hcd vhci_hcd.1: disconnect device [ 795.509496][T16241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2367'. [ 795.578184][T16241] overlayfs: failed to resolve './bus': -2 [ 796.595792][T16254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2371'. [ 796.825286][T16259] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 796.827693][T16259] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 796.855297][T16259] vhci_hcd vhci_hcd.0: Device attached [ 796.921455][T16271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2375'. [ 797.135138][ T54] usb 42-1: SetAddress Request (54) to port 0 [ 797.137993][ T54] usb 42-1: new SuperSpeed USB device number 54 using vhci_hcd [ 797.398482][T16265] vhci_hcd: connection reset by peer [ 797.400685][ T1144] vhci_hcd vhci_hcd.2: stop threads [ 797.403050][ T1144] vhci_hcd vhci_hcd.2: release socket [ 797.408584][ T1144] vhci_hcd vhci_hcd.2: disconnect device [ 799.085255][ T5942] Bluetooth: hci3: command 0x1003 tx timeout [ 799.085280][ T5948] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 799.165991][ T63] usb 44-1: device descriptor read/8, error -110 [ 799.405686][ T5298] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 799.504609][T16302] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 799.507210][T16302] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 799.514728][T16302] vhci_hcd vhci_hcd.0: Device attached [ 799.576797][ T63] usb usb44-port1: attempt power cycle [ 799.725183][ T5986] usb 40-1: device descriptor read/8, error -110 [ 800.045254][ T5298] Bluetooth: hci6: command 0x1003 tx timeout [ 800.052215][T12619] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 800.136394][ T5986] usb usb40-port1: attempt power cycle [ 800.147286][ T63] usb usb44-port1: unable to enumerate USB device [ 800.234662][T16303] vhci_hcd: connection closed [ 800.235620][ T7198] vhci_hcd vhci_hcd.2: stop threads [ 800.255112][ T7198] vhci_hcd vhci_hcd.2: release socket [ 800.256932][ T7198] vhci_hcd vhci_hcd.2: disconnect device [ 800.738860][ T5986] usb usb40-port1: unable to enumerate USB device [ 800.885779][T16323] mkiss: ax0: crc mode is auto. [ 801.898552][T16345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2391'. [ 802.206382][ T54] usb 42-1: device descriptor read/8, error -110 [ 802.595888][ T54] usb usb42-port1: attempt power cycle [ 802.863732][T16357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2394'. [ 803.246306][ T54] usb usb42-port1: unable to enumerate USB device [ 803.421909][ T5948] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 803.435360][ T5948] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 803.438802][ T5948] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 803.443470][ T5948] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 803.456053][ T5948] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 803.560628][T16361] ip6_vti0 speed is unknown, defaulting to 1000 [ 803.565251][ T5948] Bluetooth: hci3: command 0x1003 tx timeout [ 803.571932][T12619] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 803.882253][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.143605][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.190858][T16361] chnl_net:caif_netlink_parms(): no params data found [ 804.212774][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.314269][T16361] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.321287][T16361] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.323972][T16361] bridge_slave_0: entered allmulticast mode [ 804.334332][T16361] bridge_slave_0: entered promiscuous mode [ 804.358932][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.382972][T16361] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.386679][T16361] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.392654][T16361] bridge_slave_1: entered allmulticast mode [ 804.403482][T16361] bridge_slave_1: entered promiscuous mode [ 804.449227][T16361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.471702][T16361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.503781][ T13] bridge_slave_1: left allmulticast mode [ 804.506186][ T13] bridge_slave_1: left promiscuous mode [ 804.508938][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.512902][ T13] bridge_slave_0: left allmulticast mode [ 804.515873][ T13] bridge_slave_0: left promiscuous mode [ 804.517769][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.107877][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 805.114556][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 805.119758][ T13] bond0 (unregistering): Released all slaves [ 805.177572][T16361] team0: Port device team_slave_0 added [ 805.181429][T16361] team0: Port device team_slave_1 added [ 805.201833][T16361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 805.204162][T16361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.213261][T16361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.218915][T16361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.221207][T16361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.229919][T16361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.308805][T16361] hsr_slave_0: entered promiscuous mode [ 805.312489][T16361] hsr_slave_1: entered promiscuous mode [ 805.314782][T16361] debugfs: 'hsr0' already exists in 'hsr' [ 805.316897][T16361] Cannot create hsr debugfs directory [ 805.485273][ T5948] Bluetooth: hci5: command tx timeout [ 805.587800][ T13] hsr_slave_0: left promiscuous mode [ 805.591448][ T13] hsr_slave_1: left promiscuous mode [ 805.593897][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 805.601087][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 805.615879][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 805.619137][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 805.638362][ T13] veth1_macvtap: left promiscuous mode [ 805.640962][ T13] veth0_macvtap: left promiscuous mode [ 805.643583][ T13] veth1_vlan: left promiscuous mode [ 805.655604][ T13] veth0_vlan: left promiscuous mode [ 805.904167][T16402] netlink: 'syz.1.2400': attribute type 1 has an invalid length. [ 805.908129][T16402] netlink: 'syz.1.2400': attribute type 2 has an invalid length. [ 805.967446][T12619] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 806.146699][T16409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2403'. [ 806.721306][ T13] team0 (unregistering): Port device team_slave_1 removed [ 806.754231][ T13] team0 (unregistering): Port device team_slave_0 removed [ 807.565241][T12619] Bluetooth: hci5: command tx timeout [ 807.658115][T16431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2407'. [ 807.858277][T16361] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 808.042548][T16361] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 808.253998][T16361] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 808.272836][T16361] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 808.462661][T16361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.542572][T16361] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.553894][ T7005] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.556367][ T7005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.600944][ T4004] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.603510][ T4004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.826137][T16361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.875598][T16361] veth0_vlan: entered promiscuous mode [ 808.913151][T16361] veth1_vlan: entered promiscuous mode [ 808.995938][T16361] veth0_macvtap: entered promiscuous mode [ 809.027554][T16361] veth1_macvtap: entered promiscuous mode [ 809.036191][T16361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.040449][T16361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.151444][T10959] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.212076][ T7005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.223280][ T7005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.254351][T10959] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.259665][T10959] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.279128][T10959] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.344225][ T7005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.348850][ T7005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.645205][ T5948] Bluetooth: hci5: command tx timeout [ 809.935292][T12619] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 810.598143][T16475] mkiss: ax0: crc mode is auto. [ 810.726415][T16480] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 810.728524][T16480] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 810.731550][T16480] vhci_hcd vhci_hcd.0: Device attached [ 811.035183][ T63] usb 40-1: SetAddress Request (56) to port 0 [ 811.037938][ T63] usb 40-1: new SuperSpeed USB device number 56 using vhci_hcd [ 811.408253][T16482] vhci_hcd: connection reset by peer [ 811.411802][ T4004] vhci_hcd vhci_hcd.1: stop threads [ 811.413628][ T4004] vhci_hcd vhci_hcd.1: release socket [ 811.417250][ T4004] vhci_hcd vhci_hcd.1: disconnect device [ 811.735179][ T5948] Bluetooth: hci5: command tx timeout [ 813.179645][T16509] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 813.182549][T16509] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 813.186519][T16509] vhci_hcd vhci_hcd.0: Device attached [ 813.446432][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.449229][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.465276][ T6039] usb 44-1: SetAddress Request (39) to port 0 [ 813.468688][ T6039] usb 44-1: new SuperSpeed USB device number 39 using vhci_hcd [ 813.659947][T16519] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 813.661921][T16519] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 813.678250][T16519] vhci_hcd vhci_hcd.0: Device attached [ 814.010882][T16510] vhci_hcd: connection reset by peer [ 814.013459][ T1199] vhci_hcd vhci_hcd.3: stop threads [ 814.015642][ T1199] vhci_hcd vhci_hcd.3: release socket [ 814.017562][ T1199] vhci_hcd vhci_hcd.3: disconnect device [ 814.205158][ T5948] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 814.206319][T12619] Bluetooth: hci1: command 0x1003 tx timeout [ 814.597614][T16520] vhci_hcd: connection closed [ 814.598179][ T1199] vhci_hcd vhci_hcd.1: stop threads [ 814.601597][ T1199] vhci_hcd vhci_hcd.1: release socket [ 814.604163][ T1199] vhci_hcd vhci_hcd.1: disconnect device [ 815.529414][T16539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2425'. [ 