last executing test programs: 2m59.186229249s ago: executing program 4 (id=421): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000003700)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000780)="c0db", 0x2, 0x24008001, 0x0, 0x0) 2m58.888231406s ago: executing program 4 (id=423): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4004550d, &(0x7f0000000500)) 2m58.51181669s ago: executing program 4 (id=429): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='i2c_read\x00', r0}, 0x18) r1 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000004c0)={&(0x7f0000000480)=[{0xfffc, 0x11, 0x0, 0x0}, {0x100, 0x2001, 0x0, 0x0}], 0x2}) 2m58.141165852s ago: executing program 4 (id=433): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r0, 0x0, 0x1000}, 0x18) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 2m57.918438636s ago: executing program 4 (id=436): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m57.678390708s ago: executing program 4 (id=439): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a857000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigprocmask(0x2, &(0x7f0000000000)={[0x5]}, 0x0, 0x8) 2m42.28479039s ago: executing program 32 (id=439): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a857000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigprocmask(0x2, &(0x7f0000000000)={[0x5]}, 0x0, 0x8) 2m20.543512345s ago: executing program 1 (id=659): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@empty, 0x4e23, 0x2, 0xcd, 0x12d61, 0x3}}, 0x44) 2m19.977043258s ago: executing program 1 (id=663): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x8ca, 0x4}}, 0x30) 2m19.201596546s ago: executing program 3 (id=665): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 2m19.076517259s ago: executing program 1 (id=666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x324) 2m16.59254853s ago: executing program 0 (id=673): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) readv(r0, &(0x7f0000000640)=[{&(0x7f0000002480)=""/4082, 0x48}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0xfffffffc, 'syz0\x00'}, 0x2, 0x30, 0x5, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0}) 2m16.333068443s ago: executing program 0 (id=674): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) inotify_add_watch(0xffffffffffffffff, 0x0, 0x2000000) 2m15.236081753s ago: executing program 3 (id=675): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000008c0)={0x4}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 2m14.873499698s ago: executing program 3 (id=677): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 2m14.866971404s ago: executing program 2 (id=678): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r0 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 2m14.489062498s ago: executing program 2 (id=679): r0 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2m14.265235681s ago: executing program 0 (id=680): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) lremovexattr(0x0, 0x0) 2m13.807540607s ago: executing program 2 (id=681): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000003700)=[{0x0}, {&(0x7f0000004000)=""/4096, 0x38}], 0x2}, 0x7}], 0x2, 0x142, 0x0) 2m13.741995186s ago: executing program 0 (id=682): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x8000, 0x0, 0x8}, 0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x500, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0xa}, 0x18) 2m13.292899834s ago: executing program 0 (id=683): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 2m13.195669563s ago: executing program 1 (id=684): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x40) 2m12.897291006s ago: executing program 3 (id=685): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000005600)={0x54, r0, 0x1, 0x709d32, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "419ccbb5e9d70fae8dbc1dee39"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x818}, 0xc0) 2m12.548831991s ago: executing program 2 (id=686): ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc000fe}]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)) 2m11.463419478s ago: executing program 2 (id=687): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x2, 0x80805, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000780), &(0x7f00000007c0)=0xc) 2m11.351177164s ago: executing program 2 (id=688): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001d40)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffffffffdb5, 0xffd9, 0x0, 0x0, 0x4, 0x0, 0xc}, 0x27) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000001dc0)=ANY=[@ANYBLOB="1802000001000000000000000300000085000000410000001800000002000000000000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 2m10.259542161s ago: executing program 0 (id=689): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 2m10.258218068s ago: executing program 1 (id=690): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}}], 0x1, 0x20080058) 2m10.227852025s ago: executing program 3 (id=691): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) listen(r0, 0x4) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x7, @none, 0x0, 0x2}, 0xe) 1m28.110666429s ago: executing program 1 (id=692): pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x39) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000240)='-\x00', r1) 1m27.952560623s ago: executing program 3 (id=693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x4e21, 0x8}}}}}, 0x0) 1m5.746284125s ago: executing program 33 (id=689): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 26.866522735s ago: executing program 34 (id=688): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001d40)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffffffffdb5, 0xffd9, 0x0, 0x0, 0x4, 0x0, 0xc}, 0x27) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000001dc0)=ANY=[@ANYBLOB="1802000001000000000000000300000085000000410000001800000002000000000000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 12.29967964s ago: executing program 35 (id=692): pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x39) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000240)='-\x00', r1) 0s ago: executing program 36 (id=693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x4e21, 0x8}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.112' (ED25519) to the list of known hosts. [ 73.457621][ T5824] cgroup: Unknown subsys name 'net' [ 73.720860][ T5824] cgroup: Unknown subsys name 'cpuset' [ 73.786665][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.446416][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.096959][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.099577][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.102828][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.103279][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.103919][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.104285][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.116175][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.117190][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.146785][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.156352][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.166913][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.171689][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.172438][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.200588][ T5154] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.201498][ T5154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.294966][ T5154] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.304500][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.305968][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.317146][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.324242][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.345344][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.348229][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.349123][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.350204][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.351022][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.095474][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 79.159226][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 79.308613][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 79.484091][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 79.687243][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 79.957162][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.958493][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.958844][ T5838] bridge_slave_0: entered allmulticast mode [ 79.960594][ T5838] bridge_slave_0: entered promiscuous mode [ 80.088847][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.088996][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.089170][ T5838] bridge_slave_1: entered allmulticast mode [ 80.090960][ T5838] bridge_slave_1: entered promiscuous mode [ 80.247443][ T5154] Bluetooth: hci2: command tx timeout [ 80.247585][ T5841] Bluetooth: hci0: command tx timeout [ 80.247596][ T5154] Bluetooth: hci1: command tx timeout [ 80.289177][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.289343][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.289535][ T5842] bridge_slave_0: entered allmulticast mode [ 80.292272][ T5842] bridge_slave_0: entered promiscuous mode [ 80.408080][ T59] Bluetooth: hci4: command tx timeout [ 80.408188][ T59] Bluetooth: hci3: command tx timeout [ 80.499189][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.499324][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.499903][ T5842] bridge_slave_1: entered allmulticast mode [ 80.502686][ T5842] bridge_slave_1: entered promiscuous mode [ 80.668645][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.668783][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.668962][ T5834] bridge_slave_0: entered allmulticast mode [ 80.671414][ T5834] bridge_slave_0: entered promiscuous mode [ 80.743095][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.817348][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.817537][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.817712][ T5834] bridge_slave_1: entered allmulticast mode [ 80.820403][ T5834] bridge_slave_1: entered promiscuous mode [ 80.912155][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.992755][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.992866][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.993005][ T5847] bridge_slave_0: entered allmulticast mode [ 80.994624][ T5847] bridge_slave_0: entered promiscuous mode [ 81.070212][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.188409][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.188550][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.188724][ T5847] bridge_slave_1: entered allmulticast mode [ 81.191424][ T5847] bridge_slave_1: entered promiscuous mode [ 81.351837][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.417685][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.417788][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.417907][ T5849] bridge_slave_0: entered allmulticast mode [ 81.419380][ T5849] bridge_slave_0: entered promiscuous mode [ 81.501651][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.599663][ T5838] team0: Port device team_slave_0 added [ 81.607487][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.607614][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.607820][ T5849] bridge_slave_1: entered allmulticast mode [ 81.610675][ T5849] bridge_slave_1: entered promiscuous mode [ 81.651453][ T990] cfg80211: failed to load regulatory.db [ 81.721608][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.818564][ T5838] team0: Port device team_slave_1 added [ 81.927243][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.025321][ T5842] team0: Port device team_slave_0 added [ 82.162020][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.241637][ T5842] team0: Port device team_slave_1 added [ 82.321700][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.336264][ T5841] Bluetooth: hci1: command tx timeout [ 82.336294][ T5841] Bluetooth: hci2: command tx timeout [ 82.336315][ T5841] Bluetooth: hci0: command tx timeout [ 82.409765][ T5834] team0: Port device team_slave_0 added [ 82.486290][ T59] Bluetooth: hci3: command tx timeout [ 82.486323][ T59] Bluetooth: hci4: command tx timeout [ 