last executing test programs: 13m36.171197011s ago: executing program 2 (id=197): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x8c, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76"]) r3 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a45352, &(0x7f0000000600)={{0x80}, 'port1\x00', 0xc1, 0x10, 0x1, 0xffffe801, 0x3efc, 0x15, 0xff, 0x0, 0x4, 0xf}) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) r4 = socket(0x2d, 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'erspan0\x00', 0x0}) bind$xdp(r4, &(0x7f0000000080)={0x2d, 0x0, r6, 0xa}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x2}, 0x94) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{0x0}], 0x1}, 0x4048043) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 13m34.198939876s ago: executing program 2 (id=199): socket(0x39, 0x3, 0x3a) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r0 = msgget$private(0x0, 0x3ac) msgsnd(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc093bea3ff08298b}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000a5}, 0x800) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) fchdir(r1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x30, r7, 0x505, 0x0, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x30}}, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r9, 0x325, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="796104000000000000007e0000005b64a42f462790968f071fe6aeada1693ad9a69918ecfa63a4850536180dfd35fc84fcfdc985dc"], 0x14}}, 0x0) 13m31.205251628s ago: executing program 2 (id=213): socket(0x39, 0x3, 0x3a) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r0 = msgget$private(0x0, 0x3ac) msgsnd(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc093bea3ff08298b}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000a5}, 0x800) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) fchdir(r1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x30, r7, 0x505, 0x0, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x30}}, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5) sendmsg$NFC_CMD_GET_SE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r9, 0x325, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="796104000000000000007e0000005b64a42f462790968f071fe6aeada1693ad9a69918ecfa63a4850536180dfd35fc84fcfdc985dc"], 0x14}}, 0x0) 13m30.212374257s ago: executing program 2 (id=207): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket(0x15, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) r1 = open(&(0x7f0000000480)='./file0/file0\x00', 0x101002, 0xc8) flock(r1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440)={'#! ', './file0', [{0x20, ')/'}, {0x20, 'pipefs\x00'}, {0x20, '\xe3\xa8\x00'}, {0x20, '#! '}]}, 0x1e) ftruncate(r2, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) execve(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)={[&(0x7f00000005c0)='@@-)\x00\x00-\x00', &(0x7f0000000600)='tmpfs\x00', &(0x7f0000000640)='\x00', &(0x7f0000000680)='pipefs\x00', &(0x7f0000000700)='pipefs\x00', &(0x7f0000000740)='pipefs\x00']}, &(0x7f00000009c0)={[&(0x7f00000007c0)='pipefs\x00', &(0x7f0000000800)=']\x00', &(0x7f0000000840)='\x00', &(0x7f0000000880)='tmpfs\x00', &(0x7f0000000500)='\xe8\xf3i\x00\x00 \xd3\xd5\xcf\x02\x00\xca\xb8\xddD\x04\xc1\x86\xccB\xfe\f\x99un\x8d\x1e\x80\xccL\x9d\x9a\x8e\x1d', &(0x7f00000008c0)='\x16\x88\x00\x00\x00\x00/\x854', &(0x7f0000000980)='\x00m\x00\x00\x00\x00\x00\x96.\xe5\xfe6o\x11\xf7\xe0\x00\x00\x00\x00\x00\xa6\xce\x00\x00\x00', &(0x7f0000000540)='\xe3\xa8\x00']}) r4 = socket(0x11, 0x2, 0x0) setsockopt(r4, 0x107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r3, 0x5) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) 13m30.152917556s ago: executing program 2 (id=208): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x200000000000011, 0x2, 0xd) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000000)=0xfffffff3, 0x4) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)={0x7, [0x8, 0x3, 0x4, 0xce, 0x5, 0x57a, 0xd747]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000001000/0x3000)=nil, r6, 0x2, 0x13, r5, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xf000, 0x3000, 0x9, 0x0, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3c}, {0xdddd1000, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0xf8}, {0x80a0000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x2d00, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_SET_GUEST_DEBUG_x86(r9, 0x4048ae9b, &(0x7f00000002c0)={0x30003, 0x0, {[0x8000000000000000, 0x5, 0x3, 0x65, 0x80000000, 0x8, 0x0, 0x8]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="e904a20000000180c20000e000003190780000000000000000000000000010"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$sock_ifreq(r0, 0x8992, &(0x7f0000000000)={'bond0\x00', @ifru_names='pimreg0\x00'}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7b5, 0x312, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x56a, 0xba, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xb0, 0x30, 0x2, [{{0x9, 0x4, 0x0, 0xe, 0x2, 0x3, 0x1, 0x0, 0x40, {0x9, 0x21, 0x480, 0x0, 0x1, {0x22, 0xa6f}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0x4, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x7, 0xa, 0x7}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x33, 0x6, 0x6, 0x10}, 0x1d, &(0x7f0000000100)={0x5, 0xf, 0x1d, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x88, 0x4, 0x3, 0xffe3, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0xb, 0xf, 0x2}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x410}}]}) 13m29.64524201s ago: executing program 2 (id=211): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = memfd_create(0x0, 0x3) write$binfmt_script(r2, &(0x7f0000019c80)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa6\x12\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\x0f\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd6\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vIwi\xa4BV\xc6\x16\xe2\xef\xbc\xbf\xf706j$\x9f\x82\xd7\xef\xa1\xdf\x8f0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = memfd_create(0x0, 0x3) write$binfmt_script(r2, &(0x7f0000019c80)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa6\x12\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\x0f\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd6\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vIwi\xa4BV\xc6\x16\xe2\xef\xbc\xbf\xf706j$\x9f\x82\xd7\xef\xa1\xdf\x8f0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x40045010, &(0x7f0000000080)=0xd8eb) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, 0x0, 0x20044000) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(0x0, 0x7, 0x220042) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000380)={0x3, r9, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000440)={0x5, r9}) syz_io_uring_setup(0x7a72, &(0x7f0000000480)={0x0, 0x2d12, 0x1000, 0x2, 0x306}, &(0x7f0000000140), &(0x7f0000000280)) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6eb"], 0x10}}, 0x0) 6.995748786s ago: executing program 0 (id=2166): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x82, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x100, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x98}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa7}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) syz_open_dev$usbfs(0x0, 0x76, 0x160341) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r7 = openat$comedi(0xffffff9c, &(0x7f0000000200)='/dev/comedi4\x00', 0x181202, 0x0) ioctl$COMEDI_CMDTEST(r7, 0x8040640a, &(0x7f0000000380)={0x0, 0x20000, 0x10, 0x800, 0x100, 0xa, 0x80, 0x6, 0x7ffffff9, 0x0, 0xffffffff, 0x9c3, &(0x7f0000000240), 0x0, 0x0}) 6.882688806s ago: executing program 1 (id=2167): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x36b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x40045010, &(0x7f0000000080)=0xd8eb) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, 0x0, 0x20044000) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(0x0, 0x7, 0x220042) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000380)={0x3, r9, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000440)={0x5, r9}) syz_io_uring_setup(0x7a72, &(0x7f0000000480)={0x0, 0x2d12, 0x1000, 0x2, 0x306}, &(0x7f0000000140), &(0x7f0000000280)) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6eb"], 0x10}}, 0x0) 6.191035701s ago: executing program 3 (id=2170): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xfffe, r3, 0x0}]) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf) write$UHID_INPUT(r2, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) socket$netlink(0x10, 0x3, 0x15) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) 5.945871448s ago: executing program 1 (id=2171): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x20000000, 0xf}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v1to_da_alloc', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='affs\x00', 0xa08410, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e00)=@newqdisc={0x68, 0x24, 0x200, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x38, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x7fff}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x3}]}}]}, 0x68}}, 0x0) io_uring_setup(0x3eb1, &(0x7f0000000080)={0x0, 0x8003fde, 0xc00, 0x10, 0x147}) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001cc0), 0x20000000000000ff, 0x0, 0x7f) 5.312031926s ago: executing program 3 (id=2172): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000080)=0xd8eb) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r3 = syz_open_dev$dri(0x0, 0x7, 0x220042) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000380)={0x3, r6, r5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000440)={0x5, r6}) syz_io_uring_setup(0x7a72, &(0x7f0000000480)={0x0, 0x2d12, 0x1000, 0x2, 0x306}, &(0x7f0000000140), &(0x7f0000000280)) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$key(0xf, 0x3, 0x2) 5.183544313s ago: executing program 0 (id=2173): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_open_pts(r4, 0x101000) ioctl$KDDISABIO(r6, 0x4b37) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff0200000000000000000000000000012c"], 0x0) 4.992479578s ago: executing program 1 (id=2174): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x83, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x46) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/45, 0x2d) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x5, 0x0, 0x5, 0x4}}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x415a, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000000010073797a300000000048000000030a010100000000000000000100000008000b400000000014000480080002400000000008000140000000000900010073797a31000000000900030073797a3000000000140000001000010000000000000000000000000a"], 0x90}}, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) process_madvise(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000400)="8524d5e68c5f73d7b65b2fa844745f0ba3", 0x11}], 0x1, 0x15, 0x0) sendmsg$NL80211_CMD_START_NAN(r6, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4) lstat64(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000a00)) 4.725776368s ago: executing program 4 (id=2175): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x40045010, &(0x7f0000000080)=0xd8eb) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, 0x0, 0x20044000) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(0x0, 0x7, 0x220042) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000380)={0x3, r9, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000440)={0x5, r9}) syz_io_uring_setup(0x7a72, &(0x7f0000000480)={0x0, 0x2d12, 0x1000, 0x2, 0x306}, &(0x7f0000000140), &(0x7f0000000280)) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6eb"], 0x10}}, 0x0) 4.444918403s ago: executing program 3 (id=2176): bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000000)=@base={0x18, 0x4, 0x2, 0x0, 0x201}, 0x48) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$iommufd(0xffffff9c, &(0x7f0000000080), 0x4000, 0x0) 3.835268161s ago: executing program 4 (id=2177): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x40045010, &(0x7f0000000080)=0xd8eb) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, 0x0, 0x20044000) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(0x0, 0x7, 0x220042) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000380)={0x3, r9, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000440)={0x5, r9}) syz_io_uring_setup(0x7a72, &(0x7f0000000480)={0x0, 0x2d12, 0x1000, 0x2, 0x306}, &(0x7f0000000140), &(0x7f0000000280)) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6eb"], 0x10}}, 0x0) 3.744958523s ago: executing program 1 (id=2178): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_open_pts(r4, 0x101000) ioctl$KDDISABIO(r6, 0x4b37) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff0200000000000000000000000000012c"], 0x0) 3.505729927s ago: executing program 3 (id=2179): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_open_pts(r4, 0x101000) ioctl$KDDISABIO(r6, 0x4b37) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff0200000000000000000000000000012c"], 0x0) 2.965831503s ago: executing program 4 (id=2180): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_setlink={0x38, 0x13, 0xa2f, 0x70bd27, 0x0, {0x7, 0x0, 0x68, r2, 0x900, 0x62010}, [@IFLA_LINKINFO={0x18, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x4, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}]}}}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x110) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$key(0xf, 0x3, 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r5, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) syz_io_uring_setup(0x1765, &(0x7f0000000180)={0x0, 0x5792, 0x4, 0x2, 0x112}, &(0x7f0000000100), &(0x7f0000000240)) r8 = userfaultfd(0x80001) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) ioctl$UFFDIO_ZEROPAGE(r8, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) 2.755218945s ago: executing program 0 (id=2181): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = gettid() ptrace$ARCH_SHSTK_STATUS(0x1e, r2, &(0x7f0000000740), 0x5005) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x5, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048880}, 0x10) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000840), 0x101040, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x4c4201, 0x3c) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x8, 0xff49, 0x0, 0x86, 0xb7, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000006c0)={0x6, &(0x7f0000000680)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r5, 0xc0286429, &(0x7f0000000800)={r8, 0x6, &(0x7f0000000700)=[0x0, 0x0, 0xfffffc01, 0x7, 0x2, 0x100], &(0x7f0000000740), 0x63, 0x7, 0x400, &(0x7f0000000780)=[0x401, 0x9, 0x8, 0x8, 0x40, 0x9, 0x2], &(0x7f00000007c0)=[0x3]}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r4, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) 2.694322115s ago: executing program 4 (id=2182): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r0, 0x0, 0x0, 0x40, 0x0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000140)={0x74, 0x0, 0x90accf24a4511d13}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x2090}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @local}]}}}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x44}, 0x1, 0x2}, 0x4050) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xff}, {0x6, 0x0, 0x0, 0x6}]}, 0x8) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x20040000) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r9}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x1, 0x2ff}, &(0x7f0000000140), &(0x7f0000000280)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r11, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r11, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r11, &(0x7f0000000100)={0x2, 0xfc}, 0x2) sendmsg$NFNL_MSG_CTHELPER_NEW(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x70, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7ff}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x70}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.840562961s ago: executing program 0 (id=2183): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x20000000, 0xf}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v1to_da_alloc', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='affs\x00', 0xa08410, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e00)=@newqdisc={0x68, 0x24, 0x200, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x38, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x7fff}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x3}]}}]}, 0x68}}, 0x0) io_uring_setup(0x3eb1, &(0x7f0000000080)={0x0, 0x8003fde, 0xc00, 0x10, 0x147}) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001cc0), 0x20000000000000ff, 0x0, 0x7f) 1.840249256s ago: executing program 4 (id=2184): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f00000001c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r4, 0x1) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000007400", @ANYRES32=r7, @ANYBLOB="00000000031201001c0012800b00010062726964676500000c00028006002700200000001f8ad0ccb3c6833b374763075ae9833f6eab17"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) close(0xffffffffffffffff) openat$random(0xffffff9c, &(0x7f0000000300), 0x28002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.244681872s ago: executing program 1 (id=2185): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x36b, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x40045010, &(0x7f0000000080)=0xd8eb) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, 0x0, 0x20044000) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(0x0, 0x7, 0x220042) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000380)={0x3, r9, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000440)={0x5, r9}) syz_io_uring_setup(0x7a72, &(0x7f0000000480)={0x0, 0x2d12, 0x1000, 0x2, 0x306}, &(0x7f0000000140), &(0x7f0000000280)) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6eb"], 0x10}}, 0x0) 1.192254772s ago: executing program 3 (id=2186): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x83, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x46) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/45, 0x2d) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x5, 0x0, 0x5, 0x4}}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x415a, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000000010073797a300000000048000000030a010100000000000000000100000008000b400000000014000480080002400000000008000140000000000900010073797a31000000000900030073797a3000000000140000001000010000000000000000000000000a"], 0x90}}, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) process_madvise(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000400)="8524d5e68c5f73d7b65b2fa844745f0ba3", 0x11}], 0x1, 0x15, 0x0) sendmsg$NL80211_CMD_START_NAN(r6, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4) lstat64(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000a00)) 895.862347ms ago: executing program 0 (id=2187): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_open_pts(r4, 0x101000) ioctl$KDDISABIO(r6, 0x4b37) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff0200000000000000000000000000012c"], 0x0) 233.985969ms ago: executing program 1 (id=2188): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_open_pts(r4, 0x101000) ioctl$KDDISABIO(r6, 0x4b37) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff0200000000000000000000000000012c"], 0x0) 