last executing test programs: 2m35.585128494s ago: executing program 3 (id=362): socket$inet(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) 2m35.503202566s ago: executing program 4 (id=363): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) chmod(&(0x7f0000000000)='./file0\x00', 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000200)='./file0\x00', 0x90) fsopen(&(0x7f0000000000)='bpf\x00', 0x0) 2m33.521787354s ago: executing program 4 (id=366): socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa9}}, &(0x7f0000000480)='GPL\x00'}, 0x90) keyctl$dh_compute(0x17, &(0x7f0000000700), &(0x7f0000000780), 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={'blake2s-128-generic\x00'}, &(0x7f0000000800)="16488a99a96b2b2862ca51fd34fbe6bb6cc4828fa5258d60c7c0b7ed804474b8237f458e0547090878c78ee564f9019c8cc77517486bffae55160b769cd9b44d061db1177f05ae87948702105448de8e102c34bfa82c4a81126a13dff8f69c5c01d9e59e499f410de14a1bcb18ee20796bbdf082da634deead0ea8c67eed3dfff019a4d215cee97358493d241ee782c7c201a48b8091362c8d0133000fac8085397c9b907565836d465e001298ca4515ee01fae816", 0xb5}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x37) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x44005) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x1, 0x0, 0xfc}) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000002c0)={'TPROXY\x00'}, &(0x7f0000000300)=0x1e) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x80800) ioctl$CEC_DQEVENT(r4, 0xc0506107, &(0x7f0000000080)={0x0, 0x0, 0x0, @lost_msgs}) socket$tipc(0x1e, 0x5, 0x0) 2m33.115962893s ago: executing program 1 (id=369): getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xf, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x8000) mkdir(0x0, 0xe8) openat$nvram(0xffffffffffffff9c, 0x0, 0x22000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) keyctl$clear(0x7, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)='-3', 0x2}]) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0xfffffffe, 0x3, 0x4}, 0x1000000, 0x200000, 'id1\x00', 'timer1\x00', 0x0, 0x81, 0x1, 0x4, 0x10000000}) syz_open_dev$dri(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x103bff, 0x111) 2m33.103995204s ago: executing program 3 (id=370): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000580)={r1, 0x1, 0x6, @local}, 0x10) 2m32.231335367s ago: executing program 3 (id=372): rseq(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) pread64(r0, 0x0, 0x0, 0xce2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) futex(0x0, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc), 0x5, 0x4, 0x0, 0x0, 0x4ffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) userfaultfd(0x801) openat$tun(0xffffffffffffff9c, 0x0, 0x4e681, 0x0) r3 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r5, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r5, 0xdf}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100)=0x5, r5, 0x0, 0x0, 0x1}}, 0x20) socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000004, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0xffffffffffffffff, 0x9, 0x1000000000003, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x2f6f, &(0x7f0000000880)={0x0, 0x0, 0x100, 0x0, 0x104a}, &(0x7f0000000180), 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r6, 0x22, 0x0, 0x1) 2m32.155333234s ago: executing program 1 (id=373): socket$packet(0x11, 0x2, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x9}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2m32.007400974s ago: executing program 0 (id=375): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) 2m31.56018353s ago: executing program 0 (id=376): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) chmod(&(0x7f0000000000)='./file0\x00', 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000200)='./file0\x00', 0x90) fsopen(&(0x7f0000000000)='bpf\x00', 0x0) 2m31.236723546s ago: executing program 2 (id=377): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r1, r2, r3, 0x0, 0x2006, 0x40, 0x40000, 0x0, 0x3ffc, 0xfff, 0x2, 0x1}) 2m31.206228439s ago: executing program 1 (id=378): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x34, r0, 0x1, 0x0, 0x8000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5}]}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x20040080) 2m31.083904216s ago: executing program 3 (id=379): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0xa, 0x4e24, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000140)=']', 0x1}], 0x1}, 0x200080c3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x7f, @empty, 0x8}}, 0xe, 0xe93e}, 0x90) 2m30.945972903s ago: executing program 2 (id=380): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r0, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)='%', 0xfffffe9f}], 0x1}}], 0x1, 0x44810) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) 2m30.936326652s ago: executing program 1 (id=381): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) ioctl$HIDIOCGRDESC(r1, 0x90044802, 0x0) 2m29.682756073s ago: executing program 4 (id=382): r0 = syz_clone(0x20202100, 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r1, r1, 0x0) r2 = syz_pidfd_open(r0, 0x0) pidfd_getfd(r2, r2, 0x0) 2m29.542228694s ago: executing program 0 (id=383): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'none\x00', 0x4, 0x3ef4, 0x68}, 0x2c) 2m29.463463423s ago: executing program 2 (id=384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x7}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008054}, 0x4004000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) 2m29.198352997s ago: executing program 2 (id=385): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xb}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0xb0, 0x2, 0x0, 0x1, {0x9, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x48}, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 2m29.073189728s ago: executing program 4 (id=386): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff000008000000000000000100008406000400"], 0x0, 0x42}, 0x28) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x1000004, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x20000}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_LINK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2m29.072329602s ago: executing program 0 (id=387): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0xd, 0x2, 0xfe, 0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 2m28.84476089s ago: executing program 0 (id=388): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) 2m28.832865906s ago: executing program 3 (id=389): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000780)={0x0}, &(0x7f00000007c0)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000840)={{0x0, 0x2, 0xfffffffe, 0x3, 'syz1\x00', 0x2}, 0x3, 0x3, 0x55, r3, 0x1, 0x65a2, 'syz0\x00', &(0x7f0000000800)=['%\x00'], 0x2}) 2m28.767525964s ago: executing program 2 (id=390): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0xb, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0xc7, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x17, 0x10, [@private=0xa010100, @remote, @remote, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 2m28.661311802s ago: executing program 4 (id=391): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r0, r2, 0x25, 0x2, @val=@netkit={@void, @value=r0}}, 0x1c) syz_emit_ethernet(0x1e, &(0x7f0000000580)=ANY=[], 0x0) 2m28.515324121s ago: executing program 3 (id=392): socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa9}}, &(0x7f0000000480)='GPL\x00'}, 0x90) keyctl$dh_compute(0x17, &(0x7f0000000700), &(0x7f0000000780), 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={'blake2s-128-generic\x00'}, &(0x7f0000000800)="16488a99a96b2b2862ca51fd34fbe6bb6cc4828fa5258d60c7c0b7ed804474b8237f458e0547090878c78ee564f9019c8cc77517486bffae55160b769cd9b44d061db1177f05ae87948702105448de8e102c34bfa82c4a81126a13dff8f69c5c01d9e59e499f410de14a1bcb18ee20796bbdf082da634deead0ea8c67eed3dfff019a4d215cee97358493d241ee782c7c201a48b8091362c8d0133000fac8085397c9b907565836d465e001298ca4515ee01fae816", 0xb5}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x37) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x44005) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x1, 0x0, 0xfc}) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000002c0)={'TPROXY\x00'}, &(0x7f0000000300)=0x1e) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x80800) ioctl$CEC_DQEVENT(r4, 0xc0506107, &(0x7f0000000080)={0x0, 0x0, 0x0, @lost_msgs}) socket$tipc(0x1e, 0x5, 0x0) 2m28.255693425s ago: executing program 4 (id=393): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000180)=""/171, 0xab, 0x122, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="1d", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000a40)="d1", 0x1}], 0x1}}], 0x2, 0x4000001) 2m28.073869829s ago: executing program 1 (id=394): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) chmod(&(0x7f0000000000)='./file0\x00', 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000200)='./file0\x00', 0x90) fsopen(&(0x7f0000000000)='bpf\x00', 0x0) 2m23.641914049s ago: executing program 1 (id=395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getpgid(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r3) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) pipe(0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r5 = accept4(r4, 0x0, 0x0, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216", 0xb}], 0x1}], 0x1, 0x40800) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff040, 0x1200000000000000) 2m14.09049443s ago: executing program 2 (id=396): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x35, 0x1000, 0x62}, 0x2c) 2m13.522913801s ago: executing program 0 (id=397): unshare(0x2a020400) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m8.373574939s ago: executing program 32 (id=392): socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa9}}, &(0x7f0000000480)='GPL\x00'}, 0x90) keyctl$dh_compute(0x17, &(0x7f0000000700), &(0x7f0000000780), 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={'blake2s-128-generic\x00'}, &(0x7f0000000800)="16488a99a96b2b2862ca51fd34fbe6bb6cc4828fa5258d60c7c0b7ed804474b8237f458e0547090878c78ee564f9019c8cc77517486bffae55160b769cd9b44d061db1177f05ae87948702105448de8e102c34bfa82c4a81126a13dff8f69c5c01d9e59e499f410de14a1bcb18ee20796bbdf082da634deead0ea8c67eed3dfff019a4d215cee97358493d241ee782c7c201a48b8091362c8d0133000fac8085397c9b907565836d465e001298ca4515ee01fae816", 0xb5}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x37) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x44005) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x1, 0x0, 0xfc}) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000002c0)={'TPROXY\x00'}, &(0x7f0000000300)=0x1e) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x80800) ioctl$CEC_DQEVENT(r4, 0xc0506107, &(0x7f0000000080)={0x0, 0x0, 0x0, @lost_msgs}) socket$tipc(0x1e, 0x5, 0x0) 1m45.620691707s ago: executing program 33 (id=395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getpgid(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r3) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) pipe(0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r5 = accept4(r4, 0x0, 0x0, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216", 0xb}], 0x1}], 0x1, 0x40800) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff040, 0x1200000000000000) 47.602076703s ago: executing program 34 (id=393): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000180)=""/171, 0xab, 0x122, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="1d", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000a40)="d1", 0x1}], 0x1}}], 0x2, 0x4000001) 0s ago: executing program 35 (id=397): unshare(0x2a020400) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.60' (ED25519) to the list of known hosts. [ 92.449337][ T31] cfg80211: failed to load regulatory.db [ 93.981141][ T5825] cgroup: Unknown subsys name 'net' [ 94.211011][ T5825] cgroup: Unknown subsys name 'cpuset' [ 94.325723][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 96.444310][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 99.472870][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.474619][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.474730][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.481945][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.482809][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.483276][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.488905][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.491994][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.492436][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.495838][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.496406][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.497003][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.498377][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.499668][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.504026][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.638012][ T5157] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.640975][ T5157] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.642687][ T5157] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.664234][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 99.677199][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 99.678258][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 99.683558][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.684401][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.705166][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.715482][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.481505][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 100.681332][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 101.271775][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 101.280852][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 101.293515][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.294791][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.295614][ T5837] bridge_slave_0: entered allmulticast mode [ 101.299238][ T5837] bridge_slave_0: entered promiscuous mode [ 101.308136][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 