last executing test programs: 9.515260997s ago: executing program 0 (id=2443): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0x52}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r5, 0x1) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 8.064120848s ago: executing program 0 (id=2445): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_open_pts(r4, 0x101000) ioctl$KDDISABIO(r6, 0x4b37) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff020000000000000000000000000001"], 0x0) 7.715984897s ago: executing program 1 (id=2446): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = gettid() ptrace$ARCH_SHSTK_STATUS(0x1e, r2, &(0x7f0000000740), 0x5005) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x5, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048880}, 0x10) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000840), 0x101040, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x4c4201, 0x3c) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x8, 0xff49, 0x0, 0x86, 0xb7, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000006c0)={0x5, &(0x7f0000000680)=[{}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r5, 0xc0286429, &(0x7f0000000800)={0x0, 0x6, &(0x7f0000000700)=[0x0, 0x0, 0xfffffc01, 0x7, 0x2, 0x100], &(0x7f0000000740), 0x63, 0x7, 0x400, &(0x7f0000000780)=[0x401, 0x9, 0x8, 0x8, 0x40, 0x9, 0x2], &(0x7f00000007c0)=[0x3]}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r4, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) 7.683120916s ago: executing program 3 (id=2447): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r5, 0x1) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) 6.723153361s ago: executing program 1 (id=2449): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r5, 0x1) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) 6.384766989s ago: executing program 2 (id=2450): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = gettid() ptrace$ARCH_SHSTK_STATUS(0x1e, r2, &(0x7f0000000740), 0x5005) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x5, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048880}, 0x10) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000840), 0x101040, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x4c4201, 0x3c) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x8, 0xff49, 0x0, 0x86, 0xb7, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000006c0)={0x6, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r5, 0xc0286429, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r4, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) 6.229181142s ago: executing program 3 (id=2451): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x83, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x46) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/45, 0x2d) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x5, 0x0, 0x5, 0x4}}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x415a, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000000010073797a300000000048000000030a010100000000000000000100000008000b400000000014000480080002400000000008000140000000000900010073797a31000000000900030073797a3000000000140000001000010000000000000000000000000a"], 0x90}}, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) process_madvise(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000400)="8524d5e68c5f73d7b65b2fa844745f0ba3", 0x11}], 0x1, 0x15, 0x0) sendmsg$NL80211_CMD_START_NAN(r6, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4) lstat64(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000a00)) 5.849133884s ago: executing program 0 (id=2452): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r5, 0x1) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) 5.515746575s ago: executing program 2 (id=2453): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xfffe, r5, 0x0}]) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf) write$UHID_INPUT(r4, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) socket$netlink(0x10, 0x3, 0x15) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) chown(&(0x7f00000003c0)='./cgroup\x00', 0x0, 0x0) stat(&(0x7f0000000240)='./file0/file0\x00', 0x0) 5.105426849s ago: executing program 1 (id=2454): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xfffe, r5, 0x0}]) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf) write$UHID_INPUT(r4, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) socket$netlink(0x10, 0x3, 0x15) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chown(&(0x7f00000003c0)='./cgroup\x00', 0x0, 0x0) stat(&(0x7f0000000240)='./file0/file0\x00', 0x0) 4.951586437s ago: executing program 3 (id=2455): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = gettid() ptrace$ARCH_SHSTK_STATUS(0x1e, r2, &(0x7f0000000740), 0x5005) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x5, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048880}, 0x10) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000840), 0x101040, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x4c4201, 0x3c) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x8, 0xff49, 0x0, 0x86, 0xb7, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000006c0)={0x5, &(0x7f0000000680)=[{}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r5, 0xc0286429, &(0x7f0000000800)={0x0, 0x6, &(0x7f0000000700)=[0x0, 0x0, 0xfffffc01, 0x7, 0x2, 0x100], &(0x7f0000000740), 0x63, 0x7, 0x400, &(0x7f0000000780)=[0x401, 0x9, 0x8, 0x8, 0x40, 0x9, 0x2], &(0x7f00000007c0)=[0x3]}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r4, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) 4.083680838s ago: executing program 0 (id=2456): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x83, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x46) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/45, 0x2d) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x5, 0x0, 0x5, 0x4}}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x415a, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000000010073797a300000000048000000030a010100000000000000000100000008000b400000000014000480080002400000000008000140000000000900010073797a31000000000900030073797a3000000000140000001000010000000000000000000000000a"], 0x90}}, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) process_madvise(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000400)="8524d5e68c5f73d7b65b2fa844745f0ba3", 0x11}], 0x1, 0x15, 0x0) sendmsg$NL80211_CMD_START_NAN(r6, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4) lstat64(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000a00)) 3.971037223s ago: executing program 3 (id=2457): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_open_pts(r4, 0x101000) ioctl$KDDISABIO(r6, 0x4b37) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff0200"/52], 0x0) 3.390903828s ago: executing program 2 (id=2458): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x36b, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x40045010, &(0x7f0000000080)=0xd8eb) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, 0x0, 0x20044000) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(0x0, 0x7, 0x220042) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000380)={0x3, r9, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000440)={0x5, r9}) syz_io_uring_setup(0x7a72, &(0x7f0000000480)={0x0, 0x2d12, 0x1000, 0x2, 0x306}, &(0x7f0000000140), &(0x7f0000000280)) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a"], 0x10}}, 0x0) 3.103301447s ago: executing program 0 (id=2459): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r5, 0x1) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) 3.067592823s ago: executing program 1 (id=2460): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xfffe, r5, 0x0}]) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf) write$UHID_INPUT(r4, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) socket$netlink(0x10, 0x3, 0x15) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) chown(&(0x7f00000003c0)='./cgroup\x00', 0x0, 0x0) stat(&(0x7f0000000240)='./file0/file0\x00', 0x0) 2.423570424s ago: executing program 2 (id=2461): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = gettid() ptrace$ARCH_SHSTK_STATUS(0x1e, r2, &(0x7f0000000740), 0x5005) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x5, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048880}, 0x10) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000840), 0x101040, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x4c4201, 0x3c) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x8, 0xff49, 0x0, 0x86, 0xb7, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000006c0)={0x6, &(0x7f0000000680)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r5, 0xc0286429, &(0x7f0000000800)={r8, 0x0, 0x0, &(0x7f0000000740), 0x63, 0x7, 0x400, &(0x7f0000000780)=[0x401, 0x9, 0x8, 0x8, 0x40, 0x9, 0x2], &(0x7f00000007c0)=[0x3]}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r4, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) 1.552629493s ago: executing program 2 (id=2462): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x83, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x46) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/45, 0x2d) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x5, 0x0, 0x5, 0x4}}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x415a, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000000010073797a300000000048000000030a010100000000000000000100000008000b400000000014000480080002400000000008000140000000000900010073797a31000000000900030073797a3000000000140000001000010000000000000000000000000a"], 0x90}}, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) process_madvise(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000400)="8524d5e68c5f73d7b65b2fa844745f0ba3", 0x11}], 0x1, 0x15, 0x0) sendmsg$NL80211_CMD_START_NAN(r6, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4) lstat64(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000a00)) 1.230174s ago: executing program 0 (id=2463): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xfffe, r5, 0x0}]) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf) write$UHID_INPUT(r4, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) socket$netlink(0x10, 0x3, 0x15) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chown(&(0x7f00000003c0)='./cgroup\x00', 0x0, 0x0) stat(&(0x7f0000000240)='./file0/file0\x00', 0x0) 1.194152928s ago: executing program 3 (id=2464): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = gettid() ptrace$ARCH_SHSTK_STATUS(0x1e, r2, &(0x7f0000000740), 0x5005) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x5, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048880}, 0x10) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000840), 0x101040, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x4c4201, 0x3c) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x8, 0xff49, 0x0, 0x86, 0xb7, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000006c0)={0x6, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r5, 0xc0286429, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r4, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x6000000000000000, 0x0, 0x0) 956.647094ms ago: executing program 1 (id=2465): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = gettid() ptrace$ARCH_SHSTK_STATUS(0x1e, r2, &(0x7f0000000740), 0x5005) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x5, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048880}, 0x10) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000840), 0x101040, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x4c4201, 0x3c) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x8, 0xff49, 0x0, 0x86, 0xb7, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000006c0)={0x6, &(0x7f0000000680)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r5, 0xc0286429, &(0x7f0000000800)={r8, 0x0, 0x0, &(0x7f0000000740), 0x63, 0x7, 0x400, &(0x7f0000000780)=[0x401, 0x9, 0x8, 0x8, 0x40, 0x9, 0x2], &(0x7f00000007c0)=[0x3]}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r4, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) 592.162766ms ago: executing program 2 (id=2466): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_open_pts(r4, 0x101000) ioctl$KDDISABIO(r6, 0x4b37) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff020000000000000000000000000001"], 0x0) 280.552792ms ago: executing program 3 (id=2467): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_open_pts(r4, 0x101000) ioctl$KDDISABIO(r6, 0x4b37) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff020000000000000000000000000001"], 0x0) 0s ago: executing program 1 (id=2468): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xfffe, r5, 0x0}]) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf) write$UHID_INPUT(r4, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) socket$netlink(0x10, 0x3, 0x15) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chown(&(0x7f00000003c0)='./cgroup\x00', 0x0, 0x0) stat(&(0x7f0000000240)='./file0/file0\x00', 0x0) kernel console output (not intermixed with test programs): .725365][ T6933] vhci_hcd vhci_hcd.3: stop threads [ 817.729187][ T6933] vhci_hcd vhci_hcd.3: release socket [ 817.732168][ T6933] vhci_hcd vhci_hcd.3: disconnect device [ 817.828267][T17450] mkiss: ax0: crc mode is auto. [ 817.901026][ T34] usb 38-1: SetAddress Request (5) to port 0 [ 817.903879][ T34] usb 38-1: new SuperSpeed USB device number 5 using vhci_hcd [ 818.494970][T17442] vhci_hcd: connection reset by peer [ 818.497107][ T1258] vhci_hcd vhci_hcd.0: stop threads [ 818.499061][ T1258] vhci_hcd vhci_hcd.0: release socket [ 818.501110][ T1258] vhci_hcd vhci_hcd.0: disconnect device [ 818.568122][T17454] netlink: 'syz.3.2149': attribute type 4 has an invalid length. [ 818.751069][T11597] usb 44-1: device descriptor read/8, error -110 [ 819.041360][T17458] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 819.043858][T17458] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 819.046726][T17458] vhci_hcd vhci_hcd.0: Device attached [ 819.142458][T11597] usb usb44-port1: attempt power cycle [ 819.321145][ T6226] usb 42-1: SetAddress Request (2) to port 0 [ 819.330724][ T6226] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 819.576986][T17459] vhci_hcd: connection reset by peer [ 819.579832][ T91] vhci_hcd vhci_hcd.2: stop threads [ 819.583551][ T91] vhci_hcd vhci_hcd.2: release socket [ 819.589474][ T91] vhci_hcd vhci_hcd.2: disconnect device [ 819.631009][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 819.701531][T11597] usb usb44-port1: unable to enumerate USB device [ 819.713077][ T24] usb 40-1: device descriptor read/8, error -110 [ 819.856080][T17472] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 819.858284][T17472] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 819.867781][T17472] vhci_hcd vhci_hcd.0: Device attached [ 820.101453][ T24] usb usb40-port1: attempt power cycle [ 820.632988][T17473] vhci_hcd: connection closed [ 820.633174][ T1146] vhci_hcd vhci_hcd.0: stop threads [ 820.636583][ T1146] vhci_hcd vhci_hcd.0: release socket [ 820.639244][ T1146] vhci_hcd vhci_hcd.0: disconnect device [ 820.661567][ T24] usb usb40-port1: unable to enumerate USB device [ 820.676702][T17483] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 820.678897][T17483] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 820.683639][T17483] vhci_hcd vhci_hcd.0: Device attached [ 820.776257][T17486] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 820.778459][T17486] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 820.781492][T17486] vhci_hcd vhci_hcd.0: Device attached [ 820.951131][ T24] usb 44-1: SetAddress Request (111) to port 0 [ 820.953916][ T24] usb 44-1: new SuperSpeed USB device number 111 using vhci_hcd [ 821.386369][T17487] vhci_hcd: connection closed [ 821.386889][ T104] vhci_hcd vhci_hcd.2: stop threads [ 821.390306][ T104] vhci_hcd vhci_hcd.2: release socket [ 821.393336][ T104] vhci_hcd vhci_hcd.2: disconnect device [ 821.489979][T17484] vhci_hcd: connection reset by peer [ 821.492401][ T104] vhci_hcd vhci_hcd.3: stop threads [ 821.494393][ T104] vhci_hcd vhci_hcd.3: release socket [ 821.496561][ T104] vhci_hcd vhci_hcd.3: disconnect device [ 821.709131][T17491] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 821.711336][T17491] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 821.714078][T17491] vhci_hcd vhci_hcd.0: Device attached [ 821.735347][T17493] vhci_hcd: connection closed [ 821.735555][ T91] vhci_hcd vhci_hcd.0: stop threads [ 821.738950][ T91] vhci_hcd vhci_hcd.0: release socket [ 821.740827][ T91] vhci_hcd vhci_hcd.0: disconnect device [ 822.031118][ T5958] Bluetooth: hci4: command 0x1003 tx timeout [ 822.031275][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 822.220899][T17503] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 822.223068][T17503] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 822.226434][T17503] vhci_hcd vhci_hcd.0: Device attached [ 822.237037][T17502] mkiss: ax0: crc mode is auto. [ 822.800153][T17514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2159'. [ 822.807271][T17514] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2159'. [ 822.846166][T17515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2160'. [ 822.849284][T17515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2160'. [ 822.870636][T17504] vhci_hcd: connection closed [ 822.871034][ T6236] vhci_hcd vhci_hcd.2: stop threads [ 823.044300][ T6236] vhci_hcd vhci_hcd.2: release socket [ 823.046778][ T6236] vhci_hcd vhci_hcd.2: disconnect device [ 823.049297][ T34] usb 38-1: device descriptor read/8, error -110 [ 823.393890][T17521] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 823.396650][T17521] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 823.400084][T17521] vhci_hcd vhci_hcd.0: Device attached [ 823.457633][ T34] usb usb38-port1: attempt power cycle [ 823.681053][T11597] usb 40-1: SetAddress Request (20) to port 0 [ 823.684168][T11597] usb 40-1: new SuperSpeed USB device number 20 using vhci_hcd [ 824.013568][ T34] usb usb38-port1: unable to enumerate USB device [ 824.102026][T17522] vhci_hcd: connection reset by peer [ 824.104304][ T1258] vhci_hcd vhci_hcd.1: stop threads [ 824.106175][ T1258] vhci_hcd vhci_hcd.1: release socket [ 824.108305][ T1258] vhci_hcd vhci_hcd.1: disconnect device [ 824.412120][T17538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2164'. [ 824.416431][T17538] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2164'. [ 824.442071][ T6226] usb 42-1: device descriptor read/8, error -110 [ 824.891954][ T6226] usb usb42-port1: attempt power cycle [ 825.401960][T17554] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 825.404142][T17554] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 825.407502][T17554] vhci_hcd vhci_hcd.0: Device attached [ 825.446281][T17557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2165'. [ 825.446363][T17557] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2165'. [ 825.462334][ T6226] usb usb42-port1: unable to enumerate USB device [ 825.841709][T17553] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 825.844002][T17553] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 825.847045][T17553] vhci_hcd vhci_hcd.0: Device attached [ 826.031035][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 826.031067][ T5958] Bluetooth: hci4: command 0x1003 tx timeout [ 826.036458][ T24] usb 44-1: device descriptor read/8, error -110 [ 826.131028][ T6013] usb 42-1: SetAddress Request (6) to port 0 [ 826.136131][ T6013] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 826.383507][T17555] vhci_hcd: connection closed [ 826.383841][ T6933] vhci_hcd vhci_hcd.1: stop threads [ 826.387420][ T6933] vhci_hcd vhci_hcd.1: release socket [ 826.389480][ T6933] vhci_hcd vhci_hcd.1: disconnect device [ 826.405322][T17566] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 826.407720][T17566] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 826.407826][T17566] vhci_hcd vhci_hcd.0: Device attached [ 826.418062][T17559] vhci_hcd: connection reset by peer [ 826.420138][ T91] vhci_hcd vhci_hcd.2: stop threads [ 826.423475][ T91] vhci_hcd vhci_hcd.2: release socket [ 826.425385][ T91] vhci_hcd vhci_hcd.2: disconnect device [ 826.481269][ T24] usb 44-1: SetAddress Request (112) to port 0 [ 826.483599][ T24] usb 44-1: new SuperSpeed USB device number 112 using vhci_hcd [ 827.066210][T17567] vhci_hcd: connection reset by peer [ 827.068847][ T91] vhci_hcd vhci_hcd.3: stop threads [ 827.070720][ T91] vhci_hcd vhci_hcd.3: release socket [ 827.073868][ T91] vhci_hcd vhci_hcd.3: disconnect device [ 827.401207][T17579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2170'. [ 827.404507][T17579] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2170'. [ 827.971661][T17584] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 827.973865][T17584] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 827.984532][T17584] vhci_hcd vhci_hcd.0: Device attached [ 828.364076][T17590] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 828.366992][T17590] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 828.378635][T17590] vhci_hcd vhci_hcd.0: Device attached [ 828.511051][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 828.613977][T17585] vhci_hcd: connection closed [ 828.614230][ T9327] vhci_hcd vhci_hcd.3: stop threads [ 828.617706][ T9327] vhci_hcd vhci_hcd.3: release socket [ 828.619534][ T9327] vhci_hcd vhci_hcd.3: disconnect device [ 828.751095][T11597] usb 40-1: device descriptor read/8, error -110 [ 828.928801][T17595] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 828.931301][T17595] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 828.934587][T17595] vhci_hcd vhci_hcd.0: Device attached [ 828.985473][T17591] vhci_hcd: connection closed [ 828.986088][ T9327] vhci_hcd vhci_hcd.2: stop threads [ 828.989478][ T9327] vhci_hcd vhci_hcd.2: release socket [ 828.991888][ T9327] vhci_hcd vhci_hcd.2: disconnect device [ 829.011305][T11597] usb 40-1: SetAddress Request (21) to port 0 [ 829.014236][T11597] usb 40-1: new SuperSpeed USB device number 21 using vhci_hcd [ 829.524338][T17599] vhci_hcd: connection reset by peer [ 829.531144][ T91] vhci_hcd vhci_hcd.1: stop threads [ 829.534274][ T91] vhci_hcd vhci_hcd.1: release socket [ 829.536549][ T91] vhci_hcd vhci_hcd.1: disconnect device [ 829.934016][T17611] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 829.936259][T17611] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 829.940191][T17611] vhci_hcd vhci_hcd.0: Device attached [ 830.217900][T17617] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 830.220257][T17617] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 830.237382][T17617] vhci_hcd vhci_hcd.0: Device attached [ 830.462073][T17626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2179'. [ 830.465261][T17626] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2179'. [ 830.581055][ T53] usb 38-1: SetAddress Request (9) to port 0 [ 830.583299][ T53] usb 38-1: new SuperSpeed USB device number 9 using vhci_hcd [ 830.869781][T17612] vhci_hcd: connection closed [ 830.882488][ T91] vhci_hcd vhci_hcd.2: stop threads [ 830.886042][ T91] vhci_hcd vhci_hcd.2: release socket [ 830.890055][ T91] vhci_hcd vhci_hcd.2: disconnect device [ 830.982465][T17618] vhci_hcd: connection reset by peer [ 830.984578][ T91] vhci_hcd vhci_hcd.0: stop threads [ 830.986394][ T91] vhci_hcd vhci_hcd.0: release socket [ 830.988440][ T91] vhci_hcd vhci_hcd.0: disconnect device [ 831.231814][ T6013] usb 42-1: device descriptor read/8, error -110 [ 831.563689][ T24] usb 44-1: device descriptor read/8, error -110 [ 831.621530][ T6013] usb usb42-port1: attempt power cycle [ 831.671254][ T24] usb usb44-port1: attempt power cycle [ 831.744142][T17636] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 831.746296][T17636] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 831.749602][T17636] vhci_hcd vhci_hcd.0: Device attached [ 832.033647][T17639] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 832.035820][T17639] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 832.049100][T17639] vhci_hcd vhci_hcd.0: Device attached [ 832.133538][T17637] vhci_hcd: connection closed [ 832.133813][ T61] vhci_hcd vhci_hcd.1: stop threads [ 832.138277][ T61] vhci_hcd vhci_hcd.1: release socket [ 832.138330][ T61] vhci_hcd vhci_hcd.1: disconnect device [ 832.242135][ T24] usb usb44-port1: unable to enumerate USB device [ 832.271297][ T6013] usb 42-1: SetAddress Request (9) to port 0 [ 832.273954][ T6013] usb 42-1: new SuperSpeed USB device number 9 using vhci_hcd [ 832.486577][T17640] vhci_hcd: connection reset by peer [ 832.488818][ T91] vhci_hcd vhci_hcd.2: stop threads [ 832.491013][ T91] vhci_hcd vhci_hcd.2: release socket [ 832.493016][ T91] vhci_hcd vhci_hcd.2: disconnect device [ 832.911063][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 832.914173][ T5958] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 833.081742][T17652] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 833.084060][T17652] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 833.087125][T17652] vhci_hcd vhci_hcd.0: Device attached [ 833.313559][T17655] netlink: 'syz.3.2186': attribute type 4 has an invalid length. [ 833.379241][T17647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2184'. [ 833.382590][T17647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2184'. [ 833.984560][T17664] netlink: 'syz.1.2188': attribute type 4 has an invalid length. [ 834.010826][T17663] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 834.012802][T17663] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 834.023704][T17663] vhci_hcd vhci_hcd.0: Device attached [ 834.060710][T17653] vhci_hcd: connection closed [ 834.062056][ T1146] vhci_hcd vhci_hcd.0: stop threads [ 834.079126][ T1146] vhci_hcd vhci_hcd.0: release socket [ 834.082467][ T1146] vhci_hcd vhci_hcd.0: disconnect device [ 834.111246][T11597] usb 40-1: device descriptor read/8, error -110 [ 834.231225][T11597] usb usb40-port1: attempt power cycle [ 834.716193][T17665] vhci_hcd: connection closed [ 834.716849][ T1153] vhci_hcd vhci_hcd.2: stop threads [ 834.720770][ T1153] vhci_hcd vhci_hcd.2: release socket [ 834.725485][ T1153] vhci_hcd vhci_hcd.2: disconnect device [ 834.811937][T11597] usb usb40-port1: unable to enumerate USB device [ 835.084022][T17679] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 835.086206][T17679] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 835.089080][T17679] vhci_hcd vhci_hcd.0: Device attached [ 835.228476][T17678] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 835.230804][T17678] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 835.235486][T17678] vhci_hcd vhci_hcd.0: Device attached [ 835.351093][T11597] usb 40-1: SetAddress Request (24) to port 0 [ 835.353372][T11597] usb 40-1: new SuperSpeed USB device number 24 using vhci_hcd [ 835.511069][ T5945] usb 44-1: SetAddress Request (115) to port 0 [ 835.515778][ T5945] usb 44-1: new SuperSpeed USB device number 115 using vhci_hcd [ 835.552288][T17690] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 835.554457][T17690] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 835.558809][T17690] vhci_hcd vhci_hcd.0: Device attached [ 836.068289][T17683] vhci_hcd: connection reset by peer [ 836.071417][ T1146] vhci_hcd vhci_hcd.3: stop threads [ 836.073202][ T1146] vhci_hcd vhci_hcd.3: release socket [ 836.076262][ T1146] vhci_hcd vhci_hcd.3: disconnect device [ 836.176904][T17698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2193'. [ 836.182364][T17698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2193'. [ 836.508893][T17680] vhci_hcd: connection reset by peer [ 836.515462][ T1146] vhci_hcd vhci_hcd.1: stop threads [ 836.517317][ T1146] vhci_hcd vhci_hcd.1: release socket [ 836.519783][ T1146] vhci_hcd vhci_hcd.1: disconnect device [ 836.559856][T17691] vhci_hcd: connection reset by peer [ 836.563669][ T1046] vhci_hcd vhci_hcd.0: stop threads [ 836.565537][ T1046] vhci_hcd vhci_hcd.0: release socket [ 836.567393][ T1046] vhci_hcd vhci_hcd.0: disconnect device [ 836.567421][ T53] usb 38-1: device descriptor read/8, error -110 [ 836.815895][T17703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2194'. [ 836.819071][T17703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2194'. [ 836.987521][ T53] usb usb38-port1: attempt power cycle [ 837.311535][ T6013] usb 42-1: device descriptor read/8, error -110 [ 837.421198][ T6013] usb usb42-port1: unable to enumerate USB device [ 837.573464][ T53] usb usb38-port1: unable to enumerate USB device [ 837.693071][T17717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2196'. [ 837.697080][T17717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2196'. [ 838.011926][T17720] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 838.014978][T17720] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 838.018325][T17720] vhci_hcd vhci_hcd.0: Device attached [ 838.180446][T17725] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 838.182680][T17725] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 838.185879][T17725] vhci_hcd vhci_hcd.0: Device attached [ 838.844152][T17737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2200'. [ 838.847486][T17737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2200'. [ 838.968724][T17726] vhci_hcd: connection closed [ 838.969188][ T1046] vhci_hcd vhci_hcd.3: stop threads [ 838.979533][T17723] vhci_hcd: connection closed [ 838.981578][ T1046] vhci_hcd vhci_hcd.3: release socket [ 838.987421][ T1046] vhci_hcd vhci_hcd.3: disconnect device [ 838.989887][ T1046] vhci_hcd vhci_hcd.1: stop threads [ 838.991745][ T1046] vhci_hcd vhci_hcd.1: release socket [ 838.997878][ T1046] vhci_hcd vhci_hcd.1: disconnect device [ 839.699478][T17743] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 839.702426][T17743] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 839.707177][T17743] vhci_hcd vhci_hcd.0: Device attached [ 839.981141][ T6013] usb 38-1: SetAddress Request (13) to port 0 [ 839.986727][ T6013] usb 38-1: new SuperSpeed USB device number 13 using vhci_hcd [ 839.991118][T17747] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 839.994167][T17747] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 839.998210][T17747] vhci_hcd vhci_hcd.0: Device attached [ 840.241095][T17745] vhci_hcd: connection reset by peer [ 840.268232][ T6397] vhci_hcd vhci_hcd.0: stop threads [ 840.268897][ T6226] usb 42-1: SetAddress Request (10) to port 0 [ 840.270539][ T6397] vhci_hcd vhci_hcd.0: release socket [ 840.273123][ T6226] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 840.275433][ T6397] vhci_hcd vhci_hcd.0: disconnect device [ 840.288899][T17758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2204'. [ 840.295926][T17758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2204'. [ 840.361520][T17759] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 840.363922][T17759] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 840.367436][T17759] vhci_hcd vhci_hcd.0: Device attached [ 840.573796][T17748] vhci_hcd: connection reset by peer [ 840.576032][ T1046] vhci_hcd vhci_hcd.2: stop threads [ 840.577883][ T1046] vhci_hcd vhci_hcd.2: release socket [ 840.579577][ T1046] vhci_hcd vhci_hcd.2: disconnect device [ 840.591140][ T5945] usb 44-1: device descriptor read/8, error -110 [ 840.985472][ T5945] usb usb44-port1: attempt power cycle [ 841.186009][T17760] vhci_hcd: connection reset by peer [ 841.189951][ T1046] vhci_hcd vhci_hcd.1: stop threads [ 841.202309][ T1046] vhci_hcd vhci_hcd.1: release socket [ 841.204296][T11597] usb 40-1: device descriptor read/8, error -110 [ 841.206542][ T1046] vhci_hcd vhci_hcd.1: disconnect device [ 841.322476][T17770] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 841.324676][T17770] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 841.327604][T17770] vhci_hcd vhci_hcd.0: Device attached [ 841.561803][ T5945] usb usb44-port1: unable to enumerate USB device [ 841.601522][T11597] usb usb40-port1: attempt power cycle [ 841.634672][T17769] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 841.636874][T17769] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 841.639717][T17769] vhci_hcd vhci_hcd.0: Device attached [ 841.911152][ T5945] usb 44-1: SetAddress Request (119) to port 0 [ 841.913528][ T5945] usb 44-1: new SuperSpeed USB device number 119 using vhci_hcd [ 841.921501][T17780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2207'. [ 841.924471][T17780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2207'. [ 842.182838][T11597] usb usb40-port1: unable to enumerate USB device [ 842.343976][T17771] vhci_hcd: connection closed [ 842.344344][ T6397] vhci_hcd vhci_hcd.0: stop threads [ 842.348198][ T6397] vhci_hcd vhci_hcd.0: release socket [ 842.350206][ T6397] vhci_hcd vhci_hcd.0: disconnect device [ 842.618409][T17774] vhci_hcd: connection reset by peer [ 842.621216][ T6397] vhci_hcd vhci_hcd.3: stop threads [ 842.631069][ T6397] vhci_hcd vhci_hcd.3: release socket [ 842.634123][ T6397] vhci_hcd vhci_hcd.3: disconnect device [ 842.857068][T17789] netlink: 'syz.2.2209': attribute type 4 has an invalid length. [ 843.339594][T17793] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 843.341866][T17793] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 843.345174][T17793] vhci_hcd vhci_hcd.0: Device attached [ 843.965158][T17805] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 843.967338][T17805] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 843.975545][T17794] vhci_hcd: connection closed [ 843.975787][ T1046] vhci_hcd vhci_hcd.0: stop threads [ 843.979142][ T1046] vhci_hcd vhci_hcd.0: release socket [ 843.983909][T17805] vhci_hcd vhci_hcd.0: Device attached [ 843.983967][ T1046] vhci_hcd vhci_hcd.0: disconnect device [ 843.987912][T17808] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 843.990133][T17808] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 843.993195][T17808] vhci_hcd vhci_hcd.0: Device attached [ 844.380867][T17809] vhci_hcd: connection closed [ 844.381181][ T1046] vhci_hcd vhci_hcd.3: stop threads [ 844.384530][ T1046] vhci_hcd vhci_hcd.3: release socket [ 844.388879][ T1046] vhci_hcd vhci_hcd.3: disconnect device [ 844.412891][T17813] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 844.415287][T17813] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 844.418322][T17813] vhci_hcd vhci_hcd.0: Device attached [ 844.647591][T17815] vhci_hcd: connection closed [ 844.647835][ T1046] vhci_hcd vhci_hcd.1: stop threads [ 844.651575][ T1046] vhci_hcd vhci_hcd.1: release socket [ 844.653553][ T1046] vhci_hcd vhci_hcd.1: disconnect device [ 844.681551][ T53] usb 40-1: enqueue for inactive port 0 [ 844.785624][T17806] vhci_hcd: connection closed [ 844.786027][ T1046] vhci_hcd vhci_hcd.2: stop threads [ 844.791032][ T1046] vhci_hcd vhci_hcd.2: release socket [ 844.796389][ T1046] vhci_hcd vhci_hcd.2: disconnect device [ 844.963680][T17821] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 844.965844][T17821] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 844.968668][T17821] vhci_hcd vhci_hcd.0: Device attached [ 845.171479][ T53] usb usb40-port1: attempt power cycle [ 845.264050][T17828] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 845.266263][T17828] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 845.269591][T17828] vhci_hcd vhci_hcd.0: Device attached [ 845.311080][ T6226] usb 42-1: device descriptor read/8, error -110 [ 845.622454][T17822] vhci_hcd: connection reset by peer [ 845.624987][T14569] vhci_hcd vhci_hcd.0: stop threads [ 845.626743][T14569] vhci_hcd vhci_hcd.0: release socket [ 845.628700][ T6013] usb 38-1: device descriptor read/8, error -110 [ 845.631054][T14569] vhci_hcd vhci_hcd.0: disconnect device [ 845.702291][ T6226] usb usb42-port1: attempt power cycle [ 845.731462][ T53] usb usb40-port1: unable to enumerate USB device [ 845.855660][T17833] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 845.858016][T17833] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 845.861629][T17833] vhci_hcd vhci_hcd.0: Device attached [ 845.951909][T17843] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 845.954110][T17843] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 845.965320][T17843] vhci_hcd vhci_hcd.0: Device attached [ 846.021759][ T6013] usb usb38-port1: attempt power