last executing test programs: 2m21.080443868s ago: executing program 3 (id=59): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001e008d2a2abf7000f7dbdf250a00", @ANYBLOB="80"], 0x24}}, 0x20000000) 2m20.823843705s ago: executing program 3 (id=61): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'tunl0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003b80)="87", 0x1}], 0x20}}], 0x1, 0x4080) 2m20.693127234s ago: executing program 3 (id=62): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[], 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2m20.292200163s ago: executing program 4 (id=65): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) 2m19.940584346s ago: executing program 4 (id=69): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1}, 0x10) 2m19.938631929s ago: executing program 0 (id=70): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000380)={0x0, 0x2b, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x701}, 0x14}}, 0x0) 2m19.701628353s ago: executing program 1 (id=71): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020022000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000008080002400000001b0900020073797a320000000005000740"], 0x84}}, 0x0) 2m19.701320107s ago: executing program 0 (id=72): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffdbb, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x80) 2m19.659402476s ago: executing program 4 (id=73): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x4) 2m19.609868154s ago: executing program 2 (id=74): r0 = socket$inet6(0xa, 0x805, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000001080)=0xfec) 2m19.486061964s ago: executing program 4 (id=75): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 2m19.340820822s ago: executing program 2 (id=76): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x4f27, 0x5, 0x1, 0x10000004, 0x400, 0xcc7, 0xfff, 0x0, 0x5, 0x100, 0x8, 0x1, 0x7fff, 0x1, 0x6, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xfffffffd, 0x2, 0x20001e56, 0xb, 0xe69, 0x3c, 0x8, 0x106, 0x8000000, 0xfffffff8]}) 2m19.332435212s ago: executing program 0 (id=77): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 2m19.262774222s ago: executing program 1 (id=78): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x38, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0xd}, @mss={0x2, 0x4, 0x5df4}, @sack={0x5, 0x2}]}}}}}}}, 0x0) 2m18.922164151s ago: executing program 1 (id=79): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="ad56b699f75b62641d884d2e43ca00f58cd2488900630c7e", 0x18) 2m18.751759118s ago: executing program 2 (id=80): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) 2m18.742894914s ago: executing program 0 (id=81): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x40000) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x4000007e, 0x0, 0x8, 0x9, 0x2, 0x81}) 2m18.630117152s ago: executing program 3 (id=82): r0 = socket(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x9, @loopback, 0xd9b}, 0x1c) connect$unix(r0, &(0x7f0000000280)=@file={0x0, './cgroup/../file0\x00'}, 0x6e) 2m18.447351684s ago: executing program 1 (id=83): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0x89, {}, {0x5, 0x8, 0xc1, 0x6a, 0x9, 0x5, "a8ed9837"}, 0xfff, 0x2, {&(0x7f00000000c0)=[{0x0, 0x8000, {0x0}, 0xa}, {0x9fb, 0xd4, {0x0}, 0xfff}]}, 0x5}) 2m18.136568148s ago: executing program 0 (id=84): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1}, 0x10) 2m18.109308326s ago: executing program 2 (id=85): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140), 0x9) 2m18.104934957s ago: executing program 3 (id=86): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xffc, &(0x7f00000014c0)=""/4092, 0x41000}, 0x94) 2m18.024707417s ago: executing program 4 (id=87): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 2m17.815526s ago: executing program 1 (id=88): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f00000001c0)=0x2, 0x4) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, &(0x7f0000000240)) 2m17.558828299s ago: executing program 2 (id=89): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x38, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0xd}, @mss={0x2, 0x4, 0x5df4}, @sack={0x5, 0x2}]}}}}}}}, 0x0) 2m17.558437291s ago: executing program 4 (id=90): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) io_setup(0x7ff, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000000640)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x8, 0x8, r0, 0x0, 0x0, 0x0, 0x0, 0x2, r0}]) 2m17.558168978s ago: executing program 3 (id=91): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='5\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r0}]}, 0x24}}, 0x0) 2m17.330998764s ago: executing program 0 (id=92): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/nfsfs\x00') lseek(r0, 0x1, 0x2) getdents64(r0, 0xffffffffffffffff, 0x43) 2m17.330685374s ago: executing program 1 (id=93): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) 1m39.334490203s ago: executing program 2 (id=94): r0 = syz_usbip_server_init(0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(r0, &(0x7f00000003c0)=ANY=[], 0x71) 1m18.776348235s ago: executing program 32 (id=92): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/nfsfs\x00') lseek(r0, 0x1, 0x2) getdents64(r0, 0xffffffffffffffff, 0x43) 57.452549014s ago: executing program 33 (id=93): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) 49.919315672s ago: executing program 34 (id=91): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='5\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r0}]}, 0x24}}, 0x0) 38.020298978s ago: executing program 35 (id=90): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) io_setup(0x7ff, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000000640)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x8, 0x8, r0, 0x0, 0x0, 0x0, 0x0, 0x2, r0}]) 0s ago: executing program 36 (id=94): r0 = syz_usbip_server_init(0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(r0, &(0x7f00000003c0)=ANY=[], 0x71) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.9' (ED25519) to the list of known hosts. [ 82.111146][ T5825] cgroup: Unknown subsys name 'net' [ 82.373584][ T5825] cgroup: Unknown subsys name 'cpuset' [ 82.429299][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.230440][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.902651][ T31] cfg80211: failed to load regulatory.db [ 88.564647][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.576823][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.585938][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.587666][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.588479][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.652911][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.658471][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.662213][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.664852][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.667146][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.743659][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.745359][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.747083][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.752913][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.753624][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.806416][ T5156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.808161][ T5156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.809392][ T5156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.810506][ T5156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.820862][ T5156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.887707][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.890624][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.891447][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.892528][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.893230][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.598082][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 89.720684][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 89.789964][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 90.219092][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 90.235532][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 90.363175][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.363366][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.363731][ T5843] bridge_slave_0: entered allmulticast mode [ 90.365405][ T5843] bridge_slave_0: entered promiscuous mode [ 90.493393][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.493471][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.493596][ T5843] bridge_slave_1: entered allmulticast mode [ 90.495056][ T5843] bridge_slave_1: entered promiscuous mode [ 90.661661][ T5845] Bluetooth: hci0: command tx timeout [ 90.818838][ T5845] Bluetooth: hci2: command tx timeout [ 90.819020][ T5156] Bluetooth: hci1: command tx timeout [ 90.900301][ T5156] Bluetooth: hci3: command tx timeout [ 90.934966][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.935843][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.935980][ T5848] bridge_slave_0: entered allmulticast mode [ 90.937479][ T5848] bridge_slave_0: entered promiscuous mode [ 90.988884][ T5156] Bluetooth: hci4: command tx timeout [ 91.041520][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.041658][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.041823][ T5846] bridge_slave_0: entered allmulticast mode [ 91.044498][ T5846] bridge_slave_0: entered promiscuous mode [ 91.068906][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.069554][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.069769][ T5848] bridge_slave_1: entered allmulticast mode [ 91.072471][ T5848] bridge_slave_1: entered promiscuous mode [ 91.106419][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.106722][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.106859][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.107021][ T5846] bridge_slave_1: entered