232.119857ms ago: executing program 3 (id=2189): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_open_pts(r4, 0x101000) ioctl$KDDISABIO(r6, 0x4b37) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff0200000000000000000000000000012c"], 0x0) 0s ago: executing program 4 (id=2190): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r0, 0x0, 0x0, 0x40, 0x0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000140)={0x74, 0x0, 0x90accf24a4511d13}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x2090}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @local}]}}}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x44}, 0x1, 0x2}, 0x4050) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xff}, {0x6, 0x0, 0x0, 0x6}]}, 0x8) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x20040000) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r9}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x1, 0x2ff}, &(0x7f0000000140), &(0x7f0000000280)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r11, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r11, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r11, &(0x7f0000000100)={0x2, 0xfc}, 0x2) sendmsg$NFNL_MSG_CTHELPER_NEW(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x70, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7ff}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x70}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): r read/8, error -110 [ 702.810764][T13630] mkiss: ax0: crc mode is auto. [ 703.015406][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 703.026211][ T6039] usb usb46-port1: attempt power cycle [ 703.380956][T13636] netlink: 'syz.4.1388': attribute type 10 has an invalid length. [ 703.390330][T13636] netlink: 'syz.4.1388': attribute type 10 has an invalid length. [ 703.394651][T13636] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1388'. [ 703.403624][T13636] 8021q: adding VLAN 0 to HW filter on device team0 [ 703.605463][ T916] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 703.610160][ T6039] usb usb46-port1: unable to enumerate USB device [ 703.765376][ T916] usb 8-1: Using ep0 maxpacket: 8 [ 703.793941][T13646] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1391'. [ 703.956627][ T916] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 703.959374][ T916] usb 8-1: config 0 has no interface number 0 [ 703.961533][ T916] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 703.976684][ T916] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 703.980831][ T916] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 703.984524][ T916] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 704.031911][ T916] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 704.039828][ T916] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.044473][ T916] usb 8-1: config 0 descriptor?? [ 704.178105][ T916] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 704.370080][T13651] udevd[13651]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 704.389631][T13651] udevd[13651]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 704.595678][T13662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1392'. [ 704.669199][T13661] netlink: 'syz.1.1393': attribute type 1 has an invalid length. [ 704.679122][T13661] netlink: 'syz.1.1393': attribute type 2 has an invalid length. [ 705.616163][T13676] netlink: 'syz.4.1397': attribute type 1 has an invalid length. [ 705.619719][T13676] netlink: 'syz.4.1397': attribute type 2 has an invalid length. [ 705.688209][T13678] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 705.690468][T13678] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 705.694088][T13678] vhci_hcd vhci_hcd.0: Device attached [ 705.965725][ T916] usb 38-1: SetAddress Request (59) to port 0 [ 705.968535][ T916] usb 38-1: new SuperSpeed USB device number 59 using vhci_hcd [ 706.073361][ T6350] usb 8-1: USB disconnect, device number 13 [ 706.083709][ T6350] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 706.158178][T13686] netlink: 'syz.3.1399': attribute type 1 has an invalid length. [ 706.161918][T13686] netlink: 'syz.3.1399': attribute type 2 has an invalid length. [ 706.348854][T13679] vhci_hcd: connection reset by peer [ 706.352077][ T7551] vhci_hcd vhci_hcd.0: stop threads [ 706.354698][ T7551] vhci_hcd vhci_hcd.0: release socket [ 706.357479][ T7551] vhci_hcd vhci_hcd.0: disconnect device [ 706.447741][T13693] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 706.450658][T13693] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 706.465973][T13693] vhci_hcd vhci_hcd.0: Device attached [ 706.615428][ T6008] usb 44-1: device descriptor read/8, error -110 [ 706.755400][ T6039] usb 40-1: SetAddress Request (62) to port 0 [ 706.757535][ T6039] usb 40-1: new SuperSpeed USB device number 62 using vhci_hcd [ 707.016316][ T6008] usb usb44-port1: attempt power cycle [ 707.138443][T13694] vhci_hcd: connection reset by peer [ 707.142954][ T7449] vhci_hcd vhci_hcd.1: stop threads [ 707.148526][ T7449] vhci_hcd vhci_hcd.1: release socket [ 707.155409][ T7449] vhci_hcd vhci_hcd.1: disconnect device [ 707.442126][T13705] netlink: 'syz.3.1403': attribute type 1 has an invalid length. [ 707.444913][T13705] netlink: 'syz.3.1403': attribute type 2 has an invalid length. [ 707.957260][ T6008] usb usb44-port1: unable to enumerate USB device [ 708.215358][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 708.215387][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 708.483297][T13724] misc userio: No port type given on /dev/userio [ 708.486171][T13724] misc userio: The device must be registered before sending interrupts [ 708.489610][T13724] validate_nla: 2 callbacks suppressed [ 708.489620][T13724] netlink: 'syz.4.1407': attribute type 1 has an invalid length. [ 708.494144][T13724] netlink: 'syz.4.1407': attribute type 2 has an invalid length. [ 708.625912][T13726] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 708.628368][T13726] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 708.661706][T13726] vhci_hcd vhci_hcd.0: Device attached [ 708.838134][T13730] netlink: 'syz.4.1409': attribute type 1 has an invalid length. [ 708.842335][T13730] netlink: 'syz.4.1409': attribute type 2 has an invalid length. [ 708.945342][ T6008] usb 44-1: SetAddress Request (62) to port 0 [ 708.947629][ T6008] usb 44-1: new SuperSpeed USB device number 62 using vhci_hcd [ 709.227215][T13727] vhci_hcd: connection reset by peer [ 709.238496][ T12] vhci_hcd vhci_hcd.3: stop threads [ 709.240761][ T12] vhci_hcd vhci_hcd.3: release socket [ 709.242795][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 709.398513][T13737] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 709.401654][T13737] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 709.425671][T13737] vhci_hcd vhci_hcd.0: Device attached [ 709.896840][T13738] vhci_hcd: connection closed [ 709.897090][ T1182] vhci_hcd vhci_hcd.1: stop threads [ 709.902616][ T1182] vhci_hcd vhci_hcd.1: release socket [ 709.905697][ T1182] vhci_hcd vhci_hcd.1: disconnect device [ 710.386827][T13750] mkiss: ax0: crc mode is auto. [ 710.587681][T13754] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 710.587715][T13754] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 710.587997][T13754] vhci_hcd vhci_hcd.0: Device attached [ 711.134251][T13764] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 711.137080][T13764] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 711.143614][T13764] vhci_hcd vhci_hcd.0: Device attached [ 711.197029][T13755] vhci_hcd: connection reset by peer [ 711.200525][ T1242] vhci_hcd vhci_hcd.0: stop threads [ 711.204351][ T1242] vhci_hcd vhci_hcd.0: release socket [ 711.207790][ T1242] vhci_hcd vhci_hcd.0: disconnect device [ 711.207815][ T916] usb 38-1: device descriptor read/8, error -110 [ 711.541619][T13774] misc userio: No port type given on /dev/userio [ 711.544132][T13774] misc userio: The device must be registered before sending interrupts [ 711.547569][T13774] netlink: 'syz.4.1417': attribute type 1 has an invalid length. [ 711.550348][T13774] netlink: 'syz.4.1417': attribute type 2 has an invalid length. [ 711.595770][ T916] usb usb38-port1: attempt power cycle [ 711.767259][T13765] vhci_hcd: connection closed [ 711.767793][ T7449] vhci_hcd vhci_hcd.1: stop threads [ 711.772253][ T7449] vhci_hcd vhci_hcd.1: release socket [ 711.774740][ T7449] vhci_hcd vhci_hcd.1: disconnect device [ 711.830326][ T6039] usb 40-1: device descriptor read/8, error -110 [ 712.201199][ T916] usb usb38-port1: unable to enumerate USB device [ 712.227460][ T6039] usb usb40-port1: attempt power cycle [ 712.338624][T13781] netlink: 'syz.0.1419': attribute type 1 has an invalid length. [ 712.349792][T13781] netlink: 'syz.0.1419': attribute type 2 has an invalid length. [ 712.819346][ T6039] usb usb40-port1: unable to enumerate USB device [ 712.822954][T13792] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 712.825367][T13792] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 712.862342][T13792] vhci_hcd vhci_hcd.0: Device attached [ 713.152215][T11021] usb 46-1: SetAddress Request (62) to port 0 [ 713.154434][T11021] usb 46-1: new SuperSpeed USB device number 62 using vhci_hcd [ 713.305325][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 713.374772][T13793] vhci_hcd: connection reset by peer [ 713.378338][ T1242] vhci_hcd vhci_hcd.4: stop threads [ 713.381298][ T1242] vhci_hcd vhci_hcd.4: release socket [ 713.384784][ T1242] vhci_hcd vhci_hcd.4: disconnect device [ 713.665106][T13802] netlink: 'syz.0.1424': attribute type 1 has an invalid length. [ 713.669795][T13802] netlink: 'syz.0.1424': attribute type 2 has an invalid length. [ 713.975344][ T6008] usb 44-1: device descriptor read/8, error -110 [ 714.317494][T13811] misc userio: No port type given on /dev/userio [ 714.334577][T13811] misc userio: The device must be registered before sending interrupts [ 714.339737][T13811] netlink: 'syz.4.1426': attribute type 1 has an invalid length. [ 714.343459][T13811] netlink: 'syz.4.1426': attribute type 2 has an invalid length. [ 714.366137][ T6008] usb usb44-port1: attempt power cycle [ 714.751962][T13822] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 714.754688][T13822] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 714.785453][T13822] vhci_hcd vhci_hcd.0: Device attached [ 715.048188][ T6008] usb 44-1: SetAddress Request (65) to port 0 [ 715.050437][ T6008] usb 44-1: new SuperSpeed USB device number 65 using vhci_hcd [ 715.149321][T13829] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 715.151805][T13829] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 715.179876][T13829] vhci_hcd vhci_hcd.0: Device attached [ 715.479995][T13834] netlink: 'syz.0.1430': attribute type 1 has an invalid length. [ 715.480027][T13834] netlink: 'syz.0.1430': attribute type 2 has an invalid length. [ 715.564923][ T6927] usb 40-1: SetAddress Request (66) to port 0 [ 715.564961][ T6927] usb 40-1: new SuperSpeed USB device number 66 using vhci_hcd [ 715.686600][T13823] vhci_hcd: connection reset by peer [ 715.689811][ T1182] vhci_hcd vhci_hcd.3: stop threads [ 715.691972][ T1182] vhci_hcd vhci_hcd.3: release socket [ 715.694447][ T1182] vhci_hcd vhci_hcd.3: disconnect device [ 715.928746][T13845] netlink: 'syz.4.1433': attribute type 1 has an invalid length. [ 715.932087][T13845] netlink: 'syz.4.1433': attribute type 2 has an invalid length. [ 716.001956][T13830] vhci_hcd: connection reset by peer [ 716.004896][ T172] vhci_hcd vhci_hcd.1: stop threads [ 716.007695][ T172] vhci_hcd vhci_hcd.1: release socket [ 716.010835][ T172] vhci_hcd vhci_hcd.1: disconnect device [ 716.137811][T13848] qrtr: Invalid version 0 [ 717.146517][T13855] netlink: 'syz.3.1435': attribute type 30 has an invalid length. [ 717.244738][T13856] netlink: 'syz.3.1435': attribute type 30 has an invalid length. [ 717.771745][T13863] misc userio: No port type given on /dev/userio [ 717.774693][T13863] misc userio: The device must be registered before sending interrupts [ 718.226750][T11021] usb 46-1: device descriptor read/8, error -110 [ 718.491918][T13878] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 718.494537][T13878] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 718.507305][T13878] vhci_hcd vhci_hcd.0: Device attached [ 718.669913][T13879] vhci_hcd: connection closed [ 718.688725][T13882] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 718.694381][T13882] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 718.735430][T13882] vhci_hcd vhci_hcd.0: Device attached [ 718.738438][T11021] usb usb46-port1: attempt power cycle [ 718.853602][ T12] vhci_hcd vhci_hcd.4: stop threads [ 718.853628][ T12] vhci_hcd vhci_hcd.4: release socket [ 718.853716][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 718.915541][ T10] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 718.915600][ T10] usb 45-1: enqueue for inactive port 0 [ 718.985406][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 719.473123][T13883] vhci_hcd: connection closed [ 719.474115][ T1242] vhci_hcd vhci_hcd.3: stop threads [ 719.480679][ T1242] vhci_hcd vhci_hcd.3: release socket [ 719.483570][ T1242] vhci_hcd vhci_hcd.3: disconnect device [ 719.866665][T13897] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 719.869516][T13897] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 719.873663][T13897] vhci_hcd vhci_hcd.0: Device attached [ 720.115524][T11021] usb 46-1: SetAddress Request (64) to port 0 [ 720.119228][T11021] usb 46-1: new SuperSpeed USB device number 64 using vhci_hcd [ 720.146658][ T6008] usb 44-1: device descriptor read/8, error -110 [ 720.271453][ T6008] usb usb44-port1: unable to enumerate USB device [ 720.626309][ T6927] usb 40-1: device descriptor read/8, error -110 [ 721.065081][ T6927] usb usb40-port1: attempt power cycle [ 721.148365][T13913] qrtr: Invalid version 0 [ 721.965497][T13898] vhci_hcd: connection reset by peer [ 721.970144][ T1242] vhci_hcd vhci_hcd.4: stop threads [ 721.973104][ T1242] vhci_hcd vhci_hcd.4: release socket [ 721.976626][ T1242] vhci_hcd vhci_hcd.4: disconnect device [ 722.246840][ T6927] usb usb40-port1: unable to enumerate USB device [ 722.913169][T13926] validate_nla: 4 callbacks suppressed [ 722.913183][T13926] netlink: 'syz.1.1451': attribute type 1 has an invalid length. [ 722.918911][T13926] netlink: 'syz.1.1451': attribute type 2 has an invalid length. [ 722.947828][T13929] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 722.950136][T13929] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 722.954145][T13929] vhci_hcd vhci_hcd.0: Device attached [ 723.048015][T13932] mkiss: ax0: crc mode is auto. [ 723.566823][T13930] vhci_hcd: connection closed [ 723.575550][ T7551] vhci_hcd vhci_hcd.4: stop threads [ 723.579398][ T7551] vhci_hcd vhci_hcd.4: release socket [ 723.581226][ T7551] vhci_hcd vhci_hcd.4: disconnect device [ 724.135409][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 724.135630][ T5942] Bluetooth: hci4: command 0x1003 tx timeout [ 724.575022][T13952] netlink: 'syz.4.1456': attribute type 1 has an invalid length. [ 724.579430][T13952] netlink: 'syz.4.1456': attribute type 2 has an invalid length. [ 725.240919][T11021] usb 46-1: device descriptor read/8, error -110 [ 725.395613][T13961] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 725.398402][T13961] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 725.402394][T13961] vhci_hcd vhci_hcd.0: Device attached [ 725.415483][ T5955] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 725.415584][ T5942] Bluetooth: hci5: command 0x1003 tx timeout [ 725.476324][T11021] usb 46-1: SetAddress Request (65) to port 0 [ 725.478412][T11021] usb 46-1: new SuperSpeed USB device number 65 using vhci_hcd [ 725.883679][T13970] netlink: 'syz.0.1460': attribute type 1 has an invalid length. [ 725.887320][T13970] netlink: 'syz.0.1460': attribute type 2 has an invalid length. [ 726.033711][T13962] vhci_hcd: connection reset by peer [ 726.036489][ T1242] vhci_hcd vhci_hcd.4: stop threads [ 726.038643][ T1242] vhci_hcd vhci_hcd.4: release socket [ 726.041094][ T1242] vhci_hcd vhci_hcd.4: disconnect device [ 726.536586][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 726.536669][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 726.601979][T13979] mkiss: ax0: crc mode is auto. [ 727.106489][T13983] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 727.109460][T13983] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 727.121795][T13983] vhci_hcd vhci_hcd.0: Device attached [ 727.385423][ T54] usb 44-1: SetAddress Request (66) to port 0 [ 727.387949][ T54] usb 44-1: new SuperSpeed USB device number 66 using vhci_hcd [ 727.715451][T13994] netlink: 'syz.1.1466': attribute type 1 has an invalid length. [ 727.725514][T13994] netlink: 'syz.1.1466': attribute type 2 has an invalid length. [ 727.754052][T13984] vhci_hcd: connection reset by peer [ 727.757925][ T92] vhci_hcd vhci_hcd.3: stop threads [ 727.759885][ T92] vhci_hcd vhci_hcd.3: release socket [ 727.765682][ T92] vhci_hcd vhci_hcd.3: disconnect device [ 727.795145][T13997] mkiss: ax0: crc mode is auto. [ 730.375486][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 730.541591][T11021] usb 46-1: device descriptor read/8, error -110 [ 730.686042][T11021] usb usb46-port1: unable to enumerate USB device [ 730.802485][T14036] mkiss: ax0: crc mode is auto. [ 731.183570][T14038] netlink: 'syz.1.1475': attribute type 1 has an invalid length. [ 731.187765][T14038] netlink: 'syz.1.1475': attribute type 2 has an invalid length. [ 731.332830][T14042] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1476'. [ 731.487346][T13554] udevd[13554]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 731.497759][T13651] udevd[13651]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 731.851859][T14056] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1478'. [ 731.869997][T14056] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1478'. [ 731.939213][T14057] mkiss: ax0: crc mode is auto. [ 731.973448][T14056] .`: entered promiscuous mode [ 732.027202][T14056] .