82.719358][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.719374][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.719397][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.724764][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.842329][ T5834] team0: Port device team_slave_1 added [ 82.918604][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.918618][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.918631][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.029584][ T5847] team0: Port device team_slave_0 added [ 83.100269][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.100281][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.100294][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.208840][ T5847] team0: Port device team_slave_1 added [ 83.294393][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.294408][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.294430][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.303287][ T5849] team0: Port device team_slave_0 added [ 83.398207][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.398223][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.398245][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.414266][ T5849] team0: Port device team_slave_1 added [ 83.499295][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.499311][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.499333][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.649948][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.649964][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.649987][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.919090][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.919104][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.919127][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.017409][ T5838] hsr_slave_0: entered promiscuous mode [ 84.018856][ T5838] hsr_slave_1: entered promiscuous mode [ 84.020476][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.020488][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.020501][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.130883][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.130897][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.130920][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.251850][ T5842] hsr_slave_0: entered promiscuous mode [ 84.252582][ T5842] hsr_slave_1: entered promiscuous mode [ 84.253327][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 84.253414][ T5842] Cannot create hsr debugfs directory [ 84.406232][ T5841] Bluetooth: hci0: command tx timeout [ 84.406262][ T5841] Bluetooth: hci2: command tx timeout [ 84.406282][ T5841] Bluetooth: hci1: command tx timeout [ 84.529889][ T5834] hsr_slave_0: entered promiscuous mode [ 84.530693][ T5834] hsr_slave_1: entered promiscuous mode [ 84.531234][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 84.531253][ T5834] Cannot create hsr debugfs directory [ 84.576392][ T59] Bluetooth: hci4: command tx timeout [ 84.576425][ T59] Bluetooth: hci3: command tx timeout [ 84.885227][ T5847] hsr_slave_0: entered promiscuous mode [ 84.886400][ T5847] hsr_slave_1: entered promiscuous mode [ 84.887225][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 84.887246][ T5847] Cannot create hsr debugfs directory [ 85.274764][ T5849] hsr_slave_0: entered promiscuous mode [ 85.275555][ T5849] hsr_slave_1: entered promiscuous mode [ 85.276749][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 85.276772][ T5849] Cannot create hsr debugfs directory [ 86.487164][ T5841] Bluetooth: hci1: command tx timeout [ 86.487211][ T5841] Bluetooth: hci2: command tx timeout [ 86.487232][ T5841] Bluetooth: hci0: command tx timeout [ 86.612546][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.646270][ T59] Bluetooth: hci3: command tx timeout [ 86.646302][ T59] Bluetooth: hci4: command tx timeout [ 86.654515][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.707240][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.769475][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.885039][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.914031][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.962581][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.998955][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.175908][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.206932][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.242020][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.285710][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.454293][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.491520][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.514711][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.574776][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.721786][ T5849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.799326][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.801484][ T5849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.864354][ T5849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.899946][ T5849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.031599][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.054438][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.090564][ T1406] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.090869][ T1406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.134458][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.134611][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.209576][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.253315][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.264674][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.264823][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.317349][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.317513][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.381781][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.433233][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.433377][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.464103][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.492373][ T1406] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.492587][ T1406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.635568][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.647054][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.733284][ T1432] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.733592][ T1432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.855352][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.855521][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.925171][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.999709][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.999857][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.071667][ T1510] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.076271][ T1510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.109126][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.328138][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.521400][ T5838] veth0_vlan: entered promiscuous mode [ 89.571350][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.611903][ T5838] veth1_vlan: entered promiscuous mode [ 89.735162][ T5842] veth0_vlan: entered promiscuous mode [ 89.838220][ T5842] veth1_vlan: entered promiscuous mode [ 89.865040][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.888713][ T5838] veth0_macvtap: entered promiscuous mode [ 89.919973][ T5838] veth1_macvtap: entered promiscuous mode [ 90.004537][ T5834] veth0_vlan: entered promiscuous mode [ 90.034564][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.059967][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.097131][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.129201][ T5834] veth1_vlan: entered promiscuous mode [ 90.131967][ T5842] veth0_macvtap: entered promiscuous mode [ 90.233806][ T5842] veth1_macvtap: entered promiscuous mode [ 90.250005][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.258948][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.302353][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.324651][ T1484] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.339167][ T5847] veth0_vlan: entered promiscuous mode [ 90.435232][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.503004][ T5847] veth1_vlan: entered promiscuous mode [ 90.512226][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.595857][ T5834] veth0_macvtap: entered promiscuous mode [ 90.623361][ T1406] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.643114][ T1406] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.669141][ T5834] veth1_macvtap: entered promiscuous mode [ 90.670631][ T1406] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.675378][ T1406] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.724467][ T1406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.724489][ T1406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.901039][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.979415][ T1484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.979435][ T1484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.033103][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.047076][ T5847] veth0_macvtap: entered promiscuous mode [ 91.082192][ T5849] veth0_vlan: entered promiscuous mode [ 91.150364][ T5847] veth1_macvtap: entered promiscuous mode [ 91.152412][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.181362][ T1510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.181379][ T1510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.182858][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.199881][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.221930][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.225178][ T5849] veth1_vlan: entered promiscuous mode [ 91.461211][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.465035][ T1510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.465052][ T1510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.580091][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.706334][ T1484] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.728497][ T1484] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.740854][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.740872][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.746207][ T1484] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.752740][ T1484] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.771520][ T5849] veth0_macvtap: entered promiscuous mode [ 91.920192][ T5849] veth1_macvtap: entered promiscuous mode [ 92.053994][ T1484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.054015][ T1484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.203912][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.290226][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.414264][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.414594][ T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.414840][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.415111][ T67] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.444249][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.444267][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.747470][ T1484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.747489][ T1484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.192738][ T1406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.192757][ T1406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.455672][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.455691][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.997295][ T5990] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17'. [ 95.286744][ T5886] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.475385][ T5886] usb 1-1: config 0 has an invalid interface number: 204 but max is 0 [ 95.475408][ T5886] usb 1-1: config 0 has no interface number 0 [ 95.522128][ T5886] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 95.522155][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.522173][ T5886] usb 1-1: Product: syz [ 95.522185][ T5886] usb 1-1: Manufacturer: syz [ 95.522197][ T5886] usb 1-1: SerialNumber: syz [ 95.632240][ T5886] usb 1-1: config 0 descriptor?? [ 95.669451][ T5886] ems_usb 1-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 95.669940][ T5886] ems_usb 1-1:0.204: probe with driver ems_usb failed with error -22 [ 96.143117][ T5914] usb 1-1: USB disconnect, device