last executing test programs: 2m4.507021817s ago: executing program 0 (id=1015): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000080)={0x80, 0x0, 0x1}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 2m4.110857476s ago: executing program 0 (id=1021): r0 = syz_usb_connect(0x2, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="20090600000079"], 0x0, 0x0, 0x0, 0x0, 0x0}) 2m3.858826702s ago: executing program 3 (id=1024): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001300290a00000000fffffdff07000000", @ANYRES32=r1, @ANYBLOB="000000002054000004000c800c001a800800028004fb"], 0x30}}, 0x0) 2m3.679176268s ago: executing program 3 (id=1026): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) 2m3.637701097s ago: executing program 4 (id=1027): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) 2m3.458739602s ago: executing program 4 (id=1028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x6c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48}, 0x4800) 2m3.406287579s ago: executing program 2 (id=1029): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0xe6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) 2m3.316491165s ago: executing program 3 (id=1031): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x20100000, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x3}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) 2m3.245875394s ago: executing program 4 (id=1032): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@empty, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @remote}}}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 2m3.091363765s ago: executing program 3 (id=1033): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7800000055003d0926bd70000200000007000000", @ANYRES32=r2, @ANYBLOB="20000200", @ANYRES32=r2, @ANYBLOB="00010400000000000000000000000000000000008edd000020000100", @ANYRES32=r2, @ANYBLOB="000200006401010200000000000000000000000086dd"], 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 2m3.049182573s ago: executing program 1 (id=1034): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x12000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x188c0}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x0) 2m3.042479836s ago: executing program 4 (id=1035): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdc9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m2.892384075s ago: executing program 3 (id=1036): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) unshare(0x26020400) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x4, 0x3, 0x2, 0x0, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0xfffffffffffffffe, 0x71e7, 0x8}, 0x0, 0x0, 0x0) 2m2.721088421s ago: executing program 4 (id=1037): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000500)=[{0x4, 0x5, 0x800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semctl$GETZCNT(r0, 0x4, 0xf, 0x0) 2m2.65444915s ago: executing program 1 (id=1038): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000100100000100000014e200000000000010"], 0x28}, 0x0) 2m2.50123771s ago: executing program 2 (id=1039): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x1c, r1, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4814) 2m2.411287938s ago: executing program 1 (id=1040): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='rtc_irq_set_state\x00', r0, 0x0, 0x1d}, 0x18) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) 2m2.291026623s ago: executing program 2 (id=1041): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, &(0x7f0000001dc0)={0x9, 0x72}, 0x49) 2m2.246851984s ago: executing program 1 (id=1042): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0xffffffff}, @hyper, 0x4, 0x0, 0xffff}) 2m2.190049235s ago: executing program 2 (id=1043): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='kfree\x00', r0, 0x0, 0x800000000}, 0x18) r1 = memfd_create(&(0x7f0000000900)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCu\x01\x00\x00\x00\x00\x00\x00\x00\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/668, 0x7) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) 2m2.113445585s ago: executing program 0 (id=1044): socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') socket$kcm(0x29, 0x2, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/190, 0xbe}, {&(0x7f0000000a00)=""/207, 0xcf}], 0x2, 0x189, 0x100) 2m2.082999498s ago: executing program 2 (id=1045): r0 = socket$inet6(0xa, 0x3, 0x20) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0xa, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1e, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x100003}, 0x1c) 2m2.02685366s ago: executing program 1 (id=1046): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000140)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633"], 0x6f4}}, 0x0) 2m2.008488622s ago: executing program 2 (id=1047): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ustat(0x4, &(0x7f0000000200)) 2m1.894806947s ago: executing program 0 (id=1048): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 2m1.849010807s ago: executing program 1 (id=1049): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x0, 0xfffffffffffffffc}, 0x10) 2m1.810603172s ago: executing program 3 (id=1050): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0xc, &(0x7f0000000480)=@ccm_128={{0x304}, "6fa66229a7a91abc", "7694f16d07de390be2bdc631fd1b7e76", "271a6330", "f6593472d1b0d4e4"}, 0x28) 2m1.639204696s ago: executing program 0 (id=1051): r0 = epoll_create(0x80) r1 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) epoll_wait(r0, &(0x7f0000000100)=[{}], 0x1, 0xb6) 2m1.609557807s ago: executing program 4 (id=1052): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x1, 0x2, 0x1ff, 0xb06}, 0x27, [0x1000, 0x10001, 0x80, 0x10, 0xc, 0x827, 0x0, 0x1, 0x7, 0x2, 0x0, 0x8, 0x3, 0x100, 0xc776, 0x7, 0x7, 0x9, 0x3, 0xfffffffd, 0xfffffffd, 0x4, 0x2, 0xa, 0xe, 0x1, 0x80000000, 0x4, 0x8, 0xb, 0x4, 0xa9, 0x956, 0x1, 0x88, 0x4, 0x8000, 0x7, 0xa, 0x0, 0x9de, 0x1, 0x0, 0x80000000, 0x7, 0x2, 0x7fff, 0xc30, 0x40000000, 0x6, 0xb05, 0xc, 0x8, 0x5, 0x6, 0x4, 0x0, 0x3, 0x3, 0x9, 0x5, 0x6, 0x0, 0x3fcc], [0x800, 0x96, 0x2fd1d58, 0x0, 0x1, 0x6, 0x1, 0x8, 0x7, 0x80, 0xff7, 0x2f, 0x9, 0x3, 0x10001, 0x6, 0xfffffbff, 0x6, 0x100, 0x4, 0x7fffffff, 0x1, 0x8001, 0x1, 0xd, 0x5, 0x1000, 0x8, 0x1, 0x9, 0x80000000, 0xd, 0x1, 0x0, 0xfa, 0x3, 0x9f9, 0x4, 0x2, 0xb342, 0x2, 0x451f, 0x1, 0x605f, 0xb2, 0xd4e5, 0x3, 0x80002001, 0x8, 0x2, 0x5, 0x0, 0x6c, 0x7, 0x101, 0xca8, 0x0, 0x7fffffff, 0xfffffffe, 0xffffff81, 0x5, 0x7, 0x5, 0xff], [0xfffffff5, 0x0, 0x0, 0xdd, 0x6, 0x0, 0x80000349, 0x10000000, 0x89ef, 0xcb4, 0x4, 0x587a, 0x8, 0xf, 0x100, 0xa0000000, 0x0, 0x5, 0x4, 0x9, 0x6, 0xe, 0xcc, 0x7, 0x200, 0x8, 0x6, 0x6, 0x2, 0x10001, 0x7fff, 0x1, 0xfb, 0x2, 0x1, 0x1, 0x0, 0x1fd, 0x6, 0xf, 0x4, 0x2, 0x1000, 0xfa, 0x5, 0x2, 0x6, 0x0, 0x2, 0x3, 0x9, 0x5, 0x741, 0x8, 0x8, 0x2, 0xff, 0x8, 0x7, 0x7ef, 0xd, 0x5, 0x7f], [0x2e, 0xc, 0x1, 0x1d43, 0x5, 0x4f84, 0x7ff, 0x0, 0x4, 0x2b, 0x6, 0x8, 0x8, 0x200, 0xa, 0x1, 0x7fff, 0x7, 0x4, 0x1, 0x2acd684b, 0x2, 0x0, 0x80000000, 0x8009, 0x4, 0x41, 0x7, 0x2, 0x4, 0x5, 0x6, 0xda, 0x200, 0x0, 0x6, 0x2, 0xa0001, 0xa, 0x6, 0x8, 0x8, 0x5, 0xffffff2d, 0x4, 0xbe9f, 0x6, 0x2, 0x8cb3, 0x5, 0x400, 0x7, 0x10000, 0x1c0000, 0x8, 0xaa3, 0x38e5, 0x0, 0x5, 0x2, 0x1, 0x3, 0x40006, 0x4]}, 0x45c) 2m1.45477518s ago: executing program 0 (id=1053): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000100)) 1m37.031625744s ago: executing program 32 (id=1053): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000100)) 1m4.281134463s ago: executing program 33 (id=1049): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x0, 0xfffffffffffffffc}, 0x10) 34.773017464s ago: executing program 34 (id=1047): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ustat(0x4, &(0x7f0000000200)) 19.667957705s ago: executing program 35 (id=1050): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0xc, &(0x7f0000000480)=@ccm_128={{0x304}, "6fa66229a7a91abc", "7694f16d07de390be2bdc631fd1b7e76", "271a6330", "f6593472d1b0d4e4"}, 0x28) 0s ago: executing program 36 (id=1052): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x1, 0x2, 0x1ff, 0xb06}, 0x27, [0x1000, 0x10001, 0x80, 0x10, 0xc, 0x827, 0x0, 0x1, 0x7, 0x2, 0x0, 0x8, 0x3, 0x100, 0xc776, 0x7, 0x7, 0x9, 0x3, 0xfffffffd, 0xfffffffd, 0x4, 0x2, 0xa, 0xe, 0x1, 0x80000000, 0x4, 0x8, 0xb, 0x4, 0xa9, 0x956, 0x1, 0x88, 0x4, 0x8000, 0x7, 0xa, 0x0, 0x9de, 0x1, 0x0, 0x80000000, 0x7, 0x2, 0x7fff, 0xc30, 0x40000000, 0x6, 0xb05, 0xc, 0x8, 0x5, 0x6, 0x4, 0x0, 0x3, 0x3, 0x9, 0x5, 0x6, 0x0, 0x3fcc], [0x800, 0x96, 0x2fd1d58, 0x0, 0x1, 0x6, 0x1, 0x8, 0x7, 0x80, 0xff7, 0x2f, 0x9, 0x3, 0x10001, 0x6, 0xfffffbff, 0x6, 0x100, 0x4, 0x7fffffff, 0x1, 0x8001, 0x1, 0xd, 0x5, 0x1000, 0x8, 0x1, 0x9, 0x80000000, 0xd, 0x1, 0x0, 0xfa, 0x3, 0x9f9, 0x4, 0x2, 0xb342, 0x2, 0x451f, 0x1, 0x605f, 0xb2, 0xd4e5, 0x3, 0x80002001, 0x8, 0x2, 0x5, 0x0, 0x6c, 0x7, 0x101, 0xca8, 0x0, 0x7fffffff, 0xfffffffe, 0xffffff81, 0x5, 0x7, 0x5, 0xff], [0xfffffff5, 0x0, 0x0, 0xdd, 0x6, 0x0, 0x80000349, 0x10000000, 0x89ef, 0xcb4, 0x4, 0x587a, 0x8, 0xf, 0x100, 0xa0000000, 0x0, 0x5, 0x4, 0x9, 0x6, 0xe, 0xcc, 0x7, 0x200, 0x8, 0x6, 0x6, 0x2, 0x10001, 0x7fff, 0x1, 0xfb, 0x2, 0x1, 0x1, 0x0, 0x1fd, 0x6, 0xf, 0x4, 0x2, 0x1000, 0xfa, 0x5, 0x2, 0x6, 0x0, 0x2, 0x3, 0x9, 0x5, 0x741, 0x8, 0x8, 0x2, 0xff, 0x8, 0x7, 0x7ef, 0xd, 0x5, 0x7f], [0x2e, 0xc, 0x1, 0x1d43, 0x5, 0x4f84, 0x7ff, 0x0, 0x4, 0x2b, 0x6, 0x8, 0x8, 0x200, 0xa, 0x1, 0x7fff, 0x7, 0x4, 0x1, 0x2acd684b, 0x2, 0x0, 0x80000000, 0x8009, 0x4, 0x41, 0x7, 0x2, 0x4, 0x5, 0x6, 0xda, 0x200, 0x0, 0x6, 0x2, 0xa0001, 0xa, 0x6, 0x8, 0x8, 0x5, 0xffffff2d, 0x4, 0xbe9f, 0x6, 0x2, 0x8cb3, 0x5, 0x400, 0x7, 0x10000, 0x1c0000, 0x8, 0xaa3, 0x38e5, 0x0, 0x5, 0x2, 0x1, 0x3, 0x40006, 0x4]}, 0x45c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.212' (ED25519) to the list of known hosts. [ 92.067826][ T9] cfg80211: failed to load regulatory.db [ 92.985125][ T5802] cgroup: Unknown subsys name 'net' [ 93.199871][ T5802] cgroup: Unknown subsys name 'cpuset' [ 93.234477][ T5802] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.155812][ T5802] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.056044][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.072324][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.074559][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.104572][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.116842][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.124779][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.126272][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.129092][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.130594][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.131984][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.133539][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.135057][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.154191][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.158027][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.192422][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.214483][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.318945][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.321125][ T5815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.321311][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.326329][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.327418][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.327738][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.330005][ T5815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.330048][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.331391][ T5815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.147102][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 99.495890][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 99.563079][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 99.796955][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 99.886523][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 99.984621][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.985862][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.986470][ T5818] bridge_slave_0: entered allmulticast mode [ 99.989201][ T5818] bridge_slave_0: entered promiscuous mode [ 100.065574][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.065737][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.065932][ T5818] bridge_slave_1: entered allmulticast mode [ 100.068896][ T5818] bridge_slave_1: entered promiscuous mode [ 100.144997][ T59] Bluetooth: hci4: command tx timeout [ 100.224286][ T59] Bluetooth: hci0: command tx timeout [ 100.303934][ T59] Bluetooth: hci1: command tx timeout [ 100.384072][ T59] Bluetooth: hci3: command tx timeout [ 100.384265][ T59] Bluetooth: hci2: command tx timeout [ 100.669192][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.689859][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.690015][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.690145][ T5812] bridge_slave_0: entered allmulticast mode [ 100.691984][ T5812] bridge_slave_0: entered promiscuous mode [ 100.785055][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.797081][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.797260][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.797458][ T5812] bridge_slave_1: entered allmulticast mode [ 100.800905][ T5812] bridge_slave_1: entered promiscuous mode [ 100.804101][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.804244][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.804734][ T5813] bridge_slave_0: entered allmulticast mode [ 100.807412][ T5813] bridge_slave_0: entered promiscuous mode [ 101.165790][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.166043][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.166230][ T5813] bridge_slave_1: entered allmulticast mode [ 101.169133][ T5813] bridge_slave_1: entered promiscuous mode [ 101.615218][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.615385][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.615576][ T5817] bridge_slave_0: entered allmulticast mode [ 101.618346][ T5817] bridge_slave_0: entered promiscuous mode [ 101.623012][ T5818] team0: Port device team_slave_0 added [ 101.623627][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.632249][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.632504][ T5816] bridge_slave_0: entered allmulticast mode [ 101.635944][ T5816] bridge_slave_0: entered promiscuous mode [ 101.662079][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.746577][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.746740][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.746933][ T5817] bridge_slave_1: entered allmulticast mode [ 101.749220][ T5817] bridge_slave_1: entered promiscuous mode [ 101.750194][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.750314][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.750453][ T5816] bridge_slave_1: entered allmulticast mode [ 101.752365][ T5816] bridge_slave_1: entered promiscuous mode [ 101.759717][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.802247][ T5818] team0: Port device team_slave_1 added [ 101.823537][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.154591][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.233948][ T5819] Bluetooth: hci4: command tx timeout [ 102.304025][ T5819] Bluetooth: hci0: command tx timeout [ 102.384022][ T5819] Bluetooth: hci1: command tx timeout [ 102.463945][ T5819] Bluetooth: hci2: command tx timeout [ 102.463982][ T5819] Bluetooth: hci3: command tx timeout [ 102.539423][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.541726][ T5812] team0: Port device team_slave_0 added [ 102.556249][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.559338][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.559356][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.559402][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.779175][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.780812][ T5812] team0: Port device team_slave_1 added [ 102.784761][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.785809][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.785822][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.785850][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.789068][ T5813] team0: Port device team_slave_0 added [ 102.999929][ T5813] team0: Port device team_slave_1 added [ 103.327943][ T5817] team0: Port device team_slave_0 added [ 103.329830][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.329847][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.329868][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.332656][ T5816] team0: Port device team_slave_0 added [ 103.439323][ T5817] team0: Port device team_slave_1 added [ 103.440943][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.440958][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.440987][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.445335][ T5816] team0: Port device team_slave_1 added [ 