`: left promiscuous mode [ 732.135323][ T5955] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 732.135672][ T5953] Bluetooth: hci5: command 0x1003 tx timeout [ 732.455358][ T54] usb 44-1: device descriptor read/8, error -110 [ 732.672080][T14068] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 732.674687][T14068] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 732.677781][T14068] vhci_hcd vhci_hcd.0: Device attached [ 732.764537][T14074] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 732.766826][T14074] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 732.783043][T14074] vhci_hcd vhci_hcd.0: Device attached [ 732.838370][ T40] audit: type=1400 audit(1767172181.997:830): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=14065 comm="syz.1.1481" [ 732.857249][ T54] usb usb44-port1: attempt power cycle [ 732.965357][ T916] usb 38-1: SetAddress Request (63) to port 0 [ 732.969592][ T916] usb 38-1: new SuperSpeed USB device number 63 using vhci_hcd [ 733.055517][ T6927] usb 40-1: SetAddress Request (70) to port 0 [ 733.057752][ T6927] usb 40-1: new SuperSpeed USB device number 70 using vhci_hcd [ 733.425971][ T54] usb usb44-port1: unable to enumerate USB device [ 733.561101][T14069] vhci_hcd: connection reset by peer [ 733.568923][ T3733] vhci_hcd vhci_hcd.0: stop threads [ 733.571974][T14075] vhci_hcd: connection reset by peer [ 733.572636][ T3733] vhci_hcd vhci_hcd.0: release socket [ 733.578030][ T3733] vhci_hcd vhci_hcd.0: disconnect device [ 733.580791][ T3733] vhci_hcd vhci_hcd.1: stop threads [ 733.583389][ T3733] vhci_hcd vhci_hcd.1: release socket [ 733.586707][ T3733] vhci_hcd vhci_hcd.1: disconnect device [ 735.395788][T14097] netlink: 'syz.4.1485': attribute type 30 has an invalid length. [ 735.416728][T14095] batman_adv: batadv0: Adding interface: gretap1 [ 735.419076][T14095] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.428259][T14095] batman_adv: batadv0: Interface activated: gretap1 [ 735.475365][T14098] netlink: 'syz.4.1485': attribute type 30 has an invalid length. [ 736.431699][T14085] overlayfs: missing 'lowerdir' [ 736.478182][T14085] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 736.492846][T14085] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 736.496909][T14085] overlayfs: failed to look up (tracing) for ino (-66) [ 736.959106][T14108] netlink: 'syz.0.1487': attribute type 1 has an invalid length. [ 736.961758][T14108] netlink: 'syz.0.1487': attribute type 2 has an invalid length. [ 738.055690][ T916] usb 38-1: device descriptor read/8, error -110 [ 738.135523][ T6927] usb 40-1: device descriptor read/8, error -110 [ 738.143648][T14133] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 738.146594][T14133] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 738.165864][T14133] vhci_hcd vhci_hcd.0: Device attached [ 738.435434][ T6927] usb 40-1: SetAddress Request (71) to port 0 [ 738.437917][ T6927] usb 40-1: new SuperSpeed USB device number 71 using vhci_hcd [ 738.456031][ T916] usb usb38-port1: attempt power cycle [ 738.706406][T14134] vhci_hcd: connection reset by peer [ 738.715680][ T172] vhci_hcd vhci_hcd.1: stop threads [ 738.717451][ T172] vhci_hcd vhci_hcd.1: release socket [ 738.719374][ T172] vhci_hcd vhci_hcd.1: disconnect device [ 739.009714][T14143] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 739.012228][T14143] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 739.015463][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 739.025058][T14143] vhci_hcd vhci_hcd.0: Device attached [ 739.087992][T14146] mkiss: ax0: crc mode is auto. [ 739.106855][ T916] usb 38-1: SetAddress Request (66) to port 0 [ 739.117682][ T916] usb 38-1: new SuperSpeed USB device number 66 using vhci_hcd [ 739.451811][T14153] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 739.454997][T14153] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 739.491547][T14153] vhci_hcd vhci_hcd.0: Device attached [ 739.738787][T14144] vhci_hcd: connection reset by peer [ 739.741096][ T7551] vhci_hcd vhci_hcd.0: stop threads [ 739.743612][ T7551] vhci_hcd vhci_hcd.0: release socket [ 739.747376][ T7551] vhci_hcd vhci_hcd.0: disconnect device [ 739.775568][ T6039] usb 44-1: SetAddress Request (70) to port 0 [ 739.777836][ T6039] usb 44-1: new SuperSpeed USB device number 70 using vhci_hcd [ 740.006375][T14154] vhci_hcd: connection reset by peer [ 740.013939][ T7551] vhci_hcd vhci_hcd.3: stop threads [ 740.016935][ T7551] vhci_hcd vhci_hcd.3: release socket [ 740.019021][ T7551] vhci_hcd vhci_hcd.3: disconnect device [ 740.172192][T14164] overlayfs: missing 'lowerdir' [ 740.183975][T14164] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 740.245920][T14164] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 740.249473][T14164] overlayfs: failed to look up (tracing) for ino (-66) [ 742.149593][T14174] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 742.152854][T14174] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 742.196142][T14174] vhci_hcd vhci_hcd.0: Device attached [ 742.699662][ T6302] usb 46-1: SetAddress Request (66) to port 0 [ 742.705347][ T6302] usb 46-1: new SuperSpeed USB device number 66 using vhci_hcd [ 742.718465][T14175] vhci_hcd: connection closed [ 742.718806][ T92] vhci_hcd vhci_hcd.4: stop threads [ 742.722620][ T92] vhci_hcd vhci_hcd.4: release socket [ 742.724790][ T92] vhci_hcd vhci_hcd.4: disconnect device [ 743.068885][T14187] netlink: 'syz.3.1505': attribute type 1 has an invalid length. [ 743.072550][T14187] netlink: 'syz.3.1505': attribute type 2 has an invalid length. [ 743.280753][T14190] misc userio: No port type given on /dev/userio [ 743.283429][T14190] misc userio: The device must be registered before sending interrupts [ 743.286850][T14190] netlink: 'syz.1.1506': attribute type 1 has an invalid length. [ 743.289609][T14190] netlink: 'syz.1.1506': attribute type 2 has an invalid length. [ 743.505386][ T6927] usb 40-1: device descriptor read/8, error -110 [ 743.616211][ T6927] usb usb40-port1: attempt power cycle [ 743.685001][T14199] random: crng reseeded on system resumption [ 743.763534][T14199] loop7: detected capacity change from 0 to 16384 [ 743.891651][T14203] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 743.894376][T14203] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 743.972879][T14203] vhci_hcd vhci_hcd.0: Device attached [ 743.995746][ T6927] usb 40-1: SetAddress Request (72) to port 0 [ 743.998861][ T6927] usb 40-1: new SuperSpeed USB device number 72 using vhci_hcd [ 744.235397][ T916] usb 38-1: device descriptor read/8, error -110 [ 744.369176][ T916] usb usb38-port1: unable to enumerate USB device [ 744.394539][T14210] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 744.398005][T14210] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 744.555823][T14210] vhci_hcd vhci_hcd.0: Device attached [ 744.613790][T14204] vhci_hcd: connection reset by peer [ 744.616265][ T172] vhci_hcd vhci_hcd.1: stop threads [ 744.618822][ T172] vhci_hcd vhci_hcd.1: release socket [ 744.623376][ T172] vhci_hcd vhci_hcd.1: disconnect device [ 744.873893][T14216] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 744.876973][T14216] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 745.077841][T14216] vhci_hcd vhci_hcd.0: Device attached [ 745.119984][T14223] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1510'. [ 745.375572][ T6350] usb 38-1: SetAddress Request (67) to port 0 [ 745.375616][ T6350] usb 38-1: new SuperSpeed USB device number 67 using vhci_hcd [ 745.391593][T13554] udevd[13554]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 745.394638][T13651] udevd[13651]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 745.803469][T14217] vhci_hcd: connection reset by peer [ 745.812314][ T172] vhci_hcd vhci_hcd.0: stop threads [ 745.815166][ T172] vhci_hcd vhci_hcd.0: release socket [ 745.856677][ T172] vhci_hcd vhci_hcd.0: disconnect device [ 746.693825][T14211] vhci_hcd: connection reset by peer [ 746.745546][ T12] vhci_hcd vhci_hcd.3: stop threads [ 746.747768][ T12] vhci_hcd vhci_hcd.3: release socket [ 746.749831][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 746.749843][ T6039] usb 44-1: device descriptor read/8, error -110 [ 747.160434][ T6039] usb usb44-port1: attempt power cycle [ 747.173813][T14245] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 747.176775][T14245] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 747.199449][T14245] vhci_hcd vhci_hcd.0: Device attached [ 747.443717][T14246] vhci_hcd: connection reset by peer [ 747.446215][ T12] vhci_hcd vhci_hcd.4: stop threads [ 747.448143][ T12] vhci_hcd vhci_hcd.4: release socket [ 747.452073][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 747.602459][T14260] netlink: 'syz.3.1519': attribute type 1 has an invalid length. [ 747.606032][T14260] netlink: 'syz.3.1519': attribute type 2 has an invalid length. [ 747.735366][ T6302] usb 46-1: device descriptor read/8, error -110 [ 747.736337][ T6039] usb usb44-port1: unable to enumerate USB device [ 748.007832][T14259] binder: 14253:14259 ioctl 0 80000040 returned -22 [ 748.078782][T14270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1514'. [ 748.166564][ T40] audit: type=1326 audit(1767172197.297:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14264 comm="syz.3.1520" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff4579 code=0x0 [ 748.200499][ T6302] usb usb46-port1: attempt power cycle [ 748.465126][T14274] netlink: 'syz.0.1522': attribute type 1 has an invalid length. [ 748.468671][T14274] netlink: 'syz.0.1522': attribute type 2 has an invalid length. [ 748.593417][T14277] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 748.601181][T14277] netlink: 'syz.4.1523': attribute type 10 has an invalid length. [ 748.805833][ T6302] usb usb46-port1: unable to enumerate USB device [ 748.968014][T14287] mkiss: ax0: crc mode is auto. [ 749.098708][T14292] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 749.101775][T14292] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 749.110305][T14292] vhci_hcd vhci_hcd.0: Device attached [ 749.115940][ T6927] usb 40-1: device descriptor read/8, error -110 [ 749.233632][T14299] netlink: 'syz.3.1528': attribute type 1 has an invalid length. [ 749.237668][T14299] netlink: 'syz.3.1528': attribute type 2 has an invalid length. [ 749.385460][ T916] usb 46-1: SetAddress Request (70) to port 0 [ 749.388824][ T916] usb 46-1: new SuperSpeed USB device number 70 using vhci_hcd [ 749.529645][ T6927] usb usb40-port1: unable to enumerate USB device [ 749.670960][T14304] netlink: 'syz.3.1529': attribute type 1 has an invalid length. [ 749.674467][T14304] netlink: 'syz.3.1529': attribute type 2 has an invalid length. [ 749.843876][T14293] vhci_hcd: connection reset by peer [ 749.846922][ T7551] vhci_hcd vhci_hcd.4: stop threads [ 749.849484][ T7551] vhci_hcd vhci_hcd.4: release socket [ 749.852110][ T7551] vhci_hcd vhci_hcd.4: disconnect device [ 750.108581][T14309] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 750.111623][T14309] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 750.134696][T14309] vhci_hcd vhci_hcd.0: Device attached [ 750.876599][T14310] vhci_hcd: connection reset by peer [ 750.887550][ T12] vhci_hcd vhci_hcd.0: stop threads [ 750.890124][ T12] vhci_hcd vhci_hcd.0: release socket [ 750.892784][ T6350] usb 38-1: device descriptor read/8, error -110 [ 750.905306][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 751.020189][T14326] netlink: 'syz.4.1534': attribute type 1 has an invalid length. [ 751.022929][T14326] netlink: 'syz.4.1534': attribute type 2 has an invalid length. [ 751.313140][ T6350] usb usb38-port1: attempt power cycle [ 751.443515][T14335] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 751.446001][T14335] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 751.456052][T14335] vhci_hcd vhci_hcd.0: Device attached [ 751.640742][T14334] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 751.643458][T14334] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 751.647036][T14334] vhci_hcd vhci_hcd.0: Device attached [ 751.725332][ T54] usb 44-1: SetAddress Request (74) to port 0 [ 751.727623][ T54] usb 44-1: new SuperSpeed USB device number 74 using vhci_hcd [ 751.761538][T14343] batman_adv: batadv0: Adding interface: gretap1 [ 751.764778][T14343] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.776781][T14343] batman_adv: batadv0: Interface activated: gretap1 [ 751.897523][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.900230][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.920967][ T6350] usb usb38-port1: unable to enumerate USB device [ 752.079533][T14338] vhci_hcd: connection closed [ 752.081242][ T7551] vhci_hcd vhci_hcd.1: stop threads [ 752.087377][ T7551] vhci_hcd vhci_hcd.1: release socket [ 752.098296][ T7551] vhci_hcd vhci_hcd.1: disconnect device [ 752.302971][T14336] vhci_hcd: connection reset by peer [ 752.310439][ T92] vhci_hcd vhci_hcd.3: stop threads [ 752.312388][ T92] vhci_hcd vhci_hcd.3: release socket [ 752.321787][ T92] vhci_hcd vhci_hcd.3: disconnect device [ 752.750166][T14353] netlink: 'syz.4.1540': attribute type 1 has an invalid length. [ 753.493560][T14361] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 753.495906][T14361] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 753.505400][T14361] vhci_hcd vhci_hcd.0: Device attached [ 753.785813][ T34] usb 38-1: SetAddress Request (71) to port 0 [ 753.789448][T14362] vhci_hcd: connection closed [ 753.789770][ T12] vhci_hcd vhci_hcd.0: stop threads [ 753.794638][ T34] usb 38-1: new SuperSpeed USB device number 71 using vhci_hcd [ 753.892610][ T12] vhci_hcd vhci_hcd.0: release socket [ 753.894890][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 753.918576][ T34] usb 38-1: enqueue for inactive port 0 [ 754.034757][T14375] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 754.036977][T14375] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 754.040163][T14375] vhci_hcd vhci_hcd.0: Device attached [ 754.306038][ T34] usb usb38-port1: attempt power cycle [ 754.455769][ T916] usb 46-1: device descriptor read/8, error -110 [ 754.791206][T14376] vhci_hcd: connection closed [ 754.791547][ T7551] vhci_hcd vhci_hcd.3: stop threads [ 754.796351][ T7551] vhci_hcd vhci_hcd.3: release socket [ 754.798949][ T7551] vhci_hcd vhci_hcd.3: disconnect device [ 754.838347][T14383] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 754.841446][T14383] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 754.856476][ T916] usb usb46-port1: attempt power cycle [ 754.865483][T14383] vhci_hcd vhci_hcd.0: Device attached [ 754.915579][T14387] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 754.918552][T14387] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 754.921787][T14387] vhci_hcd vhci_hcd.0: Device attached [ 754.945643][ T34] usb 38-1: SetAddress Request (74) to port 0 [ 754.945680][ T34] usb 38-1: new SuperSpeed USB device number 74 using vhci_hcd [ 755.185467][ T6007] usb 40-1: SetAddress Request (74) to port 0 [ 755.188741][ T6007] usb 40-1: new SuperSpeed USB device number 74 using vhci_hcd [ 755.317605][T14385] vhci_hcd: connection reset by peer [ 755.320277][ T7551] vhci_hcd vhci_hcd.0: stop threads [ 755.322414][ T7551] vhci_hcd vhci_hcd.0: release socket [ 755.324475][ T7551] vhci_hcd vhci_hcd.0: disconnect device [ 755.374550][T14388] vhci_hcd: connection reset by peer [ 755.376971][ T3733] vhci_hcd vhci_hcd.1: stop threads [ 755.379374][ T3733] vhci_hcd vhci_hcd.1: release socket [ 755.381638][ T3733] vhci_hcd vhci_hcd.1: disconnect device [ 755.415890][ T916] usb usb46-port1: unable to enumerate USB device [ 755.815462][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 755.815496][ T5953] Bluetooth: hci4: command 0x1003 tx timeout [ 756.986514][T14400] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 756.990342][T14400] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 757.006313][T14400] vhci_hcd vhci_hcd.0: Device attached [ 757.185462][ T54] usb 44-1: device descriptor read/8, error -110 [ 757.579635][T14404] validate_nla: 1 callbacks suppressed [ 757.579647][T14404] netlink: 'syz.3.1551': attribute type 1 has an invalid length. [ 757.584650][T14404] netlink: 'syz.3.1551': attribute type 2 has an invalid length. [ 757.590708][T14401] vhci_hcd: connection closed [ 757.592643][ T9336] vhci_hcd vhci_hcd.0: stop threads [ 757.600025][ T9336] vhci_hcd vhci_hcd.0: release socket [ 757.602849][ T9336] vhci_hcd vhci_hcd.0: disconnect device [ 757.635898][ T54] usb usb44-port1: attempt power cycle [ 757.658560][T14412] xt_CT: You must specify a L4 protocol and not use inversions on it [ 758.196068][ T54] usb usb44-port1: unable to enumerate USB device [ 758.598585][T14420] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 758.602623][T14420] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 758.685584][T14420] vhci_hcd vhci_hcd.0: Device attached [ 758.962923][T14421] vhci_hcd: connection closed [ 758.965336][ T7551] vhci_hcd vhci_hcd.4: stop threads [ 758.970306][ T7551] vhci_hcd vhci_hcd.4: release socket [ 758.972578][ T7551] vhci_hcd vhci_hcd.4: disconnect device [ 758.978072][ T54] usb 46-1: enqueue for inactive port 0 [ 759.292240][T14430] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 759.295405][T14430] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 759.299780][T14430] vhci_hcd vhci_hcd.0: Device attached [ 759.466378][ T54] usb usb46-port1: attempt power cycle [ 759.936979][T14439] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 759.939470][T14439] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 759.949885][T14431] vhci_hcd: connection closed [ 759.950263][ T9336] vhci_hcd vhci_hcd.0: stop threads [ 759.951076][T14439] vhci_hcd vhci_hcd.0: Device attached [ 759.957092][ T9336] vhci_hcd vhci_hcd.0: release socket [ 759.960388][ T9336] vhci_hcd vhci_hcd.0: disconnect device [ 759.976275][ T34] usb 38-1: device descriptor read/8, error -110 [ 760.036054][ T54] usb usb46-port1: unable to enumerate USB device [ 760.089255][T14442] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 760.091560][T14442] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 760.095542][T14442] vhci_hcd vhci_hcd.0: Device attached [ 760.097689][ T34] usb usb38-port1: unable to enumerate USB device [ 760.200184][ T40] audit: type=1400 audit(1767172209.357:832): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=14436 comm="syz.4.1558" [ 760.215659][ T54] usb 44-1: SetAddress Request (78) to port 0 [ 760.215670][ T6007] usb 40-1: device descriptor read/8, error -110 [ 760.221450][ T54] usb 44-1: new SuperSpeed USB device number 78 using vhci_hcd [ 760.365917][ T916] usb 46-1: SetAddress Request (78) to port 0 [ 760.368305][ T916] usb 46-1: new SuperSpeed USB device number 78 using vhci_hcd [ 760.556520][T14440] vhci_hcd: connection reset by peer [ 760.558828][ T12] vhci_hcd vhci_hcd.3: stop threads [ 760.561161][ T12] vhci_hcd vhci_hcd.3: release socket [ 760.563324][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 760.875813][T14443] vhci_hcd: connection reset by peer [ 760.879066][ T12] vhci_hcd vhci_hcd.4: stop threads [ 760.880832][ T12] vhci_hcd vhci_hcd.4: release socket [ 760.882676][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 760.890859][ T6007] usb usb40-port1: attempt power cycle [ 761.134920][T14454] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 761.137333][T14454] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 761.141509][T14454] vhci_hcd vhci_hcd.0: Device attached [ 761.415640][ T29] usb 38-1: SetAddress Request (75) to port 0 [ 761.432273][ T29] usb 38-1: new SuperSpeed USB device number 75 using vhci_hcd [ 761.768539][T14469] batman_adv: batadv0: Adding interface: gretap1 [ 761.771053][T14469] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.781238][T14469] batman_adv: batadv0: Interface activated: gretap1 [ 761.818903][T14455] vhci_hcd: connection reset by peer [ 761.822335][ T9336] vhci_hcd vhci_hcd.0: stop threads [ 761.824959][ T9336] vhci_hcd vhci_hcd.0: release socket [ 761.829158][ T9336] vhci_hcd vhci_hcd.0: disconnect device [ 762.632495][ T6007] usb usb40-port1: unable to enumerate USB device [ 762.899753][T14487] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1565'. [ 762.902818][T14487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1565'. [ 762.949793][T14489] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 762.953213][T14489] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 763.085856][T14489] vhci_hcd vhci_hcd.0: Device attached [ 763.812483][T14490] vhci_hcd: connection closed [ 763.875353][ T13] vhci_hcd vhci_hcd.0: stop threads [ 763.879001][ T13] vhci_hcd vhci_hcd.0: release socket [ 763.885410][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 765.153986][T14515] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 765.156275][T14515] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 