last executing test programs: 4.695493653s ago: executing program 1 (id=2536): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b6e9000000000000850000000c000000b7000000000008000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x46201, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4, 0x0, 0x100}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_police={0x30, 0x1a, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x98}}, 0x2004e804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000200)) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 4.099314777s ago: executing program 1 (id=2539): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = io_uring_setup(0x2623, &(0x7f00000001c0)={0x0, 0x45f8, 0x0, 0x0, 0x192}) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d", 0xf) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) close_range(r0, 0xffffffffffffffff, 0x0) 3.942404197s ago: executing program 1 (id=2541): socket$netlink(0x10, 0x3, 0xf) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000007840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006e00)=ANY=[@ANYBLOB], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000073c0)}}], 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000080)) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x2, 0x2, 0x1) syz_io_uring_setup(0x332e, &(0x7f0000000480)={0x0, 0xaeb7, 0x40, 0x3, 0x2d9}, 0x0, &(0x7f0000000400)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1e3003, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0c0000008000000007000000"], 0xc}}], 0x2, 0x4000000) ioprio_set$pid(0x3, 0x0, 0x4003) 3.572508493s ago: executing program 0 (id=2543): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 3.352439686s ago: executing program 0 (id=2545): ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) 3.302514644s ago: executing program 0 (id=2546): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c9"], 0x16) syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x7) 3.062463977s ago: executing program 1 (id=2547): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x1100) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) connect$rose(r0, &(0x7f0000002a00)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) 2.872328768s ago: executing program 1 (id=2548): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x2000010) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xbc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x89901) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c9"], 0x16) syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04050400c9"], 0x7) 2.752616563s ago: executing program 0 (id=2549): socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$inet6(0xa, 0x5, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.703584287s ago: executing program 0 (id=2550): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b6e9000000000000850000000c000000b7000000000008000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x46201, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4, 0x0, 0x100}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_police={0x30, 0x1a, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x98}}, 0x2004e804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000200)) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 2.634128979s ago: executing program 2 (id=2551): sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x144, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xb1, 0x80, [@ibss={0x6, 0x2, 0x7b}, @ht={0x2d, 0x1a, {0x2, 0x1, 0x5, 0x0, {0x5, 0x482, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x2, 0x6}}, @chsw_timing={0x68, 0x4, {0x8001, 0x2}}, @challenge={0x10, 0x1, 0x2f}, @rann={0x7e, 0x15, {{0x0, 0x74}, 0x4, 0x87, @device_a, 0x1, 0x1, 0x3}}, @preq={0x82, 0x36, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0x7, 0xbb, 0x369, @broadcast, 0x4, @value=@broadcast, 0x7, 0x2, 0x2, [{{0x0, 0x0, 0x1}, @device_b, 0x1}, {{0x1}, @device_a, 0xf}]}}, @tim={0x5, 0x33, {0x3b, 0xed, 0x9, "fce6baa8cafa86aa8cdfd77ed15297be5dbd00501609d1d84443b06c8b7171567f081f1c2dd1f9c3f6d706d4d246513a"}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x73, 0x80, [@preq={0x82, 0x6d, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0x3, 0x6, 0x9, @device_b, 0xd, @value=@device_b, 0x7, 0xffff, 0x7, [{{0x0, 0x0, 0x1}, @device_b, 0x25}, {{}, @broadcast, 0x100}, {{0x0, 0x0, 0x1}, @device_b, 0x3}, {{0x1}, @device_b, 0x400}, {{0x1}, @broadcast, 0x40}, {{}, @device_b, 0x8}, {{0x1}, @device_a, 0x775}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x4}, @NL80211_ATTR_BEACON_TAIL={0x4}]}, 0x144}, 0x1, 0x0, 0x0, 0x4}, 0x2008810) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.550939483s ago: executing program 2 (id=2552): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b6e9000000000000850000000c000000b7000000000008000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x46201, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_police={0x30, 0x1a, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x98}}, 0x2004e804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000200)) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 2.342126724s ago: executing program 1 (id=2554): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000640)="a41ca680618d05b61bd31b34d4fb97a80caea3b4740602b5", 0x18}], 0x1) 1.087763462s ago: executing program 2 (id=2559): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x8000000, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006e80)="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", 0x2000, &(0x7f0000006bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006680)={0x90, 0x0, 0x54, {0x0, 0x2, 0x8, 0x3, 0x8, 0x7e0, {0x0, 0x3d727124, 0x7ff, 0x0, 0x653, 0x13, 0x0, 0x1d3, 0x3, 0x6000, 0x8, r2, r3, 0x5, 0x100}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x4, {0x8, 0x4, 0x1, 0x200000c, 0x8, 0x3, {0x1, 0x3, 0x6, 0x9, 0x9, 0x81, 0x8, 0xa8, 0x547, 0x1000, 0x2, r2, r3, 0x101, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) symlinkat(&(0x7f0000000000)='./file1\x00', r4, &(0x7f0000000080)='./file0/file1\x00') 1.075105218s ago: executing program 2 (id=2561): r0 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000380)) 982.443481ms ago: executing program 3 (id=2562): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x2000010) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xbc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x89901) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c9"], 0x16) syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04050400c9"], 0x7) 979.00908ms ago: executing program 2 (id=2563): close(0x3) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) close(0x3) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff000) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x40044) 911.398727ms ago: executing program 0 (id=2564): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c00000ee00"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x1}, 0x18) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$uinput_user_dev(r7, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x6, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x4, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x200, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x926, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x2, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5e901bb4e0379f25665d395238e6730ad37288567b268fe7f1586d588e526e7d727ec73b81279a75e879dd960e5107507609756ec582a8032a0ae41beb16ed972c66cc59029b79ace6666660cde28316ee23ff7ea64e39ae6d39b5f45f5ccf2adaffee80cc44776710ba5c2a2e806dcb0a1fd133d11902dea4f"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) pipe(&(0x7f0000000080)) 621.287989ms ago: executing program 2 (id=2565): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 431.792439ms ago: executing program 3 (id=2566): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x3, 0x7, 0x3, 0x180, 0x6, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x2000000002d, 0x0, 0xffffffffffffffff, 0x0, 0xbd9], 0xffff1001, 0x43100}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x1000008000000007, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xfffffffffffffff7, 0x68ff, 0x7, 0x100008000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x9001, 0x8, 0x8, 0xb, 0xe6, 0x41, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x9, 0x75, 0x6, 0x36, 0x0, 0x2, 0xb4}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x1, 0x1, 0xa4, 0x5, 0x5}, {0x8000000, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe, 0x4}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf9, 0x97}, {0xeeefa000, 0xdddd0000, 0x6, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x1}, {0x4, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x1000, 0x3, 0x8]}) 201.996259ms ago: executing program 3 (id=2567): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$inet_sctp(0x2, 0x5, 0x84) socket$pppoe(0x18, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) socket(0x10, 0x3, 0x9) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x58) socket(0x10, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 201.622514ms ago: executing program 3 (id=2568): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0xa) openat$sequencer2(0xffffff9c, &(0x7f0000000180), 0x2001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pipe2$9p(&(0x7f0000000300), 0x80) r0 = syz_io_uring_setup(0x462, &(0x7f0000000280)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x43, 0x0, @fd, 0x11e, 0x5, 0x0, 0x5, 0x0, {0x3}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 134.921656ms ago: executing program 3 (id=2569): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x1, 0x0, 0x0, 0x9, 0xcb, 0x2, 0x5505, 0xc3b8, 0x2, 0x93, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, 0x0) 0s ago: executing program 3 (id=2570): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b6e9000000000000850000000c000000b7000000000008000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x46201, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4, 0x0, 0x100}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_police={0x30, 0x1a, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x98}}, 0x2004e804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000200)) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) kernel console output (not intermixed with test programs): d options change via netlink (err -105) [ 581.941656][T13275] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 581.946872][T13275] team0 (unregistering): Port device team_slave_0 removed [ 581.951667][T13275] team0 (unregistering): Failed to send options change via netlink (err -105) [ 581.954985][T13275] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 581.959462][T13275] team0 (unregistering): Port device team_slave_1 removed [ 581.981922][T13272] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.994833][T13278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1873'. [ 582.001105][T13278] netlink: 'syz.0.1873': attribute type 2 has an invalid length. [ 582.067179][T13272] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.153739][T13272] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.224813][ T1141] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.232750][ T1141] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.242947][ T1141] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.260172][ T1150] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.557629][T13308] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1884'. [ 583.643293][T13310] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.665389][T13314] netlink: 'syz.3.1886': attribute type 13 has an invalid length. [ 583.669914][T13314] gretap0: refused to change device tx_queue_len [ 583.672221][T13314] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 583.707414][T13310] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.769401][T13310] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.842779][T13310] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.844969][T13323] IPv6: Can't replace route, no match found [ 583.863053][ T5954] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 583.863237][T13268] Bluetooth: hci4: command 0x1003 tx timeout [ 583.928068][T13327] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1893'. [ 584.097351][T13336] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 584.099500][T13336] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 584.106748][T13336] vhci_hcd vhci_hcd.0: Device attached [ 584.193842][T13336] rdma_rxe: rxe_newlink: failed to add wg2 [ 584.392592][ T6410] usb 38-1: SetAddress Request (24) to port 0 [ 584.394824][ T6410] usb 38-1: new SuperSpeed USB device number 24 using vhci_hcd [ 584.732241][T13337] vhci_hcd: connection reset by peer [ 584.734181][ T46] vhci_hcd vhci_hcd.0: stop threads [ 584.735937][ T46] vhci_hcd vhci_hcd.0: release socket [ 584.737738][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 585.358865][T13344] serio: Serial port ptm0 [ 586.024804][T13370] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1907'. [ 586.124389][T13371] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 586.126456][T13371] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 586.129059][T13371] vhci_hcd vhci_hcd.0: Device attached [ 586.264706][ T6395] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.277352][ T6395] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.288558][ T6395] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.302098][ T6395] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.716523][T13372] vhci_hcd: connection closed [ 586.716760][ T1141] vhci_hcd vhci_hcd.0: stop threads [ 586.720023][ T1141] vhci_hcd vhci_hcd.0: release socket [ 586.721914][ T1141] vhci_hcd vhci_hcd.0: disconnect device [ 586.885854][T13391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1915'. [ 586.918439][T13393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1916'. [ 586.984083][ T1022] lo speed is unknown, defaulting to 1000 [ 586.985667][T13397] netlink: 'syz.2.1918': attribute type 13 has an invalid length. [ 586.986171][ T1022] syz2: Port: 1 Link DOWN [ 586.994595][T13397] gretap0: refused to change device tx_queue_len [ 586.996735][T13397] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 587.001375][ T34] lo speed is unknown, defaulting to 1000 [ 587.003296][ T34] syz2: Port: 1 Link ACTIVE [ 587.273481][T13405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1922'. [ 587.283473][T13405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1922'. [ 587.325342][ C3] vxcan0: j1939_tp_rxtimer: 0xffff888027c34400: rx timeout, send abort [ 587.343004][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 587.498247][T13412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1925'. [ 587.501082][T13412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1925'. [ 587.533226][T13416] netlink: 'syz.0.1927': attribute type 13 has an invalid length. [ 587.537694][T13416] gretap0: refused to change device tx_queue_len [ 587.539924][T13416] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 587.548527][T13418] 9p: Bad value for 'wfdno' [ 587.628332][T13422] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.687689][T13422] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.756927][T13422] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.805921][T13422] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.825574][ C3] vxcan0: j1939_tp_rxtimer: 0xffff888027c35000: rx timeout, send abort [ 587.829498][ C3] vxcan0: j1939_tp_rxtimer: 0xffff888027c34400: abort rx timeout. Force session deactivation [ 587.880916][ T6395] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.889585][ T6395] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.896459][ T6395] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.903113][ T6395] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.969999][T13432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1933'. [ 587.984474][T13432] syz_tun: entered allmulticast mode [ 588.048692][T13436] lo speed is unknown, defaulting to 1000 [ 588.340299][ C3] vxcan0: j1939_tp_rxtimer: 0xffff888027c35000: abort rx timeout. Force session deactivation [ 588.582415][ T1141] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 589.091683][T13448] netlink: 'syz.0.1938': attribute type 13 has an invalid length. [ 589.112459][T13449] rdma_rxe: rxe_newlink: failed to add wg2 [ 589.127991][T13448] gretap0: refused to change device tx_queue_len [ 589.130234][T13448] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 589.362190][T13436] Set syz1 is full, maxelem 65536 reached [ 589.382285][ T5954] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 589.466976][ T6410] usb 38-1: device descriptor read/8, error -110 [ 589.589443][T13461] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 589.855687][T13464] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1943'. [ 589.855976][ T6410] usb usb38-port1: attempt power cycle [ 590.117395][T13471] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.131048][T13473] lo speed is unknown, defaulting to 1000 [ 590.172651][T13475] team0 (unregistering): Failed to send options change via netlink (err -105) [ 590.175960][T13475] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 590.179440][T13475] team0 (unregistering): Port device team_slave_0 removed [ 590.184885][T13475] team0 (unregistering): Failed to send options change via netlink (err -105) [ 590.188756][T13475] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 590.193402][T13475] team0 (unregistering): Port device team_slave_1 removed [ 590.225675][T13471] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.306142][T13471] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.404651][T13471] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.422710][ T6410] usb usb38-port1: unable to enumerate USB device [ 590.512942][ T60] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.526004][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.536096][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.564066][ T60] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.598153][T13486] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 590.600423][T13486] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 590.603432][T13486] vhci_hcd vhci_hcd.0: Device attached [ 590.790396][T13492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1952'. [ 590.902204][ T53] usb 42-1: SetAddress Request (114) to port 0 [ 590.904304][ T53] usb 42-1: new SuperSpeed USB device number 114 using vhci_hcd [ 591.020090][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1955'. [ 591.236878][T13487] vhci_hcd: connection reset by peer [ 591.239836][ T13] vhci_hcd vhci_hcd.2: stop threads [ 591.242009][ T13] vhci_hcd vhci_hcd.2: release socket [ 591.246973][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 591.742396][T13518] syzkaller0: entered promiscuous mode [ 591.744157][T13518] syzkaller0: entered allmulticast mode [ 592.718507][T13524] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.784152][T13534] lo speed is unknown, defaulting to 1000 [ 592.845391][T13524] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.893222][T13540] lo speed is unknown, defaulting to 1000 [ 592.919739][T13524] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.050127][T13524] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.232987][ T8196] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.235805][ T8196] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.246726][ T8196] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.258491][ T8196] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.310102][T13534] Set syz1 is full, maxelem 65536 reached [ 594.428778][T13555] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.541942][T13555] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.733500][T13555] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.785335][T13555] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.908693][ T5954] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 595.098443][T13564] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 595.737057][T13540] Set syz1 is full, maxelem 65536 reached [ 595.952240][ T53] usb 42-1: device descriptor read/8, error -110 [ 596.353056][ T53] usb usb42-port1: attempt power cycle [ 596.459324][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 596.459339][ T40] audit: type=1326 audit(1766272455.961:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13597 comm="syz.3.1988" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703d579 code=0x0 [ 596.520406][T13601] tipc: Enabling of bearer rejected, failed to enable media [ 596.528201][T13600] tipc: Enabled bearer , priority 0 [ 596.538512][T13599] tipc: Disabling bearer [ 596.922809][ T53] usb usb42-port1: unable to enumerate USB device [ 596.931337][T13614] lo speed is unknown, defaulting to 1000 [ 597.406269][ T6395] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.421865][ T6395] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.429403][ T6395] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.436318][ T6395] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.762843][T13641] overlayfs: failed to clone upperpath [ 598.105051][T13653] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 598.107228][T13653] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 598.111679][T13653] vhci_hcd vhci_hcd.0: Device attached [ 598.392223][ T5823] usb 42-1: SetAddress Request (118) to port 0 [ 598.394379][ T5823] usb 42-1: new SuperSpeed USB device number 118 using vhci_hcd [ 598.666081][T13654] vhci_hcd: connection reset by peer [ 598.668234][ T1150] vhci_hcd vhci_hcd.2: stop threads [ 598.670545][ T1150] vhci_hcd vhci_hcd.2: release socket [ 598.673422][ T1150] vhci_hcd vhci_hcd.2: disconnect device [ 598.907563][T13666] __nla_validate_parse: 2 callbacks suppressed [ 598.907576][T13666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2016'. [ 598.927194][T13614] Set syz1 is full, maxelem 65536 reached [ 599.060292][T13677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2020'. [ 599.122705][T13679] syzkaller0: entered promiscuous mode [ 599.128567][T13679] syzkaller0: entered allmulticast mode [ 599.514052][T13692] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 599.516153][T13692] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 599.519971][T13692] vhci_hcd vhci_hcd.0: Device attached [ 599.792276][ T6065] usb 38-1: SetAddress Request (28) to port 0 [ 599.795186][ T6065] usb 38-1: new SuperSpeed USB device number 28 using vhci_hcd [ 599.953250][T13693] vhci_hcd: connection reset by peer [ 599.956051][ T1150] vhci_hcd vhci_hcd.0: stop threads [ 599.958958][ T1150] vhci_hcd vhci_hcd.0: release socket [ 599.961577][ T1150] vhci_hcd vhci_hcd.0: disconnect device [ 600.437184][T13704] lo speed is unknown, defaulting to 1000 [ 600.773704][T13718] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.862488][T13718] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.952554][T13723] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.965557][T13718] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.047246][T13718] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.054957][T13723] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.239951][T13723] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.298857][ T4627] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.309460][ T4627] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.327893][ T1150] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.337449][ T1150] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.343542][T13723] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.460525][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.473331][ T6395] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.485911][ T6395] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.499623][ T6395] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.708012][T13740] overlayfs: failed to clone upperpath [ 601.763987][T13742] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2041'. [ 602.327111][T13704] Set syz1 is full, maxelem 65536 reached [ 602.398424][T13752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2045'. [ 602.446573][T13752] macvtap1: entered promiscuous mode [ 602.448745][T13752] bridge0: entered promiscuous mode [ 602.451349][T13752] macvtap1: entered allmulticast mode [ 602.453582][T13752] bridge0: entered allmulticast mode [ 602.466090][T13759] bridge0: left allmulticast mode [ 602.468179][T13759] bridge0: left promiscuous mode [ 602.482758][T13754] lo speed is unknown, defaulting to 1000 [ 602.546658][T13756] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.596908][T13756] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.694285][T13756] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.705416][ T5954] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 602.765945][T13756] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.311811][T13781] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 603.313979][T13781] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 603.323675][T13781] vhci_hcd vhci_hcd.0: Device attached [ 603.462242][ T5823] usb 42-1: device descriptor read/8, error -110 [ 603.853913][T13782] vhci_hcd: connection closed [ 603.862813][ T5823] usb usb42-port1: attempt power cycle [ 603.867640][ T13] vhci_hcd vhci_hcd.0: stop threads [ 603.869475][ T13] vhci_hcd vhci_hcd.0: release socket [ 603.871294][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 604.434762][T13754] Set syz1 is full, maxelem 65536 reached [ 604.442801][ T5823] usb usb42-port1: unable to enumerate USB device [ 604.506679][T13795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2057'. [ 604.540196][T13795] bridge0: entered promiscuous mode [ 604.542175][T13795] macvtap1: entered promiscuous mode [ 604.544077][T13795] macvtap1: entered allmulticast mode [ 604.545776][T13795] bridge0: entered allmulticast mode [ 604.553477][T13797] lo speed is unknown, defaulting to 1000 [ 604.562424][T13795] bridge0: left allmulticast mode [ 604.564311][T13795] bridge0: left promiscuous mode [ 604.584258][T13801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2059'. [ 604.593078][T13801] macvtap2: entered promiscuous mode [ 604.595199][T13801] bridge0: entered promiscuous mode [ 604.597292][T13801] macvtap2: entered allmulticast mode [ 604.599359][T13801] bridge0: entered allmulticast mode [ 604.610458][T13803] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.2060'. [ 604.643537][T13801] bridge0: left allmulticast mode [ 604.645640][T13801] bridge0: left promiscuous mode [ 604.694086][T13809] lo speed is unknown, defaulting to 1000 [ 604.822369][ T6065] usb 38-1: device descriptor read/8, error -110 [ 605.213099][ T6065] usb usb38-port1: attempt power cycle [ 605.604061][ T8196] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.615765][ T8196] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.632097][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.650830][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.692617][ T5954] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 605.722393][ T1141] Bluetooth: hci4: Frame reassembly failed (-84) [ 605.793812][ T6065] usb usb38-port1: unable to enumerate USB device [ 605.862531][T13832] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2067'. [ 605.982486][T13835] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 606.056559][T13838] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.2069'. [ 606.323301][T13797] Set syz1 is full, maxelem 65536 reached [ 606.459944][T13268] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 606.941402][T13872] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2082'. [ 607.354980][T13882] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 607.357790][T13882] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 607.361479][T13882] vhci_hcd vhci_hcd.0: Device attached [ 607.409701][ T8196] Bluetooth: hci5: Frame reassembly failed (-84) [ 607.622227][ T827] usb 38-1: SetAddress Request (32) to port 0 [ 607.624405][ T827] usb 38-1: new SuperSpeed USB device number 32 using vhci_hcd [ 607.664173][T13897] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 607.667875][T13897] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 607.670732][T13897] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 607.674743][T13897] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 607.677480][T13897] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 607.698051][T13895] lo speed is unknown, defaulting to 1000 [ 607.782629][ T5954] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 607.782641][ T5953] Bluetooth: hci4: command 0x1003 tx timeout [ 607.828823][T13895] chnl_net:caif_netlink_parms(): no params data found [ 607.910030][T13895] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.913268][T13895] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.916256][T13895] bridge_slave_0: entered allmulticast mode [ 607.920356][T13895] bridge_slave_0: entered promiscuous mode [ 607.925597][T13895] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.928798][T13895] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.931849][T13895] bridge_slave_1: entered allmulticast mode [ 607.935802][T13895] bridge_slave_1: entered promiscuous mode [ 607.956750][T13883] vhci_hcd: connection reset by peer [ 607.959236][ T1150] vhci_hcd vhci_hcd.0: stop threads [ 607.961522][ T1150] vhci_hcd vhci_hcd.0: release socket [ 607.963979][ T1150] vhci_hcd vhci_hcd.0: disconnect device [ 607.969315][T13895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.976080][T13895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.993245][T13895] team0: Port device team_slave_0 added [ 607.997381][T13895] team0: Port device team_slave_1 added [ 608.011534][T13895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.014051][T13895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.025149][T13895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.031313][T13895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.034467][T13895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.045512][T13895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.081365][T13895] hsr_slave_0: entered promiscuous mode [ 608.083828][T13895] hsr_slave_1: entered promiscuous mode [ 608.086608][T13895] debugfs: 'hsr0' already exists in 'hsr' [ 608.088492][T13895] Cannot create hsr debugfs directory [ 608.164969][T13895] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.239905][T13895] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.298866][T13895] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.380514][T13895] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.492599][T13895] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 608.505651][T13895] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 608.510523][T13895] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 608.519160][T13895] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 608.559575][T13909] syzkaller0: entered promiscuous mode [ 608.561700][T13909] syzkaller0: entered allmulticast mode [ 609.462753][T13268] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 609.462760][ T5954] Bluetooth: hci5: command 0x1003 tx timeout [ 609.526644][T13895] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.528917][T13895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.531792][T13895] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.534124][T13895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.538702][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.541533][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.580517][T13895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.592991][T13895] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.597829][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.600075][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.606733][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.609069][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.679036][T13925] lo