101.364567][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.364687][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.364822][ T5837] bridge_slave_1: entered allmulticast mode [ 101.368843][ T5837] bridge_slave_1: entered promiscuous mode [ 101.567075][ T5840] Bluetooth: hci2: command tx timeout [ 101.567309][ T5844] Bluetooth: hci1: command tx timeout [ 101.725678][ T5840] Bluetooth: hci0: command tx timeout [ 101.725861][ T5844] Bluetooth: hci4: command tx timeout [ 101.805119][ T5844] Bluetooth: hci3: command tx timeout [ 102.076656][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.076955][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.077146][ T5838] bridge_slave_0: entered allmulticast mode [ 102.080087][ T5838] bridge_slave_0: entered promiscuous mode [ 102.116555][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.141241][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.141391][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.141575][ T5838] bridge_slave_1: entered allmulticast mode [ 102.143516][ T5838] bridge_slave_1: entered promiscuous mode [ 102.192237][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.789551][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.030274][ T5837] team0: Port device team_slave_0 added [ 103.098754][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.099020][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.099212][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.099347][ T5836] bridge_slave_0: entered allmulticast mode [ 103.101453][ T5836] bridge_slave_0: entered promiscuous mode [ 103.103636][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.103816][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.103995][ T5848] bridge_slave_0: entered allmulticast mode [ 103.107111][ T5848] bridge_slave_0: entered promiscuous mode [ 103.127613][ T5837] team0: Port device team_slave_1 added [ 103.132790][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.133156][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.133389][ T5850] bridge_slave_0: entered allmulticast mode [ 103.136896][ T5850] bridge_slave_0: entered promiscuous mode [ 103.211884][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.211981][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.212131][ T5836] bridge_slave_1: entered allmulticast mode [ 103.214032][ T5836] bridge_slave_1: entered promiscuous mode [ 103.232560][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.232716][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.233310][ T5848] bridge_slave_1: entered allmulticast mode [ 103.248295][ T5848] bridge_slave_1: entered promiscuous mode [ 103.316042][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.316162][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.316320][ T5850] bridge_slave_1: entered allmulticast mode [ 103.318300][ T5850] bridge_slave_1: entered promiscuous mode [ 103.645131][ T5844] Bluetooth: hci1: command tx timeout [ 103.645163][ T5844] Bluetooth: hci2: command tx timeout [ 103.746357][ T5838] team0: Port device team_slave_0 added [ 103.805231][ T5840] Bluetooth: hci4: command tx timeout [ 103.805267][ T5840] Bluetooth: hci0: command tx timeout [ 103.885148][ T5844] Bluetooth: hci3: command tx timeout [ 103.908805][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.908823][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.908851][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.040542][ T5838] team0: Port device team_slave_1 added [ 104.046352][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.052878][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.053868][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.053882][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.053915][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.059611][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.170503][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.324604][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.335331][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.597342][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.597360][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.597388][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.838584][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.838602][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.838630][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.842141][ T5836] team0: Port device team_slave_0 added [ 104.938958][ T5848] team0: Port device team_slave_0 added [ 104.941911][ T5850] team0: Port device team_slave_0 added [ 104.961405][ T5836] team0: Port device team_slave_1 added [ 105.049916][ T5848] team0: Port device team_slave_1 added [ 105.052539][ T5850] team0: Port device team_slave_1 added [ 105.143839][ T5837] hsr_slave_0: entered promiscuous mode [ 105.151262][ T5837] hsr_slave_1: entered promiscuous mode [ 105.725346][ T5844] Bluetooth: hci2: command tx timeout [ 105.725355][ T5840] Bluetooth: hci1: command tx timeout [ 105.847517][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.847535][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.847582][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.850036][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.850047][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.850066][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.851566][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.851580][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.851606][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.885014][ T5840] Bluetooth: hci0: command tx timeout [ 105.885048][ T5840] Bluetooth: hci4: command tx timeout [ 105.965460][ T5844] Bluetooth: hci3: command tx timeout [ 106.035669][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.035687][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.035716][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.158152][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.158170][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.158199][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.159644][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.159657][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.159685][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.171532][ T5838] hsr_slave_0: entered promiscuous mode [ 106.173077][ T5838] hsr_slave_1: entered promiscuous mode [ 106.174375][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 106.174514][ T5838] Cannot create hsr debugfs directory [ 106.921518][ T5836] hsr_slave_0: entered promiscuous mode [ 106.922472][ T5836] hsr_slave_1: entered promiscuous mode [ 106.923125][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 106.923151][ T5836] Cannot create hsr debugfs directory [ 107.016630][ T5850] hsr_slave_0: entered promiscuous mode [ 107.018155][ T5850] hsr_slave_1: entered promiscuous mode [ 107.019185][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 107.019210][ T5850] Cannot create hsr debugfs directory [ 107.046044][ T5848] hsr_slave_0: entered promiscuous mode [ 107.047711][ T5848] hsr_slave_1: entered promiscuous mode [ 107.048896][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 107.048924][ T5848] Cannot create hsr debugfs directory [ 107.805073][ T5844] Bluetooth: hci1: command tx timeout [ 107.815948][ T5844] Bluetooth: hci2: command tx timeout [ 107.965522][ T5840] Bluetooth: hci0: command tx timeout [ 107.965584][ T5844] Bluetooth: hci4: command tx timeout [ 108.045065][ T5844] Bluetooth: hci3: command tx timeout [ 108.569721][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.620848][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.653079][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.712627][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.863484][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.896446][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.941960][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.993389][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 109.145018][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.182737][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.225044][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.304743][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.483086][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 109.532631][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 109.580662][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 109.637733][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 109.797961][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.827665][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 109.872288][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 109.938621][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 109.976751][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 110.076443][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.143050][ T3609] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.143561][ T3609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.207201][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.221861][ T1922] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.222035][ T1922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.360338][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.408045][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.424198][ T1922] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.424428][ T1922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.492972][ T2155] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.493144][ T2155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.589352][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.621825][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.658665][ T1922] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.658824][ T1922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.731829][ T1244] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.732187][ T1244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.837308][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.894225][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.899942][ T1922] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.900208][ T1922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.966283][ T3609] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.966450][ T3609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.112495][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.191408][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.195171][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.262054][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.265116][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.291477][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.659583][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.744369][ T5837] veth0_vlan: entered promiscuous mode [ 111.867008][ T5837] veth1_vlan: entered promiscuous mode [ 111.980878][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.121466][ T5838] veth0_vlan: entered promiscuous mode [ 112.189805][ T5837] veth0_macvtap: entered promiscuous mode [ 112.194458][ T5838] veth1_vlan: entered promiscuous mode [ 112.255773][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.256834][ T5837] veth1_macvtap: entered promiscuous mode [ 112.360612][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.385973][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.411951][ T5836] veth0_vlan: entered promiscuous mode [ 112.422277][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.458779][ T5838] veth0_macvtap: entered promiscuous mode [ 112.507699][ T3593] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.524752][ T3593] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.530139][ T5836] veth1_vlan: entered promiscuous mode [ 112.532798][ T5838] veth1_macvtap: entered promiscuous mode [ 112.555057][ T3593] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.572520][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.769840][ T5850] veth0_vlan: entered promiscuous mode [ 112.787432][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.894747][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.919320][ T5850] veth1_vlan: entered promiscuous mode [ 113.060390][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.067763][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.099827][ T1922] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.100498][ T5836] veth0_macvtap: entered promiscuous mode [ 113.122161][ T1922] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.148629][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.148655][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.153248][ T5836] veth1_macvtap: entered promiscuous mode [ 113.428474][ T1922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.428491][ T1922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.494081][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.582034][ T5850] veth0_macvtap: entered promiscuous mode [ 113.589273][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.613897][ T1244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.613919][ T1244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.705746][ T5848] veth0_vlan: entered promiscuous mode [ 113.707507][ T5850] veth1_macvtap: entered promiscuous mode [ 113.739302][ T3593] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.754517][ T3593] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.799425][ T3593] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.817298][ T3593] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.825620][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.825643][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.859701][ T5848] veth1_vlan: entered promiscuous mode [ 114.099508][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.277822][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.403011][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.412755][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.425858][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.449994][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.524700][ T1922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.524723][ T1922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.529933][ T5848] veth0_macvtap: entered promiscuous mode [ 114.606872][ T5848] veth1_macvtap: entered promiscuous mode [ 114.719424][ T5969] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.973721][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.973742][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.007703][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.088452][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.128213][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.128232][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.162203][ T3593] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.173283][ T3593] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.173772][ T3593] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.174059][ T3593] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.387028][ T5975] Illegal XDP return value 4294967294 on prog (id 2) dev N/A, expect packet loss! [ 115.468925][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.468945][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.040244][ T3593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.040265][ T3593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.445622][ T1818] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 116.645565][ T1818] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 116.645601][ T1818] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 116.645645][ T1818] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 116.645669][ T1818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.682350][ T5986] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 116.769357][ T3593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.769378][ T3593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.806450][ T1818] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 117.362742][ T6006] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 117.528268][ T1818] usb 3-1: USB disconnect, device number 2 [ 117.910641][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.172362][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.217226][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.500846][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.816535][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.335725][ T1818] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.510230][ T1818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.510266][ T1818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.510307][ T1818] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 119.510331][ T1818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.571767][ T1818] usb 1-1: config 0 descriptor?? [ 120.091327][ T1818] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 120.091371][ T1818] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 120.091400][ T1818] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 120.091428][ T1818] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 120.091455][ T1818] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 120.091482][ T1818] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 120.091516][ T1818] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 120.251575][ T1818] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 120.752052][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 120.795547][ T1818] cp2112 0003:10C4:EA90.0001: error requesting version [ 120.846496][ T44] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 120.852416][ T1818] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -32 [ 121.155130][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 121.158852][ T44] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.158883][ T44] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.158909][ T44] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 121.158934][ T44] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.158979][ T44] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 121.159003][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.247169][ T1818] usb 1-1: USB disconnect, device number 2 [ 121.481833][ T44] usb 5-1: GET_CAPABILITIES returned 0 [ 121.481884][ T44] usbtmc 5-1:16.0: can't read capabilities [ 121.771654][ T5842] usb 5-1: USB disconnect, device number 2 [ 121.912038][ T6054] fido_id[6054]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 122.095057][ T6035] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 122.874956][ T6035] usb 2-1: Using ep0 maxpacket: 8 [ 123.139340][ T6035] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 123.139377][ T6035] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 123.139403][ T6035] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.139428][ T6035] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.139473][ T6035] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 123.139498][ T6035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.530137][ T6035] usb 2-1: GET_CAPABILITIES returned 0 [ 123.530185][ T6035] usbtmc 2-1:16.0: can't read capabilities [ 123.762293][ T6035] usb 2-1: USB disconnect, device number 2 [ 123.769653][ T6047] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 123.927757][ T6047] usb 5-1: Using ep0 maxpacket: 8 [ 123.947750][ T6047] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 123.947782][ T6047] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.947803][ T6047] usb 5-1: Product: syz [ 123.947818][ T6047] usb 5-1: Manufacturer: syz [ 123.947833][ T6047] usb 5-1: SerialNumber: syz [ 123.974150][ T6047] usb 5-1: config 0 descriptor?? [ 124.003706][ T6047] gspca_main: se401-2.14.0 probing 047d:5003 [ 124.115039][ T992] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 124.226792][ T5955] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 124.243181][ T6075] Zero length message leads to an empty skb [ 124.275079][ T992] usb 3-1: Using ep0 maxpacket: 16 [ 124.283938][ T992] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 124.283967][ T992] usb 3-1: config 0 has no interface number 0 [ 124.284025][ T992] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 124.284053][ T992] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 124.313539][ T992] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 124.313572][ T992] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 124.313592][ T992] usb 3-1: Product: syz [ 124.313607][ T992] usb 3-1: SerialNumber: syz [ 124.381902][ T992] usb 3-1: config 0 descriptor?? [ 124.415882][ T992] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 124.424399][ T992] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input5 [ 124.435004][ T5955] usb 1-1: Using ep0 maxpacket: 16 [ 124.453508][ T5955] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 124.453539][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.453561][ T5955] usb 1-1: Product: syz [ 124.453574][ T5955] usb 1-1: Manufacturer: syz [ 124.453589][ T5955] usb 1-1: SerialNumber: syz [ 124.510920][ T5955] usb 1-1: config 0 descriptor?? [ 124.584165][ T5955] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 124.657628][ T6047] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 124.696407][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 124.697975][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 124.698241][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 124.698489][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 124.698737][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 124.698988][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 124.699231][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 124.699473][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 124.700325][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 124.701159][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 124.786770][ T5955] gp8psk: usb in 128 operation failed. [ 124.790114][ T5955] gp8psk: usb in 137 operation failed. [ 124.790279][ T5955] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 124.794598][ T5955] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 124.794829][ T5955] usb 1-1: media controller created [ 125.018646][ T992] usb 3-1: USB disconnect, device number 3 [ 125.018745][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 125.039700][ T6047] usb 5-1: USB disconnect, device number 3 [ 125.096999][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.206602][ T5955] gp8psk_fe: Frontend revision 1 attached [ 125.207061][ T5955] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 125.207711][ T5955] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 125.263568][ T992] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 125.703894][ T6090] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 125.745260][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.882011][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.912109][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.976181][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.016399][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.091974][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.182058][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.418509][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.548011][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.586000][ T6094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.722203][ T5955] gp8psk: usb in 137 operation failed. [ 126.722225][ T5955] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 126.722239][ T5955] gp8psk: found Genpix USB device pID = 201 (hex) [ 126.787275][ T5955] usb 1-1: USB disconnect, device number 3 [ 127.209676][ T5955] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 127.666219][ T992] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 127.816699][ T992] usb 4-1: Using ep0 maxpacket: 32 [ 127.819294][ T992] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 127.819323][ T992] usb 4-1: config 0 has no interface number 0 [ 127.822685][ T992] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 127.822722][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.822745][ T992] usb 4-1: Product: syz [ 127.822762][ T992] usb 4-1: Manufacturer: syz [ 127.822778][ T992] usb 4-1: SerialNumber: syz [ 127.864765][ T992] usb 4-1: config 0 descriptor?? [ 127.893123][ T992] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 128.077104][ T6129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.64'. [ 128.234496][ T992] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 128.314554][ T992] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 128.560109][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 128.584724][ T992] usb 4-1: USB disconnect, device number 2 [ 128.626304][ T992] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 128.706440][ T992] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 128.727365][ T992] quatech2 4-1:0.51: device disconnected [ 128.846243][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.077216][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.261563][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.478402][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.802201][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.185536][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.68'. [ 130.549234][ T6147] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 132.114892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 132.114928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 132.148455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 132.148511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 132.374880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 132.469595][ T6149] warning: `syz.2.71' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 132.644887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 132.884894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.146912][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.605227][ T992] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 133.645387][ T6169] tap0: tun_chr_ioctl cmd 1074025681 [ 133.768569][ T992] usb 3-1: Using ep0 maxpacket: 8 [ 133.771305][ T992] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.771336][ T992] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 133.771362][ T992] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 133.771387][ T992] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.771432][ T992] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 133.771457][ T992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.069597][ T992] usb 3-1: GET_CAPABILITIES returned 0 [ 134.069649][ T992] usbtmc 3-1:16.0: can't read capabilities [ 134.255032][ T5927] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 134.290244][ T992] usb 3-1: USB disconnect, device number 4 [ 134.340285][ T6186] netlink: 'syz.1.87': attribute type 13 has an invalid length. [ 134.340344][ T6186] macvtap0: entered promiscuous mode [ 134.366106][ T6186] macvtap0: refused to change device tx_queue_len [ 134.404963][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 134.407663][ T5927] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 134.410994][ T5927] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 134.411022][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.411042][ T5927] usb 5-1: Product: syz [ 134.411057][ T5927] usb 5-1: Manufacturer: syz [ 134.411080][ T5927] usb 5-1: SerialNumber: syz [ 134.458098][ T5927] usb 5-1: config 0 descriptor?? [ 134.483916][ T5927] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 134.483980][ T5927] usb 5-1: setting power ON [ 134.484530][ T5927] dvb-usb: bulk message failed: -22 (2/0) [ 134.630573][ T5927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 134.635809][ T5927] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 134.635879][ T5927] usb 5-1: media controller created [ 134.680851][ T6180] dvb-usb: bulk message failed: -22 (3/0) [ 134.680882][ T6180] dvb-usb: bulk message failed: -22 (5/0) [ 134.681610][ T6180] dvb-usb: bulk message failed: -22 (3/0) [ 134.768527][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.795152][ T992] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 134.890984][ T5927] usb 5-1: selecting invalid altsetting 6 [ 134.891010][ T5927] usb 5-1: digital interface selection failed (-22) [ 