765.159810][T14515] vhci_hcd vhci_hcd.0: Device attached [ 765.177023][ T5953] Bluetooth: hci4: command 0x1003 tx timeout [ 765.181010][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 765.217048][T14518] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 765.219516][T14518] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 765.256174][ T54] usb 44-1: device descriptor read/8, error -110 [ 765.265596][T14518] vhci_hcd vhci_hcd.0: Device attached [ 765.425537][ T34] usb 40-1: SetAddress Request (78) to port 0 [ 765.431170][ T34] usb 40-1: new SuperSpeed USB device number 78 using vhci_hcd [ 765.665948][ T54] usb usb44-port1: attempt power cycle [ 765.765846][T14516] vhci_hcd: connection reset by peer [ 765.769928][ T12] vhci_hcd vhci_hcd.1: stop threads [ 765.780635][ T12] vhci_hcd vhci_hcd.1: release socket [ 765.784091][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 765.790070][T14519] vhci_hcd: connection reset by peer [ 765.799410][ T12] vhci_hcd vhci_hcd.4: stop threads [ 765.801350][ T12] vhci_hcd vhci_hcd.4: release socket [ 765.815486][ T916] usb 46-1: device descriptor read/8, error -110 [ 765.815497][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 765.882003][T14527] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 765.884430][T14527] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 765.903756][T14527] vhci_hcd vhci_hcd.0: Device attached [ 766.243801][ T54] usb usb44-port1: unable to enumerate USB device [ 766.715848][T14529] vhci_hcd: connection reset by peer [ 766.719978][ T12] vhci_hcd vhci_hcd.0: stop threads [ 766.721876][ T12] vhci_hcd vhci_hcd.0: release socket [ 766.724339][ T29] usb 38-1: device descriptor read/8, error -110 [ 766.724383][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 766.761985][T14533] misc userio: No port type given on /dev/userio [ 766.764245][T14533] misc userio: The device must be registered before sending interrupts [ 766.770440][T14533] netlink: 'syz.3.1577': attribute type 1 has an invalid length. [ 766.773233][T14533] netlink: 'syz.3.1577': attribute type 2 has an invalid length. [ 766.875861][T14536] mkiss: ax0: crc mode is auto. [ 766.911060][ T916] usb usb46-port1: attempt power cycle [ 767.069364][T14544] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 767.072322][T14544] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 767.084043][T14544] vhci_hcd vhci_hcd.0: Device attached [ 767.220441][ T29] usb usb38-port1: attempt power cycle [ 767.366224][ T6039] usb 44-1: SetAddress Request (82) to port 0 [ 767.369852][ T6039] usb 44-1: new SuperSpeed USB device number 82 using vhci_hcd [ 767.486166][ T916] usb usb46-port1: unable to enumerate USB device [ 767.660327][T14545] vhci_hcd: connection reset by peer [ 767.666629][ T12] vhci_hcd vhci_hcd.3: stop threads [ 767.668528][ T12] vhci_hcd vhci_hcd.3: release socket [ 767.671818][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 767.816557][ T29] usb usb38-port1: unable to enumerate USB device [ 768.734075][T14566] netlink: 'syz.1.1583': attribute type 1 has an invalid length. [ 768.739429][T14566] netlink: 'syz.1.1583': attribute type 2 has an invalid length. [ 769.027791][T14574] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 769.030218][T14574] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 769.033914][T14574] vhci_hcd vhci_hcd.0: Device attached [ 769.305326][ T6927] usb 46-1: SetAddress Request (82) to port 0 [ 769.305365][ T6927] usb 46-1: new SuperSpeed USB device number 82 using vhci_hcd [ 769.392164][T14579] misc userio: No port type given on /dev/userio [ 769.398323][T14579] misc userio: The device must be registered before sending interrupts [ 769.409812][T14579] netlink: 'syz.0.1586': attribute type 1 has an invalid length. [ 769.416936][T14579] netlink: 'syz.0.1586': attribute type 2 has an invalid length. [ 769.732373][T14575] vhci_hcd: connection reset by peer [ 769.736737][ T12] vhci_hcd vhci_hcd.4: stop threads [ 769.739059][ T12] vhci_hcd vhci_hcd.4: release socket [ 769.741332][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 769.844575][T14588] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 769.847649][T14588] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 769.877396][T14588] vhci_hcd vhci_hcd.0: Device attached [ 770.000152][T14597] mkiss: ax0: crc mode is auto. [ 771.101077][T14592] vhci_hcd: connection reset by peer [ 771.105066][ T92] vhci_hcd vhci_hcd.1: stop threads [ 771.108471][ T92] vhci_hcd vhci_hcd.1: release socket [ 771.111654][ T34] usb 40-1: device descriptor read/8, error -110 [ 771.111663][ T92] vhci_hcd vhci_hcd.1: disconnect device [ 771.140154][T14606] netlink: 'syz.3.1592': attribute type 1 has an invalid length. [ 771.143684][T14606] netlink: 'syz.3.1592': attribute type 2 has an invalid length. [ 771.506216][ T34] usb usb40-port1: attempt power cycle [ 771.526583][T14616] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 771.529932][T14616] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 771.543886][T14616] vhci_hcd vhci_hcd.0: Device attached [ 771.611214][T14620] netlink: 'syz.3.1595': attribute type 1 has an invalid length. [ 771.614835][T14620] netlink: 'syz.3.1595': attribute type 2 has an invalid length. [ 771.982755][T14623] misc userio: No port type given on /dev/userio [ 771.986219][T14623] misc userio: The device must be registered before sending interrupts [ 771.991072][T14623] netlink: 'syz.3.1596': attribute type 1 has an invalid length. [ 771.994768][T14623] netlink: 'syz.3.1596': attribute type 2 has an invalid length. [ 772.133051][T14617] vhci_hcd: connection closed [ 772.133578][ T92] vhci_hcd vhci_hcd.4: stop threads [ 772.138853][ T92] vhci_hcd vhci_hcd.4: release socket [ 772.141437][ T92] vhci_hcd vhci_hcd.4: disconnect device [ 772.264688][ T34] usb usb40-port1: unable to enumerate USB device [ 772.455695][ T6039] usb 44-1: device descriptor read/8, error -110 [ 772.845857][ T6039] usb usb44-port1: attempt power cycle [ 772.866485][T14637] binder: 14629:14637 ioctl 0 80000040 returned -22 [ 773.559387][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1598'. [ 773.567114][ T6039] usb usb44-port1: unable to enumerate USB device [ 774.265840][T14649] netlink: 'syz.3.1603': attribute type 1 has an invalid length. [ 774.269776][T14649] netlink: 'syz.3.1603': attribute type 2 has an invalid length. [ 774.375327][ T6927] usb 46-1: device descriptor read/8, error -110 [ 774.434161][T14655] netlink: 'syz.4.1604': attribute type 1 has an invalid length. [ 774.445331][T14655] netlink: 'syz.4.1604': attribute type 2 has an invalid length. [ 774.799482][ T6927] usb usb46-port1: attempt power cycle [ 774.921539][T14663] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 774.923944][T14663] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 774.928419][T14663] vhci_hcd vhci_hcd.0: Device attached [ 774.953535][T14662] misc userio: No port type given on /dev/userio [ 774.953661][T14662] misc userio: The device must be registered before sending interrupts [ 774.953828][T14662] netlink: 'syz.3.1606': attribute type 1 has an invalid length. [ 774.953839][T14662] netlink: 'syz.3.1606': attribute type 2 has an invalid length. [ 775.041829][T14669] netlink: 'syz.4.1614': attribute type 1 has an invalid length. [ 775.045985][T14669] netlink: 'syz.4.1614': attribute type 2 has an invalid length. [ 775.386348][ T6927] usb usb46-port1: unable to enumerate USB device [ 775.478926][ T6039] usb 40-1: SetAddress Request (82) to port 0 [ 775.481106][ T6039] usb 40-1: new SuperSpeed USB device number 82 using vhci_hcd [ 776.139376][T14664] vhci_hcd: connection closed [ 777.011429][ T1242] vhci_hcd vhci_hcd.1: stop threads [ 777.027659][ T1242] vhci_hcd vhci_hcd.1: release socket [ 777.033659][ T1242] vhci_hcd vhci_hcd.1: disconnect device [ 777.112229][ T6039] usb 40-1: enqueue for inactive port 0 [ 777.506202][ T6039] usb usb40-port1: attempt power cycle [ 777.514066][T14689] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1611'. [ 777.518105][T14689] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1611'. [ 777.578059][T14697] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 777.580563][T14697] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 777.583478][T14697] vhci_hcd vhci_hcd.0: Device attached [ 777.910491][ T916] usb 44-1: SetAddress Request (86) to port 0 [ 777.920511][ T916] usb 44-1: new SuperSpeed USB device number 86 using vhci_hcd [ 778.116193][ T6039] usb usb40-port1: unable to enumerate USB device [ 778.198453][T14716] misc userio: No port type given on /dev/userio [ 778.202277][T14716] misc userio: The device must be registered before sending interrupts [ 778.209383][T14712] netlink: 'syz.0.1616': attribute type 1 has an invalid length. [ 778.212538][T14712] netlink: 'syz.0.1616': attribute type 2 has an invalid length. [ 778.234898][T14698] vhci_hcd: connection reset by peer [ 778.237715][ T1242] vhci_hcd vhci_hcd.3: stop threads [ 778.240571][ T1242] vhci_hcd vhci_hcd.3: release socket [ 778.243280][ T1242] vhci_hcd vhci_hcd.3: disconnect device [ 778.261974][T14715] netlink: 'syz.1.1615': attribute type 1 has an invalid length. [ 778.264563][T14715] netlink: 'syz.1.1615': attribute type 2 has an invalid length. [ 779.679921][T14739] batman_adv: batadv0: Adding interface: gretap1 [ 779.682930][T14739] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.696058][T14739] batman_adv: batadv0: Interface activated: gretap1 [ 780.787602][T14751] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 780.789813][T14751] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 780.792813][T14751] vhci_hcd vhci_hcd.0: Device attached [ 781.065375][ T34] usb 40-1: SetAddress Request (86) to port 0 [ 781.068403][ T34] usb 40-1: new SuperSpeed USB device number 86 using vhci_hcd [ 781.377846][T14752] vhci_hcd: connection reset by peer [ 781.380538][ T3733] vhci_hcd vhci_hcd.1: stop threads [ 781.382580][ T3733] vhci_hcd vhci_hcd.1: release socket [ 781.384590][ T3733] vhci_hcd vhci_hcd.1: disconnect device [ 781.575484][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 781.579383][ T5953] Bluetooth: hci4: command 0x1003 tx timeout [ 781.669132][T14758] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1624'. [ 781.672645][T14758] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1624'. [ 781.698892][T14755] misc userio: No port type given on /dev/userio [ 781.709868][T14755] misc userio: The device must be registered before sending interrupts [ 781.719265][T14755] netlink: 'syz.4.1625': attribute type 1 has an invalid length. [ 781.732281][T14755] netlink: 'syz.4.1625': attribute type 2 has an invalid length. [ 782.365850][T14764] binder: 14762:14764 ioctl 0 80000040 returned -22 [ 782.447680][T14768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1626'. [ 783.102854][ T916] usb 44-1: device descriptor read/8, error -110 [ 784.022645][ T916] usb usb44-port1: attempt power cycle [ 784.305338][T14782] netlink: 'syz.3.1630': attribute type 1 has an invalid length. [ 784.308166][T14782] netlink: 'syz.3.1630': attribute type 2 has an invalid length. [ 784.651271][ T916] usb usb44-port1: unable to enumerate USB device [ 785.036811][T14805] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 785.039543][T14805] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 785.044493][T14805] vhci_hcd vhci_hcd.0: Device attached [ 785.305471][ T916] usb 44-1: SetAddress Request (90) to port 0 [ 785.305539][ T916] usb 44-1: new SuperSpeed USB device number 90 using vhci_hcd [ 785.589360][T14816] mkiss: ax0: crc mode is auto. [ 786.145609][ T34] usb 40-1: device descriptor read/8, error -110 [ 786.547867][ T34] usb usb40-port1: attempt power cycle [ 787.116329][ T34] usb usb40-port1: unable to enumerate USB device [ 787.525140][T14806] vhci_hcd: connection reset by peer [ 787.528577][ T12] vhci_hcd vhci_hcd.3: stop threads [ 787.531359][ T12] vhci_hcd vhci_hcd.3: release socket [ 787.542307][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 788.135456][ T5953] Bluetooth: hci4: command 0x1003 tx timeout [ 788.135617][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 789.182815][T14850] netlink: 'syz.3.1642': attribute type 1 has an invalid length. [ 789.187238][T14850] netlink: 'syz.3.1642': attribute type 2 has an invalid length. [ 789.394282][T14856] netlink: 'syz.4.1643': attribute type 1 has an invalid length. [ 789.397477][T14856] netlink: 'syz.4.1643': attribute type 2 has an invalid length. [ 790.112169][T14872] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 790.115336][T14872] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 790.118981][T14872] vhci_hcd vhci_hcd.0: Device attached [ 790.375672][ T916] usb 44-1: device descriptor read/8, error -110 [ 790.446117][ T6927] usb 46-1: SetAddress Request (86) to port 0 [ 790.449179][ T6927] usb 46-1: new SuperSpeed USB device number 86 using vhci_hcd [ 790.552120][T14878] misc userio: No port type given on /dev/userio [ 790.556136][T14878] misc userio: The device must be registered before sending interrupts [ 790.563530][T14878] netlink: 'syz.0.1657': attribute type 1 has an invalid length. [ 790.570216][T14878] netlink: 'syz.0.1657': attribute type 2 has an invalid length. [ 790.639670][T14881] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 790.648432][T14873] vhci_hcd: connection reset by peer [ 790.650900][ T92] vhci_hcd vhci_hcd.4: stop threads [ 790.652833][ T92] vhci_hcd vhci_hcd.4: release socket [ 790.662438][ T92] vhci_hcd vhci_hcd.4: disconnect device [ 790.778206][ T916] usb usb44-port1: attempt power cycle [ 790.938842][T14891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1650'. [ 791.406201][ T916] usb usb44-port1: unable to enumerate USB device [ 791.755176][T14897] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 791.848766][T14897] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 791.852664][T14897] overlayfs: failed to look up (tracing) for ino (-66) [ 793.464395][T14914] netlink: 'syz.3.1656': attribute type 1 has an invalid length. [ 793.469573][T14914] netlink: 'syz.3.1656': attribute type 2 has an invalid length. [ 793.478265][T14912] netlink: 'syz.4.1655': attribute type 1 has an invalid length. [ 793.481712][T14912] netlink: 'syz.4.1655': attribute type 2 has an invalid length. [ 794.484270][T14937] mkiss: ax0: crc mode is auto. [ 795.495947][ T6927] usb 46-1: device descriptor read/8, error -110 [ 795.929226][ T6927] usb usb46-port1: attempt power cycle [ 796.595748][ T6927] usb usb46-port1: unable to enumerate USB device [ 797.073524][T14973] netlink: 'syz.4.1670': attribute type 1 has an invalid length. [ 797.073543][T14973] netlink: 'syz.4.1670': attribute type 2 has an invalid length. [ 798.790924][T14997] mkiss: ax0: crc mode is auto. [ 798.864939][T15003] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 798.867692][T15003] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 798.879074][T15003] vhci_hcd vhci_hcd.0: Device attached [ 798.895364][ T6350] libceph: connect (1)[c::]:6789 error -101 [ 798.895555][ T6350] libceph: mon0 (1)[c::]:6789 connect error [ 798.988241][T15006] ceph: No mds server is up or the cluster is laggy [ 799.176134][ T6927] usb 38-1: SetAddress Request (79) to port 0 [ 799.176202][ T6927] usb 38-1: new SuperSpeed USB device number 79 using vhci_hcd [ 799.185439][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 799.348797][T15015] netlink: 107460 bytes leftover after parsing attributes in process `syz.1.1677'. [ 799.456499][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 799.458746][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 799.460867][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 799.463150][ T9336] Bluetooth: hci4: Frame reassembly failed (-84) [ 799.475470][T15004] vhci_hcd: connection reset by peer [ 799.478591][ T13] vhci_hcd vhci_hcd.0: stop threads [ 799.480605][ T13] vhci_hcd vhci_hcd.0: release socket [ 799.484540][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 800.605903][T15025] mkiss: ax0: crc mode is auto. [ 801.495412][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 801.495603][ T5953] Bluetooth: hci4: command 0x1003 tx timeout [ 803.955955][T15067] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 803.959271][T15067] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 803.963759][T15067] vhci_hcd vhci_hcd.0: Device attached [ 803.975307][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 803.975539][ T5942] Bluetooth: hci4: command 0x1003 tx timeout [ 804.215361][ T6927] usb 38-1: device descriptor read/8, error -110 [ 804.256040][ T916] usb 40-1: SetAddress Request (90) to port 0 [ 804.256506][ T916] usb 40-1: new SuperSpeed USB device number 90 using vhci_hcd [ 804.499777][T15068] vhci_hcd: connection reset by peer [ 804.575900][ T6158] vhci_hcd vhci_hcd.1: stop threads [ 804.578601][ T6158] vhci_hcd vhci_hcd.1: release socket [ 804.581623][ T6158] vhci_hcd vhci_hcd.1: disconnect device [ 804.608569][ T6927] usb usb38-port1: attempt power cycle [ 804.771482][T15078] mkiss: ax0: crc mode is auto. [ 805.196276][ T6927] usb usb38-port1: unable to enumerate USB device [ 805.330515][T15083] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 805.345444][ T5953] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 805.858133][T15090] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 805.861194][T15090] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 805.865968][T15090] vhci_hcd vhci_hcd.0: Device attached [ 806.000712][T15093] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 806.000743][T15093] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 806.001006][T15093] vhci_hcd vhci_hcd.0: Device attached [ 806.155527][ T6039] usb 46-1: SetAddress Request (90) to port 0 [ 806.155580][ T6039] usb 46-1: new SuperSpeed USB device number 90 using vhci_hcd [ 806.267815][T15105] mkiss: ax0: crc mode is auto. [ 806.285655][ T6007] usb 44-1: SetAddress Request (94) to port 0 [ 806.285712][ T6007] usb 44-1: new SuperSpeed USB device number 94 using vhci_hcd [ 806.325352][T15094] vhci_hcd: connection reset by peer [ 806.327868][ T1182] vhci_hcd vhci_hcd.3: stop threads [ 806.329805][ T1182] vhci_hcd vhci_hcd.3: release socket [ 806.332829][ T1182] vhci_hcd vhci_hcd.3: disconnect device [ 806.866517][T15091] vhci_hcd: connection reset by peer [ 806.874984][ T13] vhci_hcd vhci_hcd.4: stop threads [ 806.875008][ T13] vhci_hcd vhci_hcd.4: release socket [ 806.878428][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 807.479115][T15112] lo speed is unknown, defaulting to 1000 [ 807.482927][T15112] wg2 speed is unknown, defaulting to 1000 [ 808.668068][T15131] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 808.671112][T15131] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 808.675051][T15131] vhci_hcd vhci_hcd.0: Device attached [ 809.164917][T15139] mkiss: ax0: crc mode is auto. [ 809.262174][T15132] vhci_hcd: connection closed [ 809.262348][ T9336] vhci_hcd vhci_hcd.1: stop threads [ 809.265911][ T9336] vhci_hcd vhci_hcd.1: release socket [ 809.268156][ T9336] vhci_hcd vhci_hcd.1: disconnect device [ 809.281827][T15141] netlink: 'syz.0.1700': attribute type 1 has an invalid length. [ 809.288966][T15141] netlink: 'syz.0.1700': attribute type 2 has an invalid length. [ 809.336594][ T916] usb 40-1: device descriptor read/8, error -110 [ 809.665684][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 809.665751][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 809.726285][ T916] usb usb40-port1: attempt power cycle [ 