allmulticast mode [ 91.114664][ T5846] bridge_slave_1: entered promiscuous mode [ 91.231147][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.722751][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.856161][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.856431][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.856575][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.857164][ T5857] bridge_slave_0: entered allmulticast mode [ 91.861912][ T5857] bridge_slave_0: entered promiscuous mode [ 91.869596][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.870021][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.870167][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.870407][ T5853] bridge_slave_0: entered allmulticast mode [ 91.873130][ T5853] bridge_slave_0: entered promiscuous mode [ 91.882512][ T5843] team0: Port device team_slave_0 added [ 91.887709][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.890592][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.890727][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.890916][ T5857] bridge_slave_1: entered allmulticast mode [ 91.893488][ T5857] bridge_slave_1: entered promiscuous mode [ 92.029620][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.029726][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.029841][ T5853] bridge_slave_1: entered allmulticast mode [ 92.031403][ T5853] bridge_slave_1: entered promiscuous mode [ 92.034932][ T5843] team0: Port device team_slave_1 added [ 92.648219][ T5848] team0: Port device team_slave_0 added [ 92.738803][ T5156] Bluetooth: hci0: command tx timeout [ 92.781358][ T5846] team0: Port device team_slave_0 added [ 92.784809][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.786697][ T5848] team0: Port device team_slave_1 added [ 92.800558][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.803766][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.803781][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.803804][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.819918][ T5846] team0: Port device team_slave_1 added [ 92.824531][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.898990][ T5156] Bluetooth: hci2: command tx timeout [ 92.899020][ T5156] Bluetooth: hci1: command tx timeout [ 92.941212][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.942569][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.942580][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.942594][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.978833][ T5845] Bluetooth: hci3: command tx timeout [ 93.058848][ T5845] Bluetooth: hci4: command tx timeout [ 93.463490][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.463505][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.463527][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.712205][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.712220][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.712232][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.715153][ T5857] team0: Port device team_slave_0 added [ 93.716272][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.716284][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.716306][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.718079][ T5853] team0: Port device team_slave_0 added [ 93.799802][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.799817][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.799897][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.803199][ T5857] team0: Port device team_slave_1 added [ 93.835832][ T5853] team0: Port device team_slave_1 added [ 94.338004][ T5843] hsr_slave_0: entered promiscuous mode [ 94.345410][ T5843] hsr_slave_1: entered promiscuous mode [ 94.348375][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.348388][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.348402][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.441348][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.441363][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.441387][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.520945][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.520956][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.520973][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.621957][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.621981][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.622004][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.776343][ T5848] hsr_slave_0: entered promiscuous mode [ 94.777583][ T5848] hsr_slave_1: entered promiscuous mode [ 94.778556][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 94.782240][ T5848] Cannot create hsr debugfs directory [ 94.809153][ T5846] hsr_slave_0: entered promiscuous mode [ 94.809961][ T5846] hsr_slave_1: entered promiscuous mode [ 94.810721][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 94.810737][ T5846] Cannot create hsr debugfs directory [ 94.828709][ T5845] Bluetooth: hci0: command tx timeout [ 94.979003][ T5845] Bluetooth: hci2: command tx timeout [ 94.979037][ T5845] Bluetooth: hci1: command tx timeout [ 95.068941][ T5845] Bluetooth: hci3: command tx timeout [ 95.148731][ T5845] Bluetooth: hci4: command tx timeout [ 95.434755][ T5857] hsr_slave_0: entered promiscuous mode [ 95.435547][ T5857] hsr_slave_1: entered promiscuous mode [ 95.436149][ T5857] debugfs: 'hsr0' already exists in 'hsr' [ 95.436167][ T5857] Cannot create hsr debugfs directory [ 95.536629][ T5853] hsr_slave_0: entered promiscuous mode [ 95.537574][ T5853] hsr_slave_1: entered promiscuous mode [ 95.538093][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 95.538115][ T5853] Cannot create hsr debugfs directory [ 96.898865][ T5845] Bluetooth: hci0: command tx timeout [ 96.935759][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.975688][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.014447][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.065605][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.069042][ T5156] Bluetooth: hci2: command tx timeout [ 97.069086][ T5845] Bluetooth: hci1: command tx timeout [ 97.139707][ T5845] Bluetooth: hci3: command tx timeout [ 97.206293][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.229820][ T5845] Bluetooth: hci4: command tx timeout [ 97.255030][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.285007][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.335701][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.482896][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.516045][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.545516][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.595919][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.785279][ T5857] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.825477][ T5857] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.863838][ T5857] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.925513][ T5857] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.086741][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.105648][ T5853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.138181][ T5853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.180875][ T5853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.227700][ T5853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.321799][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.369609][ T1385] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.369810][ T1385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.411285][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.444963][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.445267][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.530481][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.576139][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.601424][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.601641][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.651502][ T1385] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.651616][ T1385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.718147][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.766397][ T1385] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.766529][ T1385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.791296][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.842949][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.848887][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.993662][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.013354][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.098743][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.098988][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.187210][ T1538] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.187342][ T1538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.223625][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.290762][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.290923][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.361776][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.362402][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.391379][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.751858][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.079528][ T5848] veth0_vlan: entered promiscuous mode [ 100.156357][ T5848] veth1_vlan: entered promiscuous mode [ 100.197163][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.402545][ T5848] veth0_macvtap: entered promiscuous mode [ 100.418386][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.457343][ T5848] veth1_macvtap: entered promiscuous mode [ 100.482648][ T5843] veth0_vlan: entered promiscuous mode [ 100.488454][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.558288][ T5846] veth0_vlan: entered promiscuous mode [ 100.573050][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.574808][ T5843] veth1_vlan: entered promiscuous mode [ 100.624449][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.643549][ T5846] veth1_vlan: entered promiscuous mode [ 100.683498][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.708358][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.723301][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.738050][ T1538] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.835623][ T5857] veth0_vlan: entered promiscuous mode [ 100.943766][ T5853] veth0_vlan: entered promiscuous mode [ 100.945849][ T5843] veth0_macvtap: entered promiscuous mode [ 101.042082][ T5857] veth1_vlan: entered promiscuous mode [ 101.062916][ T5843] veth1_macvtap: entered promiscuous mode [ 101.100468][ T5853] veth1_vlan: entered promiscuous mode [ 101.102394][ T5846] veth0_macvtap: entered promiscuous mode [ 101.138357][ T5846] veth1_macvtap: entered promiscuous mode [ 101.217295][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.217319][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.226541][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.285269][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.330398][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.376656][ T1435] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.378127][ T1538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.378142][ T1538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.382570][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.383278][ T5857] veth0_macvtap: entered promiscuous mode [ 101.395813][ T1435] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.432836][ T1435] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.446890][ T1435] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.482277][ T5857] veth1_macvtap: entered promiscuous mode [ 101.502778][ T5853] veth0_macvtap: entered promiscuous mode [ 101.507566][ T1435] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.519586][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.533392][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.599416][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.620297][ T5853] veth1_macvtap: entered promiscuous mode [ 101.734334][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.926085][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.090937][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.091019][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.138961][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.158027][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.196581][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.206313][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.298410][ T1538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.298431][ T1538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.353476][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.404492][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.482674][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.551842][ T1183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.551862][ T1183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.557097][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.637896][ T37] audit: type=1326 audit(1756613497.066:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5964 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931071ebe9 code=0x7ffc0000 [ 102.638103][ T37] audit: type=1326 audit(1756613497.066:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5964 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931071ebe9 code=0x7ffc0000 [ 102.644899][ T37] audit: type=1326 audit(1756613497.076:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5964 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f931071ebe9 code=0x7ffc0000 [ 102.644947][ T37] audit: type=1326 audit(1756613497.076:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5964 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931071ebe9 code=0x7ffc0000 [ 102.645676][ T37] audit: type=1326 audit(1756613497.076:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5964 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f931071ebe9 code=0x7ffc0000 [ 102.645909][ T37] audit: type=1326 audit(1756613497.076:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5964 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931071ebe9 code=0x7ffc0000 [ 102.899729][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.899750][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.958440][ T1385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.958459][ T1385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.190156][ T1538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.190177][ T1538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.490438][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.490460][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.631677][ T1538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.631696][ T1538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.916996][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.917015][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.310645][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.474104][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 104.498917][ T31] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 104.498945][ T31] usb 5-1: config 0 has no interface number 0 [ 104.499399][ T31] usb 5-1: config 0 interface 12 has no altsetting 0 [ 104.521603][ T31] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 104.521630][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.521647][ T31] usb 5-1: Product: syz [ 104.521659][ T31] usb 5-1: Manufacturer: syz [ 104.521671][ T31] usb 5-1: SerialNumber: syz [ 104.693016][ T31] usb 5-1: config 0 descriptor?? [ 105.195828][ T5995] netlink: 44 bytes leftover after parsing attributes in process `syz.3.18'. [ 105.195990][ T5995] netlink: 'syz.3.18': attribute type 6 has an invalid length. [ 105.196012][ T5995] netlink: 'syz.3.18': attribute type 5 has an invalid length. [ 105.196024][ T5995] netlink: 'syz.3.18': attribute type 4 has an invalid length. [ 105.354365][ T31] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 105.354426][ T31] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 105.354442][ T31] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 105.354558][ T31] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 105.449007][ T6002] program syz.0.21 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.572020][ T31] usb 5-1: USB disconnect, device number 2 [ 106.929539][ T6034] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0 [ 107.009040][ T5924] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 107.168781][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 107.173650][ T5924] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.173679][ T5924] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.173699][ T5924] usb 5-1: config 0 interface 0 has no altsetting 0 [ 107.173731][ T5924] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 107.173751][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.187290][ T5924] usb 5-1: config 0 descriptor?? [ 107.710992][ T5924] holtek_kbd 0003:04D9:A055.0001: hidraw0: USB HID v0.00 Device [HID 04d9:a055] on usb-dummy_hcd.4-1/input0 [ 107.856494][ T5952] usb 5-1: USB disconnect, device number 3 [ 108.078797][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.153802][ T6059] fido_id[6059]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 108.230854][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 108.236594][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 108.240235][ T31] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 108.240259][ T31] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 108.240274][ T31] usb 2-1: Product: syz [ 108.240286][ T31] usb 2-1: Manufacturer: syz [ 108.240296][ T31] usb 2-1: SerialNumber: syz [ 108.262068][ T31] usb 2-1: config 0 descriptor?? [ 108.274132][ T6060] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 108.288674][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.314697][ T31] hub 2-1:0.0: bad descriptor, ignoring hub [ 108.314734][ T31] hub 2-1:0.0: probe with driver hub failed with error -5 [ 108.503932][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.503963][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.503997][ T10] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 108.504019][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.560694][ T10] usb 4-1: config 0 descriptor?? [ 108.688424][ T6068] netlink: 256 bytes leftover after parsing attributes in process `syz.4.50'. [ 108.688445][ T6068] netlink: 48 bytes leftover after parsing attributes in process `syz.4.50'. [ 108.767631][ T31] usb 2-1: USB disconnect, device number 2 [ 109.073868][ T10] hid-retrode 0003:0403:97C1.0002: unknown main item tag 0x0 [ 109.102258][ T10] hid-retrode 0003:0403:97C1.0002: hidraw0: USB HID v0.00 Device [HID 0403:97c1] on usb-dummy_hcd.3-1/input0 [ 109.153085][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 109.212742][ T6076] Bluetooth: MGMT ver 1.23 [ 109.299948][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 109.304254][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 109.350870][ T31] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 109.350896][ T31] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 109.350914][ T31] usb 2-1: Product: syz [ 109.375818][ T31] usb 2-1: config 0 descriptor?? [ 109.381338][ T6060] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 109.410632][ T31] hub 2-1:0.0: bad descriptor, ignoring hub [ 109.410675][ T31] hub 2-1:0.0: probe with driver hub failed with error -5 [ 109.418776][ T5994] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 109.578786][ T5994] usb 5-1: Using ep0 maxpacket: 32 [ 109.584943][ T5994] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 109.584972][ T5994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 109.584994][ T5994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 109.585013][ T5994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 109.585034][ T5994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 109.606787][ T5994] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 109.606813][ T5994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.606829][ T5994] usb 5-1: Product: syz [ 109.606842][ T5994] usb 5-1: Manufacturer: syz [ 109.606854][ T5994] usb 5-1: SerialNumber: syz [ 109.642510][ T5994] usb 5-1: config 0 descriptor?? [ 109.727688][ T44] usb 4-1: USB disconnect, device number 2 [ 109.872441][ T5994] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 109.879925][ T31] usb 2-1: USB disconnect, device number 3 [ 110.095515][ T5994] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 110.095959][ T5994] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 110.096387][ T5994] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 110.096927][ T5994] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 110.107578][ T5994] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 110.108044][ T5994] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 110.118708][ T5994] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 110.119190][ T5994] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 110.119622][ T5994] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 110.120215][ T5994] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 110.121942][ T5994] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 110.122844][ T5994] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 110.123293][ T5994] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 110.123737][ T5994] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 110.124254][ T5994] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 110.124684][ T5994] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 110.125113][ T5994] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 110.125557][ T5994] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 110.125612][ T5994] input input5: Timeout waiting for response from device. [ 110.328375][ T5994] usb 5-1: USB disconnect, device number 4 [ 110.470323][ T1232] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 110.638729][ T1232] usb 3-1: Using ep0 maxpacket: 16 [ 110.642375][ T1232] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 110.642401][ T1232] usb 3-1: config 0 has no interface number 0 [ 110.642431][ T1232] usb 3-1: config 0 interface 41 has no altsetting 0 [ 110.650579][ T1232] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 110.650604][ T1232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.650621][ T1232] usb 3-1: Product: syz [ 110.650633][ T1232] usb 3-1: Manufacturer: syz [ 110.650645][ T1232] usb 3-1: SerialNumber: syz [ 110.669818][ T1232] usb 3-1: config 0 descriptor?? [ 110.671396][ T5923] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.749377][ T1232] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 110.879796][ T5923] usb 4-1: Using ep0 maxpacket: 8 [ 110.890608][ T6087] warning: `syz.2.58' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.892913][ T1232] usb 3-1: USB disconnect, device number 2 [ 110.920552][ T5923] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 110.920580][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.920597][ T5923] usb 4-1: Product: syz [ 110.920610][ T5923] usb 4-1: Manufacturer: syz [ 110.920622][ T5923] usb 4-1: SerialNumber: syz [ 110.995708][ T6105] mmap: syz.0.67 (6105) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.041189][ T5923] usb 4-1: config 0 descriptor?? [ 111.069615][ T5923] gspca_main: se401-2.14.0 probing 047d:5003 [ 111.470536][ T5923] gspca_se401: Wrong descriptor type [ 111.682146][ T5994] usb 4-1: USB disconnect, device number 3 [ 112.962130][ T6142] use of bytesused == 0 is deprecated and will be removed in the future, [ 112.962145][ T6142] use the actual size instead. [ 124.488633][ C0] sched: DL replenish lagged too much [ 155.597178][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 155.613477][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.071212][ T5156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 189.078482][ T5156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 189.079573][ T5156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 189.080845][ T5156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 189.081682][ T5156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 204.929471][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.945672][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.127238][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 207.719942][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 207.720449][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 207.721700][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 207.722508][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 213.437242][ T6232] Bluetooth: hci0: command 0x0406 tx timeout [ 213.437368][ T6232] Bluetooth: hci1: command 0x0406 tx timeout [ 213.437393][ T6232] Bluetooth: hci2: command 0x0406 tx timeout [ 213.437418][ T6232] Bluetooth: hci3: command 0x0406 tx timeout [ 217.729267][ T5156] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 222.075514][ T6232] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 222.081429][ T6232] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 222.083060][ T6232] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 222.084254][ T6232] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 226.231408][ T6231] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 226.238072][ T6231] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 226.248831][ T6231] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 226.250071][ T6231] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 226.250885][ T6231] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 236.051072][ T6231] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 240.675825][ T6245] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 244.023984][ T6238] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 244.089511][ T6238] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 244.133175][ T6238] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 247.043085][ T6251] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 247.044258][ T6251] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 279.538208][ T6231] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 286.607100][ T6267] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 286.627766][ T6267] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 288.440396][ T6267] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 293.107197][ T6267] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 294.235667][ T6267] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 296.507061][ T38] INFO: task kworker/1:2:1232 blocked for more than 150 seconds. [ 296.507099][ T38] Not tainted syzkaller #0 [ 296.507109][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 296.507122][ T38] task:kworker/1:2 state:D stack:20680 pid:1232 tgid:1232 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 296.507176][ T38] Workqueue: events_power_efficient crda_timeout_work [ 296.507216][ T38] Call Trace: [ 296.507223][ T38] [ 296.507235][ T38] __schedule+0x16f3/0x4c20 [ 296.507270][ T38] ? __lock_acquire+0xab9/0xd20 [ 296.507303][ T38] ? __pfx___schedule+0x10/0x10 [ 296.507343][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 296.507367][ T38] rt_mutex_schedule+0x77/0xf0 [ 296.507385][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 296.507403][ T38] ? task_blocks_on_rt_mutex+0xf04/0x1380 [ 296.507439][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 296.507460][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 296.507479][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 296.507508][ T38] ? crda_timeout_work+0x15/0x50 [ 296.507536][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 296.507561][ T38] ? crda_timeout_work+0x15/0x50 [ 296.507581][ T38] mutex_lock_nested+0x16a/0x1d0 [ 296.507597][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 296.507618][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 296.507640][ T38] crda_timeout_work+0x15/0x50 [ 296.507660][ T38] process_scheduled_works+0xade/0x17b0 [ 296.507710][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 296.507748][ T38] worker_thread+0x8a0/0xda0 [ 296.507772][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 296.507802][ T38] ? __kthread_parkme+0x7b/0x200 [ 296.507834][ T38] kthread+0x711/0x8a0 [ 296.507860][ T38] ? __pfx_worker_thread+0x10/0x10 [ 296.507880][ T38] ? __pfx_kthread+0x10/0x10 [ 296.507908][ T38] ? __pfx_kthread+0x10/0x10 [ 296.507932][ T38] ret_from_fork+0x3f9/0x770 [ 296.507963][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 296.507990][ T38] ? __switch_to_asm+0x39/0x70 [ 296.508007][ T38] ? __switch_to_asm+0x33/0x70 [ 296.508021][ T38] ? __pfx_kthread+0x10/0x10 [ 296.508045][ T38] ret_from_fork_asm+0x1a/0x30 [ 296.508078][ T38] [ 296.508176][ T38] INFO: task kworker/1:6:5929 blocked for more than 150 seconds. [ 296.508188][ T38] Not tainted syzkaller #0 [ 296.508197][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 296.508205][ T38] task:kworker/1:6 state:D stack:22408 pid:5929 tgid:5929 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 296.508384][ T38] Workqueue: events reg_todo [ 296.508405][ T38] Call Trace: [ 296.508410][ T38] [ 296.508422][ T38] __schedule+0x16f3/0x4c20 [ 296.508455][ T38] ? __lock_acquire+0xab9/0xd20 [ 296.508487][ T38] ? __pfx___schedule+0x10/0x10 [ 296.508586][ T38] rt_mutex_schedule+0x77/0xf0 [ 296.508605][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 296.508637][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 296.508659][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 296.508679][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 296.508697][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 296.508713][ T38] ? __lock_acquire+0xab9/0xd20 [ 296.508745][ T38] ? reg_process_self_managed_hints+0xaf/0x1c0 [ 296.508770][ T38] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 