134.891035][ T5927] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 134.896159][ T5927] usb 5-1: setting power OFF [ 134.896405][ T5927] dvb-usb: bulk message failed: -22 (2/0) [ 134.896424][ T5927] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 134.896437][ T5927] (NULL device *): no alternate interface [ 134.945098][ T992] usb 2-1: Using ep0 maxpacket: 8 [ 134.951452][ T992] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 134.951484][ T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.996895][ T992] pvrusb2: Hardware description: Terratec Grabster AV400 [ 134.996913][ T992] pvrusb2: ********** [ 134.996920][ T992] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 134.996932][ T992] pvrusb2: Important functionality might not be entirely working. [ 134.996942][ T992] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 134.996953][ T992] pvrusb2: ********** [ 135.133423][ T5927] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 135.168173][ T5927] usb 5-1: USB disconnect, device number 4 [ 135.195175][ T6047] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 135.233140][ T2372] pvrusb2: Invalid write control endpoint [ 135.335199][ T44] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 135.361087][ T6047] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 135.361118][ T6047] usb 4-1: config 0 has no interface number 0 [ 135.361154][ T6047] usb 4-1: config 0 interface 246 has no altsetting 0 [ 135.361191][ T6047] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=f9.e3 [ 135.361216][ T6047] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.389903][ T6047] usb 4-1: config 0 descriptor?? [ 135.485050][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 135.489040][ T44] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 135.489133][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.628615][ T2372] pvrusb2: Invalid write control endpoint [ 135.628631][ T2372] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 135.628642][ T2372] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 135.628650][ T2372] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 135.628661][ T2372] pvrusb2: Device being rendered inoperable [ 135.628793][ T2372] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 135.628847][ T2372] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 135.634195][ T2372] pvrusb2: Attached sub-driver cx25840 [ 135.634210][ T2372] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 135.634221][ T2372] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 135.644379][ T6047] usb 4-1: string descriptor 0 read error: -71 [ 135.658107][ T44] usb 3-1: config 0 descriptor?? [ 135.743174][ T5927] usb 2-1: USB disconnect, device number 3 [ 135.944751][ T44] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 136.039140][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 136.043065][ T44] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 136.043124][ T44] usb 3-1: media controller created [ 136.105889][ T6047] usb 4-1: USB disconnect, device number 3 [ 136.141165][ T6195] pvrusb2: Attempted to execute control transfer when device not ok [ 136.278132][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 136.553689][ T44] az6027: usb out operation failed. (-71) [ 136.554130][ T44] az6027: usb out operation failed. (-71) [ 136.554145][ T44] stb0899_attach: Driver disabled by Kconfig [ 136.554155][ T44] az6027: no front-end attached [ 136.554155][ T44] [ 136.557989][ T44] az6027: usb out operation failed. (-71) [ 136.558007][ T44] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 136.561945][ T44] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 136.618151][ T44] dvb-usb: schedule remote query interval to 400 msecs. [ 136.618175][ T44] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 136.674037][ T44] usb 3-1: USB disconnect, device number 5 [ 137.046434][ T31] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 138.000158][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 138.002526][ T31] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 138.008469][ T31] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 138.008501][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.008523][ T31] usb 5-1: Product: syz [ 138.008539][ T31] usb 5-1: Manufacturer: syz [ 138.008554][ T31] usb 5-1: SerialNumber: syz [ 138.018448][ T31] usb 5-1: config 0 descriptor?? [ 138.027961][ T31] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 138.028015][ T31] usb 5-1: setting power ON [ 138.028034][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 138.042089][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 138.050560][ T31] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 138.050621][ T31] usb 5-1: media controller created [ 138.097590][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.246913][ T6212] dvb-usb: bulk message failed: -22 (3/0) [ 138.246939][ T6212] dvb-usb: bulk message failed: -22 (3/0) [ 138.247285][ T6212] cxusb: i2c rd: len=159 is too big! [ 138.247285][ T6212] [ 138.276910][ T44] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 138.283907][ T31] usb 5-1: selecting invalid altsetting 6 [ 138.283929][ T31] usb 5-1: digital interface selection failed (-22) [ 138.283945][ T31] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 138.335048][ T31] usb 5-1: setting power OFF [ 138.335076][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 138.335094][ T31] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 138.335108][ T31] (NULL device *): no alternate interface [ 138.355100][ T5927] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 138.467357][ T31] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 138.499852][ T31] usb 5-1: USB disconnect, device number 5 [ 138.518861][ T5927] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.518889][ T5927] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.521095][ T5927] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 138.521123][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 138.521145][ T5927] usb 4-1: SerialNumber: syz [ 138.538009][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.538112][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.685602][ T44] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 138.835246][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 138.855483][ T44] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 138.855754][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.912808][ T5927] usb 4-1: 0:2 : does not exist [ 138.927233][ T44] usb 3-1: config 0 descriptor?? [ 138.982635][ T5927] usb 4-1: USB disconnect, device number 4 [ 139.155090][ T5842] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 139.186520][ T44] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 139.206425][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 139.215939][ T44] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 139.216000][ T44] usb 3-1: media controller created [ 139.258798][ T5993] udevd[5993]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.286414][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.306675][ T5842] usb 1-1: Using ep0 maxpacket: 32 [ 139.309655][ T5842] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 139.309681][ T5842] usb 1-1: config 0 has no interface number 0 [ 139.309734][ T5842] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.309763][ T5842] usb 1-1: config 0 interface 85 has no altsetting 0 [ 139.338724][ T5842] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 139.338760][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.338783][ T5842] usb 1-1: Product: syz [ 139.338801][ T5842] usb 1-1: Manufacturer: syz [ 139.338818][ T5842] usb 1-1: SerialNumber: syz [ 139.396477][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 139.396618][ T44] az6027: usb out operation failed. (-32) [ 139.396911][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 139.397040][ T44] az6027: usb out operation failed. (-32) [ 139.397054][ T44] stb0899_attach: Driver disabled by Kconfig [ 139.397063][ T44] az6027: no front-end attached [ 139.397063][ T44] [ 139.398688][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 139.398845][ T44] az6027: usb out operation failed. (-32) [ 139.398865][ T44] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 139.404593][ T44] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 139.469957][ T5842] usb 1-1: config 0 descriptor?? [ 139.531051][ T44] dvb-usb: schedule remote query interval to 400 msecs. [ 139.531075][ T44] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 139.556609][ T44] usb 3-1: USB disconnect, device number 6 [ 139.875638][ T44] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 140.227389][ T5842] appletouch 1-1:0.85: Geyser mode initialized. [ 140.234046][ T5842] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input9 [ 140.970807][ T6237] sctp: failed to load transform for md5: -2 [ 140.995674][ T6243] sctp: failed to load transform for md5: -2 [ 141.430923][ T5842] usb 1-1: USB disconnect, device number 4 [ 141.671110][ T5842] appletouch 1-1:0.85: input: appletouch disconnected [ 141.870432][ T5927] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 142.026633][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 142.029270][ T5927] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 142.029302][ T5927] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 142.029328][ T5927] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 142.029354][ T5927] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.029399][ T5927] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 142.029423][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.235107][ T44] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 142.351363][ T5927] usb 2-1: GET_CAPABILITIES returned 0 [ 142.351407][ T5927] usbtmc 2-1:16.0: can't read capabilities [ 142.412576][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.412611][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.412654][ T44] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 142.412678][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.475898][ T44] usb 3-1: config 0 descriptor?? [ 142.644560][ T5927] usb 2-1: USB disconnect, device number 4 [ 142.875087][ T6047] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 143.057133][ T6047] usb 5-1: Using ep0 maxpacket: 8 [ 143.060606][ T6047] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 143.060759][ T6047] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 143.060783][ T6047] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 143.060805][ T6047] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 143.060825][ T6047] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.060920][ T6047] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 143.060948][ T6047] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.176825][ T44] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 143.196872][ T44] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 143.228857][ T5955] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 143.309203][ T37] audit: type=1400 audit(1757944762.913:2): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6278 comm="syz.3.122" dest=20002 netif=wpan0 [ 143.371201][ T44] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE [ 143.388786][ T5955] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 143.388815][ T5955] usb 1-1: config 0 has no interface number 0 [ 143.391983][ T5955] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 143.392011][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.392032][ T5955] usb 1-1: Product: syz [ 143.392046][ T5955] usb 1-1: Manufacturer: syz [ 143.392061][ T5955] usb 1-1: SerialNumber: syz [ 143.447053][ T6047] usb 5-1: GET_CAPABILITIES returned 0 [ 143.447165][ T6047] usbtmc 5-1:16.0: can't read capabilities [ 143.466148][ T5955] usb 1-1: config 0 descriptor?? [ 143.574803][ T44] cp2112 0003:10C4:EA90.0002: error requesting SMBus config [ 143.601704][ T44] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -71 [ 143.638792][ T44] usb 3-1: USB disconnect, device number 7 [ 143.733571][ T5955] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 143.783082][ T5955] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 143.783532][ T5955] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 143.783583][ T5955] usb 1-1: media controller created [ 143.832161][ T5842] usb 5-1: USB disconnect, device number 6 [ 143.930478][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 144.029408][ T5955] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 144.169096][ T5955] usb 1-1: USB disconnect, device number 5 [ 144.734653][ T5844] Bluetooth: hci0: Unable to find connection for big 0x00 [ 145.162489][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.131'. [ 145.162520][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.131'. [ 145.838522][ T6305] bridge0: entered promiscuous mode [ 145.838706][ T6305] macsec1: entered allmulticast mode [ 145.838716][ T6305] bridge0: entered allmulticast mode [ 147.922947][ T37] audit: type=1326 audit(1757944767.533:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6322 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed3d5eba9 code=0x7ffc0000 [ 147.923005][ T37] audit: type=1326 audit(1757944767.533:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6322 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed3d5eba9 code=0x7ffc0000 [ 147.924482][ T37] audit: type=1326 audit(1757944767.533:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6322 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f4ed3d5eba9 code=0x7ffc0000 [ 147.925467][ T37] audit: type=1326 audit(1757944767.533:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6322 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed3d5eba9 code=0x7ffc0000 [ 147.934950][ T37] audit: type=1326 audit(1757944767.543:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6322 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed3d5eba9 code=0x7ffc0000 [ 147.935010][ T37] audit: type=1326 audit(1757944767.543:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6322 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f4ed3d5eba9 code=0x7ffc0000 [ 147.935057][ T37] audit: type=1326 audit(1757944767.543:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6322 