speed is unknown, defaulting to 1000 [ 609.703742][T13268] Bluetooth: hci6: command tx timeout [ 609.786215][T13895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.811949][T13895] veth0_vlan: entered promiscuous mode [ 609.817656][T13895] veth1_vlan: entered promiscuous mode [ 609.834826][T13895] veth0_macvtap: entered promiscuous mode [ 609.839104][T13895] veth1_macvtap: entered promiscuous mode [ 609.847851][T13895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.855704][T13895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.868640][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.871879][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.876540][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.879668][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.975173][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.982787][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.997584][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.000074][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.066627][T13936] fuse: Bad value for 'fd' [ 610.475429][T13943] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 610.477495][T13943] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 610.480106][T13943] vhci_hcd vhci_hcd.0: Device attached [ 610.809151][T13944] vhci_hcd: connection closed [ 610.816852][ T46] vhci_hcd vhci_hcd.0: stop threads [ 610.822559][ T46] vhci_hcd vhci_hcd.0: release socket [ 610.830747][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 610.866532][T13268] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 610.870784][T13268] CPU: 2 UID: 0 PID: 13268 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 610.870809][T13268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 610.870822][T13268] Workqueue: hci0 hci_rx_work [ 610.870849][T13268] Call Trace: [ 610.870856][T13268] [ 610.870863][T13268] dump_stack_lvl+0x16c/0x1f0 [ 610.870892][T13268] sysfs_warn_dup+0x7f/0xa0 [ 610.870915][T13268] sysfs_create_dir_ns+0x24b/0x2b0 [ 610.870935][T13268] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 610.870954][T13268] ? find_held_lock+0x2b/0x80 [ 610.870982][T13268] ? do_raw_spin_unlock+0x172/0x230 [ 610.871005][T13268] kobject_add_internal+0x2c4/0x9d0 [ 610.871028][T13268] kobject_add+0x16e/0x240 [ 610.871046][T13268] ? __pfx_kobject_add+0x10/0x10 [ 610.871065][T13268] ? kobject_put+0xaf/0x6f0 [ 610.871077][T13268] ? _raw_spin_unlock+0x28/0x50 [ 610.871107][T13268] device_add+0x288/0x1980 [ 610.871130][T13268] ? __pfx_dev_set_name+0x10/0x10 [ 610.871153][T13268] ? __pfx_device_add+0x10/0x10 [ 610.871174][T13268] ? mgmt_send_event_skb+0x2fb/0x460 [ 610.871198][T13268] hci_conn_add_sysfs+0x1a8/0x260 [ 610.871219][T13268] le_conn_complete_evt+0x11ed/0x1fa0 [ 610.871245][T13268] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 610.871271][T13268] hci_le_conn_complete_evt+0x23c/0x3a0 [ 610.871297][T13268] hci_le_meta_evt+0x357/0x610 [ 610.871319][T13268] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 610.871344][T13268] hci_event_packet+0x685/0x1210 [ 610.871365][T13268] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 610.871390][T13268] ? __pfx_hci_event_packet+0x10/0x10 [ 610.871415][T13268] ? kcov_remote_start+0x399/0x680 [ 610.871439][T13268] ? lockdep_hardirqs_on+0x7c/0x110 [ 610.871468][T13268] hci_rx_work+0x2c9/0x1020 [ 610.871493][T13268] process_one_work+0x9ba/0x1b20 [ 610.871531][T13268] ? __pfx_process_one_work+0x10/0x10 [ 610.871558][T13268] ? assign_work+0x1a0/0x250 [ 610.871577][T13268] worker_thread+0x6c8/0xf10 [ 610.871599][T13268] ? __kthread_parkme+0x19e/0x250 [ 610.871624][T13268] ? __pfx_worker_thread+0x10/0x10 [ 610.871644][T13268] kthread+0x3c5/0x780 [ 610.871664][T13268] ? __pfx_kthread+0x10/0x10 [ 610.871685][T13268] ? rcu_is_watching+0x12/0xc0 [ 610.871712][T13268] ? __pfx_kthread+0x10/0x10 [ 610.871731][T13268] ret_from_fork+0x983/0xb10 [ 610.871752][T13268] ? __pfx_ret_from_fork+0x10/0x10 [ 610.871792][T13268] ? rcu_is_watching+0x12/0xc0 [ 610.871817][T13268] ? __switch_to+0x7af/0x10d0 [ 610.871841][T13268] ? __pfx_kthread+0x10/0x10 [ 610.871861][T13268] ret_from_fork_asm+0x1a/0x30 [ 610.871904][T13268] [ 610.932363][T13268] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 610.967140][T13268] Bluetooth: hci0: failed to register connection device [ 611.792895][T13268] Bluetooth: hci6: command tx timeout [ 612.105738][T13925] Set syz1 is full, maxelem 65536 reached [ 612.483088][T13980] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 612.485763][T13980] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 612.489500][T13980] vhci_hcd vhci_hcd.0: Device attached [ 612.689292][ T827] usb 38-1: device descriptor read/8, error -110 [ 612.752213][ T6065] usb 40-1: SetAddress Request (4) to port 0 [ 612.754458][ T6065] usb 40-1: new SuperSpeed USB device number 4 using vhci_hcd [ 612.984514][T13268] Bluetooth: hci0: command 0x0406 tx timeout [ 613.188468][T13994] rdma_rxe: rxe_newlink: failed to add wg2 [ 613.206736][ T827] usb usb38-port1: attempt power cycle [ 613.372357][T13981] vhci_hcd: connection reset by peer [ 613.374608][ T46] vhci_hcd vhci_hcd.1: stop threads [ 613.377058][ T46] vhci_hcd vhci_hcd.1: release socket [ 613.382708][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 613.701467][T14006] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.757063][T14007] team0 (unregistering): Failed to send options change via netlink (err -105) [ 613.760350][T14007] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 613.762928][ T827] usb usb38-port1: unable to enumerate USB device [ 613.764941][T14007] team0 (unregistering): Port device team_slave_0 removed [ 613.771718][T14007] team0 (unregistering): Failed to send options change via netlink (err -105) [ 613.780681][T14007] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 613.792627][T14007] team0 (unregistering): Port device team_slave_1 removed [ 613.833557][T14006] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.872204][T13268] Bluetooth: hci6: command tx timeout [ 613.873944][T14011] syzkaller0: entered promiscuous mode [ 613.876121][T14011] syzkaller0: entered allmulticast mode [ 614.110241][ T8579] Bluetooth: hci3: Frame reassembly failed (-84) [ 615.072489][ T5954] Bluetooth: hci0: command 0x0406 tx timeout [ 615.153835][T14006] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.160538][T14023] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.234868][T14026] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2121'. [ 615.255925][T14006] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.268692][T14023] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.306514][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 615.343081][ T46] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.351224][ T8579] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.360146][ T8579] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.365717][T14023] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.375499][ T8579] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.416755][T14023] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.529280][ T6408] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.539923][ T6408] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.552084][ T6408] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.559931][ T6408] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.603886][T14032] netlink: 'syz.2.2124': attribute type 13 has an invalid length. [ 615.608585][T14032] gretap0: refused to change device tx_queue_len [ 615.611641][T14032] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 615.781279][T14038] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2127'. [ 615.866672][T14042] syzkaller0: entered promiscuous mode [ 615.868812][T14042] syzkaller0: entered allmulticast mode [ 615.942224][ T5953] Bluetooth: hci6: command tx timeout [ 616.182681][ T5953] Bluetooth: hci3: command 0x1003 tx timeout [ 616.182744][T13268] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 616.876594][T14047] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.957604][T14047] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.025300][T14047] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.086910][T14047] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.187322][ T1150] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.195028][ T1150] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.204669][ T8579] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.214103][ T8579] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.305586][ T1141] Bluetooth: hci3: Frame reassembly failed (-84) [ 617.382333][ T5954] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 617.385143][ T5953] Bluetooth: hci4: command 0x1003 tx timeout [ 617.782862][ T6065] usb 40-1: device descriptor read/8, error -110 [ 618.076017][T14055] netlink: 'syz.0.2133': attribute type 13 has an invalid length. [ 618.080046][T14055] gretap0: refused to change device tx_queue_len [ 618.082809][T14055] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 618.172722][ T6065] usb usb40-port1: attempt power cycle [ 618.744267][ T6065] usb usb40-port1: unable to enumerate USB device [ 619.003194][ T5954] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 619.007635][ T5954] CPU: 1 UID: 0 PID: 5954 Comm: kworker/u33:4 Not tainted syzkaller #0 PREEMPT(full) [ 619.007661][ T5954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 619.007674][ T5954] Workqueue: hci1 hci_rx_work [ 619.007702][ T5954] Call Trace: [ 619.007709][ T5954] [ 619.007716][ T5954] dump_stack_lvl+0x16c/0x1f0 [ 619.007746][ T5954] sysfs_warn_dup+0x7f/0xa0 [ 619.007765][ T5954] sysfs_create_dir_ns+0x24b/0x2b0 [ 619.007786][ T5954] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 619.007809][ T5954] ? find_held_lock+0x2b/0x80 [ 619.007837][ T5954] ? do_raw_spin_unlock+0x172/0x230 [ 619.007862][ T5954] kobject_add_internal+0x2c4/0x9d0 [ 619.007886][ T5954] kobject_add+0x16e/0x240 [ 619.007904][ T5954] ? __pfx_kobject_add+0x10/0x10 [ 619.007925][ T5954] ? kobject_put+0xaf/0x6f0 [ 619.007939][ T5954] ? _raw_spin_unlock+0x28/0x50 [ 619.007971][ T5954] device_add+0x288/0x1980 [ 619.007996][ T5954] ? __pfx_dev_set_name+0x10/0x10 [ 619.008023][ T5954] ? __pfx_device_add+0x10/0x10 [ 619.008048][ T5954] ? mgmt_send_event_skb+0x2fb/0x460 [ 619.008080][ T5954] hci_conn_add_sysfs+0x1a8/0x260 [ 619.008108][ T5954] le_conn_complete_evt+0x11ed/0x1fa0 [ 619.008138][ T5954] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 619.008170][ T5954] hci_le_conn_complete_evt+0x23c/0x3a0 [ 619.008200][ T5954] hci_le_meta_evt+0x357/0x610 [ 619.008223][ T5954] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 619.008249][ T5954] hci_event_packet+0x685/0x1210 [ 619.008272][ T5954] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 619.008298][ T5954] ? __pfx_hci_event_packet+0x10/0x10 [ 619.008325][ T5954] ? kcov_remote_start+0x399/0x680 [ 619.008351][ T5954] ? lockdep_hardirqs_on+0x7c/0x110 [ 619.008384][ T5954] hci_rx_work+0x2c9/0x1020 [ 619.008411][ T5954] process_one_work+0x9ba/0x1b20 [ 619.008442][ T5954] ? __pfx_process_one_work+0x10/0x10 [ 619.008470][ T5954] ? assign_work+0x1a0/0x250 [ 619.008497][ T5954] worker_thread+0x6c8/0xf10 [ 619.008525][ T5954] ? __kthread_parkme+0x19e/0x250 [ 619.008554][ T5954] ? __pfx_worker_thread+0x10/0x10 [ 619.008572][ T5954] kthread+0x3c5/0x780 [ 619.008591][ T5954] ? __pfx_kthread+0x10/0x10 [ 619.008611][ T5954] ? rcu_is_watching+0x12/0xc0 [ 619.008638][ T5954] ? __pfx_kthread+0x10/0x10 [ 619.008658][ T5954] ret_from_fork+0x983/0xb10 [ 619.008679][ T5954] ? __pfx_ret_from_fork+0x10/0x10 [ 619.008697][ T5954] ? native_load_gs_index+0x5b/0xd0 [ 619.008719][ T5954] ? __switch_to+0x7af/0x10d0 [ 619.008741][ T5954] ? __pfx_kthread+0x10/0x10 [ 619.008760][ T5954] ret_from_fork_asm+0x1a/0x30 [ 619.008801][ T5954] [ 619.008823][ T5954] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 619.120255][ T5954] Bluetooth: hci1: failed to register connection device [ 619.382299][ T5953] Bluetooth: hci3: command 0x1003 tx timeout [ 619.386259][T13268] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 619.556476][T14077] netlink: 'syz.0.2142': attribute type 13 has an invalid length. [ 619.560690][T14077] gretap0: refused to change device tx_queue_len [ 619.563634][T14077] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 619.846546][T14088] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 619.955195][T13268] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 619.958271][T13268] CPU: 1 UID: 0 PID: 13268 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 619.958287][T13268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 619.958294][T13268] Workqueue: hci2 hci_rx_work [ 619.958312][T13268] Call Trace: [ 619.958317][T13268] [ 619.958322][T13268] dump_stack_lvl+0x16c/0x1f0 [ 619.958339][T13268] sysfs_warn_dup+0x7f/0xa0 [ 619.958352][T13268] sysfs_create_dir_ns+0x24b/0x2b0 [ 619.958368][T13268] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 619.958378][T13268] ? find_held_lock+0x2b/0x80 [ 619.958394][T13268] ? do_raw_spin_unlock+0x172/0x230 [ 619.958408][T13268] kobject_add_internal+0x2c4/0x9d0 [ 619.958422][T13268] kobject_add+0x16e/0x240 [ 619.958432][T13268] ? __pfx_kobject_add+0x10/0x10 [ 619.958449][T13268] ? kobject_put+0xaf/0x6f0 [ 619.958457][T13268] ? _raw_spin_unlock+0x28/0x50 [ 619.958475][T13268] device_add+0x288/0x1980 [ 619.958494][T13268] ? __pfx_dev_set_name+0x10/0x10 [ 619.958510][T13268] ? __pfx_device_add+0x10/0x10 [ 619.958525][T13268] ? mgmt_send_event_skb+0x2fb/0x460 [ 619.958542][T13268] hci_conn_add_sysfs+0x1a8/0x260 [ 619.958558][T13268] le_conn_complete_evt+0x11ed/0x1fa0 [ 619.958575][T13268] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 619.958592][T13268] hci_le_conn_complete_evt+0x23c/0x3a0 [ 619.958608][T13268] hci_le_meta_evt+0x357/0x610 [ 619.958621][T13268] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 619.958637][T13268] hci_event_packet+0x685/0x1210 [ 619.958650][T13268] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 619.958664][T13268] ? __pfx_hci_event_packet+0x10/0x10 [ 619.958679][T13268] ? kcov_remote_start+0x399/0x680 [ 619.958693][T13268] ? lockdep_hardirqs_on+0x7c/0x110 [ 619.958711][T13268] hci_rx_work+0x2c9/0x1020 [ 619.958726][T13268] process_one_work+0x9ba/0x1b20 [ 619.958743][T13268] ? __pfx_process_one_work+0x10/0x10 [ 619.958758][T13268] ? assign_work+0x1a0/0x250 [ 619.958770][T13268] worker_thread+0x6c8/0xf10 [ 619.958784][T13268] ? __kthread_parkme+0x19e/0x250 [ 619.958800][T13268] ? __pfx_worker_thread+0x10/0x10 [ 619.958810][T13268] kthread+0x3c5/0x780 [ 619.958820][T13268] ? __pfx_kthread+0x10/0x10 [ 619.958831][T13268] ? rcu_is_watching+0x12/0xc0 [ 619.958845][T13268] ? __pfx_kthread+0x10/0x10 [ 619.958855][T13268] ret_from_fork+0x983/0xb10 [ 619.958866][T13268] ? __pfx_ret_from_fork+0x10/0x10 [ 619.958877][T13268] ? rcu_is_watching+0x12/0xc0 [ 619.958890][T13268] ? __switch_to+0x7af/0x10d0 [ 619.958903][T13268] ? __pfx_kthread+0x10/0x10 [ 619.958913][T13268] ret_from_fork_asm+0x1a/0x30 [ 619.958935][T13268] [ 619.958950][T13268] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 620.043879][T13268] Bluetooth: hci2: failed to register connection device [ 620.241269][T14103] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 620.243375][T14103] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 620.246231][T14103] vhci_hcd vhci_hcd.0: Device attached [ 620.532290][ T827] usb 42-1: SetAddress Request (122) to port 0 [ 620.534534][ T827] usb 42-1: new SuperSpeed USB device number 122 using vhci_hcd [ 620.582239][ T6395] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 620.737905][T14104] vhci_hcd: connection reset by peer [ 620.741061][ T6395] vhci_hcd vhci_hcd.2: stop threads [ 620.745428][ T6395] vhci_hcd vhci_hcd.2: release socket [ 620.750011][ T6395] vhci_hcd