296.508787][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 296.508810][ T38] ? reg_process_self_managed_hints+0xaf/0x1c0 [ 296.508830][ T38] mutex_lock_nested+0x16a/0x1d0 [ 296.508854][ T38] reg_process_self_managed[ 296.508854][ T38] reg_process_self_managed_hints+0xaf/0x1c0 [ 296.508878][ T38] reg_todo+0x7bc/0x8c0 [ 296.508899][ T38] ? reg_todo+0x2fa/0x8c0 [ 296.508918][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 296.508945][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 296.508965][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 296.508987][ T38] process_scheduled_works+0xade/0x17b0 [ 296.509038][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 296.509076][ T38] worker_thread+0x8a0/0xda0 [ 296.509124][ T38] kthread+0x711/0x8a0 [ 296.509152][ T38] ? __pfx_worker_thread+0x10/0x10 [ 296.509171][ T38] ? __pfx_kthread+0x10/0x10 [ 296.509199][ T38] ? __pfx_kthread+0x10/0x10 [ 296.509223][ T38] ret_from_fork+0x3f9/0x770 [ 296.509247][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 296.509274][ T38] ? __switch_to_asm+0x39/0x70 [ 296.509290][ T38] ? __switch_to_asm+0x33/0x70 [ 296.509305][ T38] ? __pfx_kthread+0x10/0x10 [ 296.509329][ T38] ret_from_fork_asm+0x1a/0x30 [ 296.509362][ T38] [ 296.509372][ T38] INFO: task syz.4.90:6158 blocked for more than 150 seconds. [ 296.509384][ T38] Not tainted syzkaller #0 [ 296.509393][ T38] Blocked by coredump. [ 296.509398][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 296.509406][ T38] task:syz.4.90 state:D stack:24936 pid:6158 tgid:6156 ppid:5843 task_flags:0x40044c flags:0x00004000 [ 296.509451][ T38] Call Trace: [ 296.509456][ T38] [ 296.509467][ T38] __schedule+0x16f3/0x4c20 [ 296.509497][ T38] ? validate_chain+0x897/0x2140 [ 296.509530][ T38] ? __lock_acquire+0xab9/0xd20 [ 296.509551][ T38] ? __pfx___schedule+0x10/0x10 [ 296.509588][ T38] ? schedule+0x91/0x360 [ 296.509612][ T38] schedule+0x165/0x360 [ 296.509634][ T38] schedule_timeout+0x9a/0x270 [ 296.509654][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 296.509687][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 296.509708][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.509727][ T38] ? wait_for_completion+0x267/0x5d0 [ 296.509749][ T38] wait_for_completion+0x2bf/0x5d0 [ 296.509784][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 296.509820][ T38] exit_aio+0x2f1/0x3b0 [ 296.509848][ T38] ? __pfx_exit_aio+0x10/0x10 [ 296.509881][ T38] ? uprobe_clear_state+0x280/0x2a0 [ 296.509899][ T38] ? mm_update_next_owner+0xa7/0x870 [ 296.509920][ T38] __mmput+0x68/0x3d0 [ 296.509949][ T38] exit_mm+0x1da/0x2c0 [ 296.509968][ T38] ? __pfx_exit_mm+0x10/0x10 [ 296.509988][ T38] ? rcu_is_watching+0x15/0xb0 [ 296.510016][ T38] do_exit+0x648/0x2300 [ 296.510031][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 296.510058][ T38] ? __lock_acquire+0xab9/0xd20 [ 296.510082][ T38] ? __pfx_do_exit+0x10/0x10 [ 296.510095][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 296.510116][ T38] ? rt_spin_lock+0x1bb/0x2c0 [ 296.510144][ T38] do_group_exit+0x21c/0x2d0 [ 296.510167][ T38] get_signal+0x125e/0x1310 [ 296.510209][ T38] arch_do_signal_or_restart+0x9a/0x750 [ 296.510237][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 296.510273][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 296.510299][ T38] exit_to_user_mode_loop+0x75/0x110 [ 296.510321][ T38] do_syscall_64+0x2bd/0x3b0 [ 296.510342][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.510363][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.510380][ T38] ? clear_bhb_loop+0x60/0xb0 [ 296.510401][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.510418][ T38] RIP: 0033:0x7f26125eebe9 [ 296.510442][ T38] RSP: 002b:00007f26108560e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 296.510460][ T38] RAX: 0000000000000001 RBX: 00007f2612825fa8 RCX: 00007f26125eebe9 [ 296.510472][ T38] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2612825fac [ 296.510484][ T38] RBP: 00007f2612825fa0 R08: 7fffffffffffffff R09: 0000000000000000 [ 296.510496][ T38] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 296.510507][ T38] R13: 00007f2612826038 R14: 00007ffd001c4bd0 R15: 00007ffd001c4cb8 [ 296.510537][ T38] [ 296.510545][ T38] INFO: task syz.1.93:6167 blocked for more than 150 seconds. [ 296.510557][ T38] Not tainted syzkaller #0 [ 296.510566][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 296.510574][ T38] task:syz.1.93 state:D stack:21992 pid:6167 tgid:6164 ppid:5846 task_flags:0x400040 flags:0x00004006 [ 296.510616][ T38] Call Trace: [ 296.510622][ T38] [ 296.510633][ T38] __schedule+0x16f3/0x4c20 [ 296.510666][ T38] ? __lock_acquire+0xab9/0xd20 [ 296.510698][ T38] ? __pfx___schedule+0x10/0x10 [ 296.510743][ T38] rt_mutex_schedule+0x77/0xf0 [ 296.510760][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 296.510792][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 296.510814][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 296.510835][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 296.510853][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 296.510882][ T38] ? rtnl_dumpit+0x92/0x200 [ 296.510904][ T38] ? rcu_is_watching+0x15/0xb0 [ 296.510927][ T38] ? trace_kmalloc+0x1f/0xd0 [ 296.510952][ T38] ? __kmalloc_node_track_caller_noprof+0x213/0x450 [ 296.510980][ T38] ? rtnl_dumpit+0x92/0x200 [ 296.510997][ T38] mutex_lock_nested+0x16a/0x1d0 [ 296.511013][ T38] ? __build_skb_around+0x257/0x3e0 [ 296.511035][ T38] ? __pfx_rtnl_fdb_dump+0x10/0x10 [ 296.511056][ T38] rtnl_dumpit+0x92/0x200 [ 296.511080][ T38] netlink_dump+0x6e4/0xe90 [ 296.511113][ T38] ? __pfx_netlink_dump+0x10/0x10 [ 296.511130][ T38] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 296.511151][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.511197][ T38] __netlink_dump_start+0x5cb/0x7e0 [ 296.511226][ T38] rtnetlink_rcv_msg+0x9eb/0xb70 [ 296.511248][ T38] ? __pfx_rtnl_fdb_dump+0x10/0x10 [ 296.511268][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 296.511287][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 296.511305][ T38] ? ref_tracker_free+0x61e/0x7c0 [ 296.511326][ T38] ? __pfx_rtnl_dumpit+0x10/0x10 [ 296.511345][ T38] ? __pfx_rtnl_fdb_dump+0x10/0x10 [ 296.511365][ T38] ? __skb_clone+0x63/0x7a0 [ 296.511397][ T38] netlink_rcv_skb+0x205/0x470 [ 296.511418][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 296.511440][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 296.511472][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 296.511501][ T38] netlink_unicast+0x843/0xa10 [ 296.511529][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 296.511550][ T38] ? netlink_sendmsg+0x642/0xb30 [ 296.511568][ T38] ? skb_put+0x11b/0x210 [ 296.511593][ T38] netlink_sendmsg+0x805/0xb30 [ 296.511623][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.511652][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 296.511670][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.511691][ T38] __sock_sendmsg+0x219/0x270 [ 296.511714][ T38] sock_write_iter+0x25e/0x330 [ 296.511735][ T38] ? __pfx_sock_write_iter+0x10/0x10 [ 296.511762][ T38] ? __pfx_futex_wait+0x10/0x10 [ 296.511796][ T38] vfs_write+0x5d2/0xb40 [ 296.511821][ T38] ? __pfx_sock_write_iter+0x10/0x10 [ 296.511839][ T38] ? __pfx_vfs_write+0x10/0x10 [ 296.511871][ T38] ? __fget_files+0x2a/0x420 [ 296.511903][ T38] ksys_write+0x14b/0x260 [ 296.511925][ T38] ? __pfx_ksys_write+0x10/0x10 [ 296.511949][ T38] ? rcu_is_watching+0x15/0xb0 [ 296.511978][ T38] ? do_syscall_64+0xbe/0x3b0 [ 296.512004][ T38] do_syscall_64+0xfa/0x3b0 [ 296.512024][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.512044][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.512061][ T38] ? clear_bhb_loop+0x60/0xb0 [ 296.512082][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.512099][ T38] RIP: 0033:0x7f7b3695ebe9 [ 296.512113][ T38] RSP: 002b:00007f7b34bc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 296.512130][ T38] RAX: ffffffffffffffda RBX: 00007f7b36b95fa0 RCX: 00007f7b3695ebe9 [ 296.512143][ T38] RDX: 0000000000000024 RSI: 0000200000000580 RDI: 0000000000000003 [ 296.512154][ T38] RBP: 00007f7b369e1e19 R08: 0000000000000000 R09: 0000000000000000 [ 296.512165][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.512175][ T38] R13: 00007f7b36b96038 R14: 00007f7b36b95fa0 R15: 00007ffff5368f58 [ 296.512204][ T38] [ 296.512257][ T38] [ 296.512257][ T38] Showing all locks held in the system: [ 296.512265][ T38] 7 locks held by kworker/u8:0/12: [ 296.512276][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 296.512321][ T38] #1: ffffc90000117bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 296.512366][ T38] #2: ffff88805d4e9300 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 296.512415][ T38] #3: ffff88805d43a120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 296.512458][ T38] #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 296.512497][ T38] #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 296.512540][ T38] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 296.512583][ T38] 5 locks held by kworker/u8:1/13: [ 296.512592][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 296.512635][ T38] #1: ffffc90000127bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 296.512678][ T38] #2: ffff88805f080898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 296.512721][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 296.512762][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 296.512804][ T38] 2 locks held by ksoftirqd/0/15: [ 296.512814][ T38] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 296.512855][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 296.512897][ T38] 6 locks held by ktimers/0/16: [ 296.512908][ T38] 2 locks held by rcuc/0/20: [ 296.512917][ T38] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 296.512964][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 296.513008][ T38] 2 locks held by rcuc/1/28: [ 296.513017][ T38] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 296.513058][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 