last executing test programs: 1m36.30728576s ago: executing program 3 (id=1180): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 1m36.047112587s ago: executing program 3 (id=1183): r0 = userfaultfd(0x80801) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x7}) 1m35.842887335s ago: executing program 3 (id=1186): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = socket$kcm(0x2, 0xa, 0x73) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) 1m34.925147178s ago: executing program 3 (id=1195): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m34.472731293s ago: executing program 3 (id=1199): r0 = socket$rxrpc(0x21, 0x2, 0xa) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000100)={0x0, 0x81, 0x0, 0x18000}) bind$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2, @broadcast}}, 0x24) writev(r0, &(0x7f0000001840)=[{&(0x7f0000000380)=']', 0x1}], 0x1) 1m33.453169405s ago: executing program 3 (id=1207): r0 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0xffffffff, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f00000005c0)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1m32.869097588s ago: executing program 32 (id=1207): r0 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0xffffffff, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f00000005c0)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1m13.237732634s ago: executing program 1 (id=1375): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000080)={0x8, 0x1, 0x609152b0, 0x10000000, 0xe, "3eccd2000500"}) 1m12.942628424s ago: executing program 1 (id=1379): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) bind$llc(r0, 0x0, 0x0) 1m12.644803632s ago: executing program 5 (id=1383): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000001100)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x1) setreuid(0xffffffffffffffff, 0xee01) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1m12.299107477s ago: executing program 5 (id=1387): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x30, r1, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000080}, 0x840) 1m11.662361354s ago: executing program 5 (id=1392): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) 1m11.662127062s ago: executing program 4 (id=1393): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000740)={0x79, 0x0, 0xc73}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a00000000000000f9ff"]) 1m11.299638865s ago: executing program 5 (id=1396): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) sendmsg$netlink(r0, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000005cc0)=[{&(0x7f0000001380)=ANY=[], 0x38}], 0x1, 0x0, 0x0, 0x44011}, 0x0) 1m10.878548131s ago: executing program 1 (id=1398): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x0, 0x5c}}, [@migrate={0x9c, 0x11, [{@in6=@remote, @in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x33, 0x1, 0x0, 0x3500, 0xa, 0x8}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m10.684968778s ago: executing program 1 (id=1399): r0 = syz_io_uring_setup(0x1124, &(0x7f0000000540)={0x0, 0x2, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) 1m8.745985357s ago: executing program 5 (id=1403): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabh\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)r\xdc\x17\x99J\xaeE\xbdt\xe2L^2\xca\x8f\x1cZ\x84\xe3\xe6\x86iC\xcc\xa9\xbf\xeb\x92\r \xa86\x82\xc3\xa8\xf1\xb4\x0f\x9b\x88\x0f\xc8U\x99;\x9c\x17\xfc7\xdd\xd6\x8e%4\x17~\x9d\xe1\a\x00\x00\x00\xa5\x8fG\\\xd8\x80\x15\xcaw\x7f\xac\x063\xbaE\x11\xcc~Q\xcb/\x8bv\xf2B_\xc5\x8d\xb3\xdd\xbd\x1e\xde\x19\xb5\xc4\xcf%p\x89\xa2\xda\xc7', 0x2) r1 = dup(r0) ftruncate(r1, 0x1) 1m8.286160512s ago: executing program 5 (id=1405): io_setup(0x23, &(0x7f0000000280)=0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0) 1m8.167433228s ago: executing program 2 (id=1406): sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="0500ffffffff0c0000002e00000008000300", @ANYRES32, @ANYBLOB="0a00340001010101010100000800490001ac0f0006006600060800000a"], 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x880) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 1m7.604675382s ago: executing program 2 (id=1407): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x123c}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m6.967797269s ago: executing program 0 (id=1408): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 1m6.9677s ago: executing program 2 (id=1409): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r0, 0x1) linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x0) 1m6.613470275s ago: executing program 2 (id=1410): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x36}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m6.578539221s ago: executing program 0 (id=1411): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xfffe, 0x6, 0x101, 0x6}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}}) 1m5.258913672s ago: executing program 0 (id=1412): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000b3b000/0x4000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) unshare(0x8020400) 1m5.224864267s ago: executing program 1 (id=1413): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001076d6f646500000000000005000000000000000000000000000000000000000010050003000500000010"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 1m5.199406135s ago: executing program 4 (id=1414): socketpair$unix(0x1, 0x1, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x4}}, 0x0, 0x0}}) 1m4.925709004s ago: executing program 4 (id=1415): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1m4.644295777s ago: executing program 1 (id=1416): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000280)={0x0, 0x400000b4, 0x0, 0x0}) 1m4.024101184s ago: executing program 4 (id=1417): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x49}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48840}, 0x4) 1m3.693146301s ago: executing program 4 (id=1418): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000340)={0x0, 0xf, 0x2, "3ad5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1m2.330121916s ago: executing program 0 (id=1419): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000001a00)=0xf2b, 0x37) getsockopt$inet6_buf(r0, 0x29, 0x6, 0xfffffffffffffffd, &(0x7f00000000c0)=0xa4) 1m1.905482157s ago: executing program 2 (id=1420): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f00000004c0)={0x2020}, 0x2020) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) 1m1.58381479s ago: executing program 0 (id=1421): r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000001280)=@in6={0x21, 0x300, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xb9}}, 0x24) 1m1.415139323s ago: executing program 2 (id=1422): socket(0x1d, 0x2, 0x6) r0 = syz_io_uring_setup(0x239, &(0x7f00000001c0)={0x0, 0x0, 0x11900}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8746}}) io_uring_enter(r0, 0x6256, 0x0, 0x0, 0x0, 0x0) 1m1.357942965s ago: executing program 4 (id=1423): r0 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 1m1.209979878s ago: executing program 0 (id=1424): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001900)={0x44, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 0s ago: executing program 33 (id=1424): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001900)={0x44, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.33' (ED25519) to the list of known hosts. [ 84.714331][ T5823] cgroup: Unknown subsys name 'net' [ 84.944514][ T5823] cgroup: Unknown subsys name 'cpuset' [ 85.000273][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.843389][ T9] cfg80211: failed to load regulatory.db [ 86.983302][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.304007][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.307610][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.329767][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.350634][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.352015][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.354110][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.369486][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.376778][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.379905][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.386550][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.388068][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.390398][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.394107][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.395862][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.396329][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.398048][ T5153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.399037][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.402894][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.417255][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.433337][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.439508][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.443971][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.445269][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.577333][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.581188][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.574847][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 92.586811][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 92.695779][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 92.706806][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 92.918910][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 93.480592][ T59] Bluetooth: hci4: command tx timeout [ 93.559454][ T59] Bluetooth: hci0: command tx timeout [ 93.650446][ T59] Bluetooth: hci3: command tx timeout [ 93.654521][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.654776][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.655839][ T5836] bridge_slave_0: entered allmulticast mode [ 93.662888][ T5836] bridge_slave_0: entered promiscuous mode [ 93.667697][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.669047][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.670902][ T5837] bridge_slave_0: entered allmulticast mode [ 93.673765][ T5837] bridge_slave_0: entered promiscuous mode [ 93.719325][ T59] Bluetooth: hci1: command tx timeout [ 93.719507][ T59] Bluetooth: hci2: command tx timeout [ 93.883903][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.884094][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.884317][ T5836] bridge_slave_1: entered allmulticast mode [ 93.888221][ T5836] bridge_slave_1: entered promiscuous mode [ 93.905562][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.905716][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.906006][ T5837] bridge_slave_1: entered allmulticast mode [ 93.908961][ T5837] bridge_slave_1: entered promiscuous mode [ 94.397932][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.398053][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.398171][ T5834] bridge_slave_0: entered allmulticast mode [ 94.400722][ T5834] bridge_slave_0: entered promiscuous mode [ 94.404379][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.404535][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.404708][ T5835] bridge_slave_0: entered allmulticast mode [ 94.407458][ T5835] bridge_slave_0: entered promiscuous mode [ 94.650447][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.650689][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.650938][ T5834] bridge_slave_1: entered allmulticast mode [ 94.653045][ T5834] bridge_slave_1: entered promiscuous mode [ 94.654278][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.654405][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.654515][ T5835] bridge_slave_1: entered allmulticast mode [ 94.656197][ T5835] bridge_slave_1: entered promiscuous mode [ 94.671920][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.676367][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.742020][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.742184][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.742400][ T5841] bridge_slave_0: entered allmulticast mode [ 94.745435][ T5841] bridge_slave_0: entered promiscuous mode [ 94.906187][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.908735][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.917497][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.917683][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.917899][ T5841] bridge_slave_1: entered allmulticast mode [ 94.921523][ T5841] bridge_slave_1: entered promiscuous mode [ 95.294481][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.298114][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.544397][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.546840][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.548679][ T5837] team0: Port device team_slave_0 added [ 95.554355][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.556730][ T5836] team0: Port device team_slave_0 added [ 95.560662][ T5844] Bluetooth: hci4: command tx timeout [ 95.640787][ T5844] Bluetooth: hci0: command tx timeout [ 95.719376][ T5844] Bluetooth: hci3: command tx timeout [ 95.739703][ T5837] team0: Port device team_slave_1 added [ 95.744378][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.746975][ T5836] team0: Port device team_slave_1 added [ 95.799464][ T5844] Bluetooth: hci2: command tx timeout [ 95.799501][ T5844] Bluetooth: hci1: command tx timeout [ 96.511827][ T5834] team0: Port device team_slave_0 added [ 96.514173][ T5835] team0: Port device team_slave_0 added [ 96.724363][ T5834] team0: Port device team_slave_1 added [ 96.727535][ T5835] team0: Port device team_slave_1 added [ 96.728742][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.728752][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.728772][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.793264][ T5841] team0: Port device team_slave_0 added [ 96.807534][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.807551][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.807579][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.004196][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.004214][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.004241][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.006996][ T5841] team0: Port device team_slave_1 added [ 97.008025][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.008037][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.008052][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.396656][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.396674][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.396692][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.398095][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.398109][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.398135][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.495070][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.495087][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.495115][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.498386][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.498399][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.498413][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.509754][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.509771][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.509798][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.640464][ T59] Bluetooth: hci4: command tx timeout [ 97.670618][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.670637][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.670664][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.719385][ T59] Bluetooth: hci0: command tx timeout [ 97.799432][ T59] Bluetooth: hci3: command tx timeout [ 97.879497][ T59] Bluetooth: hci1: command tx timeout [ 97.879534][ T59] Bluetooth: hci2: command tx timeout [ 97.955964][ T5837] hsr_slave_0: entered promiscuous mode [ 97.957118][ T5837] hsr_slave_1: entered promiscuous mode [ 97.984874][ T5836] hsr_slave_0: entered promiscuous mode [ 97.986469][ T5836] hsr_slave_1: entered promiscuous mode [ 97.987720][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 97.987824][ T5836] Cannot create hsr debugfs directory [ 98.444865][ T5834] hsr_slave_0: entered promiscuous mode [ 98.445829][ T5834] hsr_slave_1: entered promiscuous mode [ 98.446368][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 98.446384][ T5834] Cannot create hsr debugfs directory [ 98.610189][ T5835] hsr_slave_0: entered promiscuous mode [ 98.611761][ T5835] hsr_slave_1: entered promiscuous mode [ 98.612798][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 98.612823][ T5835] Cannot create hsr debugfs directory [ 98.717843][ T5841] hsr_slave_0: entered promiscuous mode [ 98.718700][ T5841] hsr_slave_1: entered promiscuous mode [ 98.720436][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 98.720460][ T5841] Cannot create hsr debugfs directory [ 99.719415][ T5844] Bluetooth: hci4: command tx timeout [ 99.799522][ T5844] Bluetooth: hci0: command tx timeout [ 99.880615][ T5844] Bluetooth: hci3: command tx timeout [ 99.959483][ T5844] Bluetooth: hci2: command tx timeout [ 99.959511][ T5844] Bluetooth: hci1: command tx timeout [ 100.478956][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.518897][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.556577][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.616513][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.756410][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.809901][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.848910][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.927422][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.076096][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.119737][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.158876][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.232252][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.475533][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.524889][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.569868][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.634770][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.823054][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.855439][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.906818][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.947794][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.986707][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.082456][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.121165][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.146322][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.146939][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.227489][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.227740][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.297497][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.354609][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.354860][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.403088][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.421878][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.422091][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.565487][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.640012][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.643615][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.643858][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.716425][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.716631][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.845211][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.921939][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.927888][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.929445][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.004175][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.009475][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.117832][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.209568][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.209740][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.272014][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.274689][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.453712][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.642952][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.932061][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.060364][ T5836] veth0_vlan: entered promiscuous mode [ 104.113541][ T5836] veth1_vlan: entered promiscuous mode [ 104.217303][ T5834] veth0_vlan: entered promiscuous mode [ 104.306358][ T5834] veth1_vlan: entered promiscuous mode [ 104.433887][ T5836] veth0_macvtap: entered promiscuous mode [ 104.466458][ T5836] veth1_macvtap: entered promiscuous mode [ 104.548358][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.604090][ T5834] veth0_macvtap: entered promiscuous mode [ 104.626860][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.653903][ T5834] veth1_macvtap: entered promiscuous mode [ 104.677616][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.754083][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.754873][ T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.771332][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.796218][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.818475][ T67] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.850902][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.931774][ T5837] veth0_vlan: entered promiscuous mode [ 104.934153][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.109947][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.152485][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.163671][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.164326][ T5837] veth1_vlan: entered promiscuous mode [ 105.196412][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.196903][ T5835] veth0_vlan: entered promiscuous mode [ 105.417848][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.417870][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.459029][ T5835] veth1_vlan: entered promiscuous mode [ 105.588601][ T5841] veth0_vlan: entered promiscuous mode [ 105.647307][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.647329][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.741676][ T5114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.741698][ T5114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.752172][ T5841] veth1_vlan: entered promiscuous mode [ 105.756948][ T5837] veth0_macvtap: entered promiscuous mode [ 105.882876][ T5837] veth1_macvtap: entered promiscuous mode [ 105.943439][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.943462][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.990254][ T5835] veth0_macvtap: entered promiscuous mode [ 106.042463][ T5835] veth1_macvtap: entered promiscuous mode [ 106.048056][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.108085][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.114780][ T5841] veth0_macvtap: entered promiscuous mode [ 106.171734][ T5841] veth1_macvtap: entered promiscuous mode [ 106.185738][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.194391][ T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.227851][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.227944][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.262658][ T1151] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.311171][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.503216][ T1167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.530169][ T1167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.553365][ T3531] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.571661][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.612197][ T3531] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.705441][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.840816][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.862182][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.940584][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.958451][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.984150][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.984173][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.474563][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.474586][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.677917][ T3531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.677938][ T3531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.217689][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.217711][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.256584][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.256609][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.509476][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.509497][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.928316][ T5987] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.106094][ T5922] Process accounting resumed [ 109.345672][ T5994] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.482043][ T5994] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 109.519650][ T5994] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 110.873268][ T31] hid-generic 0005:10CF:05DF.0001: unknown main item tag 0x0 [ 110.917163][ T31] hid-generic 0005:10CF:05DF.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 112.031717][ T5909] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 112.244046][ T5909] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 112.244116][ T5909] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 112.244139][ T5909] usb 1-1: config 0 interface 0 has no altsetting 0 [ 112.294536][ T5909] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 112.294569][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 112.294589][ T5909] usb 1-1: Product: syz [ 112.294602][ T5909] usb 1-1: Manufacturer: syz [ 112.294615][ T5909] usb 1-1: SerialNumber: syz [ 112.365152][ T5909] usb 1-1: config 0 descriptor?? [ 112.405863][ T5909] hub 1-1:0.0: bad descriptor, ignoring hub [ 112.405908][ T5909] hub 1-1:0.0: probe with driver hub failed with error -5 [ 112.458917][ T5909] usb 1-1: selecting invalid altsetting 0 [ 112.821907][ T5909] usb 1-1: USB disconnect, device number 2 [ 113.105226][ T6038] pimreg: entered allmulticast mode [ 113.131007][ T6040] pimreg: left allmulticast mode [ 113.282056][ T6042] udevd[6042]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.495696][ T5909] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 113.672287][ T5909] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 113.672356][ T5909] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 113.672379][ T5909] usb 1-1: config 0 interface 0 has no altsetting 0 [ 113.705208][ T5909] usb 1-1: string descriptor 0 read error: -22 [ 113.705392][ T5909] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 113.705416][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 113.745811][ T5909] usb 1-1: config 0 descriptor?? [ 113.757330][ T5909] hub 1-1:0.0: bad descriptor, ignoring hub [ 113.757374][ T5909] hub 1-1:0.0: probe with driver hub failed with error -5 [ 113.793472][ T5909] usb 1-1: selecting invalid altsetting 0 [ 114.019966][ T5909] usb 1-1: USB disconnect, device number 3 [ 114.299031][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.776915][ T6086] netlink: 32 bytes leftover after parsing attributes in process `syz.0.50'. [ 115.776956][ T6086] netlink: 152 bytes leftover after parsing attributes in process `syz.0.50'. [ 115.786787][ T6085] ======================================================= [ 115.786787][ T6085] WARNING: The mand mount option has been deprecated and [ 115.786787][ T6085] and is ignored by this kernel. Remove the mand [ 115.786787][ T6085] option from the mount to silence this warning. [ 115.786787][ T6085] ======================================================= [ 115.787566][ T6085] 9pnet_fd: p9_fd_create_unix (6085): problem connecting socket: ./file0: -30 [ 115.797248][ T6086] netlink: 152 bytes leftover after parsing attributes in process `syz.0.50'. [ 116.809338][ T5909] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.973249][ T5909] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.973280][ T5909] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.976009][ T5909] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 116.976038][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 116.976058][ T5909] usb 5-1: SerialNumber: syz [ 117.338331][ T5909] usb 5-1: 0:2 : does not exist [ 117.428722][ T5909] usb 5-1: USB disconnect, device number 2 [ 117.518013][ T6049] udevd[6049]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.955103][ T6122] syz.3.65 uses obsolete (PF_INET,SOCK_PACKET) [ 118.210639][ T5929] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 118.273528][ T5909] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.361303][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 118.376053][ T5929] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.376081][ T5929] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.429409][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 118.429405][ T5929] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 118.429434][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.429452][ T5929] usb 4-1: Product: syz [ 118.429466][ T5929] usb 4-1: Manufacturer: syz [ 118.429479][ T5929] usb 4-1: SerialNumber: syz [ 118.432975][ T5909] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.432998][ T5909] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.509486][ T5909] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 118.509517][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.509536][ T5909] usb 5-1: Product: syz [ 118.509550][ T5909] usb 5-1: Manufacturer: syz [ 118.509562][ T5909] usb 5-1: SerialNumber: syz [ 118.681385][ T5929] usb 4-1: 0:2 : does not exist [ 118.705442][ T5929] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 118.853987][ T5929] usb 4-1: USB disconnect, device number 2 [ 119.015855][ T5909] usb 5-1: 0:2 : does not exist [ 119.428274][ T5909] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 119.668889][ T5909] usb 5-1: USB disconnect, device number 3 [ 119.906717][ T6049] udevd[6049]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.173386][ T6049] udevd[6049]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 120.293085][ T5929] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 120.456550][ T5929] usb 4-1: Using ep0 maxpacket: 8 [ 120.465725][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.465771][ T5929] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 120.465792][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.472779][ T5929] usb 4-1: config 0 descriptor?? [ 120.948422][ T5929] hid-multitouch 0003:0EEF:72C4.0002: unknown main item tag 0x0 [ 120.948459][ T5929] hid-multitouch 0003:0EEF:72C4.0002: unknown main item tag 0x0 [ 120.948485][ T5929] hid-multitouch 0003:0EEF:72C4.0002: unknown main item tag 0x0 [ 120.948510][ T5929] hid-multitouch 0003:0EEF:72C4.0002: unknown main item tag 0x0 [ 120.948535][ T5929] hid-multitouch 0003:0EEF:72C4.0002: unknown main item tag 0x0 [ 120.989967][ T5929] hid-multitouch 0003:0EEF:72C4.0002: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 121.131565][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.77'. [ 121.174297][ T5929] usb 4-1: USB disconnect, device number 3 [ 121.398487][ T6153] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.79'. [ 121.984297][ T6163] Zero length message leads to an empty skb [ 122.879299][ T5921] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 123.034296][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 123.140081][ T5921] usb 2-1: unable to get BOS descriptor or descriptor too short [ 123.140166][ T5921] usb 2-1: no configurations [ 123.140179][ T5921] usb 2-1: can't read configurations, error -22 [ 123.324581][ T5914] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 123.479667][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 123.485374][ T5914] usb 5-1: config 0 has an invalid interface number: 58 but max is 27 [ 123.485402][ T5914] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.485421][ T5914] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 28 [ 123.485442][ T5914] usb 5-1: config 0 has no interface number 0 [ 123.485496][ T5914] usb 5-1: config 0 interface 58 altsetting 0 endpoint 0x6 has invalid maxpacket 56166, setting to 64 [ 123.485525][ T5914] usb 5-1: config 0 interface 58 altsetting 0 endpoint 0x7 has invalid maxpacket 64800, setting to 64 [ 123.485551][ T5914] usb 5-1: config 0 interface 58 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 123.485574][ T5914] usb 5-1: config 0 interface 58 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 123.485599][ T5914] usb 5-1: config 0 interface 58 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 123.485621][ T5914] usb 5-1: config 0 interface 58 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 123.493093][ T5914] usb 5-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice=5c.24 [ 123.493126][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.493148][ T5914] usb 5-1: Product: syz [ 123.493162][ T5914] usb 5-1: Manufacturer: syz [ 123.493176][ T5914] usb 5-1: SerialNumber: syz [ 123.641697][ T5914] usb 5-1: config 0 descriptor?? [ 123.883954][ T5914] appletouch 5-1:0.58: Could not find int-in endpoint [ 123.883994][ T5914] appletouch 5-1:0.58: probe with driver appletouch failed with error -5 [ 123.885743][ T5914] usbhid 5-1:0.58: couldn't find an input interrupt endpoint [ 123.934065][ T5914] usb 5-1: USB disconnect, device number 4 [ 124.411655][ T5914] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 124.588269][ T5914] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 124.588307][ T5914] usb 4-1: config 0 has no interface number 0 [ 124.591102][ T5914] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 124.591130][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.591148][ T5914] usb 4-1: Product: syz [ 124.591162][ T5914] usb 4-1: Manufacturer: syz [ 124.591175][ T5914] usb 4-1: SerialNumber: syz [ 124.651854][ T5914] usb 4-1: config 0 descriptor?? [ 124.898827][ T5914] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 124.921714][ T5914] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 124.922401][ T5914] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 124.922489][ T5914] usb 4-1: media controller created [ 124.974316][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.124617][ T5914] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 125.401872][ T5914] usb 4-1: USB disconnect, device number 4 [ 125.599808][ T6211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.104'. [ 127.049357][ T5921] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 127.069353][ T5922] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 127.180291][ T6239] Driver unsupported XDP return value 0 on prog (id 15) dev N/A, expect packet loss! [ 127.204004][ T5921] usb 1-1: config 7 has an invalid interface number: 101 but max is 0 [ 127.204033][ T5921] usb 1-1: config 7 has no interface number 0 [ 127.224594][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 127.227910][ T5921] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 127.228286][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.228308][ T5921] usb 1-1: Product: syz [ 127.228322][ T5921] usb 1-1: Manufacturer: syz [ 127.229085][ T5921] usb 1-1: SerialNumber: syz [ 127.277099][ T5922] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 127.277130][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 127.277150][ T5922] usb 2-1: Product: syz [ 127.277164][ T5922] usb 2-1: Manufacturer: syz [ 127.277178][ T5922] usb 2-1: SerialNumber: syz [ 127.328102][ T5922] usb 2-1: config 0 descriptor?? [ 127.603159][ T5922] usb 2-1: USB disconnect, device number 4 [ 128.147778][ T5921] as10x_usb: device has been detected [ 128.148427][ T5921] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 128.197941][ T5921] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 128.488628][ T5921] as10x_usb: error during firmware upload part1 [ 128.510200][ T5921] Registered device Elgato EyeTV DTT Deluxe [ 128.514985][ T5921] usb 1-1: USB disconnect, device number 4 [ 128.583689][ T5921] Unregistered device Elgato EyeTV DTT Deluxe [ 128.588500][ T5921] as10x_usb: device has been disconnected [ 129.437391][ T6275] process 'syz.3.131' launched '/dev/fd/5' with NULL argv: empty string added [ 129.669421][ T5922] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 129.679455][ T5921] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 129.819320][ T5922] usb 5-1: Using ep0 maxpacket: 8 [ 129.825499][ T5922] usb 5-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 129.825531][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.825551][ T5922] usb 5-1: Product: syz [ 129.825566][ T5922] usb 5-1: Manufacturer: syz [ 129.825580][ T5922] usb 5-1: SerialNumber: syz [ 129.858738][ T6284] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 129.878179][ T5921] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.878206][ T5921] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.882924][ T5921] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 129.882954][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.882974][ T5921] usb 1-1: Product: syz [ 129.882988][ T5921] usb 1-1: Manufacturer: syz [ 129.883002][ T5921] usb 1-1: SerialNumber: syz [ 129.887333][ T5922] usb 5-1: config 0 descriptor?? [ 129.961257][ T5922] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 130.116444][ T5922] gspca_sn9c2028: read1 error -32 [ 130.117816][ T5922] gspca_sn9c2028: read1 error -32 [ 130.200164][ T5921] usb 1-1: 0:2 : does not exist [ 130.216262][ T5921] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 130.252899][ T5921] usb 1-1: USB disconnect, device number 5 [ 130.361387][ T5957] usb 5-1: USB disconnect, device number 5 [ 130.925819][ T6301] loop6: detected capacity change from 0 to 524287999 [ 132.013572][ T6328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 132.013599][ T6328] gretap0: default FDB implementation only supports local addresses [ 132.195226][ T6330] capability: warning: `syz.0.154' uses deprecated v2 capabilities in a way that may be insecure [ 132.559595][ T49] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 132.715702][ T49] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 132.715733][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.738994][ T49] usb 3-1: config 0 descriptor?? [ 132.765135][ T49] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 132.933765][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.933950][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.119314][ T5909] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 133.279311][ T5909] usb 1-1: Using ep0 maxpacket: 16 [ 133.285998][ T5909] usb 1-1: unable to get BOS descriptor or descriptor too short [ 133.287961][ T5909] usb 1-1: config 9 has an invalid interface number: 48 but max is 0 [ 133.287986][ T5909] usb 1-1: config 9 has no interface number 0 [ 133.288020][ T5909] usb 1-1: config 9 interface 48 has no altsetting 0 [ 133.294631][ T5909] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=f3.7b [ 133.294659][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.294679][ T5909] usb 1-1: Product: syz [ 133.294693][ T5909] usb 1-1: Manufacturer: syz [ 133.294706][ T5909] usb 1-1: SerialNumber: syz [ 133.565350][ T5909] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 133.595482][ T49] gspca_sunplus: reg_w_riv err -71 [ 133.595600][ T49] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 133.624182][ T49] usb 3-1: USB disconnect, device number 2 [ 134.180350][ T5909] gspca_vc032x: reg_r err -71 [ 134.180372][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.180383][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.180392][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.180401][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.180410][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.180418][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.180428][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.180436][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.180445][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.180454][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.180463][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.180480][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.180487][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.180494][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.180502][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.180510][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.180518][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.180527][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.180534][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.180542][ T5909] gspca_vc032x: Unknown sensor... [ 134.180630][ T5909] vc032x 1-1:9.48: probe with driver vc032x failed with error -22 [ 134.189076][ T5909] usb 1-1: USB disconnect, device number 6 [ 138.678106][ T6477] netlink: 20 bytes leftover after parsing attributes in process `syz.4.221'. [ 138.913263][ T6487] warning: `syz.4.226' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 139.155312][ T6496] netlink: 16 bytes leftover after parsing attributes in process `syz.0.229'. [ 139.240243][ T6497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.231'. [ 139.680628][ T5914] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 139.836743][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.836793][ T5914] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 139.836815][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.844543][ T5914] usb 1-1: config 0 descriptor?? [ 139.849027][ T6522] netlink: 44 bytes leftover after parsing attributes in process `syz.1.242'. [ 140.141741][ T6529] netlink: 3 bytes leftover after parsing attributes in process `syz.3.244'. [ 140.154414][ T6529] batadv1: entered allmulticast mode [ 140.266324][ T5914] razer 0003:1532:010E.0003: unknown main item tag 0x1 [ 140.329429][ T5957] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 140.465257][ T5914] razer 0003:1532:010E.0003: failed to enable macro keys: -71 [ 140.468397][ T5914] razer 0003:1532:010E.0003: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.0-1/input0 [ 140.479258][ T5957] usb 3-1: Using ep0 maxpacket: 16 [ 140.486225][ T5957] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 140.486255][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.486274][ T5957] usb 3-1: Product: syz [ 140.486288][ T5957] usb 3-1: Manufacturer: syz [ 140.486302][ T5957] usb 3-1: SerialNumber: syz [ 140.532506][ T5957] usb 3-1: config 0 descriptor?? [ 140.554443][ T5957] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 140.581242][ T5914] usb 1-1: USB disconnect, device number 7 [ 140.751402][ T5957] gp8psk: usb in 128 operation failed. [ 140.769433][ T5957] gp8psk: usb in 137 operation failed. [ 140.769455][ T5957] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 140.770487][ T5957] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 140.770551][ T5957] usb 3-1: media controller created [ 140.858763][ T5957] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.896867][ T5957] gp8psk_fe: Frontend revision 1 attached [ 140.896932][ T5957] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 140.897535][ T5957] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 141.208579][ T5957] gp8psk: usb in 137 operation failed. [ 141.208599][ T5957] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 141.208611][ T5957] gp8psk: found Genpix USB device pID = 201 (hex) [ 141.234636][ T5957] usb 3-1: USB disconnect, device number 3 [ 141.381615][ T5957] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 142.433340][ T6578] netlink: 36 bytes leftover after parsing attributes in process `syz.4.265'. [ 142.869521][ T6588] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 143.019425][ T5957] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 143.173209][ T5957] usb 4-1: Using ep0 maxpacket: 32 [ 143.176641][ T5957] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 143.176668][ T5957] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 143.176687][ T5957] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 143.176708][ T5957] usb 4-1: config 1 has no interface number 0 [ 143.176760][ T5957] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.176787][ T5957] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 143.176831][ T5957] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 143.176854][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.287759][ T5957] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 143.505435][ T5957] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 143.979317][ T5929] usb 4-1: USB disconnect, device number 5 [ 143.982277][ T5929] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 144.850773][ T5914] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 145.006542][ T5914] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.006570][ T5914] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.008163][ T5914] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 145.008190][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 145.008210][ T5914] usb 3-1: SerialNumber: syz [ 145.265741][ T6634] input: syz0 as /devices/virtual/input/input5 [ 145.292798][ T5914] usb 3-1: 0:2 : does not exist [ 145.335638][ T5914] usb 3-1: USB disconnect, device number 4 [ 145.513713][ T5929] kernel read not supported for file /dsp (pid: 5929 comm: kworker/1:5) [ 146.659990][ T6668] Bluetooth: MGMT ver 1.23 [ 147.702557][ T6686] netlink: 24 bytes leftover after parsing attributes in process `syz.2.316'. [ 148.082019][ T6699] openvswitch: netlink: VXLAN extension 2 out of range max 1 [ 149.451494][ T6730] netlink: 48 bytes leftover after parsing attributes in process `syz.2.335'. [ 149.924341][ T6742] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.929092][ T6742] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.429291][ T5929] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 150.579475][ T5929] usb 3-1: Using ep0 maxpacket: 32 [ 150.582549][ T5929] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 150.582579][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.621520][ T5929] usb 3-1: config 0 descriptor?? [ 150.868795][ T5929] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 150.882289][ T5929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 150.900451][ T5929] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 150.900520][ T5929] usb 3-1: media controller created [ 150.998684][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 151.100007][ T6773] Bluetooth: MGMT ver 1.23 [ 151.179390][ T5929] az6027: usb out operation failed. (-71) [ 151.179943][ T5929] az6027: usb out operation failed. (-71) [ 151.179957][ T5929] stb0899_attach: Driver disabled by Kconfig [ 151.179967][ T5929] az6027: no front-end attached [ 151.179967][ T5929] [ 151.180495][ T5929] az6027: usb out operation failed. (-71) [ 151.180509][ T5929] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 151.200629][ T5929] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 151.223334][ T5929] dvb-usb: schedule remote query interval to 400 msecs. [ 151.223356][ T5929] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 151.256554][ T5929] usb 3-1: USB disconnect, device number 5 [ 151.564831][ T5929] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 153.779352][ T5914] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 153.929293][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 153.932252][ T5914] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.932280][ T5914] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 153.932305][ T5914] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 153.932328][ T5914] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.932373][ T5914] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 153.932396][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.179257][ T49] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 154.229372][ T5914] usb 5-1: GET_CAPABILITIES returned 0 [ 154.229428][ T5914] usbtmc 5-1:16.0: can't read capabilities [ 154.359543][ T49] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.359638][ T49] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.362211][ T49] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 154.362239][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 154.362259][ T49] usb 2-1: SerialNumber: syz [ 154.436170][ T5914] usb 5-1: USB disconnect, device number 6 [ 154.624398][ T49] usb 2-1: 0:2 : does not exist [ 154.686921][ T49] usb 2-1: USB disconnect, device number 5 [ 155.785323][ T6871] syz.4.397 (6871) used greatest stack depth: 18968 bytes left [ 156.064200][ T6904] capability: warning: `syz.1.413' uses 32-bit capabilities (legacy support in use) [ 156.686663][ T6921] mmap: syz.1.421 (6921) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 158.211778][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.433'. [ 159.079293][ T59] Bluetooth: hci4: command tx timeout [ 159.463733][ T6993] netlink: 'syz.4.451': attribute type 2 has an invalid length. [ 159.463759][ T6993] netlink: 'syz.4.451': attribute type 8 has an invalid length. [ 159.463772][ T6993] netlink: 1160 bytes leftover after parsing attributes in process `syz.4.451'. [ 159.877776][ T6999] bond1 (unregistering): Released all slaves [ 161.260571][ T7056] autofs4:pid:7056:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4), cmd(0xc018937e) [ 161.260604][ T7056] autofs4:pid:7056:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 161.720845][ T7070] netlink: 24 bytes leftover after parsing attributes in process `syz.3.477'. [ 162.399248][ T5929] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 162.502438][ T7086] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 162.569250][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 162.572239][ T5929] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 162.572270][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.605447][ T5929] usb 2-1: config 0 descriptor?? [ 162.954302][ T5929] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 162.982244][ T5929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 163.002535][ T5929] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 163.002599][ T5929] usb 2-1: media controller created [ 163.155950][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.251417][ T5929] az6027: usb out operation failed. (-71) [ 163.252016][ T5929] az6027: usb out operation failed. (-71) [ 163.252029][ T5929] stb0899_attach: Driver disabled by Kconfig [ 163.252039][ T5929] az6027: no front-end attached [ 163.252039][ T5929] [ 163.252663][ T5929] az6027: usb out operation failed. (-71) [ 163.252677][ T5929] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 163.256105][ T5929] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 163.269300][ T5957] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 163.284887][ T5929] dvb-usb: schedule remote query interval to 400 msecs. [ 163.284911][ T5929] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 163.295024][ T5929] usb 2-1: USB disconnect, device number 6 [ 163.422895][ T5957] usb 5-1: Using ep0 maxpacket: 8 [ 163.425619][ T5957] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 163.425649][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.479596][ T5914] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 163.483833][ T5957] pvrusb2: Hardware description: Terratec Grabster AV400 [ 163.483851][ T5957] pvrusb2: ********** [ 163.483859][ T5957] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 163.483870][ T5957] pvrusb2: Important functionality might not be entirely working. [ 163.483879][ T5957] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 163.483890][ T5957] pvrusb2: ********** [ 163.529161][ T5929] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 163.638538][ T5914] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.638566][ T5914] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.659514][ T5914] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 163.659612][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 163.659633][ T5914] usb 4-1: SerialNumber: syz [ 163.690385][ T2363] pvrusb2: Invalid write control endpoint [ 163.873345][ T2363] pvrusb2: Invalid write control endpoint [ 163.873362][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 163.873372][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 163.873379][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 163.873389][ T2363] pvrusb2: Device being rendered inoperable [ 163.888056][ T49] usb 5-1: USB disconnect, device number 7 [ 163.894258][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 163.895033][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 163.909600][ T2363] pvrusb2: Attached sub-driver cx25840 [ 163.909615][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 163.909625][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 163.983320][ T5914] usb 4-1: 0:2 : does not exist [ 164.079798][ T5914] usb 4-1: USB disconnect, device number 6 [ 164.719862][ T7125] netlink: 'syz.1.503': attribute type 1 has an invalid length. [ 165.191644][ T7135] can0: slcan on ttyS3. [ 165.467382][ T7137] can0 (unregistered): slcan off ttyS3. [ 165.899446][ T5957] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 166.049342][ T5957] usb 2-1: Using ep0 maxpacket: 32 [ 166.058011][ T5957] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 166.058043][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.058063][ T5957] usb 2-1: Product: syz [ 166.058084][ T5957] usb 2-1: Manufacturer: syz [ 166.058099][ T5957] usb 2-1: SerialNumber: syz [ 166.110871][ T5957] usb 2-1: config 0 descriptor?? [ 166.860006][ T5957] peak_usb 2-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 166.860050][ T5957] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 166.860133][ T5957] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 167.122189][ T7184] gfs2: gfs2 mount does not exist [ 167.531230][ T5957] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 167.559488][ T5957] usb 2-1: USB disconnect, device number 7 [ 167.571954][ T7191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.532'. [ 168.178381][ T7198] syz.4.535 (7198) used greatest stack depth: 16760 bytes left [ 168.802718][ T7209] cgroup: fork rejected by pids controller in /syz1 [ 169.301607][ T7403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.550'. [ 170.179276][ T49] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 170.414269][ T49] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.414299][ T49] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 170.414388][ T49] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 170.414411][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.423434][ T49] usb 2-1: config 0 descriptor?? [ 170.435731][ T49] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 170.435780][ T49] dvb-usb: bulk message failed: -22 (3/0) [ 170.457893][ T49] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 170.460189][ T49] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 170.460253][ T49] usb 2-1: media controller created [ 170.464126][ T49] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.510894][ T49] dvb-usb: bulk message failed: -22 (6/0) [ 170.511029][ T49] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 170.523508][ T49] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 170.534936][ T49] dvb-usb: schedule remote query interval to 150 msecs. [ 170.534957][ T49] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 170.694464][ T49] dvb-usb: bulk message failed: -22 (1/0) [ 170.694520][ T49] dvb-usb: error while querying for an remote control event. [ 170.849258][ T49] dvb-usb: bulk message failed: -22 (1/0) [ 170.849298][ T49] dvb-usb: error while querying for an remote control event. [ 171.010868][ T49] dvb-usb: bulk message failed: -22 (1/0) [ 171.010906][ T49] dvb-usb: error while querying for an remote control event. [ 171.179427][ T49] dvb-usb: bulk message failed: -22 (1/0) [ 171.179465][ T49] dvb-usb: error while querying for an remote control event. [ 171.261487][ T49] usb 2-1: USB disconnect, device number 8 [ 171.288074][ T7479] input: syz1 as /devices/virtual/input/input9 [ 171.435640][ T49] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 172.039274][ T7521] sg_write: process 260 (syz.3.573) changed security contexts after opening file descriptor, this is not allowed. [ 172.172330][ T7490] cgroup: fork rejected by pids controller in /syz0 [ 172.276713][ T7568] QAT: failed to copy from user cfg_data. [ 173.071526][ T5914] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 173.227514][ T5914] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 173.227544][ T5914] usb 3-1: config 0 has no interface number 0 [ 173.227595][ T5914] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 173.227622][ T5914] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 173.227664][ T5914] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 173.227686][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.310415][ T5914] usb 3-1: config 0 descriptor?? [ 173.311367][ T7807] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 173.348047][ T5914] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 173.511760][ T7821] binder: 7820:7821 ioctl c0306201 200000000100 returned -14 [ 173.577497][ T49] usb 3-1: USB disconnect, device number 6 [ 173.659758][ T7825] netlink: 128 bytes leftover after parsing attributes in process `syz.4.593'. [ 175.009375][ T5914] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 175.164672][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 175.175503][ T5914] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.175537][ T5914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 175.175574][ T5914] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 175.175598][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.223335][ T5914] usb 4-1: config 0 descriptor?? [ 175.528977][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.613'. [ 175.676796][ T5914] nzxt-smart2 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 175.764599][ T7875] netlink: 24 bytes leftover after parsing attributes in process `syz.4.616'. [ 176.084654][ T49] usb 4-1: USB disconnect, device number 7 [ 176.386472][ T991] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 176.481167][ T49] kernel read not supported for file /dsp1 (pid: 49 comm: kworker/1:1) [ 176.544675][ T991] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 176.544705][ T991] usb 5-1: config 0 has no interface number 0 [ 176.548438][ T991] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 176.548465][ T991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.548484][ T991] usb 5-1: Product: syz [ 176.548498][ T991] usb 5-1: Manufacturer: syz [ 176.548512][ T991] usb 5-1: SerialNumber: syz [ 176.555548][ T991] usb 5-1: config 0 descriptor?? [ 176.988211][ T991] usb 5-1: Firmware: major: 0, minor: 43, hardware type: ATUSB (0) [ 177.099383][ T5914] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 177.190294][ T991] usb 5-1: failed to fetch extended address, random address set [ 177.249547][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 177.252516][ T5914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.252540][ T5914] usb 4-1: config 0 has no interfaces? [ 177.252572][ T5914] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 177.252596][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.321288][ T5914] usb 4-1: config 0 descriptor?? [ 177.364987][ T991] usb 5-1: USB disconnect, device number 8 [ 177.537650][ T5914] usb 4-1: USB disconnect, device number 8 [ 177.821307][ T7911] netlink: 'syz.0.632': attribute type 8 has an invalid length. [ 178.187929][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'. [ 178.379352][ T7925] netlink: 'syz.2.639': attribute type 1 has an invalid length. [ 178.379378][ T7925] netlink: 'syz.2.639': attribute type 1 has an invalid length. [ 178.379392][ T7925] netlink: 160 bytes leftover after parsing attributes in process `syz.2.639'. [ 178.379408][ T7925] netlink: 'syz.2.639': attribute type 1 has an invalid length. [ 178.379421][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.639'. [ 179.225430][ T7950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.651'. [ 179.932501][ T7966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.658'. [ 179.932531][ T7966] netlink: 28 bytes leftover after parsing attributes in process `syz.3.658'. [ 179.932551][ T7966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.658'. [ 179.935201][ T7966] netlink: 28 bytes leftover after parsing attributes in process `syz.3.658'. [ 179.935226][ T7966] netlink: 'syz.3.658': attribute type 6 has an invalid length. [ 180.167168][ T7971] netem: incorrect ge model size [ 180.167209][ T7971] netem: change failed [ 180.506235][ T7985] veth0: entered promiscuous mode [ 180.508313][ T7983] veth0: left promiscuous mode [ 180.543225][ T7987] netlink: 'syz.4.667': attribute type 3 has an invalid length. [ 180.788417][ T7989] tun0: tun_chr_ioctl cmd 1074025680 [ 181.639387][ T49] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 181.806921][ T49] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 181.806954][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.823838][ T49] usb 2-1: config 0 descriptor?? [ 182.036314][ T49] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 182.117149][ T8030] netlink: 104 bytes leftover after parsing attributes in process `syz.0.687'. [ 182.241414][ T49] [drm:udl_init] *ERROR* Selecting channel failed [ 182.324982][ T49] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 182.325009][ T49] [drm] Initialized udl on minor 2 [ 182.353684][ T49] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 182.377730][ T49] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 182.417598][ T991] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 182.425297][ T49] usb 2-1: USB disconnect, device number 9 [ 182.433410][ T991] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 182.918860][ T8063] netlink: 36 bytes leftover after parsing attributes in process `syz.0.697'. [ 183.077534][ T8046] cgroup: fork rejected by pids controller in /syz4 [ 183.206440][ T8141] netlink: 'syz.2.699': attribute type 11 has an invalid length. [ 183.235467][ T37] audit: type=1326 audit(1757069013.718:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8104 comm="syz.1.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75f4aebe9 code=0x7ffc0000 [ 183.235528][ T37] audit: type=1326 audit(1757069013.718:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8104 comm="syz.1.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fa75f4aebe9 code=0x7ffc0000 [ 183.235584][ T37] audit: type=1326 audit(1757069013.718:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8104 comm="syz.1.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75f4aebe9 code=0x7ffc0000 [ 183.483764][ T8241] netlink: 32 bytes leftover after parsing attributes in process `syz.3.703'. [ 184.113733][ T8430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.711'. [ 186.656231][ T37] audit: type=1326 audit(1757069017.138:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8468 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30f5cdebe9 code=0x7fc00000 [ 188.285072][ T8521] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.598289][ T8527] netlink: 'syz.1.754': attribute type 2 has an invalid length. [ 188.663150][ T8529] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 188.663173][ T8529] syzkaller1: owner set to 778 [ 191.761961][ T8613] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.349584][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.799'. [ 192.349607][ T8628] netlink: 120 bytes leftover after parsing attributes in process `syz.4.799'. [ 192.349628][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.799'. [ 194.369627][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.369725][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.816923][ T8687] bond0: entered promiscuous mode [ 194.816948][ T8687] bond_slave_0: entered promiscuous mode [ 194.817236][ T8687] bond_slave_1: entered promiscuous mode [ 194.824856][ T8687] batadv0: entered promiscuous mode [ 194.831254][ T8687] hsr1: entered promiscuous mode [ 194.835050][ T8687] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 194.998073][ T8693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.829'. [ 195.050531][ T1179] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 195.059645][ T5914] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 195.147899][ T8696] program syz.3.831 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.325917][ T8702] netlink: 'syz.0.833': attribute type 1 has an invalid length. [ 195.326029][ T8702] netlink: 160 bytes leftover after parsing attributes in process `syz.0.833'. [ 195.407233][ T8704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.834'. [ 195.552848][ T8704] : entered promiscuous mode [ 195.829454][ T5914] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 195.959935][ T5957] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 195.979276][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 195.983053][ T5914] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.983086][ T5914] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.983108][ T5914] usb 1-1: config 0 interface 0 has no altsetting 0 [ 195.983143][ T5914] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 195.983166][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.039868][ T5914] usb 1-1: config 0 descriptor?? [ 196.119807][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 196.120124][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 196.500207][ T5914] cougar 0003:060B:500A.0005: unexpected long global item [ 196.501170][ T5914] cougar 0003:060B:500A.0005: parse failed [ 196.501290][ T5914] cougar 0003:060B:500A.0005: probe with driver cougar failed with error -22 [ 196.680038][ T9] usb 1-1: USB disconnect, device number 8 [ 196.885787][ T37] audit: type=1326 audit(196.675:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8725 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa15b9fadb9 code=0x7ffc0000 [ 196.888296][ T37] audit: type=1326 audit(196.685:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8725 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa15b9fadb9 code=0x7ffc0000 [ 196.939829][ T37] audit: type=1326 audit(196.725:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8725 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa15b9fadb9 code=0x7ffc0000 [ 196.939886][ T37] audit: type=1326 audit(196.745:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8725 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa15b9fadb9 code=0x7ffc0000 [ 196.966714][ T37] audit: type=1326 audit(196.755:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8725 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa15b9fadb9 code=0x7ffc0000 [ 196.966766][ T37] audit: type=1326 audit(196.765:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8725 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa15b9fadb9 code=0x7ffc0000 [ 196.966806][ T37] audit: type=1326 audit(196.765:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8725 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa15b9fadb9 code=0x7ffc0000 [ 196.966852][ T37] audit: type=1326 audit(196.765:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8725 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa15b9fadb9 code=0x7ffc0000 [ 196.974509][ T37] audit: type=1326 audit(196.765:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8725 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa15b9fadb9 code=0x7ffc0000 [ 196.974557][ T37] audit: type=1326 audit(196.765:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8725 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa15b9fadb9 code=0x7ffc0000 [ 196.999639][ T49] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 197.928674][ T8745] mkiss: ax0: crc mode is auto. [ 198.590319][ T8768] netlink: 212296 bytes leftover after parsing attributes in process `syz.4.862'. [ 200.008984][ T8811] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 200.129462][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 201.727677][ T8850] netlink: 'syz.0.899': attribute type 15 has an invalid length. [ 201.736748][ T8846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.897'. [ 202.616976][ T37] kauditd_printk_skb: 317 callbacks suppressed [ 202.616995][ T37] audit: type=1326 audit(202.415:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8876 comm="syz.4.910" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa15ba5ebe9 code=0x0 [ 202.874485][ T8887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.915'. [ 202.874522][ T8887] netlink: 'syz.2.915': attribute type 20 has an invalid length. [ 202.874536][ T8887] netlink: 'syz.2.915': attribute type 21 has an invalid length. [ 204.254364][ T8930] netlink: 71 bytes leftover after parsing attributes in process `syz.2.933'. [ 204.811240][ T5957] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 204.873972][ T9] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 204.959318][ T5957] usb 2-1: Using ep0 maxpacket: 32 [ 204.962134][ T5957] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 204.962159][ T5957] usb 2-1: config 0 has no interface number 0 [ 204.965423][ T5957] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 204.965447][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.965465][ T5957] usb 2-1: Product: syz [ 204.965478][ T5957] usb 2-1: Manufacturer: syz [ 204.965490][ T5957] usb 2-1: SerialNumber: syz [ 205.031785][ T5957] usb 2-1: config 0 descriptor?? [ 205.036813][ T5957] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 205.060095][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.060124][ T9] usb 5-1: config 0 has no interfaces? [ 205.060776][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 205.060804][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.122991][ T9] usb 5-1: config 0 descriptor?? [ 205.291392][ T5957] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 205.364706][ T9] usb 5-1: USB disconnect, device number 9 [ 205.393872][ T5957] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 205.707846][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 205.717404][ T9] usb 2-1: USB disconnect, device number 10 [ 205.744942][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 205.774476][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 205.775351][ T9] quatech2 2-1:0.51: device disconnected [ 205.845262][ T8963] input: syz1 as /devices/virtual/input/input12 [ 205.972980][ T37] audit: type=1326 audit(205.775:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8964 comm="syz.2.951" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ecc7debe9 code=0x0 [ 206.829930][ T991] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 206.989400][ T991] usb 2-1: Using ep0 maxpacket: 16 [ 206.996111][ T991] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 206.996143][ T991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.996162][ T991] usb 2-1: Product: syz [ 206.996175][ T991] usb 2-1: Manufacturer: syz [ 206.996189][ T991] usb 2-1: SerialNumber: syz [ 207.011786][ T991] usb 2-1: config 0 descriptor?? [ 207.023093][ T991] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 207.129872][ T8993] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 207.473649][ T991] usb 2-1: clie_3_5_startup: get interface number bad return length: 0 [ 207.473833][ T991] visor 2-1:0.0: probe with driver visor failed with error -5 [ 207.569459][ T8999] dvmrp1: tun_chr_ioctl cmd 1074025681 [ 207.694734][ T5957] usb 2-1: USB disconnect, device number 11 [ 208.058742][ T9048] [U] [ 208.058904][ T9048] [U] )½0 [ 208.059483][ T9048] [U] [ 208.059516][ T9048] [U] [ 208.059545][ T9048] [U] [ 208.067750][ T9048] [U] [ 208.067788][ T9048] [U] [ 208.067819][ T9048] [U] [ 208.067848][ T9048] [U] [ 208.067964][ T9048] [U] [ 208.067994][ T9048] [U] [ 208.068025][ T9048] [U] [ 208.068590][ T9047] [U] [ 208.439426][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 208.859291][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 209.012226][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.012260][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.012299][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 209.013263][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.069538][ T9] usb 1-1: config 0 descriptor?? [ 209.523317][ T9] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 209.523356][ T9] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 209.523381][ T9] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 209.523406][ T9] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 209.523431][ T9] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 209.523456][ T9] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 209.523481][ T9] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 209.579880][ T9] pyra 0003:1E7D:2CF6.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 209.759424][ T5909] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 209.885336][ T9100] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 209.919395][ T9] pyra 0003:1E7D:2CF6.0006: couldn't init struct pyra_device [ 209.919467][ T9] pyra 0003:1E7D:2CF6.0006: couldn't install mouse [ 209.922833][ T9] pyra 0003:1E7D:2CF6.0006: probe with driver pyra failed with error -71 [ 209.927625][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 209.970240][ T5909] usb 2-1: config 0 has an invalid interface number: 236 but max is 1 [ 209.970279][ T5909] usb 2-1: config 0 has an invalid interface number: 129 but max is 1 [ 209.970299][ T5909] usb 2-1: config 0 has no interface number 0 [ 209.970315][ T5909] usb 2-1: config 0 has no interface number 1 [ 209.970385][ T5909] usb 2-1: config 0 interface 236 altsetting 6 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 209.970413][ T5909] usb 2-1: config 0 interface 236 altsetting 6 endpoint 0xD has invalid wMaxPacketSize 0 [ 209.970437][ T5909] usb 2-1: config 0 interface 236 has no altsetting 0 [ 209.970455][ T5909] usb 2-1: config 0 interface 129 has no altsetting 0 [ 210.008391][ T5909] usb 2-1: New USB device found, idVendor=1ace, idProduct=e9b2, bcdDevice=5c.3d [ 210.008442][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.008461][ T5909] usb 2-1: Product: syz [ 210.008474][ T5909] usb 2-1: Manufacturer: syz [ 210.008487][ T5909] usb 2-1: SerialNumber: syz [ 210.089319][ T9] usb 1-1: USB disconnect, device number 9 [ 210.120646][ T5909] usb 2-1: config 0 descriptor?? [ 210.350667][ T5909] ir_usb 2-1:0.236: required endpoints missing [ 210.401941][ T5909] usb 2-1: selecting invalid altsetting 0 [ 210.432331][ T5909] usb 2-1: selecting invalid altsetting 0 [ 210.432974][ T5909] usb 2-1: Found UVC 2.26 device syz (1ace:e9b2) [ 210.433006][ T5909] usb 2-1: No valid video chain found. [ 210.462817][ T5909] usb 2-1: USB disconnect, device number 12 [ 211.015668][ T9123] mmap: syz.4.1005 (9123): VmData 37470208 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 211.451558][ T9135] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 211.500015][ T9135] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 211.539458][ T5914] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 211.695834][ T5914] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 211.695867][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.695887][ T5914] usb 5-1: Product: syz [ 211.695902][ T5914] usb 5-1: Manufacturer: syz [ 211.695915][ T5914] usb 5-1: SerialNumber: syz [ 211.741897][ T5914] usb 5-1: config 0 descriptor?? [ 211.760134][ T5914] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 010 [ 212.191586][ T5914] (null): failure reading functionality [ 212.218044][ T5914] i2c i2c-1: connected i2c-tiny-usb device [ 212.436474][ T49] usb 5-1: USB disconnect, device number 10 [ 212.659636][ T9163] ALSA: mixer_oss: invalid OSS volume 'N#¬' [ 213.559262][ T49] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 213.624735][ T9192] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 213.711549][ T49] usb 2-1: Using ep0 maxpacket: 32 [ 213.719322][ T49] usb 2-1: unable to get BOS descriptor or descriptor too short [ 213.731471][ T49] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 213.731495][ T49] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.731511][ T49] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 213.738504][ T49] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 213.738531][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.738549][ T49] usb 2-1: Product: syz [ 213.738561][ T49] usb 2-1: Manufacturer: syz [ 213.738573][ T49] usb 2-1: SerialNumber: syz [ 214.047440][ T9183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.047959][ T9183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.114168][ T49] usb 2-1: 0:2 : does not exist [ 214.244225][ T49] usb 2-1: USB disconnect, device number 13 [ 214.639630][ T49] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 214.737653][ T9218] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1050'. [ 214.811860][ T49] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 214.811887][ T49] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.811906][ T49] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.822280][ T49] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 214.822309][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.822326][ T49] usb 2-1: Product: syz [ 214.822339][ T49] usb 2-1: Manufacturer: syz [ 214.822351][ T49] usb 2-1: SerialNumber: syz [ 215.113373][ T49] usb 2-1: 0:2 : does not exist [ 215.197981][ T9226] dummy0: entered promiscuous mode [ 215.207533][ T9226] dummy0: left promiscuous mode [ 215.264837][ T5850] Bluetooth: hci4: unknown advertising packet type: 0xcb [ 215.264860][ T5850] Bluetooth: hci4: unknown advertising packet type: 0x2b [ 215.264875][ T5850] Bluetooth: hci4: unknown advertising packet type: 0x21 [ 215.264889][ T5850] Bluetooth: hci4: unknown advertising packet type: 0x8e [ 215.264902][ T5850] Bluetooth: hci4: unknown advertising packet type: 0xae [ 215.264915][ T5850] Bluetooth: hci4: unknown advertising packet type: 0x2e [ 215.264927][ T5850] Bluetooth: hci4: unknown advertising packet type: 0x77 [ 215.493331][ T49] usb 2-1: USB disconnect, device number 14 [ 215.731236][ T9238] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.733451][ T9238] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.767467][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1058'. [ 