vhci_hcd.2: disconnect device [ 620.787768][T14120] syzkaller0: entered promiscuous mode [ 620.789588][T14120] syzkaller0: entered allmulticast mode [ 621.143608][T13268] Bluetooth: hci1: command tx timeout [ 621.424908][T14127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2159'. [ 621.754644][T14130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2160'. [ 622.042770][T14138] tipc: Enabled bearer , priority 0 [ 622.046020][T14137] tipc: Resetting bearer [ 622.112220][ T5953] Bluetooth: hci2: command 0x0406 tx timeout [ 622.963764][T14137] tipc: Disabling bearer [ 623.062599][T14145] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.153654][T14145] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.206003][T14145] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.232213][T13268] Bluetooth: hci1: command tx timeout [ 623.275653][T14145] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.333060][ T1141] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.339850][ T1141] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.347845][ T46] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.354647][ T46] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.374471][T13268] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 623.379625][T13268] CPU: 0 UID: 0 PID: 13268 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 623.379651][T13268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 623.379662][T13268] Workqueue: hci6 hci_rx_work [ 623.379689][T13268] Call Trace: [ 623.379696][T13268] [ 623.379703][T13268] dump_stack_lvl+0x16c/0x1f0 [ 623.379733][T13268] sysfs_warn_dup+0x7f/0xa0 [ 623.379754][T13268] sysfs_create_dir_ns+0x24b/0x2b0 [ 623.379774][T13268] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 623.379793][T13268] ? find_held_lock+0x2b/0x80 [ 623.379820][T13268] ? do_raw_spin_unlock+0x172/0x230 [ 623.379843][T13268] kobject_add_internal+0x2c4/0x9d0 [ 623.379866][T13268] kobject_add+0x16e/0x240 [ 623.379882][T13268] ? __pfx_kobject_add+0x10/0x10 [ 623.379903][T13268] ? kobject_put+0xaf/0x6f0 [ 623.379917][T13268] ? _raw_spin_unlock+0x28/0x50 [ 623.379947][T13268] device_add+0x288/0x1980 [ 623.379968][T13268] ? __pfx_dev_set_name+0x10/0x10 [ 623.379987][T13268] ? __pfx_device_add+0x10/0x10 [ 623.380005][T13268] ? mgmt_send_event_skb+0x2fb/0x460 [ 623.380027][T13268] hci_conn_add_sysfs+0x1a8/0x260 [ 623.380047][T13268] le_conn_complete_evt+0x11ed/0x1fa0 [ 623.380073][T13268] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 623.380105][T13268] hci_le_conn_complete_evt+0x23c/0x3a0 [ 623.380135][T13268] hci_le_meta_evt+0x357/0x610 [ 623.380159][T13268] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 623.380185][T13268] hci_event_packet+0x685/0x1210 [ 623.380208][T13268] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 623.380243][T13268] ? __pfx_hci_event_packet+0x10/0x10 [ 623.380269][T13268] ? kcov_remote_start+0x399/0x680 [ 623.380294][T13268] ? lockdep_hardirqs_on+0x7c/0x110 [ 623.380326][T13268] hci_rx_work+0x2c9/0x1020 [ 623.380353][T13268] process_one_work+0x9ba/0x1b20 [ 623.380381][T13268] ? __pfx_process_one_work+0x10/0x10 [ 623.380407][T13268] ? assign_work+0x1a0/0x250 [ 623.380427][T13268] worker_thread+0x6c8/0xf10 [ 623.380454][T13268] ? __kthread_parkme+0x19e/0x250 [ 623.380477][T13268] ? __pfx_worker_thread+0x10/0x10 [ 623.380496][T13268] kthread+0x3c5/0x780 [ 623.380513][T13268] ? __pfx_kthread+0x10/0x10 [ 623.380531][T13268] ? rcu_is_watching+0x12/0xc0 [ 623.380555][T13268] ? __pfx_kthread+0x10/0x10 [ 623.380573][T13268] ret_from_fork+0x983/0xb10 [ 623.380592][T13268] ? __pfx_ret_from_fork+0x10/0x10 [ 623.380610][T13268] ? rcu_is_watching+0x12/0xc0 [ 623.380633][T13268] ? __switch_to+0x7af/0x10d0 [ 623.380655][T13268] ? __pfx_kthread+0x10/0x10 [ 623.380674][T13268] ret_from_fork_asm+0x1a/0x30 [ 623.380713][T13268] [ 623.380736][T13268] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 623.477605][T13268] Bluetooth: hci6: failed to register connection device [ 623.523085][T14168] syzkaller0: entered promiscuous mode [ 623.524889][T14168] syzkaller0: entered allmulticast mode [ 623.704001][ T1141] Bluetooth: hci3: Frame reassembly failed (-84) [ 623.706853][ T1141] Bluetooth: hci3: Frame reassembly failed (-84) [ 623.709059][ T1141] Bluetooth: hci3: Frame reassembly failed (-84) [ 624.192201][ T5953] Bluetooth: hci2: command 0x0406 tx timeout [ 624.212761][T14181] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2180'. [ 624.474747][T14187] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 624.476821][T14187] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 624.479643][T14187] vhci_hcd vhci_hcd.0: Device attached [ 624.742272][ T5823] usb 40-1: SetAddress Request (8) to port 0 [ 624.744330][ T5823] usb 40-1: new SuperSpeed USB device number 8 using vhci_hcd [ 625.082830][T14188] vhci_hcd: connection reset by peer [ 625.085311][ T6395] vhci_hcd vhci_hcd.1: stop threads [ 625.087690][ T6395] vhci_hcd vhci_hcd.1: release socket [ 625.090037][ T6395] vhci_hcd vhci_hcd.1: disconnect device [ 625.542279][ T5953] Bluetooth: hci6: command 0x2016 tx timeout [ 625.629744][T14200] loop6: detected capacity change from 0 to 7 [ 625.632849][ T827] usb 42-1: device descriptor read/8, error -110 [ 625.637793][T14200] Dev loop6: unable to read RDB block 7 [ 625.639649][T14200] loop6: unable to read partition table [ 625.641527][T14200] loop6: partition table beyond EOD, truncated [ 625.643964][T14200] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 625.792447][ T5954] Bluetooth: hci3: command 0x1003 tx timeout [ 625.797587][T13268] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 626.042637][ T827] usb usb42-port1: attempt power cycle [ 626.615026][ T827] usb usb42-port1: unable to enumerate USB device [ 626.856098][T14231] overlayfs: missing 'lowerdir' [ 626.934733][T14234] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 626.936805][T14234] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 626.939514][T14234] vhci_hcd vhci_hcd.0: Device attached [ 627.212270][ T34] usb 44-1: SetAddress Request (103) to port 0 [ 627.214280][ T34] usb 44-1: new SuperSpeed USB device number 103 using vhci_hcd [ 627.231942][T14238] lo speed is unknown, defaulting to 1000 [ 627.368459][T14241] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 627.370544][T14241] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 627.375507][T14241] vhci_hcd vhci_hcd.0: Device attached [ 627.401536][ T1141] Bluetooth: hci3: Frame reassembly failed (-84) [ 627.401598][ T1141] Bluetooth: hci3: Frame reassembly failed (-84) [ 627.401627][ T1141] Bluetooth: hci3: Frame reassembly failed (-84) [ 627.401655][ T1141] Bluetooth: hci3: Frame reassembly failed (-84) [ 627.401683][ T1141] Bluetooth: hci3: Frame reassembly failed (-84) [ 627.401711][ T1141] Bluetooth: hci3: Frame reassembly failed (-84) [ 627.401739][ T1141] Bluetooth: hci3: Frame reassembly failed (-84) [ 627.522573][T14235] vhci_hcd: connection reset by peer [ 627.524557][ T6395] vhci_hcd vhci_hcd.3: stop threads [ 627.526369][ T6395] vhci_hcd vhci_hcd.3: release socket [ 627.528259][ T6395] vhci_hcd vhci_hcd.3: disconnect device [ 627.631814][T13268] Bluetooth: hci6: command 0x2016 tx timeout [ 627.652205][T10592] usb 38-1: SetAddress Request (36) to port 0 [ 627.654193][T10592] usb 38-1: new SuperSpeed USB device number 36 using vhci_hcd [ 627.734723][T14242] vhci_hcd: connection reset by peer [ 627.736739][ T4627] vhci_hcd vhci_hcd.0: stop threads [ 627.738486][ T4627] vhci_hcd vhci_hcd.0: release socket [ 627.740313][ T4627] vhci_hcd vhci_hcd.0: disconnect device [ 628.299175][T14253] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.2202'. [ 628.904074][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.906174][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.145230][T14238] Set syz1 is full, maxelem 65536 reached [ 629.463573][T13268] Bluetooth: hci3: command 0xfc11 tx timeout [ 629.465783][ T5954] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 629.782757][ T5823] usb 40-1: device descriptor read/8, error -110 [ 630.184237][ T5823] usb usb40-port1: attempt power cycle [ 630.288856][T14283] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.376340][T14283] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.436175][T14283] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.495930][T14283] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.581812][T14288] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 630.583927][T14288] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 630.588094][T14288] vhci_hcd vhci_hcd.0: Device attached [ 630.620194][ T4627] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.655251][ T4627] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.662605][ T4627] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.673393][ T4627] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.753887][ T5823] usb usb40-port1: unable to enumerate USB device [ 630.954488][T14294] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 630.956647][T14294] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 630.965230][T14294] vhci_hcd vhci_hcd.0: Device attached [ 631.221182][T14289] vhci_hcd: connection closed [ 631.221557][ T4627] vhci_hcd vhci_hcd.0: stop threads [ 631.225870][ T4627] vhci_hcd vhci_hcd.0: release socket [ 631.228286][ T4627] vhci_hcd vhci_hcd.0: disconnect device [ 631.232356][ T6065] usb 42-1: SetAddress Request (126) to port 0 [ 631.234690][ T6065] usb 42-1: new SuperSpeed USB device number 126 using vhci_hcd [ 631.302226][T13268] Bluetooth: hci6: command 0x2016 tx timeout [ 631.588177][T14295] vhci_hcd: connection reset by peer [ 631.590115][ T1141] vhci_hcd vhci_hcd.2: stop threads [ 631.591893][ T1141] vhci_hcd vhci_hcd.2: release socket [ 631.593759][ T1141] vhci_hcd vhci_hcd.2: disconnect device [ 631.789615][T14298] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.2216'. [ 631.862299][T13268] Bluetooth: hci3: command 0xfc11 tx timeout [ 631.864447][ T5954] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 632.262633][ T34] usb 44-1: device descriptor read/8, error -110 [ 632.372849][T14310] syzkaller0: entered promiscuous mode [ 632.374680][T14310] syzkaller0: entered allmulticast mode [ 632.671161][ T34] usb usb44-port1: attempt power cycle [ 632.742402][T10592] usb 38-1: device descriptor read/8, error -110 [ 632.852493][T14320] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 632.854593][T14320] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 632.861989][T14320] vhci_hcd vhci_hcd.0: Device attached [ 633.029502][ T34] usb 44-1: SetAddress Request (105) to port 0 [ 633.036272][ T34] usb 44-1: new SuperSpeed USB device number 105 using vhci_hcd [ 633.144756][T14327] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.2225'. [ 633.152811][T10592] usb usb38-port1: attempt power cycle [ 633.384923][ T5954] Bluetooth: hci6: command 0x2016 tx timeout [ 633.401368][T14321] vhci_hcd: connection reset by peer [ 633.416467][ T6395] vhci_hcd vhci_hcd.3: stop threads [ 633.418792][ T6395] vhci_hcd vhci_hcd.3: release socket [ 633.422213][ T6395] vhci_hcd vhci_hcd.3: disconnect device [ 633.533476][T14332] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 633.535519][T14332] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 633.538607][T14332] vhci_hcd vhci_hcd.0: Device attached [ 633.722636][T10592] usb usb38-port1: unable to enumerate USB device [ 634.008791][ T6060] IPVS: starting estimator thread 0... [ 634.012904][T14348] tipc: Started in network mode [ 634.014719][T14348] tipc: Node identity ac1414aa, cluster identity 4711 [ 634.017519][T14348] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 634.019781][T14348] tipc: Enabled bearer , priority 10 [ 634.092252][T14349] IPVS: using max 44 ests per chain, 105600 per kthread [ 634.141401][T14333] vhci_hcd: connection closed [ 634.141739][ T1150] vhci_hcd vhci_hcd.2: stop threads [ 634.146326][ T1150] vhci_hcd vhci_hcd.2: release socket [ 634.149088][ T1150] vhci_hcd vhci_hcd.2: disconnect device [ 634.152484][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 634.292232][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 634.432188][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 634.582246][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 634.722303][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 634.838352][T14368] loop6: detected capacity change from 0 to 7 [ 634.842915][T14368] Dev loop6: unable to read RDB block 7 [ 634.844951][T14368] loop6: AHDI p1 p2 p3 [ 634.846580][T14368] loop6: partition table partially beyond EOD, truncated [ 634.849420][T14368] loop6: p1 start 1601398130 is beyond EOD, truncated [ 634.853099][T14368] loop6: p2 start 1702059890 is beyond EOD, truncated [ 634.862269][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 634.929316][T14371] netlink: 'syz.0.2241': attribute type 13 has an invalid length. [ 634.944516][T14371] gretap0: refused to change device tx_queue_len [ 634.947808][T14371] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 635.002202][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 635.142290][ T1332] tipc: Node number set to 2886997162 [ 635.282194][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 635.485233][T14376] fuse: Bad value for 'fd' [ 635.552168][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 635.622818][T14380] netlink: 'syz.0.2245': attribute type 72 has an invalid length. [ 635.708454][T14387] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2248'. [ 635.782253][ T5953] Bluetooth: hci1: command 0x2016 tx timeout [ 635.789307][T14390] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 635.791602][T14390] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 635.794362][T14390] vhci_hcd vhci_hcd.0: Device attached [ 635.799449][T14392] lo speed is unknown, defaulting to 1000 [ 635.879212][ T13] Bluetooth: hci3: Frame reassembly failed (-84) [ 635.881279][ T1150] Bluetooth: hci3: Frame reassembly failed (-84) [ 635.986861][T14399] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 635.988959][T14399] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 635.996358][T14399] vhci_hcd vhci_hcd.0: Device attached [ 636.082422][ T1332] usb 40-1: SetAddress Request (12) to port 0 [ 636.084648][ T1332] usb 40-1: new SuperSpeed USB device number 12 using vhci_hcd [ 636.262215][ T6065] usb 42-1: device descriptor read/8, error -110 [ 636.358638][T14391] vhci_hcd: connection reset by peer [ 636.361116][ T6395] vhci_hcd vhci_hcd.1: stop threads [ 636.362900][ T6395] vhci_hcd vhci_hcd.1: release socket [ 636.364880][ T6395] vhci_hcd vhci_hcd.1: disconnect device [ 636.470073][T14400] vhci_hcd: connection closed [ 636.470330][ T13] vhci_hcd vhci_hcd.3: stop threads [ 636.474858][ T13] vhci_hcd vhci_hcd.3: release socket [ 636.476618][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 636.652620][ T6065] usb usb42-port1: attempt power cycle [ 637.223817][ T6065] usb usb42-port1: unable to enumerate USB device [ 637.276131][T14410] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 637.278232][T14410] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 637.281060][T14410] vhci_hcd vhci_hcd.0: Device attached [ 637.395683][T14410] rdma_rxe: rxe_newlink: failed to add wg2 [ 637.490979][T14423] No control pipe specified [ 637.852532][T14427] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 637.854613][T14427] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 637.862782][T13268] Bluetooth: hci1: command 0x2016 tx timeout [ 637.865948][T14427] vhci_hcd vhci_hcd.0: Device attached [ 637.942311][ T5954] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 637.984423][T14411] vhci_hcd: connection closed [ 637.986821][ T1150] vhci_hcd vhci_hcd.3: stop threads [ 637.989931][ T1150] vhci_hcd vhci_hcd.3: release socket [ 637.991768][ T1150] vhci_hcd vhci_hcd.3: disconnect device [ 638.102277][ T34] usb 44-1: device descriptor read/8, error -110 [ 638.182983][ T827] usb 42-1: SetAddress Request (4) to port 0 [ 