cycle [ 846.051648][ T6226] usb 42-1: SetAddress Request (12) to port 0 [ 846.054211][ T6226] usb 42-1: new SuperSpeed USB device number 12 using vhci_hcd [ 846.141171][T11597] usb 40-1: SetAddress Request (32) to port 0 [ 846.143383][T11597] usb 40-1: new SuperSpeed USB device number 32 using vhci_hcd [ 846.443777][T17839] vhci_hcd: connection reset by peer [ 846.446448][ T1046] vhci_hcd vhci_hcd.1: stop threads [ 846.448522][ T1046] vhci_hcd vhci_hcd.1: release socket [ 846.452925][ T1046] vhci_hcd vhci_hcd.1: disconnect device [ 846.592034][ T6013] usb usb38-port1: unable to enumerate USB device [ 846.785432][T17844] vhci_hcd: connection reset by peer [ 846.793610][T17829] vhci_hcd: connection closed [ 846.801007][ T6236] vhci_hcd vhci_hcd.2: stop threads [ 846.807456][ T6236] vhci_hcd vhci_hcd.2: release socket [ 846.809927][ T6236] vhci_hcd vhci_hcd.2: disconnect device [ 846.817737][ T6236] vhci_hcd vhci_hcd.3: stop threads [ 846.819520][ T6236] vhci_hcd vhci_hcd.3: release socket [ 846.821828][ T6236] vhci_hcd vhci_hcd.3: disconnect device [ 847.001221][ T5945] usb 44-1: device descriptor read/8, error -110 [ 847.145233][T17852] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 847.147436][T17852] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 847.161211][T17852] vhci_hcd vhci_hcd.0: Device attached [ 847.287577][T17856] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 847.289743][T17856] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 847.317139][T17856] vhci_hcd vhci_hcd.0: Device attached [ 847.392249][ T5945] usb usb44-port1: attempt power cycle [ 847.461034][ T10] usb 38-1: SetAddress Request (17) to port 0 [ 847.465132][ T10] usb 38-1: new SuperSpeed USB device number 17 using vhci_hcd [ 847.854147][T17853] vhci_hcd: connection reset by peer [ 847.856271][ T6236] vhci_hcd vhci_hcd.0: stop threads [ 847.858947][ T6236] vhci_hcd vhci_hcd.0: release socket [ 847.861685][ T6236] vhci_hcd vhci_hcd.0: disconnect device [ 847.873262][T17866] netlink: 'syz.3.2221': attribute type 4 has an invalid length. [ 847.961729][ T5945] usb usb44-port1: unable to enumerate USB device [ 848.220505][T17857] vhci_hcd: connection closed [ 848.220762][T14569] vhci_hcd vhci_hcd.1: stop threads [ 848.224067][T14569] vhci_hcd vhci_hcd.1: release socket [ 848.228735][T14569] vhci_hcd vhci_hcd.1: disconnect device [ 848.732760][T17875] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 848.735301][T17875] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 848.744307][T17875] vhci_hcd vhci_hcd.0: Device attached [ 848.861840][T17880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2223'. [ 848.864865][T17880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2223'. [ 849.422017][T17876] vhci_hcd: connection closed [ 849.422188][ T6397] vhci_hcd vhci_hcd.0: stop threads [ 849.425912][ T6397] vhci_hcd vhci_hcd.0: release socket [ 849.427777][ T6397] vhci_hcd vhci_hcd.0: disconnect device [ 850.031162][ T5958] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 850.031590][ T5303] Bluetooth: hci4: command 0x1003 tx timeout [ 850.391598][T17899] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 850.393689][T17899] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 850.396395][T17899] vhci_hcd vhci_hcd.0: Device attached [ 850.481596][T17898] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 850.481624][T17898] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 850.484377][T17898] vhci_hcd vhci_hcd.0: Device attached [ 851.231183][T11597] usb 40-1: device descriptor read/8, error -110 [ 851.240867][T17900] vhci_hcd: connection closed [ 851.242924][ T1146] vhci_hcd vhci_hcd.0: stop threads [ 851.246811][ T1146] vhci_hcd vhci_hcd.0: release socket [ 851.248778][ T1146] vhci_hcd vhci_hcd.0: disconnect device [ 851.267992][T17902] vhci_hcd: connection reset by peer [ 851.270227][ T1146] vhci_hcd vhci_hcd.2: stop threads [ 851.272122][ T1146] vhci_hcd vhci_hcd.2: release socket [ 851.274121][ T6226] usb 42-1: device descriptor read/8, error -110 [ 851.276267][ T1146] vhci_hcd vhci_hcd.2: disconnect device [ 851.311140][ T64] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 851.483780][T17909] netlink: 'syz.1.2228': attribute type 4 has an invalid length. [ 851.621823][T11597] usb usb40-port1: attempt power cycle [ 851.671707][ T6226] usb usb42-port1: unable to enumerate USB device [ 852.031020][ T5948] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 852.031027][ T64] Bluetooth: hci6: command 0x1003 tx timeout [ 852.191802][T11597] usb usb40-port1: unable to enumerate USB device [ 852.289452][T17911] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 852.291649][T17911] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 852.294417][T17911] vhci_hcd vhci_hcd.0: Device attached [ 852.309152][T17921] vhci_hcd: connection closed [ 852.309328][ T9327] vhci_hcd vhci_hcd.0: stop threads [ 852.313042][ T9327] vhci_hcd vhci_hcd.0: release socket [ 852.314950][ T9327] vhci_hcd vhci_hcd.0: disconnect device [ 852.331726][T17920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2231'. [ 852.403814][T17925] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 852.406013][T17925] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 852.408930][T17925] vhci_hcd vhci_hcd.0: Device attached [ 852.541106][ T10] usb 38-1: device descriptor read/8, error -110 [ 852.671143][ T6226] usb 42-1: SetAddress Request (14) to port 0 [ 852.673191][ T6226] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 852.836175][T17929] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 852.838337][T17929] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 852.841392][T17929] vhci_hcd vhci_hcd.0: Device attached [ 852.944305][ T10] usb usb38-port1: attempt power cycle [ 853.111040][ T5945] usb 40-1: SetAddress Request (36) to port 0 [ 853.113097][ T5945] usb 40-1: new SuperSpeed USB device number 36 using vhci_hcd [ 853.186442][T17931] vhci_hcd: connection reset by peer [ 853.193683][ T61] vhci_hcd vhci_hcd.1: stop threads [ 853.195468][ T61] vhci_hcd vhci_hcd.1: release socket [ 853.198471][ T61] vhci_hcd vhci_hcd.1: disconnect device [ 853.349001][T17938] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 853.351237][T17938] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 853.354197][T17938] vhci_hcd vhci_hcd.0: Device attached [ 853.385397][T17941] vhci_hcd: connection closed [ 853.385731][ T91] vhci_hcd vhci_hcd.0: stop threads [ 853.389546][ T91] vhci_hcd vhci_hcd.0: release socket [ 853.391902][ T91] vhci_hcd vhci_hcd.0: disconnect device [ 853.394447][T17927] vhci_hcd: connection reset by peer [ 853.397373][ T91] vhci_hcd vhci_hcd.2: stop threads [ 853.399244][ T91] vhci_hcd vhci_hcd.2: release socket [ 853.401415][ T91] vhci_hcd vhci_hcd.2: disconnect device [ 854.139272][T17953] netlink: 'syz.0.2236': attribute type 4 has an invalid length. [ 854.689210][T17960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2237'. [ 855.323881][T17973] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 855.326400][T17973] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 855.329741][T17973] vhci_hcd vhci_hcd.0: Device attached [ 855.423832][T17976] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 855.425996][T17976] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 855.428665][T17976] vhci_hcd vhci_hcd.0: Device attached [ 855.601024][T11597] usb 38-1: SetAddress Request (21) to port 0 [ 855.603140][T11597] usb 38-1: new SuperSpeed USB device number 21 using vhci_hcd [ 856.031091][ T5948] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 856.031396][ T5958] Bluetooth: hci4: command 0x1003 tx timeout [ 856.100383][T17977] vhci_hcd: connection closed [ 856.100615][T14569] vhci_hcd vhci_hcd.2: stop threads [ 856.104432][T14569] vhci_hcd vhci_hcd.2: release socket [ 856.107594][T14569] vhci_hcd vhci_hcd.2: disconnect device [ 856.250832][T17974] vhci_hcd: connection reset by peer [ 856.253382][ T1153] vhci_hcd vhci_hcd.0: stop threads [ 856.255236][ T1153] vhci_hcd vhci_hcd.0: release socket [ 856.257102][ T1153] vhci_hcd vhci_hcd.0: disconnect device [ 856.367583][T17981] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 856.370490][T17981] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 856.374008][T17981] vhci_hcd vhci_hcd.0: Device attached [ 856.389025][T17983] vhci_hcd: connection closed [ 856.389369][T14569] vhci_hcd vhci_hcd.1: stop threads [ 856.392810][T14569] vhci_hcd vhci_hcd.1: release socket [ 856.394738][T14569] vhci_hcd vhci_hcd.1: disconnect device [ 857.194767][T17992] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 857.196984][T17992] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 857.209183][T17992] vhci_hcd vhci_hcd.0: Device attached [ 857.231112][ T5948] Bluetooth: hci5: command 0x1003 tx timeout [ 857.233452][ T64] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 857.391414][T17996] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 857.393593][T17996] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 857.396289][T17996] vhci_hcd vhci_hcd.0: Device attached [ 857.417835][T18001] vhci_hcd: connection closed [ 857.418062][ T91] vhci_hcd vhci_hcd.1: stop threads [ 857.421500][ T91] vhci_hcd vhci_hcd.1: release socket [ 857.423403][ T91] vhci_hcd vhci_hcd.1: disconnect device [ 857.711275][ T6226] usb 42-1: device descriptor read/8, error -110 [ 858.101662][ T6226] usb usb42-port1: attempt power cycle [ 858.191169][ T5945] usb 40-1: device descriptor read/8, error -110 [ 858.270025][T17993] vhci_hcd: connection closed [ 858.270416][ T1153] vhci_hcd vhci_hcd.0: stop threads [ 858.277870][ T1153] vhci_hcd vhci_hcd.0: release socket [ 858.280320][ T1153] vhci_hcd vhci_hcd.0: disconnect device [ 858.591666][ T5945] usb usb40-port1: attempt power cycle [ 858.681558][ T6226] usb usb42-port1: unable to enumerate USB device [ 858.827424][T18013] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 858.829791][T18013] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 858.834755][T18013] vhci_hcd vhci_hcd.0: Device attached [ 859.112008][ T6226] usb 44-1: SetAddress Request (123) to port 0 [ 859.114234][ T6226] usb 44-1: new SuperSpeed USB device number 123 using vhci_hcd [ 859.181706][ T5945] usb usb40-port1: unable to enumerate USB device [ 859.551296][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 859.553751][ T5958] Bluetooth: hci4: command 0x1003 tx timeout [ 859.604813][T18014] vhci_hcd: connection reset by peer [ 859.614764][ T12] vhci_hcd vhci_hcd.3: stop threads [ 859.616932][ T12] vhci_hcd vhci_hcd.3: release socket [ 859.631414][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 859.805675][T18026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2250'. [ 860.303338][T18032] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 860.305812][T18032] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 860.309804][T18032] vhci_hcd vhci_hcd.0: Device attached [ 860.591125][ T5948] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 860.795502][T18039] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 860.797743][T18039] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 860.800500][T18039] vhci_hcd vhci_hcd.0: Device attached [ 860.816225][T18044] vhci_hcd: connection closed [ 860.817617][ T1146] vhci_hcd vhci_hcd.2: stop threads [ 860.821394][ T1146] vhci_hcd vhci_hcd.2: release socket [ 860.823170][ T1146] vhci_hcd vhci_hcd.2: disconnect device [ 860.944984][T18033] vhci_hcd: connection reset by peer [ 860.946959][ T1258] vhci_hcd vhci_hcd.0: stop threads [ 860.948647][ T1258] vhci_hcd vhci_hcd.0: release socket [ 860.950623][T11597] usb 38-1: device descriptor read/8, error -110 [ 860.951196][ T1258] vhci_hcd vhci_hcd.0: disconnect device [ 861.035676][T18046] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 861.037985][T18046] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 861.042032][T18046] vhci_hcd vhci_hcd.0: Device attached [ 861.311060][ T34] usb 40-1: SetAddress Request (40) to port 0 [ 861.313742][ T34] usb 40-1: new SuperSpeed USB device number 40 using vhci_hcd [ 861.341808][T11597] usb usb38-port1: attempt power cycle [ 861.902114][T11597] usb usb38-port1: unable to enumerate USB device [ 861.917051][T18055] netlink: 'syz.2.2255': attribute type 4 has an invalid length. [ 861.982071][T18048] vhci_hcd: connection reset by peer [ 861.986116][ T9327] vhci_hcd vhci_hcd.1: stop threads [ 861.989058][ T9327] vhci_hcd vhci_hcd.1: release socket [ 861.993420][ T9327] vhci_hcd vhci_hcd.1: disconnect device [ 862.003400][T18056] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 862.006246][T18056] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 862.009913][T18056] vhci_hcd vhci_hcd.0: Device attached [ 862.291088][ T10] usb 38-1: SetAddress Request (25) to port 0 [ 862.293873][ T10] usb 38-1: new SuperSpeed USB device number 25 using vhci_hcd [ 862.511287][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 862.659396][T18057] vhci_hcd: connection reset by peer [ 862.666286][ T12] vhci_hcd vhci_hcd.0: stop threads [ 862.668881][ T12] vhci_hcd vhci_hcd.0: release socket [ 862.671262][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 862.862310][T18071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2257'. [ 863.249987][T18075] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 863.253034][T18075] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 863.258317][T18075] vhci_hcd vhci_hcd.0: Device attached [ 863.695094][T18076] vhci_hcd: connection closed [ 863.695634][ T104] vhci_hcd vhci_hcd.1: stop threads [ 863.708115][ T104] vhci_hcd vhci_hcd.1: release socket [ 863.711325][ T104] vhci_hcd vhci_hcd.1: disconnect device [ 863.915299][T18088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2260'. [ 864.155461][T18091] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 864.157651][T18091] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 864.160829][T18091] vhci_hcd vhci_hcd.0: Device attached [ 864.546985][T18092] vhci_hcd: connection reset by peer [ 864.550092][ T104] vhci_hcd vhci_hcd.3: stop threads [ 864.552635][ T104] vhci_hcd vhci_hcd.3: release socket [ 864.555117][ T104] vhci_hcd vhci_hcd.3: disconnect device [ 864.561738][ T6226] usb 44-1: device descriptor read/8, error -110 [ 864.682891][T18099] netlink: 'syz.1.2263': attribute type 4 has an invalid length. [ 864.748730][T18098] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 864.751378][T18098] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 864.754132][T18098] vhci_hcd vhci_hcd.0: Device attached [ 864.779389][T18101] vhci_hcd: connection closed [ 864.779594][T14569] vhci_hcd vhci_hcd.0: stop threads [ 864.783321][T14569] vhci_hcd vhci_hcd.0: release socket [ 864.787644][T14569] vhci_hcd vhci_hcd.0: disconnect device [ 864.951613][ T6226] usb usb44-port1: attempt power cycle [ 865.090223][T18106] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 865.092899][T18106] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 865.096163][T18106] vhci_hcd vhci_hcd.0: Device attached [ 865.371527][ T5945] usb 42-1: SetAddress Request (18) to port 0 [ 865.374447][ T5945] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 865.511636][ T6226] usb usb44-port1: unable to enumerate USB device [ 865.749876][T18107] vhci_hcd: connection reset by peer [ 865.752189][ T9327] vhci_hcd vhci_hcd.2: stop threads [ 865.753985][ T9327] vhci_hcd vhci_hcd.2: release socket [ 865.755922][ T9327] vhci_hcd vhci_hcd.2: disconnect device [ 865.789403][T18119] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 865.791648][T18119] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 865.801110][T18119] vhci_hcd vhci_hcd.0: Device attached [ 865.906577][T18125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2268'. [ 866.081188][ T6226] usb 44-1: SetAddress Request (127) to port 0 [ 866.083479][ T6226] usb 44-1: new SuperSpeed USB device number 127 using vhci_hcd [ 866.337410][T18120] vhci_hcd: connection reset by peer [ 866.339613][ T9327] vhci_hcd vhci_hcd.3: stop threads [ 866.342204][ T9327] vhci_hcd vhci_hcd.3: release socket [ 866.344667][ T9327] vhci_hcd vhci_hcd.3: disconnect device [ 866.351225][ T34] usb 40-1: device descriptor read/8, error -110 [ 866.713903][T18131] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 866.716085][T18131] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 866.720564][T18131] vhci_hcd vhci_hcd.0: Device attached [ 866.751441][ T34] usb usb40-port1: attempt power cycle [ 866.936474][T18138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2270'. [ 867.331400][ T34] usb usb40-port1: unable to enumerate USB device [ 867.338602][T18132] vhci_hcd: connection closed [ 867.338775][ T104] vhci_hcd vhci_hcd.2: stop threads [ 867.342394][ T104] vhci_hcd vhci_hcd.2: release socket [ 867.344324][ T104] vhci_hcd vhci_hcd.2: disconnect device [ 867.391237][ T10] usb 38-1: device descriptor read/8, error -110 [ 867.510292][T18143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2271'. [ 867.714662][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 867.717371][ T5948] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 867.952580][ T10] usb usb38-port1: attempt power cycle [ 868.135176][T18158] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 868.137429][T18158] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 868.150056][T18158] vhci_hcd vhci_hcd.0: Device attached [ 868.240783][T18161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2274'. [ 868.481344][ T6013] usb 40-1: SetAddress Request (44) to port 0 [ 868.501002][T18166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2275'. [ 868.514820][ T6013] usb 40-1: new SuperSpeed USB device number 44 using vhci_hcd [ 868.576541][ T10] usb usb38-port1: unable to enumerate USB device [ 869.075429][T18159] vhci_hcd: connection reset by peer [ 869.080517][T14569] vhci_hcd vhci_hcd.1: stop threads [ 869.082340][T14569] vhci_hcd vhci_hcd.1: release socket [ 869.087587][T14569] vhci_hcd vhci_hcd.1: disconnect device [ 869.089665][T18171] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 869.092078][T18171] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 869.094934][T18171] vhci_hcd vhci_hcd.0: Device attached [ 869.131582][T18173] vhci_hcd: connection closed [ 869.132157][T14569] vhci_hcd vhci_hcd.2: stop threads [ 869.135689][T14569] vhci_hcd vhci_hcd.2: release socket [ 869.137839][T14569] vhci_hcd vhci_hcd.2: disconnect device [ 869.481796][T18179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2277'. [ 870.031103][ T5958] Bluetooth: hci4: command 0x1003 tx timeout [ 870.033529][ T5948] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 870.129412][T18190] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 870.131662][T18190] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 870.151596][T18190] vhci_hcd vhci_hcd.0: Device attached [ 870.892392][T18191] vhci_hcd: connection reset by peer [ 870.894936][ T6933] vhci_hcd vhci_hcd.2: stop threads [ 870.896828][ T6933] vhci_hcd vhci_hcd.2: release socket [ 870.898790][ T5945] usb 42-1: device descriptor read/8, error -110 [ 870.898874][ T6933] vhci_hcd vhci_hcd.2: disconnect device [ 871.151196][ T6226] usb 44-1: device descriptor read/8, error -110 [ 871.301566][ T5945] usb usb42-port1: attempt power cycle [ 871.541466][ T6226] usb usb44-port1: attempt power cycle [ 871.732324][T18206] netlink: 'syz.3.2281': attribute type 4 has an invalid length. [ 871.750096][T18207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2280'. [ 871.871498][ T5945] usb usb42-port1: unable to enumerate USB device [ 871.960159][ T64] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 871.965391][ T5948] Bluetooth: hci5: command 0x1003 tx timeout [ 872.111612][ T6226] usb usb44-port1: unable to enumerate USB device [ 872.286640][T18213] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 872.289316][T18213] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 872.302051][T18213] vhci_hcd vhci_hcd.0: Device attached [ 872.925167][T18214] vhci_hcd: connection closed [ 872.925588][ T6933] vhci_hcd vhci_hcd.1: stop threads [ 872.929126][ T6933] vhci_hcd vhci_hcd.1: release socket [ 872.931134][ T6933] vhci_hcd vhci_hcd.1: disconnect device [ 873.135502][T18225] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 873.137737][T18225] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 873.143000][T18225] vhci_hcd vhci_hcd.0: Device attached [ 873.274544][T18232] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 873.276823][T18232] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 873.284590][T18232] vhci_hcd vhci_hcd.0: Device attached [ 873.398930][T18229] vhci_hcd: connection closed [ 873.399313][ T1146] vhci_hcd vhci_hcd.3: stop threads [ 873.403606][ T1146] vhci_hcd vhci_hcd.3: release socket [ 873.406117][ T1146] vhci_hcd vhci_hcd.3: disconnect device [ 873.411054][ T53] usb 44-1: enqueue for inactive port 0 [ 873.561060][ T5945] usb 42-1: SetAddress Request (22) to port 0 [ 873.563216][ T5945] usb 42-1: new SuperSpeed USB device number 22 using vhci_hcd [ 873.636526][T18233] vhci_hcd: connection reset by peer [ 873.638686][ T61] vhci_hcd vhci_hcd.2: stop threads [ 873.640524][ T61] vhci_hcd vhci_hcd.2: release socket [ 873.642506][ T61] vhci_hcd vhci_hcd.2: disconnect device [ 873.721066][ T6013] usb 40-1: device descriptor read/8, error -110 [ 873.914422][ T53] usb usb44-port1: attempt power cycle [ 874.121745][ T6013] usb usb40-port1: attempt power cycle [ 874.267293][T18245] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 874.269487][T18245] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 874.290159][T18245] vhci_hcd vhci_hcd.0: Device attached [ 874.531951][ T53] usb 44-1: SetAddress Request (8) to port 0 [ 874.535114][ T53] usb 44-1: new SuperSpeed USB device number 8 using vhci_hcd [ 874.683471][ T6013] usb usb40-port1: unable to enumerate USB device [ 874.914055][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 874.916178][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.030358][T18246] vhci_hcd: connection reset by peer [ 875.033417][ T6397] vhci_hcd vhci_hcd.3: stop threads [ 875.035592][ T6397] vhci_hcd vhci_hcd.3: release socket [ 875.037922][ T6397] vhci_hcd vhci_hcd.3: disconnect device [ 875.311323][ T5303] Bluetooth: hci4: command 0x1003 tx timeout [ 875.311342][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 875.567106][T18259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2290'. [ 875.871163][ T5948] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 876.188749][T18268] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 876.191465][T18268] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 876.194834][T18268] vhci_hcd vhci_hcd.0: Device attached [ 876.489195][T18276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2293'. [ 876.718150][T18269] vhci_hcd: connection closed [ 876.718695][ T13] vhci_hcd vhci_hcd.3: stop threads [ 876.722378][ T13] vhci_hcd vhci_hcd.3: release socket [ 876.724301][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 876.911149][ T64] Bluetooth: hci6: command 0x1003 tx timeout [ 876.914854][ T5958] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 877.061188][T18283] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 877.064189][T18283] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 877.067972][T18283] vhci_hcd vhci_hcd.0: Device attached [ 877.351000][ T6013] usb 40-1: SetAddress Request (48) to port 0 [ 877.353157][ T6013] usb 40-1: new SuperSpeed USB device number 48 using vhci_hcd [ 877.449826][T18293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2296'. [ 877.476862][T18294] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 877.479581][T18294] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 877.482733][T18294] vhci_hcd vhci_hcd.0: Device attached [ 878.000619][T18295] vhci_hcd: connection closed [ 878.008197][T18284] vhci_hcd: connection reset by peer [ 878.029820][ T6933] vhci_hcd vhci_hcd.2: stop threads [ 878.032029][ T6933] vhci_hcd vhci_hcd.2: release socket [ 878.033932][ T6933] vhci_hcd vhci_hcd.2: disconnect device [ 878.040097][ T6933] vhci_hcd vhci_hcd.1: stop threads [ 878.050365][ T6933] vhci_hcd vhci_hcd.1: release socket [ 878.052789][ T6933] vhci_hcd vhci_hcd.1: disconnect device [ 878.591100][ T5945] usb 42-1: device descriptor read/8, error -110 [ 878.608400][T18307] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 878.610539][T18307] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 878.614520][T18307] vhci_hcd vhci_hcd.0: Device attached [ 879.008024][ T5945] usb usb42-port1: attempt power cycle [ 879.015915][T18318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2301'. [ 879.107830][T18316] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 879.109798][T18316] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 879.157797][T18316] vhci_hcd vhci_hcd.0: Device attached [ 879.263863][ T5945] usb 42-1: SetAddress Request (24) to port 0 [ 879.265871][ T5945] usb 42-1: new SuperSpeed USB device number 24 using vhci_hcd [ 879.471793][T18308] vhci_hcd: connection closed [ 879.473125][ T1258] vhci_hcd vhci_hcd.3: stop threads [ 879.478184][ T1258] vhci_hcd vhci_hcd.3: release socket [ 879.480069][ T1258] vhci_hcd vhci_hcd.3: disconnect device [ 879.631086][ T53] usb 44-1: device descriptor read/8, error -110 [ 879.683873][T18319] vhci_hcd: connection reset by peer [ 879.686178][ T1258] vhci_hcd vhci_hcd.2: stop threads [ 879.688510][ T1258] vhci_hcd vhci_hcd.2: release socket [ 879.691050][ T1258] vhci_hcd vhci_hcd.2: disconnect device [ 879.743108][ T53] usb usb44-port1: unable to enumerate USB device [ 880.028079][T18326] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 880.030340][T18326] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 880.033954][T18326] vhci_hcd vhci_hcd.0: Device attached [ 880.504094][T18336] netlink: 'syz.2.2303': attribute type 4 has an invalid length. [ 880.511492][ T5958] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 880.512000][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 880.548137][T18337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2304'. [ 880.846648][T18327] vhci_hcd: connection closed [ 880.846969][ T6397] vhci_hcd vhci_hcd.1: stop threads [ 880.851549][ T6397] vhci_hcd vhci_hcd.1: release socket [ 880.854070][ T6397] vhci_hcd vhci_hcd.1: disconnect device [ 881.635298][T18348] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 881.637505][T18348] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 881.640203][T18348] vhci_hcd vhci_hcd.0: Device attached [ 882.037279][T18358] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 882.040077][T18358] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 882.076653][T18358] vhci_hcd vhci_hcd.0: Device attached [ 882.657118][T18349] vhci_hcd: connection closed [ 882.658635][ T6397] vhci_hcd vhci_hcd.2: stop threads [ 882.662681][ T6397] vhci_hcd vhci_hcd.2: release socket [ 882.665567][ T6397] vhci_hcd vhci_hcd.2: disconnect device [ 882.665686][T18359] vhci_hcd: connection reset by peer [ 882.670274][ T6397] vhci_hcd vhci_hcd.1: stop threads [ 882.672369][ T6397] vhci_hcd vhci_hcd.1: release socket [ 882.674343][ T6013] usb 40-1: device descriptor read/8, error -110 [ 882.678016][ T6397] vhci_hcd vhci_hcd.1: disconnect device [ 883.035190][T18369] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 883.037509][T18369] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 883.052121][T18369] vhci_hcd vhci_hcd.0: Device attached [ 883.071773][ T6013] usb usb40-port1: attempt power cycle [ 883.331471][ T53] usb 44-1: SetAddress Request (9) to port 0 [ 883.334834][ T53] usb 44-1: new SuperSpeed USB device number 9 using vhci_hcd [ 883.476844][T18370] vhci_hcd: connection reset by peer [ 883.479413][ T6933] vhci_hcd vhci_hcd.3: stop threads [ 883.482131][ T6933] vhci_hcd vhci_hcd.3: release socket [ 883.484788][ T6933] vhci_hcd vhci_hcd.3: disconnect device [ 883.529667][T18375] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 883.532474][T18375] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 883.537663][T18375] vhci_hcd vhci_hcd.0: Device attached [ 883.691196][ T6013] usb 40-1: SetAddress Request (51) to port 0 [ 883.693378][ T6013] usb 40-1: new SuperSpeed USB device number 51 using vhci_hcd [ 883.800866][T18383] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 883.802992][T18383] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 883.807407][T18383] vhci_hcd vhci_hcd.0: Device attached [ 884.211756][T18376] vhci_hcd: connection reset by peer [ 884.217759][ T1258] vhci_hcd vhci_hcd.1: stop threads [ 884.219551][ T1258] vhci_hcd vhci_hcd.1: release socket [ 884.221640][ T1258] vhci_hcd vhci_hcd.1: disconnect device [ 884.450492][T18384] vhci_hcd: connection reset by peer [ 884.454315][ T1258] vhci_hcd vhci_hcd.2: stop threads [ 884.456414][ T1258] vhci_hcd vhci_hcd.2: release socket [ 884.458310][ T5945] usb 42-1: device descriptor read/8, error -110 [ 884.461544][ T1258] vhci_hcd vhci_hcd.2: disconnect device [ 884.511230][ T5958] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 884.511243][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 884.556819][T18390] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 884.558993][T18390] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 884.561818][T18390] vhci_hcd vhci_hcd.0: Device attached [ 884.852121][ T5945] usb usb42-port1: unable to enumerate USB device [ 885.213042][T18391] vhci_hcd: connection closed [ 885.231014][ T13] vhci_hcd vhci_hcd.3: stop threads [ 885.234377][ T13] vhci_hcd vhci_hcd.3: release socket [ 885.238762][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 885.475098][T18408] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 885.477287][T18408] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 885.481129][T18408] vhci_hcd vhci_hcd.0: Device attached [ 885.752050][ T6226] usb 42-1: SetAddress Request (26) to port 0 [ 885.754355][ T6226] usb 42-1: new SuperSpeed USB device number 26 using vhci_hcd [ 886.304206][T18409] vhci_hcd: connection reset by peer [ 886.307114][ T6397] vhci_hcd vhci_hcd.2: stop threads [ 886.310169][ T6397] vhci_hcd vhci_hcd.2: release socket [ 886.313084][ T6397] vhci_hcd vhci_hcd.2: disconnect device [ 886.991157][ T5948] Bluetooth: hci4: command 0x1003 tx timeout [ 886.991148][ T5958] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 887.071204][ T5958] Bluetooth: hci5: command 0x1003 tx timeout [ 887.074710][ T64] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 887.197396][T18416] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 887.200429][T18416] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 887.203729][T18416] vhci_hcd vhci_hcd.0: Device attached [ 887.238482][T18419] vhci_hcd: connection closed [ 887.239052][ T1153] vhci_hcd vhci_hcd.2: stop threads [ 887.243837][ T1153] vhci_hcd vhci_hcd.2: release socket [ 887.246898][ T1153] vhci_hcd vhci_hcd.2: disconnect device [ 887.384776][T18427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2319'. [ 887.613652][T18431] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 887.616511][T18431] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 887.623564][T18431] vhci_hcd vhci_hcd.0: Device attached [ 888.294676][T18432] vhci_hcd: connection closed [ 888.295228][ T1146] vhci_hcd vhci_hcd.3: stop threads [ 888.299996][ T1146] vhci_hcd vhci_hcd.3: release socket [ 888.305236][ T1146] vhci_hcd vhci_hcd.3: disconnect device [ 888.382591][T18442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2321'. [ 888.431115][ T53] usb 44-1: device descriptor read/8, error -110 [ 888.751110][ T6013] usb 40-1: device descriptor read/8, error -110 [ 888.790652][T18445] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 888.793353][T18445] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 888.797441][T18445] vhci_hcd vhci_hcd.0: Device attached [ 888.864968][ T6013] usb usb40-port1: unable to enumerate USB device [ 888.901994][ T53] usb usb44-port1: attempt power cycle [ 889.091362][ T5945] usb 38-1: SetAddress Request (29) to port 0 [ 889.093810][ T5945] usb 38-1: new SuperSpeed USB device number 29 using vhci_hcd [ 889.416481][T18446] vhci_hcd: connection reset by peer [ 889.419353][ T6933] vhci_hcd vhci_hcd.0: stop threads [ 889.425444][ T6933] vhci_hcd vhci_hcd.0: release socket [ 889.429952][ T6933] vhci_hcd vhci_hcd.0: disconnect device [ 889.461995][ T53] usb usb44-port1: unable to enumerate USB device [ 889.511055][T18457] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 889.513847][T18457] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 889.517515][T18457] vhci_hcd vhci_hcd.0: Device attached [ 889.711075][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 889.711083][ T5948] Bluetooth: hci4: command 0x1003 tx timeout [ 890.261507][T18465] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 890.264409][T18465] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 890.309556][T18465] vhci_hcd vhci_hcd.0: Device attached [ 890.591332][ T34] usb 40-1: SetAddress Request (52) to port 0 [ 890.595575][ T34] usb 40-1: new SuperSpeed USB device number 52 using vhci_hcd [ 890.636507][T18474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2326'. [ 890.768444][T18458] vhci_hcd: connection closed [ 890.769139][ T1153] vhci_hcd vhci_hcd.2: stop threads [ 890.793596][ T1153] vhci_hcd vhci_hcd.2: release socket [ 890.798520][ T1153] vhci_hcd vhci_hcd.2: disconnect device [ 890.841129][ T6226] usb 42-1: device descriptor read/8, error -110 [ 890.899479][T18466] vhci_hcd: connection reset by peer [ 890.902108][ T6397] vhci_hcd vhci_hcd.1: stop threads [ 890.904286][ T6397] vhci_hcd vhci_hcd.1: release socket [ 890.911237][ T6397] vhci_hcd vhci_hcd.1: disconnect device [ 891.231228][ T5958] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 891.241710][ T6226] usb usb42-port1: attempt power cycle [ 891.871899][ T6226] usb usb42-port1: unable to enumerate USB device [ 892.060005][T18489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2331'. [ 892.069466][T18491] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 892.071742][T18491] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 892.077302][T18490] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 892.079459][T18490] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 892.097418][T18490] vhci_hcd vhci_hcd.0: Device attached [ 892.106987][T18491] vhci_hcd vhci_hcd.0: Device attached [ 892.592775][T18492] vhci_hcd: connection closed [ 892.593187][ T6933] vhci_hcd vhci_hcd.0: stop threads [ 892.597398][ T6933] vhci_hcd vhci_hcd.0: release socket [ 892.632755][T18493] vhci_hcd: connection closed [ 892.634856][ T6933] vhci_hcd vhci_hcd.0: disconnect device [ 892.641238][ T6933] vhci_hcd vhci_hcd.2: stop threads [ 892.646285][ T6933] vhci_hcd vhci_hcd.2: release socket [ 892.661210][ T6933] vhci_hcd vhci_hcd.2: disconnect device [ 892.711326][ T10] usb 42-1: enqueue for inactive port 0 [ 892.912735][T18503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2332'. [ 893.211943][ T10] usb usb42-port1: attempt power cycle [ 893.239199][T18505] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 893.241486][T18505] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 893.261249][T18505] vhci_hcd vhci_hcd.0: Device attached [ 893.645708][T18512] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 893.649014][T18512] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 893.655824][T18512] vhci_hcd vhci_hcd.0: Device attached [ 893.825043][T18520] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 893.828020][T18520] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 893.843554][T18520] vhci_hcd vhci_hcd.0: Device attached [ 893.961205][ T10] usb 42-1: SetAddress Request (33) to port 0 [ 893.964080][ T10] usb 42-1: new SuperSpeed USB device number 33 using vhci_hcd [ 893.978905][T18524] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 893.981306][T18524] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 894.005314][T18524] vhci_hcd vhci_hcd.0: Device attached [ 894.225227][T18516] vhci_hcd: connection reset by peer [ 894.227754][ T1153] vhci_hcd vhci_hcd.0: stop threads [ 894.229559][ T1153] vhci_hcd vhci_hcd.0: release socket [ 894.241036][ T1153] vhci_hcd vhci_hcd.0: disconnect device [ 894.241045][ T5945] usb 38-1: device descriptor read/8, error -110 [ 894.282702][ T6031] usb 44-1: SetAddress Request (13) to port 0 [ 894.285661][ T6031] usb 44-1: new SuperSpeed