last executing test programs: 3m3.680352789s ago: executing program 2 (id=310): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff08000440000000810800084000000003200001"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00068018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 3m3.437699207s ago: executing program 2 (id=314): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000001c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3m2.893715389s ago: executing program 3 (id=320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a010400000000000000000200000048000480440001800a0001006d61746368000000340002800900010074696d65000000001c00030007682c020b7b37f27f510100a151010049f4e34e86f469eb08000240000000000900010073797a30000000000900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3m2.510476286s ago: executing program 0 (id=323): unshare(0x2a020400) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x89b1, &(0x7f0000000100)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 3m2.347710679s ago: executing program 0 (id=324): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0), 0x4f, 0x3}) 3m2.346673521s ago: executing program 3 (id=325): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x800) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 3m2.260020506s ago: executing program 2 (id=327): r0 = io_uring_setup(0x2ed8, &(0x7f0000000280)={0x0, 0x6842, 0x800, 0x3, 0x12}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000d40)="01", 0x1) 3m2.068114815s ago: executing program 0 (id=328): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x123403, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x200) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='bfs\x00', 0x8400, 0x0) 3m2.061713052s ago: executing program 3 (id=329): unshare(0x20000400) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, 0x0, 0x0) 3m1.853669102s ago: executing program 3 (id=331): r0 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r0, 0x321) sendmsg$inet_sctp(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x1}}], 0x18, 0x400}, 0x8000) 3m1.824936404s ago: executing program 0 (id=332): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000281c0040000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000002000a80700000050000058bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056000000a80000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m1.552207173s ago: executing program 3 (id=335): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x30, r0, 0x10ada85e65c25349, 0x3, 0xfffffffc, {{0x67}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x29}}}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x117, 0x0, 0x1, [{0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048810}, 0x0) 3m1.192709371s ago: executing program 0 (id=336): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}}, 0x1c}}, 0x0) 3m0.816922133s ago: executing program 0 (id=339): unshare(0xe020480) r0 = socket(0xa, 0x3, 0xff) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x10, 0x0, 0xfffffffe, 0xffffffff, 0xfffffff9, 0x2, 0x0, 0xfffffffd, 0xfffffffc}}) 3m0.557297981s ago: executing program 1 (id=340): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) exit(0x3) 3m0.339218813s ago: executing program 3 (id=342): unshare(0x4000400) r0 = socket$caif_seqpacket(0x25, 0x5, 0x5) ppoll(&(0x7f0000000240)=[{r0, 0x4000}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) 3m0.000732277s ago: executing program 4 (id=343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000000) 2m59.694028144s ago: executing program 4 (id=344): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x0, 0x0, [0x2, 0x126ed097, 0x2, 0x5, 0x10001, 0x7, 0x4, 0x25, 0xc, 0x3, 0xfff, 0x6, 0x2, 0x2, 0x6, 0x8000]}], r1, 0x1, 0x1, 0x48}}, 0x20) 2m59.45320067s ago: executing program 2 (id=345): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000020bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e024334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd617545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d36c309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x8, &(0x7f0000001880)="a67b41f72343a99f322f0fb564e171f0c42be53969913926180b2a1991b4e25747ff23212ddf3193d13e", 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6}, 0x24) 2m59.372174842s ago: executing program 1 (id=346): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x5, 0x7}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000b00)="ce0e6df76aedfbdf91f70cf65303fed24d8e10f6386806362a", &(0x7f00000003c0), 0x3ff, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f0000000300), &(0x7f0000000200)=""/35}, 0x20) 2m59.256532778s ago: executing program 4 (id=347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x8, 0xfffffffe, {0x1e}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) 2m59.016114864s ago: executing program 1 (id=348): r0 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x4c092, r0, 0x0) fallocate(r0, 0x3, 0x8000000f5, 0xfffffffb) 2m59.011031518s ago: executing program 2 (id=349): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x19, 0x64, 0xd4, 0x8, 0x1a86, 0xe092, 0x533f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x1f, 0x2, 0x2, 0xe9, 0x17, 0xf3, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="400ece0200000021637fc4153f787c0b4f4e369e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m58.874873106s ago: executing program 4 (id=350): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 2m58.625743811s ago: executing program 1 (id=351): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x38}}, 0x0) 2m58.56301591s ago: executing program 4 (id=352): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000ff623140fd0704005026010203010902120001000000000904000000ff"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) 2m58.364636943s ago: executing program 1 (id=353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x101000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fallocate(r0, 0x22, 0x8000000000000000, 0xc55c) 2m57.83144583s ago: executing program 1 (id=354): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, 0x0) 2m53.049494314s ago: executing program 2 (id=355): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r0, &(0x7f00000000c0)={0x1a, 0x0, 0x2, 0x4, 0x20, 0x2, @multicast}, 0x10) listen(r0, 0x2) 2m28.046440556s ago: executing program 4 (id=356): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2, 0x1, 0x1d0d, {}, {0x77359400}, {0x2, 0x1, 0x1}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "4c36e155179d5575"}}, 0x48}, 0x1, 0x0, 0x0, 0x20002804}, 0x800) 2m3.217252707s ago: executing program 32 (id=339): unshare(0xe020480) r0 = socket(0xa, 0x3, 0xff) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x10, 0x0, 0xfffffffe, 0xffffffff, 0xfffffff9, 0x2, 0x0, 0xfffffffd, 0xfffffffc}}) 1m31.277884974s ago: executing program 33 (id=354): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, 0x0) 1m3.32463179s ago: executing program 34 (id=355): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r0, &(0x7f00000000c0)={0x1a, 0x0, 0x2, 0x4, 0x20, 0x2, @multicast}, 0x10) listen(r0, 0x2) 0s ago: executing program 35 (id=342): unshare(0x4000400) r0 = socket$caif_seqpacket(0x25, 0x5, 0x5) ppoll(&(0x7f0000000240)=[{r0, 0x4000}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 92.501051][ T1906] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.82' (ED25519) to the list of known hosts. [ 96.516667][ T5829] cgroup: Unknown subsys name 'net' [ 96.773533][ T5829] cgroup: Unknown subsys name 'cpuset' [ 96.828513][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 98.930073][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.871248][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.877188][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.878349][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.890266][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.891602][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.199204][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.200989][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.208311][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.210583][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.211793][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.259936][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.262018][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.263285][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.265478][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.267586][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.330564][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 103.336368][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 103.338327][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 103.342683][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 103.358795][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 103.401517][ T5157] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.405086][ T5157] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.405989][ T5157] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.420747][ T5157] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.421699][ T5157] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.928136][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 104.417162][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.419848][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.420574][ T5846] bridge_slave_0: entered allmulticast mode [ 104.424424][ T5846] bridge_slave_0: entered promiscuous mode [ 104.501692][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.502583][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.502777][ T5846] bridge_slave_1: entered allmulticast mode [ 104.505061][ T5846] bridge_slave_1: entered promiscuous mode [ 104.799684][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 104.827026][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.914195][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.930872][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 104.941646][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 104.979574][ T5157] Bluetooth: hci0: command tx timeout [ 105.218023][ T5157] Bluetooth: hci1: command tx timeout [ 105.246251][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 105.278308][ T5846] team0: Port device team_slave_0 added [ 105.378051][ T5157] Bluetooth: hci2: command tx timeout [ 105.458047][ T5157] Bluetooth: hci3: command tx timeout [ 105.458241][ T5157] Bluetooth: hci4: command tx timeout [ 105.469443][ T5846] team0: Port device team_slave_1 added [ 105.965695][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.965711][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.965730][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.973371][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.973639][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.976311][ T5850] bridge_slave_0: entered allmulticast mode [ 105.980432][ T5850] bridge_slave_0: entered promiscuous mode [ 106.270807][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.270830][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.270851][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.272988][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.273196][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.273416][ T5850] bridge_slave_1: entered allmulticast mode [ 106.275448][ T5850] bridge_slave_1: entered promiscuous mode [ 106.569725][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.569877][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.570076][ T5851] bridge_slave_0: entered allmulticast mode [ 106.573108][ T5851] bridge_slave_0: entered promiscuous mode [ 106.682455][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.682645][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.682809][ T5856] bridge_slave_0: entered allmulticast mode [ 106.684736][ T5856] bridge_slave_0: entered promiscuous mode [ 106.802300][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.802489][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.802749][ T5851] bridge_slave_1: entered allmulticast mode [ 106.805750][ T5851] bridge_slave_1: entered promiscuous mode [ 106.881018][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.881167][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.881410][ T5856] bridge_slave_1: entered allmulticast mode [ 106.884081][ T5856] bridge_slave_1: entered promiscuous mode [ 106.892670][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.949430][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.949605][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.949809][ T5853] bridge_slave_0: entered allmulticast mode [ 106.952859][ T5853] bridge_slave_0: entered promiscuous mode [ 107.058037][ T59] Bluetooth: hci0: command tx timeout [ 107.105429][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.184289][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.184468][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.184680][ T5853] bridge_slave_1: entered allmulticast mode [ 107.186939][ T5853] bridge_slave_1: entered promiscuous mode [ 107.299514][ T59] Bluetooth: hci1: command tx timeout [ 107.457988][ T59] Bluetooth: hci2: command tx timeout [ 107.517570][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.538079][ T59] Bluetooth: hci4: command tx timeout [ 107.538117][ T59] Bluetooth: hci3: command tx timeout [ 107.597456][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.613094][ T5846] hsr_slave_0: entered promiscuous mode [ 107.616212][ T5846] hsr_slave_1: entered promiscuous mode [ 107.705373][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.761814][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.764521][ T5850] team0: Port device team_slave_0 added [ 107.842628][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.912208][ T5850] team0: Port device team_slave_1 added [ 107.993892][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.182558][ T5851] team0: Port device team_slave_0 added [ 108.271905][ T5856] team0: Port device team_slave_0 added [ 108.356442][ T5851] team0: Port device team_slave_1 added [ 108.431299][ T5856] team0: Port device team_slave_1 added [ 108.718906][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.718928][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.718958][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.865881][ T5853] team0: Port device team_slave_0 added [ 108.943641][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.943663][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.943692][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.036498][ T5853] team0: Port device team_slave_1 added [ 109.133359][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.133379][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.133398][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.137972][ T5157] Bluetooth: hci0: command tx timeout [ 109.261553][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.261573][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.261601][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.277532][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.277555][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.277584][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.388098][ T5157] Bluetooth: hci1: command tx timeout [ 109.411408][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.411428][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.411456][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.464048][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.464068][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.464096][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.538123][ T5157] Bluetooth: hci2: command tx timeout [ 109.602792][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.602811][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.602840][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.618567][ T5157] Bluetooth: hci3: command tx timeout [ 109.618582][ T59] Bluetooth: hci4: command tx timeout [ 109.751457][ T5850] hsr_slave_0: entered promiscuous mode [ 109.752473][ T5850] hsr_slave_1: entered promiscuous mode [ 109.753338][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 109.753440][ T5850] Cannot create hsr debugfs directory [ 110.196453][ T5851] hsr_slave_0: entered promiscuous mode [ 110.205658][ T5851] hsr_slave_1: entered promiscuous mode [ 110.206903][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 110.206932][ T5851] Cannot create hsr debugfs directory [ 110.308152][ T5856] hsr_slave_0: entered promiscuous mode [ 110.309146][ T5856] hsr_slave_1: entered promiscuous mode [ 110.309883][ T5856] debugfs: 'hsr0' already exists in 'hsr' [ 110.309903][ T5856] Cannot create hsr debugfs directory [ 110.549399][ T5853] hsr_slave_0: entered promiscuous mode [ 110.550845][ T5853] hsr_slave_1: entered promiscuous mode [ 110.551804][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 110.551830][ T5853] Cannot create hsr debugfs directory [ 111.218457][ T5157] Bluetooth: hci0: command tx timeout [ 111.458385][ T5157] Bluetooth: hci1: command tx timeout [ 111.617932][ T5157] Bluetooth: hci2: command tx timeout [ 111.698060][ T59] Bluetooth: hci4: command tx timeout [ 111.698112][ T5157] Bluetooth: hci3: command tx timeout [ 111.907592][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.074814][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.141250][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.227346][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.411110][ T5850] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 112.463031][ T5850] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 112.499347][ T5850] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 112.555768][ T5850] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 112.718995][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 112.771747][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 112.816509][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 112.862111][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 113.017086][ T5856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 113.076574][ T5856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 113.128844][ T5856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 113.199965][ T5856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 113.319297][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.383440][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 113.431161][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 113.482708][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 113.523003][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 113.578937][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.642839][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.643493][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.698234][ T1220] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.699226][ T1220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.706666][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.855107][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.919628][ T1220] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.919897][ T1220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.925492][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.995879][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.996157][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.096982][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.174137][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.178008][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.213690][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.283845][ T1220] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.283968][ T1220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.415792][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.454381][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.510173][ T1220] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.510392][ T1220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.593976][ T1220] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.594950][ T1220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.657706][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.716635][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.754038][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.756397][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.816284][ T4525] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.816580][ T4525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.134840][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.248543][ T5846] veth0_vlan: entered promiscuous mode [ 115.369965][ T5846] veth1_vlan: entered promiscuous mode [ 115.491202][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.656936][ T5846] veth0_macvtap: entered promiscuous mode [ 115.707546][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.725229][ T5846] veth1_macvtap: entered promiscuous mode [ 115.902214][ T5851] veth0_vlan: entered promiscuous mode [ 115.923641][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.991662][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.005313][ T5851] veth1_vlan: entered promiscuous mode [ 116.016543][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.086270][ T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.099265][ T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.116675][ T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.138996][ T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.150173][ T5856] veth0_vlan: entered promiscuous mode [ 116.315281][ T5856] veth1_vlan: entered promiscuous mode [ 116.338590][ T5850] veth0_vlan: entered promiscuous mode [ 116.460296][ T5851] veth0_macvtap: entered promiscuous mode [ 116.523140][ T5850] veth1_vlan: entered promiscuous mode [ 116.540409][ T5851] veth1_macvtap: entered promiscuous mode [ 116.564505][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.564530][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.609011][ T5853] veth0_vlan: entered promiscuous mode [ 116.703854][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.703875][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.712423][ T5853] veth1_vlan: entered promiscuous mode [ 116.741380][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.764607][ T5856] veth0_macvtap: entered promiscuous mode [ 116.819809][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.852377][ T5856] veth1_macvtap: entered promiscuous mode [ 116.916245][ T1103] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.959608][ T1103] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.964229][ T5850] veth0_macvtap: entered promiscuous mode [ 116.967235][ T1103] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.992959][ T1103] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.024667][ T5850] veth1_macvtap: entered promiscuous mode [ 117.121599][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.265916][ T5853] veth0_macvtap: entered promiscuous mode [ 117.283809][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.366701][ T5853] veth1_macvtap: entered promiscuous mode [ 117.381251][ T5958] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 117.426983][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.457804][ T1220] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.528268][ T1220] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.575398][ T1220] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.589263][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.615726][ T1220] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.662552][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.662576][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.838574][ T1103] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.880400][ T69] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.912258][ T69] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.931980][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.947979][ T69] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.043005][ T4525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.043031][ T4525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.137145][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.312876][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.355933][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.371475][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.393935][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.692538][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.692564][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.779119][ T5971] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 119.043201][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.043226][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.200132][ T1220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.200155][ T1220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.476239][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.476264][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.656935][ T1424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.656963][ T1424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.134919][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.134942][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.303709][ T6012] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 121.740322][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.957986][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 121.973251][ T45] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 121.973281][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.028495][ T45] usb 1-1: config 0 descriptor?? [ 122.569406][ T45] konepure 0003:1E7D:2DBE.0001: hidraw0: USB HID v1.01 Device [HID 1e7d:2dbe] on usb-dummy_hcd.0-1/input0 [ 122.774439][ T45] usb 1-1: USB disconnect, device number 2 [ 123.212045][ T6036] fido_id[6036]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 124.835238][ T6087] netlink: 'syz.0.58': attribute type 1 has an invalid length. [ 124.835330][ T6087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.58'. [ 124.835349][ T6087] nbd: illegal input index 65544 [ 125.067942][ T1906] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 125.223177][ T1906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.223224][ T1906] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 125.223247][ T1906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.262706][ T1906] usb 3-1: config 0 descriptor?? [ 125.444196][ T6100] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 125.445218][ T6099] netlink: 'syz.0.64': attribute type 2 has an invalid length. [ 125.559963][ T990] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 125.724477][ T990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 125.724511][ T990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.724549][ T990] usb 4-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 125.724571][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.754877][ T990] usb 4-1: config 0 descriptor?? [ 125.872067][ T1906] nintendo 0003:057E:200E.0002: unbalanced collection at end of report description [ 125.872894][ T1906] nintendo 0003:057E:200E.0002: HID parse failed [ 125.876358][ T1906] nintendo 0003:057E:200E.0002: probe - fail = -22 [ 125.876481][ T1906] nintendo 0003:057E:200E.0002: probe with driver nintendo failed with error -22 [ 126.042424][ T5913] usb 3-1: USB disconnect, device number 2 [ 126.492072][ T990] usb 4-1: USB disconnect, device number 2 [ 126.624500][ T6120] capability: warning: `syz.4.73' uses deprecated v2 capabilities in a way that may be insecure [ 126.647978][ T5913] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 126.816096][ T5913] usb 1-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 126.816128][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.870443][ T5913] usb 1-1: config 0 descriptor?? [ 126.935016][ T6126] CUSE: DEVNAME unspecified [ 127.357422][ T5913] elecom 0003:056E:00E6.0004: unknown main item tag 0x0 [ 127.357462][ T5913] elecom 0003:056E:00E6.0004: unknown main item tag 0x0 [ 127.357489][ T5913] elecom 0003:056E:00E6.0004: unknown main item tag 0x0 [ 127.357515][ T5913] elecom 0003:056E:00E6.0004: unknown main item tag 0x0 [ 127.357541][ T5913] elecom 0003:056E:00E6.0004: unknown main item tag 0x0 [ 127.383833][ T5913] elecom 0003:056E:00E6.0004: hidraw0: USB HID v1.01 Device [HID 056e:00e6] on usb-dummy_hcd.0-1/input0 [ 127.559992][ T5926] usb 1-1: USB disconnect, device number 3 [ 127.723309][ T6139] fido_id[6139]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 127.787980][ T5157] Bluetooth: hci1: command tx timeout [ 127.828559][ T6144] netlink: 'syz.1.83': attribute type 1 has an invalid length. [ 128.404625][ T6155] syz.4.88 (6155) used greatest stack depth: 18584 bytes left [ 128.534002][ T6162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.91'. [ 129.300678][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 129.411329][ T6188] gretap0: entered promiscuous mode [ 129.412759][ T6188] vlan2: entered promiscuous mode [ 129.447898][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 129.452933][ T31] usb 5-1: too many endpoints for config 0 interface 0 altsetting 255: 254, using maximum allowed: 30 [ 129.452985][ T31] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 197, changing to 11 [ 129.453015][ T31] usb 5-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 129.453043][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 129.453080][ T31] usb 5-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 129.453104][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.518797][ T31] usb 5-1: config 0 descriptor?? [ 129.837831][ T5913] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 129.992673][ T5913] usb 1-1: Using ep0 maxpacket: 32 [ 130.005979][ T5913] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.006010][ T5913] usb 1-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 130.006034][ T5913] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 130.006058][ T5913] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 130.006079][ T5913] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 130.006103][ T5913] usb 1-1: config 0 interface 0 has no altsetting 0 [ 130.006135][ T5913] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 130.006157][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.045865][ T5913] usb 1-1: config 0 descriptor?? [ 130.103663][ T31] topre 0003:0853:0148.0005: hidraw0: USB HID vc9.b6 Device [HID 0853:0148] on usb-dummy_hcd.4-1/input0 [ 130.330068][ T31] usb 5-1: USB disconnect, device number 2 [ 130.555291][ T5913] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 130.555329][ T5913] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 130.555357][ T5913] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 130.555384][ T5913] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 130.555412][ T5913] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 130.594545][ T5913] hid-thrustmaster 0003:044F:B65D.0006: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 130.594860][ T5913] hid-thrustmaster 0003:044F:B65D.0006: setup data couldn't be sent [ 130.724133][ C1] hid-thrustmaster 0003:044F:B65D.0006: URB to get model id failed with error -71 [ 130.765848][ T5913] usb 1-1: USB disconnect, device number 4 [ 130.827913][ T5936] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 130.857695][ T1906] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 130.971170][ T6211] fido_id[6211]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 130.990823][ T5936] usb 3-1: Using ep0 maxpacket: 16 [ 130.994820][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 130.994879][ T5936] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 130.994907][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.050799][ T5936] usb 3-1: config 0 descriptor?? [ 131.063023][ T1906] usb 4-1: Using ep0 maxpacket: 16 [ 131.073259][ T1906] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 131.073289][ T1906] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 131.073316][ T1906] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 131.073339][ T1906] usb 4-1: config 0 interface 0 has no altsetting 0 [ 131.102106][ T6213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.129561][ T1906] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 131.129593][ T1906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.129613][ T1906] usb 4-1: Product: syz [ 131.129628][ T1906] usb 4-1: Manufacturer: syz [ 131.129643][ T1906] usb 4-1: SerialNumber: syz [ 131.172037][ T1906] usb 4-1: config 0 descriptor?? [ 131.498937][ T1906] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 131.524241][ T5193] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 131.620565][ T5193] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 131.668543][ T5936] holtek 0003:1241:5015.0007: hidraw0: USB HID v0.04 Device [HID 1241:5015] on usb-dummy_hcd.2-1/input0 [ 131.668591][ T5936] holtek 0003:1241:5015.0007: no inputs found [ 131.720666][ T6208] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 131.781458][ T5193] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 131.882989][ T10] usb 3-1: USB disconnect, device number 3 [ 131.924675][ T5193] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 131.925389][ T5936] usb 4-1: USB disconnect, device number 3 [ 132.042391][ T6225] fido_id[6225]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 132.499312][ T6240] netlink: 60 bytes leftover after parsing attributes in process `syz.1.119'. [ 132.664653][ T6244] usb usb8: usbfs: process 6244 (syz.0.120) did not claim interface 1 before use [ 132.957974][ T5936] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 133.108014][ T5936] usb 4-1: Using ep0 maxpacket: 8 [ 133.110998][ T5936] usb 4-1: config 0 interface 0 has no altsetting 0 [ 133.111049][ T5936] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 133.111073][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.121536][ T5936] usb 4-1: config 0 descriptor?? [ 133.633562][ T5936] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 133.933597][ T5936] usb 4-1: USB disconnect, device number 4 [ 134.159166][ T1231] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 134.325860][ T1231] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 134.325891][ T1231] usb 5-1: config 1 has no interface number 0 [ 134.325965][ T1231] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 134.325992][ T1231] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 134.326025][ T1231] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.379093][ T1231] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 134.379124][ T1231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.379144][ T1231] usb 5-1: Product: syz [ 134.379159][ T1231] usb 5-1: Manufacturer: syz [ 134.379173][ T1231] usb 5-1: SerialNumber: syz [ 134.435977][ T6276] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 134.689359][ T6276] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 134.998189][ T1231] sierra_net 5-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 135.105300][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'. [ 135.105347][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.144'. [ 