215.767495][ T9239] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1058'. [ 215.898929][ T9245] openvswitch: netlink: IP tunnel TTL not specified. [ 216.927892][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 216.928036][ T5850] Bluetooth: hci0: command 0x0406 tx timeout [ 216.928066][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 216.928094][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 217.249324][ T9278] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 217.499340][ T9282] macvlan0: entered promiscuous mode [ 217.531009][ T9282] netlink: 'syz.1.1079': attribute type 2 has an invalid length. [ 218.316375][ T991] kernel write not supported for file /uhid (pid: 991 comm: kworker/1:2) [ 219.456755][ T9321] tap0: tun_chr_ioctl cmd 1074025677 [ 219.456998][ T9321] tap0: linktype set to 776 [ 219.530009][ T5909] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 219.683644][ T5909] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 219.683669][ T5909] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 219.683688][ T5909] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 219.686959][ T5909] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 219.686989][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.687010][ T5909] usb 5-1: Product: syz [ 219.687024][ T5909] usb 5-1: Manufacturer: syz [ 219.687038][ T5909] usb 5-1: SerialNumber: syz [ 220.261473][ T9337] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 220.386824][ T5909] usb 5-1: 0:2 : does not exist [ 220.637389][ T5909] usb 5-1: USB disconnect, device number 11 [ 220.743897][ T9352] loop7: detected capacity change from 0 to 7 [ 220.752553][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 220.752649][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 220.760609][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 220.760641][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 220.767589][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 220.767617][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 220.771105][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 220.771133][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 220.771365][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 220.771388][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 220.771596][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 220.771618][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 220.773227][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 220.773252][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 220.773339][ T9352] ldm_validate_partition_table(): Disk read failed. [ 220.773529][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 220.773552][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 220.778742][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 220.778766][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 220.779021][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 220.779043][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 220.779485][ T9352] Dev loop7: unable to read RDB block 0 [ 220.781390][ T9352] loop7: unable to read partition table [ 220.782088][ T9352] loop7: partition table beyond EOD, truncated [ 220.782107][ T9352] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 222.049263][ T5909] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 222.204127][ T5909] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.204156][ T5909] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 222.205862][ T5909] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 222.205890][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 222.205910][ T5909] usb 2-1: SerialNumber: syz [ 222.436144][ T5909] usb 2-1: 0:2 : does not exist [ 222.571673][ T5909] usb 2-1: USB disconnect, device number 15 [ 222.872156][ T9390] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1128'. [ 222.969299][ T5929] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 223.005876][ T9396] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1131'. [ 223.029410][ T5909] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 223.127024][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 27750, setting to 64 [ 223.140408][ T5929] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 223.140438][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.140458][ T5929] usb 4-1: Product: syz [ 223.140472][ T5929] usb 4-1: Manufacturer: syz [ 223.140486][ T5929] usb 4-1: SerialNumber: syz [ 223.146872][ T5929] usb 4-1: config 0 descriptor?? [ 223.212151][ T5909] usb 1-1: config 0 has an invalid interface number: 229 but max is 0 [ 223.212180][ T5909] usb 1-1: config 0 has no interface number 0 [ 223.212235][ T5909] usb 1-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 223.212258][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.226385][ T5909] usb 1-1: config 0 descriptor?? [ 223.436899][ T5909] usb 1-1: USB disconnect, device number 10 [ 223.579361][ T991] usb 4-1: USB disconnect, device number 9 [ 224.274637][ T9430] program syz.2.1147 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.439374][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 224.529508][ T5957] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 224.682192][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 224.682228][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34456, setting to 1024 [ 224.682273][ T5957] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 224.682297][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.737048][ T5957] usb 4-1: config 0 descriptor?? [ 224.738357][ T9431] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 225.183129][ T5957] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 225.183270][ T5957] cm6533_jd 0003:0D8C:0022.0007: item fetching failed at offset 4/5 [ 225.185780][ T5957] cm6533_jd 0003:0D8C:0022.0007: parse failed [ 225.185902][ T5957] cm6533_jd 0003:0D8C:0022.0007: probe with driver cm6533_jd failed with error -22 [ 225.395702][ T5957] usb 4-1: USB disconnect, device number 10 [ 225.679291][ T5909] kernel read not supported for file /dsp1 (pid: 5909 comm: kworker/0:4) [ 225.999415][ T5909] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 226.151860][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 226.156870][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.156902][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.156941][ T5909] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 226.156963][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.224013][ T5909] usb 5-1: config 0 descriptor?? [ 226.354909][ T9476] bridge_slave_1: left allmulticast mode [ 226.355024][ T9476] bridge_slave_1: left promiscuous mode [ 226.355616][ T9476] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.432818][ T9476] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 226.452540][ T9483] Attempt to restore checkpoint with obsolete wellknown handles [ 226.877681][ T5909] usb 5-1: string descriptor 0 read error: -71 [ 226.913522][ T5909] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 226.913620][ T5909] letsketch 0003:6161:4D15.0008: probe with driver letsketch failed with error -32 [ 226.947177][ T5909] usb 5-1: USB disconnect, device number 12 [ 227.044055][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 227.044379][ T9495] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 227.044414][ T9495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.807358][ T9516] input: syz1 as /devices/virtual/input/input13 [ 230.694315][ T9558] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 231.831485][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 231.848134][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 231.860239][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 231.861733][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 231.862654][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 232.169290][ T5909] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 232.319396][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 232.322446][ T5909] usb 2-1: config 1 has an invalid interface number: 220 but max is 1 [ 232.322474][ T5909] usb 2-1: config 1 has an invalid interface number: 76 but max is 1 [ 232.322493][ T5909] usb 2-1: config 1 has no interface number 0 [ 232.322510][ T5909] usb 2-1: config 1 has no interface number 1 [ 232.322560][ T5909] usb 2-1: config 1 interface 220 has no altsetting 0 [ 232.322579][ T5909] usb 2-1: config 1 interface 76 has no altsetting 0 [ 232.326135][ T5909] usb 2-1: New USB device found, idVendor=1bc7, idProduct=0023, bcdDevice=b2.a4 [ 232.326166][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.326186][ T5909] usb 2-1: Product: syz [ 232.326200][ T5909] usb 2-1: Manufacturer: syz [ 232.326214][ T5909] usb 2-1: SerialNumber: syz [ 232.789832][ T5909] usb 2-1: USB disconnect, device number 16 [ 233.292281][ T9588] chnl_net:caif_netlink_parms(): no params data found [ 233.963242][ T5846] Bluetooth: hci1: command tx timeout [ 234.079749][ T9588] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.079923][ T9588] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.080198][ T9588] bridge_slave_0: entered allmulticast mode [ 234.089740][ T9588] bridge_slave_0: entered promiscuous mode [ 234.100933][ T9588] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.101121][ T9588] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.101347][ T9588] bridge_slave_1: entered allmulticast mode [ 234.109458][ T9588] bridge_slave_1: entered promiscuous mode [ 234.559925][ T9588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.571558][ T9588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.759520][ T5929] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 234.897327][ T9588] team0: Port device team_slave_0 added [ 234.903763][ T9588] team0: Port device team_slave_1 added [ 234.927084][ T5929] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 234.927121][ T5929] usb 5-1: config 0 has no interface number 0 [ 234.932092][ T5929] usb 5-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84 [ 234.932131][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.932151][ T5929] usb 5-1: Product: syz [ 234.932165][ T5929] usb 5-1: Manufacturer: syz [ 234.932179][ T5929] usb 5-1: SerialNumber: syz [ 234.996228][ T5929] usb 5-1: config 0 descriptor?? [ 235.233693][ T5929] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in cold state, will try to load a firmware [ 235.304146][ T5929] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 235.304222][ T5929] dib0700: firmware download failed at 7 with -22 [ 235.341342][ T5929] usb 5-1: USB disconnect, device number 13 [ 235.518770][ T9588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.518789][ T9588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.518817][ T9588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.522733][ T9588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.522747][ T9588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.522770][ T9588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.952506][ T9588] hsr_slave_0: entered promiscuous mode [ 235.971594][ T9588] hsr_slave_1: entered promiscuous mode [ 235.972488][ T9588] debugfs: 'hsr0' already exists in 'hsr' [ 235.972510][ T9588] Cannot create hsr debugfs directory [ 236.039378][ T5846] Bluetooth: hci1: command tx timeout [ 236.619249][ T5909] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 236.691692][ T5957] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 236.779420][ T5909] usb 2-1: Using ep0 maxpacket: 8 [ 236.785764][ T5909] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 236.785796][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.840138][ T5909] pvrusb2: Hardware description: Terratec Grabster AV400 [ 236.840157][ T5909] pvrusb2: ********** [ 236.840165][ T5909] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 236.840177][ T5909] pvrusb2: Important functionality might not be entirely working. [ 236.840186][ T5909] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 236.840197][ T5909] pvrusb2: ********** [ 236.859327][ T5957] usb 3-1: Using ep0 maxpacket: 16 [ 236.862508][ T5957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.862600][ T5957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.862621][ T5957] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 236.862659][ T5957] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 236.862679][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.890924][ T5957] usb 3-1: config 0 descriptor?? [ 237.045424][ T2363] pvrusb2: Invalid write control endpoint [ 237.206624][ T9588] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 237.227586][ T9689] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1262'. [ 237.243291][ T2363] pvrusb2: Invalid write control endpoint [ 237.243306][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 237.243313][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 237.243320][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 237.243328][ T2363] pvrusb2: Device being rendered inoperable [ 237.243400][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 237.243445][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 237.245327][ T2363] pvrusb2: Attached sub-driver cx25840 [ 237.245341][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 237.245351][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 237.338644][ T5957] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 237.338681][ T5957] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 237.338706][ T5957] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 237.338731][ T5957] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 237.338756][ T5957] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 237.338780][ T5957] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 237.338805][ T5957] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 237.338830][ T5957] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 237.338855][ T5957] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 237.338880][ T5957] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 237.387420][ T9] usb 2-1: USB disconnect, device number 17 [ 237.391150][ T9588] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 237.502205][ T9692] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1263'. [ 237.529852][ T5957] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0009/input/input14 [ 237.550739][ T9588] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 237.576378][ T5957] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 237.606774][ T5957] usb 3-1: USB disconnect, device number 7 [ 237.707146][ T9588] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 238.069502][ T9588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.109332][ T9588] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.121391][ T5846] Bluetooth: hci1: command tx timeout [ 238.143690][ T9017] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.144118][ T9017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.192198][ T9008] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.192367][ T9008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.429436][ T5957] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 238.579208][ T5957] usb 1-1: Using ep0 maxpacket: 16 [ 238.595818][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.595852][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.595895][ T5957] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 238.595919][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.638045][ T5957] usb 1-1: config 0 descriptor?? [ 239.127627][ T5957] corsair 0003:1B1C:1B02.000A: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 239.582774][ T5914] usb 1-1: USB disconnect, device number 11 [ 239.642061][ T9588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.205439][ T5846] Bluetooth: hci1: command tx timeout [ 240.861152][ T9772] hsr0: entered promiscuous mode [ 240.966589][ T49] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 241.122085][ T49] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 241.122117][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.131491][ T49] usb 5-1: config 0 descriptor?? [ 241.298248][ T9588] veth0_vlan: entered promiscuous mode [ 241.334805][ T9588] veth1_vlan: entered promiscuous mode [ 241.419335][ T49] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 241.643688][ T49] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 241.643714][ T49] [drm] Initialized udl on minor 2 [ 241.648659][ T9588] veth0_macvtap: entered promiscuous mode [ 241.757143][ T9588] veth1_macvtap: entered promiscuous mode [ 241.817084][ T49] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 241.817483][ T49] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 241.979031][ T9588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.017876][ T5929] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 242.036724][ T5957] usb 5-1: USB disconnect, device number 14 [ 242.043348][ T9588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.049738][ T5929] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 242.049932][ T5929] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 242.074243][ T9017] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.076663][ T9017] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.085039][ T9017] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.094411][ T9017] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.653290][ T5846] Bluetooth: hci2: unexpected event for opcode 0x080d [ 242.742129][ T9013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.742152][ T9013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.892530][ T5921] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 242.896530][ T9017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.896550][ T9017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.052071][ T5921] usb 1-1: config 0 has no interfaces? [ 243.052120][ T5921] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 243.052142][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.068545][ T5921] usb 1-1: config 0 descriptor?? [ 243.370024][ T9821] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 243.412368][ T5921] usb 1-1: USB disconnect, device number 12 [ 243.561937][ T9824] pimreg: tun_chr_ioctl cmd 1074025677 [ 243.562107][ T9824] pimreg: linktype set to 778 [ 244.159372][ T49] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 244.312299][ T49] usb 6-1: Using ep0 maxpacket: 32 [ 244.315140][ T49] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.315174][ T49] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.315197][ T49] usb 6-1: config 0 interface 0 has no altsetting 0 [ 244.323462][ T49] usb 6-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 244.323489][ T49] usb 6-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 244.323568][ T49] usb 6-1: Product: syz [ 244.335053][ T49] usb 6-1: config 0 descriptor?? [ 244.812441][ T49] hid_parser_main: 5 callbacks suppressed [ 244.812470][ T49] waterforce 0003:1044:7A4D.000B: unknown main item tag 0x0 [ 244.812500][ T49] waterforce 0003:1044:7A4D.000B: unknown main item tag 0x0 [ 244.812524][ T49] waterforce 0003:1044:7A4D.000B: item fetching failed at offset 2/5 [ 244.816920][ T49] waterforce 0003:1044:7A4D.000B: hid parse failed with -22 [ 244.817053][ T49] waterforce 0003:1044:7A4D.000B: probe with driver waterforce failed with error -22 [ 244.964222][ T9856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1326'. [ 244.993281][ T5909] usb 6-1: USB disconnect, device number 2 [ 245.523546][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1331'. [ 246.429570][ T9883] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1337'. [ 246.683374][ T5846] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 246.683489][ T5846] Bluetooth: hci2: Injecting HCI hardware error event [ 246.685823][ T5845] Bluetooth: hci2: hardware error 0x00 [ 247.112476][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1342'. [ 247.900098][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1355'. [ 247.900134][ T9924] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1355'. [ 247.971070][ T9924] vlan2: entered allmulticast mode [ 248.235670][ T37] audit: type=1326 audit(248.035:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9931 comm="syz.4.