809.950772][T15147] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 809.953078][T15147] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 809.978561][T15147] vhci_hcd vhci_hcd.0: Device attached [ 810.407535][ T916] usb usb40-port1: unable to enumerate USB device [ 810.467893][T15157] mkiss: ax0: crc mode is auto. [ 810.668784][T15148] vhci_hcd: connection closed [ 810.669047][ T1182] vhci_hcd vhci_hcd.3: stop threads [ 810.672531][ T1182] vhci_hcd vhci_hcd.3: release socket [ 810.674621][ T1182] vhci_hcd vhci_hcd.3: disconnect device [ 811.125906][T15169] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 811.128041][T15169] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 811.131379][T15169] vhci_hcd vhci_hcd.0: Device attached [ 811.148296][T15172] netlink: 'syz.4.1707': attribute type 1 has an invalid length. [ 811.154752][T15172] netlink: 'syz.4.1707': attribute type 2 has an invalid length. [ 811.255448][ T6039] usb 46-1: device descriptor read/8, error -110 [ 811.345708][ T6007] usb 44-1: device descriptor read/8, error -110 [ 811.416491][ T6033] usb 38-1: SetAddress Request (83) to port 0 [ 811.416894][ T6033] usb 38-1: new SuperSpeed USB device number 83 using vhci_hcd [ 811.651694][ T6039] usb usb46-port1: attempt power cycle [ 811.758671][ T6007] usb usb44-port1: attempt power cycle [ 811.778674][T15170] vhci_hcd: connection reset by peer [ 811.781526][ T9336] vhci_hcd vhci_hcd.0: stop threads [ 811.783816][ T9336] vhci_hcd vhci_hcd.0: release socket [ 811.785914][ T9336] vhci_hcd vhci_hcd.0: disconnect device [ 812.546427][ T6039] usb usb46-port1: unable to enumerate USB device [ 812.629497][T15190] netlink: 'syz.3.1711': attribute type 1 has an invalid length. [ 812.633036][T15190] netlink: 'syz.3.1711': attribute type 2 has an invalid length. [ 812.705545][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 812.705572][ T5942] Bluetooth: hci4: command 0x1003 tx timeout [ 812.755795][ T6007] usb usb44-port1: unable to enumerate USB device [ 813.079977][T15202] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 813.083056][T15202] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 813.089764][T15202] vhci_hcd vhci_hcd.0: Device attached [ 813.341744][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.344716][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.365430][ T54] usb 40-1: SetAddress Request (94) to port 0 [ 813.368359][ T54] usb 40-1: new SuperSpeed USB device number 94 using vhci_hcd [ 813.893666][T15203] vhci_hcd: connection reset by peer [ 813.893928][ T1182] vhci_hcd vhci_hcd.1: stop threads [ 813.900353][ T1182] vhci_hcd vhci_hcd.1: release socket [ 813.900547][ T1182] vhci_hcd vhci_hcd.1: disconnect device [ 814.245783][T15216] mkiss: ax0: crc mode is auto. [ 814.615510][ T5953] Bluetooth: hci5: command 0x1003 tx timeout [ 814.615532][ T5955] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 814.958445][T15223] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 814.960760][T15223] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 814.975791][T15223] vhci_hcd vhci_hcd.0: Device attached [ 815.134593][T15230] netlink: 'syz.0.1718': attribute type 1 has an invalid length. [ 815.134616][T15230] netlink: 'syz.0.1718': attribute type 2 has an invalid length. [ 815.922362][T15224] vhci_hcd: connection closed [ 815.923445][ T12] vhci_hcd vhci_hcd.1: stop threads [ 815.934158][ T12] vhci_hcd vhci_hcd.1: release socket [ 815.938451][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 815.971669][T15244] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 815.973918][T15244] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 815.979305][T15244] vhci_hcd vhci_hcd.0: Device attached [ 816.105645][T15248] netlink: 'syz.4.1722': attribute type 1 has an invalid length. [ 816.105668][T15248] netlink: 'syz.4.1722': attribute type 2 has an invalid length. [ 816.265570][ T6007] usb 44-1: SetAddress Request (98) to port 0 [ 816.276665][ T6007] usb 44-1: new SuperSpeed USB device number 98 using vhci_hcd [ 816.457518][ T6033] usb 38-1: device descriptor read/8, error -110 [ 816.563927][T15245] vhci_hcd: connection reset by peer [ 816.566406][ T6158] vhci_hcd vhci_hcd.3: stop threads [ 816.568499][ T6158] vhci_hcd vhci_hcd.3: release socket [ 816.570668][ T6158] vhci_hcd vhci_hcd.3: disconnect device [ 817.161707][ T6033] usb usb38-port1: attempt power cycle [ 817.575369][ T5953] Bluetooth: hci4: command 0x1003 tx timeout [ 817.575434][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 817.735882][ T6033] usb usb38-port1: unable to enumerate USB device [ 817.812285][T15265] netlink: 'syz.0.1726': attribute type 1 has an invalid length. [ 817.816183][T15265] netlink: 'syz.0.1726': attribute type 2 has an invalid length. [ 817.965642][T15276] netlink: 'syz.0.1729': attribute type 1 has an invalid length. [ 817.968293][T15276] netlink: 'syz.0.1729': attribute type 2 has an invalid length. [ 817.997844][T15277] mkiss: ax0: crc mode is auto. [ 818.457135][ T54] usb 40-1: device descriptor read/8, error -110 [ 818.900552][ T54] usb usb40-port1: attempt power cycle [ 819.466345][ T54] usb usb40-port1: unable to enumerate USB device [ 819.735495][ T5942] Bluetooth: hci4: command 0x1003 tx timeout [ 819.744159][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 819.974304][T15293] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 819.976674][T15293] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 820.024106][T15293] vhci_hcd vhci_hcd.0: Device attached [ 820.135373][ T5955] Bluetooth: hci5: command 0x1003 tx timeout [ 820.135524][ T5953] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 820.361862][ T6033] usb 38-1: SetAddress Request (87) to port 0 [ 820.365364][ T6033] usb 38-1: new SuperSpeed USB device number 87 using vhci_hcd [ 820.371183][T15294] vhci_hcd: connection closed [ 820.373928][ T6158] vhci_hcd vhci_hcd.0: stop threads [ 820.379124][ T6158] vhci_hcd vhci_hcd.0: release socket [ 820.381489][ T6158] vhci_hcd vhci_hcd.0: disconnect device [ 820.385513][ T6033] usb 38-1: enqueue for inactive port 0 [ 820.807500][ T6033] usb usb38-port1: attempt power cycle [ 820.924897][T15310] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 820.927082][T15310] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 820.931399][T15310] vhci_hcd vhci_hcd.0: Device attached [ 821.205538][ T6039] usb 46-1: SetAddress Request (94) to port 0 [ 821.208366][ T6039] usb 46-1: new SuperSpeed USB device number 94 using vhci_hcd [ 821.338472][ T6007] usb 44-1: device descriptor read/8, error -110 [ 821.395723][ T6033] usb usb38-port1: unable to enumerate USB device [ 821.441938][T15319] debugfs: 'ttyS3' already exists in 'caif_serial' [ 821.744568][ T6007] usb usb44-port1: attempt power cycle [ 822.207198][T15311] vhci_hcd: connection reset by peer [ 822.216584][ T1242] vhci_hcd vhci_hcd.4: stop threads [ 822.218767][ T1242] vhci_hcd vhci_hcd.4: release socket [ 822.220962][ T1242] vhci_hcd vhci_hcd.4: disconnect device [ 822.375595][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 822.379549][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 822.388273][ T6007] usb usb44-port1: unable to enumerate USB device [ 822.413030][T15324] netlink: 'syz.1.1738': attribute type 1 has an invalid length. [ 822.435341][T15324] netlink: 'syz.1.1738': attribute type 2 has an invalid length. [ 822.507229][T15333] mkiss: ax0: crc mode is auto. [ 824.124391][T15366] netlink: 'syz.1.1745': attribute type 1 has an invalid length. [ 824.128311][T15366] netlink: 'syz.1.1745': attribute type 2 has an invalid length. [ 825.655653][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 826.295610][ T6039] usb 46-1: device descriptor read/8, error -110 [ 826.685837][ T6039] usb usb46-port1: attempt power cycle [ 827.266071][ T6039] usb usb46-port1: unable to enumerate USB device [ 828.838464][T15401] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 828.841351][T15401] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 828.859518][T15401] vhci_hcd vhci_hcd.0: Device attached [ 829.159113][ T54] usb 44-1: SetAddress Request (102) to port 0 [ 829.159154][ T54] usb 44-1: new SuperSpeed USB device number 102 using vhci_hcd [ 829.175415][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 829.255393][ T5955] Bluetooth: hci5: command 0x1003 tx timeout [ 829.273556][ T5953] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 829.498992][T15402] vhci_hcd: connection reset by peer [ 829.505514][ T1242] vhci_hcd vhci_hcd.3: stop threads [ 829.507714][ T1242] vhci_hcd vhci_hcd.3: release socket [ 829.509846][ T1242] vhci_hcd vhci_hcd.3: disconnect device [ 830.098816][T15411] netlink: 'syz.0.1754': attribute type 1 has an invalid length. [ 830.101523][T15411] netlink: 'syz.0.1754': attribute type 2 has an invalid length. [ 830.399566][T15419] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 830.402852][T15419] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 830.411293][T15419] vhci_hcd vhci_hcd.0: Device attached [ 830.959788][T15420] vhci_hcd: connection closed [ 830.960170][ T9336] vhci_hcd vhci_hcd.1: stop threads [ 830.964748][ T9336] vhci_hcd vhci_hcd.1: release socket [ 830.968527][ T9336] vhci_hcd vhci_hcd.1: disconnect device [ 831.057090][T15431] netlink: 'syz.4.1759': attribute type 1 has an invalid length. [ 831.060723][T15431] netlink: 'syz.4.1759': attribute type 2 has an invalid length. [ 831.425730][T15441] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 831.428750][T15441] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 831.433623][T15441] vhci_hcd vhci_hcd.0: Device attached [ 831.756226][ T6039] usb usb40-port1: attempt power cycle [ 832.035283][T15442] vhci_hcd: connection closed [ 832.059605][ T1242] vhci_hcd vhci_hcd.3: stop threads [ 832.066989][ T1242] vhci_hcd vhci_hcd.3: release socket [ 832.095900][ T1242] vhci_hcd vhci_hcd.3: disconnect device [ 832.385304][ T6039] usb usb40-port1: unable to enumerate USB device [ 832.833419][T15475] netlink: 'syz.0.1765': attribute type 1 has an invalid length. [ 832.836305][T15475] netlink: 'syz.0.1765': attribute type 2 has an invalid length. [ 832.917389][T15478] mkiss: ax0: crc mode is auto. [ 834.026778][T15501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1768'. [ 834.077480][T15504] netlink: 'syz.3.1769': attribute type 1 has an invalid length. [ 834.081698][T15504] netlink: 'syz.3.1769': attribute type 2 has an invalid length. [ 834.215452][ T54] usb 44-1: device descriptor read/8, error -110 [ 834.607719][ T54] usb usb44-port1: attempt power cycle [ 834.857947][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 834.858183][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 835.226055][ T54] usb usb44-port1: unable to enumerate USB device [ 835.579579][T15524] netlink: 'syz.3.1775': attribute type 1 has an invalid length. [ 835.582926][T15524] netlink: 'syz.3.1775': attribute type 2 has an invalid length. [ 836.094231][T15541] mkiss: ax0: crc mode is auto. [ 836.175821][T15543] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 836.178851][T15543] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 836.369730][T15543] vhci_hcd vhci_hcd.0: Device attached [ 836.645773][ T6039] usb 40-1: SetAddress Request (102) to port 0 [ 836.648885][ T6039] usb 40-1: new SuperSpeed USB device number 102 using vhci_hcd [ 836.649806][T15549] netlink: 'syz.0.1779': attribute type 1 has an invalid length. [ 836.657110][T15549] netlink: 'syz.0.1779': attribute type 2 has an invalid length. [ 837.022125][T15544] vhci_hcd: connection reset by peer [ 837.024315][ T1182] vhci_hcd vhci_hcd.1: stop threads [ 837.026472][ T1182] vhci_hcd vhci_hcd.1: release socket [ 837.028676][ T1182] vhci_hcd vhci_hcd.1: disconnect device [ 837.094815][T15561] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 837.097088][T15561] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 837.102310][T15561] vhci_hcd vhci_hcd.0: Device attached [ 837.395440][ T54] usb 46-1: SetAddress Request (98) to port 0 [ 837.398976][ T54] usb 46-1: new SuperSpeed USB device number 98 using vhci_hcd [ 837.716580][T15562] vhci_hcd: connection reset by peer [ 837.725558][ T3733] vhci_hcd vhci_hcd.4: stop threads [ 837.727901][ T3733] vhci_hcd vhci_hcd.4: release socket [ 837.730470][ T3733] vhci_hcd vhci_hcd.4: disconnect device [ 838.071318][T15575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1784'. [ 838.566943][T15578] netlink: 'syz.4.1785': attribute type 1 has an invalid length. [ 838.570522][T15578] netlink: 'syz.4.1785': attribute type 2 has an invalid length. [ 839.015514][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 839.015970][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 839.551073][T15591] mkiss: ax0: crc mode is auto. [ 839.897488][T15599] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 839.900507][T15599] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 839.906022][T15599] vhci_hcd vhci_hcd.0: Device attached [ 840.012801][T15606] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1789'. [ 840.018279][T15606] smc: net device wlan1 applied user defined pnetid SYZ1 [ 840.458753][T15600] vhci_hcd: connection closed [ 840.459140][ T3733] vhci_hcd vhci_hcd.1: stop threads [ 840.463203][ T3733] vhci_hcd vhci_hcd.1: release socket [ 840.466445][ T3733] vhci_hcd vhci_hcd.1: disconnect device [ 840.851613][T15616] misc userio: No port type given on /dev/userio [ 840.853914][T15616] misc userio: The device must be registered before sending interrupts [ 840.860526][T15616] netlink: 'syz.3.1794': attribute type 1 has an invalid length. [ 840.863565][T15616] netlink: 'syz.3.1794': attribute type 2 has an invalid length. [ 841.113491][T15624] netlink: 'syz.3.1796': attribute type 1 has an invalid length. [ 841.117602][T15624] netlink: 'syz.3.1796': attribute type 2 has an invalid length. [ 841.321115][T15632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1795'. [ 841.736005][ T6039] usb 40-1: device descriptor read/8, error -110 [ 842.126338][ T6039] usb usb40-port1: attempt power cycle [ 842.127145][T15649] mkiss: ax0: crc mode is auto. [ 842.455559][ T54] usb 46-1: device descriptor read/8, error -110 [ 842.700236][ T6039] usb usb40-port1: unable to enumerate USB device [ 842.856050][ T54] usb usb46-port1: attempt power cycle [ 843.737402][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 843.835905][ T54] usb usb46-port1: unable to enumerate USB device [ 844.375408][ T5955] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 844.375419][ T5942] Bluetooth: hci5: command 0x1003 tx timeout [ 844.633500][T15675] netlink: 'syz.0.1806': attribute type 1 has an invalid length. [ 844.639619][T15675] netlink: 'syz.0.1806': attribute type 2 has an invalid length. [ 845.815908][T15690] mkiss: ax0: crc mode is auto. [ 846.055382][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 846.060405][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 846.660214][T15703] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 846.662761][T15703] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 846.735669][T15703] vhci_hcd vhci_hcd.0: Device attached [ 847.005387][ T6039] usb 46-1: SetAddress Request (102) to port 0 [ 847.007765][ T6039] usb 46-1: new SuperSpeed USB device number 102 using vhci_hcd [ 847.124247][T15715] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 847.126608][T15715] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 847.132405][T15715] vhci_hcd vhci_hcd.0: Device attached [ 847.338076][T15704] vhci_hcd: connection reset by peer [ 847.342910][ T12] vhci_hcd vhci_hcd.4: stop threads [ 847.351426][ T12] vhci_hcd vhci_hcd.4: release socket [ 847.354353][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 847.425664][ T6033] usb 44-1: SetAddress Request (106) to port 0 [ 847.430501][ T6033] usb 44-1: new SuperSpeed USB device number 106 using vhci_hcd [ 847.723144][T15716] vhci_hcd: connection reset by peer [ 847.738272][ T1182] vhci_hcd vhci_hcd.3: stop threads [ 847.740846][ T1182] vhci_hcd vhci_hcd.3: release socket [ 847.747595][ T1182] vhci_hcd vhci_hcd.3: disconnect device [ 848.695365][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 850.430118][T15762] mkiss: ax0: crc mode is auto. [ 851.341604][T15776] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 851.343866][T15776] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 851.382367][T15776] vhci_hcd vhci_hcd.0: Device attached [ 851.500413][T15781] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 851.503073][T15781] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 851.506263][T15781] vhci_hcd vhci_hcd.0: Device attached [ 851.785433][ T54] usb 40-1: SetAddress Request (106) to port 0 [ 851.787696][ T54] usb 40-1: new SuperSpeed USB device number 106 using vhci_hcd [ 851.916393][T15777] vhci_hcd: connection closed [ 851.916753][ T1182] vhci_hcd vhci_hcd.3: stop threads [ 851.916782][ T1182] vhci_hcd vhci_hcd.3: release socket [ 851.916928][ T1182] vhci_hcd vhci_hcd.3: disconnect device [ 852.055459][ T6039] usb 46-1: device descriptor read/8, error -110 [ 852.090462][T15782] vhci_hcd: connection reset by peer [ 852.093060][ T1182] vhci_hcd vhci_hcd.1: stop threads [ 852.095042][ T1182] vhci_hcd vhci_hcd.1: release socket [ 852.097191][ T1182] vhci_hcd vhci_hcd.1: disconnect device [ 852.446131][ T6039] usb usb46-port1: attempt power cycle [ 852.455415][ T5953] Bluetooth: hci4: command 0x1003 tx timeout [ 852.455709][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 852.536473][ T6033] usb 44-1: device descriptor read/8, error -110 [ 852.926191][ T6033] usb usb44-port1: attempt power cycle [ 853.016271][ T6039] usb usb46-port1: unable to enumerate USB device [ 853.486328][ T6033] usb usb44-port1: unable to enumerate USB device [ 853.670059][T15795] comedi comedi3: no devices specified [ 854.585467][T15797] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 854.588085][T15797] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 854.595357][T15797] vhci_hcd vhci_hcd.0: Device attached [ 854.679648][T15800] vhci_hcd: connection closed [ 854.680547][ T172] vhci_hcd vhci_hcd.0: stop threads [ 854.684843][ T172] vhci_hcd vhci_hcd.0: release socket [ 854.693388][ T172] vhci_hcd vhci_hcd.0: disconnect device [ 856.855302][ T54] usb 40-1: device descriptor read/8, error -110 [ 856.901186][T15841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1840'. [ 856.954368][ T5942] Bluetooth: hci4: command 0x1003 tx timeout [ 856.957890][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 857.316162][ T54] usb usb40-port1: attempt power cycle [ 857.318808][T15848] mkiss: ax0: crc mode is auto. [ 857.422477][T15850] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 857.424819][T15850] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 857.429961][T15850] vhci_hcd vhci_hcd.0: Device attached [ 857.795346][ T6350] usb 44-1: SetAddress Request (110) to port 0 [ 857.797626][ T6350] usb 44-1: new SuperSpeed USB device number 110 using vhci_hcd [ 857.886020][ T54] usb usb40-port1: unable to enumerate USB device [ 858.091438][T15851] vhci_hcd: connection reset by peer [ 858.094557][ T3733] vhci_hcd vhci_hcd.3: stop threads [ 858.097465][ T3733] vhci_hcd vhci_hcd.3: release socket [ 858.100388][ T3733] vhci_hcd vhci_hcd.3: disconnect device [ 858.218104][T15862] overlayfs: failed to resolve './file1': -2 [ 858.375334][ T5955] Bluetooth: hci5: command 0x1003 tx timeout [ 858.378281][ T5953] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 858.903847][T15864] netlink: 'syz.3.1845': attribute type 1 has