USB device number 13 using vhci_hcd [ 894.319196][T18521] vhci_hcd: connection reset by peer [ 894.322021][ T1258] vhci_hcd vhci_hcd.2: stop threads [ 894.324396][ T1258] vhci_hcd vhci_hcd.2: release socket [ 894.326741][ T1258] vhci_hcd vhci_hcd.2: disconnect device [ 894.438920][T18506] vhci_hcd: connection closed [ 894.439473][ T1258] vhci_hcd vhci_hcd.1: stop threads [ 894.443596][ T1258] vhci_hcd vhci_hcd.1: release socket [ 894.445702][ T1258] vhci_hcd vhci_hcd.1: disconnect device [ 894.555760][T18525] vhci_hcd: connection reset by peer [ 894.557812][ T1258] vhci_hcd vhci_hcd.3: stop threads [ 894.559544][ T1258] vhci_hcd vhci_hcd.3: release socket [ 894.561915][ T1258] vhci_hcd vhci_hcd.3: disconnect device [ 894.631705][ T5945] usb usb38-port1: attempt power cycle [ 895.191805][ T5945] usb usb38-port1: unable to enumerate USB device [ 895.448113][T18543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2339'. [ 895.637010][ T34] usb 40-1: device descriptor read/8, error -110 [ 895.646354][T18546] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 895.648831][T18546] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 895.671277][T18546] vhci_hcd vhci_hcd.0: Device attached [ 895.918426][T18547] vhci_hcd: connection closed [ 895.918763][ T1146] vhci_hcd vhci_hcd.0: stop threads [ 895.926354][ T1146] vhci_hcd vhci_hcd.0: release socket [ 895.928518][ T1146] vhci_hcd vhci_hcd.0: disconnect device [ 895.931073][ T6226] usb 38-1: SetAddress Request (33) to port 0 [ 895.933501][ T6226] usb 38-1: new SuperSpeed USB device number 33 using vhci_hcd [ 895.951083][ T6226] usb 38-1: enqueue for inactive port 0 [ 896.021642][ T34] usb usb40-port1: attempt power cycle [ 896.349027][ T6226] usb usb38-port1: attempt power cycle [ 896.560224][T18555] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 896.562438][T18555] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 896.565566][T18555] vhci_hcd vhci_hcd.0: Device attached [ 896.581545][ T34] usb usb40-port1: unable to enumerate USB device [ 896.881168][T18561] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 896.884194][T18561] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 896.905369][T18561] vhci_hcd vhci_hcd.0: Device attached [ 897.040990][ T6226] usb 38-1: SetAddress Request (36) to port 0 [ 897.043060][ T6226] usb 38-1: new SuperSpeed USB device number 36 using vhci_hcd [ 897.167385][T18568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2343'. [ 897.292155][T18556] vhci_hcd: connection closed [ 897.321548][ T1146] vhci_hcd vhci_hcd.3: stop threads [ 897.325301][ T1146] vhci_hcd vhci_hcd.3: release socket [ 897.327387][ T1146] vhci_hcd vhci_hcd.3: disconnect device [ 897.553026][ T5958] Bluetooth: hci4: command 0x1003 tx timeout [ 897.558754][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 897.569632][T18562] vhci_hcd: connection reset by peer [ 897.572837][ T1153] vhci_hcd vhci_hcd.0: stop threads [ 897.575082][ T1153] vhci_hcd vhci_hcd.0: release socket [ 897.577747][ T1153] vhci_hcd vhci_hcd.0: disconnect device [ 897.869787][T18572] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 897.872112][T18572] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 897.875860][T18572] vhci_hcd vhci_hcd.0: Device attached [ 898.218677][T18582] netlink: 'syz.3.2346': attribute type 4 has an invalid length. [ 898.683440][T18573] vhci_hcd: connection closed [ 898.683849][ T6933] vhci_hcd vhci_hcd.2: stop threads [ 898.687704][ T6933] vhci_hcd vhci_hcd.2: release socket [ 898.689685][ T6933] vhci_hcd vhci_hcd.2: disconnect device [ 899.007668][ T10] usb 42-1: device descriptor read/8, error -110 [ 899.142140][ T10] usb usb42-port1: unable to enumerate USB device [ 899.278706][T18592] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 899.280987][T18592] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 899.285038][T18592] vhci_hcd vhci_hcd.0: Device attached [ 899.899565][T18593] vhci_hcd: connection reset by peer [ 899.904213][ T61] vhci_hcd vhci_hcd.3: stop threads [ 899.906158][ T61] vhci_hcd vhci_hcd.3: release socket [ 899.908123][ T61] vhci_hcd vhci_hcd.3: disconnect device [ 899.908178][ T6031] usb 44-1: device descriptor read/8, error -110 [ 899.973611][T18605] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 899.975824][T18605] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 899.979400][T18605] vhci_hcd vhci_hcd.0: Device attached [ 900.241109][ T34] usb 42-1: SetAddress Request (34) to port 0 [ 900.244594][ T34] usb 42-1: new SuperSpeed USB device number 34 using vhci_hcd [ 900.341758][ T6031] usb usb44-port1: attempt power cycle [ 900.416194][T18606] vhci_hcd: connection reset by peer [ 900.429022][ T13] vhci_hcd vhci_hcd.2: stop threads [ 900.431170][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 900.431693][ T13] vhci_hcd vhci_hcd.2: release socket [ 900.431702][ T5948] Bluetooth: hci4: command 0x1003 tx timeout [ 900.451175][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 900.913622][ T6031] usb usb44-port1: unable to enumerate USB device [ 900.975483][T18617] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 900.978455][T18617] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 900.991601][T18617] vhci_hcd vhci_hcd.0: Device attached [ 901.271028][T11597] usb 44-1: SetAddress Request (17) to port 0 [ 901.273147][T11597] usb 44-1: new SuperSpeed USB device number 17 using vhci_hcd [ 901.493772][T18618] vhci_hcd: connection reset by peer [ 901.498187][ T61] vhci_hcd vhci_hcd.3: stop threads [ 901.503601][ T61] vhci_hcd vhci_hcd.3: release socket [ 901.508137][ T61] vhci_hcd vhci_hcd.3: disconnect device [ 901.560218][T18625] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 901.562409][T18625] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 901.566213][T18625] vhci_hcd vhci_hcd.0: Device attached [ 901.631064][ T64] Bluetooth: hci5: command 0x1003 tx timeout [ 901.634788][ T5958] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 902.173834][T18626] vhci_hcd: connection closed [ 902.174229][ T1258] vhci_hcd vhci_hcd.2: stop threads [ 902.177965][ T1258] vhci_hcd vhci_hcd.2: release socket [ 902.180340][ T1258] vhci_hcd vhci_hcd.2: disconnect device [ 902.191126][ T6226] usb 38-1: device descriptor read/8, error -110 [ 902.248619][T18636] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 902.250847][T18636] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 902.259157][T18636] vhci_hcd vhci_hcd.0: Device attached [ 902.302077][ T6226] usb usb38-port1: unable to enumerate USB device [ 902.521023][ T5945] usb 40-1: SetAddress Request (56) to port 0 [ 902.523497][ T5945] usb 40-1: new SuperSpeed USB device number 56 using vhci_hcd [ 902.876162][T18637] vhci_hcd: connection reset by peer [ 902.881671][ T12] vhci_hcd vhci_hcd.1: stop threads [ 902.884100][ T12] vhci_hcd vhci_hcd.1: release socket [ 902.892026][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 903.061738][T18650] netlink: 'syz.2.2358': attribute type 4 has an invalid length. [ 904.081335][T18659] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 904.083476][T18659] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 904.086454][T18659] vhci_hcd vhci_hcd.0: Device attached [ 904.431102][ T5303] Bluetooth: hci4: command 0x1003 tx timeout [ 904.431094][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 904.692593][T18667] netlink: 'syz.3.2361': attribute type 4 has an invalid length. [ 904.763585][T18661] vhci_hcd: connection closed [ 904.763846][ T104] vhci_hcd vhci_hcd.2: stop threads [ 904.767647][ T104] vhci_hcd vhci_hcd.2: release socket [ 904.769490][ T104] vhci_hcd vhci_hcd.2: disconnect device [ 905.241241][ T5958] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 905.311043][ T34] usb 42-1: device descriptor read/8, error -110 [ 905.512450][T18677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2362'. [ 905.571226][T18679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2363'. [ 905.574600][ T5958] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 905.578833][ T5958] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 905.582923][ T5958] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 905.586379][ T5958] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 905.589888][ T5958] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 905.760172][ T34] usb usb42-port1: attempt power cycle [ 905.871051][ T64] Bluetooth: hci6: command 0x1003 tx timeout [ 905.873870][ T5948] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 906.015438][T18678] chnl_net:caif_netlink_parms(): no params data found [ 906.132084][ T9327] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.149863][T18678] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.153417][T18678] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.160873][T18678] bridge_slave_0: entered allmulticast mode [ 906.176881][T18678] bridge_slave_0: entered promiscuous mode [ 906.183040][T18678] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.188237][T18678] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.190798][T18678] bridge_slave_1: entered allmulticast mode [ 906.194418][T18678] bridge_slave_1: entered promiscuous mode [ 906.213038][T18678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 906.222425][T18678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 906.244328][T18678] team0: Port device team_slave_0 added [ 906.247441][T18678] team0: Port device team_slave_1 added [ 906.273820][ T9327] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.289919][T18678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.293682][T18678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.304773][T18678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 906.317622][T18678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.330368][T18678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.345117][T18678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.361194][T11597] usb 44-1: device descriptor read/8, error -110 [ 906.379752][ T9327] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.402049][ T34] usb usb42-port1: unable to enumerate USB device [ 906.426812][T18678] hsr_slave_0: entered promiscuous mode [ 906.429237][T18678] hsr_slave_1: entered promiscuous mode [ 906.435210][T18678] debugfs: 'hsr0' already exists in 'hsr' [ 906.437335][T18678] Cannot create hsr debugfs directory [ 906.450532][ T9327] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.563725][T18702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2367'. [ 906.778599][T11597] usb usb44-port1: attempt power cycle [ 906.802262][ T9327] bridge_slave_1: left allmulticast mode [ 906.804256][ T9327] bridge_slave_1: left promiscuous mode [ 906.806775][ T9327] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.812862][ T9327] bridge_slave_0: left allmulticast mode [ 906.814939][ T9327] bridge_slave_0: left promiscuous mode [ 906.817130][ T9327] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.247456][T18708] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 907.249582][T18708] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 907.261093][T18708] vhci_hcd vhci_hcd.0: Device attached [ 907.342087][T11597] usb usb44-port1: unable to enumerate USB device [ 907.415475][ T9327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 907.422700][ T9327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 907.426952][ T9327] bond0 (unregistering): Released all slaves [ 907.631140][ T64] Bluetooth: hci4: command tx timeout [ 907.651537][T18720] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 907.653728][T18720] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 907.667263][T18720] vhci_hcd vhci_hcd.0: Device attached [ 907.876661][T18709] vhci_hcd: connection reset by peer [ 907.879869][ T1153] vhci_hcd vhci_hcd.1: stop threads [ 907.883424][ T1153] vhci_hcd vhci_hcd.1: release socket [ 907.883548][ T9327] hsr_slave_0: left promiscuous mode [ 907.889124][ T1153] vhci_hcd vhci_hcd.1: disconnect device [ 907.889838][ T5945] usb 40-1: device descriptor read/8, error -110 [ 907.895547][ T9327] hsr_slave_1: left promiscuous mode [ 907.898428][ T9327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 907.902635][ T9327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.907738][ T9327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 907.913808][ T9327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 907.946429][ T9327] veth1_macvtap: left promiscuous mode [ 907.949340][ T9327] veth0_macvtap: left promiscuous mode [ 907.961053][ T6031] usb 42-1: SetAddress Request (38) to port 0 [ 907.963111][ T6031] usb 42-1: new SuperSpeed USB device number 38 using vhci_hcd [ 907.964043][ T9327] veth1_vlan: left promiscuous mode [ 907.967786][ T9327] veth0_vlan: left promiscuous mode [ 908.294295][ T5945] usb usb40-port1: attempt power cycle [ 908.302419][ T9327] team0 (unregistering): Port device team_slave_1 removed [ 908.332466][ T9327] team0 (unregistering): Port device team_slave_0 removed [ 908.519074][T18721] vhci_hcd: connection reset by peer [ 908.526773][ T6933] vhci_hcd vhci_hcd.2: stop threads [ 908.528785][ T6933] vhci_hcd vhci_hcd.2: release socket [ 908.530793][ T6933] vhci_hcd vhci_hcd.2: disconnect device [ 908.591172][ T5948] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 908.804556][T18678] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 908.813217][T18678] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 908.821448][T18678] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 908.829104][T18678] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 908.854607][T18735] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 908.857537][T18735] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 908.861846][T18735] vhci_hcd vhci_hcd.0: Device attached [ 908.865011][ T5945] usb usb40-port1: unable to enumerate USB device [ 908.909620][T18678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.920264][T18678] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.926319][ T6933] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.929063][ T6933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.938369][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.938939][T18745] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 908.941200][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 908.943444][T18745] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 908.944580][T18745] vhci_hcd vhci_hcd.0: Device attached [ 909.079329][T18678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 909.122410][T18678] veth0_vlan: entered promiscuous mode [ 909.127969][T18678] veth1_vlan: entered promiscuous mode [ 909.131817][ T34] usb 38-1: SetAddress Request (37) to port 0 [ 909.135097][ T34] usb 38-1: new SuperSpeed USB device number 37 using vhci_hcd [ 909.145510][T18678] veth0_macvtap: entered promiscuous mode [ 909.149723][T18678] veth1_macvtap: entered promiscuous mode [ 909.167054][T18678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 909.174726][T18678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 909.204707][ T91] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.208709][ T91] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.216069][ T91] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.232763][ T91] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.241736][T11597] usb 40-1: SetAddress Request (60) to port 0 [ 909.244549][T11597] usb 40-1: new SuperSpeed USB device number 60 using vhci_hcd [ 909.250354][ T6397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.257780][ T6397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.274768][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.278167][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.496152][T18746] vhci_hcd: connection reset by peer [ 909.499434][ T1146] vhci_hcd vhci_hcd.1: stop threads [ 909.502270][ T1146] vhci_hcd vhci_hcd.1: release socket [ 909.505322][ T1146] vhci_hcd vhci_hcd.1: disconnect device [ 909.517759][T18742] vhci_hcd: connection reset by peer [ 909.520544][ T1146] vhci_hcd vhci_hcd.0: stop threads [ 909.523420][ T1146] vhci_hcd vhci_hcd.0: release socket [ 909.542542][ T1146] vhci_hcd vhci_hcd.0: disconnect device [ 909.721858][ T64] Bluetooth: hci4: command tx timeout [ 910.081099][T18760] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 910.083438][T18760] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 910.143216][T18760] vhci_hcd vhci_hcd.0: Device attached [ 910.473654][T18761] vhci_hcd: connection closed [ 910.498847][ T9327] vhci_hcd vhci_hcd.2: stop threads [ 910.502347][ T9327] vhci_hcd vhci_hcd.2: release socket [ 910.504264][ T9327] vhci_hcd vhci_hcd.2: disconnect device [ 910.509605][T18771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2374'. [ 910.711527][T18776] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 910.714691][T18776] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 910.718361][T18776] vhci_hcd vhci_hcd.0: Device attached [ 911.139954][T18777] vhci_hcd: connection closed [ 911.146342][ T1146] vhci_hcd vhci_hcd.0: stop threads [ 911.151902][ T1146] vhci_hcd vhci_hcd.0: release socket [ 911.154729][ T1146] vhci_hcd vhci_hcd.0: disconnect device [ 911.156184][T18783] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 911.158860][T18783] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 911.162193][T18783] vhci_hcd vhci_hcd.0: Device attached [ 911.500990][ T6226] usb 44-1: SetAddress Request (21) to port 0 [ 911.502968][ T6226] usb 44-1: new SuperSpeed USB device number 21 using vhci_hcd [ 911.536382][T18784] vhci_hcd: connection closed [ 911.537435][ T9327] vhci_hcd vhci_hcd.3: stop threads [ 911.543919][ T9327] vhci_hcd vhci_hcd.3: release socket [ 911.546230][ T9327] vhci_hcd vhci_hcd.3: disconnect device [ 911.595602][T18791] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 911.597867][T18791] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 911.606996][T18791] vhci_hcd vhci_hcd.0: Device attached [ 911.791043][ T64] Bluetooth: hci4: command tx timeout [ 912.073580][T18802] netlink: 'syz.2.2378': attribute type 4 has an invalid length. [ 912.213228][T18792] vhci_hcd: connection closed [ 912.213489][ T9327] vhci_hcd vhci_hcd.1: stop threads [ 912.220600][ T9327] vhci_hcd vhci_hcd.1: release socket [ 912.224073][ T9327] vhci_hcd vhci_hcd.1: disconnect device [ 912.547359][T18808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2380'. [ 913.081176][ T6031] usb 42-1: device descriptor read/8, error -110 [ 913.121412][T18813] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 913.123692][T18813] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 913.130701][T18813] vhci_hcd vhci_hcd.0: Device attached [ 913.170845][T18820] netlink: 'syz.0.2383': attribute type 4 has an invalid length. [ 913.214825][T18821] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 913.217032][T18821] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 913.220672][T18821] vhci_hcd vhci_hcd.0: Device attached [ 913.431233][ T6031] usb 42-1: SetAddress Request (39) to port 0 [ 913.434018][ T6031] usb 42-1: new SuperSpeed USB device number 39 using vhci_hcd [ 913.656279][T18818] vhci_hcd: connection closed [ 913.657052][ T91] vhci_hcd vhci_hcd.1: stop threads [ 913.661119][ T91] vhci_hcd vhci_hcd.1: release socket [ 913.663164][ T91] vhci_hcd vhci_hcd.1: disconnect device [ 913.827765][T18822] vhci_hcd: connection reset by peer [ 913.829913][ T9327] vhci_hcd vhci_hcd.2: stop threads [ 913.831782][ T9327] vhci_hcd vhci_hcd.2: release socket [ 913.833437][ T9327] vhci_hcd vhci_hcd.2: disconnect device [ 913.871058][ T64] Bluetooth: hci4: command tx timeout [ 913.901091][T18828] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 913.903289][T18828] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 913.916830][T18828] vhci_hcd vhci_hcd.0: Device attached [ 914.148712][T18836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2385'. [ 914.191298][ T34] usb 38-1: device descriptor read/8, error -110 [ 914.283175][T18829] vhci_hcd: connection reset by peer [ 914.288211][ T1146] vhci_hcd vhci_hcd.3: stop threads [ 914.291773][ T1146] vhci_hcd vhci_hcd.3: release socket [ 914.294281][ T1146] vhci_hcd vhci_hcd.3: disconnect device [ 914.413320][T11597] usb 40-1: device descriptor read/8, error -110 [ 914.693400][ T34] usb usb38-port1: attempt power cycle [ 914.895386][T11597] usb usb40-port1: attempt power cycle [ 914.947754][T18848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2387'. [ 915.211695][T18854] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 915.213894][T18854] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 915.216723][T18854] vhci_hcd vhci_hcd.0: Device attached [ 915.449020][T18861] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 915.451230][T18861] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 915.458987][T18861] vhci_hcd vhci_hcd.0: Device attached [ 915.491819][T11597] usb usb40-port1: unable to enumerate USB device [ 915.588113][ T34] usb 38-1: SetAddress Request (40) to port 0 [ 915.590663][ T34] usb 38-1: new SuperSpeed USB device number 40 using vhci_hcd [ 915.711744][T18865] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 915.714179][T18865] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 915.717214][T18865] vhci_hcd vhci_hcd.0: Device attached [ 915.991133][T11597] usb 40-1: SetAddress Request (64) to port 0 [ 915.993459][T11597] usb 40-1: new SuperSpeed USB device number 64 using vhci_hcd [ 916.342262][T18855] vhci_hcd: connection closed [ 916.342484][ T12] vhci_hcd vhci_hcd.3: stop threads [ 916.345955][ T12] vhci_hcd vhci_hcd.3: release socket [ 916.348048][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 916.575474][T18867] vhci_hcd: connection reset by peer [ 916.577536][ T12] vhci_hcd vhci_hcd.1: stop threads [ 916.579306][ T12] vhci_hcd vhci_hcd.1: release socket [ 916.581858][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 916.597701][T18862] vhci_hcd: connection reset by peer [ 916.599807][ T12] vhci_hcd vhci_hcd.0: stop threads [ 916.602260][ T6226] usb 44-1: device descriptor read/8, error -110 [ 916.606056][ T12] vhci_hcd vhci_hcd.0: release socket [ 916.608177][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 916.926746][T18875] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 916.929036][T18875] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 916.932012][T18875] vhci_hcd vhci_hcd.0: Device attached [ 916.994293][ T6226] usb usb44-port1: attempt power cycle [ 917.559280][ T6226] usb usb44-port1: unable to enumerate USB device [ 917.559305][T18876] vhci_hcd: connection closed [ 917.562658][ T9327] vhci_hcd vhci_hcd.2: stop threads [ 917.567720][ T9327] vhci_hcd vhci_hcd.2: release socket [ 917.569877][ T9327] vhci_hcd vhci_hcd.2: disconnect device [ 917.706495][T18887] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 917.709064][T18887] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 917.733288][T18887] vhci_hcd vhci_hcd.0: Device attached [ 918.001058][ T53] usb 44-1: SetAddress Request (25) to port 0 [ 918.003111][ T53] usb 44-1: new SuperSpeed USB device number 25 using vhci_hcd [ 918.089253][T18888] vhci_hcd: connection reset by peer [ 918.091608][ T1146] vhci_hcd vhci_hcd.3: stop threads [ 918.093480][ T1146] vhci_hcd vhci_hcd.3: release socket [ 918.095352][ T1146] vhci_hcd vhci_hcd.3: disconnect device [ 918.475441][T18899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2396'. [ 918.511016][ T6031] usb 42-1: device descriptor read/8, error -110 [ 918.621622][ T6031] usb usb42-port1: attempt power cycle [ 919.178336][T18903] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 919.180514][T18903] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 919.183574][T18903] vhci_hcd vhci_hcd.0: Device attached [ 919.195902][ T6031] usb usb42-port1: unable to enumerate USB device [ 919.588308][T18910] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 919.590513][T18910] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 919.607207][T18910] vhci_hcd vhci_hcd.0: Device attached [ 919.801003][T18904] vhci_hcd: connection closed [ 919.802966][ T6397] vhci_hcd vhci_hcd.3: stop threads [ 919.807543][ T6397] vhci_hcd vhci_hcd.3: release socket [ 919.812114][ T6397] vhci_hcd vhci_hcd.3: disconnect device [ 919.871043][ T5948] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 919.871154][ T5303] Bluetooth: hci5: command 0x1003 tx timeout [ 919.876105][ T64] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 919.878465][ T5958] Bluetooth: hci3: command 0x1003 tx timeout [ 919.884227][ T24] usb 42-1: SetAddress Request (42) to port 0 [ 919.886538][ T24] usb 42-1: new SuperSpeed USB device number 42 using vhci_hcd [ 920.247491][T18911] vhci_hcd: connection reset by peer [ 920.250791][ T1258] vhci_hcd vhci_hcd.2: stop threads [ 920.255507][ T1258] vhci_hcd vhci_hcd.2: release socket [ 920.258578][ T1258] vhci_hcd vhci_hcd.2: disconnect device [ 920.671040][ T34] usb 38-1: device descriptor read/8, error -110 [ 920.791135][ T34] usb usb38-port1: unable to enumerate USB device [ 921.071981][T11597] usb 40-1: device descriptor read/8, error -110 [ 921.151208][T18932] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 921.153419][T18932] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 921.156433][T18932] vhci_hcd vhci_hcd.0: Device attached [ 921.160456][ T64] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 921.164534][ T64] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 921.168072][ T64] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 921.172633][ T64] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 921.176276][ T64] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 921.331038][T11597] usb 40-1: SetAddress Request (65) to port 0 [ 921.333791][T11597] usb 40-1: new SuperSpeed USB device number 65 using vhci_hcd [ 921.454852][T18931] chnl_net:caif_netlink_parms(): no params data found [ 921.505615][T18931] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.508103][T18931] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.510700][T18931] bridge_slave_0: entered allmulticast mode [ 921.513658][T18931] bridge_slave_0: entered promiscuous mode [ 921.517908][T18931] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.520398][T18931] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.523002][T18931] bridge_slave_1: entered allmulticast mode [ 921.526235][T18931] bridge_slave_1: entered promiscuous mode [ 921.543571][T18931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 921.549281][T18931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 921.566182][T18931] team0: Port device team_slave_0 added [ 921.569606][T18931] team0: Port device team_slave_1 added [ 921.584532][T18931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 921.586866][T18931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 921.595791][T18931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 921.600172][T18931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 921.608331][T18931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 921.616840][T18931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 921.640535][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.675605][T18931] hsr_slave_0: entered promiscuous mode [ 921.678797][T18931] hsr_slave_1: entered promiscuous mode [ 921.681377][T18931] debugfs: 'hsr0' already exists in 'hsr' [ 921.683443][T18931] Cannot create hsr debugfs directory [ 921.731648][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.827184][T18933] vhci_hcd: connection reset by peer [ 921.831438][ T12] vhci_hcd vhci_hcd.1: stop threads [ 921.834466][ T12] vhci_hcd vhci_hcd.1: release socket [ 921.838080][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 921.846029][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.910577][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.994785][ T61] bridge_slave_1: left allmulticast mode [ 921.997082][ T61] bridge_slave_1: left promiscuous mode [ 921.999042][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.004118][ T61] bridge_slave_0: left allmulticast mode [ 922.006050][ T61] bridge_slave_0: left promiscuous mode [ 922.008356][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.211403][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 922.216065][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 922.219987][ T61] bond0 (unregistering): Released all slaves [ 922.433537][ T64] Bluetooth: hci3: command 0x1003 tx timeout [ 922.437892][ T5948] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 922.577382][T18958] netlink: 'syz.1.2404': attribute type 4 has an invalid length. [ 922.649719][ T61] hsr_slave_0: left promiscuous mode [ 922.652839][ T61] hsr_slave_1: left promiscuous mode [ 922.655063][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 922.657711][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 922.660655][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 922.663338][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 922.674690][ T61] veth1_macvtap: left promiscuous mode [ 922.676630][ T61] veth0_macvtap: left promiscuous mode [ 922.679588][ T61] veth1_vlan: left promiscuous mode [ 922.681579][ T61] veth0_vlan: left promiscuous mode [ 922.842860][ T5948] Bluetooth: hci5: command 0x1003 tx timeout [ 922.845746][ T5303] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 923.053196][ T61] team0 (unregistering): Port device team_slave_1 removed [ 923.074695][ T53] usb 44-1: device descriptor read/8, error -110 [ 923.114156][ T61] team0 (unregistering): Port device team_slave_0 removed [ 923.140640][T18966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2406'. [ 923.231805][ T5303] Bluetooth: hci6: command tx timeout [ 923.473020][ T53] usb usb44-port1: attempt power cycle [ 923.853848][T18931] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 923.897172][T18931] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 923.903970][T18931] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 923.910741][T18931] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 924.028462][T18931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.039414][T18931] 8021q: adding VLAN 0 to HW filter on device team0 [ 924.044999][ T53] usb usb44-port1: unable to enumerate USB device [ 924.066297][T18988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2407'. [ 924.072632][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.075945][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 924.089700][T18988] overlayfs: failed to resolve './bus': -2 [ 924.094846][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.098116][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 924.435895][T18931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 924.460043][T18931] veth0_vlan: entered promiscuous mode [ 924.464048][T18995] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 924.466246][T18995] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 924.466959][T18931] veth1_vlan: entered promiscuous mode [ 924.469326][T18995] vhci_hcd vhci_hcd.0: Device attached [ 924.489306][T18931] veth0_macvtap: entered promiscuous mode [ 924.494872][T18931] veth1_macvtap: entered promiscuous mode [ 924.506335][T18931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 924.543917][T18931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 924.587201][ T6397] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.592537][ T6397] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.602041][ T6397] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.602069][ T6397] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.651494][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.657052][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.679736][ T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.691851][ T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.819965][ T6011] usb 44-1: SetAddress Request (29) to port 0 [ 924.822180][ T6011] usb 44-1: new SuperSpeed USB device number 29 using vhci_hcd [ 924.857714][T19004] netlink: 'syz.2.2403': attribute type 4 has an invalid length. [ 924.911051][ T64] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 924.912184][ T5303] Bluetooth: hci1: command 0x1003 tx timeout [ 924.994982][ T24] usb 42-1: device descriptor read/8, error -110 [ 925.087139][T18996] vhci_hcd: connection reset by peer [ 925.090372][ T6933] vhci_hcd vhci_hcd.3: stop threads [ 925.092199][ T6933] vhci_hcd vhci_hcd.3: release socket [ 925.093968][ T6933] vhci_hcd vhci_hcd.3: disconnect device [ 925.311052][ T64] Bluetooth: hci6: command tx timeout [ 925.401860][ T24] usb usb42-port1: attempt power cycle [ 925.948970][ T5303] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 925.981494][ T5303] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 925.989991][ T5303] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 926.001416][ T24] usb usb42-port1: unable to enumerate USB device [ 926.022903][ T5303] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 926.034454][ T5303] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 926.230372][T19025] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 926.233322][T19025] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 926.237490][T19025] vhci_hcd vhci_hcd.0: Device attached [ 926.237619][T19024] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 926.242972][T19024] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 926.249836][ T1146] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.305596][T19016] chnl_net:caif_netlink_parms(): no params data found [ 926.344503][ T1146] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.369511][T19024] vhci_hcd vhci_hcd.0: Device attached [ 926.429085][ T1146] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.433281][T11597] usb 40-1: device descriptor read/8, error -110 [ 926.438718][T19016] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.441228][T19016] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.443576][T19016] bridge_slave_0: entered allmulticast mode [ 926.447613][T19016] bridge_slave_0: entered promiscuous mode [ 926.453485][T19016] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.455692][T19016] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.457973][T19016] bridge_slave_1: entered allmulticast mode [ 926.461180][T19016] bridge_slave_1: entered promiscuous mode [ 926.479179][T19016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 926.502554][T19037] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 926.505316][T19037] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 926.521035][ T1146] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.528442][T19016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 926.531086][T19037] vhci_hcd vhci_hcd.0: Device attached [ 926.548650][T19016] team0: Port device team_slave_0 added [ 926.551285][T11597] usb usb40-port1: attempt power cycle [ 926.554430][T19016] team0: Port device team_slave_1 added [ 926.568803][T19016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 926.571401][T19016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 926.571443][T19016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 926.572873][T19016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 926.590223][T19016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 926.590242][T19016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 926.617329][T19016] hsr_slave_0: entered promiscuous mode [ 926.620599][T19016] hsr_slave_1: entered promiscuous mode [ 926.624678][T19016] debugfs: 'hsr0' already exists in 'hsr' [ 926.626981][T19016] Cannot create hsr debugfs directory [ 926.651561][ T34] usb 42-1: SetAddress Request (46) to port 0 [ 926.651610][ T34] usb 42-1: new SuperSpeed USB device number 46 using vhci_hcd [ 926.723090][T19026] vhci_hcd: connection closed [ 926.725649][ T1258] vhci_hcd vhci_hcd.3: stop threads [ 926.725674][ T1258] vhci_hcd vhci_hcd.3: release socket [ 926.725776][ T1258] vhci_hcd vhci_hcd.3: disconnect device [ 926.728838][ T1146] bridge_slave_1: left allmulticast mode [ 926.728855][ T1146] bridge_slave_1: left promiscuous mode [ 926.728971][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.730714][ T1146] bridge_slave_0: left allmulticast mode [ 926.730731][ T1146] bridge_slave_0: left promiscuous mode [ 926.730858][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.824062][ T24] usb 38-1: SetAddress Request (41) to port 0 [ 926.826742][ T24] usb 38-1: new SuperSpeed USB device number 41 using vhci_hcd [ 926.943178][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 926.948578][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 926.954110][ T1146] bond0 (unregistering): Released all slaves [ 927.113045][T11597] usb usb40-port1: unable to enumerate USB device [ 927.349787][ T1146] hsr_slave_0: left promiscuous mode [ 927.354943][ T1146] hsr_slave_1: left promiscuous mode [ 927.357271][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 927.359941][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 927.363379][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 927.366086][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 927.386989][ T1146] veth1_macvtap: left promiscuous mode [ 927.389189][ T1146] veth0_macvtap: left promiscuous mode [ 927.391134][ T64] Bluetooth: hci6: command tx timeout [ 927.394793][ T1146] veth1_vlan: left promiscuous mode [ 927.396661][ T1146] veth0_vlan: left promiscuous mode [ 927.721430][T19038] vhci_hcd: connection reset by peer [ 927.723470][ T1258] vhci_hcd vhci_hcd.0: stop threads [ 927.725606][ T1258] vhci_hcd vhci_hcd.0: release socket [ 927.729728][ T1258] vhci_hcd vhci_hcd.0: disconnect device [ 927.781591][T19057] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 927.781854][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 927.784009][T19057] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 927.796149][T19057] vhci_hcd vhci_hcd.0: Device attached [ 927.815220][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 928.111042][ T64] Bluetooth: hci1: command tx timeout [ 928.115476][T19027] vhci_hcd: connection reset by peer [ 928.117996][ T9327] vhci_hcd vhci_hcd.2: stop threads [ 928.120443][ T9327] vhci_hcd vhci_hcd.2: release socket [ 928.129823][ T9327] vhci_hcd vhci_hcd.2: disconnect device [ 928.294578][T19016] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 928.307820][T19016] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 928.342396][T19016] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 928.361870][T19058] vhci_hcd: connection closed [ 928.362151][ T6933] vhci_hcd vhci_hcd.3: stop threads [ 928.366880][ T6933] vhci_hcd vhci_hcd.3: release socket [ 928.369654][ T6933] vhci_hcd vhci_hcd.3: disconnect device [ 928.382175][T19016] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 928.518089][T19016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 928.529076][T19016] 8021q: adding VLAN 0 to HW filter on device team0 [ 928.536806][ T6933] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.539198][ T6933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 928.547167][ T9327] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.549597][ T9327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 928.695726][T19085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2416'. [ 928.720017][T19016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 928.775992][T19085] overlayfs: failed to resolve './bus': -2 [ 928.815604][T19016] veth0_vlan: entered promiscuous mode [ 928.824785][T19016] veth1_vlan: entered promiscuous mode [ 928.846022][T19016] veth0_macvtap: entered promiscuous mode [ 928.851968][T19016] veth1_macvtap: entered promiscuous mode [ 928.868012][T19016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 928.877000][T19016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 928.890380][ T6933] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.900307][ T6933] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.905710][ T6933] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.133521][ T6933] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.210792][T19090] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 929.213389][T19090] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 929.235806][T19090] vhci_hcd vhci_hcd.0: Device attached [ 929.345740][ T6397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.351247][ T6397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.388351][ T6933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.394155][ T6933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.472248][ T64] Bluetooth: hci6: command tx timeout [ 929.873646][ T6011] usb 44-1: device descriptor read/8, error -110 [ 930.099697][T19091] vhci_hcd: connection closed [ 930.100632][ T6933] vhci_hcd vhci_hcd.2: stop threads [ 930.105445][ T6933] vhci_hcd vhci_hcd.2: release socket [ 930.107647][ T6933] vhci_hcd vhci_hcd.2: disconnect device [ 930.180158][T19107] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 930.182735][T19107] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 930.201401][ T64] Bluetooth: hci1: command tx timeout [ 930.208646][T19107] vhci_hcd vhci_hcd.0: Device attached [ 930.271450][ T6011] usb usb44-port1: attempt power cycle [ 930.471046][ T53] usb 40-1: SetAddress Request (68) to port 0 [ 930.473839][ T53] usb 40-1: new SuperSpeed USB device number 68 using vhci_hcd [ 930.535836][ T5303] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 930.541980][ T5303] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 930.545112][ T5303] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 930.548644][ T5303] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 930.560459][ T5303] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 930.699116][T19108] vhci_hcd: connection reset by peer [ 930.713810][ T1146] vhci_hcd vhci_hcd.1: stop threads [ 930.716164][ T1146] vhci_hcd vhci_hcd.1: release socket [ 930.718633][ T1146] vhci_hcd vhci_hcd.1: disconnect device [ 930.766820][T19113] chnl_net:caif_netlink_parms(): no params data found [ 930.891835][ T6011] usb usb44-port1: unable to enumerate USB device [ 930.933883][T19113] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.937259][T19113] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.940125][T19113] bridge_slave_0: entered allmulticast mode [ 930.952817][T19113] bridge_slave_0: entered promiscuous mode [ 930.958536][T19113] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.961514][T19113] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.964077][T19113] bridge_slave_1: entered allmulticast mode [ 930.966995][T19113] bridge_slave_1: entered promiscuous mode [ 931.044485][ T6397] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.072160][T19128] netlink: 'syz.2.2422': attribute type 4 has an invalid length. [ 931.100291][T19113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.110258][T19113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.236572][ T6397] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.260384][T19113] team0: Port device team_slave_0 added [ 931.273701][T19113] team0: Port device team_slave_1 added [ 931.349462][ T6397] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.361606][T19113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 931.364323][T19113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.374294][T19113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 931.378921][T19113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 931.381714][T19113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.390601][T19113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 931.498692][ T6397] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.530603][T19113] hsr_slave_0: entered promiscuous mode [ 931.533592][T19113] hsr_slave_1: entered promiscuous mode [ 931.536277][T19113] debugfs: 'hsr0' already exists in 'hsr' [ 931.538646][T19113] Cannot create hsr debugfs directory [ 931.630546][ T6397] bridge_slave_1: left allmulticast mode [ 931.632934][ T6397] bridge_slave_1: left promiscuous mode [ 931.635048][ T6397] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.638473][ T6397] bridge_slave_0: left allmulticast mode [ 931.640471][ T6397] bridge_slave_0: left promiscuous mode [ 931.643158][ T6397] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.721720][ T34] usb 42-1: device descriptor read/8, error -110 [ 931.732343][T19132] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 931.734558][T19132] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 931.748428][T19132] vhci_hcd vhci_hcd.0: Device attached [ 931.874073][ T24] usb 38-1: device descriptor read/8, error -110 [ 931.958362][ T6397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 931.967625][T19141] netlink: 'syz.2.2424': attribute type 4 has an invalid length. [ 931.973248][ T6397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 931.979123][ T6397] bond0 (unregistering): Released all slaves [ 932.132335][ T34] usb usb42-port1: attempt power cycle [ 932.281804][ T5303] Bluetooth: hci1: command tx timeout [ 932.289766][ T24] usb usb38-port1: attempt power cycle [ 932.451221][T19152] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 932.453484][T19152] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 932.456417][T19152] vhci_hcd vhci_hcd.0: Device attached [ 932.472397][ T6397] hsr_slave_0: left promiscuous mode [ 932.475880][ T6397] hsr_slave_1: left promiscuous mode [ 932.479102][ T6397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 932.500007][ T6397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 932.515374][T19133] vhci_hcd: connection closed [ 932.515946][T14569] vhci_hcd vhci_hcd.1: stop threads [ 932.519424][T14569] vhci_hcd vhci_hcd.1: release socket [ 932.522064][T14569] vhci_hcd vhci_hcd.1: disconnect device [ 932.526637][ T6397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 932.529971][ T6397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 932.545402][ T6397] veth1_macvtap: left promiscuous mode [ 932.548146][ T6397] veth0_macvtap: left promiscuous mode [ 932.550677][ T6397] veth1_vlan: left promiscuous mode [ 932.553593][ T6397] veth0_vlan: left promiscuous mode [ 932.591104][ T5303] Bluetooth: hci2: command tx timeout [ 932.700054][T19154] vhci_hcd: connection closed [ 932.701010][T14569] vhci_hcd vhci_hcd.3: stop threads [ 932.701963][ T34] usb usb42-port1: unable to enumerate USB device [ 932.702913][T14569] vhci_hcd vhci_hcd.3: release socket [ 932.711061][T14569] vhci_hcd vhci_hcd.3: disconnect device [ 932.731737][ T6013] usb 44-1: enqueue for inactive port 0 [ 932.871803][ T24] usb usb38-port1: unable to enumerate USB device [ 933.059404][T19161] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 933.061897][T19161] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 933.066536][T19161] vhci_hcd vhci_hcd.0: Device attached [ 933.070465][ T6397] team0 (unregistering): Port device team_slave_1 removed [ 933.088968][ T6397] team0 (unregistering): Port device team_slave_0 removed [ 933.221761][ T6013] usb usb44-port1: attempt power cycle [ 933.332429][ T24] usb 42-1: SetAddress Request (50) to port 0 [ 933.335140][ T24] usb 42-1: new SuperSpeed USB device number 50 using vhci_hcd [ 933.410703][T19113] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 933.422205][T19113] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 933.427021][T19113] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 933.433254][T19113] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 933.484001][T19113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 933.494911][T19113] 8021q: adding VLAN 0 to HW filter on device team0 [ 933.502849][ T1258] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.505041][ T1258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 933.515952][ T1258] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.518109][ T1258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 933.572423][T19178] netlink: 'syz.1.2427': attribute type 4 has an invalid length. [ 933.585016][T19180] netlink: 'syz.3.2428': attribute type 4 has an invalid length. [ 933.687661][T19162] vhci_hcd: connection reset by peer [ 933.689671][ T1258] vhci_hcd vhci_hcd.2: stop threads [ 933.691764][ T1258] vhci_hcd vhci_hcd.2: release socket [ 933.693730][ T1258] vhci_hcd vhci_hcd.2: disconnect device [ 933.780711][T19113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 933.783549][ T6013] usb usb44-port1: unable to enumerate USB device [ 933.816856][T19113] veth0_vlan: entered promiscuous mode [ 933.823687][T19113] veth1_vlan: entered promiscuous mode [ 933.838677][T19113] veth0_macvtap: entered promiscuous mode [ 933.843472][T19113] veth1_macvtap: entered promiscuous mode [ 933.853202][T19113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.864296][T19113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 933.878169][ T1258] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.885926][ T1258] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.890108][ T1258] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.895932][ T1258] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.924276][ T6397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.927309][ T6397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.946138][ T6397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.948892][ T6397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.351523][ T5303] Bluetooth: hci1: command tx timeout [ 934.671111][ T5303] Bluetooth: hci2: command tx timeout [ 934.694298][T19199] netlink: 'syz.2.2430': attribute type 4 has an invalid length. [ 935.097414][T19202] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 935.099578][T19202] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 935.113376][T19202] vhci_hcd vhci_hcd.0: Device attached [ 935.391193][ T6013] usb 44-1: SetAddress Request (37) to port 0 [ 935.395500][ T6013] usb 44-1: new SuperSpeed USB device number 37 using vhci_hcd [ 935.561179][ T53] usb 40-1: device descriptor read/8, error -110 [ 935.901543][T19203] vhci_hcd: connection reset by peer [ 935.904024][ T6933] vhci_hcd vhci_hcd.3: stop threads [ 935.905784][ T6933] vhci_hcd vhci_hcd.3: release socket [ 935.907766][ T6933] vhci_hcd vhci_hcd.3: disconnect device [ 935.972574][ T53] usb usb40-port1: attempt power cycle [ 936.362636][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.364798][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.532208][ T53] usb usb40-port1: unable to enumerate USB device [ 936.601178][T19217] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 936.603776][T19217] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 936.669528][T19217] vhci_hcd vhci_hcd.0: Device attached [ 936.751333][ T5948] Bluetooth: hci2: command tx timeout [ 936.881650][T19226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2434'. [ 936.889002][T19218] vhci_hcd: connection closed [ 936.889725][ T1258] vhci_hcd vhci_hcd.1: stop threads [ 936.898440][ T1258] vhci_hcd vhci_hcd.1: release socket [ 936.900590][T19226] overlayfs: failed to resolve './bus': -2 [ 936.903892][ T1258] vhci_hcd vhci_hcd.1: disconnect device [ 936.941037][ T6031] usb 40-1: enqueue for inactive port 0 [ 937.151281][ T5303] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 937.336694][T19230] netlink: 'syz.0.2435': attribute type 4 has an invalid length. [ 937.432981][ T6031] usb usb40-port1: attempt power cycle [ 937.801146][ T5303] Bluetooth: hci3: command 0x1003 tx timeout [ 937.801159][ T64] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 937.999387][T19241] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 938.001601][T19241] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 938.024902][T19241] vhci_hcd vhci_hcd.0: Device attached [ 938.106140][ T6031] usb usb40-port1: unable to enumerate USB device [ 938.441038][ T24] usb 42-1: device descriptor read/8, error -110 [ 938.572223][T19247] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 938.574394][T19247] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 938.581729][T19247] vhci_hcd vhci_hcd.0: Device attached [ 938.831058][ T64] Bluetooth: hci2: command tx timeout [ 938.833478][ T24] usb usb42-port1: attempt power cycle [ 938.843571][T19254] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 938.845756][T19254] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 938.848589][T19254] vhci_hcd vhci_hcd.0: Device attached [ 938.851089][T11597] usb 38-1: SetAddress Request (45) to port 0 [ 938.854273][T11597] usb 38-1: new SuperSpeed USB device number 45 using vhci_hcd [ 938.971305][ T24] usb 42-1: SetAddress Request (52) to port 0 [ 938.973452][ T24] usb 42-1: new SuperSpeed USB device number 52 using vhci_hcd [ 939.138327][T19255] vhci_hcd: connection reset by peer [ 939.142803][ T6397] vhci_hcd vhci_hcd.2: stop threads [ 939.144709][ T6397] vhci_hcd vhci_hcd.2: release socket [ 939.147025][ T6397] vhci_hcd vhci_hcd.2: disconnect device [ 939.221010][T19249] vhci_hcd: connection reset by peer [ 939.223761][ T91] vhci_hcd vhci_hcd.0: stop threads [ 939.226024][ T91] vhci_hcd vhci_hcd.0: release socket [ 939.228869][T19242] vhci_hcd: connection closed [ 939.232116][ T91] vhci_hcd vhci_hcd.0: disconnect device [ 939.237629][ T91] vhci_hcd vhci_hcd.3: stop threads [ 939.239402][ T91] vhci_hcd vhci_hcd.3: release socket [ 939.241907][ T91] vhci_hcd vhci_hcd.3: disconnect device [ 939.801053][ T64] Bluetooth: hci0: command 0x1003 tx timeout [ 939.801830][ T5948] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 940.045070][T19267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2441'. [ 940.257150][T19273] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 940.259382][T19273] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 940.274467][T19273] vhci_hcd vhci_hcd.0: Device attached [ 940.431356][ T6013] usb 44-1: device descriptor read/8, error -110 [ 940.741295][T19281] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 940.743470][T19281] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 940.812587][T19281] vhci_hcd vhci_hcd.0: Device attached [ 940.921165][ T6013] usb 44-1: SetAddress Request (38) to port 0 [ 940.923960][ T6013] usb 44-1: new SuperSpeed USB device number 38 using vhci_hcd [ 940.956022][T19275] vhci_hcd: connection closed [ 940.957963][ T6397] vhci_hcd vhci_hcd.0: stop threads [ 941.036407][ T6397] vhci_hcd vhci_hcd.0: release socket [ 941.038359][ T6397] vhci_hcd vhci_hcd.0: disconnect device [ 941.097632][T19290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2444'. [ 941.103592][T19290] overlayfs: failed to resolve './bus': -2 [ 941.317602][T19282] vhci_hcd: connection