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15ba5ebe9 code=0x7ffc0000 [ 248.255926][ T37] audit: type=1326 audit(248.035:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9931 comm="syz.4.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15ba5ebe9 code=0x7ffc0000 [ 248.260635][ T37] audit: type=1326 audit(248.065:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9931 comm="syz.4.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa15ba5ebe9 code=0x7ffc0000 [ 248.260711][ T37] audit: type=1326 audit(248.065:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9931 comm="syz.4.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15ba5ebe9 code=0x7ffc0000 [ 248.260751][ T37] audit: type=1326 audit(248.065:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9931 comm="syz.4.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15ba5ebe9 code=0x7ffc0000 [ 248.265567][ T37] audit: type=1326 audit(248.065:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9931 comm="syz.4.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fa15ba5ebe9 code=0x7ffc0000 [ 248.298574][ T37] audit: type=1326 audit(248.075:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9931 comm="syz.4.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15ba5ebe9 code=0x7ffc0000 [ 248.301350][ T37] audit: type=1326 audit(248.095:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9931 comm="syz.4.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15ba5ebe9 code=0x7ffc0000 [ 248.315524][ T37] audit: type=1326 audit(248.115:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9931 comm="syz.4.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fa15ba5ebe9 code=0x7ffc0000 [ 248.315576][ T37] audit: type=1326 audit(248.115:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9931 comm="syz.4.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15ba5ebe9 code=0x7ffc0000 [ 248.517667][ T9935] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 248.517707][ T9935] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 248.830689][ T5957] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 248.852556][ T5845] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 248.908500][ T9942] block device autoloading is deprecated and will be removed. [ 248.979364][ T5957] usb 6-1: Using ep0 maxpacket: 32 [ 248.985332][ T5957] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 248.985360][ T5957] usb 6-1: config 0 has no interface number 0 [ 249.012345][ T5957] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 249.012376][ T5957] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.012394][ T5957] usb 6-1: Product: syz [ 249.012406][ T5957] usb 6-1: Manufacturer: syz [ 249.012419][ T5957] usb 6-1: SerialNumber: syz [ 249.059508][ T5957] usb 6-1: config 0 descriptor?? [ 249.088501][ T5957] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 249.321807][ T5957] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 249.354070][ T5957] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 249.738850][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 249.739650][ T991] usb 6-1: USB disconnect, device number 3 [ 249.771034][ T991] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 249.809645][ T991] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 249.810789][ T991] quatech2 6-1:0.51: device disconnected [ 250.009730][ T9957] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1369'. [ 251.059618][ T9988] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1384'. [ 251.059654][ T9988] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1384'. [ 251.212297][ T9994] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1386'. [ 252.689351][ T49] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 252.862243][ T49] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 252.862274][ T49] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 252.862294][ T49] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 252.862315][ T49] usb 3-1: config 1 has no interface number 0 [ 252.862373][ T49] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 252.862399][ T49] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 252.862445][ T49] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 252.862468][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.990280][ T49] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 253.589057][ T49] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 253.787572][ T49] usb 3-1: USB disconnect, device number 8 [ 253.811295][ T49] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 255.199461][ T49] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 255.362057][ T49] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 255.362122][ T49] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 255.362144][ T49] usb 1-1: config 4 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 255.362168][ T49] usb 1-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xDC, changing to 0x8C [ 255.362193][ T49] usb 1-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 243 [ 255.365545][ T49] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 255.365572][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.365592][ T49] usb 1-1: Product: syz [ 255.365606][ T49] usb 1-1: Manufacturer: syz [ 255.365620][ T49] usb 1-1: SerialNumber: syz [ 255.509682][T10034] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 255.530245][ T49] usb 1-1: ucan: probing device on interface #0 [ 255.530271][ T49] usb 1-1: ucan: invalid out_ep MaxPacketSize [ 255.530285][ T49] usb 1-1: ucan: probe failed; try to update the device firmware [ 255.657487][T10044] netlink: 'syz.2.1406': attribute type 83 has an invalid length. [ 255.794469][ T991] usb 1-1: USB disconnect, device number 13 [ 255.807552][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 255.810389][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.810477][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.167636][ T991] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 260.351166][ T991] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 260.351198][ T991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.351217][ T991] usb 5-1: Product: syz [ 260.351232][ T991] usb 5-1: Manufacturer: syz [ 260.351246][ T991] usb 5-1: SerialNumber: syz [ 260.411976][ T991] usb 5-1: config 0 descriptor?? [ 260.417734][ T991] ch341 5-1:0.0: ch341-uart converter detected [ 261.429347][ T991] usb 5-1: failed to send control message: -71 [ 261.429417][ T991] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 261.513702][ T991] usb 5-1: USB disconnect, device number 15 [ 261.516450][ T991] ch341 5-1:0.0: device disconnected [ 317.475157][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 336.089169][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 344.470773][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 344.492945][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 357.539071][ C0] sched: DL replenish lagged too much [ 371.143309][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 400.615705][ T5853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 400.626477][ T5853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 400.628057][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 400.629454][ T5853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 400.630796][ T5853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 412.024017][ T38] INFO: task syz.5.1405:10042 blocked for more than 143 seconds. [ 412.024045][ T38] Not tainted syzkaller #0 [ 412.024056][ T38] Blocked by coredump. [ 412.024062][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 412.024072][ T38] task:syz.5.1405 state:D stack:26760 pid:10042 tgid:10041 ppid:9588 task_flags:0x40044c flags:0x00004002 [ 412.024139][ T38] Call Trace: [ 412.024147][ T38] [ 412.024163][ T38] __schedule+0x16f3/0x4c20 [ 412.024224][ T38] ? __lock_acquire+0xab9/0xd20 [ 412.024253][ T38] ? __pfx___schedule+0x10/0x10 [ 412.024300][ T38] ? schedule+0x91/0x360 [ 412.024331][ T38] schedule+0x165/0x360 [ 412.024359][ T38] schedule_timeout+0x9a/0x270 [ 412.024385][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 412.024426][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 412.024453][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.024477][ T38] ? wait_for_completion+0x267/0x5d0 [ 412.024507][ T38] wait_for_completion+0x2bf/0x5d0 [ 412.024550][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 412.024606][ T38] exit_aio+0x2f1/0x3b0 [ 412.024641][ T38] ? __pfx_exit_aio+0x10/0x10 [ 412.024683][ T38] ? uprobe_clear_state+0x280/0x2a0 [ 412.024704][ T38] ? mm_update_next_owner+0xa7/0x870 [ 412.024732][ T38] __mmput+0x68/0x3d0 [ 412.024761][ T38] exit_mm+0x1da/0x2c0 [ 412.024784][ T38] ? __pfx_exit_mm+0x10/0x10 [ 412.024807][ T38] ? rcu_is_watching+0x15/0xb0 [ 412.024843][ T38] do_exit+0x648/0x2300 [ 412.024862][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 412.024896][ T38] ? __lock_acquire+0xab9/0xd20 [ 412.024926][ T38] ? __pfx_do_exit+0x10/0x10 [ 412.024942][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 412.024969][ T38] ? rt_spin_lock+0x1bb/0x2c0 [ 412.025003][ T38] do_group_exit+0x21c/0x2d0 [ 412.025031][ T38] get_signal+0x125e/0x1310 [ 412.025084][ T38] arch_do_signal_or_restart+0x9a/0x750 [ 412.025109][ T38] ? __pfx_task_work_add+0x10/0x10 [ 412.025135][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 412.025157][ T38] ? __pfx_binder_ioctl+0x10/0x10 [ 412.025197][ T38] ? __fget_files+0x2a/0x420 [ 412.025233][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 412.025264][ T38] exit_to_user_mode_loop+0x75/0x110 [ 412.025292][ T38] do_syscall_64+0x2bd/0x3b0 [ 412.025320][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.025347][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.025367][ T38] ? clear_bhb_loop+0x60/0xb0 [ 412.025393][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.025413][ T38] RIP: 0033:0x7f4b8586ebe9 [ 412.025432][ T38] RSP: 002b:00007f4b83ad6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 412.025453][ T38] RAX: 0000000000000000 RBX: 00007f4b85aa5fa0 RCX: 00007f4b8586ebe9 [ 412.025468][ T38] RDX: 0000000000000000 RSI: 0000000040046208 RDI: 0000000000000003 [ 412.025481][ T38] RBP: 00007f4b858f1e19 R08: 0000000000000000 R09: 0000000000000000 [ 412.025494][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.025506][ T38] R13: 00007f4b85aa6038 R14: 00007f4b85aa5fa0 R15: 00007ffefb5a1558 [ 412.025541][ T38] [ 412.025550][ T38] INFO: task syz.1.1416:10068 blocked for more than 143 seconds. [ 412.025640][ T38] Not tainted syzkaller #0 [ 412.025650][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 412.025659][ T38] task:syz.1.1416 state:D stack:25128 pid:10068 tgid:10068 ppid:5834 task_flags:0x400040 flags:0x00004004 [ 412.025720][ T38] Call Trace: [ 412.025726][ T38] [ 412.025739][ T38] __schedule+0x16f3/0x4c20 [ 412.025794][ T38] ? __lock_acquire+0xab9/0xd20 [ 412.025820][ T38] ? __pfx___schedule+0x10/0x10 [ 412.025866][ T38] ? schedule+0x91/0x360 [ 412.025895][ T38] schedule+0x165/0x360 [ 412.025923][ T38] schedule_timeout+0x9a/0x270 [ 412.025948][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 412.025989][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 412.026016][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.026040][ T38] ? wait_for_completion+0x267/0x5d0 [ 412.026069][ T38] wait_for_completion+0x2bf/0x5d0 [ 412.026112][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 412.026141][ T38] ? __raw_spin_lock_init+0x45/0x100 [ 412.026177][ T38] rcu_barrier+0x463/0x570 [ 412.026212][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 412.026235][ T38] kvm_arch_destroy_vm+0x23d/0x280 [ 412.026264][ T38] kvm_put_kvm+0xf8e/0x1670 [ 412.026300][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 412.026328][ T38] kvm_vm_release+0x46/0x50 [ 412.026353][ T38] __fput+0x45b/0xa80 [ 412.026389][ T38] task_work_run+0x1d4/0x260 [ 412.026414][ T38] ? __pfx_task_work_run+0x10/0x10 [ 412.026442][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 412.026474][ T38] exit_to_user_mode_loop+0xec/0x110 [ 412.026501][ T38] do_syscall_64+0x2bd/0x3b0 [ 412.026529][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.026564][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.026584][ T38] ? clear_bhb_loop+0x60/0xb0 [ 412.026610][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.026630][ T38] RIP: 0033:0x7fa75f4aebe9 [ 412.026647][ T38] RSP: 002b:00007ffdd28efe68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 412.026667][ T38] RAX: 0000000000000000 RBX: 000000000003f31d RCX: 00007fa75f4aebe9 [ 412.026680][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 412.026693][ T38] RBP: 00007fa75f6e7da0 R08: 0000000000000001 R09: 00000004d28f015f [ 412.026706][ T38] R10: 0000001b30620000 R11: 0000000000000246 R12: 00007fa75f6e5fac [ 412.026720][ T38] R13: 00007fa75f6e5fa0 R14: ffffffffffffffff R15: 00007ffdd28eff80 [ 412.026755][ T38] [ 412.026774][ T38] [ 412.026774][ T38] Showing all locks held in the system: [ 412.026783][ T38] 4 locks held by kworker/0:0/9: [ 412.026794][ T38] #0: ffff88805e46f538 ((wq_completion)wg-crypt-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.026854][ T38] #1: ffffc900000e7bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.026906][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.026958][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.027010][ T38] 4 locks held by kworker/0:1/10: [ 412.027022][ T38] #0: ffff888060933938 ((wq_completion)wg-crypt-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.027079][ T38] #1: ffffc900000f7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.027145][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.027195][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.027246][ T38] 5 locks held by kworker/u8:0/12: [ 412.027258][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.027308][ T38] #1: ffffc90000117bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.027360][ T38] #2: ffff88805f960898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 412.027412][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.027462][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.027513][ T38] 4 locks held by kworker/u8:1/13: [ 412.027523][ T38] #0: ffff88805c5e0938 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.027593][ T38] #1: ffffc90000127bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.027645][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.027695][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.027747][ T38] 2 locks held by ksoftirqd/0/15: [ 412.027759][ T38] 7 locks held by ktimers/0/16: [ 412.027771][ T38] 2 locks held by rcuc/0/20: [ 412.027782][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.027830][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.027881][ T38] 2 locks held by rcuc/1/28: [ 412.027892][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.027942][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.027993][ T38] 7 locks held by ktimers/1/29: [ 412.028006][ T38] 2 locks held by ksoftirqd/1/30: [ 412.028017][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.028073][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.028126][ T38] 4 locks held by kworker/1:0/31: [ 412.028137][ T38] #0: ffff888060933938 ((wq_completion)wg-crypt-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.028194][ T38] #1: ffffc90000a5fbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.028247][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.028298][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.028351][ T38] 1 lock held by khungtaskd/38: [ 412.028362][ T38] #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 412.028412][ T38] 6 locks held by kworker/u8:2/43: [ 412.028423][ T38] #0: ffff88805c5e4938 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.028482][ T38] #1: ffffc90000b47bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.028535][ T38] #2: ffff88803b2655f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 412.028594][ T38] #3: ffff8880388af880 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 412.028643][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.028693][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.028746][ T38] 7 locks held by kworker/u8:3/57: [ 412.028758][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.028808][ T38] #1: ffffc9000123fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.028862][ T38] #2: ffff88805de34300 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 412.028922][ T38] #3: ffff88805dd75120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 412.028976][ T38] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 412.029089][ T38] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.029141][ T38] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.029195][ T38] 6 locks held by kworker/u8:4/67: [ 412.029207][ T38] #0: ffff88803ab35938 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.029264][ T38] #1: ffffc9000152fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.029317][ T38] #2: ffff88803b0795f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 412.029368][ T38] #3: ffff88805d6e83f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 412.029416][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.029467][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.029528][ T38] 6 locks held by kworker/u8:5/1151: [ 412.029539][ T38] #0: ffff88803aa26938 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.029605][ T38] #1: ffffc90004b9fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.029658][ T38] #2: ffff88805c4b95f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 412.029706][ T38] #3: ffff8880388ac388 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 412.029754][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.029804][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.029854][ T38] 4 locks held by kworker/u8:6/1167: [ 412.029866][ T38] #0: ffff88803aa26938 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.029923][ T38] #1: ffffc90004b3fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.029975][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.030026][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.030078][ T38] 5 locks held by kworker/u8:7/1179: [ 412.030089][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.030141][ T38] #1: ffffc90004c3fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.030194][ T38] #2: ffff88805f1a0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 412.030245][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.030297][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.030350][ T38] 2 locks held by aoe_tx0/1322: [ 412.030361][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.030411][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.030476][ T38] 5 locks held by kworker/u8:8/3531: [ 412.030487][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.030538][ T38] #1: ffffc9000d327bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.030601][ T38] #2: ffff888063d70898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 412.030653][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.030704][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.030756][ T38] 7 locks held by kworker/u8:9/3550: [ 412.030768][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.030817][ T38] #1: ffffc9000d037bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.030871][ T38] #2: ffff88805d67b300 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 412.030931][ T38] #3: ffff88805d5c3d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 412.030985][ T38] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 412.031033][ T38] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.031084][ T38] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.031135][ T38] 2 locks held by kworker/u8:10/4530: [ 412.031147][ T38] #0: ffff888147af2938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.031198][ T38] #1: ffffc9000ece7bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.031252][ T38] 4 locks held by kworker/0:2/5166: [ 412.031262][ T38] #0: ffff88805c038938 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.031320][ T38] #1: ffffc9000f79fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.031389][ T38] #2: ffff88805c3555f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 412.031438][ T38] #3: ffff8880388ace20 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 412.031486][ T38] 3 locks held by dhcpcd/5500: [ 412.031497][ T38] #0: ffff88805e19c550 (sk_lock-AF_UNIX){+.