an invalid length. [ 858.907165][T15864] netlink: 'syz.3.1845': attribute type 2 has an invalid length. [ 860.158496][T15889] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 860.160622][T15889] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 860.167936][T15889] vhci_hcd vhci_hcd.0: Device attached [ 860.261591][T15896] mkiss: ax0: crc mode is auto. [ 860.505371][ T54] usb 38-1: SetAddress Request (91) to port 0 [ 860.508146][ T54] usb 38-1: new SuperSpeed USB device number 91 using vhci_hcd [ 860.712098][T15890] vhci_hcd: connection reset by peer [ 860.715463][ T6158] vhci_hcd vhci_hcd.0: stop threads [ 860.718059][ T6158] vhci_hcd vhci_hcd.0: release socket [ 860.720366][ T6158] vhci_hcd vhci_hcd.0: disconnect device [ 860.810213][T15901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1853'. [ 861.661850][T15913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1855'. [ 862.295550][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 862.295634][ T5942] Bluetooth: hci4: command 0x1003 tx timeout [ 862.712771][T15920] netlink: 'syz.0.1857': attribute type 1 has an invalid length. [ 862.721443][T15920] netlink: 'syz.0.1857': attribute type 2 has an invalid length. [ 862.855473][ T6350] usb 44-1: device descriptor read/8, error -110 [ 863.255831][ T6350] usb usb44-port1: attempt power cycle [ 863.258129][ T5953] Bluetooth: hci5: command 0x1003 tx timeout [ 863.262958][ T5955] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 863.349277][T15929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1859'. [ 863.626384][T15934] mkiss: ax0: crc mode is auto. [ 863.762994][T15940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1860'. [ 864.250913][ T6350] usb usb44-port1: unable to enumerate USB device [ 864.800597][T15958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1865'. [ 864.897199][T15961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1864'. [ 865.105627][T15960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1866'. [ 865.526085][T15968] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 865.528820][T15968] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 865.565572][T15968] vhci_hcd vhci_hcd.0: Device attached [ 865.606422][ T54] usb 38-1: device descriptor read/8, error -110 [ 865.818500][T15973] netlink: 'syz.4.1869': attribute type 1 has an invalid length. [ 865.821695][T15973] netlink: 'syz.4.1869': attribute type 2 has an invalid length. [ 865.895457][ T6033] usb 44-1: SetAddress Request (114) to port 0 [ 865.898100][ T6033] usb 44-1: new SuperSpeed USB device number 114 using vhci_hcd [ 866.026779][ T54] usb usb38-port1: attempt power cycle [ 866.038522][T15969] vhci_hcd: connection reset by peer [ 866.040630][ T1182] vhci_hcd vhci_hcd.3: stop threads [ 866.042426][ T1182] vhci_hcd vhci_hcd.3: release socket [ 866.080376][ T1182] vhci_hcd vhci_hcd.3: disconnect device [ 866.615848][ T54] usb usb38-port1: unable to enumerate USB device [ 866.741958][T15990] netlink: 'syz.1.1872': attribute type 1 has an invalid length. [ 866.745759][T15990] netlink: 'syz.1.1872': attribute type 2 has an invalid length. [ 867.061026][T15998] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 867.063200][T15998] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 867.066743][T15998] vhci_hcd vhci_hcd.0: Device attached [ 867.685807][T15999] vhci_hcd: connection closed [ 867.686256][ T1182] vhci_hcd vhci_hcd.3: stop threads [ 867.690315][ T1182] vhci_hcd vhci_hcd.3: release socket [ 867.692781][ T1182] vhci_hcd vhci_hcd.3: disconnect device [ 867.745455][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 867.745512][ T5942] Bluetooth: hci4: command 0x1003 tx timeout [ 867.917800][T16006] mkiss: ax0: crc mode is auto. [ 868.119026][T16010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1876'. [ 868.305319][ T5955] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 868.538194][T16021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1877'. [ 868.878845][T16028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1879'. [ 868.884234][T16028] overlayfs: failed to resolve './bus': -2 [ 869.343213][T16036] netlink: 'syz.4.1882': attribute type 1 has an invalid length. [ 869.346177][T16036] netlink: 'syz.4.1882': attribute type 2 has an invalid length. [ 870.935498][ T6033] usb 44-1: device descriptor read/8, error -110 [ 871.175377][ T5950] Bluetooth: hci4: command 0x1003 tx timeout [ 871.175418][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 871.326152][ T6033] usb usb44-port1: attempt power cycle [ 871.335686][T16062] mkiss: ax0: crc mode is auto. [ 871.495339][ T5953] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 871.495578][ T5955] Bluetooth: hci5: command 0x1003 tx timeout [ 871.594529][T16067] netlink: 'syz.0.1888': attribute type 1 has an invalid length. [ 871.598650][T16067] netlink: 'syz.0.1888': attribute type 2 has an invalid length. [ 871.886180][ T6033] usb usb44-port1: unable to enumerate USB device [ 871.895443][ T5942] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 871.895474][ T5955] Bluetooth: hci6: command 0x1003 tx timeout [ 872.161371][T16074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1890'. [ 872.589474][T16083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1892'. [ 872.601628][T16083] overlayfs: failed to resolve './bus': -2 [ 873.427738][T16085] netlink: 'syz.4.1893': attribute type 1 has an invalid length. [ 873.431238][T16085] netlink: 'syz.4.1893': attribute type 2 has an invalid length. [ 873.610101][T16090] netlink: 'syz.1.1894': attribute type 1 has an invalid length. [ 873.612930][T16090] netlink: 'syz.1.1894': attribute type 2 has an invalid length. [ 874.778162][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 874.783250][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.123062][T16111] netlink: 'syz.3.1899': attribute type 1 has an invalid length. [ 875.125829][T16111] netlink: 'syz.3.1899': attribute type 2 has an invalid length. [ 875.229966][T16116] mkiss: ax0: crc mode is auto. [ 875.638309][T16124] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 875.640512][T16124] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 875.643685][T16124] vhci_hcd vhci_hcd.0: Device attached [ 875.645846][T16127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1902'. [ 875.925325][ T6033] usb 46-1: SetAddress Request (106) to port 0 [ 875.928972][ T6033] usb 46-1: new SuperSpeed USB device number 106 using vhci_hcd [ 876.228533][T16125] vhci_hcd: connection reset by peer [ 876.230952][ T92] vhci_hcd vhci_hcd.4: stop threads [ 876.232882][ T92] vhci_hcd vhci_hcd.4: release socket [ 876.234958][ T92] vhci_hcd vhci_hcd.4: disconnect device [ 876.935353][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 876.935565][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 877.023404][T16138] netlink: 'syz.4.1905': attribute type 1 has an invalid length. [ 877.027318][T16138] netlink: 'syz.4.1905': attribute type 2 has an invalid length. [ 877.150978][T16148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1906'. [ 878.218949][T16158] netlink: 'syz.1.1910': attribute type 1 has an invalid length. [ 878.227647][T16158] netlink: 'syz.1.1910': attribute type 2 has an invalid length. [ 878.633239][T16170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1912'. [ 878.677576][T16170] overlayfs: failed to resolve './bus': -2 [ 878.717132][T16172] mkiss: ax0: crc mode is auto. [ 878.973364][T16174] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 878.975566][T16174] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 878.982626][T16174] vhci_hcd vhci_hcd.0: Device attached [ 879.265372][ T6007] usb 40-1: SetAddress Request (110) to port 0 [ 879.268250][ T6007] usb 40-1: new SuperSpeed USB device number 110 using vhci_hcd [ 879.350521][T16180] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 879.662554][T16175] vhci_hcd: connection reset by peer [ 879.664949][ T6158] vhci_hcd vhci_hcd.1: stop threads [ 879.681984][T16186] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1916'. [ 879.683305][ T6158] vhci_hcd vhci_hcd.1: release socket [ 879.728758][ T6158] vhci_hcd vhci_hcd.1: disconnect device [ 881.025512][ T6033] usb 46-1: device descriptor read/8, error -110 [ 881.230522][T16201] mkiss: ax0: crc mode is auto. [ 881.446417][ T6033] usb usb46-port1: attempt power cycle [ 881.719058][T16209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1920'. [ 881.735300][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 881.735354][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 881.743260][T16209] overlayfs: failed to resolve './bus': -2 [ 881.790186][T16213] netlink: 'syz.4.1921': attribute type 1 has an invalid length. [ 881.793169][T16213] netlink: 'syz.4.1921': attribute type 2 has an invalid length. [ 882.008121][ T6033] usb usb46-port1: unable to enumerate USB device [ 882.772220][T16230] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 882.772240][T16230] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 882.774132][T16230] vhci_hcd vhci_hcd.0: Device attached [ 882.850448][T16235] mkiss: ax0: crc mode is auto. [ 883.045413][ T54] usb 46-1: SetAddress Request (110) to port 0 [ 883.045458][ T54] usb 46-1: new SuperSpeed USB device number 110 using vhci_hcd [ 883.430012][T16231] vhci_hcd: connection reset by peer [ 883.434735][ T13] vhci_hcd vhci_hcd.4: stop threads [ 883.434763][ T13] vhci_hcd vhci_hcd.4: release socket [ 883.434898][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 883.732204][T16246] netlink: 107460 bytes leftover after parsing attributes in process `syz.3.1927'. [ 883.787921][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 884.295420][ T6007] usb 40-1: device descriptor read/8, error -110 [ 884.387765][T16250] mkiss: ax0: crc mode is auto. [ 884.710099][ T6007] usb usb40-port1: attempt power cycle [ 885.306942][ T6007] usb usb40-port1: unable to enumerate USB device [ 885.815429][ T5942] Bluetooth: hci4: command 0x1003 tx timeout [ 885.815458][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 886.783410][T16271] netlink: 'syz.3.1933': attribute type 1 has an invalid length. [ 886.792756][T16271] netlink: 'syz.3.1933': attribute type 2 has an invalid length. [ 886.926079][T16278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1932'. [ 886.935125][T16278] overlayfs: failed to resolve './bus': -2 [ 886.979161][T16277] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 886.981798][T16277] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 886.985105][T16277] vhci_hcd vhci_hcd.0: Device attached [ 887.635295][T16287] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 887.637728][T16287] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 887.640848][T16287] vhci_hcd vhci_hcd.0: Device attached [ 887.645991][T16279] vhci_hcd: connection closed [ 887.646179][ T92] vhci_hcd vhci_hcd.4: stop threads [ 887.650911][ T92] vhci_hcd vhci_hcd.4: release socket [ 887.655539][ T92] vhci_hcd vhci_hcd.4: disconnect device [ 887.732776][T16293] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 887.735013][T16293] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 887.739193][T16293] vhci_hcd vhci_hcd.0: Device attached [ 887.915376][ T6335] usb 38-1: SetAddress Request (95) to port 0 [ 887.917703][ T6335] usb 38-1: new SuperSpeed USB device number 95 using vhci_hcd [ 888.036376][ T6007] usb 44-1: SetAddress Request (118) to port 0 [ 888.040885][ T6007] usb 44-1: new SuperSpeed USB device number 118 using vhci_hcd [ 888.135367][ T54] usb 46-1: device descriptor read/8, error -110 [ 888.216020][T16288] vhci_hcd: connection reset by peer [ 888.220515][ T92] vhci_hcd vhci_hcd.0: stop threads [ 888.228306][ T92] vhci_hcd vhci_hcd.0: release socket [ 888.231362][ T92] vhci_hcd vhci_hcd.0: disconnect device [ 888.303518][T16294] vhci_hcd: connection reset by peer [ 888.305499][ T92] vhci_hcd vhci_hcd.3: stop threads [ 888.307642][ T92] vhci_hcd vhci_hcd.3: release socket [ 888.309777][ T92] vhci_hcd vhci_hcd.3: disconnect device [ 888.538968][ T54] usb usb46-port1: attempt power cycle [ 889.497452][ T54] usb usb46-port1: unable to enumerate USB device [ 890.681258][T16314] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 890.683927][T16314] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 890.699728][T16314] vhci_hcd vhci_hcd.0: Device attached [ 890.771062][T16316] netlink: 'syz.0.1945': attribute type 1 has an invalid length. [ 890.773984][T16316] netlink: 'syz.0.1945': attribute type 2 has an invalid length. [ 890.965391][ T6008] usb 40-1: SetAddress Request (114) to port 0 [ 890.968453][ T6008] usb 40-1: new SuperSpeed USB device number 114 using vhci_hcd [ 891.240260][T16328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1946'. [ 891.293690][T16317] vhci_hcd: connection reset by peer [ 891.300054][ T1182] vhci_hcd vhci_hcd.1: stop threads [ 891.302669][ T1182] vhci_hcd vhci_hcd.1: release socket [ 891.306093][ T1182] vhci_hcd vhci_hcd.1: disconnect device [ 891.644540][T16331] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 891.646785][T16331] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 891.649905][T16331] vhci_hcd vhci_hcd.0: Device attached [ 892.291353][T16332] vhci_hcd: connection closed [ 892.291754][ T92] vhci_hcd vhci_hcd.3: stop threads [ 892.295474][ T92] vhci_hcd vhci_hcd.3: release socket [ 892.297588][ T92] vhci_hcd vhci_hcd.3: disconnect device [ 892.705404][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 893.015449][ T6335] usb 38-1: device descriptor read/8, error -110 [ 893.350735][ T6007] usb 44-1: device descriptor read/8, error -110 [ 893.429624][ T6335] usb usb38-port1: attempt power cycle [ 893.992689][ T6335] usb usb38-port1: unable to enumerate USB device [ 894.135458][ T5942] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 894.138955][ T5955] Bluetooth: hci5: command 0x1003 tx timeout [ 894.326181][ T6007] usb usb44-port1: attempt power cycle [ 894.353276][T16360] netlink: 'syz.0.1954': attribute type 1 has an invalid length. [ 894.353296][T16360] netlink: 'syz.0.1954': attribute type 2 has an invalid length. [ 894.900452][ T6007] usb usb44-port1: unable to enumerate USB device [ 895.503590][T16372] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 895.505912][T16372] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 895.508995][T16372] vhci_hcd vhci_hcd.0: Device attached [ 895.785343][ T6007] usb 38-1: SetAddress Request (99) to port 0 [ 895.787747][ T6007] usb 38-1: new SuperSpeed USB device number 99 using vhci_hcd [ 895.797395][T16384] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 895.799794][T16384] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 895.803257][T16384] vhci_hcd vhci_hcd.0: Device attached [ 896.101904][T16375] vhci_hcd: connection reset by peer [ 896.104871][ T13] vhci_hcd vhci_hcd.0: stop threads [ 896.107033][ T13] vhci_hcd vhci_hcd.0: release socket [ 896.109269][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 896.396315][T16385] vhci_hcd: connection reset by peer [ 896.400119][ T1182] vhci_hcd vhci_hcd.1: stop threads [ 896.402363][ T1182] vhci_hcd vhci_hcd.1: release socket [ 896.404507][ T6008] usb 40-1: device descriptor read/8, error -110 [ 896.407015][ T1182] vhci_hcd vhci_hcd.1: disconnect device [ 897.306251][ T6008] usb usb40-port1: attempt power cycle [ 897.739938][T16398] netlink: 'syz.0.1961': attribute type 1 has an invalid length. [ 897.742915][T16398] netlink: 'syz.0.1961': attribute type 2 has an invalid length. [ 897.888727][ T6008] usb usb40-port1: unable to enumerate USB device [ 898.554715][T16413] netlink: 'syz.0.1965': attribute type 1 has an invalid length. [ 898.558872][T16413] netlink: 'syz.0.1965': attribute type 2 has an invalid length. [ 898.855574][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 898.855593][ T5953] Bluetooth: hci4: command 0x1003 tx timeout [ 899.975733][ T5953] Bluetooth: hci5: command 0x1003 tx timeout [ 899.980914][ T5955] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 900.234471][T16437] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 900.237007][T16437] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 900.240166][T16437] vhci_hcd vhci_hcd.0: Device attached [ 900.257270][T16436] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 900.257289][T16436] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 900.257388][T16436] vhci_hcd vhci_hcd.0: Device attached [ 900.525644][ T54] usb 40-1: SetAddress Request (118) to port 0 [ 900.528535][ T54] usb 40-1: new SuperSpeed USB device number 118 using vhci_hcd [ 900.752672][T16438] vhci_hcd: connection closed [ 900.752939][ T1182] vhci_hcd vhci_hcd.0: stop threads [ 900.757155][ T1182] vhci_hcd vhci_hcd.0: release socket [ 900.759417][ T1182] vhci_hcd vhci_hcd.0: disconnect device [ 900.875345][ T6007] usb 38-1: device descriptor read/8, error -110 [ 900.883893][T16440] vhci_hcd: connection reset by peer [ 900.896002][ T12] vhci_hcd vhci_hcd.1: stop threads [ 900.898470][ T12] vhci_hcd vhci_hcd.1: release socket [ 900.915474][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 901.265986][ T6007] usb usb38-port1: attempt power cycle [ 901.335459][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 901.335522][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 901.566030][T16445] netlink: 'syz.3.1973': attribute type 1 has an invalid length. [ 901.566050][T16445] netlink: 'syz.3.1973': attribute type 2 has an invalid length. [ 902.377862][ T6007] usb usb38-port1: unable to enumerate USB device [ 902.481705][T16461] netlink: 'syz.4.1976': attribute type 1 has an invalid length. [ 902.484269][T16461] netlink: 'syz.4.1976': attribute type 2 has an invalid length. [ 903.183013][T16458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1974'. [ 903.625052][T16469] netlink: 'syz.4.1978': attribute type 1 has an invalid length. [ 903.628649][T16469] netlink: 'syz.4.1978': attribute type 2 has an invalid length. [ 905.215463][T16503] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 905.218342][T16503] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 905.245524][T16503] vhci_hcd vhci_hcd.0: Device attached [ 905.535433][ T6335] usb 46-1: SetAddress Request (114) to port 0 [ 905.539378][ T6335] usb 46-1: new SuperSpeed USB device number 114 using vhci_hcd [ 905.576422][ T54] usb 40-1: device descriptor read/8, error -110 [ 905.821576][T16504] vhci_hcd: connection reset by peer [ 905.824408][ T13] vhci_hcd vhci_hcd.4: stop threads [ 905.827483][ T13] vhci_hcd vhci_hcd.4: release socket [ 905.830420][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 905.966146][ T54] usb usb40-port1: attempt power cycle [ 906.368242][T16509] netlink: 'syz.3.1985': attribute type 1 has an invalid length. [ 906.371357][T16509] netlink: 'syz.3.1985': attribute type 2 has an invalid length. [ 906.536482][ T54] usb usb40-port1: unable to enumerate USB device [ 906.638126][T16516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1987'. [ 906.928328][T16524] netlink: 'syz.4.1989': attribute type 1 has an invalid length. [ 906.931092][T16524] netlink: 'syz.4.1989': attribute type 2 has an invalid length. [ 907.557716][T16535] x_tables: duplicate underflow at hook 1 [ 907.561886][T16535] hub 8-0:1.0: USB hub found [ 907.564022][T16535] hub 8-0:1.0: 1 port detected [ 908.223503][T16541] netlink: 'syz.4.1993': attribute type 1 has an invalid length. [ 908.227694][T16541] netlink: 'syz.4.1993': attribute type 2 has an invalid length. [ 908.615550][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 