638.185461][ T827] usb 42-1: new SuperSpeed USB device number 4 using vhci_hcd [ 638.381441][T14433] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 638.383579][T14433] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 638.386765][T14433] vhci_hcd vhci_hcd.0: Device attached [ 638.473992][T14428] vhci_hcd: connection reset by peer [ 638.485692][ T13] vhci_hcd vhci_hcd.2: stop threads [ 638.487886][ T13] vhci_hcd vhci_hcd.2: release socket [ 638.494182][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 638.503284][ T34] usb usb44-port1: unable to enumerate USB device [ 638.547194][T14437] netlink: 'syz.0.2261': attribute type 72 has an invalid length. [ 639.025102][T14434] vhci_hcd: connection closed [ 639.028470][ T4627] vhci_hcd vhci_hcd.1: stop threads [ 639.032661][ T4627] vhci_hcd vhci_hcd.1: release socket [ 639.034918][ T4627] vhci_hcd vhci_hcd.1: disconnect device [ 639.232201][ C3] net_ratelimit: 4 callbacks suppressed [ 639.232214][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 639.913616][T14457] syzkaller0: entered promiscuous mode [ 639.915317][T14457] syzkaller0: entered allmulticast mode [ 640.262384][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 640.357933][T14464] netlink: 'syz.0.2270': attribute type 72 has an invalid length. [ 640.407680][T14466] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2271'. [ 640.686954][T14472] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 640.689064][T14472] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 640.695751][T14472] vhci_hcd vhci_hcd.0: Device attached [ 640.818643][T14472] rdma_rxe: rxe_newlink: failed to add wg2 [ 641.055401][T14478] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 641.057525][T14478] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 641.060286][T14478] vhci_hcd vhci_hcd.0: Device attached [ 641.302215][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 641.317288][T14473] vhci_hcd: connection reset by peer [ 641.319218][ T4627] vhci_hcd vhci_hcd.1: stop threads [ 641.321391][ T4627] vhci_hcd vhci_hcd.1: release socket [ 641.323463][ T1332] usb 40-1: device descriptor read/8, error -110 [ 641.325803][ T4627] vhci_hcd vhci_hcd.1: disconnect device [ 641.469829][T14488] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 641.471810][T14488] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 641.474436][T14488] vhci_hcd vhci_hcd.0: Device attached [ 641.682065][T14479] vhci_hcd: connection closed [ 641.682963][ T8579] vhci_hcd vhci_hcd.2: stop threads [ 641.687377][ T8579] vhci_hcd vhci_hcd.2: release socket [ 641.689851][ T8579] vhci_hcd vhci_hcd.2: disconnect device [ 641.712971][ T1332] usb usb40-port1: attempt power cycle [ 641.752244][ T1022] usb 38-1: SetAddress Request (40) to port 0 [ 641.754726][ T1022] usb 38-1: new SuperSpeed USB device number 40 using vhci_hcd [ 641.948507][T14489] vhci_hcd: connection reset by peer [ 641.951101][ T1150] vhci_hcd vhci_hcd.0: stop threads [ 641.955341][ T1150] vhci_hcd vhci_hcd.0: release socket [ 641.960699][ T1150] vhci_hcd vhci_hcd.0: disconnect device [ 642.296000][ T1332] usb usb40-port1: unable to enumerate USB device [ 642.342324][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 642.561387][T14501] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2279'. [ 643.222339][ T827] usb 42-1: device descriptor read/8, error -110 [ 643.382219][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 643.491930][T14513] syzkaller0: entered promiscuous mode [ 643.493704][T14513] syzkaller0: entered allmulticast mode [ 643.633483][ T827] usb usb42-port1: attempt power cycle [ 643.697221][T14517] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 643.699338][T14517] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 643.712737][T14517] vhci_hcd vhci_hcd.0: Device attached [ 643.840110][T14516] rdma_rxe: rxe_newlink: failed to add wg2 [ 644.002188][ T1332] usb 40-1: SetAddress Request (16) to port 0 [ 644.004119][ T1332] usb 40-1: new SuperSpeed USB device number 16 using vhci_hcd [ 644.194799][ T827] usb usb42-port1: unable to enumerate USB device [ 644.319855][T14518] vhci_hcd: connection reset by peer [ 644.321975][ T4627] vhci_hcd vhci_hcd.1: stop threads [ 644.323676][ T4627] vhci_hcd vhci_hcd.1: release socket [ 644.325354][ T4627] vhci_hcd vhci_hcd.1: disconnect device [ 644.432288][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 644.789943][T14529] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 644.792126][T14529] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 644.794907][T14529] vhci_hcd vhci_hcd.0: Device attached [ 644.918679][T14533] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 644.920769][T14533] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 644.923690][T14533] vhci_hcd vhci_hcd.0: Device attached [ 645.192283][ T34] usb 44-1: SetAddress Request (107) to port 0 [ 645.194261][ T34] usb 44-1: new SuperSpeed USB device number 107 using vhci_hcd [ 645.353318][T14539] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2289'. [ 645.383214][T14530] vhci_hcd: connection closed [ 645.383462][ T13] vhci_hcd vhci_hcd.0: stop threads [ 645.386988][ T13] vhci_hcd vhci_hcd.0: release socket [ 645.388787][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 645.472235][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 645.489032][T14534] vhci_hcd: connection reset by peer [ 645.490977][ T6395] vhci_hcd vhci_hcd.3: stop threads [ 645.493178][ T6395] vhci_hcd vhci_hcd.3: release socket [ 645.495478][ T6395] vhci_hcd vhci_hcd.3: disconnect device [ 646.502238][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 646.822338][ T1022] usb 38-1: device descriptor read/8, error -110 [ 647.108272][T14564] syzkaller0: entered promiscuous mode [ 647.109917][T14564] syzkaller0: entered allmulticast mode [ 647.154411][T14565] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 647.156388][T14565] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 647.159113][T14565] vhci_hcd vhci_hcd.0: Device attached [ 647.205347][T14569] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2298'. [ 647.282207][ T1022] usb 38-1: SetAddress Request (41) to port 0 [ 647.282301][ T1022] usb 38-1: new SuperSpeed USB device number 41 using vhci_hcd [ 647.346863][T14570] rdma_rxe: rxe_newlink: failed to add wg2 [ 647.542168][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 647.792173][T14566] vhci_hcd: connection reset by peer [ 647.794162][ T4627] vhci_hcd vhci_hcd.0: stop threads [ 647.795809][ T4627] vhci_hcd vhci_hcd.0: release socket [ 647.797479][ T4627] vhci_hcd vhci_hcd.0: disconnect device [ 648.215699][T14576] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 648.218352][T14576] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 648.228336][T14576] vhci_hcd vhci_hcd.0: Device attached [ 648.582223][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 648.769645][T14587] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 648.771688][T14587] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 648.774465][T14587] vhci_hcd vhci_hcd.0: Device attached [ 648.835521][T14577] vhci_hcd: connection closed [ 648.835764][ T8579] vhci_hcd vhci_hcd.3: stop threads [ 648.838933][ T8579] vhci_hcd vhci_hcd.3: release socket [ 648.840597][ T8579] vhci_hcd vhci_hcd.3: disconnect device [ 649.068954][T14588] vhci_hcd: connection reset by peer [ 649.071132][ T6408] vhci_hcd vhci_hcd.1: stop threads [ 649.073252][ T6408] vhci_hcd vhci_hcd.1: release socket [ 649.075164][ T1332] usb 40-1: device descriptor read/8, error -110 [ 649.077158][ T6408] vhci_hcd vhci_hcd.1: disconnect device [ 649.472957][ T1332] usb usb40-port1: attempt power cycle [ 649.622188][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 650.032646][ T1332] usb usb40-port1: unable to enumerate USB device [ 650.262278][ T34] usb 44-1: device descriptor read/8, error -110 [ 650.653944][ T34] usb usb44-port1: attempt power cycle [ 650.672201][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 650.834766][T14615] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 650.837209][T14615] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 650.840547][T14615] vhci_hcd vhci_hcd.0: Device attached [ 650.980292][T14618] rdma_rxe: rxe_newlink: failed to add wg2 [ 650.992440][ T34] usb 44-1: SetAddress Request (109) to port 0 [ 650.997143][ T34] usb 44-1: new SuperSpeed USB device number 109 using vhci_hcd [ 651.311558][T14625] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 651.313672][T14625] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 651.321963][T14625] vhci_hcd vhci_hcd.0: Device attached [ 651.446242][T14616] vhci_hcd: connection reset by peer [ 651.449725][ T13] vhci_hcd vhci_hcd.3: stop threads [ 651.452289][ T13] vhci_hcd vhci_hcd.3: release socket [ 651.454046][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 651.612215][ T1332] usb 40-1: SetAddress Request (20) to port 0 [ 651.614927][ T1332] usb 40-1: new SuperSpeed USB device number 20 using vhci_hcd [ 651.702170][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 651.819271][T14633] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 651.821295][T14633] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 651.823989][T14633] vhci_hcd vhci_hcd.0: Device attached [ 651.962978][T14627] vhci_hcd: connection reset by peer [ 651.969061][ T1150] vhci_hcd vhci_hcd.1: stop threads [ 651.970851][ T1150] vhci_hcd vhci_hcd.1: release socket [ 651.972863][ T1150] vhci_hcd vhci_hcd.1: disconnect device [ 652.296642][T14634] vhci_hcd: connection closed [ 652.296898][ T46] vhci_hcd vhci_hcd.0: stop threads [ 652.300116][ T46] vhci_hcd vhci_hcd.0: release socket [ 652.302244][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 652.342368][ T1022] usb 38-1: device descriptor read/8, error -110 [ 652.452778][ T1022] usb usb38-port1: attempt power cycle [ 652.551993][T14646] syzkaller0: entered promiscuous mode [ 652.555578][T14646] syzkaller0: entered allmulticast mode [ 652.583159][ T6408] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 652.742339][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 653.047732][ T1022] usb usb38-port1: unable to enumerate USB device [ 653.782236][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 653.877783][T14664] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 653.880260][T14664] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 653.884906][T14664] vhci_hcd vhci_hcd.0: Device attached [ 654.023927][T14667] rdma_rxe: rxe_newlink: failed to add wg2 [ 654.489290][T14665] vhci_hcd: connection closed [ 654.490244][ T4627] vhci_hcd vhci_hcd.1: stop threads [ 654.493485][ T4627] vhci_hcd vhci_hcd.1: release socket [ 654.495299][ T4627] vhci_hcd vhci_hcd.1: disconnect device [ 654.822174][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 655.166571][T14678] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 655.168589][T14678] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 655.171273][T14678] vhci_hcd vhci_hcd.0: Device attached [ 655.442249][ T6065] usb 38-1: SetAddress Request (44) to port 0 [ 655.444264][ T6065] usb 38-1: new SuperSpeed USB device number 44 using vhci_hcd [ 655.487968][T14682] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 655.490303][T14682] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 655.500198][T14682] vhci_hcd vhci_hcd.0: Device attached [ 655.650234][T14679] vhci_hcd: connection reset by peer [ 655.654203][ T6408] vhci_hcd vhci_hcd.0: stop threads [ 655.657114][ T6408] vhci_hcd vhci_hcd.0: release socket [ 655.659557][ T6408] vhci_hcd vhci_hcd.0: disconnect device [ 655.862235][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 655.930314][T14683] vhci_hcd: connection closed [ 655.930819][ T13] vhci_hcd vhci_hcd.1: stop threads [ 655.935478][ T13] vhci_hcd vhci_hcd.1: release socket [ 655.937802][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 656.112255][ T34] usb 44-1: device descriptor read/8, error -110 [ 656.562920][ T34] usb usb44-port1: unable to enumerate USB device [ 656.662258][ T1332] usb 40-1: device descriptor read/8, error -110 [ 656.809435][T14708] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 656.811842][T14708] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 656.847547][T14708] vhci_hcd vhci_hcd.0: Device attached [ 656.912173][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 656.912346][ T1332] usb 40-1: SetAddress Request (21) to port 0 [ 656.912377][ T1332] usb 40-1: new SuperSpeed USB device number 21 using vhci_hcd [ 656.971582][T14708] rdma_rxe: rxe_newlink: failed to add wg2 [ 657.446906][T14709] vhci_hcd: connection reset by peer [ 657.455089][ T46] vhci_hcd vhci_hcd.1: stop threads [ 657.456764][ T46] vhci_hcd vhci_hcd.1: release socket [ 657.458518][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 657.699789][T14719] syzkaller0: entered promiscuous mode [ 657.701508][T14719] syzkaller0: entered allmulticast mode [ 657.942211][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 658.166304][T14730] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 658.169041][T14730] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 658.172982][T14730] vhci_hcd vhci_hcd.0: Device attached [ 658.473678][ T6060] usb 44-1: SetAddress Request (111) to port 0 [ 658.476459][ T6060] usb 44-1: new SuperSpeed USB device number 111 using vhci_hcd [ 658.758197][T14731] vhci_hcd: connection reset by peer [ 658.760215][ T13] vhci_hcd vhci_hcd.3: stop threads [ 658.762039][ T13] vhci_hcd vhci_hcd.3: release socket [ 658.763912][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 658.993088][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 659.116840][T14748] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 659.118963][T14748] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 659.121707][T14748] vhci_hcd vhci_hcd.0: Device attached [ 659.688361][T14756] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 659.690983][T14756] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 659.695696][T14756] vhci_hcd vhci_hcd.0: Device attached [ 659.751678][T14749] vhci_hcd: connection closed [ 659.752402][ T13] vhci_hcd vhci_hcd.0: stop threads [ 659.759574][ T13] vhci_hcd vhci_hcd.0: release socket [ 659.761415][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 659.829129][T14756] rdma_rxe: rxe_newlink: failed to add wg2 [ 660.032178][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 660.321213][T14757] vhci_hcd: connection closed [ 660.324009][ T6395] vhci_hcd vhci_hcd.3: stop threads [ 660.327359][ T6395] vhci_hcd vhci_hcd.3: release socket [ 660.329192][ T6395] vhci_hcd vhci_hcd.3: disconnect device [ 660.502345][ T6065] usb 38-1: device descriptor read/8, error -110 [ 660.619073][T14770] syzkaller0: entered promiscuous mode [ 660.621463][T14770] syzkaller0: entered allmulticast mode [ 660.762949][T14772] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2354'. [ 660.902801][ T6065] usb usb38-port1: attempt power cycle [ 661.072172][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 661.493167][ T6065] usb usb38-port1: unable to enumerate USB device [ 662.022231][ T1332] usb 40-1: device descriptor read/8, error -110 [ 662.084085][T14790] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 662.086201][T14790] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 662.088845][T14790] vhci_hcd vhci_hcd.0: Device attached [ 662.102173][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 662.132534][ T1332] usb usb40-port1: attempt power cycle [ 662.262331][ T1332] usb 40-1: SetAddress Request (22) to port 0 [ 662.264844][ T1332] usb 40-1: new SuperSpeed USB device number 22 using vhci_hcd [ 662.328007][T14794] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 662.330756][T14794] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 662.334171][T14794] vhci_hcd vhci_hcd.0: Device attached [ 662.602378][ T1022] usb 38-1: SetAddress Request (48) to port 0 [ 662.605021][ T1022] usb 38-1: new SuperSpeed USB device number 48 using vhci_hcd [ 662.626203][T14791] vhci_hcd: connection