last executing test programs: 2m17.11583706s ago: executing program 2 (id=267): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 2m16.775547649s ago: executing program 2 (id=270): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000240)='F', 0x1, 0x0, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0xe0}, 0x14) 2m16.268590665s ago: executing program 2 (id=276): syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f0010203010902"], 0x0) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x18, r2, 0x1, 0x81}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) 2m14.525426272s ago: executing program 1 (id=290): r0 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 2m14.514853699s ago: executing program 2 (id=291): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f00000005c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xa) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x23, &(0x7f0000000180)=""/48, &(0x7f0000000140)=0x30) shutdown(r0, 0x1) 2m13.926951635s ago: executing program 1 (id=293): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'veth1_vlan\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4e, 0xa, 0x3, 0x4, 0x9, 0x1, 0x5, 0x80, 0x41, 0x4, [0x8, 0x4, 0x400e1b, 0x1, 0x3, 0x7, 0x9, 0x3]}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="12000000050000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r2, &(0x7f0000000040)="33806bb6", 0x0}, 0x20) 2m13.926557496s ago: executing program 3 (id=294): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 2m13.429773306s ago: executing program 1 (id=296): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc1, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) ppoll(&(0x7f00000000c0)=[{r1, 0x2004}], 0x1, 0x0, 0x0, 0x0) 2m13.300065383s ago: executing program 2 (id=297): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000300), 0x0, 0x44000, &(0x7f0000000200)={0x11, 0xf6, r1, 0x1, 0xfe, 0x6, @random="7483ccb17b06"}, 0x14) 2m12.415950891s ago: executing program 3 (id=300): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8004) write$nci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="414601", @ANYRES32=r1], 0x4) 2m11.969180078s ago: executing program 4 (id=301): futex(&(0x7f000000cffc), 0x5, 0x300, 0x0, &(0x7f00000000c0), 0xf2ffffff) 2m10.813966848s ago: executing program 0 (id=302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80045510, &(0x7f0000000000)) 2m10.813398031s ago: executing program 4 (id=303): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r2, 0x0) accept4$rose(r2, 0x0, 0x0, 0x0) 2m10.81282708s ago: executing program 3 (id=304): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x36}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in6=@private1, 0x3501, 0x5, 0x0, 0x0, 0x0, 0x9}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m10.812128321s ago: executing program 0 (id=305): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, 0x0, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r1, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) 2m6.972675995s ago: executing program 3 (id=306): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001214010027bd7000ffdbdf250800010001000000080015000000000008004b00130000000800"], 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x4008804) 2m6.962397221s ago: executing program 0 (id=307): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) 2m6.96176055s ago: executing program 1 (id=308): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0xee01, r0) 2m6.592971722s ago: executing program 2 (id=309): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc1, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) ppoll(&(0x7f00000000c0)=[{r0, 0x2004}], 0x1, 0x0, 0x0, 0x0) 2m6.592663901s ago: executing program 4 (id=310): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x306) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000080)=r3, 0x12) 2m2.45595836s ago: executing program 3 (id=311): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010100}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 2m1.855786181s ago: executing program 1 (id=312): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0)="4ac77d33bf1d2de1c6898b74", 0xc) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 1m56.732002949s ago: executing program 4 (id=313): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/222, 0x1e}], 0x5b) 1m56.727306575s ago: executing program 0 (id=314): socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 1m49.416709189s ago: executing program 32 (id=309): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc1, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) ppoll(&(0x7f00000000c0)=[{r0, 0x2004}], 0x1, 0x0, 0x0, 0x0) 1m49.260136039s ago: executing program 1 (id=316): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02f0ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000114000c10000500000000000000", 0x58}], 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000003a40)=ANY=[@ANYBLOB="4c0000001400010125bd7000fcdbdf2501"], 0x4c}, 0x1, 0x0, 0x0, 0x200480c8}, 0x40020888) 1m49.259652418s ago: executing program 3 (id=317): socket$key(0xf, 0x3, 0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r1, 0x0, 0x40011) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1m49.259510566s ago: executing program 4 (id=318): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, 0x0, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r1, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) 1m49.241506456s ago: executing program 0 (id=319): socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x7, 0x10003}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 1m46.943330673s ago: executing program 4 (id=320): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10) bind$tipc(r0, 0x0, 0x0) 1m25.455292382s ago: executing program 0 (id=321): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000500)={0x14, 0x4, 0x5}) 1m20.01351535s ago: executing program 33 (id=316): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02f0ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000114000c10000500000000000000", 0x58}], 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000003a40)=ANY=[@ANYBLOB="4c0000001400010125bd7000fcdbdf2501"], 0x4c}, 0x1, 0x0, 0x0, 0x200480c8}, 0x40020888) 1m12.538654327s ago: executing program 34 (id=317): socket$key(0xf, 0x3, 0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r1, 0x0, 0x40011) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1m3.292211945s ago: executing program 35 (id=320): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10) bind$tipc(r0, 0x0, 0x0) 44.998811437s ago: executing program 36 (id=321): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000500)={0x14, 0x4, 0x5}) 0s ago: executing program 6 (id=322): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.107' (ED25519) to the list of known hosts. [ 90.127377][ T5828] cgroup: Unknown subsys name 'net' [ 90.367908][ T5828] cgroup: Unknown subsys name 'cpuset' [ 90.403135][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.136458][ T1238] cfg80211: failed to load regulatory.db [ 92.366590][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.371874][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.376169][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.384123][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.385800][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.386942][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.457988][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.478216][ T5159] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.495785][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.510537][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.513988][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.520826][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.526601][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.527593][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.529177][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.530247][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.533138][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.571056][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.581305][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.584435][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.585371][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.615568][ T5159] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.617724][ T5159] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.618480][ T5159] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.642419][ T5159] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.652940][ T5159] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.411640][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 96.811142][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 96.820742][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 96.830953][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 97.345191][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 