135.105473][ T1231] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 135.105496][ T1231] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 135.145267][ T1231] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 135.145294][ T1231] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 135.195455][ T6298] [U] é [ 135.237335][ T1231] usb 5-1: USB disconnect, device number 3 [ 135.255895][ T1231] sierra_net 5-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem [ 135.365571][ T6308] Bluetooth: MGMT ver 1.23 [ 135.544745][ T1231] sierra_net 5-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 135.613758][ T6315] process 'syz.3.152' launched './file2' with NULL argv: empty string added [ 136.277796][ T6337] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 136.277796][ T6337] The task syz.4.162 (6337) triggered the difference, watch for misbehavior. [ 136.581750][ T5936] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 136.745786][ T5936] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 136.745819][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.745840][ T5936] usb 2-1: Product: syz [ 136.745854][ T5936] usb 2-1: Manufacturer: syz [ 136.745870][ T5936] usb 2-1: SerialNumber: syz [ 136.822336][ T5936] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 137.015144][ T6210] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 137.418742][ T6368] Bluetooth: MGMT ver 1.23 [ 137.531354][ T5926] usb 2-1: USB disconnect, device number 2 [ 138.273411][ T6210] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 138.273963][ T6210] ath9k_htc: Failed to initialize the device [ 138.276994][ T5926] usb 2-1: ath9k_htc: USB layer deinitialized [ 138.397015][ T1906] IPVS: starting estimator thread 0... [ 138.423935][ T6390] IPVS: ip_vs_add_dest(): server weight less than zero [ 138.499033][ T6391] IPVS: using max 6 ests per chain, 14400 per kthread [ 138.585538][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.585646][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.265950][ T6407] syz.0.194 (6407) used greatest stack depth: 18216 bytes left [ 139.647945][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 139.824533][ T45] usb 2-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 139.824566][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.824587][ T45] usb 2-1: Product: syz [ 139.824602][ T45] usb 2-1: Manufacturer: syz [ 139.824616][ T45] usb 2-1: SerialNumber: syz [ 139.837863][ T6210] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 139.868892][ T45] usb 2-1: config 0 descriptor?? [ 139.959247][ T45] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 139.988211][ T6210] usb 4-1: Using ep0 maxpacket: 16 [ 139.992035][ T6210] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 139.992157][ T6210] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 139.992181][ T6210] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 139.992207][ T6210] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 139.992229][ T6210] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 139.992311][ T6210] usb 4-1: config 1 interface 0 has no altsetting 0 [ 139.992347][ T6210] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 139.992370][ T6210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.227108][ T6210] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 140.400394][ T45] input: sonixb as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 140.481973][ T6210] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 140.551836][ T6210] usb 4-1: USB disconnect, device number 5 [ 140.655522][ T45] usb 2-1: USB disconnect, device number 3 [ 140.754420][ T6448] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 141.305996][ T6452] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.635623][ T37] audit: type=1326 audit(1756217456.478:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6466 comm="syz.4.221" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff6ae16ebe9 code=0x0 [ 141.865054][ T6476] netlink: 'syz.1.224': attribute type 10 has an invalid length. [ 141.877911][ T5926] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 141.951502][ T6476] team0: Port device syz_tun added [ 142.030340][ T5926] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.030381][ T5926] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.030409][ T5926] usb 1-1: config 0 interface 0 has no altsetting 0 [ 142.030446][ T5926] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 142.030471][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.090082][ T5926] usb 1-1: config 0 descriptor?? [ 142.260362][ T6482] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 142.539707][ T6484] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.228'. [ 142.539796][ T6484] netlink: zone id is out of range [ 142.539850][ T6484] netlink: get zone limit has 8 unknown bytes [ 142.578572][ T5926] itetech 0003:06CB:73F6.0009: hidraw0: USB HID v0.01 Device [HID 06cb:73f6] on usb-dummy_hcd.0-1/input0 [ 142.701266][ T37] audit: type=1400 audit(1756217457.558:3): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6490 comm="syz.4.231" src=1 dest=20000 netif=wpan0 [ 142.740942][ T1231] usb 1-1: USB disconnect, device number 5 [ 142.982481][ T6495] fido_id[6495]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 143.357975][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 143.510520][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 143.512996][ T45] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 143.513022][ T45] usb 2-1: config 0 has no interface number 0 [ 143.513055][ T45] usb 2-1: config 0 interface 184 has no altsetting 0 [ 143.526569][ T45] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 143.526605][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.526630][ T45] usb 2-1: Product: syz [ 143.526645][ T45] usb 2-1: Manufacturer: syz [ 143.526662][ T45] usb 2-1: SerialNumber: syz [ 143.546679][ T45] usb 2-1: config 0 descriptor?? [ 143.572247][ T45] smsc75xx v1.0.0 [ 143.572268][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 143.575383][ T45] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 143.806986][ T1231] usb 2-1: USB disconnect, device number 4 [ 143.874769][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.245'. [ 143.997856][ T5933] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 144.153258][ T5933] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 144.153287][ T5933] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 144.153307][ T5933] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 144.153328][ T5933] usb 5-1: config 8 has no interface number 0 [ 144.153382][ T5933] usb 5-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 144.153410][ T5933] usb 5-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.160446][ T6527] [U]  [ 144.160496][ T6527] [U] K{‘ [ 144.161058][ T6527] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 144.171747][ T6527] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 144.172752][ T6527] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 144.191199][ T6527] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 144.203528][ T6527] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 144.205327][ T6527] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 144.206489][ T6527] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 144.230832][ T6527] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`ƦM¢XÎÂ"Ä\ [ 144.277605][ T6527] [U] {;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 144.284508][ T6527] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 144.284736][ T6527] [U] 22½“Æ©ÐÛ©X?0;3U± [ 144.297373][ T6527] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 144.302189][ T6527] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 144.306118][ T6527] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 144.306595][ T6527] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 144.315324][ T6527] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 144.315395][ T6527] [U] ¹ EC [ 144.321384][ T6527] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 144.375579][ T6526] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 144.571714][ T5933] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 144.571750][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.571773][ T5933] usb 5-1: Product: syz [ 144.571788][ T5933] usb 5-1: Manufacturer: syz [ 144.571804][ T5933] usb 5-1: SerialNumber: syz [ 144.885606][ T5933] usb 5-1: USB disconnect, device number 4 [ 145.012993][ T6540] netlink: 'syz.1.253': attribute type 49 has an invalid length. [ 145.993574][ T6564] sp0: Synchronizing with TNC [ 146.711248][ T6587] netlink: 28 bytes leftover after parsing attributes in process `syz.4.277'. [ 146.925915][ T6593] ======================================================= [ 146.925915][ T6593] WARNING: The mand mount option has been deprecated and [ 146.925915][ T6593] and is ignored by this kernel. Remove the mand [ 146.925915][ T6593] option from the mount to silence this warning. [ 146.925915][ T6593] ======================================================= [ 147.553488][ T37] audit: type=1400 audit(1756217462.408:4): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6619 comm="syz.0.290" src=1 dest=20000 netif=wpan0 [ 147.684754][ T6621] sp0: Synchronizing with TNC [ 148.387896][ T5926] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 148.550345][ T5926] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 148.550373][ T5926] usb 5-1: config 0 has no interface number 0 [ 148.550422][ T5926] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 148.550447][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.571147][ T5926] usb 5-1: config 0 descriptor?? [ 148.618977][ T5926] usb 5-1: selecting invalid altsetting 1 [ 148.619951][ T5926] dvb_ttusb_budget: ttusb_init_controller: error [ 148.620208][ T5926] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 149.061185][ T5926] DVB: Unable to find symbol cx22700_attach() [ 149.256963][ T5926] DVB: Unable to find symbol tda10046_attach() [ 149.256980][ T5926] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 149.287549][ T5926] usb 5-1: USB disconnect, device number 5 [ 149.545976][ T6666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.529086][ T6688] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 152.341373][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.338'. [ 152.361781][ T5157] Bluetooth: hci2: Malformed Event: 0x13 [ 154.539977][ T5933] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 154.698459][ T5933] usb 3-1: Using ep0 maxpacket: 8 [ 154.701630][ T5933] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 154.701660][ T5933] usb 3-1: config 2 has no interface number 0 [ 154.701722][ T5933] usb 3-1: config 2 interface 31 has no altsetting 0 [ 154.776880][ T5933] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 154.776916][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.776937][ T5933] usb 3-1: Product: syz [ 154.776952][ T5933] usb 3-1: Manufacturer: syz [ 154.776966][ T5933] usb 3-1: SerialNumber: syz [ 154.947987][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 155.172790][ T10] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 155.172828][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.172849][ T10] usb 5-1: Product: syz [ 155.172865][ T10] usb 5-1: Manufacturer: syz [ 155.172880][ T10] usb 5-1: SerialNumber: syz [ 155.350551][ T10] usb 5-1: config 0 descriptor?? [ 155.433853][ T10] usb 5-1: Waiting for MOTU Microbook II to boot up... [ 155.433889][ T10] usb 5-1: failed setting the sample rate for Motu MicroBook II: -22 [ 155.434377][ T10] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 155.737167][ T5933] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 155.800070][ T10] usb 5-1: USB