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed3d5eba9 code=0x7ffc0000 [ 148.497794][ T5842] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 148.525021][ T992] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 148.676421][ T5842] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 148.678246][ T5842] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.678299][ T5842] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.678323][ T5842] usb 4-1: config 0 interface 0 has no altsetting 0 [ 148.681588][ T5842] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.681647][ T5842] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.681675][ T5842] usb 4-1: config 0 interface 0 has no altsetting 0 [ 148.683246][ T5842] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.683303][ T5842] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.683331][ T5842] usb 4-1: config 0 interface 0 has no altsetting 0 [ 148.724868][ T992] usb 2-1: Using ep0 maxpacket: 8 [ 148.812044][ T992] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.812148][ T992] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.812177][ T992] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.812202][ T992] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.812312][ T992] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 148.812338][ T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.894421][ T5842] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.894486][ T5842] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.894515][ T5842] usb 4-1: config 0 interface 0 has no altsetting 0 [ 148.895207][ T5955] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 148.945918][ T5842] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.945981][ T5842] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.946010][ T5842] usb 4-1: config 0 interface 0 has no altsetting 0 [ 148.948415][ T5842] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.948475][ T5842] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.948503][ T5842] usb 4-1: config 0 interface 0 has no altsetting 0 [ 148.949774][ T5842] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.949831][ T5842] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.949859][ T5842] usb 4-1: config 0 interface 0 has no altsetting 0 [ 148.956218][ T5842] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.956285][ T5842] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.956314][ T5842] usb 4-1: config 0 interface 0 has no altsetting 0 [ 149.035072][ T5842] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 149.035104][ T5842] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 149.035135][ T5842] usb 4-1: Product: syz [ 149.035151][ T5842] usb 4-1: Manufacturer: syz [ 149.035166][ T5842] usb 4-1: SerialNumber: syz [ 149.121319][ T5842] usb 4-1: config 0 descriptor?? [ 149.195016][ T5955] usb 3-1: Using ep0 maxpacket: 16 [ 149.201343][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.201452][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.201494][ T5955] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 149.201519][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.255079][ T992] usb 2-1: GET_CAPABILITIES returned 0 [ 149.255193][ T992] usbtmc 2-1:16.0: can't read capabilities [ 149.257659][ T5842] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 149.338900][ T5955] usb 3-1: config 0 descriptor?? [ 149.424248][ T5915] usb 4-1: USB disconnect, device number 5 [ 149.484238][ T5915] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 149.533540][ T44] usb 2-1: USB disconnect, device number 5 [ 149.781235][ T5955] hid (null): invalid report_size -301085748 [ 149.957459][ T5955] usb 3-1: string descriptor 0 read error: -71 [ 149.986281][ T5955] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 149.986379][ T5955] letsketch 0003:6161:4D15.0003: probe with driver letsketch failed with error -32 [ 150.038083][ T5955] usb 3-1: USB disconnect, device number 8 [ 151.804094][ T6357] program syz.2.153 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.762838][ T6379] Bluetooth: MGMT ver 1.23 [ 156.754929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 156.754983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 160.380637][ T6433] Bluetooth: MGMT ver 1.23 [ 163.737043][ T6456] loop8: detected capacity change from 0 to 7 [ 163.805209][ T5899] Dev loop8: unable to read RDB block 7 [ 163.805267][ T5899] loop8: unable to read partition table [ 163.805545][ T5899] loop8: partition table beyond EOD, truncated [ 163.907558][ T6456] Dev loop8: unable to read RDB block 7 [ 163.907619][ T6456] loop8: unable to read partition table [ 163.907880][ T6456] loop8: partition table beyond EOD, truncated [ 163.907929][ T6456] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 164.326074][ T5844] Bluetooth: hci4: unexpected cc 0x2039 length: 2 > 1 [ 168.720416][ T6513] process 'syz.1.211' launched './file0' with NULL argv: empty string added [ 169.169391][ T6524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.215'. [ 169.169415][ T6524] netlink: 64 bytes leftover after parsing attributes in process `syz.0.215'. [ 169.169435][ T6524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.215'. [ 170.390745][ T6540] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 170.390894][ T6540] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 170.391395][ T6540] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 170.391487][ T6540] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 170.391803][ T6540] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 170.391889][ T6540] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 170.392240][ T6540] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 170.392321][ T6540] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 170.392630][ T6540] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 170.392711][ T6540] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 172.867864][ T1818] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 173.037619][ T1818] usb 5-1: Using ep0 maxpacket: 8 [ 173.222700][ T1818] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 173.222730][ T1818] usb 5-1: config 0 has no interface number 0 [ 173.222782][ T1818] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 173.222829][ T1818] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 173.222854][ T1818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.281023][ T1818] usb 5-1: config 0 descriptor?? [ 173.304540][ T1818] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 173.556650][ T5955] usb 5-1: USB disconnect, device number 7 [ 173.708355][ T1818] hid-generic 0005:04F3:1010.0004: item fetching failed at offset 0/1 [ 173.712334][ T1818] hid-generic 0005:04F3:1010.0004: probe with driver hid-generic failed with error -22 [ 180.795039][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 180.946311][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 180.955090][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 180.955128][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 180.955156][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 180.955181][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.955226][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 180.955250][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.398944][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 181.398992][ T9] usbtmc 1-1:16.0: can't read capabilities [ 181.643980][ T992] usb 1-1: USB disconnect, device number 6 [ 181.715000][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 181.847973][ T6672] program syz.2.267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.855467][ T6668] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 181.876799][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 181.881633][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 181.881664][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 181.881690][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 181.881715][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.881761][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 181.881785][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.238557][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 182.238608][ T9] usbtmc 4-1:16.0: can't read capabilities [ 182.308559][ T6677] loop6: detected capacity change from 0 to 524287999 [ 182.471882][ T9] usb 4-1: USB disconnect, device number 6 [ 182.659391][ T6683] netlink: 168 bytes leftover after parsing attributes in process `syz.0.272'. [ 183.275051][ T5927] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 183.440884][ T5927] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 183.440918][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.440939][ T5927] usb 5-1: Product: syz [ 183.440954][ T5927] usb 5-1: Manufacturer: syz [ 183.440968][ T5927] usb 5-1: SerialNumber: syz [ 183.458493][ T5927] usb 5-1: config 0 descriptor?? [ 183.499332][ T5927] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 008 [ 183.930116][ T5927] (null): failure reading functionality [ 183.985499][ T5927] i2c i2c-1: connected i2c-tiny-usb device [ 184.153969][ T6047] usb 5-1: USB disconnect, device number 8 [ 184.345007][ T5955] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 184.495053][ T5955] usb 2-1: Using ep0 maxpacket: 16 [ 184.497451][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.497484][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.497524][ T5955] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 184.497547][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.668680][ T5955] usb 2-1: config 0 descriptor?? [ 184.705015][ T6047] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 184.855000][ T5927] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 184.861261][ T6047] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 184.873217][ T6047] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.873322][ T6047] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 184.873351][ T6047] usb 1-1: config 0 interface 0 has no altsetting 0 [ 184.948516][ T6047] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.948582][ T6047] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 184.948612][ T6047] usb 1-1: config 0 interface 0 has no altsetting 0 [ 184.961194][ T6047] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.961268][ T6047] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 184.961296][ T6047] usb 1-1: config 0 interface 0 has no altsetting 0 [ 184.972867][ T6047] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.972940][ T6047] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 184.972974][ T6047] usb 1-1: config 0 interface 0 has no altsetting 0 [ 184.990899][ T6047] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.990970][ T6047] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 184.991000][ T6047] usb 1-1: config 0 interface 0 has no altsetting 0 [ 185.006666][ T6047] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.006740][ T6047] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.006771][ T6047] usb 1-1: config 0 interface 0 has no altsetting 0 [ 185.007963][ T5927] usb 4-1: Using ep0 maxpacket: 8 [ 185.042217][ T5927] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 185.042254][ T5927] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 185.042282][ T5927] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 185.042311][ T5927] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 185.042337][ T5927] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.042390][ T5927] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 185.042417][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.045017][ T6047] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.045086][ T6047] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.045117][ T6047] usb 1-1: config 0 interface 0 has no altsetting 0 [ 185.085314][ T6047] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.085378][ T6047] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.085408][ T6047] usb 1-1: config 0 interface 0 has no altsetting 0 [ 185.181452][ T6047] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 185.181531][ T6047] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 185.181557][ T6047] usb 1-1: Product: syz [ 185.181572][ T6047] usb 1-1: Manufacturer: syz [ 185.181589][ T6047] usb 1-1: SerialNumber: syz [ 185.327885][ T5955] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 185.327926][ T5955] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 185.327955][ T5955] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 185.327982][ T5955] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 185.328010][ T5955] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 185.328926][ T5955] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 185.366530][ T6047] usb 1-1: config 0 descriptor?? [ 185.537376][ T5927] usb 4-1: GET_CAPABILITIES returned 0 [ 185.537428][ T5927] usbtmc 4-1:16.0: can't read capabilities [ 185.538699][ T5955] usb 2-1: USB disconnect, device number 6 [ 185.712255][ T6047] yurex 1-1:0.0: USB YUREX device now attached to Yurex #1 [ 185.881631][ T6047] usb 1-1: USB disconnect, device number 7 [ 185.964730][ T5927] usb 4-1: USB disconnect, device number 7 [ 188.264069][ T6047] yurex 1-1:0.0: USB YUREX #1 now disconnected [ 189.965291][ T992] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 190.478047][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.478146][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.478192][ T992] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.478444][ T992] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.478508][ T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.089796][ T992] usb 5-1: config 0 descriptor?? [ 191.574050][ T992] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 191.574090][ T992] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 191.574119][ T992] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 191.574146][ T992] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 191.574174][ T992] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 191.574200][ T992] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 191.574228][ T992] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 