103.534612][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.534631][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.534661][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.775473][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.775491][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.775519][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.061995][ T5818] hsr_slave_0: entered promiscuous mode [ 104.063235][ T5818] hsr_slave_1: entered promiscuous mode [ 104.086523][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.086541][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.086571][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.092242][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.092254][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.092274][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.110295][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.110313][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.110347][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.269686][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.269701][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.269721][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.303945][ T59] Bluetooth: hci4: command tx timeout [ 104.393849][ T59] Bluetooth: hci0: command tx timeout [ 104.464706][ T59] Bluetooth: hci1: command tx timeout [ 104.516571][ T5812] hsr_slave_0: entered promiscuous mode [ 104.518081][ T5812] hsr_slave_1: entered promiscuous mode [ 104.519427][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 104.519517][ T5812] Cannot create hsr debugfs directory [ 104.544318][ T59] Bluetooth: hci2: command tx timeout [ 104.560951][ T59] Bluetooth: hci3: command tx timeout [ 104.625821][ T5813] hsr_slave_0: entered promiscuous mode [ 104.627233][ T5813] hsr_slave_1: entered promiscuous mode [ 104.628599][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 104.628624][ T5813] Cannot create hsr debugfs directory [ 105.245154][ T5817] hsr_slave_0: entered promiscuous mode [ 105.246096][ T5817] hsr_slave_1: entered promiscuous mode [ 105.246700][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 105.246725][ T5817] Cannot create hsr debugfs directory [ 105.385637][ T5816] hsr_slave_0: entered promiscuous mode [ 105.387113][ T5816] hsr_slave_1: entered promiscuous mode [ 105.388130][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 105.388155][ T5816] Cannot create hsr debugfs directory [ 106.384017][ T59] Bluetooth: hci4: command tx timeout [ 106.463996][ T59] Bluetooth: hci0: command tx timeout [ 106.543847][ T59] Bluetooth: hci1: command tx timeout [ 106.624024][ T59] Bluetooth: hci3: command tx timeout [ 106.624059][ T59] Bluetooth: hci2: command tx timeout [ 106.946271][ T5818] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.997315][ T5818] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.038999][ T5818] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.089470][ T5818] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.235618][ T5812] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.266492][ T5812] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.305233][ T5812] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.362530][ T5812] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.543245][ T5813] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.591829][ T5813] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.640566][ T5813] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.693532][ T5813] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.878009][ T5817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.943448][ T5817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.992935][ T5817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.056765][ T5817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.213255][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.240491][ T5816] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.296978][ T5816] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.347271][ T5816] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.393331][ T5816] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.491975][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.549592][ T1472] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.550130][ T1472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.590637][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.611288][ T3961] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.612287][ T3961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.721708][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.769892][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.805658][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.805821][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.842394][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.842543][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.912452][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.964446][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.976783][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.977675][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.022977][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.023505][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.191063][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.217528][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.290334][ T3961] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.290549][ T3961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.328671][ T4366] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.330178][ T4366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.385470][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.441113][ T3961] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.441816][ T3961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.533572][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.534916][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.688647][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.910826][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.357098][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.374200][ T5812] veth0_vlan: entered promiscuous mode [ 110.457672][ T5812] veth1_vlan: entered promiscuous mode [ 110.699234][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.751015][ T5813] veth0_vlan: entered promiscuous mode [ 110.763031][ T5812] veth0_macvtap: entered promiscuous mode [ 110.784800][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.806894][ T5812] veth1_macvtap: entered promiscuous mode [ 110.839443][ T5813] veth1_vlan: entered promiscuous mode [ 110.871583][ T5818] veth0_vlan: entered promiscuous mode [ 110.932203][ T5818] veth1_vlan: entered promiscuous mode [ 110.939763][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.990619][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.050026][ T5817] veth0_vlan: entered promiscuous mode [ 111.055308][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.076464][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.090787][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.112631][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.136906][ T5813] veth0_macvtap: entered promiscuous mode [ 111.155610][ T5816] veth0_vlan: entered promiscuous mode [ 111.198562][ T5817] veth1_vlan: entered promiscuous mode [ 111.212331][ T5813] veth1_macvtap: entered promiscuous mode [ 111.340692][ T5816] veth1_vlan: entered promiscuous mode [ 111.388958][ T5818] veth0_macvtap: entered promiscuous mode [ 111.435754][ T5818] veth1_macvtap: entered promiscuous mode [ 111.490701][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.561211][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.585240][ T814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.585799][ T814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.627710][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.662441][ T5817] veth0_macvtap: entered promiscuous mode [ 111.669343][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.701496][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.720701][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.738557][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.740089][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.742572][ T5817] veth1_macvtap: entered promiscuous mode [ 111.763436][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.763462][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.770838][ T5816] veth0_macvtap: entered promiscuous mode [ 111.892772][ T1472] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.916181][ T5816] veth1_macvtap: entered promiscuous mode [ 111.918299][ T1472] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.939422][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.995900][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.068935][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.200326][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.251342][ T5928] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 112.375097][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.381334][ T814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.408528][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.408551][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.423852][ T814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.515346][ T814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.535710][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.538262][ T814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.663780][ T3961] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.701188][ T3961] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.764400][ T3961] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.813060][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.826425][ T1472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.826447][ T1472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.041797][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.041819][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.260467][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.260491][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.455612][ T3583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.455635][ T3583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.651560][ T814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.651582][ T814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.765734][ T814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.765756][ T814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.886051][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.930639][ T3583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.930661][ T3583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.132599][ T10] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 114.132630][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.132651][ T10] usb 4-1: Product: syz [ 114.132666][ T10] usb 4-1: Manufacturer: syz [ 114.132680][ T10] usb 4-1: SerialNumber: syz [ 114.276000][ T10] usb 4-1: config 0 descriptor?? [ 114.528027][ T10] usb 4-1: ignoring: probably an ADSL modem [ 114.930606][ T10] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 115.069234][ T5960] sctp: [Deprecated]: syz.1.2 (pid 5960) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.069234][ T5960] Use struct sctp_sack_info instead [ 115.183288][ T31] usb 4-1: USB disconnect, device number 2 [ 116.470193][ T10] IPVS: starting estimator thread 0... [ 116.574030][ T5995] IPVS: using max 7 ests per chain, 16800 per kthread [ 116.647181][ T5999] capability: warning: `syz.3.29' uses 32-bit capabilities (legacy support in use) [ 116.957937][ T6008] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 117.587799][ T5798] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 117.764010][ T5798] usb 4-1: Using ep0 maxpacket: 32 [ 117.771219][ T5798] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.4d [ 117.771252][ T5798] usb 4-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 117.771276][ T5798] usb 4-1: Product: syz [ 117.807455][ T5798] usb 4-1: config 0 descriptor?? [ 117.814509][ T5952] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.973895][ T5952] usb 2-1: Using ep0 maxpacket: 32 [ 117.980851][ T5952] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.980883][ T5952] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.998268][ T5952] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 117.998302][ T5952] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 117.998325][ T5952] usb 2-1: Product: syz [ 117.998341][ T5952] usb 2-1: Manufacturer: syz [ 118.042629][ T5798] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 118.125169][ T5952] hub 2-1:4.0: USB hub found [ 118.161276][ T5798] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 118.177601][ T5798] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 118.178258][ T5798] usb 4-1: media controller created [ 118.347673][ T5952] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 118.428947][ T5798] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.591365][ T5798] az6027: usb out operation failed. (-71) [ 118.592288][ T5798] az6027: usb out operation failed. (-71) [ 118.592305][ T5798] stb0899_attach: Driver disabled by Kconfig [ 118.592315][ T5798] az6027: no front-end attached [ 118.592315][ T5798] [ 118.592751][ T5798] az6027: usb out operation failed. (-71) [ 118.592776][ T5798] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 118.601643][ T5798] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 118.661222][ T5798] dvb-usb: schedule remote query interval to 400 msecs. [ 118.661246][ T5798] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 118.674280][ T5899] usb 2-1: USB disconnect, device number 2 [ 118.692882][ T6036] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 118.773910][ T5798] usb 4-1: USB disconnect, device number 3 [ 119.340203][ T6052] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.349514][ T5798] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 119.818802][ T6063] ======================================================= [ 119.818802][ T6063] WARNING: The mand mount option has been deprecated and [ 119.818802][ T6063] and is ignored by this kernel. Remove the mand [ 119.818802][ T6063] option from the mount to silence this warning. [ 119.818802][ T6063] ======================================================= [ 120.428487][ T6077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.61'. [ 122.180239][ T6120] Bluetooth: MGMT ver 1.23 [ 122.307579][ T6123] process 'syz.2.81' launched './file0' with NULL argv: empty string added [ 123.693947][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 123.772672][ T988] kernel write not supported for file /amidi2 (pid: 988 comm: kworker/1:2) [ 123.846660][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 123.846696][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 123.846728][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 123.851043][ T9] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 123.851075][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.851097][ T9] usb 2-1: Product: syz [ 123.851112][ T9] usb 2-1: Manufacturer: syz [ 123.851128][ T9] usb 2-1: SerialNumber: syz [ 123.948493][ T9] usb 2-1: config 0 descriptor?? [ 123.955460][ T6155] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 124.169051][ T9] powermate: unknown product id 0240 [ 124.169069][ T9] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 124.233638][ T9] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 124.525891][ T6175] syz.4.104 (6175) used greatest stack depth: 18312 bytes left [ 124.690438][ C0] powermate: config urb returned -71 [ 124.691260][ C0] powermate: config urb returned -71 [ 124.691510][ C0] powermate: config urb returned -71 [ 124.694967][ T988] usb 2-1: USB disconnect, device number 3 [ 124.695141][ C0] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 125.483911][ T988] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 125.634290][ T988] usb 5-1: Using ep0 maxpacket: 16 [ 125.639580][ T988] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 125.639607][ T988] usb 5-1: config 0 has no interface number 0 [ 125.639656][ T988] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 125.639684][ T988] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 125.658076][ T988] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 125.658111][ T988] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 125.658242][ T988] usb 5-1: Product: syz [ 125.658261][ T988] usb 5-1: SerialNumber: syz [ 125.679090][ T988] usb 5-1: config 0 descriptor?? [ 125.724400][ T988] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 125.756013][ T988] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input7 [ 125.882487][ T6206] netlink: 'syz.3.118': attribute type 15 has an invalid length. [ 126.004445][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 126.105397][ T5798] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 126.105439][ T5798] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 126.105518][ T5798] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 126.142726][ T5798] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 