reset by peer [ 662.628318][ T46] vhci_hcd vhci_hcd.1: stop threads [ 662.630698][ T46] vhci_hcd vhci_hcd.1: release socket [ 662.633187][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 662.848084][T14795] vhci_hcd: connection reset by peer [ 662.851004][ T6408] vhci_hcd vhci_hcd.0: stop threads [ 662.855141][ T6408] vhci_hcd vhci_hcd.0: release socket [ 662.857158][ T6408] vhci_hcd vhci_hcd.0: disconnect device [ 663.142205][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 663.475493][T14812] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2365'. [ 663.542268][ T6060] usb 44-1: device descriptor read/8, error -110 [ 663.574597][T14817] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 663.577354][T14817] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 663.581202][T14817] vhci_hcd vhci_hcd.0: Device attached [ 663.710272][T14817] rdma_rxe: rxe_newlink: failed to add wg2 [ 663.933392][ T6060] usb usb44-port1: attempt power cycle [ 664.147174][T14819] vhci_hcd: connection closed [ 664.147578][ T6408] vhci_hcd vhci_hcd.1: stop threads [ 664.151883][ T6408] vhci_hcd vhci_hcd.1: release socket [ 664.154382][ T6408] vhci_hcd vhci_hcd.1: disconnect device [ 664.182212][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 664.503305][ T6060] usb usb44-port1: unable to enumerate USB device [ 664.682307][T14833] syzkaller0: entered promiscuous mode [ 664.684677][T14833] syzkaller0: entered allmulticast mode [ 664.703438][T14834] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 664.705577][T14834] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 664.708396][T14834] vhci_hcd vhci_hcd.0: Device attached [ 664.982603][ T6060] usb 42-1: SetAddress Request (8) to port 0 [ 664.984544][ T6060] usb 42-1: new SuperSpeed USB device number 8 using vhci_hcd [ 665.227755][T14835] vhci_hcd: connection reset by peer [ 665.229672][ T8579] vhci_hcd vhci_hcd.2: stop threads [ 665.231487][ T8579] vhci_hcd vhci_hcd.2: release socket [ 665.232169][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 665.233341][ T8579] vhci_hcd vhci_hcd.2: disconnect device [ 665.611914][T14845] syzkaller0: entered promiscuous mode [ 665.613900][T14845] syzkaller0: entered allmulticast mode [ 665.622365][ T4627] syzkaller0: tun_net_xmit 48 [ 665.977851][T14862] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 665.980028][T14862] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 666.006680][T14862] vhci_hcd vhci_hcd.0: Device attached [ 666.262262][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 666.521184][T14863] vhci_hcd: connection closed [ 666.521486][ T13] vhci_hcd vhci_hcd.0: stop threads [ 666.528662][ T13] vhci_hcd vhci_hcd.0: release socket [ 666.531224][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 667.261950][T14881] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 667.264011][T14881] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 667.264932][T14880] syzkaller0: entered promiscuous mode [ 667.268486][T14880] syzkaller0: entered allmulticast mode [ 667.272359][T14881] vhci_hcd vhci_hcd.0: Device attached [ 667.312253][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 667.312350][ T1332] usb 40-1: device descriptor read/8, error -110 [ 667.412826][T14884] rdma_rxe: rxe_newlink: failed to add wg2 [ 667.543665][ T827] usb 44-1: SetAddress Request (115) to port 0 [ 667.545838][ T827] usb 44-1: new SuperSpeed USB device number 115 using vhci_hcd [ 667.704786][ T1022] usb 38-1: device descriptor read/8, error -110 [ 667.713405][ T1332] usb usb40-port1: unable to enumerate USB device [ 667.831637][T14882] vhci_hcd: connection reset by peer [ 667.834237][ T6395] vhci_hcd vhci_hcd.3: stop threads [ 667.837091][ T6395] vhci_hcd vhci_hcd.3: release socket [ 667.839006][ T6395] vhci_hcd vhci_hcd.3: disconnect device [ 668.092974][ T1022] usb usb38-port1: attempt power cycle [ 668.159494][T14890] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2385'. [ 668.342186][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 668.464990][T14898] syzkaller0: entered promiscuous mode [ 668.532215][T14898] syzkaller0: entered allmulticast mode [ 668.535237][ T6408] syzkaller0: tun_net_xmit 48 [ 668.658657][ T1022] usb usb38-port1: unable to enumerate USB device [ 668.708655][T14908] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 668.711082][T14908] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 668.715371][T14908] vhci_hcd vhci_hcd.0: Device attached [ 669.163792][T14909] vhci_hcd: connection closed [ 669.164151][ T4627] vhci_hcd vhci_hcd.2: stop threads [ 669.168659][ T4627] vhci_hcd vhci_hcd.2: release socket [ 669.170472][ T4627] vhci_hcd vhci_hcd.2: disconnect device [ 669.382227][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 669.941714][T14923] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 669.943812][T14923] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 669.946722][T14923] vhci_hcd vhci_hcd.0: Device attached [ 670.263134][T14929] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2395'. [ 670.321522][T14933] netlink: 'syz.0.2397': attribute type 13 has an invalid length. [ 670.328353][T14933] gretap0: refused to change device tx_queue_len [ 670.330861][T14933] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 670.422290][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 670.569947][T14937] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 670.572044][T14937] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 670.587653][T14937] vhci_hcd vhci_hcd.0: Device attached [ 670.601139][T14924] vhci_hcd: connection reset by peer [ 670.601399][ T6408] vhci_hcd vhci_hcd.2: stop threads [ 670.601420][ T6408] vhci_hcd vhci_hcd.2: release socket [ 670.601514][ T6060] usb 42-1: device descriptor read/8, error -110 [ 670.601544][ T6408] vhci_hcd vhci_hcd.2: disconnect device [ 670.679163][T14937] rdma_rxe: rxe_newlink: failed to add wg2 [ 670.862240][ T1022] usb 38-1: SetAddress Request (52) to port 0 [ 670.864788][ T1022] usb 38-1: new SuperSpeed USB device number 52 using vhci_hcd [ 670.991176][ T6060] usb usb42-port1: attempt power cycle [ 671.218552][T14938] vhci_hcd: connection reset by peer [ 671.220905][ T6408] vhci_hcd vhci_hcd.0: stop threads [ 671.224538][ T6408] vhci_hcd vhci_hcd.0: release socket [ 671.226305][ T6408] vhci_hcd vhci_hcd.0: disconnect device [ 671.462238][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 671.560648][T14949] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 671.562725][T14949] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 671.565492][T14949] vhci_hcd vhci_hcd.0: Device attached [ 671.632310][ T6060] usb 42-1: SetAddress Request (11) to port 0 [ 671.634401][ T6060] usb 42-1: new SuperSpeed USB device number 11 using vhci_hcd [ 671.851736][T14957] syzkaller0: entered promiscuous mode [ 671.854006][T14957] syzkaller0: entered allmulticast mode [ 671.857800][ T6395] syzkaller0: tun_net_xmit 48 [ 672.153909][T14950] vhci_hcd: connection reset by peer [ 672.156311][ T6408] vhci_hcd vhci_hcd.2: stop threads [ 672.157990][ T6408] vhci_hcd vhci_hcd.2: release socket [ 672.159862][ T6408] vhci_hcd vhci_hcd.2: disconnect device [ 672.502177][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 672.539754][T14963] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2404'. [ 672.584175][ T827] usb 44-1: device descriptor read/8, error -110 [ 672.983567][ T827] usb usb44-port1: attempt power cycle [ 673.358416][T14984] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 673.360554][T14984] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 673.366049][T14984] vhci_hcd vhci_hcd.0: Device attached [ 673.403715][T14988] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 673.403732][T14988] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 673.403841][T14988] vhci_hcd vhci_hcd.0: Device attached [ 673.530768][T14993] rdma_rxe: rxe_newlink: failed to add wg2 [ 673.542248][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 673.543826][ T827] usb usb44-port1: unable to enumerate USB device [ 673.920833][T14989] vhci_hcd: connection closed [ 673.932607][ T13] vhci_hcd vhci_hcd.2: stop threads [ 673.936531][ T13] vhci_hcd vhci_hcd.2: release socket [ 673.938551][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 673.987526][T14985] vhci_hcd: connection closed [ 673.987692][ T6408] vhci_hcd vhci_hcd.0: stop threads [ 673.991189][ T6408] vhci_hcd vhci_hcd.0: release socket [ 673.993338][ T6408] vhci_hcd vhci_hcd.0: disconnect device [ 674.582230][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 674.828106][T15008] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 674.830241][T15008] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 674.833090][T15008] vhci_hcd vhci_hcd.0: Device attached [ 675.240493][T15016] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2418'. [ 675.324758][T15018] netlink: 'syz.3.2415': attribute type 13 has an invalid length. [ 675.384741][T15018] gretap0: refused to change device tx_queue_len [ 675.393751][T15018] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 675.450693][T15009] vhci_hcd: connection closed [ 675.451477][ T4627] vhci_hcd vhci_hcd.2: stop threads [ 675.463440][ T4627] vhci_hcd vhci_hcd.2: release socket [ 675.466907][ T4627] vhci_hcd vhci_hcd.2: disconnect device [ 675.556974][ T5953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 675.560837][ T5953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 675.563827][ T5953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 675.568357][ T5953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 675.570926][ T5953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 675.586785][T15026] lo speed is unknown, defaulting to 1000 [ 675.622593][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 675.671187][T15026] chnl_net:caif_netlink_parms(): no params data found [ 675.731334][T15026] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.734321][T15026] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.736799][T15026] bridge_slave_0: entered allmulticast mode [ 675.739493][T15026] bridge_slave_0: entered promiscuous mode [ 675.743525][T15026] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.745980][T15026] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.748331][T15026] bridge_slave_1: entered allmulticast mode [ 675.751087][T15026] bridge_slave_1: entered promiscuous mode [ 675.771978][T15026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.776686][T15026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.791965][T15026] team0: Port device team_slave_0 added [ 675.795129][T15026] team0: Port device team_slave_1 added [ 675.808256][T15026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.810451][T15026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.819442][T15026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.829269][T15026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.831454][T15026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.840219][T15026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.862958][T15026] hsr_slave_0: entered promiscuous mode [ 675.865230][T15026] hsr_slave_1: entered promiscuous mode [ 675.867372][T15026] debugfs: 'hsr0' already exists in 'hsr' [ 675.869183][T15026] Cannot create hsr debugfs directory [ 675.942215][ T1022] usb 38-1: device descriptor read/8, error -110 [ 676.039184][ T4627] dummy0: left allmulticast mode [ 676.043093][ T4627] bridge0: port 3(dummy0) entered disabled state [ 676.047342][ T4627] bridge_slave_1: left allmulticast mode [ 676.049381][ T4627] bridge_slave_1: left promiscuous mode [ 676.051318][ T4627] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.055622][ T4627] bridge_slave_0: left allmulticast mode [ 676.057487][ T4627] bridge_slave_0: left promiscuous mode [ 676.059388][ T4627] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.192897][ T4627] gretap0 (unregistering): left promiscuous mode [ 676.206924][T15047] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 676.209079][T15047] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 676.212842][T15047] vhci_hcd vhci_hcd.0: Device attached [ 676.215869][ T4627] bond1 (unregistering): (slave gre1): Releasing backup interface [ 676.245933][ T4627] gre1 (unregistering): left promiscuous mode [ 676.332747][ T1022] usb usb38-port1: attempt power cycle [ 676.336969][T15047] rdma_rxe: rxe_newlink: failed to add wg2 [ 676.433483][ T4627] bond0 (unregistering): left promiscuous mode [ 676.435576][ T4627] bond_slave_0: left promiscuous mode [ 676.437446][ T4627] bond_slave_1: left promiscuous mode [ 676.444893][ T4627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.448455][ T4627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 676.453225][ T4627] bond0 (unregistering): Released all slaves [ 676.511888][ T4627] bond1 (unregistering): Released all slaves [ 676.570581][ T4627] bond2 (unregistering): Released all slaves [ 676.629526][ T4627] bond3 (unregistering): Released all slaves [ 676.662168][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 676.691826][ T4627] bond4 (unregistering): Released all slaves [ 676.756237][ T4627] bond5 (unregistering): Released all slaves [ 676.819818][ T4627] bond6 (unregistering): Released all slaves [ 676.848921][T15048] vhci_hcd: connection reset by peer [ 676.850907][ T6408] vhci_hcd vhci_hcd.2: stop threads [ 676.853306][ T6408] vhci_hcd vhci_hcd.2: release socket [ 676.855706][ T6060] usb 42-1: device descriptor read/8, error -110 [ 676.855760][ T6408] vhci_hcd vhci_hcd.2: disconnect device [ 676.893333][ T1022] usb usb38-port1: unable to enumerate USB device [ 676.893361][ T4627] bond7 (unregistering): Released all slaves [ 676.962437][ T4627] bond8 (unregistering): Released all slaves [ 676.963046][ T6060] usb usb42-port1: unable to enumerate USB device [ 677.029247][ T4627] bond9 (unregistering): Released all slaves [ 677.093226][ T4627] bond10 (unregistering): Released all slaves [ 677.152230][ T4627] bond11 (unregistering): Released all slaves [ 677.215339][ T4627] bond12 (unregistering): Released all slaves [ 677.282855][ T4627] bond13 (unregistering): Released all slaves [ 677.348544][ T4627] bond14 (unregistering): Released all slaves [ 677.470016][ T4627] bond15 (unregistering): Released all slaves [ 677.558902][ T4627] bond16 (unregistering): Released all slaves [ 677.590731][T15069] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2428'. [ 677.622273][ T5954] Bluetooth: hci3: command tx timeout [ 677.622360][ T4627] bond17 (unregistering): Released all slaves [ 677.658032][T15060] syzkaller0: entered promiscuous mode [ 677.659813][T15060] syzkaller0: entered allmulticast mode [ 677.676059][ T6395] syzkaller0: tun_net_xmit 48 [ 677.702200][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 678.081534][T15074] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 678.083655][T15074] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 678.086520][T15074] vhci_hcd vhci_hcd.0: Device attached [ 678.362329][ T34] usb 42-1: SetAddress Request (12) to port 0 [ 678.364429][ T34] usb 42-1: new SuperSpeed USB device number 12 using vhci_hcd [ 678.744855][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 678.903951][T15075] vhci_hcd: connection reset by peer [ 678.905850][ T8196] vhci_hcd vhci_hcd.2: stop threads [ 678.908062][ T8196] vhci_hcd vhci_hcd.2: release socket [ 678.909999][ T8196] vhci_hcd vhci_hcd.2: disconnect device [ 679.347626][ T4627] hsr_slave_0: left promiscuous mode [ 679.351582][ T4627] hsr_slave_1: left promiscuous mode [ 679.356703][ T4627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.366416][ T4627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.397991][ T4627] pimreg (unregistering): left allmulticast mode [ 679.702248][ T5954] Bluetooth: hci3: command tx timeout [ 679.756736][T15097] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 679.758951][T15097] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 679.761839][T15097] vhci_hcd vhci_hcd.0: Device attached [ 