816.150599][ T63] usb 40-1: device descriptor read/8, error -110 [ 816.565971][ T63] usb usb40-port1: attempt power cycle [ 816.846299][ T5948] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 816.849294][T12619] Bluetooth: hci1: command 0x1003 tx timeout [ 817.294779][T16560] mkiss: ax0: crc mode is auto. [ 817.627309][ T63] usb usb40-port1: unable to enumerate USB device [ 817.987681][T12619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 817.991678][T12619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 817.996552][T12619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 818.006361][T12619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 818.010045][T12619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 818.051524][T16576] ip6_vti0 speed is unknown, defaulting to 1000 [ 818.198682][T16582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2433'. [ 818.239098][T16576] chnl_net:caif_netlink_parms(): no params data found [ 818.331214][T16576] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.334826][T16576] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.338813][T16576] bridge_slave_0: entered allmulticast mode [ 818.342739][T16576] bridge_slave_0: entered promiscuous mode [ 818.347919][T16576] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.351068][T16576] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.354363][T16576] bridge_slave_1: entered allmulticast mode [ 818.358779][T16576] bridge_slave_1: entered promiscuous mode [ 818.385540][T16576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 818.394682][T16576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.422665][T16576] team0: Port device team_slave_0 added [ 818.427904][T16576] team0: Port device team_slave_1 added [ 818.452248][T16576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.455419][T16576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.471867][T16576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.478338][T16576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.481492][T16576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.492562][T16576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.535255][ T6039] usb 44-1: device descriptor read/8, error -110 [ 818.539352][T16576] hsr_slave_0: entered promiscuous mode [ 818.542496][T16576] hsr_slave_1: entered promiscuous mode [ 818.546743][T16576] debugfs: 'hsr0' already exists in 'hsr' [ 818.549198][T16576] Cannot create hsr debugfs directory [ 819.066885][ T6039] usb usb44-port1: attempt power cycle [ 819.263243][T16576] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.473454][T16576] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.492985][T16597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2436'. [ 819.580749][T16576] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.666074][ T6039] usb usb44-port1: unable to enumerate USB device [ 819.717071][T16576] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.859547][T16576] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 819.870978][T16576] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 819.877432][T16576] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 819.883708][T16576] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 819.968442][T16576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.990628][T16576] 8021q: adding VLAN 0 to HW filter on device team0 [ 819.997981][T10959] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.001796][T10959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 820.013178][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.016577][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 820.045547][ T5298] Bluetooth: hci1: command tx timeout [ 820.177558][T16576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.218114][T16576] veth0_vlan: entered promiscuous mode [ 820.229196][T16576] veth1_vlan: entered promiscuous mode [ 820.264129][T16576] veth0_macvtap: entered promiscuous mode [ 820.273202][T16576] veth1_macvtap: entered promiscuous mode [ 820.295571][T16576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 820.307460][T16576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 820.424157][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.435185][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.446159][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.449729][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.498404][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.502572][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.563585][T16613] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 820.566540][T16613] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 820.570389][T16613] vhci_hcd vhci_hcd.0: Device attached [ 820.605299][T12619] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 820.605310][ T5298] Bluetooth: hci3: command 0x1003 tx timeout [ 820.611358][T10959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.620567][T10959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.835161][ T6024] usb 44-1: SetAddress Request (43) to port 0 [ 820.837238][ T6024] usb 44-1: new SuperSpeed USB device number 43 using vhci_hcd [ 820.930252][T16619] netlink: 'syz.1.2438': attribute type 1 has an invalid length. [ 820.938855][T16619] netlink: 'syz.1.2438': attribute type 2 has an invalid length. [ 821.315852][T16614] vhci_hcd: connection closed [ 821.317067][T10959] vhci_hcd vhci_hcd.3: stop threads [ 821.320781][T10959] vhci_hcd vhci_hcd.3: release socket [ 821.329561][T10959] vhci_hcd vhci_hcd.3: disconnect device [ 821.635210][ T6024] usb 44-1: enqueue for inactive port 0 [ 821.655156][T12619] Bluetooth: hci0: command 0x1003 tx timeout [ 821.655680][ T5948] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 821.778748][T16629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2440'. [ 822.078704][ T6024] usb usb44-port1: attempt power cycle [ 822.135172][ T5948] Bluetooth: hci1: command tx timeout [ 822.656009][ T6024] usb usb44-port1: unable to enumerate USB device [ 823.093235][T16641] netlink: 'syz.2.2444': attribute type 1 has an invalid length. [ 823.097172][T16641] netlink: 'syz.2.2444': attribute type 2 has an invalid length. [ 824.245085][ T5948] Bluetooth: hci1: command tx timeout [ 824.827695][T16675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2448'. [ 825.131781][T16677] mkiss: ax0: crc mode is auto. [ 826.285209][T12619] Bluetooth: hci1: command tx timeout [ 826.685309][ T5948] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 826.686202][T12619] Bluetooth: hci0: command 0x1003 tx timeout [ 826.915735][T16697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2453'. [ 831.216711][T16759] mkiss: ax0: crc mode is auto. [ 831.565186][ T5948] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 831.875799][T16767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2470'. [ 832.338236][T16778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2472'. [ 833.091017][T16787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2473'. [ 833.368346][T16790] netlink: 'syz.1.2475': attribute type 1 has an invalid length. [ 833.372823][T16790] netlink: 'syz.1.2475': attribute type 2 has an invalid length. [ 834.500358][T16812] misc userio: No port type given on /dev/userio [ 834.512525][T16812] misc userio: The device must be registered before sending interrupts [ 834.533212][T16812] netlink: 'syz.0.2481': attribute type 1 has an invalid length. [ 834.543060][T16812] netlink: 'syz.0.2481': attribute type 2 has an invalid length. [ 835.002736][T16822] netlink: 'syz.0.2484': attribute type 1 has an invalid length. [ 835.011777][T16822] netlink: 'syz.0.2484': attribute type 2 has an invalid length. [ 835.687147][T16834] mkiss: ax0: crc mode is auto. [ 835.946040][T12619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 835.951709][T12619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 835.956252][T12619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 835.959364][T12619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 835.962746][T12619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 836.032848][T16837] ip6_vti0 speed is unknown, defaulting to 1000 [ 836.556473][T16837] chnl_net:caif_netlink_parms(): no params data found [ 837.392607][T16837] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.401496][T16837] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.418157][T16837] bridge_slave_0: entered allmulticast mode [ 837.468757][T16837] bridge_slave_0: entered promiscuous mode [ 837.494526][T16837] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.498427][T16837] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.503032][T16837] bridge_slave_1: entered allmulticast mode [ 837.525737][T16837] bridge_slave_1: entered promiscuous mode [ 837.598586][T16837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 837.604016][T16837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 837.642373][T16837] team0: Port device team_slave_0 added [ 837.686968][T16837] team0: Port device team_slave_1 added [ 837.704459][T16837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 837.707827][T16837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.718498][T16837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 837.725732][T16837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 837.728151][T16837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.738654][T16837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 837.783482][T16837] hsr_slave_0: entered promiscuous mode [ 837.789281][T16837] hsr_slave_1: entered promiscuous mode [ 837.791685][T16837] debugfs: 'hsr0' already exists in 'hsr' [ 837.794086][T16837] Cannot create hsr debugfs directory [ 838.040472][T16837] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.045430][ T5948] Bluetooth: hci0: command tx timeout [ 838.230169][T16837] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.340849][T16837] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.391132][T16865] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 838.394256][T16865] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 838.399375][T16865] vhci_hcd vhci_hcd.0: Device attached [ 838.487895][T16837] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.579399][T16837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 838.592407][T16837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 838.597704][T16837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 838.602926][T16837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 