number 2 [ 96.200768][ T6038] Illegal XDP return value 4294967294 on prog (id 6) dev N/A, expect packet loss! [ 96.249652][ T6039] process 'syz.4.34' launched '/dev/fd/3' with NULL argv: empty string added [ 96.476600][ T5901] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.658562][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 96.662797][ T5901] usb 2-1: unable to get BOS descriptor or descriptor too short [ 96.664990][ T5901] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 96.665010][ T5901] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.665027][ T5901] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.700917][ T5901] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 96.700944][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.700961][ T5901] usb 2-1: Product: syz [ 96.700973][ T5901] usb 2-1: Manufacturer: syz [ 96.700985][ T5901] usb 2-1: SerialNumber: syz [ 96.959844][ T6037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.961331][ T6037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.069235][ T6050] netlink: 32 bytes leftover after parsing attributes in process `syz.4.38'. [ 97.102881][ T5901] usb 2-1: 0:2 : does not exist [ 97.201947][ T6051] loop4: detected capacity change from 0 to 524255232 [ 97.553879][ T5901] usb 2-1: USB disconnect, device number 2 [ 97.607410][ T6050] netlink: 152 bytes leftover after parsing attributes in process `syz.4.38'. [ 97.608884][ T6050] netlink: 152 bytes leftover after parsing attributes in process `syz.4.38'. [ 97.728973][ T6054] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.043868][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.146401][ T5901] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.311104][ T5901] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 98.311126][ T5901] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.311141][ T5901] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.316896][ T5901] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 98.316921][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.316938][ T5901] usb 2-1: Product: syz [ 98.316950][ T5901] usb 2-1: Manufacturer: syz [ 98.316961][ T5901] usb 2-1: SerialNumber: syz [ 98.736356][ T5901] usb 2-1: 0:2 : does not exist [ 99.032219][ T5901] usb 2-1: USB disconnect, device number 3 [ 99.547784][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.597352][ T6081] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.915262][ T1406] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.915386][ T6088] Zero length message leads to an empty skb [ 99.943516][ T1406] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.943563][ T1406] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.943595][ T1406] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.607539][ T6045] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.778498][ T6045] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.778556][ T6045] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 101.778576][ T6045] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.784111][ T6045] usb 2-1: config 0 descriptor?? [ 101.807541][ T6045] pwc: Askey VC010 type 2 USB webcam detected. [ 102.233668][ T6045] pwc: recv_control_msg error -32 req 02 val 2b00 [ 102.436392][ T6045] pwc: recv_control_msg error -71 req 02 val 2c00 [ 102.438470][ T6045] pwc: recv_control_msg error -71 req 04 val 1000 [ 102.440474][ T6045] pwc: recv_control_msg error -71 req 04 val 1300 [ 102.442462][ T6045] pwc: recv_control_msg error -71 req 04 val 1400 [ 102.448159][ T6045] pwc: recv_control_msg error -71 req 02 val 2000 [ 102.448726][ T6045] pwc: recv_control_msg error -71 req 02 val 2100 [ 102.450335][ T6045] pwc: recv_control_msg error -71 req 04 val 1500 [ 102.462826][ T6045] pwc: recv_control_msg error -71 req 02 val 2500 [ 102.465641][ T6045] pwc: recv_control_msg error -71 req 02 val 2400 [ 102.472915][ T6045] pwc: recv_control_msg error -71 req 02 val 2600 [ 102.474025][ T6045] pwc: recv_control_msg error -71 req 02 val 2900 [ 102.474498][ T6045] pwc: recv_control_msg error -71 req 02 val 2800 [ 102.475434][ T6045] pwc: recv_control_msg error -71 req 04 val 1100 [ 102.476967][ T6045] pwc: recv_control_msg error -71 req 04 val 1200 [ 102.498688][ T6045] pwc: Registered as video103. [ 102.539402][ T6045] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 102.708339][ T6045] usb 2-1: USB disconnect, device number 4 [ 103.086130][ T5914] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.262965][ T5914] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 103.262989][ T5914] usb 3-1: config 0 has no interface number 0 [ 103.290784][ T5914] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 103.290811][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.290827][ T5914] usb 3-1: Product: syz [ 103.290837][ T5914] usb 3-1: Manufacturer: syz [ 103.290848][ T5914] usb 3-1: SerialNumber: syz [ 103.308197][ T5914] usb 3-1: config 0 descriptor?? [ 103.386130][ T5901] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.552097][ T5914] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 103.570174][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 103.583437][ T5901] usb 4-1: config 0 interface 0 has no altsetting 0 [ 103.583472][ T5901] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 103.583490][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.600325][ T5901] usb 4-1: config 0 descriptor?? [ 103.613824][ T5914] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 103.614443][ T5914] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 103.614518][ T5914] usb 3-1: media controller created [ 103.833776][ T6154] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.81'. [ 103.957698][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.098482][ T5901] hid (null): global environment stack underflow [ 104.098525][ T5901] hid (null): report_id 0 is invalid [ 104.106938][ T5901] hid (null): global environment stack underflow [ 104.107051][ T5901] hid (null): unknown global tag 0xc [ 104.107064][ T5901] hid (null): report_id 25068 is invalid [ 104.107127][ T5901] hid (null): report_id 0 is invalid [ 104.107139][ T5901] hid (null): global environment stack overflow [ 104.108404][ T5901] hid (null): unknown global tag 0xc [ 104.108418][ T5901] hid (null): unknown global tag 0x58 [ 104.162820][ T5914] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 104.328573][ T31] usb 4-1: USB disconnect, device number 2 [ 104.516584][ T5914] usb 3-1: USB disconnect, device number 2 [ 104.927137][ T5914] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 105.058707][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.91'. [ 105.060173][ T6175] netlink: 36 bytes leftover after parsing attributes in process `syz.4.91'. [ 105.086307][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 105.095252][ T5914] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.095309][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 105.095332][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 105.095351][ T5914] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 105.095370][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.096915][ T5914] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 105.096939][ T5914] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 105.096955][ T5914] usb 3-1: Manufacturer: syz [ 105.129995][ T5914] usb 3-1: config 0 descriptor?? [ 105.536485][ T5914] rc_core: IR keymap rc-hauppauge not found [ 105.536503][ T5914] Registered IR keymap rc-empty [ 105.537080][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.556189][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.582649][ T5914] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 105.593377][ T5914] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 105.605838][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.639779][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.666239][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.687525][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.706205][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.730918][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.749226][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.766874][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.786360][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.808867][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.870012][ T5914] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 105.870035][ T5914] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 105.902329][ T5914] usb 3-1: USB disconnect, device number 3 [ 107.310176][ T5885] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 107.459662][ T5885] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 107.459688][ T5885] usb 3-1: config 0 has no interface number 0 [ 107.462754][ T5885] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 107.462778][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.462795][ T5885] usb 3-1: Product: syz [ 107.462807][ T5885] usb 3-1: Manufacturer: syz [ 107.462820][ T5885] usb 3-1: SerialNumber: syz [ 107.474042][ T6225] input: syz1 as /devices/virtual/input/input7 [ 107.528765][ T5885] usb 3-1: config 0 descriptor?? [ 108.403241][ T5885] usb 3-1: Firmware version (0.0) predates our first public release. [ 108.403273][ T5885] usb 3-1: Please update to version 0.2 or newer [ 108.542553][ T5885] usb 3-1: USB disconnect, device number 4 [ 108.851407][ T6241] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 109.316208][ T6045] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.496143][ T6045] usb 4-1: Using ep0 maxpacket: 8 [ 109.501702][ T6045] usb 4-1: config 3 has an invalid interface number: 45 but max is 0 [ 109.501726][ T6045] usb 4-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 109.501742][ T6045] usb 4-1: config 3 has no interface number 0 [ 109.501807][ T6045] usb 4-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.501831][ T6045] usb 4-1: config 3 interface 45 has no altsetting 0 [ 109.505248][ T6045] usb 4-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 109.505273][ T6045] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.505289][ T6045] usb 4-1: Product: syz [ 109.505301][ T6045] usb 4-1: Manufacturer: syz [ 109.505313][ T6045] usb 4-1: SerialNumber: syz [ 109.986812][ T6256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.029146][ T6045] usb 4-1: USB disconnect, device number 3 [ 110.044109][ T6261] netlink: 60 bytes leftover after parsing attributes in process `syz.1.127'. [ 110.052900][ T6260] netlink: 60 bytes leftover after parsing attributes in process `syz.1.127'. [ 110.066503][ T6260] netlink: 60 bytes leftover after parsing attributes in process `syz.1.127'. [ 110.333486][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.137090][ T6286] netlink: 212296 bytes leftover after parsing attributes in process `syz.0.139'. [ 111.236148][ T6045] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 111.396128][ T6045] usb 2-1: Using ep0 maxpacket: 16 [ 111.411917][ T6045] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.411946][ T6045] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.411981][ T6045] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 111.412000][ T6045] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.430512][ T6045] usb 2-1: config 0 descriptor?? [ 111.526163][ T5885] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.682013][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 111.684435][ T5885] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 111.684459][ T5885] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 111.684499][ T5885] usb 4-1: config 0 has no interface number 0 [ 111.684546][ T5885] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.684566][ T5885] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 111.684589][ T5885] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 111.736242][ T5885] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 111.736270][ T5885] usb 4-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 111.736288][ T5885] usb 4-1: Product: syz [ 111.736300][ T5885] usb 4-1: Manufacturer: syz [ 111.784596][ T5885] usb 4-1: config 0 descriptor?? [ 111.785758][ T6288] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 112.001106][ T6045] corsair 0003:1B1C:1B02.