296.513101][ T38] 2 locks held by ksoftirqd/1/30: [ 296.513110][ T38] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 296.513151][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 296.513192][ T38] 4 locks held by kworker/1:0/31: [ 296.513201][ T38] #0: ffff88805bacf938 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 296.513248][ T38] #1: ffffc90000a5fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 296.513302][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 296.513344][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 296.513387][ T38] 1 lock held by khungtaskd/38: [ 296.513396][ T38] #0: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 296.513436][ T38] 5 locks held by kworker/u8:2/43: [ 296.513446][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 296.513488][ T38] #1: ffffc90000b47bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 296.513531][ T38] #2: ffff88805e890898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 296.513572][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 296.513614][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 296.513656][ T38] 4 locks held by kworker/1:1/44: [ 296.513666][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 296.513708][ T38] #1: ffffc90000b57bc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 296.513751][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 296.513793][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 296.513837][ T38] 4 locks held by kworker/u9:0/59: [ 296.513847][ T38] #0: ffff8880280ad138 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 296.513889][ T38] #1: ffffc9000125fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 296.513932][ T38] #2: ffff888028698e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 296.513984][ T38] #3: ffff8880286980a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 296.514031][ T38] 5 locks held by kworker/u8:5/159: [ 296.514041][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 296.514083][ T38] #1: ffffc90003a57bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 296.514125][ T38] #2: ffff88805ecb0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 296.514167][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 296.514207][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 296.514254][ T38] 4 locks held by kworker/u8:6/1107: [ 296.514264][ T38] #0: ffff88805b655938 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 296.514311][ T38] #1: ffffc90004bcfbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 296.514354][ T38] #2: ffff88805ba015f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 296.514395][ T38] #3: ffff88805d2758b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 296.514436][ T38] 6 locks held by kworker/u8:7/1160: [ 296.514446][ T38] #0: ffff88805bb9e138 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 296.514491][ T38] #1: ffffc90004dbfbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 296.514534][ T38] #2: ffff888036a615f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 296.514575][ T38] #3: ffff8880232403f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 296.514614][ T38] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 296.514656][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 296.514699][ T38] 3 locks held by kworker/1:2/1232: [ 296.514709][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 296.514752][ T38] #1: ffffc90004f0fbc0 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 296.514794][ T38] #2: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x15/0x50 [ 296.514839][ T38] 2 locks held by aoe_tx0/1323: [ 296.514848][ T38] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 296.514889][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 296.514931][ T38] 3 locks held by kworker/u8:10/1385: [ 296.514979][ T38] 5 locks held by kworker/u8:11/1435: [ 296.514988][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 296.515031][ T38] #1: ffffc9000564fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 296.515073][ T38] #2: ffff88805f2d0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 296.515115][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 296.515156][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 296.515198][ T38] 5 locks held by kworker/u8:12/1456: [ 296.515208][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 296.515250][ T38] #1: ffffc9000561fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 296.515292][ T38] #2: ffff88805fb70898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 296.515334][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 296.515376][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 296.515433][ T38] 4 locks held by kworker/u9:1/5156: [ 296.515443][ T38] #0: ffff888030c17138 ((wq_completion)hci6#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 296.515489][ T38] #1: ffffc90010577bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 296.515531][ T38] #2: ffff88806d1480a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 296.515573][ T38] #3: ffffffff8ee39c38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 296.515616][ T38] 2 locks held by getty/5598: [ 296.515625][ T38] #0: ffff88823bf380a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 296.515670][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 296.515711][ T38] 2 locks held by dhcpcd/5640: [ 296.515720][ T38] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 296.515762][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 296.515806][ T38] 3 locks held by syz-executor/5825: [ 296.515815][ T38] #0: ffff888032fc1290 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_recvmsg+0xd3/0x560 [ 296.515857][ T38] #1: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 296.515898][ T38] #2: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 296.515947][ T38] 4 locks held by kworker/1:3/5826: [ 296.515956][ T38] #0: ffff88803401bd38 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 296.516003][ T38] #1: ffffc90004defbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 296.516057][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 296.516098][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 296.516141][ T38] 5 locks held by kworker/u9:2/5845: [ 296.516150][ T38] #0: ffff888026703138 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 296.516191][ T38] #1: ffffc90004f2fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 296.516234][ T38] #2: ffff8880295b4e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 296.516279][ T38] #3: ffff8880295b40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 296.516321][ T38] #4: ffffffff8ee39c38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 296.516364][ T38] 6 locks held by kworker/u9:3/5852: [ 296.516374][ T38] #0: ffff8880280ac938 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 296.516416][ T38] #1: ffffc9000500fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 296.516459][ T38] #2: ffff8880237c4e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 296.516503][ T38] #3: ffff8880237c40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 296.516545][ T38] #4: ffffffff8ee39c38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 296.516587][ T38] #5: ffff8880284f5b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 296.516635][ T38] 5 locks held by kworker/u9:4/5854: [ 296.516645][ T38] #0: ffff8880372cb138 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 296.516687][ T38] #1: ffffc9000502fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 296.516730][ T38] #2: ffff88805a500e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 296.516775][ T38] #3: ffff88805a5000a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 296.516817][ T38] #4: ffffffff8ee39c38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 296.516860][ T38] 3 locks held by syz-executor/5857: [ 296.516869][ T38] #0: ffff88805a50ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 296.516908][ T38] #1: ffff88805a50c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 296.516958][ T38] #2: ffffffff8ee39c38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 296.517005][ T38] 4 locks held by kworker/R-wg-cr/5876: [ 296.517015][ T38] #0: ffff88805b331938 ((wq_completion)wg-crypt-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 296.517062][ T38] #1: ffffc9000513fba0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 296.517115][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 296.517156][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 296.517199][ T38] 4 locks held by kworker/R-wg-cr/5878: [ 296.517208][ T38] #0: ffff88805b332938 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 296.517251][ T38] #1: ffffc9000511fba0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 296.517294][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 296.517336][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 296.517379][ T38] 4 locks held by kworker/R-wg-cr/5880: [ 296.517388][ T38] #0: ffff88805b6b8538 ((wq_completion)wg-crypt-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 296.517431][ T38] #1: ffffc9000516fba0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 296.517473][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 296.517515][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 296.517557][ T38] 4 locks held by kworker/R-wg-cr/5881: [ 296.517567][ T38] #0: ffff88805b33f938 ((wq_completion)wg-crypt-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 296.517613][ T38] #1: ffffc9000517fba0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 296.517667][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 296.517708][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 296.517751][ T38] 4 locks held by kworker/R-wg-cr/5886: [ 296.517761][ T38] #0: ffff88805baded38 ((wq_completion)wg-crypt-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 296.517807][ T38] #1: ffffc900051ffba0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 296.517860][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 