838.665398][T11291] usb 40-1: SetAddress Request (60) to port 0 [ 838.668425][T11291] usb 40-1: new SuperSpeed USB device number 60 using vhci_hcd [ 838.685246][T16837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.702302][T16837] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.712867][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.715936][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.742352][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.744870][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.983739][T16837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.013831][T16837] veth0_vlan: entered promiscuous mode [ 839.016362][ T5948] Bluetooth: hci2: command 0x1003 tx timeout [ 839.020196][T12619] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 839.051174][T16837] veth1_vlan: entered promiscuous mode [ 839.112204][T16837] veth0_macvtap: entered promiscuous mode [ 839.138104][T16837] veth1_macvtap: entered promiscuous mode [ 839.198411][T16837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 839.216353][T16837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 839.237462][ T7005] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.243495][ T7005] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.256024][ T7005] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.260040][ T7005] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.384623][ T7005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.388047][ T7005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.406753][ T7198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.409612][ T7198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.437940][T16866] vhci_hcd: connection reset by peer [ 839.443298][ T7005] vhci_hcd vhci_hcd.1: stop threads [ 839.445286][ T7005] vhci_hcd vhci_hcd.1: release socket [ 839.447219][ T7005] vhci_hcd vhci_hcd.1: disconnect device [ 840.130749][ T5298] Bluetooth: hci0: command tx timeout [ 840.319630][T16897] netlink: 'syz.3.2497': attribute type 1 has an invalid length. [ 840.322668][T16897] netlink: 'syz.3.2497': attribute type 2 has an invalid length. [ 840.430352][T16899] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 840.433370][T16899] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 840.438489][T16899] vhci_hcd vhci_hcd.0: Device attached [ 841.037213][T16900] vhci_hcd: connection closed [ 841.037580][ T92] vhci_hcd vhci_hcd.1: stop threads [ 841.041319][ T92] vhci_hcd vhci_hcd.1: release socket [ 841.043440][ T92] vhci_hcd vhci_hcd.1: disconnect device [ 841.245219][ T5298] Bluetooth: hci2: command 0x1003 tx timeout [ 841.246843][T12619] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 841.885319][ T5948] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 841.885398][T12619] Bluetooth: hci3: command 0x1003 tx timeout [ 842.211118][T12619] Bluetooth: hci0: command tx timeout [ 842.826500][T16929] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 842.828888][T16929] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 842.839137][T16929] vhci_hcd vhci_hcd.0: Device attached [ 843.153909][ T6023] usb 38-1: SetAddress Request (76) to port 0 [ 843.157224][ T6023] usb 38-1: new SuperSpeed USB device number 76 using vhci_hcd [ 843.166388][T16934] netlink: 'syz.2.2506': attribute type 1 has an invalid length. [ 843.169372][T16934] netlink: 'syz.2.2506': attribute type 2 has an invalid length. [ 843.555150][T16930] vhci_hcd: connection reset by peer [ 843.557490][ T1144] vhci_hcd vhci_hcd.0: stop threads [ 843.559351][ T1144] vhci_hcd vhci_hcd.0: release socket [ 843.561304][ T1144] vhci_hcd vhci_hcd.0: disconnect device [ 844.186658][T11291] usb 40-1: device descriptor read/8, error -110 [ 844.295484][T12619] Bluetooth: hci0: command tx timeout [ 844.696645][T11291] usb usb40-port1: attempt power cycle [ 845.292600][T11291] usb usb40-port1: unable to enumerate USB device [ 846.685421][ T5298] Bluetooth: hci2: command 0x1003 tx timeout [ 846.689565][T12619] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 846.932199][ T5948] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 847.631280][T16980] netlink: 'syz.0.2519': attribute type 1 has an invalid length. [ 847.635434][T16980] netlink: 'syz.0.2519': attribute type 2 has an invalid length. [ 847.641845][T16984] netlink: 'syz.3.2516': attribute type 1 has an invalid length. [ 847.654428][T16984] netlink: 'syz.3.2516': attribute type 2 has an invalid length. [ 848.135872][T16992] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 848.138755][T16992] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 848.142524][T16992] vhci_hcd vhci_hcd.0: Device attached [ 848.205354][ T6023] usb 38-1: device descriptor read/8, error -110 [ 848.415181][ T5986] usb 42-1: SetAddress Request (58) to port 0 [ 848.421251][ T5986] usb 42-1: new SuperSpeed USB device number 58 using vhci_hcd [ 848.494169][T16998] netlink: 'syz.1.2522': attribute type 1 has an invalid length. [ 848.502026][T16998] netlink: 'syz.1.2522': attribute type 2 has an invalid length. [ 848.957582][T16993] vhci_hcd: connection reset by peer [ 848.960328][ T1199] vhci_hcd vhci_hcd.2: stop threads [ 848.962253][ T1199] vhci_hcd vhci_hcd.2: release socket [ 848.966068][ T1199] vhci_hcd vhci_hcd.2: disconnect device [ 849.227026][ T6023] usb usb38-port1: attempt power cycle [ 849.925662][ T6023] usb usb38-port1: unable to enumerate USB device [ 850.575399][T17025] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 850.577728][T17025] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 850.581370][T17025] vhci_hcd vhci_hcd.0: Device attached [ 850.717308][T17032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2529'. [ 850.925257][ T5298] Bluetooth: hci2: command 0x1003 tx timeout [ 850.925354][T12619] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 850.935390][T15964] usb 40-1: SetAddress Request (64) to port 0 [ 850.938426][T15964] usb 40-1: new SuperSpeed USB device number 64 using vhci_hcd [ 851.197012][T17029] vhci_hcd: connection reset by peer [ 851.199908][ T7198] vhci_hcd vhci_hcd.1: stop threads [ 851.202349][ T7198] vhci_hcd vhci_hcd.1: release socket [ 851.204750][ T7198] vhci_hcd vhci_hcd.1: disconnect device [ 851.560163][T17041] netlink: 'syz.2.2531': attribute type 1 has an invalid length. [ 851.563503][T17041] netlink: 'syz.2.2531': attribute type 2 has an invalid length. [ 851.979009][T17049] netlink: 'syz.1.2533': attribute type 1 has an invalid length. [ 851.983746][T17049] netlink: 'syz.1.2533': attribute type 2 has an invalid length. [ 852.302107][T17055] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 852.304335][T17055] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 852.345242][T17055] vhci_hcd vhci_hcd.0: Device attached [ 852.445786][ T5298] Bluetooth: hci3: command 0x1003 tx timeout [ 852.446011][ T5948] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 852.635636][T11291] usb 38-1: SetAddress Request (80) to port 0 [ 852.639532][T11291] usb 38-1: new SuperSpeed USB device number 80 using vhci_hcd [ 852.821154][T17056] vhci_hcd: connection reset by peer [ 852.823766][ T7198] vhci_hcd vhci_hcd.0: stop threads [ 852.828738][ T7198] vhci_hcd vhci_hcd.0: release socket [ 852.833222][ T7198] vhci_hcd vhci_hcd.0: disconnect device [ 853.485388][ T5986] usb 42-1: device descriptor read/8, error -110 [ 853.852830][T17082] netlink: 'syz.3.2542': attribute type 1 has an invalid length. [ 853.856467][T17082] netlink: 'syz.3.2542': attribute type 2 has an invalid length. [ 853.896403][ T5986] usb usb42-port1: attempt power cycle [ 854.115588][T17090] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 854.117996][T17090] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 854.125269][T17090] vhci_hcd vhci_hcd.0: Device attached [ 854.245342][ T5986] usb 42-1: SetAddress Request (60) to port 0 [ 854.248577][ T5986] usb 42-1: new SuperSpeed USB device number 60 using vhci_hcd [ 854.713424][T17091] vhci_hcd: connection reset by peer [ 854.721433][T10959] vhci_hcd vhci_hcd.2: stop threads [ 854.723419][T10959] vhci_hcd vhci_hcd.2: release socket [ 854.735132][T10959] vhci_hcd vhci_hcd.2: disconnect device [ 854.754831][T17098] netlink: 'syz.3.2545': attribute type 1 has an invalid length. [ 854.757894][T17098] netlink: 'syz.3.2545': attribute type 2 has an invalid length. [ 855.645208][ T5948] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 855.645268][ T5298] Bluetooth: hci2: command 0x1003 tx timeout [ 856.087657][T15964] usb 40-1: device descriptor read/8, error -110 [ 856.197004][T17127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2553'. [ 856.565923][T15964] usb usb40-port1: attempt power cycle [ 857.155780][T15964] usb usb40-port1: unable to enumerate USB device [ 857.748434][T11291] usb 38-1: device descriptor read/8, error -110 [ 857.853296][T17150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2558'. [ 858.127188][T17159] netlink: 'syz.3.2559': attribute type 1 has an invalid length. [ 858.130792][T17159] netlink: 'syz.3.2559': attribute type 2 has an invalid length. [ 858.146261][T11291] usb usb38-port1: attempt power cycle [ 858.666081][T17168] netlink: 'syz.3.2562': attribute type 1 has an invalid length. [ 858.672440][T17168] netlink: 'syz.3.2562': attribute type 2 has an invalid length. [ 858.725627][T11291] usb usb38-port1: unable to enumerate USB device [ 859.327657][ T5986] usb 42-1: device descriptor read/8, error -110 [ 859.728405][ T5986] usb usb42-port1: unable to enumerate USB device [ 860.695226][ T5942] Bluetooth: hci2: command 0x1003 tx timeout [ 860.697606][ T5948] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 860.845189][ T5298] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 860.845209][ T5948] Bluetooth: hci3: command 0x1003 tx timeout [ 862.415679][T17220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2572'. [ 862.525209][T12619] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 862.525235][ T5298] Bluetooth: hci6: command 0x1003 tx timeout [ 862.785224][T17229] netlink: 'syz.3.2575': attribute type 1 has an invalid length. [ 862.788773][T17229] netlink: 'syz.3.2575': attribute type 2 has an invalid length. [ 864.668366][T17255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2579'. [ 866.468722][T17274] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 866.471031][T17274] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 866.474757][T17274] vhci_hcd vhci_hcd.0: Device attached [ 866.574734][T17281] vhci_hcd: connection closed [ 866.575191][ T13] vhci_hcd vhci_hcd.0: stop threads [ 866.578578][ T13] vhci_hcd vhci_hcd.0: release socket [ 866.580511][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 866.605248][ T5298] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 867.770492][T17303] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 867.772737][T17303] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 867.775764][T17303] vhci_hcd vhci_hcd.0: Device attached [ 868.065283][ T6039] usb 38-1: SetAddress Request (84) to port 0 [ 868.068043][ T6039] usb 38-1: new SuperSpeed USB device number 84 using vhci_hcd [ 868.267968][T17304] vhci_hcd: connection reset by peer [ 868.271280][ T7005] vhci_hcd vhci_hcd.0: stop threads [ 868.273297][ T7005] vhci_hcd vhci_hcd.0: release socket [ 868.276033][ T7005] vhci_hcd vhci_hcd.0: disconnect device [ 868.685287][ T5298] Bluetooth: hci2: command 0x1003 tx timeout [ 868.685358][T12619] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 868.927617][T17319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2597'. [ 869.696402][T17331] netlink: 'syz.2.2599': attribute type 1 has an invalid length. [ 869.699718][T17331] netlink: 'syz.2.2599': attribute type 2 has an invalid length. [ 870.522019][T17345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2602'. [ 871.335681][T12619] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 871.336620][ T5298] Bluetooth: hci2: command 0x1003 tx timeout [ 872.101258][T17373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2608'. [ 873.165228][ T6039] usb 38-1: device descriptor read/8, error -110 [ 873.575491][ T6039] usb usb38-port1: attempt power cycle [ 874.246152][ T6039] usb usb38-port1: unable to enumerate USB device [ 874.434688][T17408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2616'. [ 874.859021][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 874.862012][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.885393][T17400] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 874.888269][T17400] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 874.891501][T17400] vhci_hcd vhci_hcd.0: Device attached [ 874.951694][T17411] vhci_hcd: connection closed [ 874.962048][ T7005] vhci_hcd vhci_hcd.2: stop threads [ 874.966879][ T7005] vhci_hcd vhci_hcd.2: release socket [ 874.969738][ T7005] vhci_hcd vhci_hcd.2: disconnect device [ 875.508370][T17419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2620'. [ 875.525978][T17423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2621'. [ 876.525151][ T5948] Bluetooth: hci2: command 0x1003 tx timeout [ 876.525304][T12619] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 876.986469][T17439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2625'. [ 877.396249][T17449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2626'. [ 878.045266][T12619] Bluetooth: hci3: command 0x1003 tx timeout [ 878.045465][ T5298] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 879.843939][T17491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2636'. [ 881.372942][T17504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2639'. [ 882.854388][T17521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2644'. [ 883.702154][T17534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2647'. [ 884.436072][T17537] netlink: 'syz.1.2648': attribute type 1 has an invalid length. [ 884.438825][T17537] netlink: 'syz.1.2648': attribute type 2 has an invalid length. [ 885.142281][T17554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2651'. [ 885.644777][T17558] netlink: 'syz.0.2649': attribute type 1 has an invalid length. [ 885.647788][T17558] netlink: 'syz.0.2649': attribute type 2 has an invalid length. [ 886.425486][T17572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2654'. [ 887.229923][T17579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2657'. [ 887.273105][T12619] Bluetooth: hci2: command 0x1003 tx timeout [ 887.276428][ T5298] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 887.799488][T17591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2666'. [ 889.786761][T17618] netlink: 'syz.0.2664': attribute type 1 has an invalid length. [ 889.790430][T17618] netlink: 'syz.0.2664': attribute type 2 has an invalid length. [ 889.912413][T17623] mkiss: ax0: crc mode is auto. [ 890.902949][T17636] netlink: 'syz.3.2671': attribute type 1 has an invalid length. [ 890.906955][T17636] netlink: 'syz.3.2671': attribute type 2 has an invalid length. [ 891.965292][ T5942] Bluetooth: hci2: command 0x1003 tx timeout [ 891.969079][ T5298] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 892.365143][T12619] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 892.365171][ T5298] Bluetooth: hci3: command 0x1003 tx timeout [ 892.592348][T17650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2674'. [ 892.685315][ T5948] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 892.685384][T12619] Bluetooth: hci6: command 0x1003 tx timeout [ 893.132784][T17663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2676'. [ 893.469505][T17668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2678'. [ 893.520312][T17664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2677'. [ 894.088084][T17679] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 894.090618][T17679] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 894.093834][T17679] vhci_hcd vhci_hcd.0: Device attached [ 894.169474][T17680] vhci_hcd: connection closed [ 894.169770][ T6649] vhci_hcd vhci_hcd.1: stop threads [ 894.173633][ T6649] vhci_hcd vhci_hcd.1: release socket [ 894.175583][ T6649] vhci_hcd vhci_hcd.1: disconnect device [ 894.966604][T17691] netlink: 'syz.1.2684': attribute type 1 has an invalid length. [ 894.969192][T17691] netlink: 'syz.1.2684': attribute type 2 has an invalid length. [ 895.416606][T17702] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 895.418994][T17702] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 895.423461][T17702] vhci_hcd vhci_hcd.0: Device attached [ 895.644690][T17707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2687'. [ 895.705194][ T6039] usb 42-1: SetAddress Request (62) to port 0 [ 895.710879][ T6039] usb 42-1: new SuperSpeed USB device number 62 using vhci_hcd [ 895.769885][T17709] netlink: 'syz.3.2688': attribute type 1 has an invalid length. [ 895.782070][T17709] netlink: 'syz.3.2688': attribute type 2 has an invalid length. [ 895.897539][T17703] vhci_hcd: connection reset by peer [ 895.938477][T10959] vhci_hcd vhci_hcd.2: stop threads [ 895.940490][T10959] vhci_hcd vhci_hcd.2: release socket [ 895.942709][T10959] vhci_hcd vhci_hcd.2: disconnect device [ 897.405417][ T5942] Bluetooth: hci4: command 0x0406 tx timeout [ 898.205681][ T5942] Bluetooth: hci2: command 0x1003 tx timeout [ 898.208958][T12619] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 899.007075][T12619] Bluetooth: hci3: command 0x1003 tx timeout [ 899.029720][ T5298] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 899.095298][T17750] netlink: 'syz.1.2698': attribute type 1 has an invalid length. [ 899.098868][T17750] netlink: 'syz.1.2698': attribute type 2 has an invalid length. [ 899.867781][T17763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2700'. [ 900.690249][T17767] misc userio: No port type given on /dev/userio [ 900.693909][T17767] misc userio: The device must be registered before sending interrupts [ 900.700477][T17767] netlink: 'syz.0.2702': attribute type 1 has an invalid length. [ 900.703829][T17767] netlink: 'syz.0.2702': attribute type 2 has an invalid length. [ 900.765220][ T6039] usb 42-1: device descriptor read/8, error -110 [ 901.230433][ T6039] usb usb42-port1: attempt power cycle [ 901.245325][T12619] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 901.245359][ T5948] Bluetooth: hci2: command 0x1003 tx timeout [ 901.245381][ T5951] Bluetooth: hci3: command 0x1003 tx timeout [ 901.249937][ T5298] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 901.781856][T17786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2705'. [ 901.836039][ T6039] usb usb42-port1: unable to enumerate USB device [ 902.575501][T17795] netlink: 'syz.3.2709': attribute type 1 has an invalid length. [ 902.585447][T17795] netlink: 'syz.3.2709': attribute type 2 has an invalid length. [ 902.925144][ T5942] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 903.331973][T17812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2712'. [ 904.317471][T17820] misc userio: No port type given on /dev/userio [ 904.319912][T17820] misc userio: The device must be registered before sending interrupts [ 904.322926][T17820] netlink: 'syz.3.2713': attribute type 1 has an invalid length. [ 904.325874][T17820] netlink: 'syz.3.2713': attribute type 2 has an invalid length. [ 904.620796][T17819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2721'. [ 904.685211][T12619] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 904.685230][ T5298] Bluetooth: hci2: command 0x1003 tx timeout [ 904.881589][T17832] mkiss: ax0: crc mode is auto. [ 905.495276][ T5942] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 906.038687][T17854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2719'. [ 906.230049][T17860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2727'. [ 906.272677][T17861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2720'. [ 907.133306][T17865] netlink: 'syz.3.2724': attribute type 1 has an invalid length. [ 907.136909][T17865] netlink: 'syz.3.2724': attribute type 2 has an invalid length. [ 909.549680][T17907] mkiss: ax0: crc mode is auto. [ 910.663655][T17915] netlink: 'syz.0.2735': attribute type 1 has an invalid length. [ 910.666619][T17915] netlink: 'syz.0.2735': attribute type 2 has an invalid length. [ 911.030981][T17921] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 911.033083][T17921] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 911.041063][T17921] vhci_hcd vhci_hcd.0: Device attached [ 911.172075][T17925] netlink: 'syz.0.2738': attribute type 1 has an invalid length. [ 911.175226][T17925] netlink: 'syz.0.2738': attribute type 2 has an invalid length. [ 911.330398][ T6022] usb 40-1: SetAddress Request (68) to port 0 [ 911.333336][ T6022] usb 40-1: new SuperSpeed USB device number 68 using vhci_hcd [ 911.702602][T17922] vhci_hcd: connection reset by peer [ 911.705321][ T1141] vhci_hcd vhci_hcd.1: stop threads [ 911.723462][ T1141] vhci_hcd vhci_hcd.1: release socket [ 911.734415][ T1141] vhci_hcd vhci_hcd.1: disconnect device [ 