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 112.332495][ T6045] usb 2-1: USB disconnect, device number 5 [ 112.435330][ T6303] fido_id[6303]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 112.529542][ T5885] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input8 [ 112.684876][ C0] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 112.686091][ T5885] usb 4-1: USB disconnect, device number 4 [ 112.962555][ T6316] netlink: 76 bytes leftover after parsing attributes in process `syz.0.152'. [ 113.658013][ T5885] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 113.696501][ T6331] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 113.712549][ T43] Bluetooth: hci5: Frame reassembly failed (-84) [ 113.817375][ T5885] usb 4-1: config 7 has an invalid interface number: 101 but max is 0 [ 113.817400][ T5885] usb 4-1: config 7 has no interface number 0 [ 113.829426][ T5885] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 113.829453][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.829470][ T5885] usb 4-1: Product: syz [ 113.829483][ T5885] usb 4-1: Manufacturer: syz [ 113.829496][ T5885] usb 4-1: SerialNumber: syz [ 114.678098][ T5885] as10x_usb: device has been detected [ 114.679064][ T5885] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 114.743612][ T5885] usb 4-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 115.005034][ T5885] as10x_usb: error during firmware upload part1 [ 115.005760][ T5885] Registered device Elgato EyeTV DTT Deluxe [ 115.030884][ T5885] usb 4-1: USB disconnect, device number 5 [ 115.107959][ T5885] Unregistered device Elgato EyeTV DTT Deluxe [ 115.110859][ T5885] as10x_usb: device has been disconnected [ 115.686123][ T5841] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 117.596262][ T5901] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 117.756119][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 117.766257][ T5901] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 117.766282][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.766299][ T5901] usb 4-1: Product: syz [ 117.766310][ T5901] usb 4-1: Manufacturer: syz [ 117.766321][ T5901] usb 4-1: SerialNumber: syz [ 117.774473][ T5901] usb 4-1: config 0 descriptor?? [ 118.042426][ T5901] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 118.228044][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 118.280433][ T6452] dvmrp0: tun_chr_ioctl cmd 2148553947 [ 118.384367][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 118.384394][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.419115][ T9] usb 3-1: config 0 descriptor?? [ 118.484602][ T9] cp210x 3-1:0.0: cp210x converter detected [ 118.646033][ T5901] usb write operation failed. (-71) [ 118.651220][ T5901] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 118.651776][ T5901] dvbdev: DVB: registering new adapter (Terratec H7) [ 118.651824][ T5901] usb 4-1: media controller created [ 118.652246][ T5901] usb read operation failed. (-71) [ 118.652678][ T5901] usb write operation failed. (-71) [ 118.704192][ T6457] binder: 6455:6457 ioctl c0306201 200000000100 returned -14 [ 118.732266][ T5901] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 118.776384][ T5901] usb 4-1: USB disconnect, device number 6 [ 118.841158][ T9] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 118.867508][ T9] usb 3-1: cp210x converter now attached to ttyUSB0 [ 119.082892][ T9] usb 3-1: USB disconnect, device number 5 [ 119.105136][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 119.246657][ T9] cp210x 3-1:0.0: device disconnected [ 119.430047][ T6473] program syz.3.219 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.522097][ T6492] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 120.956532][ T6498] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 120.956800][ T6498] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 120.956962][ T6498] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 120.957129][ T6498] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 120.957275][ T6498] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 120.957421][ T6498] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 120.957643][ T6498] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 120.957794][ T6498] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 120.957951][ T6498] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 120.958099][ T6498] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 122.150081][ T6525] netlink: 'syz.1.239': attribute type 3 has an invalid length. [ 122.152931][ T6525] netlink: 'syz.1.239': attribute type 3 has an invalid length. [ 122.793414][ T6542] tap0: tun_chr_ioctl cmd 1074025677 [ 122.793693][ T6542] tap0: linktype set to 769 [ 124.412226][ T6589] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.507971][ T6589] ip6gre1: entered promiscuous mode [ 124.507999][ T6589] ip6gre1: entered allmulticast mode [ 125.251358][ T6618] netlink: 'syz.0.276': attribute type 1 has an invalid length. [ 125.251377][ T6618] netlink: 'syz.0.276': attribute type 3 has an invalid length. [ 125.251390][ T6618] netlink: 216 bytes leftover after parsing attributes in process `syz.0.276'. [ 125.251418][ T6618] NCSI netlink: No device for ifindex 813332851 [ 125.301995][ T6617] erspan0: entered promiscuous mode [ 125.366130][ T5955] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 125.516164][ T5955] usb 5-1: Using ep0 maxpacket: 16 [ 125.521447][ T5955] usb 5-1: config 0 has an invalid interface number: 203 but max is 0 [ 125.521479][ T5955] usb 5-1: config 0 has no interface number 0 [ 125.521525][ T5955] usb 5-1: config 0 interface 203 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 125.561262][ T5955] usb 5-1: New USB device found, idVendor=0499, idProduct=1026, bcdDevice=e8.af [ 125.561290][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.561308][ T5955] usb 5-1: Product: syz [ 125.561320][ T5955] usb 5-1: Manufacturer: syz [ 125.561331][ T5955] usb 5-1: SerialNumber: syz [ 125.618010][ T5955] usb 5-1: config 0 descriptor?? [ 125.619061][ T6610] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 125.651213][ T5955] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 126.946853][ T9] usb 5-1: USB disconnect, device number 2 [ 129.747808][ T6663] netlink: 'syz.2.297': attribute type 9 has an invalid length. [ 129.747830][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.297'. [ 129.781443][ T6663] hsr0: entered promiscuous mode [ 129.781963][ T6663] macvlan2: entered promiscuous mode [ 129.782215][ T6663] macvlan2: entered allmulticast mode [ 129.782227][ T6663] hsr0: entered allmulticast mode [ 129.782238][ T6663] hsr_slave_0: entered allmulticast mode [ 129.782257][ T6663] hsr_slave_1: entered allmulticast mode [ 130.488981][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 130.656598][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 130.661570][ T10] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 130.661593][ T10] usb 3-1: config 0 has no interface number 0 [ 130.696876][ T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 130.696903][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.696921][ T10] usb 3-1: Product: syz [ 130.696933][ T10] usb 3-1: Manufacturer: syz [ 130.696944][ T10] usb 3-1: SerialNumber: syz [ 130.705081][ T10] usb 3-1: config 0 descriptor?? [ 130.760605][ T10] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 130.947470][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 130.983291][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 131.181356][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 131.383318][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 131.393004][ T5901] usb 3-1: USB disconnect, device number 6 [ 131.457099][ T5901] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 131.527566][ T5901] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 131.528600][ T5901] quatech2 3-1:0.51: device disconnected [ 131.642091][ T6705] netlink: 'syz.4.319': attribute type 10 has an invalid length. [ 131.694180][ T6705] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 131.729974][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.320'. [ 132.815803][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.815908][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.962021][ T6736] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.221059][ T6745] mmap: syz.4.337 (6745) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 133.516812][ T37] audit: type=1326 audit(1756566043.761:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6751 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb13eebe9 code=0x7ffc0000 [ 133.516858][ T37] audit: type=1326 audit(1756566043.761:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6751 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb13eebe9 code=0x7ffc0000 [ 133.528593][ T37] audit: type=1326 audit(1756566043.781:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6751 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fdbb13eebe9 code=0x7ffc0000 [ 133.528869][ T37] audit: type=1326 audit(1756566043.781:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6751 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb13eebe9 code=0x7ffc0000 [ 133.532467][ T37] audit: type=1326 audit(1756566043.781:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6751 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb13eebe9 code=0x7ffc0000 [ 133.592047][ T37] audit: type=1326 audit(1756566043.841:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6751 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdbb13f0b07 code=0x7ffc0000 [ 133.592097][ T37] audit: type=1326 audit(1756566043.841:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6751 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fdbb13f0a7c code=0x7ffc0000 [ 133.593793][ T37] audit: type=1326 audit(1756566043.841:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6751 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fdbb13f09b4 code=0x7ffc0000 [ 133.593835][ T37] audit: type=1326 audit(1756566043.841:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6751 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fdbb13f09b4 code=0x7ffc0000 [ 133.593871][ T37] audit: type=1326 audit(1756566043.841:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6751 comm="syz.0.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdbb13ed84a code=0x7ffc0000 [ 134.096149][ T5901] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 134.147985][ T6766] ip6gre1: entered promiscuous mode [ 134.148014][ T6766] ip6gre1: entered allmulticast mode [ 134.256174][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 134.258806][ T5901] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 134.258828][ T5901] usb 1-1: config 0 has no interface number 0 [ 134.258877][ T5901] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.258899][ T5901] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.258934][ T5901] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 134.258953][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.264547][ T5901] usb 1-1: config 0 descriptor?? [ 134.496473][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.348'. [ 134.887614][ T5901] uclogic 0003:28BD:0094.0003: pen parameters not found [ 134.887641][ T5901] uclogic 0003:28BD:0094.0003: interface is invalid, ignoring [ 134.956566][ T6777] capability: warning: `syz.1.353' uses deprecated v2 capabilities in a way that may be insecure [ 135.105018][ T5885] usb 1-1: USB disconnect, device number 3 [ 135.898663][ T6800] ªªªªª»: renamed from veth0_vlan (while UP) [ 137.014903][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.376'. [ 137.907768][ T6860] netlink: 32 bytes leftover after parsing attributes in process `syz.0.389'. [ 137.907814][ T6860] netlink: 204 bytes leftover after parsing attributes in process `syz.0.389'. [ 137.907831][ T6860] netlink: 204 bytes leftover after parsing attributes in process `syz.0.389'. [ 138.103893][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'. [ 138.160751][ T6864] Bluetooth: MGMT ver 1.23 [ 138.587726][ T6878] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 140.078841][ T6919] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 140.434737][ T6927] misc userio: Invalid payload size [ 141.000838][ T6937] bridge0: entered promiscuous mode [ 141.001039][ T6937] macvlan2: entered promiscuous mode [ 141.038570][ T6943] team0: No ports can be present during mode change [ 141.645731][ T6960] netlink: 96 bytes leftover after parsing attributes in process `syz.4.433'. [ 141.742133][ T10] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 