126.226994][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 126.228288][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 126.228547][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 126.229802][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 126.230037][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 126.230266][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 126.230517][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 126.231280][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 126.231525][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 126.231766][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 126.327330][ T5798] usb 5-1: USB disconnect, device number 2 [ 126.327418][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 126.400736][ T5798] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 126.474553][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.123'. [ 127.000658][ T6220] fido_id[6220]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 127.413887][ T6231] block nbd0: server does not support multiple connections per device. [ 127.421715][ T6231] block nbd0: shutting down sockets [ 127.609507][ T6242] [U] [ 127.609660][ T6242] [U] )½0 [ 127.609839][ T6242] [U] [ 127.609882][ T6242] [U] [ 127.609925][ T6242] [U] [ 127.610322][ T6242] [U] [ 127.610364][ T6242] [U] [ 127.610406][ T6242] [U] [ 127.610448][ T6242] [U] [ 127.610593][ T6242] [U] [ 127.610634][ T6242] [U] [ 127.610676][ T6242] [U] [ 127.660075][ T6241] [U] [ 127.855683][ T6245] capability: warning: `syz.4.136' uses deprecated v2 capabilities in a way that may be insecure [ 130.359940][ T6304] sp0: Synchronizing with TNC [ 130.595856][ T6316] netlink: 24 bytes leftover after parsing attributes in process `syz.0.163'. [ 130.816412][ T6320] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 131.037634][ T6325] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 132.198662][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.181'. [ 132.234476][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.181'. [ 132.790631][ T6368] input: syz1 as /devices/virtual/input/input8 [ 133.336819][ T6380] netlink: 68 bytes leftover after parsing attributes in process `syz.3.191'. [ 134.213912][ T38] audit: type=1800 audit(1759199751.577:2): pid=6402 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.202" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 134.799270][ T6413] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.075711][ T5798] IPVS: starting estimator thread 0... [ 135.163989][ T6427] IPVS: using max 7 ests per chain, 16800 per kthread [ 135.340457][ T6431] nbd0: detected capacity change from 0 to 127 [ 135.343915][ T5819] block nbd0: Receive control failed (result -32) [ 135.384909][ T6026] block nbd0: Dead connection, failed to find a fallback [ 135.384935][ T6026] block nbd0: shutting down sockets [ 135.385015][ T6026] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.385145][ T6026] Buffer I/O error on dev nbd0, logical block 0, async page read [ 135.385445][ T6026] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.385466][ T6026] Buffer I/O error on dev nbd0, logical block 1, async page read [ 135.385588][ T6026] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.385607][ T6026] Buffer I/O error on dev nbd0, logical block 2, async page read [ 135.385723][ T6026] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.385742][ T6026] Buffer I/O error on dev nbd0, logical block 3, async page read [ 135.385870][ T6026] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.385890][ T6026] Buffer I/O error on dev nbd0, logical block 0, async page read [ 135.386007][ T6026] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.386026][ T6026] Buffer I/O error on dev nbd0, logical block 1, async page read [ 135.386140][ T6026] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.386159][ T6026] Buffer I/O error on dev nbd0, logical block 2, async page read [ 135.386302][ T6026] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.386331][ T6026] Buffer I/O error on dev nbd0, logical block 3, async page read [ 135.386459][ T6026] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.386480][ T6026] Buffer I/O error on dev nbd0, logical block 0, async page read [ 135.386610][ T6026] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.386632][ T6026] Buffer I/O error on dev nbd0, logical block 1, async page read [ 135.389943][ T6026] ldm_validate_partition_table(): Disk read failed. [ 135.392577][ T6026] Dev nbd0: unable to read RDB block 0 [ 135.407005][ T6435] input: syz1 as /devices/virtual/input/input9 [ 135.489522][ T6026] nbd0: unable to read partition table [ 135.600068][ T6026] ldm_validate_partition_table(): Disk read failed. [ 135.602762][ T6026] Dev nbd0: unable to read RDB block 0 [ 135.685252][ T6026] nbd0: unable to read partition table [ 135.734056][ T6439] netlink: 'syz.2.218': attribute type 4 has an invalid length. [ 135.734079][ T6439] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.218'. [ 135.785468][ T6441] batadv_slave_1: entered promiscuous mode [ 135.794949][ T6440] batadv_slave_1: left promiscuous mode [ 136.120034][ T38] audit: type=1326 audit(1759199753.487:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01f8225d67 code=0x7ffc0000 [ 136.120095][ T38] audit: type=1326 audit(1759199753.487:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f01f81caf79 code=0x7ffc0000 [ 136.120143][ T38] audit: type=1326 audit(1759199753.487:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f822eec9 code=0x7ffc0000 [ 136.133830][ T38] audit: type=1326 audit(1759199753.487:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01f8225d67 code=0x7ffc0000 [ 136.133899][ T38] audit: type=1326 audit(1759199753.487:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f01f81caf79 code=0x7ffc0000 [ 136.134065][ T38] audit: type=1326 audit(1759199753.487:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f01f822eec9 code=0x7ffc0000 [ 136.134120][ T38] audit: type=1326 audit(1759199753.487:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f822eec9 code=0x7ffc0000 [ 136.134174][ T38] audit: type=1326 audit(1759199753.497:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01f8225d67 code=0x7ffc0000 [ 136.134237][ T38] audit: type=1326 audit(1759199753.497:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f01f81caf79 code=0x7ffc0000 [ 137.317925][ T6487] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 137.468505][ T6493] loop6: detected capacity change from 0 to 524288000 [ 137.601403][ T4366] Bluetooth: hci5: Frame reassembly failed (-84) [ 137.617402][ T6497] loop6: detected capacity change from 524288000 to 0 [ 137.617691][ T4366] Bluetooth: hci5: Frame reassembly failed (-84) [ 137.618141][ T6493] loop6: unable to read partition table [ 137.618373][ T6493] loop6: partition table beyond EOD, truncated [ 137.618407][ T6493] loop_reread_partitions: partition scan of loop6 (‰u0v°Ï ) failed (rc=-5) [ 137.759869][ T5952] kernel read not supported for file /dsp (pid: 5952 comm: kworker/0:6) [ 138.046662][ T6509] netlink: 'syz.4.250': attribute type 2 has an invalid length. [ 138.164960][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.165074][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.647767][ T6526] warning: `syz.0.258' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 138.693899][ T5952] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 138.847189][ T5952] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 138.847218][ T5952] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 138.847240][ T5952] usb 3-1: config 150 has no interface number 0 [ 138.847284][ T5952] usb 3-1: config 150 interface 204 has no altsetting 0 [ 138.858167][ T5952] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 138.858213][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.858237][ T5952] usb 3-1: Product: syz [ 138.858253][ T5952] usb 3-1: Manufacturer: syz [ 138.858269][ T5952] usb 3-1: SerialNumber: syz [ 139.146748][ T5952] xr_serial 3-1:150.204: skipping garbage [ 139.146815][ T5952] xr_serial 3-1:150.204: xr_serial converter detected [ 139.674038][ T59] Bluetooth: hci5: command 0x1003 tx timeout [ 139.674945][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 139.766152][ T5952] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 139.766210][ T5952] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 139.772557][ T5952] usb 3-1: USB disconnect, device number 2 [ 139.783060][ T5952] xr_serial 3-1:150.204: device disconnected [ 140.253788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 140.860051][ T6570] netlink: 'syz.3.278': attribute type 1 has an invalid length. [ 140.860073][ T6570] netlink: 144 bytes leftover after parsing attributes in process `syz.3.278'. [ 140.860104][ T6570] netlink: 'syz.3.278': attribute type 1 has an invalid length. [ 140.860117][ T6570] netlink: 'syz.3.278': attribute type 2 has an invalid length. [ 140.860130][ T6570] netlink: 64 bytes leftover after parsing attributes in process `syz.3.278'. [ 141.130088][ T6572] netlink: 32 bytes leftover after parsing attributes in process `syz.4.279'. [ 141.272817][ T6576] netlink: 16 bytes leftover after parsing attributes in process `syz.3.281'. [ 141.272857][ T6576] netlink: 20 bytes leftover after parsing attributes in process `syz.3.281'. [ 142.224565][ T5819] Bluetooth: hci1: Malformed LE Event: 0x1d [ 142.481245][ T6613] random: crng reseeded on system resumption [ 142.486045][ T6610] bridge0: entered promiscuous mode [ 142.486276][ T6610] macvlan2: entered promiscuous mode [ 143.896510][ T988] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 144.060656][ T988] usb 4-1: unable to get BOS descriptor or descriptor too short [ 144.062297][ T988] usb 4-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 1024 [ 144.062327][ T988] usb 4-1: config 1 interface 0 altsetting 64 endpoint 0x3 has invalid maxpacket 7227, setting to 1024 [ 144.062353][ T988] usb 4-1: config 1 interface 0 altsetting 64 bulk endpoint 0x3 has invalid maxpacket 1024 [ 144.062377][ T988] usb 4-1: config 1 interface 0 has no altsetting 0 [ 144.110930][ T988] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.110959][ T988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.110980][ T988] usb 4-1: Product: syz [ 144.110994][ T988] usb 4-1: Manufacturer: syz [ 144.111008][ T988] usb 4-1: SerialNumber: syz [ 144.162803][ T6638] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 144.162939][ T6638] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 144.391044][ T988] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 144.416286][ T988] usb 4-1: USB disconnect, device number 4 [ 144.681223][ T6657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 144.973838][ T38] kauditd_printk_skb: 20 callbacks suppressed [ 144.973859][ T38] audit: type=1326 audit(1759199762.337:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6661 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f105aeec9 code=0x7ffc0000 [ 144.973910][ T38] audit: type=1326 audit(1759199762.337:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6661 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f105aeec9 code=0x7ffc0000 [ 144.973956][ T38] audit: type=1326 audit(1759199762.337:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6661 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f9f105aeec9 code=0x7ffc0000 [ 144.974003][ T38] audit: type=1326 audit(1759199762.337:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6661 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f105aeec9 code=0x7ffc0000 [ 144.974050][ T38] audit: type=1326 audit(1759199762.337:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6661 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f105aeec9 code=0x7ffc0000 [ 145.223852][ T5952] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 145.373833][ T5952] usb 5-1: Using ep0 maxpacket: 32 [ 145.378252][ T5952] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.4d [ 145.378291][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 145.378313][ T5952] usb 5-1: Product: syz [ 145.399292][ T5952] usb 5-1: config 0 descriptor?? [ 145.646454][ T5952] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 145.678441][ T5952] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 145.682399][ T5952] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 145.682457][ T5952] usb 5-1: media controller created [ 145.835373][ T5952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.965453][ T5952] az6027: usb out operation failed. (-71) [ 145.965876][ T5952] az6027: usb out operation failed. (-71) [ 145.965891][ T5952] stb0899_attach: Driver disabled by Kconfig [ 145.965902][ T5952] az6027: no front-end attached [ 145.965902][ T5952] [ 145.969070][ T5952] az6027: usb out operation failed. (-71) [ 145.969089][ T5952] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 145.999671][ T5952] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 146.008347][ T5952] dvb-usb: schedule remote query interval to 400 msecs. [ 146.008371][ T5952] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 146.033462][ T5952] usb 5-1: USB disconnect, device number 3 [ 146.337322][ T6699] batman_adv: batadv0: Adding interface: ipvlan2 [ 146.337342][ T6699] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.337372][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.337389][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.337404][ T6699] batman_adv: batadv0: Interface activated: ipvlan2 [ 146.419293][ T5952] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 146.483836][ T988] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 146.663908][ T988] usb 2-1: Using ep0 maxpacket: 16 [ 146.690794][ T988] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 146.690822][ T988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.690842][ T988] usb 2-1: Product: syz [ 146.690856][ T988] usb 2-1: Manufacturer: syz [ 146.690871][ T988] usb 2-1: SerialNumber: syz [ 147.136577][ T988] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 147.461208][ T988] snd-usb-audio 2-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 147.484897][ T1229] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 147.565058][ T988] usb 2-1: USB disconnect, device number 4 [ 147.644388][ T1229] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 147.644433][ T1229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.653535][ T1229] usb 4-1: config 0 descriptor?? [ 147.682974][ T1229] cp210x 4-1:0.0: cp210x converter detected [ 148.052716][ T6731] mmap: syz.4.352 (6731) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 148.314885][ T1229] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 148.314939][ T1229] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 148.356018][ T1229] usb 4-1: cp210x converter now attached to ttyUSB0 [ 148.371388][ T1229] usb 4-1: USB disconnect, device number 5 [ 148.406364][ T1229] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 148.406970][ T1229] cp210x 4-1:0.0: device disconnected [ 149.710240][ T6779] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 149.710269][ T6779] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 149.783903][ T5798] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 149.933973][ T5798] usb 1-1: Using ep0 maxpacket: 16 [ 149.937943][ T5798] usb 1-1: config 0 interface 0 has no altsetting 0 [ 149.937983][ T5798] usb 1-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 149.938008][ T5798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.943404][ T5798] usb 1-1: config 0 descriptor?? [ 150.143929][ T1229] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 150.293905][ T1229] usb 2-1: Using ep0 maxpacket: 16 [ 150.297734][ T1229] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 150.297827][ T1229] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 150.297855][ T1229] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 150.314392][ T1229] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 150.314490][ T1229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 150.314514][ T1229] usb 2-1: SerialNumber: syz [ 150.387223][ T6777] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 150.403933][ T5952] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 150.482873][ T5798] hid-generic 0003:0DFC:0101.0002: unknown main item tag 0x0 [ 150.482916][ T5798] hid-generic 0003:0DFC:0101.0002: unknown main item tag 0x0 [ 150.483004][ T5798] hid-generic 0003:0DFC:0101.0002: unknown main item tag 0x0 [ 150.483035][ T5798] hid-generic 0003:0DFC:0101.0002: unknown main item tag 0x0 [ 150.483063][ T5798] hid-generic 0003:0DFC:0101.0002: unknown main item tag 0x0 [ 150.483150][ T5798] hid-generic 0003:0DFC:0101.0002: unknown main item tag 0x0 [ 150.483186][ T5798] hid-generic 0003:0DFC:0101.0002: unknown main item tag 0x0 [ 150.483215][ T5798] hid-generic 0003:0DFC:0101.0002: unknown main item tag 0x0 [ 150.483244][ T5798] hid-generic 0003:0DFC:0101.0002: unknown main item tag 0x0 [ 150.483362][ T5798] hid-generic 0003:0DFC:0101.0002: unknown main item tag 0x0 [ 150.594900][ T1229] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 150.601257][ T5952] usb 4-1: Using ep0 maxpacket: 8 [ 