191.574255][ T992] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 191.574283][ T992] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 191.574328][ T992] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 191.633963][ T992] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 191.884274][ T1818] usb 5-1: USB disconnect, device number 9 [ 191.895330][ T6062] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 192.094150][ T6062] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.094209][ T6062] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.094238][ T6062] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 192.114081][ T6062] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 192.114112][ T6062] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.114135][ T6062] usb 3-1: Product: syz [ 192.114152][ T6062] usb 3-1: Manufacturer: syz [ 192.114169][ T6062] usb 3-1: SerialNumber: syz [ 192.773005][ T6764] fido_id[6764]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 192.855182][ T37] audit: type=1326 audit(1757944812.463:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6766 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895b8deba9 code=0x7ffc0000 [ 192.856291][ T37] audit: type=1326 audit(1757944812.473:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6766 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895b8deba9 code=0x7ffc0000 [ 192.856940][ T37] audit: type=1326 audit(1757944812.473:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6766 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f895b8deba9 code=0x7ffc0000 [ 192.875008][ T37] audit: type=1326 audit(1757944812.483:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6766 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895b8deba9 code=0x7ffc0000 [ 192.878443][ T37] audit: type=1326 audit(1757944812.493:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6766 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895b8deba9 code=0x7ffc0000 [ 192.879347][ T37] audit: type=1326 audit(1757944812.493:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6766 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f895b8deba9 code=0x7ffc0000 [ 192.893188][ T37] audit: type=1326 audit(1757944812.503:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6766 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895b8deba9 code=0x7ffc0000 [ 192.893862][ T37] audit: type=1326 audit(1757944812.503:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6766 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895b8deba9 code=0x7ffc0000 [ 192.908332][ T37] audit: type=1326 audit(1757944812.523:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6766 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f895b8deba9 code=0x7ffc0000 [ 192.908408][ T37] audit: type=1326 audit(1757944812.523:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6766 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895b8deba9 code=0x7ffc0000 [ 193.397101][ T6062] cdc_ncm 3-1:1.0: bind() failure [ 193.480957][ T6062] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 193.482682][ T6062] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 193.498311][ T6062] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 193.610172][ T6062] usb 3-1: USB disconnect, device number 9 [ 194.611906][ T6783] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 194.805173][ T6062] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 194.894506][ T6791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.961002][ T6793] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 194.965272][ T6062] usb 4-1: Using ep0 maxpacket: 32 [ 194.968505][ T6062] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 194.968540][ T6062] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.000314][ T6062] usb 4-1: config 0 descriptor?? [ 195.217530][ T6062] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 195.234743][ T6062] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 195.243012][ T6062] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 195.243091][ T6062] usb 4-1: media controller created [ 195.303354][ T6062] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.428441][ T6062] az6027: usb out operation failed. (-71) [ 195.428917][ T6062] az6027: usb out operation failed. (-71) [ 195.428932][ T6062] stb0899_attach: Driver disabled by Kconfig [ 195.428941][ T6062] az6027: no front-end attached [ 195.428941][ T6062] [ 195.463930][ T6062] az6027: usb out operation failed. (-71) [ 195.463951][ T6062] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 195.598472][ T6062] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 195.633438][ T6062] dvb-usb: schedule remote query interval to 400 msecs. [ 195.633463][ T6062] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 195.675823][ T6062] usb 4-1: USB disconnect, device number 8 [ 195.983711][ T6062] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 196.420214][ T5927] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 196.581141][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.581227][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.581382][ T5927] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 196.581465][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.684026][ T5927] usb 5-1: config 0 descriptor?? [ 197.861083][ T6821] net_ratelimit: 1052 callbacks suppressed [ 197.861106][ T6821] sctp: failed to load transform for md5: -2 [ 197.897098][ T5927] hid_parser_main: 5 callbacks suppressed [ 197.897125][ T5927] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 197.897158][ T5927] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 197.897185][ T5927] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 197.897212][ T5927] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 197.897241][ T5927] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 197.897268][ T5927] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 197.897294][ T5927] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 198.081205][ T5927] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 198.135428][ T5927] cp2112 0003:10C4:EA90.0007: error requesting version [ 198.158013][ T5927] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -71 [ 198.298922][ T5927] usb 5-1: USB disconnect, device number 10 [ 198.617725][ T6837] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 198.617725][ T6837] The task syz.3.327 (6837) triggered the difference, watch for misbehavior. [ 199.972672][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.972751][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.016636][ T6830] fido_id[6830]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 201.498120][ T6865] kvm: user requested TSC rate below hardware speed [ 204.950640][ T6890] syzkaller1: entered promiscuous mode [ 204.950672][ T6890] syzkaller1: entered allmulticast mode [ 205.095150][ T6906] syz.2.345 uses obsolete (PF_INET,SOCK_PACKET) [ 206.935326][ T9] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 207.547759][ T9] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 207.547804][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.577238][ T9] usb 1-1: config 0 descriptor?? [ 208.653355][ T6945] netlink: 6 bytes leftover after parsing attributes in process `syz.4.359'. [ 208.717855][ T9] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 208.718499][ T9] asix 1-1:0.0: probe with driver asix failed with error -71 [ 208.957033][ T9] usb 1-1: USB disconnect, device number 8 [ 209.660035][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 211.345857][ T6952] netlink: 136 bytes leftover after parsing attributes in process `syz.3.362'. [ 211.345889][ T6952] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 212.149355][ T6976] batadv_slave_1: entered promiscuous mode [ 212.150962][ T6974] batadv_slave_1: left promiscuous mode [ 214.809340][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.927726][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.928594][ T5955] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 215.107375][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.107410][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.107450][ T5955] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 215.107474][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.158929][ T5955] usb 2-1: config 0 descriptor?? [ 215.341847][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'. [ 215.386837][ T5915] IPVS: starting estimator thread 0... [ 215.495388][ T7026] IPVS: using max 6 ests per chain, 14400 per kthread [ 215.597028][ T7028] netlink: 104 bytes leftover after parsing attributes in process `syz.2.385'. [ 215.602707][ T7028] netlink: 104 bytes leftover after parsing attributes in process `syz.2.385'. [ 215.627101][ T5955] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0 [ 215.628438][ T5955] hid-steam 0003:28DE:1142.0008: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 215.686629][ T5955] hid-steam 0003:28DE:1142.0008: Steam wireless receiver connected [ 215.687044][ T5955] hid-steam 0003:28DE:1142.0008: No HID_FEATURE_REPORT submitted - nothing to read [ 215.725731][ T5955] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0 [ 215.782073][ T5955] hid-steam 0003:28DE:1142.0009: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 215.812405][ T7032] netlink: 27 bytes leftover after parsing attributes in process `syz.4.386'. [ 215.874035][ T5955] usb 2-1: USB disconnect, device number 7 [ 215.921664][ T5955] hid-steam 0003:28DE:1142.0008: Steam wireless receiver disconnected [ 216.131733][ T7035] fido_id[7035]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 216.572517][ C0] vkms_vblank_simulate: vblank timer overrun [ 216.652244][ C0] vkms_vblank_simulate: vblank timer overrun [ 216.683987][ C0] vkms_vblank_simulate: vblank timer overrun [ 216.750367][ C0] vkms_vblank_simulate: vblank timer overrun [ 216.800005][ C0] vkms_vblank_simulate: vblank timer overrun [ 216.885287][ C0] vkms_vblank_simulate: vblank timer overrun [ 216.917059][ C0] vkms_vblank_simulate: vblank timer overrun [ 216.999614][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.043774][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.081961][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.353268][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.570023][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.619452][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.650141][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.745481][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.772700][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.885363][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.922037][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.052324][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.153048][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.272605][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.341871][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.381815][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.442262][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.472504][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.542289][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.115333][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 227.115379][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 227.115407][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 227.115434][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 227.764830][ C1] sched: DL replenish lagged too much [ 283.318271][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 283.363907][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 302.155256][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 304.154656][ T7087] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 306.173648][ T7087] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 307.263365][ T7087] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 310.931847][ T7087] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 313.327755][ T5847] Bluetooth: hci5: Opcode 0x0c39 failed: -110 [ 314.029356][ T7080] Bluetooth: hci5: Opcode 0x0c03 failed: -4 [ 335.743260][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 335.752250][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.182892][ T5844] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 352.339185][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 356.062442][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 357.394578][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 360.287507][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 362.209898][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 362.210780][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 380.508861][ T38] INFO: task kworker/u9:1:5157 blocked for more than 143 seconds. [ 380.508893][ T38] Not tainted syzkaller #0 [ 380.508905][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.508919][ T38] task:kworker/u9:1 state:D stack:26296 pid:5157 tgid:5157 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 380.508987][ T38] Workqueue: hci3 hci_cmd_sync_work [ 380.509033][ T38] Call Trace: [ 380.509041][ T38] [ 380.509056][ T38] __schedule+0x16f3/0x4c20 [ 380.509117][ T38] ? __pfx___schedule+0x10/0x10 [ 380.509170][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 380.509207][ T38] rt_mutex_schedule+0x77/0xf0 [ 380.509229][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 380.509257][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 380.509304][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 380.509335][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 380.509363][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 380.509388][ T38] ? __lock_acquire+0xab9/0xd20 [ 380.509431][ T38] ? hci_conn_failed+0x165/0x310 [ 380.509478][ T38] ? __pfx_mgmt_connect_failed+0x10/0x10 [ 380.509506][ T38] ? hci_conn_failed+0x165/0x310 [ 380.509536][ T38] mutex_lock_nested+0x16a/0x1d0 [ 380.509570][ T38] hci_conn_failed+0x165/0x310 [ 380.509606][ T38] ? hci_abort_conn_sync+0x24e/0xe30 [ 380.509637][ T38] hci_abort_conn_sync+0x658/0xe30 [ 380.509681][ T38] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 380.509716][ T38] ? hci_conn_valid+0x21/0x230 [ 380.509739][ T38] ? hci_conn_valid+0x21/0x230 [ 