911.823320][T17930] netlink: 'syz.0.2740': attribute type 1 has an invalid length. [ 911.828042][T17930] netlink: 'syz.0.2740': attribute type 2 has an invalid length. [ 912.205610][ T5942] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 912.366871][T17938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2742'. [ 912.845229][ T5942] Bluetooth: hci3: command 0x1003 tx timeout [ 912.845465][T12619] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 913.660848][T17958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2747'. [ 914.261360][T17960] netlink: 'syz.1.2746': attribute type 1 has an invalid length. [ 914.265361][T17960] netlink: 'syz.1.2746': attribute type 2 has an invalid length. [ 914.303464][T17970] netlink: 'syz.0.2748': attribute type 1 has an invalid length. [ 914.306989][T17970] netlink: 'syz.0.2748': attribute type 2 has an invalid length. [ 914.553135][T17976] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 914.556015][T17976] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 914.559969][T17976] vhci_hcd vhci_hcd.0: Device attached [ 914.869402][ T6039] usb 42-1: SetAddress Request (66) to port 0 [ 914.880244][ T6039] usb 42-1: new SuperSpeed USB device number 66 using vhci_hcd [ 915.155754][T17986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2752'. [ 915.398982][T17977] vhci_hcd: connection reset by peer [ 915.402035][ T1141] vhci_hcd vhci_hcd.2: stop threads [ 915.404346][ T1141] vhci_hcd vhci_hcd.2: release socket [ 915.411473][ T1141] vhci_hcd vhci_hcd.2: disconnect device [ 916.160204][T18000] misc userio: No port type given on /dev/userio [ 916.165187][T18000] misc userio: The device must be registered before sending interrupts [ 916.176308][T18000] netlink: 'syz.1.2756': attribute type 1 has an invalid length. [ 916.185088][T18000] netlink: 'syz.1.2756': attribute type 2 has an invalid length. [ 916.382191][ T6022] usb 40-1: device descriptor read/8, error -110 [ 916.548588][T18004] netlink: 'syz.1.2757': attribute type 1 has an invalid length. [ 916.556125][T18004] netlink: 'syz.1.2757': attribute type 2 has an invalid length. [ 916.875628][ T6022] usb usb40-port1: attempt power cycle [ 917.269401][T18019] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 917.271758][T18019] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 917.275681][T18019] vhci_hcd vhci_hcd.0: Device attached [ 917.445756][ T6022] usb usb40-port1: unable to enumerate USB device [ 917.665483][ T6056] usb 38-1: SetAddress Request (88) to port 0 [ 917.668243][ T6056] usb 38-1: new SuperSpeed USB device number 88 using vhci_hcd [ 917.897698][T18020] vhci_hcd: connection reset by peer [ 917.899780][T10959] vhci_hcd vhci_hcd.0: stop threads [ 917.901876][T10959] vhci_hcd vhci_hcd.0: release socket [ 917.903845][T10959] vhci_hcd vhci_hcd.0: disconnect device [ 918.459168][T18037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2764'. [ 919.206458][T18046] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 919.209344][T18046] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 919.222715][T18046] vhci_hcd vhci_hcd.0: Device attached [ 919.645246][ T5942] Bluetooth: hci2: command 0x1003 tx timeout [ 919.648467][T12619] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 919.712770][T18047] vhci_hcd: connection closed [ 919.712969][ T7505] vhci_hcd vhci_hcd.0: stop threads [ 919.716352][ T7505] vhci_hcd vhci_hcd.0: release socket [ 919.718264][ T7505] vhci_hcd vhci_hcd.0: disconnect device [ 919.965277][ T6039] usb 42-1: device descriptor read/8, error -110 [ 920.365381][ T6039] usb usb42-port1: attempt power cycle [ 920.565989][T18071] overlayfs: failed to resolve './bus': -2 [ 921.055914][ T6039] usb usb42-port1: unable to enumerate USB device [ 921.701882][T18083] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 921.704328][T18083] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 921.708291][T18083] vhci_hcd vhci_hcd.0: Device attached [ 921.807333][ T5298] Bluetooth: hci2: command 0x1003 tx timeout [ 921.831753][T12619] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 921.918578][T18089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2776'. [ 921.975142][T17006] usb 42-1: SetAddress Request (70) to port 0 [ 921.977300][T17006] usb 42-1: new SuperSpeed USB device number 70 using vhci_hcd [ 922.286034][T18084] vhci_hcd: connection reset by peer [ 922.288448][ T6649] vhci_hcd vhci_hcd.2: stop threads [ 922.290688][ T6649] vhci_hcd vhci_hcd.2: release socket [ 922.298983][ T6649] vhci_hcd vhci_hcd.2: disconnect device [ 922.775300][ T6056] usb 38-1: device descriptor read/8, error -110 [ 923.246099][ T6056] usb usb38-port1: attempt power cycle [ 923.549652][T18111] overlayfs: failed to resolve './bus': -2 [ 923.645194][ T5298] Bluetooth: hci3: command 0x1003 tx timeout [ 923.651785][ T5942] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 923.997016][ T6056] usb usb38-port1: unable to enumerate USB device [ 924.610003][T18125] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 924.612356][T18125] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 924.616074][T18125] vhci_hcd vhci_hcd.0: Device attached [ 924.905170][T18002] usb 40-1: SetAddress Request (72) to port 0 [ 924.908490][T18002] usb 40-1: new SuperSpeed USB device number 72 using vhci_hcd [ 925.227902][T18131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2785'. [ 925.249616][T18126] vhci_hcd: connection reset by peer [ 925.289438][ T8250] vhci_hcd vhci_hcd.1: stop threads [ 925.295566][ T8250] vhci_hcd vhci_hcd.1: release socket [ 925.297587][ T8250] vhci_hcd vhci_hcd.1: disconnect device [ 925.405233][ T5298] Bluetooth: hci2: command 0x1003 tx timeout [ 925.405550][T12619] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 925.949966][T18141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2788'. [ 926.341177][T18149] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 926.343735][T18149] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 926.346652][T18149] vhci_hcd vhci_hcd.0: Device attached [ 926.953492][T18150] vhci_hcd: connection closed [ 926.953762][ T1144] vhci_hcd vhci_hcd.2: stop threads [ 926.958043][ T1144] vhci_hcd vhci_hcd.2: release socket [ 926.961536][ T1144] vhci_hcd vhci_hcd.2: disconnect device [ 927.015517][T17006] usb 42-1: device descriptor read/8, error -110 [ 927.027128][T18161] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 927.029323][T18161] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 927.033728][T18161] vhci_hcd vhci_hcd.0: Device attached [ 927.305485][ T6039] usb 38-1: SetAddress Request (92) to port 0 [ 927.309137][ T6039] usb 38-1: new SuperSpeed USB device number 92 using vhci_hcd [ 927.406479][T17006] usb usb42-port1: attempt power cycle [ 927.763899][T18162] vhci_hcd: connection reset by peer [ 927.766483][ T1146] vhci_hcd vhci_hcd.0: stop threads [ 927.768908][ T1146] vhci_hcd vhci_hcd.0: release socket [ 927.770976][ T1146] vhci_hcd vhci_hcd.0: disconnect device [ 927.966202][T17006] usb usb42-port1: unable to enumerate USB device [ 928.135268][T12619] Bluetooth: hci5: command 0x0406 tx timeout [ 928.737938][T18183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2799'. [ 929.645179][ T5298] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 929.645201][ T5942] Bluetooth: hci2: command 0x1003 tx timeout [ 929.965208][T18002] usb 40-1: device descriptor read/8, error -110 [ 930.113738][T18198] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 930.116134][T18198] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 930.119480][T18198] vhci_hcd vhci_hcd.0: Device attached [ 930.285159][ T5942] Bluetooth: hci3: command 0x1003 tx timeout [ 930.285172][T12619] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 930.355812][T18002] usb usb40-port1: attempt power cycle [ 930.405294][ T6056] usb 44-1: SetAddress Request (47) to port 0 [ 930.407797][ T6056] usb 44-1: new SuperSpeed USB device number 47 using vhci_hcd [ 930.691531][T18199] vhci_hcd: connection reset by peer [ 930.695847][ T1199] vhci_hcd vhci_hcd.3: stop threads [ 930.698331][ T1199] vhci_hcd vhci_hcd.3: release socket [ 930.701057][ T1199] vhci_hcd vhci_hcd.3: disconnect device [ 930.915866][T18002] usb usb40-port1: unable to enumerate USB device [ 931.519514][T18212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2812'. [ 931.816498][ T5942] Bluetooth: hci2: command 0x1003 tx timeout [ 931.818620][ T5298] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 932.403435][ T6039] usb 38-1: device descriptor read/8, error -110 [ 932.605217][ T5298] Bluetooth: hci3: command 0x1003 tx timeout [ 932.605363][T12619] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 932.825898][ T6039] usb usb38-port1: attempt power cycle [ 932.896309][T18227] misc userio: No port type given on /dev/userio [ 932.898562][T18227] misc userio: The device must be registered before sending interrupts [ 932.901595][T18227] netlink: 'syz.2.2807': attribute type 1 has an invalid length. [ 932.904264][T18227] netlink: 'syz.2.2807': attribute type 2 has an invalid length. [ 933.317450][T18238] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 933.319827][T18238] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 933.334405][T18238] vhci_hcd vhci_hcd.0: Device attached [ 933.405776][ T6039] usb usb38-port1: unable to enumerate USB device [ 933.625272][ T6039] usb 42-1: SetAddress Request (74) to port 0 [ 933.629222][ T6039] usb 42-1: new SuperSpeed USB device number 74 using vhci_hcd [ 933.956921][T18239] vhci_hcd: connection reset by peer [ 933.958910][ T1141] vhci_hcd vhci_hcd.2: stop threads [ 933.960934][ T1141] vhci_hcd vhci_hcd.2: release socket [ 933.962886][ T1141] vhci_hcd vhci_hcd.2: disconnect device [ 934.803286][T18258] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 934.805912][T18258] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 934.809877][T18258] vhci_hcd vhci_hcd.0: Device attached [ 934.835946][T18257] netlink: 'syz.2.2813': attribute type 1 has an invalid length. [ 934.839588][T18257] netlink: 'syz.2.2813': attribute type 2 has an invalid length. [ 935.210681][T18259] vhci_hcd: connection closed [ 935.211028][ T1199] vhci_hcd vhci_hcd.3: stop threads [ 935.216225][ T1199] vhci_hcd vhci_hcd.3: release socket [ 935.218853][ T1199] vhci_hcd vhci_hcd.3: disconnect device [ 935.495230][ T6056] usb 44-1: device descriptor read/8, error -110 [ 935.645121][T12619] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 935.645184][ T5942] Bluetooth: hci2: command 0x1003 tx timeout [ 