150.603936][ T5952] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 150.603999][ T5952] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 150.604024][ T5952] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 150.604051][ T5952] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 150.604077][ T5952] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.604126][ T5952] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 150.604148][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.729265][ T1229] usb 2-1: USB disconnect, device number 5 [ 150.768997][ T5798] hid-generic 0003:0DFC:0101.0002: hidraw0: USB HID v0.00 Device [HID 0dfc:0101] on usb-dummy_hcd.0-1/input0 [ 150.802495][ T5798] usb 1-1: USB disconnect, device number 2 [ 150.991250][ T5952] usb 4-1: GET_CAPABILITIES returned 0 [ 150.991300][ T5952] usbtmc 4-1:16.0: can't read capabilities [ 151.018309][ T6791] netlink: 'syz.2.380': attribute type 3 has an invalid length. [ 151.229025][ T5964] usb 4-1: USB disconnect, device number 6 [ 151.480016][ T6799] block nbd1: shutting down sockets [ 151.954055][ T6817] netlink: 44 bytes leftover after parsing attributes in process `syz.1.391'. [ 152.328896][ T6831] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 153.534199][ T6852] netlink: 212296 bytes leftover after parsing attributes in process `syz.1.410'. [ 153.789094][ T4366] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.791041][ T4366] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.791084][ T4366] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.791121][ T4366] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.791430][ T6864] Zero length message leads to an empty skb [ 153.835106][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 153.953827][ T5798] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 153.984004][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 153.986613][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 153.986646][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 153.991138][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 153.991161][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.991178][ T10] usb 1-1: Product: syz [ 153.991189][ T10] usb 1-1: Manufacturer: syz [ 153.991201][ T10] usb 1-1: SerialNumber: syz [ 154.001723][ T6872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.419'. [ 154.001768][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 154.077864][ T10] usb 1-1: config 0 descriptor?? [ 154.099024][ T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 154.099065][ T10] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 154.152238][ T5798] usb 5-1: Using ep0 maxpacket: 8 [ 154.161957][ T5798] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 154.161989][ T5798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.227226][ T5798] pvrusb2: Hardware description: Terratec Grabster AV400 [ 154.227249][ T5798] pvrusb2: ********** [ 154.227256][ T5798] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 154.227269][ T5798] pvrusb2: Important functionality might not be entirely working. [ 154.227279][ T5798] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 154.227291][ T5798] pvrusb2: ********** [ 154.431151][ T2367] pvrusb2: Invalid write control endpoint [ 154.617890][ T2367] pvrusb2: Invalid write control endpoint [ 154.617906][ T2367] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 154.617915][ T2367] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 154.617924][ T2367] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 154.617934][ T2367] pvrusb2: Device being rendered inoperable [ 154.660909][ T2367] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 154.660975][ T2367] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 154.667053][ T6862] pvrusb2: Attempted to execute control transfer when device not ok [ 154.674675][ T5964] usb 5-1: USB disconnect, device number 4 [ 154.685605][ T2367] pvrusb2: Attached sub-driver cx25840 [ 154.685626][ T2367] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 154.685639][ T2367] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 154.708076][ T10] em28xx 1-1:0.0: chip ID is em28178 [ 154.937583][ T31] usb 1-1: USB disconnect, device number 3 [ 154.939960][ T31] em28xx 1-1:0.0: Disconnecting em28xx [ 154.971553][ T31] em28xx 1-1:0.0: Freeing device [ 155.674184][ T6903] Bluetooth: hci5: Frame reassembly failed (-84) [ 157.349060][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'. [ 157.746295][ T59] Bluetooth: hci5: command 0x1003 tx timeout [ 157.747321][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 159.748676][ T6981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.467'. [ 159.748715][ T6981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.467'. [ 159.863057][ T3583] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.864020][ T3583] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.864069][ T3583] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.864112][ T3583] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.051264][ T6992] netlink: 27 bytes leftover after parsing attributes in process `syz.4.471'. [ 160.747057][ T7019] netlink: 40 bytes leftover after parsing attributes in process `syz.3.484'. [ 161.295803][ T38] audit: type=1326 audit(1759199778.647:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7037 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f54ceec9 code=0x7ffc0000 [ 161.296092][ T38] audit: type=1326 audit(1759199778.667:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7037 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa8f54ceec9 code=0x7ffc0000 [ 161.296332][ T38] audit: type=1326 audit(1759199778.667:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7037 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f54ceec9 code=0x7ffc0000 [ 161.296550][ T38] audit: type=1326 audit(1759199778.667:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7037 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f54ceec9 code=0x7ffc0000 [ 161.297932][ T38] audit: type=1326 audit(1759199778.667:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7037 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fa8f54ceec9 code=0x7ffc0000 [ 161.356638][ T38] audit: type=1326 audit(1759199778.727:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7037 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f54ceec9 code=0x7ffc0000 [ 161.356708][ T38] audit: type=1326 audit(1759199778.727:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7037 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f54ceec9 code=0x7ffc0000 [ 161.449267][ T5798] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 161.603931][ T5798] usb 4-1: Using ep0 maxpacket: 32 [ 161.606674][ T5798] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 161.606707][ T5798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.612232][ T5798] usb 4-1: config 0 descriptor?? [ 161.820024][ T5798] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 161.836462][ T5798] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 161.840287][ T5798] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 161.840342][ T5798] usb 4-1: media controller created [ 161.906976][ T5798] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.021759][ T5798] az6027: usb out operation failed. (-71) [ 162.022189][ T5798] az6027: usb out operation failed. (-71) [ 162.022203][ T5798] stb0899_attach: Driver disabled by Kconfig [ 162.022214][ T5798] az6027: no front-end attached [ 162.022214][ T5798] [ 162.048527][ T5798] az6027: usb out operation failed. (-71) [ 162.048550][ T5798] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 162.072339][ T5798] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 162.101390][ T5798] dvb-usb: schedule remote query interval to 400 msecs. [ 162.101413][ T5798] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 162.119721][ T5798] usb 4-1: USB disconnect, device number 7 [ 162.140830][ T7048] netlink: 'syz.4.497': attribute type 1 has an invalid length. [ 162.272782][ T5798] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 162.704280][ T7063] syz.1.504 uses obsolete (PF_INET,SOCK_PACKET) [ 163.233294][ T7083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.514'. [ 163.233322][ T7083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.514'. [ 163.323844][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 163.334017][ T5899] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 163.500731][ T5899] usb 1-1: unable to get BOS descriptor or descriptor too short [ 163.501792][ T5899] usb 1-1: not running at top speed; connect to a high speed hub [ 163.503479][ T5899] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.503508][ T5899] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.509398][ T5899] usb 1-1: string descriptor 0 read error: -22 [ 163.509553][ T5899] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.509579][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.510026][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 163.510072][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.510096][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 163.510139][ T10] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 163.510163][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.654243][ T5899] usb 1-1: 0:2 : does not exist [ 163.656091][ T10] usb 4-1: config 0 descriptor?? [ 164.076959][ T10] holtek_kbd 0003:04D9:A055.0003: bogus close delimiter [ 164.076984][ T10] holtek_kbd 0003:04D9:A055.0003: item 0 4 2 10 parsing failed [ 164.077869][ T10] holtek_kbd 0003:04D9:A055.0003: probe with driver holtek_kbd failed with error -22 [ 164.310535][ T5952] usb 4-1: USB disconnect, device number 8 [ 164.494942][ T5899] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 164.542786][ T5899] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 164.562385][ T5899] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 164.617967][ T5899] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 164.636091][ T5899] usb 1-1: USB disconnect, device number 4 [ 165.120025][ T7102] binder: 7101:7102 ioctl 40046205 0 returned -22 [ 165.491619][ T5798] kernel read not supported for file /dsp (pid: 5798 comm: kworker/0:3) [ 165.928125][ T7120] random: crng reseeded on system resumption [ 165.975844][ T7122] netlink: 56 bytes leftover after parsing attributes in process `syz.4.531'. [ 166.576686][ T7147] netlink: 33 bytes leftover after parsing attributes in process `syz.1.544'. [ 166.733864][ T5952] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 166.883951][ T5952] usb 5-1: Using ep0 maxpacket: 8 [ 166.887316][ T5952] usb 5-1: unable to get BOS descriptor or descriptor too short [ 166.889477][ T5952] usb 5-1: config 4 interface 0 has no altsetting 0 [ 166.901343][ T5952] usb 5-1: string descriptor 0 read error: -22 [ 166.901521][ T5952] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 166.901546][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.948986][ T5952] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 167.001841][ T5952] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 167.002327][ T5952] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 167.002383][ T5952] usb 5-1: media controller created [ 167.154588][ T5952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.224604][ T7142] usb 5-1: dvb_usb_au6610: wlen=0, aborting [ 167.437118][ T5952] zl10353_read_register: readreg error (reg=127, ret==0) [ 167.597543][ T5899] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 167.632498][ T5952] usb 5-1: USB disconnect, device number 5 [ 167.723921][ T988] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 167.747601][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 167.747636][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.747675][ T5899] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 167.747698][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.812233][ T5899] usb 3-1: config 0 descriptor?? [ 167.883885][ T988] usb 4-1: Using ep0 maxpacket: 8 [ 167.887563][ T988] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 167.892609][ T988] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 167.892633][ T988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.892700][ T988] usb 4-1: Product: syz [ 167.892714][ T988] usb 4-1: Manufacturer: syz [ 167.892726][ T988] usb 4-1: SerialNumber: syz [ 167.967042][ T988] usb 4-1: config 0 descriptor?? [ 167.988005][ T988] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 167.988509][ T988] usb 4-1: setting power ON [ 167.993010][ T988] dvb-usb: bulk message failed: -22 (2/0) [ 168.058880][ T988] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 168.062985][ T988] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 168.063050][ T988] usb 4-1: media controller created [ 168.167074][ T988] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.207238][ T7179] dvb-usb: bulk message failed: -22 (3/0) [ 168.207267][ T7179] dvb-usb: bulk message failed: -22 (4/0) [ 168.207283][ T7179] cxusb: i2c read failed [ 168.207701][ T7179] dvb-usb: bulk message failed: -22 (3/0) [ 168.249526][ T988] usb 4-1: selecting invalid altsetting 6 [ 168.249551][ T988] usb 4-1: digital interface selection failed (-22) [ 168.249568][ T988] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 168.250757][ T988] usb 4-1: setting power OFF [ 168.250982][ T988] dvb-usb: bulk message failed: -22 (2/0) [ 168.251002][ T988] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 168.251016][ T988] (NULL device *): no alternate interface [ 168.296582][ T5899] elo 0003:04E7:0030.0004: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.2-1/input0 [ 168.356787][ T988] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 168.360746][ T988] usb 4-1: USB disconnect, device number 9 [ 168.430902][ T5798] usb 3-1: USB disconnect, device number 3 [ 168.466285][ T7195] team0: No ports can be present during mode change [ 169.644307][ T988] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 169.805355][ T988] usb 3-1: Using ep0 maxpacket: 32 [ 169.808031][ T988] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 169.808060][ T988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.813466][ T988] usb 3-1: config 0 descriptor?? [ 170.079211][ T988] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 170.101501][ T988] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 170.102681][ T988] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 170.102735][ T988] usb 3-1: media controller created [ 170.171037][ T988] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.282462][ T7216] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 170.283427][ T988] az6027: usb out operation failed. (-71) [ 170.298020][ T988] az6027: usb out operation failed. (-71) [ 170.298037][ T988] stb0899_attach: Driver disabled by Kconfig [ 170.298048][ T988] az6027: no front-end attached [ 170.298048][ T988] [ 170.322926][ T988] az6027: usb out operation failed. (-71) [ 170.322948][ T988] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 170.326258][ T988] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 170.353951][ T988] dvb-usb: schedule remote query interval to 400 msecs. [ 170.353974][ T988] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 170.356796][ T988] usb 3-1: USB disconnect, device number 4 [ 170.604404][ T988] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 171.179286][ T7256] sctp: [Deprecated]: syz.0.594 (pid 7256) Use of int in maxseg socket option. [ 171.179286][ T7256] Use struct sctp_assoc_value instead [ 171.429561][ T7261] netlink: 72 bytes leftover after parsing attributes in process `syz.0.596'. [ 171.573890][ T988] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 171.679701][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.599'. [ 171.679736][ T7270] netlink: 28 bytes leftover after parsing attributes in process `syz.0.599'. [ 171.723997][ T988] usb 3-1: Using ep0 maxpacket: 16 [ 171.726621][ T988] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 171.726670][ T988] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 171.726695][ T988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.731920][ T988] usb 3-1: config 0 descriptor?? [ 171.792940][ T988] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input13 [ 171.915768][ T5899] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 172.010214][ T5167] bcm5974 3-1:0.0: could not read from device [ 172.057731][ T988] bcm5974 3-1:0.0: could not read from device [ 172.085663][ T5899] usb 5-1: config index 0 descriptor too short (expected 69, got 36) [ 172.085694][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.093253][ T5899] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 172.093303][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.093326][ T5899] usb 5-1: Product: syz [ 172.093342][ T5899] usb 5-1: Manufacturer: syz [ 172.093358][ T5899] usb 5-1: SerialNumber: syz [ 172.152516][ T5899] usb 5-1: config 0 descriptor?? [ 172.169771][ T5899] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 172.188523][ T5167] bcm5974 3-1:0.0: could not read from device [ 172.300602][ T988] input: failed to attach handler mousedev to device input13, error: -5 [ 172.329650][ T988] usb 3-1: USB disconnect, device number 5 [ 172.344431][ T5167] bcm5974 3-1:0.0: could not read from device [ 172.975486][ T5899] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 172.975588][ T5899] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 172.981906][ T5899] usb 5-1: USB disconnect, device number 6 [ 173.104211][ T7296] ALSA: mixer_oss: invalid OSS volume 'YÀW;' [ 173.104239][ T7296] ALSA: mixer_oss: invalid OSS volume '' [ 175.673976][ T5952] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 175.833878][ T5952] usb 3-1: Using ep0 maxpacket: 16 [ 175.836798][ T5952] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 175.836833][ T5952] usb 3-1: config 0 has no interface number 0 [ 175.836882][ T5952] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.836910][ T5952] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.836949][ T5952] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 175.836974][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.865249][ T5952] usb 3-1: config 0 descriptor?? [ 176.336605][ T988] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 176.498274][ T5952] uclogic 0003:28BD:0071.0005: pen parameters not found [ 176.498307][ T5952] uclogic 0003:28BD:0071.0005: interface is invalid, ignoring [ 176.499381][ T988] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 176.499417][ T988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.499438][ T988] usb 2-1: Product: syz [ 176.499454][ T988] usb 2-1: Manufacturer: syz [ 176.499470][ T988] usb 2-1: SerialNumber: syz [ 176.582736][ T988] usb 2-1: config 0 descriptor?? [ 176.707841][ T988] usb 3-1: USB disconnect, device number 6 [ 176.824507][ T5947] usb 2-1: USB disconnect, device number 6 [ 178.503811][ T5947] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 178.643911][ T988] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 178.666293][ T5947] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.666321][ T5947] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 178.669404][ T5947] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 178.669434][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.669456][ T5947] usb 2-1: Product: syz [ 178.669472][ T5947] usb 2-1: Manufacturer: syz [ 178.669487][ T5947] usb 2-1: SerialNumber: syz [ 178.796843][ T988] usb 4-1: Using ep0 maxpacket: 8 [ 178.801943][ T988] usb 4-1: config 0 interface 0 has no altsetting 0 [ 178.826507][ T988] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 178.826541][ T988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.826563][ T988] usb 4-1: Product: syz [ 178.826578][ T988] usb 4-1: Manufacturer: syz [ 178.826594][ T988] usb 4-1: SerialNumber: syz [ 178.898379][ T988] usb 4-1: config 0 descriptor?? [ 178.935009][ T988] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 178.977609][ T5947] usb 2-1: 0:2 : does not exist [ 178.999368][ T5947] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 179.032442][ T5947] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 179.107357][ T988] snd_usb_toneport 4-1:0.0: set_interface failed [ 179.121378][ T988] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 179.121611][ T988] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 179.147175][ T988] usb 4-1: USB disconnect, device number 10 [ 179.171952][ T5947] usb 2-1: USB disconnect, device number 7 [ 179.283562][ T7443] Bluetooth: MGMT ver 1.23 [ 179.963407][ T7461] program syz.4.688 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.989624][ T7463] program syz.1.687 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.203601][ T7470] sctp: [Deprecated]: syz.4.693 (pid 7470) Use of int in max_burst socket option. [ 180.203601][ T7470] Use struct sctp_assoc_value instead [ 180.601204][ T7482] netlink: 'syz.4.698': attribute type 1 has an invalid length. [ 180.601229][ T7482] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.698'. [ 181.333865][ T5959] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 181.498307][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.498356][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.498396][ T5959] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 181.498421][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.548850][ T5959] usb 5-1: config 0 descriptor?? [ 182.003100][ T5959] hid-steam 0003:28DE:1142.0006: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 182.184483][ T5947] usb 5-1: USB disconnect, device number 7 [ 182.454203][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.718'. [ 182.727881][ T7528] netlink: 44 bytes leftover after parsing attributes in process `syz.0.720'. [ 183.085214][ T7540] kvm: user requested TSC rate below hardware speed [ 183.140505][ T7543] netlink: 28 bytes leftover after parsing attributes in process `syz.4.726'. [ 183.160983][ T7543] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.166342][ T7543] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.893948][ T5947] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 184.090257][ T5947] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 184.090291][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.090312][ T5947] usb 1-1: Product: syz [ 184.090329][ T5947] usb 1-1: Manufacturer: syz [ 184.090344][ T5947] usb 1-1: SerialNumber: syz [ 184.136503][ T5947] usb 1-1: config 0 descriptor?? [ 184.372961][ T5947] usb 1-1: ignoring: probably an ADSL modem [ 184.778336][ T5947] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 185.015569][ T5959] usb 1-1: USB disconnect, device number 5 [ 185.230179][ T7574] netlink: 60 bytes leftover after parsing attributes in process `syz.3.740'. [ 185.230231][ T7574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.740'. [ 185.460661][ T7578] netlink: 344 bytes leftover after parsing attributes in process `syz.3.742'. [ 185.935114][ T38] audit: type=1400 audit(1759199803.297:44): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7585 comm="syz.3.747" dest=20002 netif=wpan0 [ 186.080666][ T7592] program syz.4.748 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.843898][ T5798] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 188.996449][ T5798] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.996510][ T5798] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 188.996535][ T5798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.002034][ T5798] usb 2-1: config 0 descriptor?? [ 189.011254][ T5798] pwc: Askey VC010 type 2 USB webcam detected. [ 189.437092][ T5798] pwc: recv_control_msg error -32 req 02 val 2b00 [ 189.648935][ T5798] pwc: recv_control_msg error -71 req 02 val 2c00 [ 189.653598][ T5798] pwc: recv_control_msg error -71 req 04 val 1000 [ 189.659021][ T5798] pwc: recv_control_msg error -71 req 04 val 1300 [ 189.661059][ T5798] pwc: recv_control_msg error -71 req 04 val 1400 [ 189.661603][ T5798] pwc: recv_control_msg error -71 req 02 val 2000 [ 189.662158][ T5798] pwc: recv_control_msg error -71 req 02 val 2100 [ 189.662701][ T5798] pwc: recv_control_msg error -71 req 04 val 1500 [ 189.663396][ T5798] pwc: recv_control_msg error -71 req 02 val 2500 [ 189.665890][ T5798] pwc: recv_control_msg error -71 req 02 val 2400 [ 189.666465][ T5798] pwc: recv_control_msg error -71 req 02 val 2600 [ 189.666998][ T5798] pwc: recv_control_msg error -71 req 02 val 2900 [ 189.667595][ T5798] pwc: recv_control_msg error -71 req 02 val 2800 [ 189.668360][ T5798] pwc: recv_control_msg error -71 req 04 val 1100 [ 189.669067][ T5798] pwc: recv_control_msg error -71 req 04 val 1200 [ 189.734381][ T5798] pwc: Registered as video103. [ 189.742015][ T5798] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 189.767087][ T5798] usb 2-1: USB disconnect, device number 8 [ 190.125740][ T7691] netlink: 20 bytes leftover after parsing attributes in process `syz.4.794'. [ 190.128026][ T7691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.794'. [ 190.392096][ T7699] netlink: 28 bytes leftover after parsing attributes in process `syz.4.797'. [ 190.535288][ T5947] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 190.571686][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.799'. [ 190.683903][ T5947] usb 2-1: Using ep0 maxpacket: 8 [ 190.689506][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 190.689557][ T5947] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 190.689582][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.738336][ T5947] usb 2-1: config 0 descriptor?? [ 190.959366][ T5947] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 191.177223][ T988] usb 2-1: USB disconnect, device number 9 [ 191.296488][ T7715] program syz.3.806 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.200510][ T38] audit: type=1326 audit(1759199809.567:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7746 comm="syz.0.821" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f105aeec9 code=0x0 [ 192.634883][ T988] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 192.788556][ T988] usb 4-1: config 0 has an invalid interface number: 227 but max is 0 [ 192.788586][ T988] usb 4-1: config 0 has no interface number 0 [ 192.788657][ T988] usb 4-1: config 0 interface 227 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 192.788687][ T988] usb 4-1: config 0 interface 227 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 192.788716][ T988] usb 4-1: config 0 interface 227 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 192.788741][ T988] usb 4-1: config 0 interface 227 has no altsetting 0 [ 192.792972][ T988] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=58.dd [ 192.793001][ T988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.793022][ T988] usb 4-1: Product: syz [ 192.793037][ T988] usb 4-1: Manufacturer: syz [ 192.793052][ T988] usb 4-1: SerialNumber: syz [ 192.895847][ T988] usb 4-1: config 0 descriptor?? [ 192.899024][ T7757] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 192.916759][ T988] usbtouchscreen 4-1:0.227: probe with driver usbtouchscreen failed with error -90 [ 193.639754][ T7796] pim6reg: entered allmulticast mode [ 193.668243][ T7795] pim6reg: left allmulticast mode [ 193.693973][ T988] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 193.843861][ T988] usb 5-1: Using ep0 maxpacket: 32 [ 193.846484][ T988] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 193.846512][ T988] usb 5-1: config 0 has no interface number 0 [ 193.876964][ T988] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 193.876996][ T988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.877019][ T988] usb 5-1: Product: syz [ 193.877036][ T988] usb 5-1: Manufacturer: syz [ 193.877052][ T988] usb 5-1: SerialNumber: syz [ 193.883219][ T988] usb 5-1: config 0 descriptor?? [ 193.922824][ T988] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 194.119775][ T988] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 194.158580][ T988] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 194.267630][ T5952] usb 4-1: USB disconnect, device number 11 [ 194.545461][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 194.566997][ T988] usb 5-1: USB disconnect, device number 8 [ 194.598313][ T988] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 194.618216][ T988] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 194.618919][ T988] quatech2 5-1:0.51: device disconnected [ 195.105797][ T13] wlan1: Trigger new scan to find an IBSS to join [ 195.942244][ T7873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.871'. [ 195.955132][ T7873] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.979800][ T7875] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 196.143853][ T31] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 196.306813][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 196.319488][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 196.319525][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.319561][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 196.319587][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 196.319616][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 196.319658][ T31] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 196.319682][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.408945][ T31] usb 4-1: config 0 descriptor?? [ 196.411518][ T7871] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 196.682517][ T59] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 196.683201][ T59] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 196.683283][ T59] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 196.683347][ T59] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 196.683411][ T59] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 196.683472][ T59] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 196.683547][ T59] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 196.683615][ T59] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 196.691803][ T59] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 196.691901][ T59] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 196.691983][ T59] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 196.692061][ T59] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 196.692141][ T59] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 196.692218][ T59] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 196.692296][ T59] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 196.830919][ T7895] netlink: 'syz.2.882': attribute type 2 has an invalid length. [ 196.830944][ T7895] netlink: 130144 bytes leftover after parsing attributes in process `syz.2.882'. [ 196.830975][ T7895] netlink: 'syz.2.882': attribute type 2 has an invalid length. [ 196.886262][ T5819] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 196.893581][ T31] usb 4-1: USB disconnect, device number 12 [ 197.164318][ T7905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.886'. [ 197.167191][ T7905] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.168301][ T7905] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.502837][ T7917] syz.0.892 (7917): /proc/7916/oom_adj is deprecated, please use /proc/7916/oom_score_adj instead. [ 197.933879][ T988] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 198.086754][ T988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 198.086808][ T988] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 198.086834][ T988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.125168][ T988] usb 5-1: config 0 descriptor?? [ 198.126419][ T7924] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 198.551634][ T988] hid_parser_main: 1194 callbacks suppressed [ 198.551659][ T988] ryos 0003:1E7D:3138.0007: unknown main item tag 0x0 [ 198.551690][ T988] ryos 0003:1E7D:3138.0007: unknown main item tag 0x1 [ 198.600385][ T988] ryos 0003:1E7D:3138.0007: hidraw0: USB HID v1.01 Device [HID 1e7d:3138] on usb-dummy_hcd.4-1/input0 [ 198.771783][ T7956] netlink: 'syz.1.911': attribute type 5 has an invalid length. [ 198.773520][ T5798] usb 5-1: USB disconnect, device number 9 [ 199.593033][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.593103][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.843821][ T5798] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 199.982482][ T8001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.930'. [ 199.988023][ T8001] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.990123][ T8001] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.012668][ T5798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.012700][ T5798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.012735][ T5798] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 200.012754][ T5798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.057821][ T5798] usb 1-1: config 0 descriptor?? [ 200.069646][ T57] wlan1: Trigger new scan to find an IBSS to join [ 200.150079][ T8005] netlink: 'syz.4.932': attribute type 2 has an invalid length. [ 200.506450][ T5798] sony 0003:054C:024B.0008: unexpected long global item [ 200.507287][ T5798] sony 0003:054C:024B.0008: parse failed [ 200.507399][ T5798] sony 0003:054C:024B.0008: probe with driver sony failed with error -22 [ 200.698719][ T31] usb 1-1: USB disconnect, device number 6 [ 201.056086][ T57] wlan1: Creating new IBSS network, BSSID 56:63:d1:76:26:ac [ 202.039164][ T38] audit: type=1326 audit(1759199819.407:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8051 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa8f546af79 code=0x7ffc0000 [ 202.039226][ T38] audit: type=1326 audit(1759199819.407:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8051 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f54ceec9 code=0x7ffc0000 [ 202.088829][ T38] audit: type=1326 audit(1759199819.407:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8051 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa8f546af79 code=0x7ffc0000 [ 202.089263][ T38] audit: type=1326 audit(1759199819.457:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8051 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa8f546af79 code=0x7ffc0000 [ 202.089694][ T38] audit: type=1326 audit(1759199819.457:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8051 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa8f546af79 code=0x7ffc0000 [ 202.092255][ T38] audit: type=1326 audit(1759199819.457:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8051 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa8f546af79 code=0x7ffc0000 [ 202.092307][ T38] audit: type=1326 audit(1759199819.457:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8051 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f54ceec9 code=0x7ffc0000 [ 202.092667][ T38] audit: type=1326 audit(1759199819.457:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8051 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa8f546af79 code=0x7ffc0000 [ 202.093050][ T38] audit: type=1326 audit(1759199819.457:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8051 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa8f546af79 code=0x7ffc0000 [ 202.163519][ T38] audit: type=1326 audit(1759199819.477:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8051 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa8f546af79 code=0x7ffc0000 [ 204.739535][ T8141] netlink: 44 bytes leftover after parsing attributes in process `syz.4.996'. [ 205.334488][ T8156] openvswitch: netlink: Duplicate or invalid key (type 0). [ 205.334528][ T8156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.870449][ T8168] ip6gretap1: entered promiscuous mode [ 205.870481][ T8168] ip6gretap1: entered allmulticast mode [ 206.963965][ T31] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 207.141831][ T31] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 207.141863][ T31] usb 1-1: config 1 has no interface number 0 [ 207.142008][ T31] usb 1-1: config 1 interface 105 has no altsetting 0 [ 207.156790][ T31] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 207.156823][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.156846][ T31] usb 1-1: Product: syz [ 207.156864][ T31] usb 1-1: Manufacturer: syz [ 207.156881][ T31] usb 1-1: SerialNumber: syz [ 207.762051][ T8223] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1033'. [ 208.069477][ T31] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 208.071570][ T31] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 208.072785][ T31] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 208.180515][ T31] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 0e:4a:ec:af:b8:1c [ 208.197612][ T31] usb 1-1: USB disconnect, device number 7 [ 208.220097][ T31] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 208.271014][ T8237] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 208.271014][ T8237] The task syz.4.1037 (8237) triggered the difference, watch for misbehavior. [ 208.419655][ T31] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 208.419803][ T31] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 208.419941][ T31] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 219.173685][ C0] sched: DL replenish lagged too much [ 223.384711][ T5819] Bluetooth: hci0: command 0x0406 tx timeout [ 223.384855][ T5819] Bluetooth: hci4: command 0x0406 tx timeout [ 223.384904][ T5819] Bluetooth: hci1: command 0x0406 tx timeout [ 223.387031][ T5819] Bluetooth: hci2: command 0x0406 tx timeout [ 223.570547][ T5131] Bluetooth: hci3: command 0x0406 tx timeout [ 227.079545][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.448516][ T8261] syz.3.1050 (8261) used greatest stack depth: 18248 bytes left [ 253.634238][ T8293] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.638270][ T8293] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 253.646263][ T8293] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 253.647519][ T8293] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 253.648362][ T8293] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 259.735217][ T5819] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 260.852356][ T5819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 261.119642][ T5819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 263.179026][ T5819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 263.184475][ T5819] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.626352][ T8301] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.639345][ T8301] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.640656][ T8301] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.656315][ T8301] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 277.660835][ T8301] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 285.882533][ T8293] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 285.883098][ T8293] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 285.883565][ T8293] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 285.884882][ T8293] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 285.885717][ T8293] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 293.369302][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 293.387021][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.501444][ T8301] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 310.548909][ T8301] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 310.685536][ T8301] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 311.095223][ T8301] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 311.096088][ T8301] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 318.170045][ T8293] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 318.407767][ T8293] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 318.486528][ T8293] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 318.492891][ T8293] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 318.493848][ T8293] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 327.429581][ T8301] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 327.434403][ T8301] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 327.437583][ T8301] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 327.448679][ T8301] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 328.425217][ T8301] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 330.918443][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.918538][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 331.891508][ T72] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 332.729292][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.990132][ T8361] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 335.070387][ T8361] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 335.119654][ T5826] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 335.121041][ T5826] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 335.121884][ T5826] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 335.286410][ T8364] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 335.321568][ T8364] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 335.383838][ T8364] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 335.405029][ T8364] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 335.406687][ T8364] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 335.539937][ T8369] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 335.605615][ T8369] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 335.607819][ T8369] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 335.609096][ T8369] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 335.622041][ T8369] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 386.553044][ T39] INFO: task kworker/u9:4:5822 blocked for more than 149 seconds. [ 386.553079][ T39] Not tainted syzkaller #0 [ 386.553092][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 386.756533][ T39] task:kworker/u9:4 state:D stack:25720 pid:5822 tgid:5822 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 386.756621][ T39] Workqueue: hci3 hci_cmd_sync_work [ 386.756658][ T39] Call Trace: [ 386.756668][ T39] [ 386.756682][ T39] __schedule+0x16f3/0x4c20 [ 386.756733][ T39] ? __pfx___schedule+0x10/0x10 [ 386.756775][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 386.756795][ T39] rt_mutex_schedule+0x77/0xf0 [ 386.756814][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 386.756838][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 386.756917][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 386.756942][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 386.756966][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 386.756988][ T39] ? __lock_acquire+0xab9/0xd20 [ 386.757022][ T39] ? hci_conn_failed+0x165/0x310 [ 386.757044][ T39] ? __pfx_mgmt_connect_failed+0x10/0x10 [ 386.757069][ T39] ? hci_conn_failed+0x165/0x310 [ 386.757083][ T39] mutex_lock_nested+0x16a/0x1d0 [ 386.757112][ T39] hci_conn_failed+0x165/0x[ 386.757112][ T39] hci_conn_failed+0x165/0x310 [ 386.757133][ T39] ? hci_abort_conn_sync+0x24e/0xe30 [ 386.757150][ T39] hci_abort_conn_sync+0x658/0xe30 [ 386.757175][ T39] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 386.757195][ T39] ? hci_conn_valid+0x21/0x230 [ 386.757215][ T39] ? hci_conn_valid+0x21/0x230 [ 386.757234][ T39] ? hci_conn_valid+0x21/0x230 [ 386.757255][ T39] ? hci_conn_valid+0x211/0x230 [ 386.757277][ T39] ? __pfx_abort_conn_sync+0x10/0x10 [ 386.757301][ T39] hci_cmd_sync_work+0x210/0x3a0 [ 386.757328][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 386.757355][ T39] process_scheduled_works+0xae1/0x17b0 [ 386.757403][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 386.757440][ T39] worker_thread+0x8a0/0xda0 [ 386.757486][ T39] kthread+0x711/0x8a0 [ 386.757506][ T39] ? __pfx_worker_thread+0x10/0x10 [ 386.757529][ T39] ? __pfx_kthread+0x10/0x10 [ 386.757550][ T39] ? __pfx_kthread+0x10/0x10 [ 386.757567][ T39] ret_from_fork+0x436/0x7d0 [ 386.757594][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 386.757624][ T39] ? __switch_to_asm+0x39/0x70 [ 386.757642][ T39] ? __switch_to_asm+0x33/0x70 [ 386.757659][ T39] ? __pfx_kthread+0x10/0x10 [ 386.757676][ T39] ret_from_fork_asm+0x1a/0x30 [ 386.757708][ T39] [ 386.757796][ T39] [ 386.757796][ T39] Showing all locks held in the system: [ 386.757805][ T39] 4 locks held by kworker/0:0/9: [ 386.757816][ T39] #0: ffff88805bd9f538 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.757885][ T39] #1: ffffc900000e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.757950][ T39] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.757998][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.758047][ T39] 5 locks held by kworker/0:1/10: [ 386.758057][ T39] #0: ffff88805c468d38 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.758115][ T39] #1: ffffc900000f7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.758183][ T39] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.758232][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.758281][ T39] #4: ffff8880b883ab18 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 386.758330][ T39] 2 locks held by ksoftirqd/0/15: [ 386.758341][ T39] #0: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.758388][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.758443][ T39] 2 locks held by rcu_preempt/18: [ 386.758452][ T39] #0: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.758497][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.758543][ T39] 2 locks held by rcuc/0/20: [ 386.758552][ T39] #0: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.758597][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.758645][ T39] 2 locks held by rcuc/1/28: [ 386.758655][ T39] #0: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.758705][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.758773][ T39] 13 locks held by ktimers/1/29: [ 386.758783][ T39] #0: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.758829][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.758890][ T39] #2: ffffffff8d3a9d40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 386.758939][ T39] #3: ffffffff8d3a9d40 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.758989][ T39] #4: ffffffff8d3a9d40 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x27b/0x900 [ 386.759045][ T39] #5: ffffffff8d3a9d40 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9a/0x3a0 [ 386.759099][ T39] #6: ffffffff8d3a9d40 (rcu_read_lock){....}-{1:3}, at: ip_output+0x60/0x3c0 [ 386.759149][ T39] #7: ffffffff8d3a9d40 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x11d0 [ 386.759197][ T39] #8: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.759248][ T39] #9: ffffffff8d3a9da0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x26f/0x3b70 [ 386.759293][ T39] #10: ffff88802885e318 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#6){+...}-{3:3}, at: __dev_queue_xmit+0xd58/0x3b70 [ 386.759341][ T39] #11: ffffffff8d3a9d40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 386.759388][ T39] #12: ffff88802885e188 (&sch->root_lock_key#43){+...}-{3:3}, at: __dev_queue_xmit+0xd62/0x3b70 [ 386.759438][ T39] 2 locks held by ksoftirqd/1/30: [ 386.759448][ T39] #0: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.759498][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.759544][ T39] 3 locks held by kworker/u8:2/37: [ 386.759554][ T39] #0: ffff88814d325138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.759603][ T39] #1: ffffc90000ac7bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.759654][ T39] #2: ffffffff8e6662f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 386.759706][ T39] 1 lock held by khungtaskd/39: [ 386.759716][ T39] #0: ffffffff8d3a9d40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 386.759765][ T39] 2 locks held by kcompactd0/42: [ 386.759775][ T39] #0: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.759828][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.759893][ T39] 7 locks held by kworker/u8:3/57: [ 386.759904][ T39] #0: ffff888019481138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.759955][ T39] #1: ffffc9000123fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.760010][ T39] #2: ffff88805dabd300 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 386.760064][ T39] #3: ffff88805d9a8d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 386.760114][ T39] #4: ffffffff8d3a9d40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 386.780228][ T39] #5: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.780301][ T39] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.780373][ T39] 6 locks held by kworker/u9:0/59: [ 386.780388][ T39] #0: ffff88802791c938 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.780459][ T39] #1: ffffc9000125fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.780529][ T39] #2: ffff88804b9c0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 386.780598][ T39] #3: ffff88804b9c00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 386.780655][ T39] #4: ffffffff8e7cdd98 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 386.780714][ T39] #5: ffff8880255fd358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 386.780782][ T39] 4 locks held by kworker/u8:4/72: [ 386.780797][ T39] #0: ffff888024ffa938 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.780864][ T39] #1: ffffc9000154fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.780931][ T39] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.780999][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.781078][ T39] 5 locks held by kworker/u8:6/1102: [ 386.781093][ T39] #0: ffff888019481138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.781167][ T39] #1: ffffc90004abfbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.781237][ T39] #2: ffff888049c80898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 386.781312][ T39] #3: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.781380][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.781447][ T39] 2 locks held by irq/31-virtio1-/1182: [ 386.781463][ T39] #0: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.781529][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.781599][ T39] 4 locks held by kworker/0:2/1229: [ 386.781614][ T39] #0: ffff8880362a6138 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.781714][ T39] #1: ffffc90004e7fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.781805][ T39] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.781873][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.781942][ T39] 2 locks held by aoe_tx0/1321: [ 386.781957][ T39] #0: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.782027][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.782096][ T39] 6 locks held by kworker/u8:8/1472: [ 386.782109][ T39] #0: ffff888027754938 ((wq_completion)wg-kex-wg0#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.782190][ T39] #1: ffffc900053ffbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.782260][ T39] #2: ffff8880382655f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x105/0x750 [ 386.782331][ T39] #3: ffff888048032e58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x116/0x750 [ 386.782398][ T39] #4: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.782464][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.782552][ T39] 7 locks held by kworker/u8:9/3583: [ 386.782565][ T39] #0: ffff888019481138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.782634][ T39] #1: ffffc9000d8efbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.782705][ T39] #2: ffff888035f42300 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 