141.910321][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 141.910368][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 141.910388][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.951069][ T10] usb 3-1: config 0 descriptor?? [ 141.955140][ T6957] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 141.997529][ T6968] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 142.422077][ T10] ryos 0003:1E7D:3138.0004: unknown main item tag 0x0 [ 142.422115][ T10] ryos 0003:1E7D:3138.0004: unknown main item tag 0x1 [ 142.471508][ T10] ryos 0003:1E7D:3138.0004: hidraw0: USB HID v1.01 Device [HID 1e7d:3138] on usb-dummy_hcd.2-1/input0 [ 142.565207][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'. [ 142.616818][ T5914] usb 3-1: USB disconnect, device number 7 [ 142.722949][ T6984] fido_id[6984]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 145.429472][ T7047] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 145.429497][ T7047] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 145.448917][ T7047] vhci_hcd vhci_hcd.0: Device attached [ 145.726096][ T5914] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 145.726242][ T5885] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 145.886148][ T5914] usb 2-1: Using ep0 maxpacket: 16 [ 145.889585][ T5914] usb 2-1: config 0 has no interfaces? [ 145.889618][ T5914] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 145.889638][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.931496][ T5914] usb 2-1: config 0 descriptor?? [ 146.205581][ T7048] vhci_hcd: connection closed [ 146.226074][ T1402] vhci_hcd: stop threads [ 146.227502][ T1402] vhci_hcd: release socket [ 146.249598][ T9] usb 2-1: USB disconnect, device number 6 [ 146.273297][ T1402] vhci_hcd: disconnect device [ 146.548446][ T7074] netlink: 1 bytes leftover after parsing attributes in process `syz.2.485'. [ 146.929451][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.488'. [ 147.221563][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 147.578977][ T7082] bond0: (slave bond_slave_1): Releasing backup interface [ 147.843138][ T7098] netlink: 'syz.3.495': attribute type 1 has an invalid length. [ 147.843156][ T7098] netlink: 'syz.3.495': attribute type 2 has an invalid length. [ 147.897085][ T7099] netlink: 'syz.3.495': attribute type 1 has an invalid length. [ 147.897101][ T7099] netlink: 'syz.3.495': attribute type 2 has an invalid length. [ 147.949800][ T7102] netlink: 'syz.0.496': attribute type 1 has an invalid length. [ 147.949819][ T7102] netlink: 'syz.0.496': attribute type 2 has an invalid length. [ 147.949831][ T7102] netlink: 'syz.0.496': attribute type 1 has an invalid length. [ 147.949842][ T7102] netlink: 1156 bytes leftover after parsing attributes in process `syz.0.496'. [ 148.360337][ T7107] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 148.360790][ T7107] block device autoloading is deprecated and will be removed. [ 148.851045][ T7122] loop2: detected capacity change from 0 to 524287999 [ 149.258881][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.511'. [ 150.323637][ T7165] netlink: 'syz.2.524': attribute type 3 has an invalid length. [ 150.323656][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.524'. [ 150.323675][ T7165] netlink: 'syz.2.524': attribute type 3 has an invalid length. [ 150.323686][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.524'. [ 151.141782][ T7183] net_ratelimit: 45 callbacks suppressed [ 151.141799][ T7183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.583275][ T31] kernel write not supported for file /input/event2 (pid: 31 comm: kworker/1:0) [ 153.237281][ T7230] kvm: user requested TSC rate below hardware speed [ 153.694984][ T7237] can0: slcan on ttyS3. [ 153.897257][ T7243] can0 (unregistered): slcan off ttyS3. [ 154.015433][ T7237] can0: slcan on ttyS3. [ 154.690398][ T7236] can0 (unregistered): slcan off ttyS3. [ 155.068286][ T7278] netlink: 888 bytes leftover after parsing attributes in process `syz.0.578'. [ 156.726239][ T5885] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 156.904948][ T5885] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 156.904976][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.904993][ T5885] usb 3-1: Product: syz [ 156.905005][ T5885] usb 3-1: Manufacturer: syz [ 156.905017][ T5885] usb 3-1: SerialNumber: syz [ 157.045327][ T5885] usb 3-1: config 0 descriptor?? [ 157.566106][ T5885] usb 3-1: USB disconnect, device number 8 [ 157.903167][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.446358][ T7308] warning: `syz.2.592' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 159.146254][ T5885] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 159.298853][ T5885] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.298877][ T5885] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.300428][ T5885] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 159.300451][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 159.300468][ T5885] usb 3-1: SerialNumber: syz [ 159.665016][ T5885] usb 3-1: 0:2 : does not exist [ 159.977183][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 159.983506][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 159.984722][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 160.027452][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 160.044013][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 160.121079][ T5885] usb 3-1: USB disconnect, device number 9 [ 160.434048][ T7327] netlink: 36 bytes leftover after parsing attributes in process `syz.0.600'. [ 160.516469][ T6313] udevd[6313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.167330][ T5841] Bluetooth: hci5: command tx timeout [ 162.707284][ T7356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.612'. [ 162.816643][ T5885] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 162.866389][ T5885] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 163.107224][ T7320] chnl_net:caif_netlink_parms(): no params data found [ 164.246375][ T5841] Bluetooth: hci5: command tx timeout [ 165.251268][ T5885] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 165.406308][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 165.409092][ T5885] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 165.409118][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.442146][ T5885] usb 3-1: config 0 descriptor?? [ 165.697572][ T5885] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 165.728478][ T5885] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 165.749330][ T5885] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 165.749386][ T5885] usb 3-1: media controller created [ 165.890501][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.098200][ T5885] az6027: usb out operation failed. (-71) [ 166.116193][ T5885] az6027: usb out operation failed. (-71) [ 166.116210][ T5885] stb0899_attach: Driver disabled by Kconfig [ 166.116218][ T5885] az6027: no front-end attached [ 166.116218][ T5885] [ 166.117217][ T5885] az6027: usb out operation failed. (-71) [ 166.117231][ T5885] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 166.120918][ T5885] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 166.198281][ T5885] dvb-usb: schedule remote query interval to 400 msecs. [ 166.198301][ T5885] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 166.246314][ T5885] usb 3-1: USB disconnect, device number 10 [ 166.251604][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 166.326302][ T5841] Bluetooth: hci5: command tx timeout [ 166.817091][ T5841] Bluetooth: hci3: unknown advertising packet type: 0xcb [ 166.817109][ T5841] Bluetooth: hci3: unknown advertising packet type: 0x2b [ 166.817123][ T5841] Bluetooth: hci3: unknown advertising packet type: 0x21 [ 166.817134][ T5841] Bluetooth: hci3: unknown advertising packet type: 0x8e [ 166.817145][ T5841] Bluetooth: hci3: unknown advertising packet type: 0xae [ 166.817156][ T5841] Bluetooth: hci3: unknown advertising packet type: 0x2e [ 166.817167][ T5841] Bluetooth: hci3: unknown advertising packet type: 0x77 [ 168.412238][ T5841] Bluetooth: hci5: command tx timeout [ 173.335178][ T7417] bpf: Bad value for 'uid' [ 173.899945][ T87] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 173.900270][ T87] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 174.359768][ T5885] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 174.457421][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 174.477353][ T7427] netlink: 'syz.2.640': attribute type 1 has an invalid length. [ 175.283119][ T7438] netlink: 'syz.2.645': attribute type 9 has an invalid length. [ 175.283142][ T7438] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.645'. [ 176.356183][ T5885] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 176.511563][ T5885] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 176.511590][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.570190][ T5885] usb 1-1: config 0 descriptor?? [ 176.574097][ T5885] cp210x 1-1:0.0: cp210x converter detected [ 177.041398][ T5885] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 177.079523][ T7453] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 177.114026][ T5885] usb 1-1: cp210x converter now attached to ttyUSB0 [ 177.294287][ T9] usb 1-1: USB disconnect, device number 4 [ 177.348478][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 177.486776][ T9] cp210x 1-1:0.0: device disconnected [ 177.606335][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 178.864231][ T7453] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 178.864375][ T7453] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 178.864509][ T7453] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 178.864642][ T7453] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 178.864778][ T7453] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 178.864906][ T7453] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 178.865038][ T7453] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 178.865171][ T7453] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 178.865299][ T7453] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 179.494445][ T5885] IPVS: starting estimator thread 0... [ 179.596423][ T7475] IPVS: using max 6 ests per chain, 14400 per kthread [ 184.167920][ T7320] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.170776][ T7320] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.171029][ T7320] bridge_slave_0: entered allmulticast mode [ 184.206268][ T7320] bridge_slave_0: entered promiscuous mode [ 184.260294][ T7495] tap0: tun_chr_ioctl cmd 1074025677 [ 184.260515][ T7495] tap0: linktype set to 804 [ 184.305088][ T7320] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.305231][ T7320] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.305481][ T7320] bridge_slave_1: entered allmulticast mode [ 184.346400][ T7320] bridge_slave_1: entered promiscuous mode [ 185.246214][ T5885] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 185.286197][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 185.399143][ T5885] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 185.399170][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.440166][ T5885] usb 4-1: config 0 descriptor?? [ 186.150272][ T5885] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 186.150856][ T5885] asix 4-1:0.0: probe with driver asix failed with error -71 [ 186.250759][ T5885] usb 4-1: USB disconnect, device number 7 [ 188.135251][ T67] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.135284][ T67] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.250968][ T7532] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 194.080385][ T1484] wlan1: Trigger new scan to find an IBSS to join [ 194.374259][ T7547] netlink: 'syz.0.689': attribute type 16 has an invalid length. [ 194.374280][ T7547] netlink: 'syz.0.689': attribute type 17 has an invalid length. [ 194.473511][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.482649][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.288602][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 203.423432][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 203.660499][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 203.781754][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 203.781795][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 220.055366][ T6557] sched: DL replenish lagged too much [ 224.939918][ T6560] wlan1: Trigger new scan to find an IBSS to join [ 232.009133][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 