908.617042][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 908.727969][T16554] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 908.730255][T16554] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 908.733768][T16554] vhci_hcd vhci_hcd.0: Device attached [ 909.386093][T16564] netlink: 107460 bytes leftover after parsing attributes in process `syz.0.1997'. [ 909.416599][T16561] netlink: 'syz.1.1998': attribute type 1 has an invalid length. [ 909.417650][T16555] vhci_hcd: connection closed [ 909.419467][T16561] netlink: 'syz.1.1998': attribute type 2 has an invalid length. [ 909.420092][ T1242] vhci_hcd vhci_hcd.4: stop threads [ 909.428505][ T1242] vhci_hcd vhci_hcd.4: release socket [ 909.431110][ T1242] vhci_hcd vhci_hcd.4: disconnect device [ 909.466127][ T92] Bluetooth: hci4: Frame reassembly failed (-84) [ 911.006020][ T6335] usb 46-1: device descriptor read/8, error -110 [ 911.496110][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 911.915888][ T6335] usb usb46-port1: attempt power cycle [ 912.360948][T16594] netlink: 'syz.0.2004': attribute type 1 has an invalid length. [ 912.364362][T16594] netlink: 'syz.0.2004': attribute type 2 has an invalid length. [ 912.476560][ T6335] usb usb46-port1: unable to enumerate USB device [ 913.492222][T16606] netlink: 'syz.1.2008': attribute type 1 has an invalid length. [ 913.496581][T16606] netlink: 'syz.1.2008': attribute type 2 has an invalid length. [ 913.895444][ T5942] Bluetooth: hci4: command 0x1003 tx timeout [ 913.899014][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 914.054016][T16618] misc userio: No port type given on /dev/userio [ 914.057644][T16618] misc userio: The device must be registered before sending interrupts [ 914.061763][T16618] netlink: 'syz.3.2011': attribute type 1 has an invalid length. [ 914.065476][T16618] netlink: 'syz.3.2011': attribute type 2 has an invalid length. [ 914.497336][T16630] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 914.500768][T16630] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 914.659523][T16641] mkiss: ax0: crc mode is auto. [ 914.818177][T16630] vhci_hcd vhci_hcd.0: Device attached [ 915.075553][ T6350] usb 44-1: SetAddress Request (122) to port 0 [ 915.078325][ T6350] usb 44-1: new SuperSpeed USB device number 122 using vhci_hcd [ 915.273603][T16635] vhci_hcd: connection reset by peer [ 915.276696][ T92] vhci_hcd vhci_hcd.3: stop threads [ 915.278983][ T92] vhci_hcd vhci_hcd.3: release socket [ 915.281878][ T92] vhci_hcd vhci_hcd.3: disconnect device [ 915.578335][T16653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2016'. [ 916.661063][T16667] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 916.663844][T16667] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 916.671017][T16667] vhci_hcd vhci_hcd.0: Device attached [ 916.936492][ T34] usb 38-1: SetAddress Request (103) to port 0 [ 916.938616][ T34] usb 38-1: new SuperSpeed USB device number 103 using vhci_hcd [ 917.092491][T16674] misc userio: No port type given on /dev/userio [ 917.095430][T16674] misc userio: The device must be registered before sending interrupts [ 917.099183][T16674] netlink: 'syz.4.2022': attribute type 1 has an invalid length. [ 917.102031][T16674] netlink: 'syz.4.2022': attribute type 2 has an invalid length. [ 917.226326][T16669] vhci_hcd: connection reset by peer [ 917.229222][ T1182] vhci_hcd vhci_hcd.0: stop threads [ 917.231499][ T1182] vhci_hcd vhci_hcd.0: release socket [ 917.233997][ T1182] vhci_hcd vhci_hcd.0: disconnect device [ 917.729083][T16681] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 917.731558][T16681] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 917.734862][T16681] vhci_hcd vhci_hcd.0: Device attached [ 917.995419][ T6335] usb 40-1: SetAddress Request (122) to port 0 [ 917.998461][ T6335] usb 40-1: new SuperSpeed USB device number 122 using vhci_hcd [ 918.305695][ T5953] Bluetooth: hci4: command 0x1003 tx timeout [ 918.305727][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 918.417090][T16682] vhci_hcd: connection reset by peer [ 918.419281][ T1242] vhci_hcd vhci_hcd.1: stop threads [ 918.421544][ T1242] vhci_hcd vhci_hcd.1: release socket [ 918.423554][ T1242] vhci_hcd vhci_hcd.1: disconnect device [ 920.055500][ T5942] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 920.055586][ T5955] Bluetooth: hci5: command 0x1003 tx timeout [ 920.135471][ T6350] usb 44-1: device descriptor read/8, error -110 [ 920.259275][T16710] misc userio: No port type given on /dev/userio [ 920.262375][T16710] misc userio: The device must be registered before sending interrupts [ 920.273855][T16711] mkiss: ax0: crc mode is auto. [ 920.406152][T16710] netlink: 'syz.0.2031': attribute type 1 has an invalid length. [ 920.408891][T16710] netlink: 'syz.0.2031': attribute type 2 has an invalid length. [ 920.664911][ T6350] usb usb44-port1: attempt power cycle [ 921.453404][T16724] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 921.455836][T16724] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 921.466443][T16724] vhci_hcd vhci_hcd.0: Device attached [ 921.539300][ T6350] usb 44-1: SetAddress Request (125) to port 0 [ 921.549346][ T6350] usb 44-1: new SuperSpeed USB device number 125 using vhci_hcd [ 921.975962][ T34] usb 38-1: device descriptor read/8, error -110 [ 922.401626][T16731] vhci_hcd: connection reset by peer [ 922.404322][ T1242] vhci_hcd vhci_hcd.3: stop threads [ 922.407697][ T1242] vhci_hcd vhci_hcd.3: release socket [ 922.410612][ T1242] vhci_hcd vhci_hcd.3: disconnect device [ 922.571401][ T34] usb usb38-port1: attempt power cycle [ 923.095450][ T6335] usb 40-1: device descriptor read/8, error -110 [ 923.145896][ T34] usb usb38-port1: unable to enumerate USB device [ 923.345386][ T5953] Bluetooth: hci4: command 0x1003 tx timeout [ 923.345745][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 923.485890][ T6335] usb usb40-port1: attempt power cycle [ 923.571081][T16753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2040'. [ 923.629110][T16751] misc userio: No port type given on /dev/userio [ 923.647074][T16751] misc userio: The device must be registered before sending interrupts [ 923.660801][T16751] netlink: 'syz.4.2041': attribute type 1 has an invalid length. [ 923.670949][T16751] netlink: 'syz.4.2041': attribute type 2 has an invalid length. [ 924.055922][ T6335] usb usb40-port1: unable to enumerate USB device [ 924.101440][T16768] mkiss: ax0: crc mode is auto. [ 924.138118][T16770] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 924.141455][T16770] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 924.145765][T16770] vhci_hcd vhci_hcd.0: Device attached [ 924.455618][ T6008] usb 37-1: new low-speed USB device number 5 using vhci_hcd [ 924.776873][ T5955] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 924.951587][T16776] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 924.954099][T16776] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 924.957329][T16776] vhci_hcd vhci_hcd.0: Device attached [ 925.007139][T16779] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 925.010327][T16779] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 925.013976][T16779] vhci_hcd vhci_hcd.0: Device attached [ 925.080390][T16771] vhci_hcd: connection reset by peer [ 925.085504][ T1182] vhci_hcd vhci_hcd.0: stop threads [ 925.087674][ T1182] vhci_hcd vhci_hcd.0: release socket [ 925.089676][ T1182] vhci_hcd vhci_hcd.0: disconnect device [ 925.275482][ T6335] usb 46-1: SetAddress Request (118) to port 0 [ 925.278023][ T6335] usb 46-1: new SuperSpeed USB device number 118 using vhci_hcd [ 925.516834][T16780] vhci_hcd: connection closed [ 925.517376][ T92] vhci_hcd vhci_hcd.3: stop threads [ 925.521090][ T92] vhci_hcd vhci_hcd.3: release socket [ 925.523037][ T92] vhci_hcd vhci_hcd.3: disconnect device [ 925.691974][T16782] vhci_hcd: connection reset by peer [ 925.695372][ T3733] vhci_hcd vhci_hcd.4: stop threads [ 925.698336][ T3733] vhci_hcd vhci_hcd.4: release socket [ 925.713984][ T3733] vhci_hcd vhci_hcd.4: disconnect device [ 926.615383][ T6350] usb 44-1: device descriptor read/8, error -110 [ 926.775342][ T6350] usb usb44-port1: unable to enumerate USB device [ 927.599626][T16810] misc userio: No port type given on /dev/userio [ 927.603105][T16810] misc userio: The device must be registered before sending interrupts [ 927.607525][T16810] netlink: 'syz.3.2052': attribute type 1 has an invalid length. [ 927.611010][T16810] netlink: 'syz.3.2052': attribute type 2 has an invalid length. [ 928.418134][T16826] mkiss: ax0: crc mode is auto. [ 929.735370][ T6008] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 930.254005][T16849] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 930.256316][T16849] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 930.259452][T16849] vhci_hcd vhci_hcd.0: Device attached [ 930.308520][T16856] vhci_hcd: connection closed [ 930.309489][ T6158] vhci_hcd vhci_hcd.0: stop threads [ 930.313753][ T6158] vhci_hcd vhci_hcd.0: release socket [ 930.317617][ T6158] vhci_hcd vhci_hcd.0: disconnect device [ 930.455539][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 930.458759][ T5942] Bluetooth: hci4: command 0x1003 tx timeout [ 930.466756][ T6335] usb 46-1: device descriptor read/8, error -110 [ 930.866164][ T6335] usb usb46-port1: attempt power cycle [ 931.120213][T16864] misc userio: No port type given on /dev/userio [ 931.122523][T16864] misc userio: The device must be registered before sending interrupts [ 931.126474][T16864] netlink: 'syz.3.2063': attribute type 1 has an invalid length. [ 931.129207][T16864] netlink: 'syz.3.2063': attribute type 2 has an invalid length. [ 931.435860][ T6335] usb usb46-port1: unable to enumerate USB device [ 932.013293][T16888] netlink: 'syz.0.2067': attribute type 1 has an invalid length. [ 932.018266][T16888] netlink: 'syz.0.2067': attribute type 2 has an invalid length. [ 932.791498][T16893] netlink: 'syz.0.2068': attribute type 1 has an invalid length. [ 933.427220][ T5953] Bluetooth: hci4: command 0x1003 tx timeout [ 933.430483][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 933.657339][ T5955] Bluetooth: hci5: command 0x1003 tx timeout [ 933.660125][ T5942] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 933.997380][T16913] misc userio: No port type given on /dev/userio [ 934.000438][T16913] misc userio: The device must be registered before sending interrupts [ 934.034668][T16913] netlink: 'syz.4.2073': attribute type 1 has an invalid length. [ 934.041610][T16913] netlink: 'syz.4.2073': attribute type 2 has an invalid length. [ 934.148687][T16906] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 934.150935][T16906] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 934.153852][T16906] vhci_hcd vhci_hcd.0: Device attached [ 934.266972][T16917] vhci_hcd: connection closed [ 934.276834][ T9336] vhci_hcd vhci_hcd.1: stop threads [ 934.293890][ T9336] vhci_hcd vhci_hcd.1: release socket [ 934.327129][ T9336] vhci_hcd vhci_hcd.1: disconnect device [ 935.189421][T16928] netlink: 'syz.3.2076': attribute type 1 has an invalid length. [ 935.196869][T16928] netlink: 'syz.3.2076': attribute type 2 has an invalid length. [ 935.493162][T16936] mkiss: ax0: crc mode is auto. [ 936.217910][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.227359][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.234596][T16950] netlink: 'syz.3.2088': attribute type 4 has an invalid length. [ 937.444607][T16962] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2083'. [ 937.575069][T16963] ubi: mtd0 is already attached to ubi31 [ 937.656578][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 937.664492][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 938.634469][T16974] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 938.637063][T16974] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 938.640013][T16974] vhci_hcd vhci_hcd.0: Device attached [ 938.721301][T16976] vhci_hcd: connection closed [ 938.721597][ T12] vhci_hcd vhci_hcd.1: stop threads [ 938.725415][ T12] vhci_hcd vhci_hcd.1: release socket [ 938.727799][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 938.920920][T16983] netlink: 'syz.4.2089': attribute type 1 has an invalid length. [ 938.924319][T16983] netlink: 'syz.4.2089': attribute type 2 has an invalid length. [ 939.397285][T16989] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 939.399473][T16989] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 939.425577][T16989] vhci_hcd vhci_hcd.0: Device attached [ 939.705516][ T6007] usb 46-1: SetAddress Request (122) to port 0 [ 939.709260][ T6007] usb 46-1: new SuperSpeed USB device number 122 using vhci_hcd [ 939.779531][T16997] misc userio: No port type given on /dev/userio [ 939.782268][T16997] misc userio: The device must be registered before sending interrupts [ 939.785521][T16997] netlink: 'syz.0.2092': attribute type 1 has an invalid length. [ 939.789128][T16997] netlink: 'syz.0.2092': attribute type 2 has an invalid length. [ 940.079459][T16990] vhci_hcd: connection reset by peer [ 940.082744][ T12] vhci_hcd vhci_hcd.4: stop threads [ 940.085176][ T12] vhci_hcd vhci_hcd.4: release socket [ 940.089644][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 940.181635][T17002] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 940.185268][T17002] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 940.189834][T17002] vhci_hcd vhci_hcd.0: Device attached [ 940.455885][ T6039] usb 38-1: SetAddress Request (107) to port 0 [ 940.458323][ T6039] usb 38-1: new SuperSpeed USB device number 107 using vhci_hcd [ 941.183882][T17016] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 941.186385][T17016] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 941.189561][T17016] vhci_hcd vhci_hcd.0: Device attached [ 941.261457][T17018] vhci_hcd: connection closed [ 941.266057][ T9336] vhci_hcd vhci_hcd.4: stop threads [ 941.301268][T17003] vhci_hcd: connection reset by peer [ 941.304958][ T9336] vhci_hcd vhci_hcd.4: release socket [ 941.322186][ T9336] vhci_hcd vhci_hcd.4: disconnect device [ 941.325014][ T9336] vhci_hcd vhci_hcd.0: stop threads [ 941.332700][ T9336] vhci_hcd vhci_hcd.0: release socket [ 941.337341][ T9336] vhci_hcd vhci_hcd.0: disconnect device [ 941.757842][T17021] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 941.760443][T17021] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 941.763803][T17021] vhci_hcd vhci_hcd.0: Device attached [ 941.863090][T17023] vhci_hcd: connection closed [ 941.863432][ T9336] vhci_hcd vhci_hcd.1: stop threads [ 941.867595][ T9336] vhci_hcd vhci_hcd.1: release socket [ 941.869606][ T9336] vhci_hcd vhci_hcd.1: disconnect device [ 942.062459][T17027] netlink: 'syz.0.2098': attribute type 1 has an invalid length. [ 942.065011][T17027] netlink: 'syz.0.2098': attribute type 2 has an invalid length. [ 942.232427][T17030] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 942.234712][T17030] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 942.237998][T17030] vhci_hcd vhci_hcd.0: Device attached [ 942.305086][T17032] vhci_hcd: connection closed [ 942.305790][ T9336] vhci_hcd vhci_hcd.4: stop threads [ 942.309336][ T9336] vhci_hcd vhci_hcd.4: release socket [ 942.315356][ T9336] vhci_hcd vhci_hcd.4: disconnect device [ 942.375469][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 942.378214][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 943.657276][T17054] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 943.659565][T17054] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 943.662484][T17054] vhci_hcd vhci_hcd.0: Device attached [ 944.102969][T17058] vhci_hcd: connection closed [ 944.103246][ T1182] vhci_hcd vhci_hcd.4: stop threads [ 944.107784][ T1182] vhci_hcd vhci_hcd.4: release socket [ 944.112478][ T1182] vhci_hcd vhci_hcd.4: disconnect device [ 944.810831][ T6007] usb 46-1: device descriptor read/8, error -110 [ 945.060422][T17076] netlink: 'syz.4.2108': attribute type 1 has an invalid length. [ 945.064035][T17076] netlink: 'syz.4.2108': attribute type 2 has an invalid length. [ 945.209800][ T6007] usb usb46-port1: attempt power cycle [ 945.335556][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 945.515451][ T6039] usb 38-1: device descriptor read/8, error -110 [ 945.667691][T17083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2109'. [ 945.768034][ T6007] usb usb46-port1: unable to enumerate USB device [ 945.916463][ T6039] usb usb38-port1: attempt power cycle [ 946.486264][ T6039] usb usb38-port1: unable to enumerate USB device [ 946.697913][T17110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2112'. [ 946.789078][T17112] netlink: 'syz.0.2113': attribute type 1 has an invalid length. [ 946.792462][T17112] netlink: 'syz.0.2113': attribute type 2 has an invalid length. [ 947.123972][T17119] mkiss: ax0: crc mode is auto. [ 947.616037][ T6039] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 947.666410][T17130] misc userio: No port type given on /dev/userio [ 947.666469][T17130] misc userio: The device must be registered before sending interrupts [ 947.666652][T17130] netlink: 'syz.1.2116': attribute type 1 has an invalid length. [ 947.666663][T17130] netlink: 'syz.1.2116': attribute type 2 has an invalid length. [ 947.885684][T17141] netlink: 'syz.1.2117': attribute type 1 has an invalid length. [ 947.888861][T17141] netlink: 'syz.1.2117': attribute type 2 has an invalid length. [ 948.576501][T17149] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 948.579792][T17149] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 948.583443][T17149] vhci_hcd vhci_hcd.0: Device attached [ 948.837007][T17163] vhci_hcd: connection closed [ 948.838123][ T3733] vhci_hcd vhci_hcd.1: stop threads [ 948.842080][ T3733] vhci_hcd vhci_hcd.1: release socket [ 948.844813][ T3733] vhci_hcd vhci_hcd.1: disconnect device [ 948.885510][ T6039] usb 40-1: enqueue for inactive port 0 [ 949.396027][ T6039] usb usb40-port1: attempt power cycle [ 949.968022][ T6039] usb usb40-port1: unable to enumerate USB device [ 950.060913][T17183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2124'. [ 950.535555][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 950.538890][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 954.722565][T17198] misc userio: No port type given on /dev/userio [ 954.725351][T17198] misc userio: The device must be registered before sending interrupts [ 954.728613][T17198] netlink: 'syz.1.2126': attribute type 1 has an invalid length. [ 954.731369][T17198] netlink: 'syz.1.2126': attribute type 2 has an invalid length. [ 954.783590][T17208] netlink: 'syz.3.2128': attribute type 1 has an invalid length. [ 954.791871][T17208] netlink: 'syz.3.2128': attribute type 2 has an invalid length. [ 954.949136][T17212] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 955.097346][T17216] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 955.099701][T17216] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 955.105081][T17216] vhci_hcd vhci_hcd.0: Device attached [ 955.114995][T17215] mkiss: ax0: crc mode is auto. [ 955.166461][T17216] syz2: rxe_newlink: already configured on wg2 [ 955.292375][T17220] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 955.294687][T17220] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 955.298470][T17220] vhci_hcd vhci_hcd.0: Device attached [ 955.380931][T17221] vhci_hcd: connection closed [ 955.383051][ T13] vhci_hcd vhci_hcd.3: stop threads [ 955.385614][ T6039] usb 46-1: SetAddress Request (126) to port 0 [ 