reset by peer [ 941.319696][T14569] vhci_hcd vhci_hcd.3: stop threads [ 941.323312][T14569] vhci_hcd vhci_hcd.3: release socket [ 941.325715][T14569] vhci_hcd vhci_hcd.3: disconnect device [ 942.055266][T19301] netlink: 'syz.1.2446': attribute type 4 has an invalid length. [ 942.271032][ T5303] Bluetooth: hci0: command 0x1003 tx timeout [ 942.273958][ T5948] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 942.389631][T19305] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 942.391886][T19305] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 942.395391][T19305] vhci_hcd vhci_hcd.0: Device attached [ 942.832674][T19306] vhci_hcd: connection closed [ 942.833015][ T6397] vhci_hcd vhci_hcd.3: stop threads [ 942.836729][ T6397] vhci_hcd vhci_hcd.3: release socket [ 942.845678][ T6397] vhci_hcd vhci_hcd.3: disconnect device [ 943.102741][T19314] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 943.104980][T19314] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 943.108132][T19314] vhci_hcd vhci_hcd.0: Device attached [ 943.335488][T19321] netlink: 'syz.2.2450': attribute type 4 has an invalid length. [ 943.381006][T19165] usb 40-1: SetAddress Request (76) to port 0 [ 943.385527][T19165] usb 40-1: new SuperSpeed USB device number 76 using vhci_hcd [ 943.587404][T19326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2451'. [ 943.711018][ T64] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 943.711065][ T5948] Bluetooth: hci3: command 0x1003 tx timeout [ 943.792867][T19315] vhci_hcd: connection reset by peer [ 943.795494][ T6933] vhci_hcd vhci_hcd.1: stop threads [ 943.797813][ T6933] vhci_hcd vhci_hcd.1: release socket [ 943.801213][ T6933] vhci_hcd vhci_hcd.1: disconnect device [ 943.961025][T11597] usb 38-1: device descriptor read/8, error -110 [ 944.031605][ T24] usb 42-1: device descriptor read/8, error -110 [ 944.214702][T19333] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 944.216924][T19333] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 944.219764][T19333] vhci_hcd vhci_hcd.0: Device attached [ 944.365904][T19338] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 944.368947][T19338] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 944.431087][T11597] usb 38-1: SetAddress Request (46) to port 0 [ 944.433490][T11597] usb 38-1: new SuperSpeed USB device number 46 using vhci_hcd [ 944.449241][T19338] vhci_hcd vhci_hcd.0: Device attached [ 944.481716][ T24] usb 42-1: SetAddress Request (53) to port 0 [ 944.484515][ T24] usb 42-1: new SuperSpeed USB device number 53 using vhci_hcd [ 944.729823][T19334] vhci_hcd: connection reset by peer [ 944.734099][ T1258] vhci_hcd vhci_hcd.0: stop threads [ 944.736160][ T1258] vhci_hcd vhci_hcd.0: release socket [ 944.737992][ T1258] vhci_hcd vhci_hcd.0: disconnect device [ 944.774025][T19338] kAFS: No cell specified [ 944.813628][T19348] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 944.815608][T19348] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 944.818243][T19348] vhci_hcd vhci_hcd.0: Device attached [ 944.832943][T19351] netlink: 'syz.3.2455': attribute type 4 has an invalid length. [ 945.461495][T19339] vhci_hcd: connection reset by peer [ 945.464135][ T91] vhci_hcd vhci_hcd.2: stop threads [ 945.466588][ T91] vhci_hcd vhci_hcd.2: release socket [ 945.469240][ T91] vhci_hcd vhci_hcd.2: disconnect device [ 945.843292][T19359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2456'. [ 945.857570][T19349] vhci_hcd: connection closed [ 945.892812][ T91] vhci_hcd vhci_hcd.1: stop threads [ 945.916665][ T91] vhci_hcd vhci_hcd.1: release socket [ 945.919006][ T91] vhci_hcd vhci_hcd.1: disconnect device [ 946.186638][ T6013] usb 44-1: device descriptor read/8, error -110 [ 946.291202][ T6013] usb usb44-port1: attempt power cycle [ 946.852709][ T6013] usb usb44-port1: unable to enumerate USB device [ 946.896720][T19373] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 946.898987][T19373] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 946.911567][T19373] vhci_hcd vhci_hcd.0: Device attached [ 947.108198][T19373] kAFS: No cell specified [ 947.234647][T19379] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 947.236846][T19379] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 947.239875][T19379] vhci_hcd vhci_hcd.0: Device attached [ 947.302773][T19383] netlink: 'syz.2.2461': attribute type 4 has an invalid length. [ 947.750250][T19380] vhci_hcd: connection closed [ 947.750599][ T13] vhci_hcd vhci_hcd.0: stop threads [ 947.754221][ T13] vhci_hcd vhci_hcd.0: release socket [ 947.756113][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 947.765948][T19374] vhci_hcd: connection closed [ 947.766279][T14569] vhci_hcd vhci_hcd.1: stop threads [ 947.770866][T14569] vhci_hcd vhci_hcd.1: release socket [ 947.773656][T14569] vhci_hcd vhci_hcd.1: disconnect device [ 948.252939][T19389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2462'. [ 948.351082][ T64] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 948.351248][ T5948] Bluetooth: hci0: command 0x1003 tx timeout [ 948.432661][T19165] usb 40-1: device descriptor read/8, error -110 [ 948.563679][T19396] netlink: 'syz.3.2464': attribute type 4 has an invalid length. [ 948.833528][T19401] netlink: 'syz.1.2465': attribute type 4 has an invalid length. [ 948.838956][T19402] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 948.841237][T19402] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 948.842662][T19165] usb usb40-port1: attempt power cycle [ 948.854918][T19402] vhci_hcd vhci_hcd.0: Device attached [ 949.403994][T19165] usb usb40-port1: unable to enumerate USB device [ 949.551376][ T24] usb 42-1: device descriptor read/8, error -110 [ 949.661697][ T24] usb usb42-port1: unable to enumerate USB device [ 949.692203][T19403] vhci_hcd: connection reset by peer [ 949.694661][T14569] vhci_hcd vhci_hcd.0: stop threads [ 949.697027][T14569] vhci_hcd vhci_hcd.0: release socket [ 949.699504][T14569] vhci_hcd vhci_hcd.0: disconnect device [ 949.699535][T11597] usb 38-1: device descriptor read/8, error -110 [ 949.774882][T18583] ================================================================== [ 949.777574][T18583] BUG: KASAN: slab-use-after-free in hci_uart_write_work+0x82d/0x960 [ 949.780262][T18583] Read of size 4 at addr ffff88806c02e930 by task kworker/0:3/18583 [ 949.784839][T18583] [ 949.785652][T18583] CPU: 0 UID: 0 PID: 18583 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 949.785667][T18583] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 949.785676][T18583] Workqueue: events hci_uart_write_work [ 949.785691][T18583] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 949.785696][T18583] [ 949.785701][T18583] dump_stack_lvl+0x116/0x1f0 [ 949.785719][T18583] print_report+0xcd/0x630 [ 949.785736][T18583] ? __virt_addr_valid+0x81/0x610 [ 949.785754][T18583] ? __phys_addr+0xe8/0x180 [ 949.785771][T18583] ? hci_uart_write_work+0x82d/0x960 [ 949.785781][T18583] kasan_report+0xe0/0x110 [ 949.785797][T18583] ? hci_uart_write_work+0x82d/0x960 [ 949.785809][T18583] hci_uart_write_work+0x82d/0x960 [ 949.785819][T18583] ? __pfx_pty_write+0x10/0x10 [ 949.785834][T18583] process_one_work+0x9ba/0x1b20 [ 949.785849][T18583] ? __pfx_process_one_work+0x10/0x10 [ 949.785863][T18583] ? assign_work+0x1a0/0x250 [ 949.785874][T18583] worker_thread+0x6c8/0xf10 [ 949.785887][T18583] ? __kthread_parkme+0x19e/0x250 [ 949.785904][T18583] ? __pfx_worker_thread+0x10/0x10 [ 949.785916][T18583] kthread+0x3c5/0x780 [ 949.785927][T18583] ? __pfx_kthread+0x10/0x10 [ 949.785937][T18583] ? rcu_is_watching+0x12/0xc0 [ 949.785953][T18583] ? __pfx_kthread+0x10/0x10 [ 949.785963][T18583] ret_from_fork+0x983/0xb10 [ 949.785975][T18583] ? __pfx_ret_from_fork+0x10/0x10 [ 949.785986][T18583] ? native_load_gs_index+0x5b/0xd0 [ 949.786000][T18583] ? __switch_to+0x7af/0x10d0 [ 949.786014][T18583] ? __pfx_kthread+0x10/0x10 [ 949.786024][T18583] ret_from_fork_asm+0x1a/0x30 [ 949.786044][T18583] [ 949.786048][T18583] [ 949.838551][T18583] Allocated by task 18583: [ 949.840209][T18583] kasan_save_stack+0x33/0x60 [ 949.841744][T18583] kasan_save_track+0x14/0x30 [ 949.843293][T18583] __kasan_slab_alloc+0x89/0x90 [ 949.844860][T18583] kmem_cache_alloc_node_noprof+0x298/0x800 [ 949.846849][T18583] __alloc_skb+0x156/0x410 [ 949.848327][T18583] bcsp_prepare_pkt+0xe0/0xae0 [ 949.849931][T18583] bcsp_dequeue+0x237/0x4b0 [ 949.851468][T18583] hci_uart_write_work+0x4e3/0x960 [ 949.853148][T18583] process_one_work+0x9ba/0x1b20 [ 949.854785][T18583] worker_thread+0x6c8/0xf10 [ 949.856321][T18583] kthread+0x3c5/0x780 [ 949.857689][T18583] ret_from_fork+0x983/0xb10 [ 949.859240][T18583] ret_from_fork_asm+0x1a/0x30 [ 949.860906][T18583] [ 949.861751][T18583] The buggy address belongs to the object at ffff88806c02e8c0 [ 949.861751][T18583] which belongs to the cache skbuff_head_cache of size 240 [ 949.866406][T18583] The buggy address is located 112 bytes inside of [ 949.866406][T18583] freed 240-byte region [ffff88806c02e8c0, ffff88806c02e9b0) [ 949.870869][T18583] [ 949.871692][T18583] The buggy address belongs to the physical page: [ 949.873783][T18583] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6c02e [ 949.876628][T18583] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 949.879397][T18583] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 949.882042][T18583] page_type: f5(slab) [ 949.883378][T18583] raw: 04fff00000000040 ffff888041ac48c0 ffffea0001af8b00 0000000000000002 [ 949.886163][T18583] raw: 0000000000000000 0000000080190019 00000000f5000000 0000000000000000 [ 949.888961][T18583] head: 04fff00000000040 ffff888041ac48c0 ffffea0001af8b00 0000000000000002 [ 949.891837][T18583] head: 0000000000000000 0000000080190019 00000000f5000000 0000000000000000 [ 949.894555][T18583] head: 04fff00000000001 ffffea0001b00b81 00000000ffffffff 00000000ffffffff [ 949.897508][T18583] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 949.900400][T18583] page dumped because: kasan: bad access detected [ 949.902487][T18583] page_owner tracks the page as allocated [ 949.904715][T18583] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 19305, tgid 19298 (syz.3.2447), ts 942460493936, free_ts 942157354788 [ 949.911297][T18583] post_alloc_hook+0x1af/0x220 [ 949.912870][T18583] get_page_from_freelist+0xd0b/0x31a0 [ 949.914627][T18583] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 949.916582][T18583] alloc_pages_mpol+0x1fb/0x550 [ 949.918209][T18583] new_slab+0x2c3/0x430 [ 949.919606][T18583] ___slab_alloc+0xe18/0x1c90 [ 949.921309][T18583] __slab_alloc.constprop.0+0x63/0x110 [ 949.923046][T18583] kmem_cache_alloc_noprof+0x44d/0x770 [ 949.924798][T18583] skb_clone+0x190/0x3f0 [ 949.926184][T18583] ip6_finish_output2+0x13b2/0x1cf0 [ 949.928079][T18583] ip6_fragment+0xbf5/0x27f0 [ 949.929619][T18583] __ip6_finish_output+0x369/0x1010 [ 949.931441][T18583] ip6_output+0x253/0x710 [ 949.932869][T18583] ip6_mr_output+0x233/0x11b0 [ 949.934422][T18583] ip6_local_out+0x2a9/0x4d0 [ 949.935946][T18583] ip6_send_skb+0x112/0x460 [ 949.937419][T18583] page last free pid 19299 tgid 19298 stack trace: [ 949.939471][T18583] __free_frozen_pages+0x7df/0x1170 [ 949.941253][T18583] qlist_free_all+0x4c/0xf0 [ 949.942758][T18583] kasan_quarantine_reduce+0x195/0x1e0 [ 949.944556][T18583] __kasan_slab_alloc+0x69/0x90 [ 949.946166][T18583] kmem_cache_alloc_noprof+0x25e/0x770 [ 949.947984][T18583] ptlock_alloc+0x1f/0x70 [ 949.949414][T18583] pte_alloc_one+0x84/0x3d0 [ 949.950968][T18583] do_fault+0x8b8/0x1ad0 [ 949.952373][T18583] __handle_mm_fault+0x1919/0x2bb0 [ 949.954047][T18583] handle_mm_fault+0x3fe/0xad0 [ 949.955702][T18583] __get_user_pages+0x54e/0x3590 [ 949.957345][T18583] populate_vma_page_range+0x267/0x3f0 [ 949.959031][T18583] __mm_populate+0x1d8/0x380 [ 949.960600][T18583] vm_mmap_pgoff+0x37f/0x470 [ 949.962129][T18583] ksys_mmap_pgoff+0x7d/0x5c0 [ 949.963697][T18583] __do_fast_syscall_32+0xe8/0x680 [ 949.965471][T18583] [ 949.966315][T18583] Memory state around the buggy address: [ 949.968205][T18583] ffff88806c02e800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 949.970854][T18583] ffff88806c02e880: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 949.973464][T18583] >ffff88806c02e900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 949.976066][T18583] ^ [ 949.977900][T18583] ffff88806c02e980: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 949.980569][T18583] ffff88806c02ea00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 949.983179][T18583] ================================================================== [ 949.986272][T11597] usb usb38-port1: attempt power cycle [ 950.025457][T18583] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 950.027908][T18583] CPU: 0 UID: 0 PID: 18583 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 950.031077][T18583] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 950.034575][T18583] Workqueue: events hci_uart_write_work [ 950.036640][T18583] Call Trace: [ 950.037746][T18583] [ 950.038727][T18583] dump_stack_lvl+0x3d/0x1f0 [ 950.040296][T18583] vpanic+0x640/0x6f0 [ 950.041662][T18583] panic+0xca/0xd0 [ 950.043095][T18583] ? __pfx_panic+0x10/0x10 [ 950.044862][T18583] ? hci_uart_write_work+0x82d/0x960 [ 950.046653][T18583] ? preempt_schedule_common+0x44/0xc0 [ 950.048461][T18583] ? preempt_schedule_thunk+0x16/0x30 [ 950.050204][T18583] ? check_panic_on_warn+0x1f/0xb0 [ 950.051910][T18583] check_panic_on_warn+0xab/0xb0 [ 950.053534][T18583] end_report+0x107/0x160 [ 950.054961][T18583] kasan_report+0xee/0x110 [ 950.056691][T18583] ? hci_uart_write_work+0x82d/0x960 [ 950.058511][T18583] hci_uart_write_work+0x82d/0x960 [ 950.060272][T18583] ? __pfx_pty_write+0x10/0x10 [ 950.062189][T18583] process_one_work+0x9ba/0x1b20 [ 950.064285][T18583] ? __pfx_process_one_work+0x10/0x10 [ 950.066519][T18583] ? assign_work+0x1a0/0x250 [ 950.068505][T18583] worker_thread+0x6c8/0xf10 [ 950.070557][T18583] ? __kthread_parkme+0x19e/0x250 [ 950.072803][T18583] ? __pfx_worker_thread+0x10/0x10 [ 950.074988][T18583] kthread+0x3c5/0x780 [ 950.076797][T18583] ? __pfx_kthread+0x10/0x10 [ 950.078838][T18583] ? rcu_is_watching+0x12/0xc0 [ 950.080998][T18583] ? __pfx_kthread+0x10/0x10 [ 950.083064][T18583] ret_from_fork+0x983/0xb10 [ 950.085119][T18583] ? __pfx_ret_from_fork+0x10/0x10 [ 950.087398][T18583] ? native_load_gs_index+0x5b/0xd0 [ 950.089697][T18583] ? __switch_to+0x7af/0x10d0 [ 950.091639][T18583] ? __pfx_kthread+0x10/0x10 [ 950.093575][T18583] ret_from_fork_asm+0x1a/0x30 [ 950.095747][T18583] [ 950.098097][T18583] Kernel Offset: disabled [ 950.100045][T18583] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:13:50 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85301b75 RDI=ffffffff9aed9260 RBP=ffffffff9aed9220 RSP=ffffc900074275a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6336303838386652 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9aed9220 R15=ffffffff85301b10 RIP=ffffffff85301b9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f73c6288 CR3=000000006aa9d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000007ffff RBX=ffff88802b33adc0 RCX=ffffc9002aeab000 RDX=0000000000080000 RSI=ffffffff8b703ab3 RDI=ffff88802b33b728 RBP=ffff88802b33b728 RSP=ffffc90006407558 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff88802b33b728 R13=0000000000000001 R14=ffff88802b33b8f0 R15=000000d738ba4e87 RIP=ffffffff81be6b46 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977fc000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000ffdeffe8 CR3=000000006c0b7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff888024f25ef0 RCX=ffffffff820dc96e RDX=ffff888028bd0000 RSI=0000000000000000 RDI=0000000000000007 RBP=000000002821a067 RSP=ffffc90003467c88 R8 =0000000000000007 R9 =0000000000000000 R10=000000002821a007 R11=ffff888028bd0b30 R12=dffffc0000000000 R13=000000002821a007 R14=ffff888050968c80 R15=0000000000000fe8 RIP=ffffffff81be645b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fedcad6a300 ffffffff 00c00000 GS =0000 ffff8880978fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005577bfb77000 CR3=0000000023d7a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000009ac 0000001800000000 0000000000000000 0000000000000017 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0890030808000888 032208000880033a 00000cd400000012 0000000100000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b0030fffffffff04 09a0031008000998 0301080009900304 0800098803000800 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0980030000000000 0000000000000000 00000001ffffffff ffffffffdf0808e0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300080008d80300 080008d0030fffff ffff0408c0030008 0008b80300080008 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b003004c504701ff fffffffffffffff7 0804800304800408 a0030fffffffff04 ZMM24=991fe52b991fe52b 991fe52b991fe52b 991fe52b991fe52b 991fe52b991fe52b 991fe52b991fe52b 991fe52b991fe52b 991fe52b991fe52b 991fe52b991fe52b ZMM25=c28db0c0c28db0c0 c28db0c0c28db0c0 c28db0c0c28db0c0 c28db0c0c28db0c0 c28db0c0c28db0c0 c28db0c0c28db0c0 c28db0c0c28db0c0 c28db0c0c28db0c0 ZMM26=c102fb23c102fb23 c102fb23c102fb23 c102fb23c102fb23 c102fb23c102fb23 c102fb23c102fb23 c102fb23c102fb23 c102fb23c102fb23 c102fb23c102fb23 ZMM27=409e24f1409e24f1 409e24f1409e24f1 409e24f1409e24f1 409e24f1409e24f1 409e24f1409e24f1 409e24f1409e24f1 409e24f1409e24f1 409e24f1409e24f1 ZMM28=000000400000003f 0000003e0000003d 0000003c0000003b 0000003a00000039 0000003800000037 0000003600000035 0000003400000033 0000003200000031 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=fb1d0000fb1d0000 fb1d0000fb1d0000 fb1d0000fb1d0000 fb1d0000fb1d0000 fb1d0000fb1d0000 fb1d0000fb1d0000 fb1d0000fb1d0000 fb1d0000fb1d0000 info registers vcpu 3 CPU#3 RAX=0000000001428549 RBX=0000000000000003 RCX=ffffffff8b7576d9 RDX=0000000000000000 RSI=ffffffff8daca5cd RDI=ffffffff8bf2b580 RBP=ffffed1003b53000 RSP=ffffc9000048fde8 R8 =0000000000000001 R9 =ffffed10056a673d R10=ffff88802b5339eb R11=ffff88801da98b30 R12=0000000000000003 R13=ffff88801da98000 R14=ffffffff9088e9d0 R15=0000000000000000 RIP=ffffffff8b755dcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f73b7a9c CR3=000000004884e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000