296.517901][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 296.517949][ T38] 4 locks held by kworker/R-wg-cr/5887: [ 296.517959][ T38] #0: ffff88805badfd38 ((wq_completion)wg-crypt-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 296.518005][ T38] #1: ffffc9000520fba0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 296.518059][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 296.518101][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 296.518143][ T38] 4 locks held by kworker/R-wg-cr/5889: [ 296.518153][ T38] #0: ffff88805baed938 ((wq_completion)wg-crypt-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 296.518200][ T38] #1: ffffc9000523fba0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 296.518243][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 296.518284][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 296.518326][ T38] 2 locks held by napi/wg0-0/5892: [ 296.518336][ T38] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 296.518376][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 296.518420][ T38] 2 locks held by napi/wg1-0/5901: [ 296.518430][ T38] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 296.518471][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 298.914065][ T38] 2 locks held by napi/wg2-0/5903: [ 298.914077][ T38] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 298.914121][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 298.914164][ T38] 5 locks held by kworker/1:4/5904: [ 298.914174][ T38] #0: ffff88805b333938 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 298.914221][ T38] #1: ffffc9000530fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 298.914275][ T38] #2: ffff88805d274388 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 298.914317][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 298.914358][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 298.914401][ T38] 2 locks held by napi/wg1-0/5907: [ 298.914411][ T38] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 298.914452][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 298.914497][ T38] 4 locks held by kworker/0:4/5923: [ 298.914507][ T38] #0: ffff88805bb47d38 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 298.914554][ T38] #1: ffffc9000543fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 298.914624][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 298.914666][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 298.914708][ T38] 5 locks held by kworker/1:5/5924: [ 298.914718][ T38] #0: ffff88805b6b8138 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 298.914765][ T38] #1: ffffc9000544fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 298.914822][ T38] #2: ffff88805d272e58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 298.914861][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 298.914902][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 298.914944][ T38] 4 locks held by kworker/1:6/5929: [ 298.914954][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 298.914996][ T38] #1: ffffc9000547fbc0 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 298.915037][ T38] #2: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: reg_todo+0x1c/0x8c0 [ 298.915081][ T38] #3: ffff88805f660898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0xaf/0x1c0 [ 298.915125][ T38] 4 locks held by kworker/0:5/5952: [ 298.915134][ T38] #0: ffff88805b33f938 ((wq_completion)wg-crypt-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 298.915180][ T38] #1: ffffc9000554fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 298.915233][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 298.915274][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 298.915317][ T38] 2 locks held by kworker/1:7/5994: [ 298.915326][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 298.915368][ T38] #1: ffffc90005a7fbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 298.915411][ T38] 4 locks held by kworker/1:9/6162: [ 298.915420][ T38] #0: ffff88805bade938 ((wq_completion)wg-kex-wg1#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 298.915466][ T38] #1: ffffc9000662fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 298.915520][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 298.915561][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 298.915610][ T38] 5 locks held by kworker/u8:14/6163: [ 298.915620][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 298.915662][ T38] #1: ffffc9000663fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 298.915704][ T38] #2: ffff88805fe90898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 298.915744][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 298.915786][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 298.915829][ T38] 2 locks held by syz.1.93/6167: [ 298.915839][ T38] #0: ffff888032ec8908 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 298.915880][ T38] #1: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 298.915921][ T38] 5 locks held by kworker/u8:15/6166: [ 298.915931][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 298.915973][ T38] #1: ffffc90005d7fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 298.916016][ T38] #2: ffff88805f920898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 298.916058][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 298.916099][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 298.916142][ T38] 5 locks held by kworker/u8:16/6168: [ 298.916151][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 298.916194][ T38] #1: ffffc9000664fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 298.916237][ T38] #2: ffff88805f250898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 298.916278][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 298.916320][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 298.916362][ T38] 6 locks held by kworker/u8:17/6170: [ 298.916372][ T38] #0: ffff88805bc11138 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 298.916418][ T38] #1: ffffc90006687bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 298.916462][ T38] #2: ffff88805bc295f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 298.916502][ T38] #3: ffff88805d277880 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 298.916542][ T38] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 298.916584][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 298.916632][ T38] 4 locks held by kworker/u8:18/6171: [ 298.916642][ T38] #0: ffff88805b650938 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 298.916684][ T38] #1: ffffc900068a7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 298.916727][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 298.916769][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 298.916811][ T38] 4 locks held by kworker/u8:19/6172: [ 298.916821][ T38] #0: ffff888036482138 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 298.916866][ T38] #1: ffffc900068b7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 298.916909][ T38] #2: ffff88803a2ed5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 298.916950][ T38] #3: ffff888036849928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 298.916991][ T38] 6 locks held by kworker/u8:20/6173: [ 298.917001][ T38] #0: ffff88805b50a138 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 298.917047][ T38] #1: ffffc90005d8fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 298.917090][ T38] #2: ffff88805b5715f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 298.917130][ T38] #3: ffff888036848e90 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 298.917170][ T38] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 298.917212][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 298.917254][ T38] 6 locks held by kworker/u8:21/6175: [ 298.917264][ T38] #0: ffff88805bb9b138 ((wq_completion)wg-kex-wg0#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 298.917311][ T38] #1: ffffc90006677bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 298.917354][ T38] #2: ffff88805ba055f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 298.917391][ T38] #3: ffff88803684f880 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 298.917430][ T38] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 298.917471][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 298.917514][ T38] 4 locks held by kworker/0:7/6178: [ 298.917524][ T38] #0: ffff88803a19cd38 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 298.917571][ T38] #1: ffffc900068c7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 298.917635][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 298.917677][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 298.917720][ T38] 4 locks held by kworker/0:10/6185: [ 298.917730][ T38] #0: ffff88805baed538 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 298.917776][ T38] #1: ffffc90006907bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 298.917830][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 298.917871][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 298.917914][ T38] 5 locks held by kworker/u8:26/6186: [ 298.917924][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 298.917966][ T38] #1: ffffc90006917bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 298.918015][ T38] #2: ffff88805e830898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 298.918057][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 298.918098][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 298.918141][ T38] 4 locks held by kworker/u8:27/6187: [ 298.918158][ T38] #0: ffff888036482138 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 298.918208][ T38] #1: ffffc90006937bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 298.918250][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 298.918292][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 298.918335][ T38] 4 locks held by kworker/0:13/6190: [ 298.918344][ T38] #0: ffff88805b331938 ((wq_completion)wg-crypt-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 