+.}-{0:0}, at: sk_setsockopt+0xc2f/0x2a70 [ 412.031549][ T38] #1: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.031609][ T38] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.031661][ T38] 2 locks held by getty/5594: [ 412.031672][ T38] #0: ffff88823bf5a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 412.031725][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 412.031774][ T38] 2 locks held by dhcpcd/5641: [ 412.031785][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.031834][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.031887][ T38] 3 locks held by sshd-session/5822: [ 412.031899][ T38] #0: ffff88802f5c21d0 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 412.031948][ T38] #1: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.031999][ T38] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.032051][ T38] 3 locks held by syz-executor/5823: [ 412.032063][ T38] #0: ffff88802f5c3110 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 412.032109][ T38] #1: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.032160][ T38] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.032213][ T38] 2 locks held by syz-executor/5837: [ 412.032224][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.032275][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.032326][ T38] 4 locks held by kworker/0:3/5838: [ 412.032337][ T38] #0: ffff88805bed1938 ((wq_completion)wg-crypt-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.032394][ T38] #1: ffffc90004e7fbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.032446][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.032497][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.032549][ T38] 5 locks held by kworker/u9:3/5844: [ 412.032569][ T38] #0: ffff888029c31938 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.032620][ T38] #1: ffffc90004edfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.032673][ T38] #2: ffff888031530e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 412.032720][ T38] #3: ffff8880315300a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 412.032772][ T38] #4: ffffffff8ee3a338 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 412.032823][ T38] 4 locks held by kworker/u9:4/5845: [ 412.032834][ T38] #0: ffff8880309a0938 ((wq_completion)krxrpcd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.032886][ T38] #1: ffffc90004eefbc0 ((work_completion)(&rxnet->peer_keepalive_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.032939][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.032991][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.033043][ T38] 6 locks held by kworker/u9:5/5846: [ 412.033054][ T38] #0: ffff888028ed8938 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.033107][ T38] #1: ffffc90004effbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.033159][ T38] #2: ffff88805871ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 412.033205][ T38] #3: ffff88805871c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 412.033257][ T38] #4: ffffffff8ee3a338 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 412.033308][ T38] #5: ffff888027ac4b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 412.033369][ T38] 2 locks held by kworker/R-wg-cr/5873: [ 412.033384][ T38] 1 lock held by kworker/R-wg-cr/5885: [ 412.033396][ T38] #0: ffffffff8d852638 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 412.033449][ T38] 1 lock held by kworker/R-wg-cr/5887: [ 412.033461][ T38] 2 locks held by napi/wg2-0/5898: [ 412.033473][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.033524][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.033586][ T38] 4 locks held by kworker/0:4/5909: [ 412.033598][ T38] #0: ffff88805c029938 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.033655][ T38] #1: ffffc9000565fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.033724][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.033774][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.033825][ T38] 2 locks held by napi/wg2-0/5912: [ 412.033836][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.033887][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.033939][ T38] 4 locks held by kworker/0:5/5914: [ 412.033950][ T38] #0: ffff88805bed1538 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.034007][ T38] #1: ffffc900056afbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.034075][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.034126][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.034179][ T38] 2 locks held by napi/wg1-0/5926: [ 412.034191][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.034241][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.034293][ T38] 4 locks held by kworker/0:6/5957: [ 412.034304][ T38] #0: ffff88805bee7538 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.034361][ T38] #1: ffffc9000582fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.034429][ T38] #2: ffff88805c0cd5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 412.034478][ T38] #3: ffff888036ed58b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 412.034528][ T38] 6 locks held by kworker/u8:12/9006: [ 412.034539][ T38] #0: ffff88803a41a938 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.034600][ T38] #1: ffffc9000b5a7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.034652][ T38] #2: ffff8880319255f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 412.034700][ T38] #3: ffff888036ed4388 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 412.034749][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.034800][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.034850][ T38] 4 locks held by kworker/u8:13/9007: [ 412.034861][ T38] #0: ffff88803aa20138 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.034917][ T38] #1: ffffc900053b7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.034969][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.035020][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.035072][ T38] 4 locks held by kworker/u8:14/9008: [ 412.035084][ T38] #0: ffff888030ab8938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.035135][ T38] #1: ffffc90005437bc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.035188][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.035238][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.035289][ T38] 4 locks held by kworker/u8:15/9009: [ 412.035300][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.035353][ T38] #1: ffffc90005427bc0 ((work_completion)(&port->bc_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.035406][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.035456][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.035509][ T38] 6 locks held by kworker/u8:16/9010: [ 412.035520][ T38] #0: ffff88805bdd0938 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.035584][ T38] #1: ffffc90005417bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.035637][ T38] #2: ffff88803b07d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 412.035686][ T38] #3: ffff88805d6e8e90 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 412.035733][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.035784][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.035834][ T38] 2 locks held by kworker/u8:17/9011: [ 412.035846][ T38] 7 locks held by kworker/u8:18/9012: [ 412.035857][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.035909][ T38] #1: ffffc90005407bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.035963][ T38] #2: ffff888035a0a300 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 412.036022][ T38] #3: ffff88805d58a920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 412.036076][ T38] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 412.036123][ T38] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.036174][ T38] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.036226][ T38] 5 locks held by kworker/u8:19/9013: [ 412.036238][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.036290][ T38] #1: ffffc90005317bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.036343][ T38] #2: ffff888063240898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 412.036394][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.036445][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.036495][ T38] 5 locks held by kworker/u8:20/9014: [ 412.036507][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.036567][ T38] #1: ffffc900052f7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.036619][ T38] #2: ffff88805f3f0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 412.036670][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.036721][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.036769][ T38] 6 locks held by kworker/u8:22/9016: [ 412.036778][ T38] #0: ffff88805c383938 ((wq_completion)wg-kex-wg0#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.036826][ T38] #1: ffffc900052d7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.036878][ T38] #2: ffff88805c3555f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 412.036926][ T38] #3: ffff8880388ad8b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 412.036974][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.037024][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.037076][ T38] 6 locks held by kworker/u8:23/9017: [ 412.037087][ T38] #0: ffff88803a418938 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.037138][ T38] #1: ffffc900052c7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.037191][ T38] #2: ffff8880319215f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 412.037239][ T38] #3: ffff888036ed2e58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 412.037288][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.037339][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.037390][ T38] 7 locks held by kworker/u8:24/9019: [ 412.037402][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.037454][ T38] #1: ffffc900052b7bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.037508][ T38] #2: ffff88805d70e300 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 412.037578][ T38] #3: ffff88805d5a3120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 412.037633][ T38] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 412.037680][ T38] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.037730][ T38] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.037783][ T38] 4 locks held by kworker/u8:25/9021: [ 412.037794][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.037844][ T38] #1: ffffc900052a7bc0 ((work_completion)(&port->bc_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.037896][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.037948][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.038000][ T38] 4 locks held by kworker/u8:26/9023: [ 412.038011][ T38] #0: ffff888032ef6938 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.038070][ T38] #1: ffffc90004f4fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.038123][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.038167][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.038217][ T38] 4 locks held by kworker/u8:27/9025: [ 412.038229][ T38] #0: ffff888032ef6938 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.038280][ T38] #1: ffffc90004bafbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.038333][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.038383][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.038436][ T38] 6 locks held by kworker/u8:28/9026: [ 412.038447][ T38] #0: ffff888032880938 ((wq_completion)wg-kex-wg2#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.038505][ T38] #1: ffffc90004b8fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.038588][ T38] #2: ffff88806110d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 412.038638][ T38] #3: ffff88805d6ef880 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 412.038686][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.038737][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.038790][ T38] 5 locks held by kworker/u8:29/9027: [ 412.038802][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.038852][ T38] #1: ffffc90004b5fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.038904][ T38] #2: ffff88805f640898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 412.038955][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.040038][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.040101][ T38] 7 locks held by kworker/u8:31/9029: [ 412.040114][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.040167][ T38] #1: ffffc90004b1fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.040221][ T38] #2: ffff88805dca6300 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 412.040282][ T38] #3: ffff88805d7cfd20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 412.040337][ T38] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 412.040385][ T38] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.040436][ T38] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.040489][ T38] 4 locks held by kworker/u8:32/9031: [ 412.040501][ T38] #0: ffff88803a152938 ((wq_completion)wg-kex-wg0#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.040567][ T38] #1: ffffc90004b0fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.040637][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.040681][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.040723][ T38] 6 locks held by kworker/u8:33/9033: [ 412.040732][ T38] #0: ffff88803a418938 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.040774][ T38] #1: ffffc90004affbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.040816][ T38] #2: ffff8880319215f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 412.040856][ T38] #3: ffff888036ed38f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 412.040894][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.040935][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.040976][ T38] 6 locks held by kworker/u8:34/9034: [ 412.040985][ T38] #0: ffff88805c383938 ((wq_completion)wg-kex-wg0#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.041030][ T38] #1: ffffc90004adfbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.041072][ T38] #2: ffff88805c3555f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 412.041111][ T38] #3: ffff8880388ace20 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 412.041149][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.041190][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.041231][ T38] 4 locks held by kworker/u8:35/9035: [ 412.041240][ T38] #0: ffff88805c380138 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.041285][ T38] #1: ffffc90004ccfbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.041327][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.041367][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.041409][ T38] 7 locks held by kworker/u8:36/9036: [ 412.041418][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.041459][ T38] #1: ffffc90004cafbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.041502][ T38] #2: ffff88805d443300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 412.041544][ T38] #3: ffff88805d28fd20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 412.041596][ T38] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 412.041635][ T38] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.041675][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.041718][ T38] 6 locks held by kworker/u8:37/9037: [ 412.041727][ T38] #0: ffff88803aa21138 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.041773][ T38] #1: ffffc90004c9fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.041815][ T38] #2: ffff88805c1d15f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 412.041855][ T38] #3: ffff8880388aa3c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 412.041894][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.041935][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.041976][ T38] 5 locks held by kworker/u8:38/9038: [ 412.041985][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.042026][ T38] #1: ffffc90004aafbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.042066][ T38] #2: ffff88805b960898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 412.042108][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.042148][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.042188][ T38] 6 locks held by kworker/u8:39/9039: [ 412.042197][ T38] #0: ffff88803aa20138 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.042242][ T38] #1: ffffc90004eafbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.042283][ T38] #2: ffff88805c0cd5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 412.042322][ T38] #3: ffff888036ed58b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 412.042362][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.042404][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.042444][ T38] 4 locks held by kworker/u8:40/9040: [ 412.042454][ T38] #0: ffff88803ab35938 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.042499][ T38] #1: ffffc90005467bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.042541][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.042590][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.042636][ T38] 4 locks held by kworker/u8:41/9043: [ 412.042647][ T38] #0: ffff88805bdd0938 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.042697][ T38] #1: ffffc90004c17bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.042749][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.042799][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.042847][ T38] 4 locks held by kworker/u8:42/9044: [ 412.042859][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.042910][ T38] #1: ffffc90004bcfbc0 ((work_completion)(&port->bc_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.042961][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.043011][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.043064][ T38] 5 locks held by kworker/u8:43/9045: [ 412.043076][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.043128][ T38] #1: ffffc9000493fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.043181][ T38] #2: ffff88805fea0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 412.043232][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.043282][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.043333][ T38] 3 locks held by kworker/u8:44/9046: [ 412.043344][ T38] #0: ffff88802fd26938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.043396][ T38] #1: ffffc9000490fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.043449][ T38] #2: ffffffff8ecd2978 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 412.043499][ T38] 4 locks held by kworker/u8:45/9049: [ 412.043511][ T38] 4 locks held by kworker/u8:46/9050: [ 412.043523][ T38] #0: ffff88803aa26138 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.043589][ T38] #1: ffffc90004a6fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.043642][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.043692][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.043744][ T38] 4 locks held by kworker/u8:48/9052: [ 412.043756][ T38] #0: ffff88803aa26138 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.043810][ T38] #1: ffffc90004a3fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.043863][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.043913][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.043965][ T38] 4 locks held by kworker/u8:49/9053: [ 412.043976][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.044029][ T38] #1: ffffc90004a2fbc0 ((work_completion)(&port->bc_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.044081][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.044132][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.044186][ T38] 1 lock held by kworker/R-wg-cr/9613: [ 412.044198][ T38] 1 lock held by kworker/R-wg-cr/9616: [ 412.044209][ T38] #0: ffffffff8d852638 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x88b/0xdd0 [ 412.044265][ T38] 2 locks held by napi/wg1-0/9699: [ 412.044277][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.044327][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.044379][ T38] 2 locks held by napi/wg1-0/9700: [ 412.044390][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.044440][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.044493][ T38] 2 locks held by napi/wg2-0/9701: [ 412.044504][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.044564][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.044617][ T38] 2 locks held by napi/wg2-0/9702: [ 412.044629][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.044679][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.044731][ T38] 4 locks held by kworker/0:7/10025: [ 412.044743][ T38] #0: ffff88805befd538 ((wq_completion)wg-crypt-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.044794][ T38] #1: ffffc9000156fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.044860][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.044911][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.044962][ T38] 4 locks held by kworker/0:8/10026: [ 412.044973][ T38] #0: ffff88805beff938 ((wq_completion)wg-crypt-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.045025][ T38] #1: ffffc9000155fbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.045078][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.045128][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.045181][ T38] 4 locks held by kworker/0:9/10027: [ 412.045193][ T38] #0: ffff8880349a8538 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.045248][ T38] #1: ffffc900057ffbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.045317][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.045369][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.045421][ T38] 4 locks held by kworker/0:10/10028: [ 412.045432][ T38] #0: ffff88805bd3dd38 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.045489][ T38] #1: ffffc9000583fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.045568][ T38] #2: ffff88803b0795f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 412.045615][ T38] #3: ffff88805d6e83f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 412.045666][ T38] 1 lock held by syz.1.1416/10068: [ 412.045678][ T38] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 412.045727][ T38] 5 locks held by kworker/0:11/10091: [ 412.045738][ T38] #0: ffff888060933538 ((wq_completion)wg-kex-wg0#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.045794][ T38] #1: ffffc900051d7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.045862][ T38] #2: ffff888060dad5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x1c7/0xb00 [ 412.045911][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.045962][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.046015][ T38] 4 locks held by kworker/1:7/10092: [ 412.046026][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.046079][ T38] #1: ffffc900058bfbc0 ((work_completion)(&(&tbl->managed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.046131][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.046183][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.046236][ T38] 4 locks held by kworker/1:9/10094: [ 412.046247][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.046299][ T38] #1: ffffc9000593fbc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.046352][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.046402][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.046454][ T38] 3 locks held by kworker/0:12/10096: [ 412.046465][ T38] #0: ffff88805befd138 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.046521][ T38] #1: ffffc9000595fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.046598][ T38] #2: ffff888036ed2e58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 412.046646][ T38] 4 locks held by kworker/0:13/10097: [ 412.046658][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.046710][ T38] #1: ffffc9000596fbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.046760][ T38] #2: ffffffff8ecd2978 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30 [ 412.046812][ T38] #3: ffff888063d70898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x164/0xf30 [ 412.046867][ T38] 4 locks held by kworker/0:14/10098: [ 412.046879][ T38] #0: ffff88805c26a138 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.046935][ T38] #1: ffffc90003e8fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.047005][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.047055][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.047107][ T38] 5 locks held by kworker/0:15/10099: [ 412.047119][ T38] #0: ffff88805be8ad38 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.047174][ T38] #1: ffffc9000597fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.047243][ T38] #2: ffff8880308c15f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 412.047291][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.047342][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.047394][ T38] 4 locks held by kworker/0:16/10100: [ 412.047406][ T38] #0: ffff88805beff938 ((wq_completion)wg-crypt-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.047456][ T38] #1: ffffc90005a77bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.047525][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.047585][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.047637][ T38] 6 locks held by kworker/u8:50/10102: [ 412.047649][ T38] #0: ffff88805c380138 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.047706][ T38] #1: ffffc90005a97bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.047758][ T38] #2: ffff88805c3515f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 412.047806][ T38] #3: ffff8880388ab8f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 412.047853][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.047904][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.047956][ T38] 6 locks held by kworker/u8:51/10103: [ 412.047968][ T38] #0: ffff88803a41b138 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.048025][ T38] #1: ffffc90005aa7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.048085][ T38] #2: ffff8880365195f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 412.048133][ T38] #3: ffff888036ed0e90 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 412.048181][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.048232][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.048284][ T38] 3 locks held by dhcpcd/10104: [ 412.048295][ T38] #0: ffff8880352e0350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 412.048344][ T38] #1: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.048394][ T38] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.048447][ T38] 6 locks held by kworker/u8:53/10106: [ 412.048459][ T38] #0: ffff88803a41f938 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.048516][ T38] #1: ffffc90005ac7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.048578][ T38] #2: ffff88803651d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 412.048626][ T38] #3: ffff888036ed7880 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 412.048674][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.048725][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.048777][ T38] 6 locks held by kworker/u8:54/10107: [ 412.048789][ T38] #0: ffff888032884938 ((wq_completion)wg-kex-wg1#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 412.048844][ T38] #1: ffffc90004d2fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 412.048897][ T38] #2: ffff8880611095f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 412.048944][ T38] #3: ffff88805d6ee350 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 412.048992][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.049145][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.049200][ T38] 3 locks held by syz-executor/10110: [ 412.049211][ T38] #0: ffff888026d57350 (sk_lock-AF_BLUETOOTH-BTPROTO_HCI){+.+.}-{0:0}, at: hci_sock_ioctl+0x247/0x910 [ 412.049267][ T38] #1: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 412.049319][ T38] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 412.049371][ T38] 1 lock held by kworker/0:17/10112: [ 412.049383][ T38] #0: ffffffff8d852638 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 412.049439][ T38] [ 412.049444][ T38] ============================================= [ 412.049444][ T38] [ 412.049454][ T38] NMI backtrace for cpu 1 [ 412.049469][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 412.049492][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 412.049503][ T38] Call Trace: [ 412.049512][ T38] [ 412.049521][ T38] dump_stack_lvl+0x189/0x250 [ 412.049565][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.049595][ T38] ? __pfx__printk+0x10/0x10 [ 412.049632][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 412.049660][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 412.049686][ T38] ? __pfx__printk+0x10/0x10 [ 412.049714][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 412.049742][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 412.049769][ T38] watchdog+0xf93/0xfe0 [ 412.049801][ T38] ? watchdog+0x1de/0xfe0 [ 412.049830][ T38] kthread+0x70e/0x8a0 [ 412.049864][ T38] ? __pfx_watchdog+0x10/0x10 [ 412.049889][ T38] ? __pfx_kthread+0x10/0x10 [ 412.049924][ T38] ? __pfx_kthread+0x10/0x10 [ 412.049955][ T38] ret_from_fork+0x3f9/0x770 [ 412.049984][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 412.050017][ T38] ? __switch_to_asm+0x39/0x70 [ 412.050035][ T38] ? __switch_to_asm+0x33/0x70 [ 412.050053][ T38] ? __pfx_kthread+0x10/0x10 [ 412.050084][ T38] ret_from_fork_asm+0x1a/0x30 [ 412.050121][ T38] [ 412.050129][ T38] Sending NMI from CPU 1 to CPUs 0: [ 412.050158][ C0] NMI backtrace for cpu 0 [ 412.050175][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 412.050194][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 412.050203][ C0] RIP: 0010:check_preemption_disabled+0x5c/0x120 [ 412.050229][ C0] Code: 34 ff 06 48 3b 4c 24 08 0f 85 cc 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d e9 01 95 03 00 cc 48 c7 04 24 00 00 00 00 9c 8f 04 24 04 24 00 02 00 00 74 c8 65 4c 8b 3c 25 08 f0 f5 91 41 f6 47 2f [ 412.050243][ C0] RSP: 0018:ffffc900001468c0 EFLAGS: 00000046 [ 412.050259][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000080000000 [ 412.050270][ C0] RDX: 0000000000000000 RSI: ffffffff8d04cc7d RDI: ffffffff8b620e80 [ 412.050282][ C0] RBP: ffffffff8172b165 R08: 0000000000000000 R09: 0000000000000000 [ 412.050293][ C0] R10: ffffc90000146ab8 R11: ffffffff81aae2f0 R12: 0000000000000002 [ 412.050304][ C0] R13: ffffffff8d9a8bc0 R14: 0000000000000000 R15: 0000000000000246 [ 412.050316][ C0] FS: 0000000000000000(0000) GS:ffff8881268c1000(0000) knlGS:0000000000000000 [ 412.050329][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.050341][ C0] CR2: 00007ffd4f9f9d8c CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 412.050358][ C0] Call Trace: [ 412.050365][ C0] [ 412.050373][ C0] ? unwind_next_frame+0xa5/0x2390 [ 412.050395][ C0] lock_acquire+0xe7/0x360 [ 412.050418][ C0] ? unwind_next_frame+0xa5/0x2390 [ 412.050438][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 412.050454][ C0] ? unwind_next_frame+0xa5/0x2390 [ 412.050473][ C0] unwind_next_frame+0xc2/0x2390 [ 412.050493][ C0] ? unwind_next_frame+0xa5/0x2390 [ 412.050516][ C0] ? unwind_next_frame+0xa5/0x2390 [ 412.050536][ C0] ? ret_from_fork+0x3f9/0x770 [ 412.050557][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 412.050575][ C0] arch_stack_walk+0x11c/0x150 [ 412.050599][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 412.050617][ C0] stack_trace_save+0x9c/0xe0 [ 412.050633][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 412.050650][ C0] ? __asan_memset+0x22/0x50 [ 412.050670][ C0] kasan_save_stack+0x3e/0x60 [ 412.050687][ C0] ? kasan_save_stack+0x3e/0x60 [ 412.050703][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 412.050717][ C0] ? call_rcu+0x157/0x9c0 [ 412.050730][ C0] ? skb_release_head_state+0x71/0x250 [ 412.050752][ C0] ? consume_skb+0x60/0xf0 [ 412.050770][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 412.050784][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 412.050798][ C0] ? nft_do_chain+0x40c/0x1920 [ 412.050829][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 412.050850][ C0] ? nf_hook_slow+0xc5/0x220 [ 412.050867][ C0] ? NF_HOOK+0x206/0x3a0 [ 412.050885][ C0] ? NF_HOOK+0x309/0x3a0 [ 412.050901][ C0] ? __netif_receive_skb+0x143/0x380 [ 412.050917][ C0] ? process_backlog+0x31e/0x900 [ 412.050934][ C0] ? __napi_poll+0xb6/0x540 [ 412.050948][ C0] ? net_rx_action+0x707/0xe00 [ 412.050965][ C0] ? handle_softirqs+0x22f/0x710 [ 412.050983][ C0] ? run_ksoftirqd+0xac/0x210 [ 412.051002][ C0] ? smpboot_thread_fn+0x53f/0xa60 [ 412.051020][ C0] ? kthread+0x70e/0x8a0 [ 412.051040][ C0] ? ret_from_fork+0x3f9/0x770 [ 412.051072][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 412.051103][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 412.051118][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 412.051132][ C0] call_rcu+0x157/0x9c0 [ 412.051151][ C0] ? rcuref_put+0x1b7/0x210 [ 412.051164][ C0] ? __pfx_call_rcu+0x10/0x10 [ 412.051179][ C0] ? percpu_counter_add_batch+0xea/0x1e0 [ 412.051201][ C0] ? dst_release+0x126/0x1b0 [ 412.051216][ C0] skb_release_head_state+0x71/0x250 [ 412.051239][ C0] consume_skb+0x60/0xf0 [ 412.051259][ C0] nft_synproxy_eval_v4+0x376/0x560 [ 412.051277][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 412.051293][ C0] ? nf_ip_checksum+0x13c/0x510 [ 412.051317][ C0] nft_synproxy_do_eval+0x345/0x570 [ 412.051332][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 412.051349][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 412.051371][ C0] nft_do_chain+0x40c/0x1920 [ 412.051397][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 412.051418][ C0] ? ipv6_find_hdr+0xc78/0x1050 [ 412.051438][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 412.051476][ C0] nft_do_chain_inet+0x25d/0x340 [ 412.051498][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 412.051520][ C0] ? __lock_acquire+0xab9/0xd20 [ 412.051543][ C0] ? NF_HOOK+0x9a/0x3a0 [ 412.051562][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 412.051584][ C0] nf_hook_slow+0xc5/0x220 [ 412.051605][ C0] NF_HOOK+0x206/0x3a0 [ 412.051624][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 412.051643][ C0] ? NF_HOOK+0x9a/0x3a0 [ 412.051660][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 412.051676][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 412.051697][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 412.051716][ C0] ? skb_dst+0x4f/0xd0 [ 412.051734][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 412.051754][ C0] NF_HOOK+0x309/0x3a0 [ 412.051773][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 412.051791][ C0] ? NF_HOOK+0x9a/0x3a0 [ 412.051815][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 412.051834][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 412.051857][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 412.051874][ C0] __netif_receive_skb+0x143/0x380 [ 412.051891][ C0] ? rt_spin_unlock+0x65/0x80 [ 412.051908][ C0] ? process_backlog+0x27b/0x900 [ 412.051925][ C0] process_backlog+0x31e/0x900 [ 412.051948][ C0] __napi_poll+0xb6/0x540 [ 412.051967][ C0] net_rx_action+0x707/0xe00 [ 412.051993][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 412.052013][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 412.052036][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 412.052057][ C0] handle_softirqs+0x22f/0x710 [ 412.052080][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 412.052103][ C0] run_ksoftirqd+0xac/0x210 [ 412.052123][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 412.052145][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 412.052164][ C0] ? smpboot_thread_fn+0x5f4/0xa60 [ 412.052183][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 412.052200][ C0] smpboot_thread_fn+0x53f/0xa60 [ 412.052219][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 412.052241][ C0] kthread+0x70e/0x8a0 [ 412.052264][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 412.052282][ C0] ? __pfx_kthread+0x10/0x10 [ 412.052306][ C0] ? __pfx_kthread+0x10/0x10 [ 412.052328][ C0] ret_from_fork+0x3f9/0x770 [ 412.052348][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 412.052370][ C0] ? __switch_to_asm+0x39/0x70 [ 412.052384][ C0] ? __switch_to_asm+0x33/0x70 [ 412.052398][ C0] ? __pfx_kthread+0x10/0x10 [ 412.052419][ C0] ret_from_fork_asm+0x1a/0x30 [ 412.052441][ C0] [ 412.053156][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 412.053173][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 412.053195][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 412.053207][ T38] Call Trace: [ 412.053215][ T38] [ 412.053223][ T38] dump_stack_lvl+0x99/0x250 [ 412.053255][ T38] ? __asan_memcpy+0x40/0x70 [ 412.053277][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.053306][ T38] ? __pfx__printk+0x10/0x10 [ 412.053342][ T38] vpanic+0x281/0x750 [ 412.053375][ T38] ? __pfx_vpanic+0x10/0x10 [ 412.053402][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 412.053424][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.053462][ T38] panic+0xb9/0xc0 [ 412.053491][ T38] ? __pfx_panic+0x10/0x10 [ 412.053523][ T38] ? irq_work_queue+0xc3/0x140 [ 412.053562][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 412.053589][ T38] watchdog+0xfd2/0xfe0 [ 412.053621][ T38] ? watchdog+0x1de/0xfe0 [ 412.053652][ T38] kthread+0x70e/0x8a0 [ 412.053686][ T38] ? __pfx_watchdog+0x10/0x10 [ 412.053710][ T38] ? __pfx_kthread+0x10/0x10 [ 412.053746][ T38] ? __pfx_kthread+0x10/0x10 [ 412.053777][ T38] ret_from_fork+0x3f9/0x770 [ 412.053806][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 412.053838][ T38] ? __switch_to_asm+0x39/0x70 [ 412.053856][ T38] ? __switch_to_asm+0x33/0x70 [ 412.053874][ T38] ? __pfx_kthread+0x10/0x10 [ 412.053905][ T38] ret_from_fork_asm+0x1a/0x30 [ 412.053942][ T38] [ 412.054097][ T38] Kernel Offset: disabled