disconnect, device number 6 [ 155.823368][ T5933] usb 3-1: USB disconnect, device number 4 [ 159.907739][ C1] sched: DL replenish lagged too much [ 214.703419][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 214.765139][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 229.658276][ T6813] Bluetooth: hci1: command 0x0406 tx timeout [ 229.658324][ T6813] Bluetooth: hci2: command 0x0406 tx timeout [ 229.658356][ T6813] Bluetooth: hci4: command 0x0406 tx timeout [ 229.658385][ T6813] Bluetooth: hci3: command 0x0405 tx timeout [ 232.299514][ T6816] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 232.309138][ T6816] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 232.310468][ T6816] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 232.311882][ T6816] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 232.312901][ T6816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 250.406205][ T6816] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 250.410272][ T6816] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 250.410748][ T6816] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 250.415048][ T6816] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 250.415893][ T6816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 259.121639][ T6813] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 259.134415][ T6813] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 259.135873][ T6813] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 259.141804][ T6813] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 259.142790][ T6813] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 264.411539][ T6813] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 266.579674][ T6813] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 267.572795][ T6813] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 267.578730][ T6813] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 267.579573][ T6813] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 305.108600][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 305.125755][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.442421][ T6827] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 329.708176][ T6850] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 330.500960][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.517895][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 332.654243][ T6813] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 333.222434][ T6813] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 334.060919][ T6813] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 344.082952][ T6813] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 344.686991][ T6813] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 344.721820][ T6813] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 344.924568][ T6813] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 344.925455][ T6813] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 352.290876][ T6813] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 352.957992][ T6813] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 352.958554][ T6813] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 352.959800][ T6813] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 352.960896][ T6813] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 365.013265][ T6863] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 365.013816][ T6827] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 365.014619][ T6827] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 365.015944][ T6827] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 365.017290][ T6827] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 366.003238][ T6863] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 366.023991][ T6863] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 366.999793][ T6863] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 367.249322][ T6827] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 368.400300][ T6863] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 369.842563][ T6863] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 373.494392][ T38] INFO: task kworker/u8:16:[ 373.494392][ T38] INFO: task kworker/u8:16:6759 blocked for more than 154 seconds. [ 373.494434][ T38] Not tainted syzkaller #0 [ 373.494447][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 373.494463][ T38] task:kworker/u8:16 state:D stack:28056 pid:6759 tgid:6759 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 373.494536][ T38] Workqueue: events_unbound bpf_map_free_deferred [ 373.494587][ T38] Call Trace: [ 373.494594][ T38] [ 373.494610][ T38] __schedule+0x16f3/0x4c20 [ 373.494664][ T38] ? __lock_acquire+0xab9/0xd20 [ 373.494696][ T38] ? __pfx___schedule+0x10/0x10 [ 373.494741][ T38] ? schedule+0x91/0x360 [ 373.494771][ T38] schedule+0x165/0x360 [ 373.494799][ T38] schedule_timeout+0x9a/0x270 [ 373.494825][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 373.494865][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.494894][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.494918][ T38] ? wait_for_completion+0x267/0x5d0 [ 373.494948][ T38] wait_for_completion+0x2bf/0x5d0 [ 373.494989][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 373.495026][ T38] ? __init_swait_queue_head+0xa9/0x150 [ 373.495058][ T38] rcu_barrier+0x463/0x570 [ 373.495093][ T38] dev_map_free+0x11f/0x6a0 [ 373.495137][ T38] bpf_map_free_deferred+0x110/0x140 [ 373.495161][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 373.495190][ T38] process_scheduled_works+0xade/0x17b0 [ 373.495251][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 373.495299][ T38] worker_thread+0x8a0/0xda0 [ 373.495358][ T38] kthread+0x711/0x8a0 [ 373.495396][ T38] ? __pfx_worker_thread+0x10/0x10 [ 373.495424][ T38] ? __pfx_kthread+0x10/0x10 [ 373.495462][ T38] ? __pfx_kthread+0x10/0x10 [ 373.495496][ T38] ret_from_fork+0x3fc/0x770 [ 373.495529][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 373.495572][ T38] ? __switch_to_asm+0x39/0x70 [ 373.495593][ T38] ? __switch_to_asm+0x33/0x70 [ 373.495612][ T38] ? __pfx_kthread+0x10/0x10 [ 373.495645][ T38] ret_from_fork_asm+0x1a/0x30 [ 373.495686][ T38] [ 373.495704][ T38] INFO: task kworker/1:9:6778 blocked for more than 154 seconds. [ 373.495719][ T38] Not tainted syzkaller #0 [ 373.495730][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 373.495739][ T38] task:kworker/1:9 state:D stack:28224 pid:6778 tgid:6778 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 373.495806][ T38] Workqueue: events_power_efficient reg_check_chans_work [ 373.495836][ T38] Call Trace: [ 373.495843][ T38] [ 373.495856][ T38] __schedule+0x16f3/0x4c20 [ 373.495891][ T38] ? sched_clock+0x3f/0x60 [ 373.495917][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 373.495954][ T38] ? __pfx___schedule+0x10/0x10 [ 373.496007][ T38] rt_mutex_schedule+0x77/0xf0 [ 373.496028][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 373.496066][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 373.496092][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 373.496117][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 373.496140][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 373.496159][ T38] ? __lock_acquire+0xab9/0xd20 [ 373.496200][ T38] ? reg_check_chans_work+0x164/0xf30 [ 373.496233][ T38] ? __lock_acquire+0xab9/0xd20 [ 373.496268][ T38] ? reg_check_chans_work+0x164/0xf30 [ 373.496295][ T38] mutex_lock_nested+0x16a/0x1d0 [ 373.496316][ T38] ? do_raw_spin_lock+0x121/0x290 [ 373.496345][ T38] reg_check_chans_work+0x164/0xf30 [ 373.496380][ T38] ? __lock_acquire+0xab9/0xd20 [ 373.496417][ T38] ? __pfx_reg_check_chans_work+0x10/0x10 [ 373.496446][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 373.496481][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.496508][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 373.496534][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 373.496571][ T38] process_scheduled_works+0xade/0x17b0 [ 373.496632][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 373.496680][ T38] worker_thread+0x8a0/0xda0 [ 373.496738][ T38] kthread+0x711/0x8a0 [ 373.496774][ T38] ? __pfx_worker_thread+0x10/0x10 [ 373.496801][ T38] ? __pfx_kthread+0x10/0x10 [ 373.496840][ T38] ? __pfx_kthread+0x10/0x10 [ 373.496874][ T38] ret_from_fork+0x3fc/0x770 [ 373.496906][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 373.496942][ T38] ? __switch_to_asm+0x39/0x70 [ 373.496961][ T38] ? __switch_to_asm+0x33/0x70 [ 373.496981][ T38] ? __pfx_kthread+0x10/0x10 [ 373.497015][ T38] ret_from_fork_asm+0x1a/0x30 [ 373.497055][ T38] [ 373.497109][ T38] [ 373.497109][ T38] Showing all locks held in the system: [ 373.497119][ T38] 4 locks held by kworker/0:0/9: [ 373.497131][ T38] #0: ffff88805bae3538 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.497194][ T38] #1: ffffc900000e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.497270][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.497326][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.497383][ T38] 5 locks held by kworker/u8:0/12: [ 373.497395][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.497451][ T38] #1: ffffc90000117bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.497506][ T38] #2: ffff88805d780898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 373.497569][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.584940][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.585017][ T38] 5 locks held by kworker/u8:1/13: [ 373.585030][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.585088][ T38] #1: ffffc90000127bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.585145][ T38] #2: ffff88805eac0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 373.585202][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.585257][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.585314][ T38] 6 locks held by ktimers/0/16: [ 373.585328][ T38] 2 locks held by rcuc/1/28: [ 373.585339][ T38] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.585395][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.585451][ T38] 2 locks held by ksoftirqd/1/30: [ 373.585464][ T38] 4 locks held by kworker/1:0/31: [ 373.585475][ T38] #0: ffff88805c2eb138 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.585538][ T38] #1: ffffc90000a5fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.585634][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.585687][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.585743][ T38] 1 lock held by khungtaskd/38: [ 373.585755][ T38] #0: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 373.585807][ T38] 5 locks held by kworker/u8:2/43: [ 373.585819][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.585875][ T38] #1: ffffc90000b47bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.585931][ T38] #2: ffff88805ed80898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 373.585985][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.586040][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.586096][ T38] 5 locks held by kworker/u8:3/44: [ 373.586108][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.586164][ T38] #1: ffffc90000b57bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.586220][ T38] #2: ffff88804a8c0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 373.586274][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.586329][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.586385][ T38] 4 locks held by kworker/1:1/45: [ 373.586397][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.586454][ T38] #1: ffffc90000b67bc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.586510][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.586573][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.586646][ T38] 4 locks held by kworker/u9:0/59: [ 373.586658][ T38] #0: ffff88803482c138 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.586713][ T38] #1: ffffc9000125fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.586770][ T38] #2: ffff88805b1b0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 373.586831][ T38] #3: ffff88805b1b00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 373.586895][ T38] 4 locks held by kworker/1:2/990: [ 373.586907][ T38] #0: ffff88805be08938 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.586968][ T38] #1: ffffc900046d7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.587044][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.587100][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.587159][ T38] 5 locks held by kworker/u8:8/1220: [ 373.587171][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.587227][ T38] #1: ffffc90004dd7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.587283][ T38] #2: ffff88804a470898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 373.587337][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.587391][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.587447][ T38] 4 locks held by kworker/0:2/1231: [ 373.587459][ T38] #0: ffff888036a87938 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.587519][ T38] #1: ffffc90004e77bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.587603][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.674588][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.674650][ T38] 5 locks held by kworker/u8:9/1424: [ 373.674663][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.674721][ T38] #1: ffffc90005397bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.674778][ T38] #2: ffff88805d890898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 373.674834][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.674889][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.674945][ T38] 4 locks held by kworker/0:3/1906: [ 373.674958][ T38] 5 locks held by kworker/u8:10/2152: [ 373.674970][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.675027][ T38] #1: ffffc9000620fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.675082][ T38] #2: ffff88805e580898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 373.675137][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.675191][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.675259][ T38] 5 locks held by kworker/u8:12/3563: [ 373.675271][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.675343][ T38] #1: ffffc9000dc57bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.675398][ T38] #2: ffff88805d950898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 373.675452][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.675506][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.675563][ T38] 4 locks held by kworker/u8:14/4525: [ 373.675575][ T38] #0: ffff88814d445138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.675631][ T38] #1: ffffc9000f407bc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.675688][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.675743][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.675799][ T38] 6 locks held by kworker/u9:1/5157: [ 373.675811][ T38] #0: ffff888028ac4138 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.675862][ T38] #1: ffffc9001028fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.675915][ T38] #2: ffff88805b1dce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 373.675977][ T38] #3: ffff88805b1dc0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 373.676032][ T38] #4: ffffffff8ee39838 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 373.676087][ T38] #5: ffff888030cf7358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 373.676150][ T38] 3 locks held by udevd/5208: [ 373.676161][ T38] #0: ffff88801a3ec350 (sk_lock-AF_NETLINK){+.+.}-{0:0}, at: netlink_insert+0xd3/0x1370 [ 373.676214][ T38] #1: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.676269][ T38] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.676333][ T38] 2 locks held by getty/5600: [ 373.676345][ T38] #0: ffff88823bf7a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 373.676404][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 373.676457][ T38] 2 locks held by dhcpcd/5621: [ 373.676468][ T38] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.676524][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.676581][ T38] 6 locks held by syz-executor/5829: [ 373.676593][ T38] #0: ffff88803cf00350 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 373.676644][ T38] #1: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: __ip_queue_xmit+0x63/0x1b00 [ 373.676704][ T38] #2: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: ip_output+0x60/0x3c0 [ 373.676763][ T38] #3: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x11d0 [ 373.676812][ T38] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.676867][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.676924][ T38] 3 locks held by syz-executor/5846: [ 373.676936][ T38] #0: ffff8880559bce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 373.676985][ T38] #1: ffff8880559bc0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 373.677040][ T38] #2: ffffffff8ee39838 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 373.677099][ T38] 5 locks held by kworker/u9:2/5848: [ 373.677111][ T38] #0: ffff888028ffa138 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.677167][ T38] #1: ffffc90004d17bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.677225][ T38] #2: ffff88805b1a0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 373.677284][ T38] #3: ffff88805b1a00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 373.677345][ T38] #4: ffffffff8ee39838 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 373.677401][ T38] 5 locks held by kworker/u9:3/5854: [ 373.677414][ T38] #0: ffff88802f6e7138 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.677470][ T38] #1: ffffc90004e17bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.677527][ T38] #2: ffff88805b1a4e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 373.677588][ T38] #3: ffff88805b1a40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 373.695093][ T38] #4: ffffffff8ee39838 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 373.695159][ T38] 4 locks held by kworker/R-wg-cr/5883: [ 373.695173][ T38] #0: ffff88802f3f6138 ((wq_completion)wg-crypt-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.695237][ T38] #1: ffffc90004fa7ba0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.695314][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.695370][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.695430][ T38] 2 locks held by napi/wg2-0/5909: [ 373.695442][ T38] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.695506][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.695562][ T38] 4 locks held by kworker/0:4/5911: [ 373.695575][ T38] #0: ffff8880294ea138 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.695637][ T38] #1: ffffc90005177bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.695711][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.695765][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.695822][ T38] 4 locks held by kworker/1:3/5912: [ 373.695835][ T38] #0: ffff88805be68d38 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.695896][ T38] #1: ffffc900051a7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.695971][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.696026][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.696082][ T38] 4 locks held by kworker/1:4/5913: [ 373.696094][ T38] #0: ffff88805b77bd38 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.696155][ T38] #1: ffffc900051b7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.696230][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.696285][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.696342][ T38] 2 locks held by kworker/0:5/5926: [ 373.696355][ T38] 4 locks held by kworker/0:6/5933: [ 373.696367][ T38] #0: ffff88805bdf0938 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.696429][ T38] #1: ffffc900052b7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.696510][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.696565][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.696621][ T38] 4 locks held by kworker/1:5/5936: [ 373.696633][ T38] #0: ffff88805bca7938 ((wq_completion)wg-kex-wg1#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.696694][ T38] #1: ffffc900052c7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.696769][ T38] #2: ffff88803db315f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 373.696823][ T38] #3: ffff88804985c388 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 373.696875][ T38] 2 locks held by kworker/0:7/6035: [ 373.696887][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.696943][ T38] #1: ffffc90005d57bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.696999][ T38] 4 locks held by kworker/1:7/6756: [ 373.697012][ T38] #0: ffff88805be5f138 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.697072][ T38] #1: ffffc9000d7a7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.697147][ T38] #2: ffff888030b815f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x115/0x970 [ 373.697199][ T38] #3: ffff88804985e350 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x126/0x970 [ 373.697252][ T38] 4 locks held by kworker/u8:15/6758: [ 373.697264][ T38] #0: ffff88805bebb938 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.697324][ T38] #1: ffffc9000e6a7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.697382][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.697437][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.697501][ T38] 3 locks held by kworker/u8:16/6759: [ 373.697514][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.697570][ T38] #1: ffffc9000d7d7bc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.786329][ T38] #2: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 373.786402][ T38] 5 locks held by kworker/u8:18/6762: [ 373.786415][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.786476][ T38] #1: ffffc9000e6d7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.786546][ T38] #2: ffff88804ab10898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 373.786602][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.786658][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.786716][ T38] 5 locks held by kworker/u8:20/6764: [ 373.786728][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.786784][ T38] #1: ffffc90005d27bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.786835][ T38] #2: ffff88805e790898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 373.786892][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.786944][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.786997][ T38] 6 locks held by kworker/u8:21/6765: [ 373.787009][ T38] #0: ffff88803639b938 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.787070][ T38] #1: ffffc9000e6e7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.787127][ T38] #2: ffff88803db315f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 373.787193][ T38] #3: ffff88804985b8f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 373.787257][ T38] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.787311][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.787362][ T38] 4 locks held by kworker/u8:23/6767: [ 373.787374][ T38] #0: ffff88803639e138 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.787435][ T38] #1: ffffc9000e697bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.787527][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.787583][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.874742][ T38] 6 locks held by kworker/u8:25/6769: [ 373.874758][ T38] #0: ffff888035d12938 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.874818][ T38] #1: ffffc90004e47bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.874875][ T38] #2: ffff88803d1f55f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 373.874943][ T38] #3: ffff88804985a3c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 373.875008][ T38] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.875071][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.875128][ T38] 4 locks held by kworker/u8:27/6771: [ 373.875141][ T38] #0: ffff88805b636138 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.875198][ T38] #1: ffffc9000e727bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.875261][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.875316][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.875372][ T38] 3 locks held by kworker/u8:28/6772: [ 373.875384][ T38] #0: ffff88802fde9138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.875440][ T38] #1: ffffc9000e737bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.875504][ T38] #2: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 373.875556][ T38] 4 locks held by kworker/u8:31/6775: [ 373.875568][ T38] #0: ffff888035d12938 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.875621][ T38] #1: ffffc9000dc27bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.875679][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.875734][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.875790][ T38] 4 locks held by kworker/0:9/6776: [ 373.875802][ T38] #0: ffff88805be68d38 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.875864][ T38] #1: ffffc90005107bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.875939][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.875994][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.876050][ T38] 4 locks held by kworker/1:8/6777: [ 373.876062][ T38] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.876119][ T38] #1: ffffc9000e767bc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.876176][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.876232][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.876287][ T38] 4 locks held by kworker/1:9/6778: [ 373.876299][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.876356][ T38] #1: ffffc9000d7e7bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.876411][ T38] #2: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30 [ 373.876477][ T38] #3: ffff88805ed80898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x164/0xf30 [ 373.876535][ T38] 7 locks held by kworker/u8:32/6782: [ 373.876548][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.876604][ T38] #1: ffffc9000e777bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.876662][ T38] #2: ffff88804c247300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 373.876722][ T38] #3: ffff88804c2b4120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 373.876781][ T38] #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 373.876830][ T38] #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.876886][ T38] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.876941][ T38] 4 locks held by kworker/1:11/6784: [ 373.876953][ T38] #0: ffff8880334de938 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.877010][ T38] #1: ffffc9000e797bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.877084][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.877140][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.877195][ T38] 4 locks held by kworker/1:13/6786: [ 373.877207][ T38] #0: ffff88805be6a938 ((wq_completion)wg-crypt-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.877269][ T38] #1: ffffc9000e7b7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.877344][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.877399][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.877464][ T38] 4 locks held by kworker/1:15/6791: [ 373.877476][ T38] #0: ffff8880334ead38 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.877537][ T38] #1: ffffc9000e7e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.947264][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.947340][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.947400][ T38] 4 locks held by kworker/0:10/6793: [ 373.947413][ T38] #0: ffff88802f3f5d38 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.947485][ T38] #1: ffffc9000e7f7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.947562][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 374.034942][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 374.035018][ T38] 4 locks held by kworker/0:11/6794: [ 374.035032][ T38] #0: ffff88805c2eb138 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.035096][ T38] #1: ffffc9000627fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.035170][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 374.035238][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 374.035296][ T38] 4 locks held by kworker/1:16/6798: [ 374.035308][ T38] #0: ffff888036a87938 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.035370][ T38] #1: ffffc9000e827bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.035444][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 374.035499][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 374.035555][ T38] 4 locks held by kworker/0:15/6800: [ 374.035567][ T38] #0: ffff88805be08938 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.035628][ T38] #1: ffffc9000f057bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.035703][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 374.035758][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 374.035812][ T38] 4 locks held by kworker/0:16/6801: [ 374.035825][ T38] #0: ffff88805bca7938 ((wq_completion)wg-kex-wg1#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.035886][ T38] #1: ffffc9000f067bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.035961][ T38] #2: ffff88803db315f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 374.036014][ T38] #3: ffff88804985b8f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 374.036065][ T38] 2 locks held by kworker/0:19/6804: [ 374.036078][ T38] 3 locks held by kworker/0:22/6807: [ 374.036091][ T38] #0: ffff88805be5f138 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.036151][ T38] #1: ffffc9000f0c7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.036229][ T38] #2: ffff88804985e350 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 374.036282][ T38] 4 locks held by kworker/0:24/6810: [ 374.036294][ T38] #0: ffff88802f3f6138 ((wq_completion)wg-crypt-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.036354][ T38] #1: ffffc9000f0f7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.036429][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 374.036484][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 374.036537][ T38] 1 lock held by dhcpcd/6811: [ 374.036549][ T38] #0: ffff8880302360f8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 374.036604][ T38] 4 locks held by kworker/u9:4/6812: [ 374.036616][ T38] #0: ffff888038509138 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.036675][ T38] #1: ffffc9000f107bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.036726][ T38] #2: ffff88806bef80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 374.036777][ T38] #3: ffffffff8ee39838 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 374.036827][ T38] 4 locks held by kworker/u9:5/6813: [ 374.036839][ T38] #0: ffff888053a41938 ((wq_completion)hci7#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.036899][ T38] #1: ffffc9000f117bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.036954][ T38] #2: ffff88807d5580a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 374.037003][ T38] #3: ffffffff8ee39838 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 374.037053][ T38] 1 lock held by syz-executor/6815: [ 374.037066][ T38] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 374.037128][ T38] 4 locks held by kworker/u9:6/6816: [ 374.037140][ T38] #0: ffff888026d3f138 ((wq_completion)hci6#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.037201][ T38] #1: ffffc9000f147bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.037264][ T38] #2: ffff8880661e80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 374.037314][ T38] #3: ffffffff8ee39838 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 374.037364][ T38] 1 lock held by dhcpcd/6818: [ 374.037376][ T38] #0: ffff888030235a38 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 374.037431][ T38] 4 locks held by kworker/1:17/6820: [ 374.037444][ T38] #0: ffff88805b79e938 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.037503][ T38] #1: ffffc9000f187bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.037578][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 374.234882][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 374.234944][ T38] 4 locks held by kworker/0:25/6821: [ 374.234957][ T38] #0: ffff88805b79e938 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.235020][ T38] #1: ffffc9000dbe7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.235095][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 374.235151][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 374.235215][ T38] 6 locks held by kworker/u8:34/6822: [ 374.235228][ T38] #0: ffff88803639b938 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.235289][ T38] #1: ffffc90004bc7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.235346][ T38] #2: ffff88803db315f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 374.235413][ T38] #3: ffff88804985c388 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 374.235477][ T38] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 374.235532][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 374.235589][ T38] 1 lock held by dhcpcd/6824: [ 374.235601][ T38] #0: ffff888049396e78 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 374.235658][ T38] 4 locks held by kworker/u9:7/6825: [ 374.235670][ T38] #0: ffff88814d22d138 ((wq_completion)krxrpcd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.235725][ T38] #1: ffffc9000dba7bc0 ((work_completion)(&rxnet->peer_keepalive_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.235783][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 374.235838][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 374.235895][ T38] 1 lock held by syz-executor/6826: [ 374.235907][ T38] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 374.235970][ T38] 1 lock held by dhcpcd/6830: [ 374.235983][ T38] #0: ffff8880491d0938 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 374.236038][ T38] 4 locks held by kworker/0:26/6831: [ 374.236050][ T38] #0: ffff88805be6a538 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.236111][ T38] #1: ffffc9000db27bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.236186][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 374.236249][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 374.236303][ T38] 4 locks held by kworker/0:27/6832: [ 374.236316][ T38] #0: ffff8880334ead38 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.236377][ T38] #1: ffffc9000db07bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.236451][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 374.236507][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 374.236565][ T38] 4 locks held by kworker/1:18/6837: [ 374.236577][ T38] #0: ffff88805be6a938 ((wq_completion)wg-crypt-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.236638][ T38] #1: ffffc9000db77bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.236713][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 374.236768][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 374.236824][ T38] 1 lock held by dhcpcd/6838: [ 374.236836][ T38] #0: ffff888035e54350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 374.236888][ T38] 4 locks held by kworker/1:19/6842: [ 374.236900][ T38] #0: ffff88805bae3538 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.236961][ T38] #1: ffffc9000d7b7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.237035][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 374.237090][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 374.237146][ T38] 4 locks held by kworker/1:20/6843: [ 374.237158][ T38] #0: ffff88802f3f5d38 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.237225][ T38] #1: ffffc9000d767bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.237299][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 374.237354][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 374.237410][ T38] 4 locks held by kworker/1:21/6844: [ 374.237422][ T38] #0: ffff8880334eb138 ((wq_completion)wg-crypt-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.237484][ T38] #1: ffffc9000d757bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.237559][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 374.237660][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 374.237719][ T38] 6 locks held by kworker/u8:39/6846: [ 374.237732][ T38] #0: ffff88805c0bd138 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.237798][ T38] #1: ffffc9000d6a7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.237854][ T38] #2: ffff88805c1c55f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 374.237920][ T38] #3: ffff888037994388 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 374.237985][ T38] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 374.238040][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 374.238096][ T38] 5 locks held by syz-executor/6847: [ 374.238107][ T38] #0: ffff8880491d2af8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 374.238162][ T38] #1: ffff888027e5b4e8 (&u->lock){+.+.}-{3:3}, at: unix_release_sock+0x411/0xd60 [ 374.238220][ T38] #2: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 374.238271][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 374.238326][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 374.238382][ T38] 3 locks held by syz-executor/6852: [ 374.238395][ T38] #0: ffff888027d75350 (sk_lock-AF_BLUETOOTH-BTPROTO_HCI){+.+.}-{0:0}, at: hci_sock_ioctl+0x247/0x910 [ 374.238453][ T38] #1: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 374.238509][ T38] #2: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 374.238566][ T38] 3 locks held by syz-executor/6860: [ 374.238578][ T38] 3 locks held by syz-executor/6861: [ 374.238590][ T38] #0: ffff888019f30350 (sk_lock-AF_BLUETOOTH-BTPROTO_HCI){+.+.}-{0:0}, at: hci_sock_ioctl+0x247/0x910 [ 374.238648][ T38] #1: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 374.238702][ T38] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 374.238760][ T38] 1 lock held by dhcpcd/6866: [ 374.238771][ T38] #0: ffff88801c786350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 374.238826][ T38] [ 374.238831][ T38] ============================================= [ 374.238831][ T38] [ 374.238859][ T38] NMI backtrace for cpu 0 [ 374.238888][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 374.238911][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 374.238924][ T38] Call Trace: [ 374.238932][ T38] [ 374.238942][ T38] dump_stack_lvl+0x189/0x250 [ 374.238980][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.239012][ T38] ? __pfx__printk+0x10/0x10 [ 374.239049][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 374.239077][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 374.239102][ T38] ? __pfx__printk+0x10/0x10 [ 374.239131][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 374.239160][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 374.239186][ T38] watchdog+0xf93/0xfe0 [ 374.239227][ T38] ? watchdog+0x1de/0xfe0 [ 374.239261][ T38] kthread+0x711/0x8a0 [ 374.239299][ T38] ? __pfx_watchdog+0x10/0x10 [ 374.239325][ T38] ? __pfx_kthread+0x10/0x10 [ 374.239362][ T38] ? __pfx_kthread+0x10/0x10 [ 374.239395][ T38] ret_from_fork+0x3fc/0x770 [ 374.239427][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 374.239462][ T38] ? __switch_to_asm+0x39/0x70 [ 374.239481][ T38] ? __switch_to_asm+0x33/0x70 [ 374.239500][ T38] ? __pfx_kthread+0x10/0x10 [ 374.239534][ T38] ret_from_fork_asm+0x1a/0x30 [ 374.239572][ T38] [ 374.239580][ T38] Sending NMI from CPU 0 to CPUs 1: [ 374.239607][ C1] NMI backtrace for cpu 1 [ 374.239622][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 374.239642][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 374.239659][ C1] RIP: 0010:__sanitizer_cov_trace_cmp8+0x0/0xa0 [ 374.239684][ C1] Code: 00 00 48 89 7c 0a 10 48 89 74 0a 18 48 89 44 0a 20 e9 04 a1 3b 09 cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 e0 f5 91 65 44 8b 05 27 [ 374.239699][ C1] RSP: 0018:ffffc90000a3e4f0 EFLAGS: 00000246 [ 374.239714][ C1] RAX: ffffffff82243983 RBX: 000000000008cfd6 RCX: ffff88801caa1dc0 [ 374.239727][ C1] RDX: 0000000000000100 RSI: 0000000000001000 RDI: 0000000000000000 [ 374.239738][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000100 [ 374.239749][ C1] R10: dffffc0000000000 R11: ffffed100baead40 R12: 000000000008cfd6 [ 374.239762][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000001000 [ 374.239774][ C1] FS: 0000000000000000(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 374.239789][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 374.239801][ C1] CR2: 0000556dc66bb7a0 CR3: 0000000029e66000 CR4: 00000000003526f0 [ 374.239817][ C1] Call Trace: [ 374.239823][ C1] [ 374.239829][ C1] page_ext_lookup+0x4d/0x180 [ 374.239854][ C1] ? __page_table_check_zero+0xba/0x530 [ 374.239877][ C1] __page_table_check_zero+0x18f/0x530 [ 374.239904][ C1] post_alloc_hook+0x253/0x2a0 [ 374.239932][ C1] get_page_from_freelist+0x2119/0x21b0 [ 374.239962][ C1] ? do_raw_spin_lock+0x121/0x290 [ 374.239994][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 374.240014][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 374.240036][ C1] ? policy_nodemask+0x28b/0x720 [ 374.240063][ C1] alloc_pages_mpol+0xd1/0x380 [ 374.240089][ C1] allocate_slab+0x8a/0x370 [ 374.240108][ C1] ___slab_alloc+0x8d1/0xdd0 [ 374.240138][ C1] ? dst_alloc+0x105/0x170 [ 374.240167][ C1] ? dst_alloc+0x105/0x170 [ 374.240191][ C1] kmem_cache_alloc_noprof+0xe6/0x310 [ 374.240220][ C1] dst_alloc+0x105/0x170 [ 374.240248][ C1] ip_route_output_key_hash_rcu+0x14e1/0x23d0 [ 374.240281][ C1] ? ip_route_output_key_hash+0xde/0x2e0 [ 374.240309][ C1] ip_route_output_key_hash+0x1b9/0x2e0 [ 374.240336][ C1] ? __lock_acquire+0xab9/0xd20 [ 374.240360][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 374.240391][ C1] ? ip_route_me_harder+0x4ad/0x1030 [ 374.240413][ C1] ip_route_output_flow+0x2a/0x150 [ 374.240436][ C1] ? ip_route_me_harder+0x6c0/0x1030 [ 374.240454][ C1] ip_route_me_harder+0x6d2/0x1030 [ 374.240484][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 374.240517][ C1] synproxy_send_tcp+0x359/0x6c0 [ 374.240545][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 374.240576][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 374.240599][ C1] ? nft_tproxy_eval+0x6c8/0x1c00 [ 374.240624][ C1] ? synproxy_pernet+0x45/0x270 [ 374.240654][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 374.240684][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 374.240713][ C1] ? nf_ip_checksum+0x13c/0x510 [ 374.240742][ C1] nft_synproxy_do_eval+0x345/0x570 [ 374.240772][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 374.240800][ C1] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 374.240835][ C1] nft_do_chain+0x409/0x1920 [ 374.240869][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 374.240898][ C1] ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10 [ 374.240926][ C1] ? ip_vs_out_hook+0x9b5/0xef0 [ 374.240946][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 374.240967][ C1] nft_do_chain_inet+0x25d/0x340 [ 374.240994][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 374.241027][ C1] ? NF_HOOK+0x9a/0x3a0 [ 374.241047][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 374.241074][ C1] nf_hook_slow+0xc2/0x220 [ 374.241098][ C1] NF_HOOK+0x206/0x3a0 [ 374.241119][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 374.241141][ C1] ? NF_HOOK+0x9a/0x3a0 [ 374.241160][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 374.241200][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 374.241224][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 374.241247][ C1] ? skb_dst+0x4f/0xd0 [ 374.241267][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 374.241289][ C1] NF_HOOK+0x30c/0x3a0 [ 374.241310][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 374.241331][ C1] ? NF_HOOK+0x9a/0x3a0 [ 374.241350][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 374.241371][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 374.241398][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 374.241417][ C1] __netif_receive_skb+0x143/0x380 [ 374.241435][ C1] ? rt_spin_unlock+0x65/0x80 [ 374.241455][ C1] ? process_backlog+0x27b/0x900 [ 374.241481][ C1] process_backlog+0x31e/0x900 [ 374.241507][ C1] __napi_poll+0xb3/0x540 [ 374.241528][ C1] net_rx_action+0x707/0xe00 [ 374.241547][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 374.241579][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 374.241618][ C1] handle_softirqs+0x22c/0x710 [ 374.241646][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 374.241674][ C1] run_ktimerd+0xcf/0x190 [ 374.241698][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 374.241721][ C1] ? schedule+0x91/0x360 [ 374.241745][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 374.241766][ C1] smpboot_thread_fn+0x542/0xa60 [ 374.241789][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 374.241815][ C1] kthread+0x711/0x8a0 [ 374.241843][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 374.241865][ C1] ? __pfx_kthread+0x10/0x10 [ 374.241894][ C1] ? __pfx_kthread+0x10/0x10 [ 374.241920][ C1] ret_from_fork+0x3fc/0x770 [ 374.241944][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 374.241970][ C1] ? __switch_to_asm+0x39/0x70 [ 374.241986][ C1] ? __switch_to_asm+0x33/0x70 [ 374.242002][ C1] ? __pfx_kthread+0x10/0x10 [ 374.242028][ C1] ret_from_fork_asm+0x1a/0x30 [ 374.242054][ C1] [ 374.242612][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 374.242628][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 374.242652][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 374.242664][ T38] Call Trace: [ 374.242673][ T38] [ 374.242682][ T38] dump_stack_lvl+0x99/0x250 [ 374.242714][ T38] ? __asan_memcpy+0x40/0x70 [ 374.242737][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.242770][ T38] ? __pfx__printk+0x10/0x10 [ 374.242814][ T38] vpanic+0x281/0x750 [ 374.242849][ T38] ? __pfx_vpanic+0x10/0x10 [ 374.242878][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 374.242900][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.242939][ T38] panic+0xb9/0xc0 [ 374.242970][ T38] ? __pfx_panic+0x10/0x10 [ 374.243005][ T38] ? irq_work_queue+0xc3/0x140 [ 374.243037][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 374.243063][ T38] watchdog+0xfd2/0xfe0 [ 374.243096][ T38] ? watchdog+0x1de/0xfe0 [ 374.243130][ T38] kthread+0x711/0x8a0 [ 374.243167][ T38] ? __pfx_watchdog+0x10/0x10 [ 374.243193][ T38] ? __pfx_kthread+0x10/0x10 [ 374.243238][ T38] ? __pfx_kthread+0x10/0x10 [ 374.243272][ T38] ret_from_fork+0x3fc/0x770 [ 374.243303][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 374.243337][ T38] ? __switch_to_asm+0x39/0x70 [ 374.243357][ T38] ? __switch_to_asm+0x33/0x70 [ 374.243376][ T38] ? __pfx_kthread+0x10/0x10 [ 374.243410][ T38] ret_from_fork_asm+0x1a/0x30 [ 374.243449][ T38] [ 374.243757][ T38] Kernel Offset: disabled