935.885916][ T6056] usb usb44-port1: attempt power cycle [ 936.038713][T18275] mkiss: ax0: crc mode is auto. [ 936.125181][ T5298] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 936.304485][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.324854][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.448833][ T6056] usb usb44-port1: unable to enumerate USB device [ 937.220835][T18294] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 937.223303][T18294] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 937.226244][T18294] vhci_hcd vhci_hcd.0: Device attached [ 937.565336][T18002] usb 44-1: SetAddress Request (51) to port 0 [ 937.568076][T18002] usb 44-1: new SuperSpeed USB device number 51 using vhci_hcd [ 937.790790][T18295] vhci_hcd: connection reset by peer [ 937.793705][T10959] vhci_hcd vhci_hcd.3: stop threads [ 937.796256][T10959] vhci_hcd vhci_hcd.3: release socket [ 937.799028][T10959] vhci_hcd vhci_hcd.3: disconnect device [ 937.877811][T18308] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 937.880191][T18308] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 937.883530][T18308] vhci_hcd vhci_hcd.0: Device attached [ 938.501257][T18309] vhci_hcd: connection closed [ 938.501531][ T1146] vhci_hcd vhci_hcd.2: stop threads [ 938.506486][ T1146] vhci_hcd vhci_hcd.2: release socket [ 938.508698][ T1146] vhci_hcd vhci_hcd.2: disconnect device [ 938.685272][ T6039] usb 42-1: device descriptor read/8, error -110 [ 938.753914][T18320] mkiss: ax0: crc mode is auto. [ 939.005252][T12619] Bluetooth: hci2: command 0x1003 tx timeout [ 939.005347][ T5298] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 939.085880][ T6039] usb usb42-port1: attempt power cycle [ 939.252035][T18328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2830'. [ 939.645653][ T6039] usb usb42-port1: unable to enumerate USB device [ 940.828351][T18349] mkiss: ax0: crc mode is auto. [ 941.405622][ T5298] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 941.407424][ T5948] Bluetooth: hci2: command 0x1003 tx timeout [ 941.565305][T12619] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 941.565439][ T5951] Bluetooth: hci3: command 0x1003 tx timeout [ 942.459062][T18369] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 942.461219][T18369] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 942.463867][T18369] vhci_hcd vhci_hcd.0: Device attached [ 942.605277][T18002] usb 44-1: device descriptor read/8, error -110 [ 942.607393][T18373] netlink: 'syz.3.2841': attribute type 1 has an invalid length. [ 942.611024][T18373] netlink: 'syz.3.2841': attribute type 2 has an invalid length. [ 942.745164][T17494] usb 38-1: SetAddress Request (96) to port 0 [ 942.748219][T17494] usb 38-1: new SuperSpeed USB device number 96 using vhci_hcd [ 942.921184][T18370] vhci_hcd: connection reset by peer [ 942.995196][ T1199] vhci_hcd vhci_hcd.0: stop threads [ 942.997146][ T1199] vhci_hcd vhci_hcd.0: release socket [ 942.998541][T18002] usb usb44-port1: attempt power cycle [ 942.999291][ T1199] vhci_hcd vhci_hcd.0: disconnect device [ 943.120662][T18380] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 943.123749][T18380] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 943.130507][T18380] vhci_hcd vhci_hcd.0: Device attached [ 943.165192][ T5942] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 943.170783][T12619] Bluetooth: hci6: command 0x1003 tx timeout [ 943.395415][ T6022] usb 42-1: SetAddress Request (78) to port 0 [ 943.398810][ T6022] usb 42-1: new SuperSpeed USB device number 78 using vhci_hcd [ 943.485163][T12619] Bluetooth: hci1: command 0x0406 tx timeout [ 943.597540][T18002] usb usb44-port1: unable to enumerate USB device [ 943.713539][T18381] vhci_hcd: connection reset by peer [ 943.725342][ T1141] vhci_hcd vhci_hcd.2: stop threads [ 943.727175][ T1141] vhci_hcd vhci_hcd.2: release socket [ 943.729786][ T1141] vhci_hcd vhci_hcd.2: disconnect device [ 943.903404][T18396] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 943.905742][T18396] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 943.909983][T18396] vhci_hcd vhci_hcd.0: Device attached [ 944.073056][T18400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2847'. [ 944.195352][ T7438] usb 44-1: SetAddress Request (55) to port 0 [ 944.197565][ T7438] usb 44-1: new SuperSpeed USB device number 55 using vhci_hcd [ 944.453834][T18397] vhci_hcd: connection reset by peer [ 944.469671][ T1141] vhci_hcd vhci_hcd.3: stop threads [ 944.471602][ T1141] vhci_hcd vhci_hcd.3: release socket [ 944.480211][ T1141] vhci_hcd vhci_hcd.3: disconnect device [ 945.096198][T18414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2850'. [ 945.100546][T18412] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 945.103715][T18412] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 945.107960][T18412] vhci_hcd vhci_hcd.0: Device attached [ 945.335199][T18413] vhci_hcd: connection closed [ 945.355338][ T1144] vhci_hcd vhci_hcd.1: stop threads [ 945.358873][ T1144] vhci_hcd vhci_hcd.1: release socket [ 945.360699][ T1144] vhci_hcd vhci_hcd.1: disconnect device [ 945.983111][T18430] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 945.985846][T18430] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 945.996331][T18430] vhci_hcd vhci_hcd.0: Device attached [ 946.605297][T18432] vhci_hcd: connection closed [ 946.605564][ T6649] vhci_hcd vhci_hcd.2: stop threads [ 946.609317][ T6649] vhci_hcd vhci_hcd.2: release socket [ 946.612911][ T6649] vhci_hcd vhci_hcd.2: disconnect device [ 946.765674][T18440] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 946.767993][T18440] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 946.795881][T18443] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 946.798108][T18443] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 946.800852][T18443] vhci_hcd vhci_hcd.0: Device attached [ 946.831780][T18440] vhci_hcd vhci_hcd.0: Device attached [ 947.095118][ T6056] usb 40-1: SetAddress Request (77) to port 0 [ 947.097203][ T6056] usb 40-1: new SuperSpeed USB device number 77 using vhci_hcd [ 947.405169][T18444] vhci_hcd: connection closed [ 947.409363][ T8250] vhci_hcd vhci_hcd.3: stop threads [ 947.413819][ T8250] vhci_hcd vhci_hcd.3: release socket [ 947.415667][T18441] vhci_hcd: connection reset by peer [ 947.416547][ T8250] vhci_hcd vhci_hcd.3: disconnect device [ 947.422783][ T8250] vhci_hcd vhci_hcd.1: stop threads [ 947.426029][ T8250] vhci_hcd vhci_hcd.1: release socket [ 947.428795][ T8250] vhci_hcd vhci_hcd.1: disconnect device [ 947.816867][T17494] usb 38-1: device descriptor read/8, error -110 [ 948.176138][T18460] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 948.179109][T18460] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 948.205295][T18460] vhci_hcd vhci_hcd.0: Device attached [ 948.335303][T17494] usb 38-1: SetAddress Request (97) to port 0 [ 948.338230][T17494] usb 38-1: new SuperSpeed USB device number 97 using vhci_hcd [ 948.447485][ T6022] usb 42-1: device descriptor read/8, error -110 [ 948.815949][T18462] vhci_hcd: connection reset by peer [ 948.819467][ T8250] vhci_hcd vhci_hcd.0: stop threads [ 948.823556][ T8250] vhci_hcd vhci_hcd.0: release socket [ 948.826125][ T8250] vhci_hcd vhci_hcd.0: disconnect device [ 948.838317][ T6022] usb usb42-port1: attempt power cycle [ 949.245242][ T7438] usb 44-1: device descriptor read/8, error -110 [ 949.426005][ T6022] usb usb42-port1: unable to enumerate USB device [ 949.865708][ T7438] usb usb44-port1: attempt power cycle [ 949.961338][T18486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2866'. [ 950.145970][T18487] netlink: 'syz.1.2868': attribute type 1 has an invalid length. [ 950.148954][T18487] netlink: 'syz.1.2868': attribute type 2 has an invalid length. [ 950.152016][T18490] netlink: 'syz.2.2869': attribute type 1 has an invalid length. [ 950.154361][T18490] netlink: 'syz.2.2869': attribute type 2 has an invalid length. [ 950.436605][ T7438] usb usb44-port1: unable to enumerate USB device [ 950.879754][T18506] netlink: 'syz.1.2874': attribute type 1 has an invalid length. [ 950.882767][T18506] netlink: 'syz.1.2874': attribute type 2 has an invalid length. [ 951.559559][T18518] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 951.561836][T18518] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 951.565143][T18518] vhci_hcd vhci_hcd.0: Device attached [ 952.219503][T18519] vhci_hcd: connection reset by peer [ 952.227184][ T1199] vhci_hcd vhci_hcd.1: stop threads [ 952.229630][ T1199] vhci_hcd vhci_hcd.1: release socket [ 952.232415][ T6056] usb 40-1: device descriptor read/8, error -110 [ 952.232497][ T1199] vhci_hcd vhci_hcd.1: disconnect device [ 952.525177][ T5948] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 952.525259][ T5942] Bluetooth: hci2: command 0x1003 tx timeout [ 952.636549][ T6056] usb usb40-port1: attempt power cycle [ 952.888348][T18540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2878'. [ 952.914748][T18541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2880'. [ 953.257053][ T6056] usb usb40-port1: unable to enumerate USB device [ 953.405329][T17494] usb 38-1: device descriptor read/8, error -110 [ 953.515302][T17494] usb usb38-port1: attempt power cycle [ 954.075898][T17494] usb usb38-port1: unable to enumerate USB device [ 954.082922][T18551] netlink: 'syz.2.2883': attribute type 1 has an invalid length. [ 954.085812][T18551] netlink: 'syz.2.2883': attribute type 2 has an invalid length. [ 954.285247][T12619] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 954.285263][ T5942] Bluetooth: hci3: command 0x1003 tx timeout [ 955.844159][T18581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2889'. [ 955.895215][ T5942] Bluetooth: hci2: command 0x1003 tx timeout [ 955.896648][ T5948] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 956.397863][T18588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2891'. [ 956.819709][T18590] netlink: 'syz.2.2893': attribute type 1 has an invalid length. [ 956.855667][T18590] netlink: 'syz.2.2893': attribute type 2 has an invalid length. [ 957.308068][T12619] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 958.482175][T18623] misc userio: No port type given on /dev/userio [ 958.484621][T18623] misc userio: The device must be registered before sending interrupts [ 958.493340][T18623] netlink: 'syz.0.2900': attribute type 1 has an invalid length. [ 958.497149][T18623] netlink: 'syz.0.2900': attribute type 2 has an invalid length. [ 