679.783342][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 679.883439][T15097] rdma_rxe: rxe_newlink: failed to add wg2 [ 680.107718][T15026] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 680.112956][T15026] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 680.117287][T15026] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 680.121221][T15026] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 680.202212][T15026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.211910][T15026] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.220712][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.223713][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.242696][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.245609][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.340165][T15124] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2436'. [ 680.396440][T15098] vhci_hcd: connection closed [ 680.396749][ T8196] vhci_hcd vhci_hcd.2: stop threads [ 680.400785][ T8196] vhci_hcd vhci_hcd.2: release socket [ 680.404768][ T8196] vhci_hcd vhci_hcd.2: disconnect device [ 680.432634][T15026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.460069][T15026] veth0_vlan: entered promiscuous mode [ 680.466520][T15026] veth1_vlan: entered promiscuous mode [ 680.488594][T15026] veth0_macvtap: entered promiscuous mode [ 680.493999][T15026] veth1_macvtap: entered promiscuous mode [ 680.505471][T15026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.513142][T15026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 680.523437][ T4627] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.527125][ T4627] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.531021][ T4627] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.535619][ T4627] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.566981][ T4627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.569692][ T4627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.581693][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.585411][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.773511][T15135] syzkaller0: entered promiscuous mode [ 680.775732][T15135] syzkaller0: entered allmulticast mode [ 680.782344][ T1141] syzkaller0: tun_net_xmit 48 [ 680.824924][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 680.977370][T15137] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 680.979280][T15137] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 680.981791][T15137] vhci_hcd vhci_hcd.0: Device attached [ 681.302687][ T5823] usb 38-1: SetAddress Request (56) to port 0 [ 681.304993][ T5823] usb 38-1: new SuperSpeed USB device number 56 using vhci_hcd [ 681.471583][T15138] vhci_hcd: connection reset by peer [ 681.473689][ T46] vhci_hcd vhci_hcd.0: stop threads [ 681.475539][ T46] vhci_hcd vhci_hcd.0: release socket [ 681.477240][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 681.784687][ T5954] Bluetooth: hci3: command tx timeout [ 681.862997][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 682.261972][T15153] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 682.264058][T15153] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 682.267165][T15153] vhci_hcd vhci_hcd.0: Device attached [ 682.340232][T15162] netlink: 'syz.0.2443': attribute type 13 has an invalid length. [ 682.349887][T15162] gretap0: refused to change device tx_queue_len [ 682.355444][T15162] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 682.410239][T15169] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2445'. [ 682.688036][T15175] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 682.690199][T15175] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 682.694938][T15175] vhci_hcd vhci_hcd.0: Device attached [ 682.841731][T15178] rdma_rxe: rxe_newlink: failed to add wg2 [ 682.889451][T15154] vhci_hcd: connection closed [ 682.889724][ T60] vhci_hcd vhci_hcd.2: stop threads [ 682.893193][ T60] vhci_hcd vhci_hcd.2: release socket [ 682.895104][ T60] vhci_hcd vhci_hcd.2: disconnect device [ 682.902192][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 682.962318][ T1022] usb 40-1: SetAddress Request (24) to port 0 [ 682.964993][ T1022] usb 40-1: new SuperSpeed USB device number 24 using vhci_hcd [ 683.462275][ T34] usb 42-1: device descriptor read/8, error -110 [ 683.852705][ T34] usb usb42-port1: attempt power cycle [ 683.862509][ T5954] Bluetooth: hci3: command tx timeout [ 683.934449][T15176] vhci_hcd: connection reset by peer [ 683.937152][ T13] vhci_hcd vhci_hcd.1: stop threads [ 683.939411][ T13] vhci_hcd vhci_hcd.1: release socket [ 683.941803][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 683.942391][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 683.995210][T15184] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 683.997388][T15184] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 684.003522][T15184] vhci_hcd vhci_hcd.0: Device attached [ 684.161468][T15187] vhci_hcd: connection closed [ 684.161696][ T13] vhci_hcd vhci_hcd.0: stop threads [ 684.164887][ T13] vhci_hcd vhci_hcd.0: release socket [ 684.166674][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 684.413004][ T34] usb usb42-port1: unable to enumerate USB device [ 684.621106][T15196] syzkaller0: entered promiscuous mode [ 684.625115][T15196] syzkaller0: entered allmulticast mode [ 684.628833][ T60] syzkaller0: tun_net_xmit 48 [ 684.894504][T15200] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2455'. [ 684.992234][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 686.022239][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 686.104545][T15220] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 686.106655][T15220] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 686.110116][T15220] vhci_hcd vhci_hcd.0: Device attached [ 686.173454][T15223] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 686.173482][T15223] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 686.173715][T15223] vhci_hcd vhci_hcd.0: Device attached [ 686.338651][T15223] rdma_rxe: rxe_newlink: failed to add wg2 [ 686.590459][ T827] lo speed is unknown, defaulting to 1000 [ 686.593722][T15229] netlink: 'syz.2.2461': attribute type 13 has an invalid length. [ 686.596349][ T827] syz2: Port: 1 Link DOWN [ 686.601234][T15229] gretap0: refused to change device tx_queue_len [ 686.603821][T15229] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 686.608915][ T827] lo speed is unknown, defaulting to 1000 [ 686.610883][ T827] syz2: Port: 1 Link ACTIVE [ 686.754376][T15221] vhci_hcd: connection reset by peer [ 686.763155][ T1141] vhci_hcd vhci_hcd.0: stop threads [ 686.765424][ T1141] vhci_hcd vhci_hcd.0: release socket [ 686.767946][ T5823] usb 38-1: device descriptor read/8, error -110 [ 686.768009][ T1141] vhci_hcd vhci_hcd.0: disconnect device [ 686.831491][T15224] vhci_hcd: connection closed [ 686.831845][ T1141] vhci_hcd vhci_hcd.1: stop threads [ 686.836088][ T1141] vhci_hcd vhci_hcd.1: release socket [ 686.838151][ T1141] vhci_hcd vhci_hcd.1: disconnect device [ 686.993810][T15234] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 686.995920][T15234] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 686.998785][T15234] vhci_hcd vhci_hcd.0: Device attached [ 687.062241][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 687.152664][ T5823] usb usb38-port1: attempt power cycle [ 687.263016][ T6084] usb 44-1: SetAddress Request (119) to port 0 [ 687.265100][ T6084] usb 44-1: new SuperSpeed USB device number 119 using vhci_hcd [ 687.385194][T15235] vhci_hcd: connection reset by peer [ 687.387241][ T13] vhci_hcd vhci_hcd.3: stop threads [ 687.389935][ T13] vhci_hcd vhci_hcd.3: release socket [ 687.392930][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 687.424151][T15242] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2466'. [ 687.683954][T15249] syzkaller0: entered promiscuous mode [ 687.686081][T15249] syzkaller0: entered allmulticast mode [ 687.690062][ T13] syzkaller0: tun_net_xmit 48 [ 687.712689][ T5823] usb usb38-port1: unable to enumerate USB device [ 688.022430][ T1022] usb 40-1: device descriptor read/8, error -110 [ 688.112273][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 688.376238][T15261] No control pipe specified [ 688.412773][ T1022] usb usb40-port1: attempt power cycle [ 688.462472][T15265] netlink: 'syz.0.2471': attribute type 13 has an invalid length. [ 688.864076][T15270] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 688.866272][T15270] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 688.869207][T15270] vhci_hcd vhci_hcd.0: Device attached [ 688.876837][T15274] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2475'. [ 689.044695][T15265] gretap0: refused to change device tx_queue_len [ 689.045065][T15270] rdma_rxe: rxe_newlink: failed to add wg2 [ 689.048391][T15265] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 689.052336][ T1022] usb 40-1: SetAddress Request (27) to port 0 [ 689.069801][ T1022] usb 40-1: new SuperSpeed USB device number 27 using vhci_hcd [ 689.142233][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 689.166152][T15285] fuse: Bad value for 'fd' [ 689.322938][T15291] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 689.325061][T15291] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 689.327768][T15291] vhci_hcd vhci_hcd.0: Device attached [ 689.402343][T15271] vhci_hcd: connection reset by peer [ 689.404260][ T1182] vhci_hcd vhci_hcd.1: stop threads [ 689.406002][ T1182] vhci_hcd vhci_hcd.1: release socket [ 689.407804][ T1182] vhci_hcd vhci_hcd.1: disconnect device [ 689.602225][ T5823] usb 38-1: SetAddress Request (60) to port 0 [ 689.604206][ T5823] usb 38-1: new SuperSpeed USB device number 60 using vhci_hcd [ 689.971838][T15292] vhci_hcd: connection reset by peer [ 689.976023][ T60] vhci_hcd vhci_hcd.0: stop threads [ 689.978270][ T60] vhci_hcd vhci_hcd.0: release socket [ 689.980538][ T60] vhci_hcd vhci_hcd.0: disconnect device [ 690.025091][T15299] No control pipe specified [ 690.094562][T15306] netlink: 'syz.1.2485': attribute type 13 has an invalid length. [ 690.115320][T15308] syzkaller0: entered promiscuous mode [ 690.117820][T15308] syzkaller0: entered allmulticast mode [ 690.132232][T15306] gretap0: refused to change device tx_queue_len [ 690.134601][T15306] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 690.139854][ T60] syzkaller0: tun_net_xmit 48 [ 690.182466][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 690.274569][T15314] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2489'. [ 690.345452][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.347579][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.558736][T15316] overlayfs: missing 'lowerdir' [ 690.846238][T15320] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 690.848939][T15320] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 690.855298][T15320] vhci_hcd vhci_hcd.0: Device attached [ 690.975218][T15320] rdma_rxe: rxe_newlink: failed to add wg2 [ 691.222338][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 691.287588][T15304] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.300037][T15314] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.303804][T15314] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.418866][T15304] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.455552][T15334] netlink: 'syz.1.2496': attribute type 13 has an invalid length. [ 691.460292][T15334] gretap0: refused to change device tx_queue_len [ 691.462990][T15334] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 691.463111][T15321] vhci_hcd: connection closed [ 691.472810][ T13] vhci_hcd vhci_hcd.0: stop threads [ 691.479378][ T13] vhci_hcd vhci_hcd.0: release socket [ 691.481437][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 691.492785][T15304] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.554938][T15304] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.616107][ T6395] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.624213][ T1182] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.630615][ T1182] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.638599][ T1182] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.883409][T15343] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 691.886176][T15343] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 691.889432][T15343] vhci_hcd vhci_hcd.0: Device attached [ 692.182204][ T827] usb 42-1: SetAddress Request (16) to port 0 [ 692.182239][ T827] usb 42-1: new SuperSpeed USB device number 16 using vhci_hcd [ 692.252780][ T6395] Bluetooth: hci1: Frame reassembly failed (-84) [ 692.255022][ T6395] Bluetooth: hci1: Frame reassembly failed (-84) [ 692.262682][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 692.342301][ T6084] usb 44-1: device descriptor read/8, error -110 [ 692.483484][T15357] syzkaller0: entered promiscuous mode [ 692.485888][T15357] syzkaller0: entered allmulticast mode [ 692.489823][ T1182] syzkaller0: tun_net_xmit 48 [ 692.530470][T15344] vhci_hcd: connection reset by peer [ 692.532693][ T8196] vhci_hcd vhci_hcd.2: stop threads [ 692.534907][ T8196] vhci_hcd vhci_hcd.2: release socket [ 692.537207][ T8196] vhci_hcd vhci_hcd.2: disconnect device [ 692.743763][ T6084] usb usb44-port1: attempt power cycle [ 693.302241][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 693.323127][ T6084] usb usb44-port1: unable to enumerate USB device [ 693.647470][T13268] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 693.651875][T13268] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 693.656590][T13268] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 693.660827][T13268] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 693.664914][T13268] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 693.674747][T15373] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 693.677593][T15373] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 693.700505][T15370] lo speed is unknown, defaulting to 1000 [ 693.749113][T13385] syz_tun (unregistering): left allmulticast mode [ 693.830912][T15370] chnl_net:caif_netlink_parms(): no params data found [ 693.885056][T15370] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.888057][T15370] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.890916][T15370] bridge_slave_0: entered allmulticast mode [ 693.895046][T15370] bridge_slave_0: entered promiscuous mode [ 693.900011][T15370] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.903291][T15370] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.906391][T15370] bridge_slave_1: entered allmulticast mode [ 693.910161][T15370] bridge_slave_1: entered promiscuous mode [ 693.931795][T15370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.936302][T15370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.953089][T15370] team0: Port device team_slave_0 added [ 693.956576][T15370] team0: Port device team_slave_1 added [ 693.973238][T15370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 693.975374][T15370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.982993][T15370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 693.987981][T15370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 693.990047][T15370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.997418][T15370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.029693][T15370] hsr_slave_0: entered promiscuous mode [ 694.032198][T15370] hsr_slave_1: entered promiscuous mode [ 694.034443][T15370] debugfs: 'hsr0' already exists in 'hsr' [ 694.036314][T15370] Cannot create hsr debugfs directory [ 694.133413][T15370] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.193273][ T1022] usb 40-1: device descriptor read/8, error -110 [ 694.211981][T15370] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.262221][ T5954] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 694.298551][T15370] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.304947][ T1022] usb usb40-port1: unable to enumerate USB device [ 694.352429][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 