97.351591][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.353333][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.354025][ T5838] bridge_slave_0: entered allmulticast mode [ 97.357569][ T5838] bridge_slave_0: entered promiscuous mode [ 97.416815][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.416937][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.417081][ T5838] bridge_slave_1: entered allmulticast mode [ 97.419242][ T5838] bridge_slave_1: entered promiscuous mode [ 97.484353][ T5159] Bluetooth: hci0: command tx timeout [ 97.642514][ T5159] Bluetooth: hci1: command tx timeout [ 97.642521][ T5849] Bluetooth: hci2: command tx timeout [ 97.722533][ T5849] Bluetooth: hci4: command tx timeout [ 97.810750][ T5849] Bluetooth: hci3: command tx timeout [ 98.039607][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.267565][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.267829][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.268013][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.268145][ T5843] bridge_slave_0: entered allmulticast mode [ 98.270020][ T5843] bridge_slave_0: entered promiscuous mode [ 98.271671][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.271809][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.271986][ T5844] bridge_slave_0: entered allmulticast mode [ 98.276174][ T5844] bridge_slave_0: entered promiscuous mode [ 98.280195][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.280352][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.280566][ T5842] bridge_slave_0: entered allmulticast mode [ 98.284371][ T5842] bridge_slave_0: entered promiscuous mode [ 98.425457][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.425610][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.425769][ T5843] bridge_slave_1: entered allmulticast mode [ 98.427655][ T5843] bridge_slave_1: entered promiscuous mode [ 98.428992][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.429128][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.429317][ T5844] bridge_slave_1: entered allmulticast mode [ 98.431245][ T5844] bridge_slave_1: entered promiscuous mode [ 98.435252][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.435404][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.435646][ T5842] bridge_slave_1: entered allmulticast mode [ 98.438770][ T5842] bridge_slave_1: entered promiscuous mode [ 99.027852][ T5838] team0: Port device team_slave_0 added [ 99.363597][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.363832][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.364028][ T5846] bridge_slave_0: entered allmulticast mode [ 99.366103][ T5846] bridge_slave_0: entered promiscuous mode [ 99.399886][ T5838] team0: Port device team_slave_1 added [ 99.411766][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.424843][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.430059][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.430375][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.430515][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.430707][ T5846] bridge_slave_1: entered allmulticast mode [ 99.450254][ T5846] bridge_slave_1: entered promiscuous mode [ 99.553099][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.556390][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.559078][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.562549][ T5849] Bluetooth: hci0: command tx timeout [ 99.722694][ T5849] Bluetooth: hci1: command tx timeout [ 99.722728][ T5849] Bluetooth: hci2: command tx timeout [ 99.802903][ T5159] Bluetooth: hci4: command tx timeout [ 99.882394][ T5159] Bluetooth: hci3: command tx timeout [ 100.035348][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.035367][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.035396][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.398533][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.401271][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.401289][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.401317][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.411400][ T5843] team0: Port device team_slave_0 added [ 100.420096][ T5844] team0: Port device team_slave_0 added [ 100.426509][ T5842] team0: Port device team_slave_0 added [ 100.451875][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.483576][ T5843] team0: Port device team_slave_1 added [ 100.486835][ T5844] team0: Port device team_slave_1 added [ 100.489789][ T5842] team0: Port device team_slave_1 added [ 101.146469][ T5846] team0: Port device team_slave_0 added [ 101.150631][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.150644][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.150663][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.151985][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.151999][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.152027][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.156933][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.156950][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.156982][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.295098][ T5846] team0: Port device team_slave_1 added [ 101.296393][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.296407][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.296435][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.297856][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.297871][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.297898][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.299260][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.299273][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.299300][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.451894][ T5838] hsr_slave_0: entered promiscuous mode [ 101.455983][ T5838] hsr_slave_1: entered promiscuous mode [ 101.615623][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.615642][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.615670][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.652225][ T5159] Bluetooth: hci0: command tx timeout [ 101.767539][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.767560][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.767579][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.802405][ T5159] Bluetooth: hci2: command tx timeout [ 101.802441][ T5159] Bluetooth: hci1: command tx timeout [ 101.883517][ T5849] Bluetooth: hci4: command tx timeout [ 101.962532][ T5849] Bluetooth: hci3: command tx timeout [ 102.090090][ T5843] hsr_slave_0: entered promiscuous mode [ 102.091049][ T5843] hsr_slave_1: entered promiscuous mode [ 102.091808][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 102.091900][ T5843] Cannot create hsr debugfs directory [ 102.267434][ T5842] hsr_slave_0: entered promiscuous mode [ 102.268529][ T5842] hsr_slave_1: entered promiscuous mode [ 102.269233][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 102.269258][ T5842] Cannot create hsr debugfs directory [ 102.282133][ T5844] hsr_slave_0: entered promiscuous mode [ 102.293879][ T5844] hsr_slave_1: entered promiscuous mode [ 102.294998][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 102.295036][ T5844] Cannot create hsr debugfs directory [ 102.899943][ T5846] hsr_slave_0: entered promiscuous mode [ 102.901346][ T5846] hsr_slave_1: entered promiscuous mode [ 102.906943][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 102.906976][ T5846] Cannot create hsr debugfs directory [ 103.722441][ T5849] Bluetooth: hci0: command tx timeout [ 103.882618][ T5849] Bluetooth: hci1: command tx timeout [ 103.882627][ T5159] Bluetooth: hci2: command tx timeout [ 103.962970][ T5159] Bluetooth: hci4: command tx timeout [ 104.042323][ T5159] Bluetooth: hci3: command tx timeout [ 104.256506][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.303914][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.363592][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.410192][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.573109][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.641706][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.685604][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.750610][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.874340][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.915300][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.943160][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.991306][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.155728][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.196547][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.236273][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.314872][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.447967][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.496910][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.554333][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.611188][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.659284][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.730431][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.795078][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.795725][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.868393][ T3107] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.868615][ T3107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.914173][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.034450][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.061781][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.099361][ T3107] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.099792][ T3107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.150067][ T3572] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.150217][ T3572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.222621][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.246435][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.306976][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.307697][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.372318][ T3572] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.372464][ T3572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.421696][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.467473][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.485854][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.486481][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.603193][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.603345][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.728866][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.836215][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.836970][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.910704][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.912419][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.974861][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.203590][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.401441][ T5838] veth0_vlan: entered promiscuous mode [ 107.487445][ T5838] veth1_vlan: entered promiscuous mode [ 107.569589][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.625825][ T5843] veth0_vlan: entered promiscuous mode [ 107.696742][ T5843] veth1_vlan: entered promiscuous mode [ 107.802100][ T5838] veth0_macvtap: entered promiscuous mode [ 107.829940][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.845292][ T5838] veth1_macvtap: entered promiscuous mode [ 107.960760][ T5842] veth0_vlan: entered promiscuous mode [ 107.972963][ T5843] veth0_macvtap: entered promiscuous mode [ 108.003086][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.021182][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.023304][ T5843] veth1_macvtap: entered promiscuous mode [ 108.076852][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.077746][ T5842] veth1_vlan: entered promiscuous mode [ 108.133787][ T3596] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.161093][ T3596] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.184789][ T3596] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.210012][ T3596] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.231275][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.335571][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.453948][ T3586] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.514776][ T3586] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.529084][ T3586] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.544335][ T3586] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.569145][ T5842] veth0_macvtap: entered promiscuous mode [ 108.618788][ T5846] veth0_vlan: entered promiscuous mode [ 108.663903][ T5842] veth1_macvtap: entered promiscuous mode [ 108.803324][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.803351][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.842802][ T5846] veth1_vlan: entered promiscuous mode [ 108.920142][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.001655][ T5844] veth0_vlan: entered promiscuous mode [ 109.010624][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.041843][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.041866][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.120166][ T1317] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.137008][ T3586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.137030][ T3586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.150199][ T1317] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.166941][ T5844] veth1_vlan: entered promiscuous mode [ 109.187243][ T1317] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.207273][ T1317] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.441861][ T3572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.441881][ T3572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.458196][ T5846] veth0_macvtap: entered promiscuous mode [ 109.616594][ T5846] veth1_macvtap: entered promiscuous mode [ 109.877176][ T5844] veth0_macvtap: entered promiscuous mode [ 110.169371][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.169393][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.199292][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.208111][ T5844] veth1_macvtap: entered promiscuous mode [ 110.338342][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.473570][ T3107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.473592][ T3107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.477385][ T1174] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.481788][ T1174] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.519639][ T1174] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.538782][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.563842][ T1174] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.651098][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.763004][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.805588][ T3107] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.811047][ T3107] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.813686][ T3107] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.830679][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.962396][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.962430][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.962481][ T31] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 110.962505][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.037395][ T31] usb 4-1: config 0 descriptor?? [ 111.197326][ T5981] Zero length message leads to an empty skb [ 111.252136][ T759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.253176][ T759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.422748][ T5981] syz.0.9 (5981) used greatest stack depth: 17752 bytes left [ 111.966750][ T3107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.966773][ T3107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.085043][ T3107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.085065][ T3107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.241193][ T5992] syz.1.13 uses obsolete (PF_INET,SOCK_PACKET) [ 112.315358][ T31] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #100: -71 [ 112.315423][ T31] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 112.315441][ T31] uclogic 0003:256C:006D.0001: failed probing pen v1 parameters: -71 [ 112.315493][ T31] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 112.315595][ T31] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 112.439082][ T31] usb 4-1: USB disconnect, device number 2 [ 112.710058][ T759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.710081][ T759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.187422][ T6005] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.271106][ T6023] mmap: syz.0.23 (6023) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 114.391378][ T6031] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 114.391421][ T6031] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 114.391441][ T6031] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 116.331631][ T6064] capability: warning: `syz.2.36' uses 32-bit capabilities (legacy support in use) [ 120.482245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.682231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.682287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.082269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.082310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.282242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.282280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.882708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.882766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.473452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.632326][ T5893] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 126.762343][ T5893] usb 3-1: device descriptor read/64, error -71 [ 127.063051][ T5893] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 127.413245][ T5893] usb 3-1: device descriptor read/64, error -71 [ 128.501760][ T5893] usb usb3-port1: attempt power cycle [ 128.610973][ T6172] netlink: 12 bytes leftover after parsing attributes