298.918392][ T38] #1: ffffc90006fe7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 298.918445][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 300.968730][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 300.968793][ T38] 4 locks held by kworker/0:17/6194: [ 300.968805][ T38] 4 locks held by kworker/u8:28/6197: [ 300.968814][ T38] #0: ffff88814d55e938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 300.968860][ T38] #1: ffffc90007bffbc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 300.968902][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 300.968945][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 300.968988][ T38] 4 locks held by kworker/1:11/6198: [ 300.968997][ T38] #0: ffff88805baed938 ((wq_completion)wg-crypt-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 300.969042][ T38] #1: ffffc90007c0fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 300.969096][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 300.969138][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 300.969180][ T38] 3 locks held by kworker/u8:29/6200: [ 300.969190][ T38] #0: ffff888030593938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 300.969232][ T38] #1: ffffc90007c2fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 300.969275][ T38] #2: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 300.969318][ T38] 3 locks held by kworker/1:12/6201: [ 300.969328][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 300.969369][ T38] #1: ffffc90008027bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 300.969411][ T38] #2: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30 [ 300.969457][ T38] 4 locks held by kworker/1:13/6202: [ 300.969467][ T38] #0: ffff88805badfd38 ((wq_completion)wg-crypt-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 300.969513][ T38] #1: ffffc9000841fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 300.969567][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 300.969609][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 300.969658][ T38] 7 locks held by kworker/u8:30/6203: [ 300.969668][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 300.969710][ T38] #1: ffffc9000842fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 300.969754][ T38] #2: ffff88805cede300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 300.969800][ T38] #3: ffff88805ce8a920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 300.969842][ T38] #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 300.969883][ T38] #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 300.969925][ T38] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 300.969968][ T38] 4 locks held by kworker/1:14/6204: [ 300.969978][ T38] #0: ffff88805baed538 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 300.970025][ T38] #1: ffffc90004eefbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 300.970078][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 300.970119][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 300.970162][ T38] 4 locks held by kworker/1:15/6205: [ 300.970172][ T38] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 300.970214][ T38] #1: ffffc9000843fbc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 300.970258][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 300.970299][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 300.970342][ T38] 4 locks held by kworker/1:16/6206: [ 300.970352][ T38] #0: ffff88805b6b8538 ((wq_completion)wg-crypt-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 300.970393][ T38] #1: ffffc90008837bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 300.970447][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 300.970488][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 300.970531][ T38] 4 locks held by kworker/1:17/6211: [ 300.970540][ T38] #0: ffff88805b33f938 ((wq_completion)wg-crypt-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 300.970586][ T38] #1: ffffc90008c3fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 300.970646][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 300.970688][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 300.970730][ T38] 4 locks held by kworker/1:18/6213: [ 300.970740][ T38] #0: ffff88805b863938 ((wq_completion)wg-crypt-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 300.970787][ T38] #1: ffffc90005c0fbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 300.970830][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 300.970872][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 300.970915][ T38] 6 locks held by kworker/u8:32/6216: [ 300.970925][ T38] #0: ffff88805bc16138 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 300.970970][ T38] #1: ffffc9000943fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 300.971014][ T38] #2: ffff88805bc2d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 300.971055][ T38] #3: ffff888023240e90 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 300.971096][ T38] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 300.971137][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 300.971180][ T38] 4 locks held by kworker/1:19/6217: [ 300.971189][ T38] #0: ffff88805b33f538 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 300.971237][ T38] #1: ffffc90005bc7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 300.971290][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 300.971332][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 300.971375][ T38] 6 locks held by kworker/1:21/6220: [ 300.971385][ T38] #0: ffff88805b28bd38 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 300.971431][ T38] #1: ffffc90009c4fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 300.971484][ T38] #2: ffff88803a2ed5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x115/0x970 [ 300.971525][ T38] #3: ffff888036849928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x126/0x970 [ 300.971565][ T38] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 300.971607][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 300.971655][ T38] 1 lock held by syz-executor/6221: [ 300.971665][ T38] #0: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 300.971712][ T38] 4 locks held by kworker/0:21/6223: [ 300.971721][ T38] #0: ffff88805bacf938 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 300.971768][ T38] #1: ffffc90009c7fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 300.971823][ T38] #2: ffff88805ba055f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 300.971864][ T38] #3: ffff88803684f880 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 300.971905][ T38] 1 lock held by dhcpcd/6224: [ 300.971914][ T38] #0: ffff88805dd231b8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 300.971959][ T38] 6 locks held by kworker/1:22/6225: [ 300.971969][ T38] #0: ffff88805b332538 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 300.972015][ T38] #1: ffffc9000a45fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 300.972068][ T38] #2: ffff88805b5755f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x115/0x970 [ 300.972109][ T38] #3: ffff88803684a3c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x126/0x970 [ 300.972149][ T38] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 300.972190][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 300.972233][ T38] 4 locks held by kworker/0:22/6226: [ 300.972243][ T38] #0: ffff888141322138 ((wq_completion)wg-crypt-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 300.972290][ T38] #1: ffffc9000a46fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 300.972344][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 300.972384][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 300.972428][ T38] 4 locks held by kworker/u9:6/6232: [ 300.972438][ T38] #0: ffff888023e3d938 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 300.972484][ T38] #1: ffffc90004ecfbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 300.972527][ T38] #2: ffff8880638180a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 300.972568][ T38] #3: ffffffff8ee39c38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 300.972609][ T38] 1 lock held by syz-executor/6235: [ 300.972624][ T38] #0: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 300.972670][ T38] 4 locks held by kworker/1:24/6236: [ 300.972679][ T38] #0: ffff88805b6b8538 ((wq_completion)wg-crypt-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 300.972722][ T38] #1: ffffc9000b48fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 300.972775][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 300.972817][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 300.972860][ T38] 4 locks held by kworker/u9:7/6238: [ 300.972869][ T38] #0: ffff88814cdc6938 ((wq_completion)krxrpcd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 300.972912][ T38] #1: ffffc9000b4afbc0 ((work_completion)(&rxnet->peer_keepalive_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 300.972955][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 300.972996][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 300.973039][ T38] 5 locks held by kworker/1:25/6239: [ 300.973049][ T38] #0: ffff88803a19cd38 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 300.973096][ T38] #1: ffffc9000b8a7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 300.973149][ T38] #2: ffff88805d2758b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 300.973190][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 300.973232][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 300.973275][ T38] 4 locks held by kworker/1:26/6240: [ 300.973284][ T38] #0: ffff88805bb47d38 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 300.973331][ T38] #1: ffffc9000bc9fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 300.973385][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 300.973426][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 300.973470][ T38] 4 locks held by kworker/0:26/6243: [ 300.973479][ T38] #0: ffff88805b33f538 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0