380.509760][ T38] ? hci_conn_valid+0x21/0x230 [ 380.509784][ T38] ? hci_conn_valid+0x211/0x230 [ 380.509808][ T38] ? __pfx_abort_conn_sync+0x10/0x10 [ 380.509833][ T38] hci_cmd_sync_work+0x213/0x3a0 [ 380.509864][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 380.509895][ T38] process_scheduled_works+0xade/0x17b0 [ 380.509957][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 380.510006][ T38] worker_thread+0x8a0/0xda0 [ 380.510039][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 380.510082][ T38] ? __kthread_parkme+0x7b/0x200 [ 380.510122][ T38] kthread+0x70e/0x8a0 [ 380.510159][ T38] ? __pfx_worker_thread+0x10/0x10 [ 380.510187][ T38] ? __pfx_kthread+0x10/0x10 [ 380.510227][ T38] ? __pfx_kthread+0x10/0x10 [ 380.510261][ [ 380.510261][ T38] ret_from_fork+0x439/0x7d0 [ 380.510294][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 380.510330][ T38] ? __switch_to_asm+0x39/0x70 [ 380.510351][ T38] ? __switch_to_asm+0x33/0x70 [ 380.510370][ T38] ? __pfx_kthread+0x10/0x10 [ 380.510405][ T38] ret_from_fork_asm+0x1a/0x30 [ 380.510446][ T38] [ 380.510534][ T38] [ 380.510534][ T38] Showing all locks held in the system: [ 380.510544][ T38] 4 locks held by kworker/0:1/10: [ 380.510558][ T38] #0: ffff88805b78f938 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.510623][ T38] #1: ffffc900000f7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.510699][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.510756][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.510813][ T38] 4 locks held by kworker/u8:0/12: [ 380.510826][ T38] #0: ffff88814dba2938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.510883][ T38] #1: ffffc90000117bc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.510941][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.510997][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.511054][ T38] 4 locks held by kworker/u8:1/13: [ 380.511065][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.511128][ T38] #1: ffffc90000127bc0 ((work_completion)(&port->bc_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.511185][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.511244][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.511299][ T38] 2 locks held by ksoftirqd/0/15: [ 380.511312][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.511368][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.511425][ T38] 7 locks held by ktimers/0/16: [ 380.511437][ T38] 2 locks held by rcuc/0/20: [ 380.511449][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.511517][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.511575][ T38] 2 locks held by ksoftirqd/1/30: [ 380.511587][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.511642][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.511699][ T38] 1 lock held by khungtaskd/38: [ 380.511711][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 380.511764][ T38] 4 locks held by kworker/u8:3/57: [ 380.511778][ T38] 7 locks held by kworker/u8:4/67: [ 380.511790][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.511847][ T38] #1: ffffc9000152fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.511906][ T38] #2: ffff8880369cc300 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 380.511975][ T38] #3: ffff88805dc96d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 380.512038][ T38] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 380.512092][ T38] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.512148][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.512209][ T38] 5 locks held by kworker/u8:5/720: [ 380.512221][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.512279][ T38] #1: ffffc9000407fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.512335][ T38] #2: ffff88805fe90898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 380.512396][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.512451][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.512519][ T38] 5 locks held by kworker/u8:6/1059: [ 380.512531][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.512587][ T38] #1: ffffc90004977bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.512644][ T38] #2: ffff888048290898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 380.512703][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.512759][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.512820][ T38] 4 locks held by kworker/u8:8/1448: [ 380.512832][ T38] #0: ffff888039550138 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.512888][ T38] #1: ffffc900053a7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.512946][ T38] #2: ffff88803b1895f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 380.513003][ T38] #3: ffff8880231323c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 380.513058][ T38] 4 locks held by kworker/1:3/1818: [ 380.513071][ T38] #0: ffff88805bff9138 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.513133][ T38] #1: ffffc90005a97bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.513208][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.513264][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.513320][ T38] 6 locks held by kworker/u8:9/1922: [ 380.513332][ T38] #0: ffff88805bfd5138 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.513394][ T38] #1: ffffc90005c87bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.513451][ T38] #2: ffff88805c1715f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 380.513515][ T38] #3: ffff88805dd9a3c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 380.513570][ T38] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.513626][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.513683][ T38] 5 locks held by kworker/u8:10/2155: [ 380.513695][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.513752][ T38] #1: ffffc900060efbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.513809][ T38] #2: ffff88805f3a0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 380.513868][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.513924][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.513993][ T38] 5 locks held by kworker/u8:12/3593: [ 380.514006][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.514062][ T38] #1: ffffc9000d88fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.514119][ T38] #2: ffff88805f0c0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 380.514178][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.514234][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.514291][ T38] 4 locks held by kworker/u8:13/3609: [ 380.514303][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.514359][ T38] #1: ffffc9000d91fbc0 ((work_completion)(&port->bc_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.514416][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.514480][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.514538][ T38] 5 locks held by kworker/u9:1/5157: [ 380.514550][ T38] #0: ffff8880282c2938 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.514605][ T38] #1: ffffc9000fd37bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.514661][ T38] #2: ffff88803c844e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 380.514714][ T38] #3: ffff88803c8440a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 380.794981][ T38] #4: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 380.795038][ T38] 1 lock held by klogd/5197: [ 380.795049][ T38] 3 locks held by udevd/5208: [ 380.795059][ T38] #0: ffff88803b1e2350 (sk_lock-AF_NETLINK){+.+.}-{0:0}, at: sk_setsockopt+0xc2f/0x2a70 [ 380.795110][ T38] #1: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.795156][ T38] #2: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.795206][ T38] 2 locks held by getty/5597: [ 380.795217][ T38] #0: ffff88823bf848a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 380.795275][ T38] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 380.795327][ T38] 2 locks held by dhcpcd/5633: [ 380.795339][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.795392][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.795449][ T38] 1 lock held by syz-executor/5825: [ 380.795462][ T38] 3 locks held by syz-executor/5838: [ 380.795474][ T38] #0: ffff88803c840e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 380.795540][ T38] #1: ffff88803c8400a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 380.795600][ T38] #2: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 380.795651][ T38] 4 locks held by kworker/u9:2/5840: [ 380.795663][ T38] #0: ffff888027beb938 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.795720][ T38] #1: ffffc90004a47bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.795777][ T38] #2: ffff8880316e0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 380.795830][ T38] #3: ffff8880316e00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 380.795891][ T38] 4 locks held by kworker/u9:4/5844: [ 380.795903][ T38] #0: ffff888030682938 ((wq_completion)krxrpcd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.795960][ T38] #1: ffffc90004a97bc0 ((work_completion)(&rxnet->peer_keepalive_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.796018][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.796073][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.796130][ T38] 4 locks held by kworker/u9:5/5847: [ 380.796143][ T38] #0: ffff88805f6d7938 ((wq_completion)hci5#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.796210][ T38] #1: ffffc90004ab7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.796266][ T38] #2: ffff888030e440a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 380.796322][ T38] #3: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 380.796378][ T38] 6 locks held by kworker/u9:6/5849: [ 380.796390][ T38] #0: ffff888028c88138 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.796446][ T38] #1: ffffc90004ac7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.796503][ T38] #2: ffff88803378ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 380.796561][ T38] #3: ffff88803378c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 380.796622][ T38] #4: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 380.796682][ T38] #5: ffff888028aea358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 380.796755][ T38] 2 locks held by napi/wg0-0/5907: [ 380.796768][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.796824][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.796882][ T38] 2 locks held by kworker/1:4/5912: [ 380.796895][ T38] 5 locks held by kworker/1:5/5915: [ 380.796907][ T38] #0: ffff88805b9bb538 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.796969][ T38] #1: ffffc90004ef7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.797045][ T38] #2: ffff888035d855f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 380.797102][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.797158][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.797216][ T38] 2 locks held by kworker/0:4/5926: [ 380.797229][ T38] 4 locks held by kworker/1:6/5927: [ 380.797241][ T38] #0: ffff88805bff9538 ((wq_completion)wg-crypt-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.797311][ T38] #1: ffffc90004fb7bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.797368][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.797424][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.797480][ T38] 4 locks held by kworker/0:5/5955: [ 380.797492][ T38] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.797559][ T38] #1: ffffc90005137bc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.797616][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.797672][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.797729][ T38] 4 locks held by kworker/0:6/6035: [ 380.797741][ T38] #0: ffff88805bda2538 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.797803][ T38] #1: ffffc9000532fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.797878][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.797934][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.797991][ T38] 2 locks held by kworker/0:7/6062: [ 380.798003][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.798059][ T38] #1: ffffc900053efbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.798116][ T38] 5 locks held by kworker/u8:14/6095: [ 380.798129][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.798185][ T38] #1: ffffc90005827bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.798242][ T38] #2: ffff88805f620898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 380.798302][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.798357][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.798415][ T38] 5 locks held by kworker/u8:16/6097: [ 380.798427][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.798483][ T38] #1: ffffc90005a2fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.798547][ T38] #2: ffff888048640898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 380.798606][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.798661][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.798719][ T38] 7 locks held by kworker/u8:19/6100: [ 380.798732][ T38] 5 locks held by kworker/u8:21/6102: [ 380.798744][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.798801][ T38] #1: ffffc90005a7fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.798858][ T38] #2: ffff88805eba0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 380.798916][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.798971][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.799030][ T38] 4 locks held by kworker/0:8/7056: [ 380.799043][ T38] #0: ffff88805bda0d38 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.799105][ T38] #1: ffffc9001c777bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.799180][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.799236][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.799293][ T38] 2 locks held by kworker/1:11/7061: [ 380.799307][ T38] 3 locks held by kworker/0:10/7062: [ 380.799326][ T38] 5 locks held by kworker/1:12/7063: [ 380.799338][ T38] #0: ffff88805bb4d938 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.799401][ T38] #1: ffffc900048e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.799476][ T38] #2: ffff88805dd9ae58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 