277.341113][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 277.350180][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 289.708432][ T59] Bluetooth: hci5: command 0x0406 tx timeout [ 291.530343][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 298.824926][ T7556] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 303.264822][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 305.181768][ T7586] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 331.879821][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 331.888924][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 336.390306][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 336.411444][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 336.419816][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 336.421039][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 338.476126][ T5836] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 339.363985][ T5836] Bluetooth: hci4: command 0x0c38 tx timeout [ 339.364352][ T59] Bluetooth: hci4: Opcode 0x0c38 failed: -110 [ 341.468448][ T7597] Bluetooth: hci6: Opcode 0x0c03 failed: -4 [ 342.399169][ T7556] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.399200][ T7556] Bluetooth: hci4: unexpected event for opcode 0x0c38 [ 342.412647][ T7556] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 343.488295][ T7596] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 344.762434][ T38] INFO: task kworker/u8:8:1432 blocked for more than 148 seconds. [ 344.762471][ T38] Not tainted syzkaller #0 [ 344.762481][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 344.762494][ T38] task:kworker/u8:8 state:D stack:23432 pid:1432 tgid:1432 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 344.762550][ T38] Workqueue: events_unbound linkwatch_event [ 344.762587][ T38] Call Trace: [ 344.762594][ T38] [ 344.762609][ T38] __schedule+0x16f3/0x4c20 [ 344.762660][ T38] ? __pfx___schedule+0x10/0x10 [ 344.762700][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 344.762726][ T38] rt_mutex_schedule+0x77/0xf0 [ 344.762744][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 344.762770][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 344.762807][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 344.762828][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 344.762848][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 344.762877][ T38] ? linkwatch_event+0xe/0x60 [ 344.762907][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 344.762934][ T38] ? linkwatch_event+0xe/0x60 [ 344.762954][ T38] mutex_lock_nested+0x16a/0x1d0 [ 344.762970][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 344.762991][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 344.763013][ T38] linkwatch_event+0xe/0x60 [ 344.763035][ T38] process_scheduled_works+0xade/0x17b0 [ 344.763087][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 344.763141][ T38] worker_thread+0x8a0/0xda0 [ 344.763191][ T38] kthread+0x711/0x8a0 [ 344.763218][ T38] ? __pfx_worker_thread+0x10/0x10 [ 344.763238][ T38] ? __pfx_kthread+0x10/0x10 [ 344.763267][ T38] ? __pfx_kthread+0x10/0x10 [ 344.763291][ T38] ret_from_fork+0x3f9/0x770 [ 344.763317][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 344.763344][ T38] ? __switch_to_asm+0x39/0x70 [ 344.763361][ T38] ? __switch_to_asm+0x33/0x70 [ 344.763376][ T38] ? __pfx_kthread+0x10/0x10 [ 344.763400][ T38] ret_from_fork_asm+0x1a/0x30 [ 344.763434][ T38] [ 344.763541][ T38] INFO: task syz.2.688:7544 blocked for more than 148 seconds. [ 344.763554][ T38] Not tainted syzkaller #0 [ 344.763562][ T38] Blo[ 344.763562][ T38] Blocked by coredump. [ 344.763567][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 344.763576][ T38] task:syz.2.688 state:D stack:25432 pid:7544 tgid:7542 ppid:5834 task_flags:0x40054c flags:0x00004002 [ 344.763623][ T38] Call Trace: [ 344.763629][ T38] [ 344.763641][ T38] __schedule+0x16f3/0x4c20 [ 344.763669][ T38] ? stack_depot_save_flags+0x41b/0x860 [ 344.763696][ T38] ? __lock_acquire+0xab9/0xd20 [ 344.763726][ T38] ? __pfx___schedule+0x10/0x10 [ 344.763773][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 344.763797][ T38] rt_mutex_schedule+0x77/0xf0 [ 344.763814][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 344.763832][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 344.763868][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 344.763889][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 344.763908][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 344.763937][ T38] ? bpf_xdp_link_release+0x29/0x550 [ 344.763971][ T38] ? bpf_xdp_link_release+0x29/0x550 [ 344.763988][ T38] mutex_lock_nested+0x16a/0x1d0 [ 344.764012][ T38] bpf_xdp_link_release+0x29/0x550 [ 344.764037][ T38] bpf_link_free+0x110/0x360 [ 344.764058][ T38] ? __pfx_bpf_link_release+0x10/0x10 [ 344.764078][ T38] bpf_link_release+0x6e/0x80 [ 344.764097][ T38] __fput+0x45b/0xa80 [ 344.764127][ T38] task_work_run+0x1d4/0x260 [ 344.764148][ T38] ? __pfx_task_work_run+0x10/0x10 [ 344.764177][ T38] do_exit+0x6b5/0x2300 [ 344.764194][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 344.764221][ T38] ? __lock_acquire+0xab9/0xd20 [ 344.764245][ T38] ? __pfx_do_exit+0x10/0x10 [ 344.764258][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 344.764280][ T38] ? rt_spin_lock+0x1bb/0x2c0 [ 344.764308][ T38] do_group_exit+0x21c/0x2d0 [ 344.764331][ T38] get_signal+0x125e/0x1310 [ 344.764376][ T38] arch_do_signal_or_restart+0x9a/0x750 [ 344.764404][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 344.764441][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 344.764467][ T38] exit_to_user_mode_loop+0x75/0x110 [ 344.764489][ T38] do_syscall_64+0x2bd/0x3b0 [ 344.764510][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 344.764530][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.764547][ T38] ? clear_bhb_loop+0x60/0xb0 [ 344.764569][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.764586][ T38] RIP: 0033:0x7f1bfc0bebe9 [ 344.764609][ T38] RSP: 002b:00007f1bfa2fd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 344.764626][ T38] RAX: fffffffffffffe00 RBX: 00007f1bfc2f6098 RCX: 00007f1bfc0bebe9 [ 344.764640][ T38] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1bfc2f6098 [ 344.764651][ T38] RBP: 00007f1bfc2f6090 R08: 0000000000000000 R09: 0000000000000000 [ 344.764662][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.764672][ T38] R13: 00007f1bfc2f6128 R14: 00007fff8480b230 R15: 00007fff8480b318 [ 344.764703][ T38] [ 344.764711][ T38] INFO: task syz.0.689:7547 blocked for more than 148 seconds. [ 344.764722][ T38] Not tainted syzkaller #0 [ 344.764731][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 344.764739][ T38] task:syz.0.689 state:D stack:22360 pid:7547 tgid:7545 ppid:5842 task_flags:0x400140 flags:0x00004006 [ 344.764787][ T38] Call Trace: [ 344.764792][ T38] [ 344.764804][ T38] __schedule+0x16f3/0x4c20 [ 344.764837][ T38] ? __pfx_vprintk_emit+0x10/0x10 [ 344.764852][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 344.764883][ T38] ? __pfx___schedule+0x10/0x10 [ 344.764919][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 344.764944][ T38] rt_mutex_schedule+0x77/0xf0 [ 344.764960][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 344.764978][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 344.765014][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 344.765034][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 344.765054][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 344.765069][ T38] ? __lock_acquire+0xab9/0xd20 [ 344.765101][ T38] ? rtnl_newlink+0x8db/0x1c70 [ 344.765122][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 344.765145][ T38] ? bpf_lsm_capable+0x9/0x20 [ 344.765164][ T38] ? security_capable+0x7e/0x2e0 [ 344.765191][ T38] ? rtnl_newlink+0x8db/0x1c70 [ 344.765207][ T38] mutex_lock_nested+0x16a/0x1d0 [ 344.765231][ T38] rtnl_newlink+0x8db/0x1c70 [ 344.765265][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 344.765282][ T38] ? migrate_enable+0x29c/0x3c0 [ 344.765309][ T38] ? __pfx_migrate_enable+0x10/0x10 [ 344.765344][ T38] ? __local_bh_enable+0x23f/0x3d0 [ 344.765367][ T38] ? __pfx___local_bh_enable+0x10/0x10 [ 344.765388][ T38] ? __pfx_handle_softirqs+0x10/0x10 [ 344.765412][ T38] ? __local_bh_enable_ip+0x1b2/0x270 [ 344.765433][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 344.765457][ T38] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 344.765476][ T38] ? dev_hard_start_xmit+0x7f5/0x870 [ 344.765499][ T38] ? __dev_queue_xmit+0x26f/0x3b70 [ 344.765522][ T38] ? __dev_queue_xmit+0x26f/0x3b70 [ 344.765538][ T38] ? __dev_queue_xmit+0x26f/0x3b70 [ 344.765556][ T38] ? __dev_queue_xmit+0x1d3d/0x3b70 [ 344.765578][ T38] ? __lock_acquire+0xab9/0xd20 [ 344.765625][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 344.765645][ T38] rtnetlink_rcv_msg+0x7cc/0xb70 [ 344.765669][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 344.765688][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 344.765706][ T38] ? ref_tracker_free+0x61e/0x7c0 [ 344.765728][ T38] ? __asan_memcpy+0x40/0x70 [ 344.765746][ T38] ? __pfx_ref_tracker_free+0x10/0x10 [ 344.765775][ T38] ? __skb_clone+0x63/0x7a0 [ 344.765809][ T38] netlink_rcv_skb+0x205/0x470 [ 344.765832][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 344.765854][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 344.765887][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 344.800642][ T38] netlink_unicast+0x843/0xa10 [ 344.800688][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 344.800710][ T38] ? netlink_sendmsg+0x642/0xb30 [ 344.800729][ T38] ? skb_put+0x11b/0x210 [ 344.800755][ T38] netlink_sendmsg+0x805/0xb30 [ 344.800794][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.800823][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 344.800842][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.800863][ T38] __sock_sendmsg+0x219/0x270 [ 344.800887][ T38] ____sys_sendmsg+0x508/0x820 [ 344.800917][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 344.800950][ T38] ? import_iovec+0x74/0xa0 [ 344.800974][ T38] ___sys_sendmsg+0x21f/0x2a0 [ 344.801000][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 344.801062][ T38] ? __fget_files+0x2a/0x420 [ 344.801084][ T38] ? __fget_files+0x3a6/0x420 [ 344.801118][ T38] __x64_sys_sendmsg+0x1a1/0x260 [ 344.801144][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 344.801179][ T38] ? rcu_is_watching+0x15/0xb0 [ 344.801208][ T38] ? do_syscall_64+0xbe/0x3b0 [ 344.801236][ T38] do_syscall_64+0xfa/0x3b0 [ 344.801256][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 344.801277][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.801294][ T38] ? clear_bhb_loop+0x60/0xb0 [ 344.801316][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.801333][ T38] RIP: 0033:0x7fdbb13eebe9 [ 344.801349][ T38] RSP: 002b:00007fdbaf64e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.801368][ T38] RAX: ffffffffffffffda RBX: 00007fdbb1625fa0 RCX: 00007fdbb13eebe9 [ 344.801381][ T38] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 344.801392][ T38] RBP: 00007fdbb1471e19 R08: 0000000000000000 R09: 0000000000000000 [ 344.801403][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.801413][ T38] R13: 00007fdbb1626038 R14: 00007fdbb1625fa0 R15: 00007ffcb2bce638 [ 344.801444][ T38] [ 344.801486][ T38] [ 344.801486][ T38] Showing all locks held in the system: [ 344.801495][ T38] 4 locks held by kworker/R-rcu_g/4: [ 344.801505][ T38] #0: ffff88801989a938 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 344.801550][ T38] #1: ffffc90000097ba0 ((work_completion)(&sdp->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 344.801594][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 344.801637][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 344.801681][ T38] 4 locks held by kworker/0:0/9: [ 344.801691][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 344.801734][ T38] #1: ffffc900000e7bc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 344.801784][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 344.801826][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 344.801869][ T38] 4 locks held by kworker/0:1/10: [ 344.801879][ T38] #0: ffff88805c906938 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 344.801922][ T38] #1: ffffc900000f7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 344.801977][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 