955.388508][ T13] vhci_hcd vhci_hcd.3: release socket [ 955.390630][ T6039] usb 46-1: new SuperSpeed USB device number 126 using vhci_hcd [ 955.457728][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 955.502033][T17217] vhci_hcd: connection reset by peer [ 955.505002][ T13] vhci_hcd vhci_hcd.4: stop threads [ 955.507429][ T13] vhci_hcd vhci_hcd.4: release socket [ 955.509925][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 955.639784][T17224] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 955.642119][T17224] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 955.644914][T17224] vhci_hcd vhci_hcd.0: Device attached [ 955.700914][T17226] vhci_hcd: connection closed [ 955.701116][ T1182] vhci_hcd vhci_hcd.0: stop threads [ 955.706255][ T1182] vhci_hcd vhci_hcd.0: release socket [ 955.708647][ T1182] vhci_hcd vhci_hcd.0: disconnect device [ 957.053516][T17260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2135'. [ 958.375502][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 958.375534][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 958.595898][T17274] netlink: 'syz.1.2138': attribute type 1 has an invalid length. [ 958.599655][T17274] netlink: 'syz.1.2138': attribute type 2 has an invalid length. [ 958.755538][T17284] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 958.757756][T17284] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 958.762006][T17284] vhci_hcd vhci_hcd.0: Device attached [ 958.816328][T17283] mkiss: ax0: crc mode is auto. [ 958.833514][T17285] vhci_hcd: connection closed [ 958.833779][ T3733] vhci_hcd vhci_hcd.0: stop threads [ 958.837756][ T3733] vhci_hcd vhci_hcd.0: release socket [ 958.839646][ T3733] vhci_hcd vhci_hcd.0: disconnect device [ 959.586682][T17293] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 959.589673][T17293] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 959.593175][T17293] vhci_hcd vhci_hcd.0: Device attached [ 959.657075][T17297] vhci_hcd: connection closed [ 959.657388][ T13] vhci_hcd vhci_hcd.4: stop threads [ 959.661363][ T13] vhci_hcd vhci_hcd.4: release socket [ 959.665467][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 959.850193][T17304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2145'. [ 960.465562][ T6039] usb 46-1: device descriptor read/8, error -110 [ 960.867158][ T6039] usb usb46-port1: attempt power cycle [ 961.106592][T17337] netlink: 'syz.1.2150': attribute type 1 has an invalid length. [ 961.110593][T17337] netlink: 'syz.1.2150': attribute type 2 has an invalid length. [ 961.427725][ T6039] usb usb46-port1: unable to enumerate USB device [ 961.434523][T17342] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 961.436954][T17342] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 961.441219][T17342] vhci_hcd vhci_hcd.0: Device attached [ 961.706540][T17348] netlink: 'syz.1.2153': attribute type 1 has an invalid length. [ 961.709574][T17348] netlink: 'syz.1.2153': attribute type 2 has an invalid length. [ 961.725517][ T6335] usb 44-1: SetAddress Request (127) to port 0 [ 961.727844][ T6335] usb 44-1: new SuperSpeed USB device number 127 using vhci_hcd [ 962.199345][T17344] vhci_hcd: connection reset by peer [ 962.204558][ T9336] vhci_hcd vhci_hcd.3: stop threads [ 962.212514][ T9336] vhci_hcd vhci_hcd.3: release socket [ 962.221608][ T9336] vhci_hcd vhci_hcd.3: disconnect device [ 962.236561][T17357] mkiss: ax0: crc mode is auto. [ 962.625365][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 962.625403][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 962.981324][T17369] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 962.983801][T17369] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 962.988540][T17369] vhci_hcd vhci_hcd.0: Device attached [ 963.000983][T17373] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 963.001008][T17373] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 963.001119][T17373] vhci_hcd vhci_hcd.0: Device attached [ 963.155449][T17374] vhci_hcd: connection closed [ 963.155722][ T172] vhci_hcd vhci_hcd.1: stop threads [ 963.160667][ T172] vhci_hcd vhci_hcd.1: release socket [ 963.163344][ T172] vhci_hcd vhci_hcd.1: disconnect device [ 963.470716][T17381] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 963.473290][T17381] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 963.478389][T17381] vhci_hcd vhci_hcd.0: Device attached [ 963.620924][T17370] vhci_hcd: connection closed [ 963.621269][ T3733] vhci_hcd vhci_hcd.3: stop threads [ 963.625087][ T3733] vhci_hcd vhci_hcd.3: release socket [ 963.627349][ T3733] vhci_hcd vhci_hcd.3: disconnect device [ 963.785638][ T6039] usb 46-1: SetAddress Request (4) to port 0 [ 963.788753][ T6039] usb 46-1: new SuperSpeed USB device number 4 using vhci_hcd [ 964.060944][T17382] vhci_hcd: connection reset by peer [ 964.063753][ T12] vhci_hcd vhci_hcd.4: stop threads [ 964.067798][ T12] vhci_hcd vhci_hcd.4: release socket [ 964.070278][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 964.171749][T17391] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 964.173949][T17391] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 964.178329][T17391] vhci_hcd vhci_hcd.0: Device attached [ 964.475619][ T6008] usb 40-1: SetAddress Request (6) to port 0 [ 964.478502][ T6008] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 964.672420][T17398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2161'. [ 964.750557][T17400] netlink: 'syz.4.2162': attribute type 1 has an invalid length. [ 964.753558][T17400] netlink: 'syz.4.2162': attribute type 2 has an invalid length. [ 964.782542][T17392] vhci_hcd: connection reset by peer [ 964.784776][ T12] vhci_hcd vhci_hcd.1: stop threads [ 964.788438][ T12] vhci_hcd vhci_hcd.1: release socket [ 964.791339][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 966.372674][T17426] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 966.374956][T17426] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 966.378431][T17426] vhci_hcd vhci_hcd.0: Device attached [ 966.775368][ T6335] usb 44-1: device descriptor read/8, error -110 [ 967.032044][T17427] vhci_hcd: connection closed [ 967.032410][ T1182] vhci_hcd vhci_hcd.4: stop threads [ 967.036869][ T1182] vhci_hcd vhci_hcd.4: release socket [ 967.038819][ T1182] vhci_hcd vhci_hcd.4: disconnect device [ 967.343081][ T6335] usb usb44-port1: attempt power cycle [ 967.868293][T17449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2174'. [ 967.906136][ T6335] usb usb44-port1: unable to enumerate USB device [ 968.801424][T17459] ceph: No mds server is up or the cluster is laggy [ 968.804122][ T29] libceph: connect (1)[c::]:6789 error -101 [ 968.806985][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 968.871714][ T6039] usb 46-1: device descriptor read/8, error -110 [ 969.266777][ T6039] usb usb46-port1: attempt power cycle [ 969.585794][ T6008] usb 40-1: device descriptor read/8, error -110 [ 969.895683][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 969.926218][ T6039] usb usb46-port1: unable to enumerate USB device [ 969.976226][ T6008] usb usb40-port1: attempt power cycle [ 970.130025][T17484] netlink: 'syz.4.2182': attribute type 1 has an invalid length. [ 970.133146][T17484] netlink: 'syz.4.2182': attribute type 2 has an invalid length. [ 970.144091][T17486] netlink: 'syz.0.2181': attribute type 4 has an invalid length. [ 970.567523][ T6008] usb usb40-port1: unable to enumerate USB device [ 971.255475][T17475] Bluetooth: hci5: command 0x1003 tx timeout [ 971.255529][ T5955] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 971.435351][ T5953] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 971.556963][T17495] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 971.560015][T17495] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 971.582752][T17495] vhci_hcd vhci_hcd.0: Device attached [ 971.701375][T17505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2186'. [ 971.895604][ T29] usb 46-1: SetAddress Request (8) to port 0 [ 971.900087][ T29] usb 46-1: new SuperSpeed USB device number 8 using vhci_hcd [ 972.036813][T17496] vhci_hcd: connection reset by peer [ 972.039599][ T12] vhci_hcd vhci_hcd.4: stop threads [ 972.041985][ T12] vhci_hcd vhci_hcd.4: release socket [ 972.044464][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 972.841657][T17520] netlink: 'syz.4.2190': attribute type 1 has an invalid length. [ 972.848166][T17520] netlink: 'syz.4.2190': attribute type 2 has an invalid length. [ 973.155371][ T6039] ================================================================== [ 973.158252][ T6039] BUG: KASAN: slab-use-after-free in hci_uart_write_work+0x82d/0x960 [ 973.161139][ T6039] Read of size 4 at addr ffff888059c3ee30 by task kworker/2:8/6039 [ 973.164153][ T6039] [ 973.166572][ T6039] CPU: 2 UID: 0 PID: 6039 Comm: kworker/2:8 Not tainted syzkaller #0 PREEMPT(full) [ 973.166591][ T6039] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 973.166600][ T6039] Workqueue: events hci_uart_write_work [ 973.166619][ T6039] Call Trace: [ 973.166625][ T6039] [ 973.166632][ T6039] dump_stack_lvl+0x116/0x1f0 [ 973.166654][ T6039] print_report+0xcd/0x630 [ 973.166673][ T6039] ? __virt_addr_valid+0x81/0x610 [ 973.166691][ T6039] ? __phys_addr+0xe8/0x180 [ 973.166708][ T6039] ? hci_uart_write_work+0x82d/0x960 [ 973.166717][ T6039] kasan_report+0xe0/0x110 [ 973.166739][ T6039] ? hci_uart_write_work+0x82d/0x960 [ 973.166751][ T6039] hci_uart_write_work+0x82d/0x960 [ 973.166761][ T6039] ? __pfx_pty_write+0x10/0x10 [ 973.166777][ T6039] process_one_work+0x9ba/0x1b20 [ 973.167281][ T6039] ? __pfx_process_one_work+0x10/0x10 [ 973.167296][ T6039] ? assign_work+0x1a0/0x250 [ 973.167308][ T6039] worker_thread+0x6c8/0xf10 [ 973.167322][ T6039] ? __kthread_parkme+0x19e/0x250 [ 973.167340][ T6039] ? __pfx_worker_thread+0x10/0x10 [ 973.167351][ T6039] kthread+0x3c5/0x780 [ 973.167362][ T6039] ? __pfx_kthread+0x10/0x10 [ 973.167373][ T6039] ? rcu_is_watching+0x12/0xc0 [ 973.167391][ T6039] ? __pfx_kthread+0x10/0x10 [ 973.167401][ T6039] ret_from_fork+0x983/0xb10 [ 973.167424][ T6039] ? __pfx_ret_from_fork+0x10/0x10 [ 973.167436][ T6039] ? __switch_to+0x7af/0x10d0 [ 973.167451][ T6039] ? __pfx_kthread+0x10/0x10 [ 973.167465][ T6039] ret_from_fork_asm+0x1a/0x30 [ 973.167487][ T6039] [ 973.167491][ T6039] [ 973.222494][ T6039] Allocated by task 6039: [ 973.224213][ T6039] kasan_save_stack+0x33/0x60 [ 973.225997][ T6039] kasan_save_track+0x14/0x30 [ 973.227619][ T6039] __kasan_slab_alloc+0x89/0x90 [ 973.229295][ T6039] kmem_cache_alloc_node_noprof+0x298/0x800 [ 973.231268][ T6039] __alloc_skb+0x156/0x410 [ 973.232841][ T6039] bcsp_prepare_pkt+0xe0/0xae0 [ 973.234662][ T6039] bcsp_dequeue+0x237/0x4b0 [ 973.236315][ T6039] hci_uart_write_work+0x4e3/0x960 [ 973.238046][ T6039] process_one_work+0x9ba/0x1b20 [ 973.239775][ T6039] worker_thread+0x6c8/0xf10 [ 973.241350][ T6039] kthread+0x3c5/0x780 [ 973.242702][ T6039] ret_from_fork+0x983/0xb10 [ 973.244385][ T6039] ret_from_fork_asm+0x1a/0x30 [ 973.246143][ T6039] [ 973.246962][ T6039] Freed by task 17516: [ 973.248346][ T6039] kasan_save_stack+0x33/0x60 [ 973.249956][ T6039] kasan_save_track+0x14/0x30 [ 973.251537][ T6039] kasan_save_free_info+0x3b/0x60 [ 973.253231][ T6039] __kasan_slab_free+0x5f/0x80 [ 973.254870][ T6039] kmem_cache_free+0x2d8/0x770 [ 973.256544][ T6039] kfree_skbmem+0x1a4/0x1f0 [ 973.258401][ T6039] sk_skb_reason_drop+0x136/0x1a0 [ 973.260273][ T6039] hci_uart_flush+0xa7/0x5d0 [ 973.261900][ T6039] hci_uart_close+0x1d/0xa0 [ 973.263538][ T6039] hci_uart_tty_close+0xb0/0x2d0 [ 973.265352][ T6039] tty_ldisc_close+0x114/0x1a0 [ 973.266979][ T6039] tty_ldisc_kill+0x8e/0x150 [ 973.268576][ T6039] tty_ldisc_hangup+0x365/0x730 [ 973.270239][ T6039] __tty_hangup.part.0+0x3fe/0x8c0 [ 973.271981][ T6039] tty_ioctl+0x1057/0x1650 [ 973.273518][ T6039] tty_compat_ioctl+0xb9/0x4d0 [ 973.275135][ T6039] __ia32_compat_sys_ioctl+0x242/0x370 [ 973.277028][ T6039] __do_fast_syscall_32+0xe8/0x680 [ 973.278775][ T6039] do_fast_syscall_32+0x32/0x80 [ 973.280462][ T6039] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 973.282594][ T6039] [ 973.283425][ T6039] The buggy address belongs to the object at ffff888059c3edc0 [ 973.283425][ T6039] which belongs to the cache skbuff_head_cache of size 240 [ 973.288484][ T6039] The buggy address is located 112 bytes inside of [ 973.288484][ T6039] freed 240-byte region [ffff888059c3edc0, ffff888059c3eeb0) [ 973.293899][ T6039] [ 973.294701][ T6039] The buggy address belongs to the physical page: [ 973.296815][ T6039] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59c3e [ 973.299827][ T6039] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 973.302538][ T6039] memcg:ffff88806e677e01 [ 973.303986][ T6039] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 973.306749][ T6039] page_type: f5(slab) [ 973.308186][ T6039] raw: 04fff00000000040 ffff888040ebc8c0 ffffea0001901700 dead000000000002 [ 973.311393][ T6039] raw: 0000000000000000 0000000000190019 00000000f5000000 ffff88806e677e01 [ 973.314414][ T6039] head: 04fff00000000040 ffff888040ebc8c0 ffffea0001901700 dead000000000002 [ 973.317350][ T6039] head: 0000000000000000 0000000000190019 00000000f5000000 ffff88806e677e01 [ 973.320279][ T6039] head: 04fff00000000001 ffffea0001670f81 00000000ffffffff 00000000ffffffff [ 973.323117][ T6039] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 973.325920][ T6039] page dumped because: kasan: bad access detected [ 973.328091][ T6039] page_owner tracks the page as allocated [ 973.329988][ T6039] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 16962, tgid 16961 (syz.3.2083), ts 937555583712, free_ts 937275372006 [ 973.337259][ T6039] post_alloc_hook+0x1af/0x220 [ 973.338823][ T6039] get_page_from_freelist+0xd0b/0x31a0 [ 973.340650][ T6039] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 973.342552][ T6039] alloc_pages_mpol+0x1fb/0x550 [ 973.344251][ T6039] new_slab+0x2c3/0x430 [ 973.346019][ T6039] ___slab_alloc+0xe18/0x1c90 [ 973.347624][ T6039] __slab_alloc.constprop.0+0x63/0x110 [ 973.349588][ T6039] kmem_cache_alloc_node_noprof+0x44a/0x800 [ 973.351576][ T6039] __alloc_skb+0x156/0x410 [ 973.353157][ T6039] sctp_packet_transmit+0x1ca/0x30b0 [ 973.355091][ T6039] sctp_packet_singleton+0x19e/0x370 [ 973.356917][ T6039] sctp_outq_flush+0x53d/0x33a0 [ 973.358557][ T6039] sctp_do_sm+0x17d1/0x5e00 [ 973.360157][ T6039] sctp_primitive_ASSOCIATE+0x9c/0xd0 [ 973.362067][ T6039] sctp_sendmsg_to_asoc+0xa4a/0x1c50 [ 973.363869][ T6039] sctp_sendmsg+0xe99/0x1e20 [ 973.365757][ T6039] page last free pid 0 tgid 0 stack trace: [ 973.367689][ T6039] __free_frozen_pages+0x7df/0x1170 [ 973.369463][ T6039] rcu_core+0x79c/0x15f0 [ 973.370864][ T6039] handle_softirqs+0x219/0x950 [ 973.372673][ T6039] __irq_exit_rcu+0x109/0x170 [ 973.374340][ T6039] irq_exit_rcu+0x9/0x30 [ 973.375859][ T6039] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 973.377823][ T6039] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 973.379938][ T6039] [ 973.380788][ T6039] Memory state around the buggy address: [ 973.382652][ T6039] ffff888059c3ed00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 973.385483][ T6039] ffff888059c3ed80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 973.388258][ T6039] >ffff888059c3ee00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 973.390977][ T6039] ^ [ 973.392949][ T6039] ffff888059c3ee80: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 973.395622][ T6039] ffff888059c3ef00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 973.398315][ T6039] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 973.474947][ T6039] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 973.477423][ T6039] CPU: 2 UID: 0 PID: 6039 Comm: kworker/2:8 Not tainted syzkaller #0 PREEMPT(full) [ 973.480550][ T6039] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 973.484085][ T6039] Workqueue: events hci_uart_write_work [ 973.486374][ T6039] Call Trace: [ 973.487504][ T6039] [ 973.488615][ T6039] dump_stack_lvl+0x3d/0x1f0 [ 973.490332][ T6039] vpanic+0x640/0x6f0 [ 973.491702][ T6039] panic+0xca/0xd0 [ 973.492994][ T6039] ? __pfx_panic+0x10/0x10 [ 973.494701][ T6039] ? hci_uart_write_work+0x82d/0x960 [ 973.496603][ T6039] ? preempt_schedule_common+0x44/0xc0 [ 973.498476][ T6039] ? preempt_schedule_thunk+0x16/0x30 [ 973.500395][ T6039] ? check_panic_on_warn+0x1f/0xb0 [ 973.502289][ T6039] check_panic_on_warn+0xab/0xb0 [ 973.504322][ T6039] end_report+0x107/0x160 [ 973.505944][ T6039] kasan_report+0xee/0x110 [ 973.507777][ T6039] ? hci_uart_write_work+0x82d/0x960 [ 973.509617][ T6039] hci_uart_write_work+0x82d/0x960 [ 973.511293][ T6039] ? __pfx_pty_write+0x10/0x10 [ 973.512875][ T6039] process_one_work+0x9ba/0x1b20 [ 973.514518][ T6039] ? __pfx_process_one_work+0x10/0x10 [ 973.516352][ T6039] ? assign_work+0x1a0/0x250 [ 973.518020][ T6039] worker_thread+0x6c8/0xf10 [ 973.519614][ T6039] ? __kthread_parkme+0x19e/0x250 [ 973.521319][ T6039] ? __pfx_worker_thread+0x10/0x10 [ 973.523030][ T6039] kthread+0x3c5/0x780 [ 973.524530][ T6039] ? __pfx_kthread+0x10/0x10 [ 973.526229][ T6039] ? rcu_is_watching+0x12/0xc0 [ 973.528060][ T6039] ? __pfx_kthread+0x10/0x10 [ 973.529656][ T6039] ret_from_fork+0x983/0xb10 [ 973.531309][ T6039] ? __pfx_ret_from_fork+0x10/0x10 [ 973.533032][ T6039] ? __switch_to+0x7af/0x10d0 [ 973.534754][ T6039] ? __pfx_kthread+0x10/0x10 [ 973.536398][ T6039] ret_from_fork_asm+0x1a/0x30 [ 973.538015][ T6039] [ 973.539859][ T6039] Kernel Offset: disabled [ 973.541362][ T6039] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:13:34 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffea0001890ac0 RCX=ffffffff821331b0 RDX=ffff888023654980 RSI=0000000000000000 RDI=ffffea0001890ac0 RBP=0000000000000001 RSP=ffffc9000e51f7d8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=ffff8880236554b0 R12=ffffea0001890ac0 R13=ffff888012c13400 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff82121920 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7476288 CR3=000000006c527000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff888021a0a4c0 RCX=1ffff92001c5af07 RDX=0000000000000000 RSI=ffffffff8bf2b500 RDI=ffffffff8dd74f28 RBP=ffffed1004341498 RSP=ffffc9000e2d78d0 R8 =0000000000000000 R9 =fffffbfff2111d3a R10=ffffffff9088e9d7 R11=ffff888021a0aff0 R12=ffff888021a0a4ec R13=ffff888021a0a4c0 R14=7fffffffffffffff R15=ffff888021a0a4c0 RIP=ffffffff8b769eb7 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977fc000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080021000 CR3=000000005e521000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000001 RBX=ffffffff8e2d6ba0 RCX=ffffffff819d4477 RDX=ffff888021ac0000 RSI=0000000000000000 RDI=0000000000000007 RBP=fffffffffffff498 RSP=ffffc900061372d8 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000074f9b R12=dffffc0000000000 R13=1ffff92000c26e64 R14=0000000000000000 R15=ffffffff8e2d6be0 RIP=ffffffff81be640c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3761a0 CR3=000000004dbd9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000f53e43 RBX=0000000000000003 RCX=ffffffff8b7576d9 RDX=0000000000000000 RSI=ffffffff8daca5cd RDI=ffffffff8bf2b580 RBP=ffffed10039d1000 RSP=ffffc9000048fde8 R8 =0000000000000001 R9 =ffffed10056a673d R10=ffff88802b5339eb R11=ffff88801ce88b30 R12=0000000000000003 R13=ffff88801ce88000 R14=ffffffff9088e9d0 R15=0000000000000000 RIP=ffffffff8b755dcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fff09ba80a0 CR3=000000004cce4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000