380.799538][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.799594][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.799651][ T38] 4 locks held by kworker/1:14/7067: [ 380.799663][ T38] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.799720][ T38] #1: ffffc9001c617bc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.799778][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.799833][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.799890][ T38] 1 lock held by dhcpcd/7069: [ 380.799902][ T38] #0: ffff88803a72d378 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 380.799961][ T38] 4 locks held by kworker/0:11/7071: [ 380.799973][ T38] #0: ffff88805c029538 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.800035][ T38] #1: ffffc9001c5c7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.800111][ T38] #2: ffff88805c1715f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x1c7/0xb00 [ 380.800167][ T38] #3: ffff88805dd9a3c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x267/0xb00 [ 380.800223][ T38] 4 locks held by kworker/0:12/7072: [ 380.800236][ T38] #0: ffff88805c02ad38 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.800298][ T38] #1: ffffc9001c5b7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.800372][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.800428][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.800484][ T38] 1 lock held by dhcpcd/7075: [ 380.800496][ T38] #0: ffff88805d97aaf8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 380.800563][ T38] 6 locks held by kworker/u8:25/7077: [ 380.800575][ T38] #0: ffff88805ba68938 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.800636][ T38] #1: ffffc9001c797bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.800694][ T38] #2: ffff8880359115f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 380.800750][ T38] #3: ffff888023134e20 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 380.800804][ T38] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.800860][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.800917][ T38] 1 lock held by dhcpcd/7079: [ 380.800928][ T38] #0: ffff88805d97b878 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 380.800988][ T38] 5 locks held by kworker/u8:26/7081: [ 380.801000][ T38] #0: ffff88802f927938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.801057][ T38] #1: ffffc90004927bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.801115][ T38] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 380.801171][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.801226][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.801283][ T38] 4 locks held by kworker/0:13/7082: [ 380.801295][ T38] #0: ffff88805bb4d938 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.801357][ T38] #1: ffffc9001d7d7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.801432][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.801488][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.801555][ T38] 5 locks held by kworker/0:14/7084: [ 380.801567][ T38] #0: ffff88805b9bb538 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.801629][ T38] #1: ffffc9001c677bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.801704][ T38] #2: ffff888023137880 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 380.801759][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.801815][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.801872][ T38] 4 locks held by kworker/0:15/7085: [ 380.801884][ T38] #0: ffff88805b607938 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.801950][ T38] #1: ffffc9001c657bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.802025][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.802081][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.802138][ T38] 4 locks held by kworker/u8:28/7088: [ 380.802151][ T38] #0: ffff88805ba6b938 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.802213][ T38] #1: ffffc9001c637bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.802270][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.802327][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.802385][ T38] 4 locks held by syz-executor/7091: [ 380.802397][ T38] #0: ffff88803a72ccb8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 380.802456][ T38] #1: ffff88805cb54350 (sk_lock-AF_BLUETOOTH-BTPROTO_HCI){+.+.}-{0:0}, at: hci_sock_release+0x5b/0x540 [ 380.802526][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.802581][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.802637][ T38] 7 locks held by kworker/u8:29/7092: [ 380.802650][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.802706][ T38] #1: ffffc9001c597bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.802766][ T38] #2: ffff88803b326300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 380.802830][ T38] #3: ffff88805d160520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 380.802893][ T38] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 380.802948][ T38] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 380.803004][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 380.803060][ T38] 2 locks held by syz-executor/7093: [ 380.803073][ T38] 2 locks held by kworker/0:17/7094: [ 380.803087][ T38] 1 lock held by dhcpcd/7096: [ 380.803098][ T38] #0: ffff8880315f6350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 380.803156][ T38] 1 lock held by dhcpcd/7098: [ 380.803168][ T38] #0: ffff88805df8e350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 380.803224][ T38] 1 lock held by dhcpcd/7100: [ 380.803236][ T38] #0: ffff8880351be350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 380.803292][ T38] 2 locks held by syz-executor/7101: [ 380.803307][ T38] [ 380.803313][ T38] ============================================= [ 380.803313][ T38] [ 380.803344][ T38] NMI backtrace for cpu 1 [ 380.803374][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 380.803399][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 380.803412][ T38] Call Trace: [ 380.803438][ T38] [ 380.803448][ T38] dump_stack_lvl+0x189/0x250 [ 380.803485][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.803524][ T38] ? __pfx__printk+0x10/0x10 [ 380.803562][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 380.803593][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 380.803624][ T38] ? __pfx__printk+0x10/0x10 [ 380.803652][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 380.803682][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 380.803713][ T38] watchdog+0xf93/0xfe0 [ 380.803748][ T38] ? watchdog+0x1de/0xfe0 [ 380.803782][ T38] kthread+0x70e/0x8a0 [ 380.803819][ T38] ? __pfx_watchdog+0x10/0x10 [ 380.803846][ T38] ? __pfx_kthread+0x10/0x10 [ 380.803884][ T38] ? __pfx_kthread+0x10/0x10 [ 380.803918][ T38] ret_from_fork+0x439/0x7d0 [ 380.803949][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 380.803984][ T38] ? __switch_to_asm+0x39/0x70 [ 380.804003][ T38] ? __switch_to_asm+0x33/0x70 [ 380.804022][ T38] ? __pfx_kthread+0x10/0x10 [ 380.804056][ T38] ret_from_fork_asm+0x1a/0x30 [ 380.804094][ T38] [ 380.804102][ T38] Sending NMI from CPU 1 to CPUs 0: [ 380.804138][ C0] NMI backtrace for cpu 0 [ 380.804154][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 380.804174][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 380.804190][ C0] RIP: 0010:stack_trace_consume_entry+0x123/0x280 [ 380.804214][ C0] Code: 89 f3 49 89 d4 4c 89 c5 e8 aa b5 72 00 49 89 e8 4c 89 e2 48 89 de 49 89 37 41 8b 18 41 0f b6 44 15 00 84 c0 0f 85 34 01 00 00 <41> 3b 1e 0f 92 c0 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 54 [ 380.804229][ C0] RSP: 0018:ffffc90000156a78 EFLAGS: 00000246 [ 380.804245][ C0] RAX: 0000000000000000 RBX: 0000000000000013 RCX: 47c3cd66ab62a900 [ 380.804257][ C0] RDX: dffffc0000000000 RSI: ffffffff8184e71f RDI: ffffc90000156b80 [ 380.804271][ C0] RBP: 1ffff9200002ad72 R08: ffffc90000156b90 R09: 0000000000000012 [ 380.804284][ C0] R10: ffffc90000156b18 R11: ffffffff81aaf310 R12: 0000000000000000 [ 380.804296][ C0] R13: 1ffff9200002ad71 R14: ffffc90000156b88 R15: ffffc90000156ca0 [ 380.804310][ C0] FS: 0000000000000000(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 380.804325][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 380.804337][ C0] CR2: 00007fee066e8740 CR3: 000000003506a000 CR4: 00000000003526f0 [ 380.804353][ C0] Call Trace: [ 380.804359][ C0] [ 380.804365][ C0] ? handle_softirqs+0x22f/0x710 [ 380.804390][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 380.804410][ C0] arch_stack_walk+0x10d/0x150 [ 380.804441][ C0] ? handle_softirqs+0x22f/0x710 [ 380.804466][ C0] stack_trace_save+0x9c/0xe0 [ 380.804484][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 380.804505][ C0] ? ip6_finish_output2+0x710/0x1720 [ 380.804532][ C0] ? __lock_acquire+0xab9/0xd20 [ 380.804556][ C0] kasan_save_track+0x3e/0x80 [ 380.804576][ C0] ? kasan_save_track+0x3e/0x80 [ 380.804596][ C0] ? kasan_save_free_info+0x46/0x50 [ 380.804612][ C0] ? __kasan_slab_free+0x5b/0x80 [ 380.804632][ C0] ? kmem_cache_free+0x195/0x510 [ 380.804657][ C0] ? skb_release_data+0x62d/0x7c0 [ 380.804672][ C0] ? consume_skb+0x9e/0xf0 [ 380.804698][ C0] ? nft_synproxy_eval_v6+0x376/0x560 [ 380.804717][ C0] ? nft_synproxy_do_eval+0x3d7/0x570 [ 380.804741][ C0] ? nft_do_chain+0x409/0x1920 [ 380.804764][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 380.804784][ C0] ? nf_hook_slow+0xc5/0x220 [ 380.804808][ C0] ? NF_HOOK+0x206/0x3a0 [ 380.804830][ C0] ? ip6_input+0x16a/0x270 [ 380.804853][ C0] ? NF_HOOK+0x309/0x3a0 [ 380.804874][ C0] ? __netif_receive_skb+0xd3/0x380 [ 380.804896][ C0] ? process_backlog+0x31e/0x900 [ 380.804919][ C0] ? __napi_poll+0xb3/0x540 [ 380.804939][ C0] ? net_rx_action+0x707/0xe00 [ 380.804961][ C0] ? handle_softirqs+0x22f/0x710 [ 380.805006][ C0] kasan_save_free_info+0x46/0x50 [ 380.805023][ C0] __kasan_slab_free+0x5b/0x80 [ 380.805044][ C0] ? skb_release_data+0x62d/0x7c0 [ 380.805060][ C0] kmem_cache_free+0x195/0x510 [ 380.805088][ C0] skb_release_data+0x62d/0x7c0 [ 380.805110][ C0] consume_skb+0x9e/0xf0 [ 380.805138][ C0] nft_synproxy_eval_v6+0x376/0x560 [ 380.805161][ C0] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 380.805182][ C0] ? nf_ip_checksum+0x13c/0x510 [ 380.805203][ C0] nft_synproxy_do_eval+0x3d7/0x570 [ 380.805226][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 380.805255][ C0] nft_do_chain+0x409/0x1920 [ 380.805282][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 380.805299][ C0] ? ipv6_find_hdr+0xc78/0x1050 [ 380.805347][ C0] nft_do_chain_inet+0x25d/0x340 [ 380.805364][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 380.805383][ C0] ? __lock_acquire+0xab9/0xd20 [ 380.805412][ C0] ? NF_HOOK+0x9a/0x3a0 [ 380.805436][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 380.805455][ C0] nf_hook_slow+0xc5/0x220 [ 380.805483][ C0] NF_HOOK+0x206/0x3a0 [ 380.805508][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 380.805534][ C0] ? NF_HOOK+0x9a/0x3a0 [ 380.805557][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 380.805582][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 380.805613][ C0] ip6_input+0x16a/0x270 [ 380.805636][ C0] ? ip6_input+0x23/0x270 [ 380.805662][ C0] NF_HOOK+0x309/0x3a0 [ 380.805685][ C0] ? skb_orphan+0xaf/0xd0 [ 380.805709][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 380.805732][ C0] ? NF_HOOK+0x9a/0x3a0 [ 380.805760][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 380.805785][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 380.805816][ C0] __netif_receive_skb+0xd3/0x380 [ 380.805837][ C0] ? rt_spin_unlock+0x65/0x80 [ 380.805862][ C0] ? process_backlog+0x27b/0x900 [ 380.805886][ C0] process_backlog+0x31e/0x900 [ 380.805917][ C0] __napi_poll+0xb3/0x540 [ 380.805941][ C0] net_rx_action+0x707/0xe00 [ 380.805965][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 380.806001][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 380.806046][ C0] handle_softirqs+0x22f/0x710 [ 380.806073][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 380.806103][ C0] run_ktimerd+0xcf/0x190 [ 380.806128][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 380.806152][ C0] ? schedule+0x91/0x360 [ 380.806181][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 380.806204][ C0] smpboot_thread_fn+0x53f/0xa60 [ 380.806227][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 380.806254][ C0] kthread+0x70e/0x8a0 [ 380.806283][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 380.806306][ C0] ? __pfx_kthread+0x10/0x10 [ 380.806336][ C0] ? __pfx_kthread+0x10/0x10 [ 380.806364][ C0] ret_from_fork+0x439/0x7d0 [ 380.806389][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 380.806416][ C0] ? __switch_to_asm+0x39/0x70 [ 380.806433][ C0] ? __switch_to_asm+0x33/0x70 [ 380.806449][ C0] ? __pfx_kthread+0x10/0x10 [ 380.806477][ C0] ret_from_fork_asm+0x1a/0x30 [ 380.806503][ C0] [ 382.416758][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 382.416785][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 382.416811][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 382.416825][ T38] Call Trace: [ 382.416835][ T38] [ 382.416846][ T38] dump_stack_lvl+0x99/0x250 [ 382.416885][ T38] ? __asan_memcpy+0x40/0x70 [ 382.416909][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.416941][ T38] ? __pfx__printk+0x10/0x10 [ 382.416980][ T38] vpanic+0x281/0x750 [ 382.417016][ T38] ? __pfx_vpanic+0x10/0x10 [ 382.417048][ T38] ? preempt_schedule+0xae/0xc0 [ 382.417082][ T38] ? preempt_schedule_common+0x83/0xd0 [ 382.417121][ T38] panic+0xb9/0xc0 [ 382.417152][ T38] ? __pfx_panic+0x10/0x10 [ 382.417185][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 382.417219][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 382.417251][ T38] watchdog+0xfd2/0xfe0 [ 382.417285][ T38] ? watchdog+0x1de/0xfe0 [ 382.417321][ T38] kthread+0x70e/0x8a0 [ 382.417358][ T38] ? __pfx_watchdog+0x10/0x10 [ 382.417386][ T38] ? __pfx_kthread+0x10/0x10 [ 382.417424][ T38] ? __pfx_kthread+0x10/0x10 [ 382.417458][ T38] ret_from_fork+0x439/0x7d0 [ 382.417491][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 382.417527][ T38] ? __switch_to_asm+0x39/0x70 [ 382.417554][ T38] ? __switch_to_asm+0x33/0x70 [ 382.417574][ T38] ? __pfx_kthread+0x10/0x10 [ 382.417609][ T38] ret_from_fork_asm+0x1a/0x30 [ 382.417647][ T38] [ 382.417937][ T38] Kernel Offset: disabled