344.802019][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 344.802062][ T38] 5 locks held by kworker/u8:0/12: [ 344.802073][ T38] 2 locks held by ksoftirqd/0/15: [ 344.802082][ T38] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 344.802124][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 344.802167][ T38] 4 locks held by pr/legacy/17: [ 344.802177][ T38] 2 locks held by rcuc/0/20: [ 344.802186][ T38] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 344.802228][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 344.802272][ T38] 8 locks held by ktimers/1/29: [ 344.802282][ T38] 2 locks held by ksoftirqd/1/30: [ 344.802290][ T38] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 344.802332][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 344.802374][ T38] 4 locks held by kworker/1:0/31: [ 344.802384][ T38] #0: ffff888037098138 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 344.802431][ T38] #1: ffffc90000a5fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 344.802485][ T38] #2: ffff88805cb155f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x115/0x970 [ 344.802528][ T38] #3: ffff888037041928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x126/0x970 [ 344.802570][ T38] 1 lock held by khungtaskd/38: [ 344.802580][ T38] #0: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 344.802621][ T38] 4 locks held by kworker/u8:2/43: [ 344.802630][ T38] #0: ffff88803c557138 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 344.802677][ T38] #1: ffffc90000b47bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 344.802722][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 344.802770][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 344.802815][ T38] 4 locks held by kworker/u8:3/57: [ 344.802824][ T38] #0: ffff88803166b938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 344.802867][ T38] #1: ffffc9000123fbc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 344.802911][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 344.802953][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 344.802996][ T38] 7 locks held by kworker/u8:4/67: [ 344.803007][ T38] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 344.803049][ T38] #1: ffffc9000153fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 344.803091][ T38] #2: ffffffff8ecc53c0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 344.803134][ T38] #3: ffff888037fe70d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 344.803180][ T38] #4: ffff888021388300 (&devlink->lock_key#5){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 344.803230][ T38] #5: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xe5/0x670 [ 344.803276][ T38] #6: ffff888023894e90 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x52f/0x1fe0 [ 344.803323][ T38] 5 locks held by kworker/u8:5/87: [ 344.803332][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 344.803375][ T38] #1: ffffc9000158fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 344.803419][ T38] #2: ffff88805f990898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 344.803462][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 344.803504][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 344.803554][ T38] 4 locks held by kworker/0:2/990: [ 344.803564][ T38] #0: ffff888031779938 ((wq_completion)wg-crypt-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 344.803607][ T38] #1: ffffc90004aafbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 344.803661][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 344.803702][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 344.803745][ T38] 5 locks held by kworker/u8:6/1402: [ 344.803755][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 344.803805][ T38] #1: ffffc9000583fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 344.803847][ T38] #2: ffff888049f10898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 344.803890][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 344.803930][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 344.803974][ T38] 5 locks held by kworker/u8:7/1406: [ 344.803983][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 344.804026][ T38] #1: ffffc9000590fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 344.804067][ T38] #2: ffff88805efa0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 344.804110][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 344.804152][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 344.804195][ T38] 3 locks held by kworker/u8:8/1432: [ 344.804205][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 344.804248][ T38] #1: ffffc9000595fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 344.804290][ T38] #2: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 344.804336][ T38] 5 locks held by kworker/u8:9/1458: [ 344.804345][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 344.804388][ T38] #1: ffffc90005adfbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 344.804430][ T38] #2: ffff88805f580898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 344.804471][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 344.804512][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 344.804557][ T38] 7 locks held by kworker/u8:11/1510: [ 344.804566][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 344.804609][ T38] #1: ffffc90005c2fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 344.804654][ T38] #2: ffff88805e1cc300 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 344.804703][ T38] #3: ffff888030544920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 344.804747][ T38] #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 344.804794][ T38] #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 344.804836][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 344.804898][ T38] 6 locks held by kworker/u9:1/5154: [ 344.804909][ T38] #0: ffff8880282e4138 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 344.804952][ T38] #1: ffffc90010347bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 344.804995][ T38] #2: ffff88803fa28e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 344.805043][ T38] #3: ffff88803fa280a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 344.805086][ T38] #4: ffffffff8ee39c38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 344.805129][ T38] #5: ffff888031669358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 344.805179][ T38] 3 locks held by udevd/5205: [ 344.805188][ T38] #0: ffff888021ede350 (sk_lock-AF_NETLINK){+.+.}-{0:0}, at: netlink_insert+0xd3/0x1370 [ 344.805229][ T38] #1: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 344.805270][ T38] #2: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 344.805313][ T38] 2 locks held by getty/5596: [ 344.805323][ T38] #0: ffff88823bf320a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 344.805368][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 344.805410][ T38] 4 locks held by kworker/0:3/5839: [ 344.805419][ T38] #0: ffff888037098538 ((wq_completion)wg-crypt-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 344.805467][ T38] #1: ffffc90004b5fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 344.805521][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 344.805562][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 344.805605][ T38] 5 locks held by kworker/u9:3/5841: [ 344.805615][ T38] #0: ffff888032633938 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 344.805658][ T38] #1: ffffc90004bdfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 344.805701][ T38] #2: ffff88805d524e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 344.805747][ T38] #3: ffff88805d5240a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 344.805799][ T38] #4: ffffffff8ee39c38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 344.805843][ T38] 4 locks held by kworker/u9:4/5843: [ 344.805852][ T38] #0: ffff88803231c938 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 345.788181][ T38] #1: ffffc90004befbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 345.788240][ T38] #2: ffff88803fa2ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 345.788286][ T38] #3: ffff88803fa2c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 345.788333][ T38] 4 locks held by kworker/R-wg-cr/5872: [ 345.788343][ T38] #0: ffff888037098538 ((wq_completion)wg-crypt-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 345.788390][ T38] #1: ffffc90004e1fba0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 345.788441][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 345.788482][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 345.788524][ T38] 4 locks held by kworker/0:4/5885: [ 345.788534][ T38] #0: ffff88805ce20938 ((wq_completion)wg-crypt-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 345.788580][ T38] #1: ffffc90004c5fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 345.788633][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 345.788673][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 345.788723][ T38] 4 locks held by kworker/0:5/5886: [ 345.788732][ T38] #0: ffff88805caef138 ((wq_completion)wg-crypt-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 345.788778][ T38] #1: ffffc90004b1fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 345.788830][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 345.788870][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 345.788912][ T38] 2 locks held by napi/wg1-0/5904: [ 345.788921][ T38] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 345.788962][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 345.789005][ T38] 2 locks held by kworker/1:5/5921: [ 345.789016][ T38] 2 locks held by kworker/1:6/5928: [ 345.789025][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 345.789067][ T38] #1: ffffc900050efbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 345.789108][ T38] 4 locks held by kworker/0:6/5955: [ 345.789118][ T38] #0: ffff88803709b938 ((wq_completion)wg-crypt-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 345.789163][ T38] #1: ffffc900051efbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 345.789204][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 345.789245][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 345.789287][ T38] 4 locks held by kworker/u8:15/6560: [ 345.789296][ T38] #0: ffff8880367dc138 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 345.789341][ T38] #1: ffffc900015cfbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 345.789384][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 345.789424][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 345.789464][ T38] 3 locks held by kworker/u8:16/6561: [ 345.789474][ T38] 5 locks held by kworker/u8:17/6562: [ 345.789483][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 345.789524][ T38] #1: ffffc900054efbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 345.789566][ T38] #2: ffff88805ef20898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 345.789607][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 345.789648][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 345.789694][ T38] 6 locks held by kworker/u8:18/6563: [ 345.789704][ T38] #0: ffff88803c665138 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 345.789750][ T38] #1: ffffc9000156fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 345.789791][ T38] #2: ffff888038e2d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 345.789832][ T38] #3: ffff88802331b8f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 345.789871][ T38] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 345.789911][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 345.789953][ T38] 5 locks held by kworker/u8:19/6564: [ 345.789962][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 345.790003][ T38] #1: ffffc9000154fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 345.790045][ T38] #2: ffff88804aef0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 345.790085][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 345.790126][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 345.790168][ T38] 4 locks held by kworker/u8:20/6565: [ 345.790177][ T38] #0: ffff88803d89b938 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 345.790218][ T38] #1: ffffc90003ef7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 345.790264][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 345.790304][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 345.790346][ T38] 7 locks held by kworker/u8:21/6566: [ 