386.782770][ T39] #3: ffff88804b153d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 386.782831][ T39] #4: ffffffff8d3a9d40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 386.782897][ T39] #5: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.782963][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.783030][ T39] 18 locks held by kworker/u8:10/3961: [ 386.783046][ T39] 5 locks held by kworker/u8:11/4338: [ 386.783059][ T39] #0: ffff888019481138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.783128][ T39] #1: ffffc9000eacfbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.783203][ T39] #2: ffff88805eb10898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 386.783278][ T39] #3: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.783348][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.783416][ T39] 5 locks held by kworker/u8:12/4366: [ 386.783430][ T39] #0: ffff888019481138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.783498][ T39] #1: ffffc9000eb1fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.783765][ T39] #2: ffff888049ed0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 386.783846][ T39] #3: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.783927][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.783998][ T39] 4 locks held by kworker/u9:1/5131: [ 386.784012][ T39] #0: ffff88805eaba138 ((wq_completion)hci6#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.784086][ T39] #1: ffffc9000fa07bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.784164][ T39] #2: ffff88806d9c00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 386.784233][ T39] #3: ffffffff8e7cdd98 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 386.784305][ T39] 2 locks held by getty/5575: [ 386.784319][ T39] #0: ffff88823bf7c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 386.784380][ T39] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 386.784450][ T39] 4 locks held by kworker/0:3/5798: [ 386.784465][ T39] #0: ffff88805c25a538 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.784539][ T39] #1: ffffc90004c2fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.784640][ T39] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.784707][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.784774][ T39] 3 locks held by syz-executor/5802: [ 386.784788][ T39] #0: ffff888037f5a1d0 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_recvmsg+0xd3/0x560 [ 386.784856][ T39] #1: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.784918][ T39] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.784983][ T39] 3 locks held by syz-executor/5813: [ 386.784998][ T39] #0: ffff888059da4e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 386.785064][ T39] #1: ffff888059da40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 386.785136][ T39] #2: ffffffff8e7cdd98 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 386.785202][ T39] 4 locks held by kworker/u9:2/5815: [ 386.785235][ T39] #0: ffff88802653d938 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.785302][ T39] #1: ffffc90004d4fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.785371][ T39] #2: ffff88804b81ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 386.785436][ T39] #3: ffff88804b81c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 386.785496][ T39] 4 locks held by kworker/u9:3/5819: [ 386.785509][ T39] #0: ffff88805f4fe138 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.785582][ T39] #1: ffffc90004d6fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.785651][ T39] #2: ffff888063b640a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 386.785718][ T39] #3: ffffffff8e7cdd98 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 386.785788][ T39] 5 locks held by kworker/u9:4/5822: [ 386.785803][ T39] #0: ffff88802791c138 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.785870][ T39] #1: ffffc90004dcfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.785938][ T39] #2: ffff88804b9c4e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 386.786004][ T39] #3: ffff88804b9c40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 386.786063][ T39] #4: ffffffff8e7cdd98 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 386.786122][ T39] 4 locks held by kworker/0:4/5823: [ 386.786137][ T39] #0: ffff88805bc97938 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.786220][ T39] #1: ffffc90004e5fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.786310][ T39] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.786377][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.786446][ T39] 4 locks held by kworker/u9:6/5827: [ 386.786459][ T39] #0: ffff888035f3a138 ((wq_completion)hci7#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.786535][ T39] #1: ffffc90004ecfbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.786602][ T39] #2: ffff88806f2540a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 386.786670][ T39] #3: ffffffff8e7cdd98 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 386.786736][ T39] 4 locks held by kworker/u9:7/5828: [ 386.786750][ T39] #0: ffff88802fc8d138 ((wq_completion)krxrpcd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.786814][ T39] #1: ffffc90004edfbc0 ((work_completion)(&rxnet->peer_keepalive_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.786882][ T39] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.786948][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.787022][ T39] 4 locks held by kworker/1:3/5886: [ 386.787037][ T39] #0: ffff88805c455d38 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.787111][ T39] #1: ffffc900051cfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.787208][ T39] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.787274][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.787344][ T39] 4 locks held by kworker/1:4/5899: [ 386.787357][ T39] #0: ffff88805c3ea938 ((wq_completion)wg-kex-wg1#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.787433][ T39] #1: ffffc9000529fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.787526][ T39] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.787594][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.787661][ T39] 4 locks held by kworker/0:5/5900: [ 386.787676][ T39] #0: ffff88805c3eb538 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.787750][ T39] #1: ffffc900052afbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.787840][ T39] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.787906][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.787974][ T39] 4 locks held by kworker/1:5/5947: [ 386.787989][ T39] #0: ffff88805bd9f538 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.788062][ T39] #1: ffffc900053efbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.788163][ T39] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.788229][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.788310][ T39] 4 locks held by kworker/0:6/5952: [ 386.788322][ T39] #0: ffff88805c258d38 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.788393][ T39] #1: ffffc9000543fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.788485][ T39] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.788549][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.788615][ T39] 4 locks held by kworker/0:7/5959: [ 386.788629][ T39] #0: ffff88802f5ac138 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.788701][ T39] #1: ffffc9000548fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.788811][ T39] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.788881][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.788951][ T39] 2 locks held by ipvs-e:4:0/5995: [ 386.788967][ T39] #0: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.789033][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.789103][ T39] 2 locks held by ipvs-e:2:0/6427: [ 386.789117][ T39] #0: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.789190][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.789260][ T39] 6 locks held by kworker/u8:13/8267: [ 386.789275][ T39] #0: ffff88805beac938 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.789349][ T39] #1: ffffc9000e217bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.789420][ T39] #2: ffff8880354355f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x105/0x750 [ 386.789494][ T39] #3: ffff888020f11928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x116/0x750 [ 386.789564][ T39] #4: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.789632][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.789700][ T39] 5 locks held by kworker/u8:14/8268: [ 386.789714][ T39] #0: ffff888019481138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.789782][ T39] #1: ffffc9001be47bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.789853][ T39] #2: ffff88805e860898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 386.789926][ T39] #3: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.789993][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.790075][ T39] 6 locks held by kworker/u8:16/8271: [ 386.790088][ T39] #0: ffff888036d68938 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.790163][ T39] #1: ffffc9000fa17bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.790233][ T39] #2: ffff8880382615f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x105/0x750 [ 386.790300][ T39] #3: ffff888020f16350 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x116/0x750 [ 386.790365][ T39] #4: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.790431][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.790497][ T39] 5 locks held by kworker/1:8/8272: [ 386.790512][ T39] #0: ffff88802f5ac138 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.790583][ T39] #1: ffffc9001be67bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.790672][ T39] #2: ffff888020f14e20 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 386.790738][ T39] #3: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.790804][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.790871][ T39] 4 locks held by kworker/0:8/8274: [ 386.790885][ T39] #0: ffff88805bc94138 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.790957][ T39] #1: ffffc9000f807bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.791041][ T39] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.791108][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.791185][ T39] 7 locks held by kworker/u8:18/8276: [ 386.791199][ T39] #0: ffff888019481138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.791278][ T39] #1: ffffc90004c7fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.791364][ T39] #2: ffff8880396f2300 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 386.791432][ T39] #3: ffff88804b17e520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 386.791493][ T39] #4: ffffffff8d3a9d40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 386.791560][ T39] #5: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.791629][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.791698][ T39] 4 locks held by kworker/u8:19/8277: [ 386.791712][ T39] #0: ffff888024ffc138 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.791787][ T39] #1: ffffc9000d22fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.791857][ T39] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.791924][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.791992][ T39] 4 locks held by kworker/1:11/8280: [ 386.792009][ T39] #0: ffff888019499938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.792079][ T39] #1: ffffc9000f98fbc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.792148][ T39] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.792222][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.792303][ T39] 4 locks held by kworker/u8:21/8281: [ 386.792315][ T39] #0: ffff88805beac938 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.792386][ T39] #1: ffffc9000d21fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.792453][ T39] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.792519][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.792587][ T39] 6 locks held by kworker/u8:23/8283: [ 386.792602][ T39] #0: ffff88805c1bd138 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.792673][ T39] #1: ffffc9000d1c7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.792761][ T39] #2: ffff88805c5655f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x105/0x750 [ 386.792828][ T39] #3: ffff8880480323c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x116/0x750 [ 386.792897][ T39] #4: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.792964][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.793033][ T39] 6 locks held by kworker/u8:24/8285: [ 386.793048][ T39] #0: ffff88805c1bd138 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.793123][ T39] #1: ffffc9000d1b7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.793200][ T39] #2: ffff88805c5655f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x105/0x750 [ 386.793268][ T39] #3: ffff88804b294e20 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x116/0x750 [ 386.793336][ T39] #4: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.793404][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.793472][ T39] 5 locks held by kworker/u8:25/8286: [ 386.793488][ T39] #0: ffff888019481138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.793557][ T39] #1: ffffc9000f95fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.753803][ T39] #2: ffff88805e720898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 387.753874][ T39] #3: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 387.753935][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 387.754015][ T39] 4 locks held by kworker/u9:8/8293: [ 387.754029][ T39] #0: ffff8880288bc938 ((wq_completion)hci8#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.754102][ T39] #1: ffffc9000f7f7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.754164][ T39] #2: ffff8880268000a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 387.754225][ T39] #3: ffffffff8e7cdd98 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 387.754284][ T39] 4 locks held by kworker/0:9/8295: [ 387.754297][ T39] #0: ffff88805c3fc938 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.754364][ T39] #1: ffffc9000cc8fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.754446][ T39] #2: ffff88805c5655f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 387.754497][ T39] #3: ffff88804b294e20 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4bf/0x900 [ 387.754544][ T39] 4 locks held by kworker/0:10/8296: [ 387.754554][ T39] #0: ffff88805bd9fd38 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.754604][ T39] #1: ffffc9000cc7fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.754667][ T39] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 387.754714][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 387.754761][ T39] 4 locks held by kworker/u9:9/8301: [ 387.754771][ T39] #0: ffff88807ce0e138 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.754821][ T39] #1: ffffc9000c747bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.754867][ T39] #2: ffff8880390300a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 387.754915][ T39] #3: ffffffff8e7cdd98 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 387.754995][ T39] 1 lock held by dhcpcd/8302: [ 387.755005][ T39] #0: ffff88805ee62ff8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 387.755056][ T39] 4 locks held by kworker/1:18/8308: [ 387.755066][ T39] #0: ffff888019499138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.755112][ T39] #1: ffffc9000e227bc0 ((work_completion)(&br->mcast_gc_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.755158][ T39] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 387.755202][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 387.755249][ T39] 3 locks held by kworker/1:19/8309: [ 387.755259][ T39] #0: ffff888019498538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.755308][ T39] #1: ffffc9000d8b7bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.755355][ T39] #2: ffffffff8e6662f8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 387.755401][ T39] 3 locks held by kworker/1:23/8313: [ 387.755413][ T39] 4 locks held by kworker/1:28/8318: [ 387.755423][ T39] #0: ffff88805bd9fd38 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.755474][ T39] #1: ffffc9000d197bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.755539][ T39] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 387.755590][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 387.755643][ T39] 4 locks held by kworker/1:29/8319: [ 387.755653][ T39] #0: ffff88802f5ac938 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.755702][ T39] #1: ffffc9000d187bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.755770][ T39] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 387.755815][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 387.755860][ T39] 4 locks held by kworker/1:30/8320: [ 387.755869][ T39] #0: ffff88805bc94138 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.755918][ T39] #1: ffffc9000ccafbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.755987][ T39] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 387.756031][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 387.756077][ T39] 5 locks held by kworker/1:31/8321: [ 387.756087][ T39] #0: ffff88805c258d38 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.756156][ T39] #1: ffffc9000cc6fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.756223][ T39] #2: ffff88804b292e58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 387.756275][ T39] #3: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 387.756327][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 387.756379][ T39] 4 locks held by kworker/1:32/8322: [ 387.756391][ T39] #0: ffff88805c25a538 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.756444][ T39] #1: ffffc9000cbafbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.756519][ T39] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 387.756566][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 387.756615][ T39] 6 locks held by kworker/1:33/8323: [ 387.756625][ T39] #0: ffff88805c3eb538 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.756700][ T39] #1: ffffc9000cb9fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.756774][ T39] #2: ffff88805c5615f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x11a/0x8f0 [ 387.756829][ T39] #3: ffff88804b2958b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x12b/0x8f0 [ 387.756895][ T39] #4: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 387.756945][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 387.757028][ T39] 6 locks held by kworker/1:34/8324: [ 387.757040][ T39] #0: ffff8880362a6138 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.757106][ T39] #1: ffffc9000b6b7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.757198][ T39] #2: ffff8880378e15f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x11a/0x8f0 [ 387.757266][ T39] #3: ffff88804b290e90 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x12b/0x8f0 [ 387.757332][ T39] #4: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 387.757396][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 387.757463][ T39] 6 locks held by kworker/u8:30/8327: [ 387.757477][ T39] #0: ffff888035536938 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.757543][ T39] #1: ffffc9000cadfbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.757610][ T39] #2: ffff8880359255f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x105/0x750 [ 387.757677][ T39] #3: ffff888020f12e58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x116/0x750 [ 387.757741][ T39] #4: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 387.757824][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 387.757892][ T39] 1 lock held by dhcpcd/8328: [ 387.757907][ T39] #0: ffff88805ee61c78 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 387.757991][ T39] 7 locks held by kworker/u8:31/8329: [ 387.758005][ T39] #0: ffff888019481138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.758075][ T39] #1: ffffc9000cab7bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.758145][ T39] #2: ffff88802171c300 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 387.758214][ T39] #3: ffff88805d8a2920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 387.758274][ T39] #4: ffffffff8d3a9d40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 387.758340][ T39] #5: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 387.758399][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 387.758469][ T39] 4 locks held by kworker/u8:33/8331: [ 387.758485][ T39] #0: ffff888019481138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.758553][ T39] #1: ffffc9000aa4fbc0 ((work_completion)(&port->bc_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.758624][ T39] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 387.758691][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 387.758760][ T39] 6 locks held by kworker/u8:35/8333: [ 387.758774][ T39] #0: ffff88805c1bc138 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.758849][ T39] #1: ffffc9000a647bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.758920][ T39] #2: ffff88805c5615f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x105/0x750 [ 387.759012][ T39] #3: ffff88804b296350 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x116/0x750 [ 387.759072][ T39] #4: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 387.759133][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 387.759204][ T39] 4 locks held by kworker/0:11/8335: [ 387.759217][ T39] #0: ffff88805bd9f938 ((wq_completion)wg-crypt-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.759285][ T39] #1: ffffc9000a23fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.759377][ T39] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 387.759442][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 387.759508][ T39] 2 locks held by kworker/0:12/8336: [ 387.759522][ T39] #0: ffff888019498538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.759588][ T39] #1: ffffc90009e27bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.759672][ T39] 4 locks held by kworker/0:13/8337: [ 387.759687][ T39] #0: ffff88805c03e938 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.759760][ T39] #1: ffffc90009e17bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.759865][ T39] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 387.759932][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 387.760006][ T39] 4 locks held by kworker/0:14/8338: [ 387.760020][ T39] #0: ffff88805c455d38 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.760112][ T39] #1: ffffc90009e07bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.760204][ T39] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 387.760273][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 387.760341][ T39] 5 locks held by kworker/u8:37/8339: [ 387.760356][ T39] #0: ffff888019481138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.760424][ T39] #1: ffffc9000c6f7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.760494][ T39] #2: ffff88805e300898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 387.760570][ T39] #3: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 387.760641][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 387.760709][ T39] 4 locks held by kworker/0:15/8340: [ 387.760724][ T39] #0: ffff888019499138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.760792][ T39] #1: ffffc9000c677bc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.760862][ T39] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 387.760930][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 387.761006][ T39] 6 locks held by kworker/u8:38/8341: [ 387.761020][ T39] #0: ffff888019481138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.761090][ T39] #1: ffffc9000b6a7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.761158][ T39] #2: ffff88805e070898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 387.761232][ T39] #3: ffffffff8d3a9d40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 387.761299][ T39] #4: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 387.761380][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 387.761446][ T39] 6 locks held by kworker/u8:39/8342: [ 387.761461][ T39] #0: ffff88802fdb5138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.761527][ T39] #1: ffffc9000b697bc0 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.761614][ T39] #2: ffff8880368ca910 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xea/0xf00 [ 387.761710][ T39] #3: ffffffff8d3a9d40 (rcu_read_lock){....}-{1:3}, at: batadv_iv_ogm_schedule+0x8a7/0xf00 [ 387.761785][ T39] #4: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 387.761852][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 387.761923][ T39] 6 locks held by kworker/u8:40/8344: [ 387.761938][ T39] #0: ffff888024ffb138 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.762022][ T39] #1: ffffc90009617bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.762094][ T39] #2: ffff8880369b95f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x105/0x750 [ 387.762163][ T39] #3: ffff888020f16de8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x116/0x750 [ 387.762232][ T39] #4: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 387.762300][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 387.762371][ T39] 2 locks held by syz-executor/8345: [ 387.762384][ T39] #0: ffffffff8e6593a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 387.762457][ T39] #1: ffffffff8e6662f8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 387.762528][ T39] 5 locks held by kworker/u8:41/8346: [ 387.762542][ T39] #0: ffff888019481138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.762610][ T39] #1: ffffc900095f7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.762680][ T39] #2: ffff888049a70898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 387.762753][ T39] #3: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 387.762819][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 387.762890][ T39] 7 locks held by kworker/u8:42/8348: [ 387.762904][ T39] #0: ffff888019481138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.762979][ T39] #1: ffffc900089dfbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.763051][ T39] #2: ffff88805d5c3300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 387.763110][ T39] #3: ffff88805d3fe520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 387.763171][ T39] #4: ffffffff8d3a9d40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 387.763238][ T39] #5: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 387.763311][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 387.763382][ T39] 1 lock held by dhcpcd/8350: [ 387.763397][ T39] #0: ffff88805ee615f8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 387.763472][ T39] 4 locks held by syz-executor/8354: [ 387.763485][ T39] #0: ffffffff8e6593a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 387.763558][ T39] #1: ffffffff8e6662f8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 387.763702][ T39] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 387.763769][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 387.763838][ T39] 1 lock held by dhcpcd/8356: [ 387.763853][ T39] #0: ffff88803d5d3cf8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 387.763927][ T39] 1 lock held by syz-executor/8360: [ 387.763943][ T39] #0: ffffffff8e6662f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 387.764024][ T39] 4 locks held by kworker/u9:10/8361: [ 387.764039][ T39] #0: ffff88805ce67938 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.764115][ T39] #1: ffffc9001c54fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.764186][ T39] #2: ffff8880681b40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 387.764255][ T39] #3: ffffffff8e7cdd98 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 387.764326][ T39] 1 lock held by syz-executor/8363: [ 387.764339][ T39] #0: ffffffff8e6662f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 387.764412][ T39] 4 locks held by kworker/u9:11/8364: [ 387.764428][ T39] #0: ffff88807d7b6138 ((wq_completion)hci10#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.764502][ T39] #1: ffffc9001c5afbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.764570][ T39] #2: ffff88806e7080a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 387.764638][ T39] #3: ffffffff8e7cdd98 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 387.764708][ T39] 1 lock held by dhcpcd/8365: [ 387.764722][ T39] #0: ffff88803bbfb678 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 387.764794][ T39] 1 lock held by syz-executor/8367: [ 387.764808][ T39] #0: ffffffff8e6662f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 387.764883][ T39] [ 387.764890][ T39] ============================================= [ 387.764890][ T39] [ 387.764930][ T39] NMI backtrace for cpu 1 [ 387.764967][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 387.764996][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 387.765012][ T39] Call Trace: [ 387.765026][ T39] [ 387.765039][ T39] dump_stack_lvl+0x189/0x250 [ 387.765085][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.765126][ T39] ? __pfx__printk+0x10/0x10 [ 387.765173][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 387.765213][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 387.765251][ T39] ? __pfx__printk+0x10/0x10 [ 387.765288][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 387.765326][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 387.765367][ T39] watchdog+0xf93/0xfe0 [ 387.765408][ T39] ? watchdog+0x1de/0xfe0 [ 387.765451][ T39] kthread+0x711/0x8a0 [ 387.765479][ T39] ? __pfx_watchdog+0x10/0x10 [ 387.765514][ T39] ? __pfx_kthread+0x10/0x10 [ 387.765545][ T39] ? __pfx_kthread+0x10/0x10 [ 387.765571][ T39] ret_from_fork+0x436/0x7d0 [ 387.765612][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 387.765656][ T39] ? __switch_to_asm+0x39/0x70 [ 387.765680][ T39] ? __switch_to_asm+0x33/0x70 [ 387.765705][ T39] ? __pfx_kthread+0x10/0x10 [ 387.765729][ T39] ret_from_fork_asm+0x1a/0x30 [ 387.765775][ T39] [ 387.765784][ T39] Sending NMI from CPU 1 to CPUs 0: [ 387.765817][ C0] NMI backtrace for cpu 0 [ 387.765835][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 387.765868][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 387.765886][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 387.765924][ C0] Code: e8 6e 15 c2 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 6f 5f 21 fd 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 387.765941][ C0] RSP: 0018:ffffc90000167890 EFLAGS: 00000202 [ 387.765957][ C0] RAX: 1ffffffff3188400 RBX: 00000000000003fd RCX: 0000000000000000 [ 387.765971][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 387.765982][ C0] RBP: ffffffff98c427b0 R08: 0000000000000000 R09: 0000000000000000 [ 387.765994][ C0] R10: dffffc0000000000 R11: ffffffff84fab160 R12: dffffc0000000000 [ 387.766009][ C0] R13: 0000000000000000 R14: ffffffff98c42520 R15: 0000000000000000 [ 387.766022][ C0] FS: 0000000000000000(0000) GS:ffff888127025000(0000) knlGS:0000000000000000 [ 387.766037][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 387.766050][ C0] CR2: 000055843c7dc660 CR3: 000000000d1a6000 CR4: 00000000003526f0 [ 387.766067][ C0] Call Trace: [ 387.766074][ C0] [ 387.766083][ C0] wait_for_lsr+0x1aa/0x2f0 [ 387.766115][ C0] serial8250_console_write+0x11bd/0x1b40 [ 387.766147][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 387.766171][ C0] ? console_flush_all+0x13a/0xcd0 [ 387.766197][ C0] ? console_flush_all+0x476/0xcd0 [ 387.766222][ C0] console_flush_all+0x698/0xcd0 [ 387.766247][ C0] ? console_flush_all+0x13a/0xcd0 [ 387.766272][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 387.766296][ C0] ? __lock_acquire+0xab9/0xd20 [ 387.766329][ C0] __console_flush_and_unlock+0xa4/0x240 [ 387.766353][ C0] ? __pfx___console_flush_and_unlock+0x10/0x10 [ 387.766382][ C0] legacy_kthread_func+0x13b/0x1a0 [ 387.766408][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 387.766434][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 387.766460][ C0] ? __kthread_parkme+0x7b/0x200 [ 387.766486][ C0] ? __kthread_parkme+0x1a1/0x200 [ 387.766517][ C0] kthread+0x711/0x8a0 [ 387.766535][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 387.766560][ C0] ? __pfx_kthread+0x10/0x10 [ 387.766580][ C0] ? __pfx_kthread+0x10/0x10 [ 387.766598][ C0] ret_from_fork+0x436/0x7d0 [ 387.766624][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 387.766653][ C0] ? __switch_to_asm+0x39/0x70 [ 387.766672][ C0] ? __switch_to_asm+0x33/0x70 [ 387.766690][ C0] ? __pfx_kthread+0x10/0x10 [ 387.766714][ C0] ret_from_fork_asm+0x1a/0x30 [ 387.766743][ C0] [ 387.766816][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 387.766839][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 387.766867][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 387.766883][ T39] Call Trace: [ 387.766894][ T39] [ 387.766905][ T39] dump_stack_lvl+0x99/0x250 [ 387.766946][ T39] ? __asan_memcpy+0x40/0x70 [ 387.766987][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.767028][ T39] ? __pfx__printk+0x10/0x10 [ 387.767073][ T39] vpanic+0x281/0x750 [ 387.767104][ T39] ? __pfx_vpanic+0x10/0x10 [ 387.767127][ T39] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 387.767155][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.767193][ T39] panic+0xb9/0xc0 [ 387.767218][ T39] ? __pfx_panic+0x10/0x10 [ 387.767247][ T39] ? irq_work_queue+0xc3/0x140 [ 387.767286][ T39] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 387.767324][ T39] watchdog+0xfd2/0xfe0 [ 387.767367][ T39] ? watchdog+0x1de/0xfe0 [ 387.767408][ T39] kthread+0x711/0x8a0 [ 387.767435][ T39] ? __pfx_watchdog+0x10/0x10 [ 387.767470][ T39] ? __pfx_kthread+0x10/0x10 [ 387.767499][ T39] ? __pfx_kthread+0x10/0x10 [ 387.767525][ T39] ret_from_fork+0x436/0x7d0 [ 387.767563][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 387.767606][ T39] ? __switch_to_asm+0x39/0x70 [ 387.767631][ T39] ? __switch_to_asm+0x33/0x70 [ 387.767657][ T39] ? __pfx_kthread+0x10/0x10 [ 387.767683][ T39] ret_from_fork_asm+0x1a/0x30 [ 387.767725][ T39] [ 387.768143][ T39] Kernel Offset: disabled