960.709746][T18648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2905'. [ 961.085184][T12619] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 961.085192][ T5942] Bluetooth: hci2: command 0x1003 tx timeout [ 961.245297][ T5948] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 961.437294][T18661] netlink: 'syz.2.2908': attribute type 4 has an invalid length. [ 961.821036][T18669] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 961.823480][T18669] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 961.826457][T18669] vhci_hcd vhci_hcd.0: Device attached [ 962.135185][T17006] usb 44-1: SetAddress Request (59) to port 0 [ 962.140267][T17006] usb 44-1: new SuperSpeed USB device number 59 using vhci_hcd [ 962.184765][T18675] netlink: 'syz.2.2912': attribute type 4 has an invalid length. [ 962.484019][T18670] vhci_hcd: connection reset by peer [ 962.494393][ T1199] vhci_hcd vhci_hcd.3: stop threads [ 962.497277][ T1199] vhci_hcd vhci_hcd.3: release socket [ 962.504237][ T1199] vhci_hcd vhci_hcd.3: disconnect device [ 962.705461][T18680] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 962.708245][T18680] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 962.712550][T18680] vhci_hcd vhci_hcd.0: Device attached [ 962.751874][T18683] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 962.754752][T18683] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 962.768289][T18683] vhci_hcd vhci_hcd.0: Device attached [ 962.975272][T17494] usb 40-1: SetAddress Request (81) to port 0 [ 962.978488][T17494] usb 40-1: new SuperSpeed USB device number 81 using vhci_hcd [ 963.055378][ T6039] usb 38-1: SetAddress Request (100) to port 0 [ 963.058287][ T6039] usb 38-1: new SuperSpeed USB device number 100 using vhci_hcd [ 963.225408][T18684] vhci_hcd: connection reset by peer [ 963.227673][ T1141] vhci_hcd vhci_hcd.0: stop threads [ 963.230062][ T1141] vhci_hcd vhci_hcd.0: release socket [ 963.237219][ T1141] vhci_hcd vhci_hcd.0: disconnect device [ 963.249951][T18681] vhci_hcd: connection reset by peer [ 963.254276][ T1141] vhci_hcd vhci_hcd.1: stop threads [ 963.264261][ T1141] vhci_hcd vhci_hcd.1: release socket [ 963.267572][ T1141] vhci_hcd vhci_hcd.1: disconnect device [ 964.501398][T18712] netlink: 'syz.3.2920': attribute type 1 has an invalid length. [ 964.504199][T18712] netlink: 'syz.3.2920': attribute type 2 has an invalid length. [ 966.174108][T18738] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 966.176360][T18738] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 966.179279][T18738] vhci_hcd vhci_hcd.0: Device attached [ 966.205126][T12619] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 966.566309][T18750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2928'. [ 966.742574][T18740] vhci_hcd: connection closed [ 966.742801][ T1146] vhci_hcd vhci_hcd.3: stop threads [ 966.747316][ T1146] vhci_hcd vhci_hcd.3: release socket [ 966.750376][ T1146] vhci_hcd vhci_hcd.3: disconnect device [ 967.117321][T18756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2930'. [ 967.245354][T17006] usb 44-1: device descriptor read/8, error -110 [ 967.686512][T18772] netlink: 'syz.0.2933': attribute type 4 has an invalid length. [ 967.713623][T17006] usb usb44-port1: attempt power cycle [ 968.059084][T17494] usb 40-1: device descriptor read/8, error -110 [ 968.125215][ T6039] usb 38-1: device descriptor read/8, error -110 [ 968.305859][T17006] usb usb44-port1: unable to enumerate USB device [ 968.455586][T17494] usb usb40-port1: attempt power cycle [ 968.521121][ T6039] usb usb38-port1: attempt power cycle [ 969.075721][ T6039] usb usb38-port1: unable to enumerate USB device [ 969.080082][T17494] usb usb40-port1: unable to enumerate USB device [ 969.366564][T18791] netlink: 'syz.1.2940': attribute type 1 has an invalid length. [ 969.370120][T18791] netlink: 'syz.1.2940': attribute type 2 has an invalid length. [ 970.135479][T18807] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 970.138116][T18807] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 970.141236][T18807] vhci_hcd vhci_hcd.0: Device attached [ 970.375285][ T5948] Bluetooth: hci2: command 0x1003 tx timeout [ 970.378868][T12619] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 970.399206][T18811] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 970.402181][T18811] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 970.406010][T18811] vhci_hcd vhci_hcd.0: Device attached [ 970.445244][T17494] usb 38-1: SetAddress Request (104) to port 0 [ 970.448392][T17494] usb 38-1: new SuperSpeed USB device number 104 using vhci_hcd [ 970.560752][T18808] vhci_hcd: connection reset by peer [ 970.565140][ T6649] vhci_hcd vhci_hcd.0: stop threads [ 970.567596][ T6649] vhci_hcd vhci_hcd.0: release socket [ 970.575298][ T6649] vhci_hcd vhci_hcd.0: disconnect device [ 970.685632][T18002] usb 40-1: SetAddress Request (85) to port 0 [ 970.687704][T18002] usb 40-1: new SuperSpeed USB device number 85 using vhci_hcd [ 970.766645][T18812] vhci_hcd: connection reset by peer [ 970.769222][ T6649] vhci_hcd vhci_hcd.1: stop threads [ 970.771341][ T6649] vhci_hcd vhci_hcd.1: release socket [ 970.773608][ T6649] vhci_hcd vhci_hcd.1: disconnect device [ 970.817659][T18822] netlink: 'syz.3.2949': attribute type 1 has an invalid length. [ 970.821086][T18822] netlink: 'syz.3.2949': attribute type 2 has an invalid length. [ 971.001869][T18825] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 971.004074][T18825] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 971.007303][T18825] vhci_hcd vhci_hcd.0: Device attached [ 971.275364][T15890] usb 42-1: SetAddress Request (82) to port 0 [ 971.278752][T15890] usb 42-1: new SuperSpeed USB device number 82 using vhci_hcd [ 971.483089][T18838] netlink: 'syz.0.2952': attribute type 4 has an invalid length. [ 971.803181][T18826] vhci_hcd: connection reset by peer [ 971.807383][ T7005] vhci_hcd vhci_hcd.2: stop threads [ 971.809278][ T7005] vhci_hcd vhci_hcd.2: release socket [ 971.811243][ T7005] vhci_hcd vhci_hcd.2: disconnect device [ 972.196408][T18846] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 972.199298][T18846] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 972.202900][T18846] vhci_hcd vhci_hcd.0: Device attached [ 972.529193][T18856] netlink: 'syz.0.2956': attribute type 4 has an invalid length. [ 972.726440][T18847] vhci_hcd: connection closed [ 972.775079][ T1199] vhci_hcd vhci_hcd.1: stop threads [ 972.779322][ T1199] vhci_hcd vhci_hcd.1: release socket [ 972.792092][ T1199] vhci_hcd vhci_hcd.1: disconnect device [ 973.083198][T18864] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 973.085459][T18864] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 973.088778][T18864] vhci_hcd vhci_hcd.0: Device attached [ 973.659445][T18865] vhci_hcd: connection closed [ 973.659668][ T6649] vhci_hcd vhci_hcd.2: stop threads [ 973.663446][ T6649] vhci_hcd vhci_hcd.2: release socket [ 973.666444][ T6649] vhci_hcd vhci_hcd.2: disconnect device [ 973.854861][T18879] netlink: 'syz.1.2963': attribute type 4 has an invalid length. [ 975.368327][T18895] mkiss: ax0: crc mode is auto. [ 975.491003][T17494] usb 38-1: device descriptor read/8, error -110 [ 975.805263][T18002] usb 40-1: device descriptor read/8, error -110 [ 975.876039][T17494] usb usb38-port1: attempt power cycle [ 976.180121][T18910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2971'. [ 976.225983][T18002] usb usb40-port1: attempt power cycle [ 976.390950][T15890] usb 42-1: device descriptor read/8, error -110 [ 976.441525][T17494] usb usb38-port1: unable to enumerate USB device [ 976.795542][T15890] usb usb42-port1: attempt power cycle [ 976.809485][T18002] usb usb40-port1: unable to enumerate USB device [ 976.846213][T18924] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 976.848446][T18924] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 976.861346][T18924] vhci_hcd vhci_hcd.0: Device attached [ 977.125191][T17494] usb 40-1: SetAddress Request (89) to port 0 [ 977.127723][T17494] usb 40-1: new SuperSpeed USB device number 89 using vhci_hcd [ 977.325174][T12619] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 977.325207][ T5951] Bluetooth: hci2: command 0x1003 tx timeout [ 977.373085][T18925] vhci_hcd: connection reset by peer [ 977.377618][ T13] vhci_hcd vhci_hcd.1: stop threads [ 977.379842][ T13] vhci_hcd vhci_hcd.1: release socket [ 977.387881][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 977.455590][T15890] usb usb42-port1: unable to enumerate USB device [ 977.601412][T18933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2977'. [ 978.215173][ T5948] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 978.438994][T18944] netlink: 'syz.2.2979': attribute type 4 has an invalid length. [ 979.005325][ T5948] Bluetooth: hci6: command 0x1003 tx timeout [ 979.005951][ T5942] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 979.303115][T18955] netlink: 'syz.0.2984': attribute type 1 has an invalid length. [ 979.305931][T18955] netlink: 'syz.0.2984': attribute type 2 has an invalid length. [ 979.720359][ T7438] ================================================================== [ 979.723719][ T7438] BUG: KASAN: slab-use-after-free in hci_uart_write_work+0x82d/0x960 [ 979.727130][ T7438] Read of size 4 at addr ffff888029b5ef70 by task kworker/0:5/7438 [ 979.731446][ T7438] [ 979.733877][ T7438] CPU: 0 UID: 0 PID: 7438 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 979.733912][ T7438] Tainted: [L]=SOFTLOCKUP [ 979.733920][ T7438] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 979.733934][ T7438] Workqueue: events hci_uart_write_work [ 979.733961][ T7438] Call Trace: [ 979.734016][ T7438] [ 979.734029][ T7438] dump_stack_lvl+0x116/0x1f0 [ 979.734065][ T7438] print_report+0xcd/0x630 [ 979.734093][ T7438] ? __virt_addr_valid+0x81/0x610 [ 979.734122][ T7438] ? __phys_addr+0xe8/0x180 [ 979.734150][ T7438] ? hci_uart_write_work+0x82d/0x960 [ 979.734171][ T7438] kasan_report+0xe0/0x110 [ 979.734200][ T7438] ? hci_uart_write_work+0x82d/0x960 [ 979.734222][ T7438] hci_uart_write_work+0x82d/0x960 [ 979.734241][ T7438] ? __pfx_pty_write+0x10/0x10 [ 979.734269][ T7438] process_one_work+0x9ba/0x1b20 [ 979.734297][ T7438] ? __pfx_process_one_work+0x10/0x10 [ 979.734323][ T7438] ? assign_work+0x1a0/0x250 [ 979.734345][ T7438] worker_thread+0x6c8/0xf10 [ 979.734371][ T7438] ? __kthread_parkme+0x19e/0x250 [ 979.734399][ T7438] ? __pfx_worker_thread+0x10/0x10 [ 979.734419][ T7438] kthread+0x3c5/0x780 [ 979.734439][ T7438] ? __pfx_kthread+0x10/0x10 [ 979.734458][ T7438] ? rcu_is_watching+0x12/0xc0 [ 979.734484][ T7438] ? __pfx_kthread+0x10/0x10 [ 979.734502][ T7438] ret_from_fork+0x983/0xb10 [ 979.734522][ T7438] ? __pfx_ret_from_fork+0x10/0x10 [ 979.734543][ T7438] ? __switch_to+0x7af/0x10d0 [ 979.734568][ T7438] ? __pfx_kthread+0x10/0x10 [ 979.734587][ T7438] ret_from_fork_asm+0x1a/0x30 [ 979.734620][ T7438] [ 979.734627][ T7438] [ 979.802721][ T7438] Allocated by task 15890: [ 979.804725][ T7438] kasan_save_stack+0x33/0x60 [ 979.806856][ T7438] kasan_save_track+0x14/0x30 [ 979.808850][ T7438] __kasan_slab_alloc+0x89/0x90 [ 979.811008][ T7438] kmem_cache_alloc_node_noprof+0x298/0x800 [ 979.813697][ T7438] __alloc_skb+0x156/0x410 [ 979.815669][ T7438] bcsp_prepare_pkt+0xe0/0xae0 [ 979.817791][ T7438] bcsp_dequeue+0x237/0x4b0 [ 979.819809][ T7438] hci_uart_write_work+0x4e3/0x960 [ 979.822135][ T7438] process_one_work+0x9ba/0x1b20 [ 979.824459][ T7438] worker_thread+0x6c8/0xf10 [ 979.826398][ T7438] kthread+0x3c5/0x780 [ 979.828121][ T7438] ret_from_fork+0x983/0xb10 [ 979.830057][ T7438] ret_from_fork_asm+0x1a/0x30 [ 979.832098][ T7438] [ 979.833048][ T7438] The buggy address belongs to the object at ffff888029b5ef00 [ 979.833048][ T7438] which belongs to the cache skbuff_head_cache of size 240 [ 979.838920][ T7438] The buggy address is located 112 bytes inside of [ 979.838920][ T7438] freed 240-byte region [ffff888029b5ef00, ffff888029b5eff0) [ 979.844607][ T7438] [ 979.845621][ T7438] The buggy address belongs to the physical page: [ 979.848314][ T7438] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29b5e [ 979.852324][ T7438] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 979.856153][ T7438] memcg:ffff888026871401 [ 979.857953][ T7438] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 979.861097][ T7438] page_type: f5(slab) [ 979.862843][ T7438] raw: 00fff00000000040 ffff88801c7308c0 ffffea0000a2ee80 dead000000000002 [ 979.866606][ T7438] raw: 0000000000000000 0000000080190019 00000000f5000000 ffff888026871401 [ 979.870387][ T7438] head: 00fff00000000040 ffff88801c7308c0 ffffea0000a2ee80 dead000000000002 [ 979.874102][ T7438] head: 0000000000000000 0000000080190019 00000000f5000000 ffff888026871401 [ 979.877907][ T7438] head: 00fff00000000001 ffffea0000a6d781 00000000ffffffff 00000000ffffffff [ 979.881696][ T7438] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 979.885390][ T7438] page dumped because: kasan: bad access detected [ 979.887904][ T7438] page_owner tracks the page as allocated [ 979.889927][ T7438] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1199, tgid 1199 (kworker/u32:9), ts 205168786187, free_ts 56636603144 [ 979.897331][ T7438] post_alloc_hook+0x1af/0x220 [ 979.899000][ T7438] get_page_from_freelist+0xd0b/0x31a0 [ 979.901213][ T7438] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 979.903418][ T7438] alloc_pages_mpol+0x1fb/0x550 [ 979.905046][ T7438] new_slab+0x2c3/0x430 [ 979.906718][ T7438] ___slab_alloc+0xe18/0x1c90 [ 979.908690][ T7438] __kmem_cache_alloc_bulk+0x1fb/0x6c0 [ 979.910687][ T7438] kmem_cache_alloc_bulk_noprof+0x4e1/0x800 [ 979.912787][ T7438] napi_skb_cache_get+0x6ac/0x900 [ 979.914924][ T7438] __alloc_skb+0x2aa/0x410 [ 979.916470][ T7438] napi_alloc_skb+0x44b/0x820 [ 979.918220][ T7438] e1000_clean_rx_irq+0x2ae/0x1180 [ 979.920363][ T7438] e1000_clean+0x9cb/0x2670 [ 979.921976][ T7438] __napi_poll.constprop.0+0xb3/0x540 [ 979.923901][ T7438] net_rx_action+0x9f9/0xfa0 [ 979.925792][ T7438] handle_softirqs+0x219/0x950 [ 979.927714][ T7438] page last free pid 53 tgid 53 stack trace: [ 979.930199][ T7438] __free_frozen_pages+0x7df/0x1170 [ 979.932171][ T7438] qlist_free_all+0x4c/0xf0 [ 979.933766][ T7438] kasan_quarantine_reduce+0x195/0x1e0 [ 979.936055][ T7438] __kasan_slab_alloc+0x69/0x90 [ 979.937731][ T7438] __kmalloc_node_track_caller_noprof+0x30b/0x930 [ 979.940083][ T7438] kmalloc_reserve+0xef/0x2c0 [ 979.942096][ T7438] __alloc_skb+0x186/0x410 [ 979.943991][ T7438] mld_newpack.isra.0+0x18e/0xa20 [ 979.945732][ T7438] add_grhead+0x299/0x340 [ 979.947181][ T7438] add_grec+0x11b5/0x1720 [ 979.948960][ T7438] mld_ifc_work+0x41f/0xbf0 [ 979.950927][ T7438] process_one_work+0x9ba/0x1b20 [ 979.952600][ T7438] worker_thread+0x6c8/0xf10 [ 979.954237][ T7438] kthread+0x3c5/0x780 [ 979.956102][ T7438] ret_from_fork+0x983/0xb10 [ 979.958096][ T7438] ret_from_fork_asm+0x1a/0x30 [ 979.960195][ T7438] [ 979.961190][ T7438] Memory state around the buggy address: [ 979.963285][ T7438] ffff888029b5ee00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 979.966708][ T7438] ffff888029b5ee80: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 979.969965][ T7438] >ffff888029b5ef00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 979.973342][ T7438] ^ [ 979.976636][ T7438] ffff888029b5ef80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 979.979343][ T7438] ffff888029b5f000: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 979.982656][ T7438] ================================================================== [ 980.034342][ T7438] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 980.037335][ T7438] CPU: 0 UID: 0 PID: 7438 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 980.041737][ T7438] Tainted: [L]=SOFTLOCKUP [ 980.043459][ T7438] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 980.048127][ T7438] Workqueue: events hci_uart_write_work [ 980.050355][ T7438] Call Trace: [ 980.052063][ T7438] [ 980.053402][ T7438] dump_stack_lvl+0x3d/0x1f0 [ 980.055313][ T7438] vpanic+0x640/0x6f0 [ 980.056708][ T7438] panic+0xca/0xd0 [ 980.057993][ T7438] ? __pfx_panic+0x10/0x10 [ 980.059816][ T7438] ? hci_uart_write_work+0x82d/0x960 [ 980.061852][ T7438] ? preempt_schedule_common+0x44/0xc0 [ 980.063720][ T7438] ? preempt_schedule_thunk+0x16/0x30 [ 980.066066][ T7438] ? check_panic_on_warn+0x1f/0xb0 [ 980.068285][ T7438] check_panic_on_warn+0xab/0xb0 [ 980.070548][ T7438] end_report+0x107/0x160 [ 980.072593][ T7438] kasan_report+0xee/0x110 [ 980.074254][ T7438] ? hci_uart_write_work+0x82d/0x960 [ 980.076209][ T7438] hci_uart_write_work+0x82d/0x960 [ 980.078495][ T7438] ? __pfx_pty_write+0x10/0x10 [ 980.080162][ T7438] process_one_work+0x9ba/0x1b20 [ 980.082014][ T7438] ? __pfx_process_one_work+0x10/0x10 [ 980.084425][ T7438] ? assign_work+0x1a0/0x250 [ 980.086103][ T7438] worker_thread+0x6c8/0xf10 [ 980.087656][ T7438] ? __kthread_parkme+0x19e/0x250 [ 980.089843][ T7438] ? __pfx_worker_thread+0x10/0x10 [ 980.092255][ T7438] kthread+0x3c5/0x780 [ 980.093648][ T7438] ? __pfx_kthread+0x10/0x10 [ 980.095560][ T7438] ? rcu_is_watching+0x12/0xc0 [ 980.097652][ T7438] ? __pfx_kthread+0x10/0x10 [ 980.099232][ T7438] ret_from_fork+0x983/0xb10 [ 980.100876][ T7438] ? __pfx_ret_from_fork+0x10/0x10 [ 980.103302][ T7438] ? __switch_to+0x7af/0x10d0 [ 980.104999][ T7438] ? __pfx_kthread+0x10/0x10 [ 980.106548][ T7438] ret_from_fork_asm+0x1a/0x30 [ 980.108604][ T7438] [ 980.110478][ T7438] Kernel Offset: disabled [ 980.112003][ T7438] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:57:48 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85301b75 RDI=ffffffff9aed9260 RBP=ffffffff9aed9220 RSP=ffffc90004edf5a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000038 R14=ffffffff9aed9220 R15=ffffffff85301b10 RIP=ffffffff85301b9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f721a920 CR3=000000006314f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000029c00000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000002f96fb7 RBX=0000000000000001 RCX=ffffffff8b7576d9 RDX=0000000000000000 RSI=ffffffff8daca5cd RDI=ffffffff8bf2b580 RBP=ffffed1003ad9498 RSP=ffffc9000046fde8 R8 =0000000000000001 R9 =ffffed100566673d R10=ffff88802b3339eb R11=ffff88801d6caff0 R12=0000000000000001 R13=ffff88801d6ca4c0 R14=ffffffff9088e9d0 R15=0000000000000000 RIP=ffffffff8b755dcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7456288 CR3=000000006314f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000029c00000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000040 RCX=ffffffff84b3b01b RDX=ffff8880217a0000 RSI=0000000000000040 RDI=0000000000000001 RBP=ffffc90003f1f2e0 RSP=ffffc90003f1f1a0 R8 =0000000000000001 R9 =0000000000000040 R10=0000000000000040 R11=ffff8880217a0b30 R12=1ffff920007e3e3e R13=0000000000000040 R14=0000000000000003 R15=ffffffff8bf2dfcf RIP=ffffffff81be6af0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5a9064a300 ffffffff 00c00000 GS =0000 ffff8880978fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000559bea787000 CR3=000000004e33e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000bb2 0000001800000000 0000000000000000 0000000000000017 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80030fffffffff02 010800040175e43a 000005370000001c 0000000100000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000e80030fffffff ff02040800000800 0208007c08000a01 4cd4000400000800 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02800201c7080008 014ab60032726563 6e65757165732f76 65642f01ffffffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffdf080280 030004000008000e 800201c708000801 43aa0073636f7270 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e70756f7267632f 7570632e70756f72 67632f2e01ffffff ffffffffffcb080e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01ffffffffffffff ffed080280032008 0006080020080006 0c719602b808000c ZMM25=fe2096a1fe2096a1 fe2096a1fe2096a1 fe2096a1fe2096a1 fe2096a1fe2096a1 fe2096a1fe2096a1 fe2096a1fe2096a1 fe2096a1fe2096a1 fe2096a1fe2096a1 ZMM26=be60f21ebe60f21e be60f21ebe60f21e be60f21ebe60f21e be60f21ebe60f21e be60f21ebe60f21e be60f21ebe60f21e be60f21ebe60f21e be60f21ebe60f21e ZMM27=5e0cb4105e0cb410 5e0cb4105e0cb410 5e0cb4105e0cb410 5e0cb4105e0cb410 5e0cb4105e0cb410 5e0cb4105e0cb410 5e0cb4105e0cb410 5e0cb4105e0cb410 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=521f0000521f0000 521f0000521f0000 521f0000521f0000 521f0000521f0000 521f0000521f0000 521f0000521f0000 521f0000521f0000 521f0000521f0000 info registers vcpu 3 CPU#3 RAX=000000000160ee6d RBX=0000000000000003 RCX=ffffffff8b7576d9 RDX=0000000000000000 RSI=ffffffff8daca5cd RDI=ffffffff8bf2b580 RBP=ffffed1003b52000 RSP=ffffc9000048fde8 R8 =0000000000000001 R9 =ffffed10056a673d R10=ffff88802b5339eb R11=ffffffff9ae88630 R12=0000000000000003 R13=ffff88801da90000 R14=ffffffff9088e9d0 R15=0000000000000000 RIP=ffffffff8b755dcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000080016018 CR3=0000000065e3f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000