345.790355][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 345.790397][ T38] #1: ffffc90003f27bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 345.790439][ T38] #2: ffff8880232a5300 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 345.790486][ T38] #3: ffff88805e4b4120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 345.790528][ T38] #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 345.790567][ T38] #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 345.790607][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 345.790650][ T38] 1 lock held by syz-executor/7320: [ 345.790659][ T38] #0: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 345.790707][ T38] 4 locks held by kworker/1:8/7354: [ 345.790716][ T38] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 345.790758][ T38] #1: ffffc9000574fbc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 345.790799][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 345.790840][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 345.790882][ T38] 1 lock held by syz.2.688/7544: [ 345.790891][ T38] #0: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: bpf_xdp_link_release+0x29/0x550 [ 345.790932][ T38] 1 lock held by syz.0.689/7547: [ 345.790942][ T38] #0: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 345.790981][ T38] 7 locks held by kworker/u8:22/7552: [ 345.790990][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 345.791032][ T38] #1: ffffc9000548fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 345.791074][ T38] #2: ffff88805e2af300 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 345.791121][ T38] #3: ffff88805e2e3120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 345.791163][ T38] #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 345.791200][ T38] #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 345.791242][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 345.791283][ T38] 3 locks held by kworker/u8:23/7553: [ 345.791293][ T38] #0: ffff888030921938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 345.791335][ T38] #1: ffffc900056bfbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 345.791377][ T38] #2: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 345.791416][ T38] 6 locks held by kworker/u8:24/7554: [ 345.791427][ T38] 6 locks held by kworker/u8:26/7561: [ 345.791436][ T38] #0: ffff88814d224138 ((wq_completion)krdsd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 345.791478][ T38] #1: ffffc9000514fbc0 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 345.791520][ T38] #2: ffff888035f46078 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x15e/0x680 [ 345.791560][ T38] #3: ffff888049a30350 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sock_set_nodelay+0x2a/0xf0 [ 345.791601][ T38] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 345.791642][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 345.791687][ T38] 4 locks held by kworker/0:8/7562: [ 345.791697][ T38] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 345.791738][ T38] #1: ffffc90005b2fbc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 345.791780][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 345.791820][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 345.791862][ T38] 6 locks held by kworker/u8:27/7563: [ 345.791871][ T38] #0: ffff88803c665138 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 345.791917][ T38] #1: ffffc9000624fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 345.791959][ T38] #2: ffff888038e2d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 345.791998][ T38] #3: ffff88802331ae58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 345.792036][ T38] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 345.792077][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 345.792118][ T38] 5 locks held by kworker/u8:28/7565: [ 345.792128][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 345.792168][ T38] #1: ffffc9000626fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 345.792210][ T38] #2: ffff88805ef10898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 345.792251][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 345.792291][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 345.792333][ T38] 7 locks held by kworker/u8:29/7568: [ 345.792342][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 345.792383][ T38] #1: ffffc9000627fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 345.792425][ T38] #2: ffff8880374a3300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 345.792466][ T38] #3: ffff88805b68f520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 345.792509][ T38] #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 345.792548][ T38] #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 345.792588][ T38] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 345.792630][ T38] 5 locks held by kworker/0:9/7571: [ 345.792640][ T38] #0: ffff888037098138 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 345.792691][ T38] #1: ffffc900062afbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 345.792744][ T38] #2: ffff888037041928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 345.792783][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 345.792823][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 345.792864][ T38] 1 lock held by dhcpcd/7572: [ 345.792873][ T38] #0: ffff88803dfdc5f8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 345.792917][ T38] 4 locks held by kworker/0:10/7574: [ 345.792926][ T38] #0: ffff88803709b938 ((wq_completion)wg-crypt-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 345.792971][ T38] #1: ffffc900062cfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 345.793023][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 345.793063][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 345.793104][ T38] 2 locks held by kworker/u8:31/7575: [ 345.793115][ T38] 1 lock held by dhcpcd/7578: [ 345.793124][ T38] #0: ffff88805df60938 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 345.793167][ T38] 1 lock held by dhcpcd/7581: [ 345.793176][ T38] #0: ffff888035c14350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 345.793215][ T38] 1 lock held by dhcpcd/7584: [ 345.793224][ T38] #0: ffff88802ba80350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 345.793263][ T38] 1 lock held by dhcpcd/7593: [ 345.793273][ T38] #0: ffff88803e6fe350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 345.793312][ T38] 1 lock held by syz-executor/7594: [ 345.793322][ T38] 1 lock held by dhcpcd/7595: [ 345.793331][ T38] #0: ffff8880390a6350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 345.793370][ T38] 2 locks held by udevd/7601: [ 345.793380][ T38] 3 locks held by syz-executor/7603: [ 345.793389][ T38] #0: ffff88802ef305b8 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xb9/0x1450 [ 345.793431][ T38] #1: ffffffff8dac5368 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 345.793471][ T38] #2: ffff88801d2cc858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 345.793513][ T38] [ 345.793517][ T38] ============================================= [ 345.793517][ T38] [ 345.793541][ T38] NMI backtrace for cpu 0 [ 345.793565][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 345.793584][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 345.793594][ T38] Call Trace: [ 345.793603][ T38] [ 345.793610][ T38] dump_stack_lvl+0x189/0x250 [ 345.793637][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.793659][ T38] ? __pfx__printk+0x10/0x10 [ 345.793695][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 345.793717][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 345.793737][ T38] ? __pfx__printk+0x10/0x10 [ 345.793759][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 345.793781][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 345.793802][ T38] watchdog+0xf93/0xfe0 [ 345.793827][ T38] ? watchdog+0x1de/0xfe0 [ 345.793853][ T38] kthread+0x711/0x8a0 [ 345.793878][ T38] ? __pfx_watchdog+0x10/0x10 [ 345.793897][ T38] ? __pfx_kthread+0x10/0x10 [ 345.793924][ T38] ? __pfx_kthread+0x10/0x10 [ 345.793947][ T38] ret_from_fork+0x3f9/0x770 [ 345.793971][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 345.793997][ T38] ? __switch_to_asm+0x39/0x70 [ 345.794011][ T38] ? __switch_to_asm+0x33/0x70 [ 345.794025][ T38] ? __pfx_kthread+0x10/0x10 [ 345.794048][ T38] ret_from_fork_asm+0x1a/0x30 [ 345.794079][ T38] [ 345.794085][ T38] Sending NMI from CPU 0 to CPUs 1: [ 345.794109][ C1] NMI backtrace for cpu 1 [ 345.794122][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 345.794140][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 345.794149][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 345.794168][ C1] Code: e8 de ae 7f fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f e5 de fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 345.794181][ C1] RSP: 0018:ffffc90000167890 EFLAGS: 00000202 [ 345.794194][ C1] RAX: 1ffffffff3275000 RBX: 00000000000003fd RCX: 0000000000000000 [ 345.794205][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 345.794215][ C1] RBP: ffffffff993a8850 R08: 0000000000000000 R09: 0000000000000000 [ 345.794225][ C1] R10: dffffc0000000000 R11: ffffffff853ead20 R12: dffffc0000000000 [ 345.794237][ C1] R13: 0000000000000000 R14: ffffffff993a85c0 R15: 0000000000000000 [ 345.794248][ C1] FS: 0000000000000000(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 345.794261][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 345.794272][ C1] CR2: 00007fdf03157d60 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 345.794286][ C1] Call Trace: [ 345.794292][ C1] [ 345.794299][ C1] wait_for_lsr+0x1aa/0x2f0 [ 345.794321][ C1] serial8250_console_write+0x11bd/0x1b40 [ 345.794354][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 345.794377][ C1] ? console_flush_all+0x13a/0xcd0 [ 345.794397][ C1] ? console_flush_all+0x476/0xcd0 [ 345.794416][ C1] console_flush_all+0x695/0xcd0 [ 345.794440][ C1] ? console_flush_all+0x13a/0xcd0 [ 345.794459][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 345.794476][ C1] ? __lock_acquire+0xab9/0xd20 [ 345.794501][ C1] __console_flush_and_unlock+0xa4/0x240 [ 345.794520][ C1] ? __pfx___console_flush_and_unlock+0x10/0x10 [ 345.794542][ C1] legacy_kthread_func+0x13b/0x1a0 [ 345.794561][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 345.794579][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 345.794599][ C1] ? __kthread_parkme+0x7b/0x200 [ 345.794619][ C1] ? __kthread_parkme+0x1a1/0x200 [ 345.794641][ C1] kthread+0x711/0x8a0 [ 345.794664][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 345.794682][ C1] ? __pfx_kthread+0x10/0x10 [ 345.794706][ C1] ? __pfx_kthread+0x10/0x10 [ 345.794728][ C1] ret_from_fork+0x3f9/0x770 [ 345.794748][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 345.794770][ C1] ? __switch_to_asm+0x39/0x70 [ 345.794784][ C1] ? __switch_to_asm+0x33/0x70 [ 345.794797][ C1] ? __pfx_kthread+0x10/0x10 [ 345.794818][ C1] ret_from_fork_asm+0x1a/0x30 [ 345.794841][ C1] [ 345.795108][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 345.795120][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 345.795139][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 345.795147][ T38] Call Trace: [ 345.795154][ T38] [ 345.795161][ T38] dump_stack_lvl+0x99/0x250 [ 345.795183][ T38] ? __asan_memcpy+0x40/0x70 [ 345.795201][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.795223][ T38] ? __pfx__printk+0x10/0x10 [ 345.795252][ T38] vpanic+0x281/0x750 [ 345.795277][ T38] ? __pfx_vpanic+0x10/0x10 [ 345.795297][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 345.795314][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 345.795344][ T38] panic+0xb9/0xc0 [ 345.795365][ T38] ? __pfx_panic+0x10/0x10 [ 345.795390][ T38] ? irq_work_queue+0xc3/0x140 [ 345.795414][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 345.795434][ T38] watchdog+0xfd2/0xfe0 [ 345.795458][ T38] ? watchdog+0x1de/0xfe0 [ 345.795484][ T38] kthread+0x711/0x8a0 [ 345.795509][ T38] ? __pfx_watchdog+0x10/0x10 [ 345.795528][ T38] ? __pfx_kthread+0x10/0x10 [ 345.795554][ T38] ? __pfx_kthread+0x10/0x10 [ 345.795578][ T38] ret_from_fork+0x3f9/0x770 [ 345.795600][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 345.795627][ T38] ? __switch_to_asm+0x39/0x70 [ 345.795641][ T38] ? __switch_to_asm+0x33/0x70 [ 345.795655][ T38] ? __pfx_kthread+0x10/0x10 [ 345.795683][ T38] ret_from_fork_asm+0x1a/0x30 [ 345.795714][ T38] [ 345.795971][ T38] Kernel Offset: disabled