694.376464][T15370] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.662256][ T5823] usb 38-1: device descriptor read/8, error -110 [ 695.060287][ T5823] usb usb38-port1: attempt power cycle [ 695.392248][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 695.481950][T15370] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 695.486810][T15370] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 695.491823][T15370] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 695.502934][T15370] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 695.639193][T15370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.650239][T15370] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.665666][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.668593][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.677373][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.680355][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.712945][ T5954] Bluetooth: hci4: command tx timeout [ 695.912342][T15370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.031291][T15370] veth0_vlan: entered promiscuous mode [ 696.068854][T15370] veth1_vlan: entered promiscuous mode [ 696.090214][T15370] veth0_macvtap: entered promiscuous mode [ 696.103914][T15370] veth1_macvtap: entered promiscuous mode [ 696.112758][T15370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 696.119743][T15370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 696.127561][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.130398][ T46] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.134194][ T46] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.140285][ T46] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.183445][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.186092][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.197737][ T1182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.200486][ T1182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.240551][T15425] netlink: 'syz.2.2506': attribute type 13 has an invalid length. [ 696.246595][T15425] gretap0: refused to change device tx_queue_len [ 696.248803][T15425] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 696.323298][ T5823] usb usb38-port1: unable to enumerate USB device [ 696.422264][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 697.222337][ T827] usb 42-1: device descriptor read/8, error -110 [ 697.462178][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 697.628379][ T827] usb usb42-port1: attempt power cycle [ 697.656343][T15453] netlink: 'syz.2.2528': attribute type 13 has an invalid length. [ 697.663039][T15453] gretap0: refused to change device tx_queue_len [ 697.666883][T15453] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 697.782346][ T5954] Bluetooth: hci4: command tx timeout [ 698.193286][ T827] usb usb42-port1: unable to enumerate USB device [ 698.403534][T15460] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.441183][T15464] team0 (unregistering): Failed to send options change via netlink (err -105) [ 698.444657][T15464] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 698.448365][T15464] team0 (unregistering): Port device team_slave_0 removed [ 698.452515][T15464] team0 (unregistering): Failed to send options change via netlink (err -105) [ 698.455515][T15464] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 698.459135][T15464] team0 (unregistering): Port device team_slave_1 removed [ 698.481942][T15460] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.512210][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 698.583204][T15460] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.661656][T15460] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.701446][T15473] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.749206][ T60] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.757318][ T60] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.775237][ T6408] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.777920][ T6408] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.785844][T15473] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.808093][T15478] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.869772][T15473] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.916950][T15478] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.981559][T15473] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.029693][T15478] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.096975][ T60] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.104335][ T60] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.114200][ T60] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.125321][ T60] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.133985][T15478] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.226377][ T1150] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.234655][ T1150] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.242083][ T1150] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.249786][ T1150] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.542218][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 699.862278][ T5954] Bluetooth: hci4: command tx timeout [ 700.582233][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 700.814963][T15522] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.893410][T15528] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.906461][T15522] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.951644][T15530] team0 (unregistering): Failed to send options change via netlink (err -105) [ 700.955720][T15530] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 700.959932][T15530] team0 (unregistering): Port device team_slave_0 removed [ 700.965082][T15530] team0 (unregistering): Failed to send options change via netlink (err -105) [ 700.968126][T15530] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 700.971888][T15530] team0 (unregistering): Port device team_slave_1 removed [ 700.981465][T15522] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.005825][T15528] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.058996][T15522] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.080989][T15528] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.151323][T15535] tipc: Enabled bearer , priority 0 [ 701.158331][T15534] tipc: Resetting bearer [ 701.622303][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 701.952233][ T5953] Bluetooth: hci4: command tx timeout [ 702.124246][T15534] tipc: Disabling bearer [ 702.137588][T15528] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.192897][ T5954] Bluetooth: hci3: command 0x2016 tx timeout [ 702.233348][ T6408] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.240845][ T6408] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.249166][ T6408] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.261360][ T6408] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.352451][T13897] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 702.364256][T13897] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 702.367281][T13897] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 702.371250][T13897] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 702.373998][T13897] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 702.401245][T15549] lo speed is unknown, defaulting to 1000 [ 702.453036][ T6408] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.464789][ T8579] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.482008][ T8579] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.491639][ T8579] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.504020][T15549] chnl_net:caif_netlink_parms(): no params data found [ 702.545927][T15549] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.583639][ T5953] Bluetooth: hci2: command 0x2016 tx timeout [ 702.627160][T15549] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.629622][T15549] bridge_slave_0: entered allmulticast mode [ 702.632426][T15549] bridge_slave_0: entered promiscuous mode [ 702.649846][T15549] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.652280][T15549] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.654735][T15549] bridge_slave_1: entered allmulticast mode [ 702.657398][T15549] bridge_slave_1: entered promiscuous mode [ 702.672171][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 702.673304][T15549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.678968][T15549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.698751][T15549] team0: Port device team_slave_0 added [ 702.701870][T15549] team0: Port device team_slave_1 added [ 702.736712][T15549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.741485][T15549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.750844][T15549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.754692][T15570] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 702.756791][T15570] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 702.760455][T15549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.762800][T15549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.771379][T15549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.775416][T15570] vhci_hcd vhci_hcd.0: Device attached [ 702.816653][T15549] hsr_slave_0: entered promiscuous mode [ 702.817118][T15549] hsr_slave_1: entered promiscuous mode [ 702.817480][T15549] debugfs: 'hsr0' already exists in 'hsr' [ 702.817494][T15549] Cannot create hsr debugfs directory [ 702.921044][T15549] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.964742][T15570] rdma_rxe: rxe_newlink: failed to add wg2 [ 703.004569][T15549] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.072232][ T1022] usb 38-1: SetAddress Request (64) to port 0 [ 703.075749][ T1022] usb 38-1: new SuperSpeed USB device number 64 using vhci_hcd [ 703.133490][T15549] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.210993][T15549] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.340021][T15549] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 703.345185][T15549] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 703.349970][T15549] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 703.355124][T15549] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 703.359268][T15583] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input22 [ 703.391362][T15571] vhci_hcd: connection reset by peer [ 703.398987][ T1141] vhci_hcd vhci_hcd.0: stop threads [ 703.400790][ T1141] vhci_hcd vhci_hcd.0: release socket [ 703.402860][ T1141] vhci_hcd vhci_hcd.0: disconnect device [ 703.402916][T15549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.414626][T15549] 8021q: adding VLAN 0 to HW filter on device team0 [ 703.420526][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.422904][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.444479][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.446897][ T1182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.512077][T15592] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.567142][T15592] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.577775][T15549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 703.599523][T15549] veth0_vlan: entered promiscuous mode [ 703.604953][T15549] veth1_vlan: entered promiscuous mode [ 703.619167][T15549] veth0_macvtap: entered promiscuous mode [ 703.623505][T15549] veth1_macvtap: entered promiscuous mode [ 703.631993][T15549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.638751][T15549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.644441][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.647451][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.650749][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.653829][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.658120][T15592] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.686217][ T53] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffffff: 0000 [#1] SMP KASAN NOPTI SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 703.689628][ T53] KASAN: probably user-memory-access in range [0x00000000fffffff8-0x00000000ffffffff] [ 703.692479][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.692505][ T53] CPU: 1 UID: 0 PID: 53 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 703.693136][T15549] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 703.696698][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.697805][ T53] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 703.697816][ T53] Workqueue: wg-crypt-wg2 wg_packet_encrypt_worker [ 703.697834][ T53] RIP: 0010:wg_packet_encrypt_worker+0x242/0xbc0 [ 703.697848][ T53] Code: 14 66 fb 39 dd 0f 8e 1c 07 00 00 e8 88 1a 66 fb 41 89 9f 80 00 00 00 48 8b 7c 24 40 e8 d7 07 20 05 48 8b 44 24 08 48 c1 e8 03 <42> 80 3c 30 00 0f 85 bb 08 00 00 48 8b 44 24 08 4c 89 7c 24 38 48 [ 703.712195][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 703.714483][ T53] RSP: 0018:ffffc9000074fad8 EFLAGS: 00010207 [ 703.718375][ T53] RAX: 000000001fffffff RBX: 0000000000000003 RCX: 0000000000000006 [ 703.720609][ T53] RDX: 0000000000000000 RSI: ffffffff8daca488 RDI: ffffffff8bf2b500 [ 703.722846][ T53] RBP: 0000000000000400 R08: 0000000000000001 R09: 0000000000000001 [ 703.725179][ T53] R10: ffffffff9088e6d7 R11: ffff88801fd40b30 R12: ffff888024e8c000 [ 703.727498][ T53] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88804b890dc0 [ 703.729766][ T53] FS: 0000000000000000(0000) GS:ffff8880977fc000(0000) knlGS:0000000000000000 [ 703.732369][ T53] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 703.734275][ T53] CR2: 00007fca03689e9c CR3: 0000000070fc7000 CR4: 0000000000352ef0 [ 703.736536][ T53] Call Trace: [ 703.737555][ T53] [ 703.738427][ T53] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 703.740148][ T53] ? rcu_is_watching+0x12/0xc0 [ 703.741525][ T53] process_one_work+0x9ba/0x1b20 [ 703.742936][ T53] ? __pfx_process_one_work+0x10/0x10 [ 703.744686][ T53] ? assign_work+0x1a0/0x250 [ 703.746050][ T53] worker_thread+0x6c8/0xf10 [ 703.747392][ T53] ? __pfx_worker_thread+0x10/0x10 [ 703.748869][ T53] kthread+0x3c5/0x780 [ 703.750113][ T53] ? __pfx_kthread+0x10/0x10 [ 703.751451][ T53] ? rcu_is_watching+0x12/0xc0 [ 703.752833][ T53] ? __pfx_kthread+0x10/0x10 [ 703.754262][ T53] ret_from_fork+0x983/0xb10 [ 703.755697][ T53] ? __pfx_ret_from_fork+0x10/0x10 [ 703.757543][ T53] ? __switch_to+0x7af/0x10d0 [ 703.758983][ T53] ? __pfx_kthread+0x10/0x10 [ 703.760795][ T53] ret_from_fork_asm+0x1a/0x30 [ 703.762552][ T53] [ 703.763500][ T53] Modules linked in: [ 703.765111][ T53] ---[ end trace 0000000000000000 ]--- [ 703.770999][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.794295][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.800187][ T53] RIP: 0010:wg_packet_encrypt_worker+0x242/0xbc0 [ 703.802355][ T53] Code: 14 66 fb 39 dd 0f 8e 1c 07 00 00 e8 88 1a 66 fb 41 89 9f 80 00 00 00 48 8b 7c 24 40 e8 d7 07 20 05 48 8b 44 24 08 48 c1 e8 03 <42> 80 3c 30 00 0f 85 bb 08 00 00 48 8b 44 24 08 4c 89 7c 24 38 48 [ 703.809178][ T53] RSP: 0018:ffffc9000074fad8 EFLAGS: 00010207 [ 703.811292][ T53] RAX: 000000001fffffff RBX: 0000000000000003 RCX: 0000000000000006 [ 703.814170][ T53] RDX: 0000000000000000 RSI: ffffffff8daca488 RDI: ffffffff8bf2b500 [ 703.832627][T15592] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.841669][ T53] RBP: 0000000000000400 R08: 0000000000000001 R09: 0000000000000001 [ 703.844267][ T53] R10: ffffffff9088e6d7 R11: ffff88801fd40b30 R12: ffff888024e8c000 [ 703.846595][ T53] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88804b890dc0 [ 703.848860][ T53] FS: 0000000000000000(0000) GS:ffff8880977fc000(0000) knlGS:0000000000000000 [ 703.851377][ T53] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 703.853426][ T53] CR2: 0000557a0bcf339e CR3: 0000000054085000 CR4: 0000000000352ef0 [ 703.862158][ T53] Kernel panic - not syncing: Fatal exception [ 703.864418][ T53] Kernel Offset: disabled [ 703.865698][ T53] Rebooting in 86400 seconds..