in process `syz.4.72'. [ 128.902433][ T5893] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 128.922515][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 128.922658][ T5893] usb 3-1: device descriptor read/8, error -32 [ 129.112970][ T6177] ======================================================= [ 129.112970][ T6177] WARNING: The mand mount option has been deprecated and [ 129.112970][ T6177] and is ignored by this kernel. Remove the mand [ 129.112970][ T6177] option from the mount to silence this warning. [ 129.112970][ T6177] ======================================================= [ 130.462694][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 130.592408][ T10] usb 3-1: device descriptor read/64, error -71 [ 130.846286][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 130.993627][ T10] usb 3-1: device descriptor read/64, error -71 [ 131.079225][ T6221] 9pnet: p9_errstr2errno: server reported unknown error [ 131.103367][ T10] usb usb3-port1: attempt power cycle [ 131.462628][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 131.495315][ T10] usb 3-1: device descriptor read/8, error -71 [ 131.752420][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 131.773305][ T10] usb 3-1: device descriptor read/8, error -71 [ 131.882948][ T10] usb usb3-port1: unable to enumerate USB device [ 132.374853][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.100'. [ 133.645920][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.115'. [ 134.822532][ T5893] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 134.952636][ T5893] usb 1-1: device descriptor read/64, error -71 [ 135.192284][ T5893] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 135.322618][ T5893] usb 1-1: device descriptor read/64, error -71 [ 135.432999][ T5893] usb usb1-port1: attempt power cycle [ 135.726852][ T6324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.132'. [ 135.752313][ T5917] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 135.773008][ T5893] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 135.793121][ T5893] usb 1-1: device descriptor read/8, error -71 [ 135.905342][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 135.905378][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.905422][ T5917] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 135.905447][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.975347][ T5917] usb 2-1: config 0 descriptor?? [ 136.042309][ T5893] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 136.063651][ T5893] usb 1-1: device descriptor read/8, error -71 [ 136.176377][ T5893] usb usb1-port1: unable to enumerate USB device [ 136.424769][ T5917] lua 0003:1E7D:2C2E.0002: unknown global tag 0xc [ 136.424793][ T5917] lua 0003:1E7D:2C2E.0002: item 0 0 1 12 parsing failed [ 136.425632][ T5917] lua 0003:1E7D:2C2E.0002: parse failed [ 136.425708][ T5917] lua 0003:1E7D:2C2E.0002: probe with driver lua failed with error -22 [ 136.492357][ T5893] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 136.635248][ T5917] usb 2-1: USB disconnect, device number 2 [ 136.667098][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.667155][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 136.667198][ T5893] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 136.667220][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.706290][ T5893] usb 5-1: config 0 descriptor?? [ 137.623786][ T5893] ath6kl: Failed to submit usb control message: -71 [ 137.623841][ T5893] ath6kl: unable to send the bmi data to the device: -71 [ 137.623858][ T5893] ath6kl: Unable to send get target info: -71 [ 137.635974][ T5893] ath6kl: Failed to init ath6kl core: -71 [ 137.972945][ T5893] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 137.995875][ T5893] usb 5-1: USB disconnect, device number 2 [ 138.231495][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.231598][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.512300][ T1238] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 140.683750][ T5159] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 140.683777][ T1238] usb 1-1: Using ep0 maxpacket: 32 [ 140.688062][ T1238] usb 1-1: no configurations [ 140.688081][ T1238] usb 1-1: can't read configurations, error -22 [ 140.822280][ T1238] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 141.002543][ T1238] usb 1-1: Using ep0 maxpacket: 32 [ 141.024353][ T1238] usb 1-1: no configurations [ 141.024367][ T1238] usb 1-1: can't read configurations, error -22 [ 141.024638][ T1238] usb usb1-port1: attempt power cycle [ 141.212576][ T5893] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 141.362519][ T1238] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 141.387688][ T1238] usb 1-1: Using ep0 maxpacket: 32 [ 141.389035][ T1238] usb 1-1: no configurations [ 141.389052][ T1238] usb 1-1: can't read configurations, error -22 [ 141.404130][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 141.424074][ T5893] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 141.424106][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.464005][ T5893] usb 2-1: config 0 descriptor?? [ 141.554020][ T1238] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 141.585120][ T1238] usb 1-1: Using ep0 maxpacket: 32 [ 141.605147][ T1238] usb 1-1: no configurations [ 141.605167][ T1238] usb 1-1: can't read configurations, error -22 [ 141.608281][ T1238] usb usb1-port1: unable to enumerate USB device [ 141.742442][ T5893] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 142.357708][ T5893] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 142.357744][ T5893] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 142.386162][ T5893] asix 2-1:0.0: probe with driver asix failed with error -71 [ 142.423064][ T5893] usb 2-1: USB disconnect, device number 3 [ 144.078534][ T6423] netlink: 'syz.4.170': attribute type 29 has an invalid length. [ 144.105995][ T6423] netlink: 'syz.4.170': attribute type 29 has an invalid length. [ 147.804393][ T6483] netlink: 28 bytes leftover after parsing attributes in process `syz.1.194'. [ 147.804511][ T6483] netlink: 28 bytes leftover after parsing attributes in process `syz.1.194'. [ 147.804533][ T6483] netlink: 52 bytes leftover after parsing attributes in process `syz.1.194'. [ 148.449984][ T6495] netlink: 60 bytes leftover after parsing attributes in process `syz.4.199'. [ 148.465231][ T6495] netlink: 60 bytes leftover after parsing attributes in process `syz.4.199'. [ 148.465915][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.199'. [ 148.948185][ T6502] binder: 6500:6502 ioctl c0306201 200000000080 returned -14 [ 148.965426][ T6501] netlink: 'syz.2.201': attribute type 39 has an invalid length. [ 149.553726][ T6511] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 151.032796][ T6531] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 152.528937][ T6565] netlink: 'syz.2.227': attribute type 7 has an invalid length. [ 153.200820][ T6581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.234'. [ 154.042306][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 154.192974][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 154.211697][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.211725][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 154.256844][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 154.256875][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.256896][ T10] usb 2-1: Product: syz [ 154.256912][ T10] usb 2-1: Manufacturer: syz [ 154.256927][ T10] usb 2-1: SerialNumber: syz [ 154.298420][ T10] usb 2-1: config 0 descriptor?? [ 154.481979][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.524356][ T5917] usb 2-1: USB disconnect, device number 4 [ 154.892015][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.248'. [ 155.225878][ C0] vkms_vblank_simulate: vblank timer overrun [ 155.440109][ T6618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.457389][ T1517] Bluetooth: hci5: Frame reassembly failed (-84) [ 155.460387][ T3572] Bluetooth: hci5: Frame reassembly failed (-84) [ 156.203365][ T6641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.260'. [ 156.226090][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.542357][ T5917] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 156.692646][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 156.708378][ T5917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.708411][ T5917] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 156.777937][ T5917] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 156.777970][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.777991][ T5917] usb 4-1: Product: syz [ 156.778005][ T5917] usb 4-1: Manufacturer: syz [ 156.778020][ T5917] usb 4-1: SerialNumber: syz [ 156.824447][ T5917] usb 4-1: config 0 descriptor?? [ 156.857659][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.048112][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.056499][ T5917] usb 4-1: USB disconnect, device number 3 [ 157.241710][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.482323][ T5159] Bluetooth: hci5: command 0x1003 tx timeout [ 157.485162][ T5849] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 158.036308][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.846810][ T5849] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 158.846919][ T5849] Bluetooth: hci0: Injecting HCI hardware error event [ 158.848525][ T5159] Bluetooth: hci0: hardware error 0x00 [ 159.026596][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.113267][ T5932] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 159.272299][ T5932] usb 3-1: Using ep0 maxpacket: 32 [ 159.275305][ T5932] usb 3-1: config 0 has no interfaces? [ 159.293397][ T5932] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 159.293429][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.293450][ T5932] usb 3-1: Product: syz [ 159.293465][ T5932] usb 3-1: Manufacturer: syz [ 159.293480][ T5932] usb 3-1: SerialNumber: syz [ 159.342008][ T5932] usb 3-1: config 0 descriptor?? [ 159.812893][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.843266][ T5917] usb 3-1: USB disconnect, device number 10 [ 160.765257][ T6728] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 161.162556][ T5159] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 161.744780][ T6747] warning: `syz.0.295' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 161.887872][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.011942][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.111718][ T6736] syz.3.294 (6736) used greatest stack depth: 16760 bytes left [ 162.652587][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.687631][ T6758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.299'. [ 163.227983][ T6769] futex_wake_op: syz.4.301 tries to shift op by -1; fix this program [ 183.272176][ C1] sched: DL replenish lagged too much [ 203.839529][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 203.845817][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 203.846981][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 203.848296][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 203.849149][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 207.219392][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 207.228719][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.399033][ T5159] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 211.399629][ T5159] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 211.400065][ T5159] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 211.401329][ T5159] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 211.402298][ T5159] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 219.114446][ T5159] Bluetooth: hci5: command tx timeout [ 221.530843][ T5849] Bluetooth: hci5: command tx timeout [ 223.088711][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 224.293659][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 224.293705][ T5849] Bluetooth: hci5: command tx timeout [ 224.774083][ T5855] Bluetooth: hci3: command 0x0406 tx timeout [ 226.387685][ T5855] Bluetooth: hci5: command tx timeout [ 247.633823][ T5852] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 247.673590][ T5852] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 247.909357][ T5852] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 248.644253][ T6877] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 248.649747][ T5852] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 248.801363][ T5852] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 249.088884][ T5852] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 251.712857][ T6869] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 256.898122][ T5855] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 256.898568][ T5855] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 256.898983][ T5855] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 256.901714][ T5855] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 258.895525][ T5849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 261.626481][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.643719][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.975745][ T5852] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 263.985333][ T5852] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 263.986608][ T5852] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 264.986063][ T5852] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 264.986929][ T5852] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 271.178204][ T5852] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 271.186359][ T5852] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 271.187511][ T5852] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 271.188966][ T5852] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 271.194287][ T5852] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 276.166907][ T5855] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 277.351881][ T5855] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 278.150089][ T6877] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 278.174677][ T6877] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 278.176194][ T6877] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 279.400156][ T6877] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 279.752392][ T6877] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 281.429911][ T6877] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 284.513550][ T6886] Bluetooth: hci8: Opcode 0x1005 failed: -110 [ 316.022254][ T5855] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 317.172388][ T5841] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 317.718580][ T6903] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 318.454504][ T5852] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 326.856039][ T5841] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 328.592241][ T5841] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 328.596106][ T5841] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 328.599101][ T5841] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 328.601838][ T5841] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 331.698004][ T5852] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 331.708350][ T5852] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 331.709427][ T5852] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 331.711556][ T5852] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 331.712428][ T5852] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 334.002675][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 334.019307][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.423847][ T5841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 334.439001][ T5841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 335.455265][ T5841] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 337.407663][ T5841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 337.408884][ T5841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 339.083480][ T6907] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 339.093098][ T6919] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 339.094743][ T6919] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 339.095992][ T6919] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 339.096822][ T6919] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 339.942854][ T39] INFO: task kworker/0:7:6836 blocked for more than 143 seconds. [ 339.942892][ T39] Not tainted syzkaller #0 [ 339.942904][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 339.942913][ T39] task:kworker/0:7 state:D stack:28296 pid:6836 tgid:6836 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 339.942992][ T39] Workqueue: events_power_efficient reg_check_chans_work [ 339.943032][ T39] Call Trace: [ 339.943040][ T39] [ 339.943056][ T39] __schedule+0x16f3/0x4c20 [ 339.943120][ T39] ? __pfx___schedule+0x10/0x10 [ 339.943179][ T39] rt_mutex_schedule+0x77/0xf0 [ 339.943202][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 339.943246][ T39] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 339.943279][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 339.943311][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 339.943340][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 339.943366][ T39] ? __lock_acquire+0xab9/0xd20 [ 339.943408][ T39] ? reg_check_chans_work+0x164/0xf30 [ 339.943441][ T39] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 339.943470][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 339.943504][ T39] ? reg_check_chans_work+0x164/0xf30 [ 339.943524][ T39] mutex_lock_nested+0x16a/0x1d0 [ 339.943557][ T39] reg_check_chans_work+0x164/0xf30 [ 339.943597][ T39] ? __pfx_reg_check_chans_work+0x10/0x10 [ 339.943620][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 339.943656][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 339.943689][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 339.943715][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 339.943746][ T39] process_scheduled_works+0xae1/0x17b0 [ 339.943807][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 339.943856][ T39] worker_thread+0x8a0/0xda0 [ 339.943915][ T39] kthread+0x711/0x8a0 [ 339.943952][ T39] ? __pfx_worker_thread+0x10/0x10 [ 339.943980][ T39] ? __pfx_kthread+0x10/0x10 [ 339.944020][ T39] ? __pfx_kthread+0x10/0x10 [ 339.944055][ T39] ret_from_fork+0x436/0x7d0 [ 339.944087][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 339.944123][ T39] ? __switch_to_asm+0x39/0x70 [ 339.944144][ T39] ? __switch_to_asm+0x33/0x70 [ 339.944164][ T39] ? __pfx_kthread+0x10/0x10 [ 339.944200][ T39] ret_from_fork_asm+0x1a/0x30 [ 339.944240][ [ 339.944240][ T39] [ 339.944277][ T39] [ 339.944277][ T39] Showing all locks held in the system: [ 339.944286][ T39] 4 locks held by kworker/0:0/9: [ 339.944299][ T39] 4 locks held by kworker/u8:0/12: [ 339.944312][ T39] #0: ffff8880362cc138 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.944376][ T39] #1: ffffc90000117bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.944441][ T39] #2: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.944497][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.944555][ T39] 2 locks held by ksoftirqd/0/15: [ 339.944567][ T39] #0: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.944622][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.944680][ T39] 2 locks held by rcuc/1/28: [ 339.944693][ T39] #0: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.944748][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.944804][ T39] 9 locks held by ktimers/1/29: [ 339.944817][ T39] 5 locks held by kworker/u8:2/37: [ 339.944830][ T39] 1 lock held by khungtaskd/39: [ 339.944842][ T39] #0: ffffffff8d9a8dc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 339.944894][ T39] 4 locks held by kworker/1:1/45: [ 339.944906][ T39] #0: ffff888057632938 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.944968][ T39] #1: ffffc90000b67bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.945043][ T39] #2: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.945098][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.945156][ T39] 5 locks held by kworker/u9:0/59: [ 339.945168][ T39] #0: ffff888028ef7938 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.945225][ T39] #1: ffffc9000125fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.945282][ T39] #2: ffff888038484e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 339.945336][ T39] #3: ffff8880384840a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 339.945397][ T39] #4: ffffffff8ee3b358 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 339.945471][ T39] 5 locks held by kworker/u8:5/148: [ 339.945483][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.945541][ T39] #1: ffffc90003a27bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.945598][ T39] #2: ffff88805acc0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 339.945659][ T39] #3: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.945714][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.945771][ T39] 6 locks held by kworker/u8:6/759: [ 339.945783][ T39] #0: ffff8880577c4138 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.945845][ T39] #1: ffffc90003ee7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.945902][ T39] #2: ffff88805790d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 339.945960][ T39] #3: ffff888059684e20 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 339.946016][ T39] #4: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.946071][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.946131][ T39] 4 locks held by kworker/u8:7/1174: [ 339.946144][ T39] #0: ffff88814d54c938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.946199][ T39] #1: ffffc90004b37bc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.946257][ T39] #2: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.946313][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.946370][ T39] 6 locks held by kworker/0:2/1238: [ 339.946382][ T39] #0: ffff888057763538 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.946450][ T39] #1: ffffc90004d27bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.946526][ T39] #2: ffff888039f955f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x115/0x970 [ 339.946582][ T39] #3: ffff888059686350 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x126/0x970 [ 339.946638][ T39] #4: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.946693][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.946750][ T39] 5 locks held by kworker/u8:8/1303: [ 339.946762][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.946820][ T39] #1: ffffc90004f87bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.946876][ T39] #2: ffff88805b9b0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 339.946937][ T39] #3: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.946992][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.947049][ T39] 5 locks held by kworker/u8:9/1317: [ 339.947061][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.947117][ T39] #1: ffffc90004ea7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.947174][ T39] #2: ffff88805aae0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 339.947234][ T39] #3: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.947289][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.947346][ T39] 5 locks held by kworker/u8:10/1517: [ 339.947359][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.947421][ T39] #1: ffffc90005747bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.947479][ T39] #2: ffff88805be10898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 339.947539][ T39] #3: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.947594][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.947662][ T39] 5 locks held by kworker/u8:11/3107: [ 339.947674][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.947731][ T39] #1: ffffc9000d2a7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.947787][ T39] #2: ffff88805b190898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 339.947847][ T39] #3: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.947903][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.947960][ T39] 3 locks held by kworker/R-ipv6_/3228: [ 339.947973][ T39] #0: ffff88814d15c938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.948030][ T39] #1: ffffc9000d5a7ba0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.948088][ T39] #2: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 339.948147][ T39] 5 locks held by kworker/u8:12/3515: [ 339.948159][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.948213][ T39] #1: ffffc9000d9d7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.948266][ T39] #2: ffff88805af60898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 339.948324][ T39] #3: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.948377][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.948444][ T39] 5 locks held by kworker/u8:15/3596: [ 339.948456][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.948512][ T39] #1: ffffc9000dda7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.948568][ T39] #2: ffff88805aa00898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 339.948627][ T39] #3: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.948682][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.948738][ T39] 6 locks held by kworker/u8:16/3598: [ 339.948751][ T39] #0: ffff888057df2938 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.948813][ T39] #1: ffffc9000de57bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.948870][ T39] #2: ffff88803b8295f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 339.948925][ T39] #3: ffff88803bdf1928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 339.948980][ T39] #4: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.949035][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.949092][ T39] 4 locks held by kworker/u9:1/5159: [ 339.949104][ T39] #0: ffff8880268b8938 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.949161][ T39] #1: ffffc9001007fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.949218][ T39] #2: ffff88803d918e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 339.949270][ T39] #3: ffff88803d9180a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 339.949333][ T39] 2 locks held by getty/5600: [ 339.949345][ T39] #0: ffff88823bf7a8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 339.949395][ T39] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 339.949459][ T39] 4 locks held by kworker/u9:2/5841: [ 339.949472][ T39] #0: ffff888058952938 ((wq_completion)hci10#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.949533][ T39] #1: ffffc90004b47bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.949590][ T39] #2: ffff888059c040a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 339.949646][ T39] #3: ffffffff8ee3b358 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 339.949703][ T39] 3 locks held by syz-executor/5846: [ 339.949715][ T39] #0: ffff88803c414e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 339.949770][ T39] #1: ffff88803c4140a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 339.949830][ T39] #2: ffffffff8ee3b358 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 339.949882][ T39] 4 locks held by kworker/u9:3/5849: [ 339.949894][ T39] #0: ffff88803591c938 ((wq_completion)hci6#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.949955][ T39] #1: ffffc90004bc7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.950011][ T39] #2: ffff8880380480a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 339.950091][ T39] #3: ffffffff8ee3b358 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 339.950148][ T39] 4 locks held by kworker/1:3/5851: [ 339.950160][ T39] #0: ffff888057760538 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.950222][ T39] #1: ffffc90004be7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.950296][ T39] #2: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.950351][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.950408][ T39] 6 locks held by kworker/u9:6/5856: [ 339.950427][ T39] #0: ffff88803703e938 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.950483][ T39] #1: ffffc90004cc7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.950540][ T39] #2: ffff888038480e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 339.950592][ T39] #3: ffff8880384800a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 339.950652][ T39] #4: ffffffff8ee3b358 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 339.950713][ T39] #5: ffff888028040358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 339.950769][ T39] 4 locks held by kworker/0:3/5893: [ 339.950784][ T39] 2 locks held by napi/wg2-0/5923: [ 339.950797][ T39] #0: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.950852][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.950909][ T39] 2 locks held by kworker/0:5/5931: [ 339.950922][ T39] 5 locks held by kworker/1:6/6040: [ 339.950933][ T39] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.950991][ T39] #1: ffffc90005c07bc0 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.951048][ T39] #2: ffffffff8d9a8dc0 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x13f0 [ 339.951102][ T39] #3: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.951157][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.951215][ T39] 4 locks held by kworker/1:8/6793: [ 339.951227][ T39] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.951284][ T39] #1: ffffc9000649fbc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.951341][ T39] #2: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.951396][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.951459][ T39] 2 locks held by kworker/1:9/6801: [ 339.951471][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.951527][ T39] #1: ffffc9000645fbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.951584][ T39] 4 locks held by kworker/1:12/6808: [ 339.951596][ T39] #0: ffff888057761d38 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.951657][ T39] #1: ffffc9000641fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.951733][ T39] #2: ffff888039f915f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 339.951789][ T39] #3: ffff88823beec3f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 339.951844][ T39] 1 lock held by syz.3.317/6819: [ 339.951856][ T39] #0: ffff88803e0d4cb8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 339.951918][ T39] 5 locks held by kworker/u8:18/6829: [ 339.951930][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.951986][ T39] #1: ffffc900062cfbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.952042][ T39] #2: ffff88805bc60898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 339.971569][ T39] #3: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.971629][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.971688][ T39] 4 locks held by kworker/u8:21/6835: [ 339.971701][ T39] #0: ffff888057380138 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.971759][ T39] #1: ffffc90005c47bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.971817][ T39] #2: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.971872][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.971929][ T39] 4 locks held by kworker/0:7/6836: [ 339.971941][ T39] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.971998][ T39] #1: ffffc90005657bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.972141][ T39] #2: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30 [ 339.972192][ T39] #3: ffff88805be10898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x164/0xf30 [ 339.972243][ T39] 4 locks held by kworker/0:8/6838: [ 339.972255][ T39] #0: ffff888057331138 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.972317][ T39] #1: ffffc900062bfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.972391][ T39] #2: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.972453][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.972510][ T39] 4 locks held by kworker/1:13/6839: [ 339.972522][ T39] #0: ffff888057763538 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.972584][ T39] #1: ffffc9000629fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.972658][ T39] #2: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.972713][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.972770][ T39] 4 locks held by kworker/1:14/6840: [ 339.972782][ T39] #0: ffff88805719bd38 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.972844][ T39] #1: ffffc900056c7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.972919][ T39] #2: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.972973][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.973030][ T39] 1 lock held by syz-executor/6841: [ 339.973043][ T39] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 339.973095][ T39] 4 locks held by kworker/0:9/6844: [ 339.973108][ T39] #0: ffff888057761d38 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.973170][ T39] #1: ffffc90005b57bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.973245][ T39] #2: ffff888039f915f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 339.973303][ T39] #3: ffff88823beec3f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 339.973361][ T39] 1 lock held by dhcpcd/6854: [ 339.973372][ T39] #0: ffff88803e0fb878 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 339.973440][ T39] 6 locks held by kworker/1:15/6857: [ 339.973453][ T39] 6 locks held by kworker/u8:22/6859: [ 339.973465][ T39] #0: ffff8880577c4138 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.973527][ T39] #1: ffffc90004937bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.973585][ T39] #2: ffff88805790d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 339.973641][ T39] #3: ffff8880596858b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 339.973695][ T39] #4: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.973751][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.973807][ T39] 4 locks held by kworker/1:16/6860: [ 339.973819][ T39] #0: ffff888057331138 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.973880][ T39] #1: ffffc9000881fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.973956][ T39] #2: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.974011][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.974067][ T39] 1 lock held by dhcpcd/6861: [ 339.974078][ T39] #0: ffff88805927c5f8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 339.974139][ T39] 7 locks held by kworker/u8:23/6864: [ 339.974151][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.974207][ T39] #1: ffffc90005d57bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.974266][ T39] #2: ffff88803775a300 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 339.974334][ T39] #3: ffff888032519d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 339.974396][ T39] #4: ffffffff8d9a8dc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 339.974458][ T39] #5: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.974513][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.974570][ T39] 2 locks held by kworker/0:13/6865: [ 339.974583][ T39] 1 lock held by dhcpcd/6866: [ 339.974595][ T39] #0: ffff88802645e350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 339.974652][ T39] 1 lock held by syz-executor/6870: [ 339.974664][ T39] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 339.974717][ T39] 4 locks held by kworker/u8:24/6873: [ 339.974729][ T39] #0: ffff8880577c3138 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.974790][ T39] #1: ffffc90005c57bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.974847][ T39] #2: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.974902][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.974959][ T39] 7 locks held by kworker/u8:25/6874: [ 339.974971][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.975027][ T39] #1: ffffc90005ba7bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.975085][ T39] #2: ffff88805969f300 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 339.975151][ T39] #3: ffff8880352e8120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 339.975213][ T39] #4: ffffffff8d9a8dc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 339.975268][ T39] #5: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.975322][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.975379][ T39] 4 locks held by kworker/0:15/6875: [ 339.975391][ T39] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.975454][ T39] #1: ffffc90005117bc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.975512][ T39] #2: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.975567][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.975623][ T39] 3 locks held by kworker/0:16/6876: [ 339.975637][ T39] 4 locks held by kworker/u9:7/6877: [ 339.975649][ T39] #0: ffff88805f797938 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.975710][ T39] #1: ffffc900048f7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.975766][ T39] #2: ffff888079ad00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 339.975823][ T39] #3: ffffffff8ee3b358 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 339.975880][ T39] 6 locks held by kworker/u8:26/6878: [ 339.975893][ T39] #0: ffff8880362cf938 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.975954][ T39] #1: ffffc900048a7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.976011][ T39] #2: ffff888039f915f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 339.976066][ T39] #3: ffff88823beec3f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 339.976121][ T39] #4: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.976175][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.976232][ T39] 1 lock held by dhcpcd/6880: [ 339.976244][ T39] #0: ffff8880324da350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 339.976301][ T39] 4 locks held by syz-executor/6883: [ 339.976314][ T39] 1 lock held by dhcpcd/6885: [ 339.976326][ T39] #0: ffff88802d3ca350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 339.976382][ T39] 1 lock held by syz-executor/6890: [ 339.976394][ T39] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 339.976453][ T39] 1 lock held by dhcpcd/6892: [ 339.976465][ T39] #0: ffff888033266350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 339.976520][ T39] 7 locks held by kworker/u8:29/6893: [ 339.976532][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.976589][ T39] #1: ffffc90006b9fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.976646][ T39] #2: ffff88801a343300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 339.976709][ T39] #3: ffff88803a164920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 339.976770][ T39] #4: ffffffff8d9a8dc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 339.976833][ T39] #5: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.976888][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.976946][ T39] 7 locks held by kworker/u8:30/6896: [ 339.976958][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.977015][ T39] #1: ffffc90004a97bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.977072][ T39] #2: ffff8880595a0300 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 339.977138][ T39] #3: ffff888058e21920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 339.977200][ T39] #4: ffffffff8d9a8dc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 339.977256][ T39] #5: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.977311][ T39] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.977367][ T39] 3 locks held by syz-executor/6902: [ 339.977380][ T39] #0: ffff88805cea1350 (sk_lock-AF_BLUETOOTH-BTPROTO_HCI){+.+.}-{0:0}, at: hci_sock_ioctl+0x247/0x910 [ 339.977436][ T39] #1: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.977491][ T39] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.977547][ T39] 3 locks held by kworker/u9:8/6903: [ 339.977559][ T39] #0: ffff888036ebf138 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.977614][ T39] #1: ffffc90004737bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.977671][ T39] #2: ffff88806b018e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 339.977725][ T39] 4 locks held by syz-executor/6905: [ 339.977737][ T39] #0: ffff8880591416b8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 339.977796][ T39] #1: ffff888036738350 (sk_lock-AF_BLUETOOTH-BTPROTO_HCI){+.+.}-{0:0}, at: hci_sock_release+0x5b/0x540 [ 339.977845][ T39] #2: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.977897][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.977949][ T39] 3 locks held by syz-executor/6914: [ 339.977961][ T39] #0: ffff888033bdc350 (sk_lock-AF_BLUETOOTH-BTPROTO_HCI){+.+.}-{0:0}, at: hci_sock_ioctl+0x247/0x910 [ 339.978008][ T39] #1: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.978062][ T39] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.978119][ T39] 3 locks held by syz-executor/6917: [ 339.978131][ T39] #0: ffff888033cbe350 (sk_lock-AF_BLUETOOTH-BTPROTO_HCI){+.+.}-{0:0}, at: hci_sock_ioctl+0x247/0x910 [ 339.978180][ T39] #1: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 339.978235][ T39] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 339.978295][ T39] [ 339.978300][ T39] ============================================= [ 339.978300][ T39] [ 339.978328][ T39] NMI backtrace for cpu 0 [ 339.978358][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 339.978402][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 339.978428][ T39] Call Trace: [ 339.978437][ T39] [ 339.978447][ T39] dump_stack_lvl+0x189/0x250 [ 339.978484][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.978516][ T39] ? __pfx__printk+0x10/0x10 [ 339.978553][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 339.978586][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 339.978618][ T39] ? __pfx__printk+0x10/0x10 [ 339.978646][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 339.978676][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 339.978708][ T39] watchdog+0xf93/0xfe0 [ 339.978742][ T39] ? watchdog+0x1de/0xfe0 [ 339.978777][ T39] kthread+0x711/0x8a0 [ 339.978813][ T39] ? __pfx_watchdog+0x10/0x10 [ 339.978841][ T39] ? __pfx_kthread+0x10/0x10 [ 339.978878][ T39] ? __pfx_kthread+0x10/0x10 [ 339.978913][ T39] ret_from_fork+0x436/0x7d0 [ 339.978945][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 339.978980][ T39] ? __switch_to_asm+0x39/0x70 [ 339.978998][ T39] ? __switch_to_asm+0x33/0x70 [ 339.979017][ T39] ? __pfx_kthread+0x10/0x10 [ 339.979051][ T39] ret_from_fork_asm+0x1a/0x30 [ 339.979089][ T39] [ 339.979098][ T39] Sending NMI from CPU 0 to CPUs 1: [ 339.979130][ C1] NMI backtrace for cpu 1 [ 339.979144][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 339.979170][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 339.979181][ C1] RIP: 0010:unwind_next_frame+0x17df/0x2390 [ 339.979211][ C1] Code: 24 48 01 c6 4c 89 f7 48 89 da e8 4c 0e 00 00 84 c0 0f 84 47 01 00 00 48 bd 00 00 00 00 00 fc ff df 48 8b 44 24 20 0f b6 04 28 <84> c0 0f 85 f4 08 00 00 b3 01 8b 84 24 84 00 00 00 41 39 06 4c 8b [ 339.979226][ C1] RSP: 0018:ffffc90000a3ea98 EFLAGS: 00000246 [ 339.979241][ C1] RAX: 0000000000000000 RBX: ffffc90000a3eba0 RCX: 0000000000000000 [ 339.979254][ C1] RDX: ffffffff8fb3965a RSI: 0000000000000000 RDI: 0000000000000000 [ 339.979266][ C1] RBP: dffffc0000000000 R08: ffffc90000a3ebc7 R09: 0000000000000000 [ 339.979290][ C1] R10: ffffc90000a3ebb8 R11: fffff52000147d79 R12: ffffc90000a3eef8 [ 339.979303][ C1] R13: ffffc90000a3ebb8 R14: ffffc90000a3eb68 R15: 1ffffffff1f672cb [ 339.979318][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 339.979332][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 339.979345][ C1] CR2: 00007f32297402f3 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 339.979361][ C1] Call Trace: [ 339.979367][ C1] [ 339.979378][ C1] ? unwind_next_frame+0xa5/0x2390 [ 339.979404][ C1] ? kasan_save_free_info+0x46/0x50 [ 339.979426][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 339.979447][ C1] arch_stack_walk+0x11c/0x150 [ 339.979477][ C1] ? __kasan_slab_free+0x5b/0x80 [ 339.979502][ C1] stack_trace_save+0x9c/0xe0 [ 339.979521][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 339.979538][ C1] ? kasan_save_free_info+0x46/0x50 [ 339.979555][ C1] ? consume_skb+0x9e/0xf0 [ 339.979582][ C1] ? nft_synproxy_eval_v6+0x376/0x560 [ 339.979601][ C1] ? nft_synproxy_do_eval+0x3d7/0x570 [ 339.979623][ C1] ? __lock_acquire+0xab9/0xd20 [ 339.979648][ C1] kasan_save_track+0x3e/0x80 [ 339.979667][ C1] ? kasan_save_track+0x3e/0x80 [ 339.979687][ C1] ? kasan_save_free_info+0x46/0x50 [ 339.979732][ C1] kasan_save_free_info+0x46/0x50 [ 339.979748][ C1] __kasan_slab_free+0x5b/0x80 [ 339.979770][ C1] ? nft_synproxy_eval_v6+0x376/0x560 [ 339.979788][ C1] kmem_cache_free+0x195/0x510 [ 339.979817][ C1] nft_synproxy_eval_v6+0x376/0x560 [ 339.979840][ C1] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 339.979862][ C1] ? nf_ip_checksum+0x13c/0x510 [ 339.979883][ C1] nft_synproxy_do_eval+0x3d7/0x570 [ 339.979906][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 339.979925][ C1] ? __local_bh_enable_ip+0x1b2/0x270 [ 339.979947][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.979983][ C1] nft_do_chain+0x40c/0x1920 [ 339.980010][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 339.980027][ C1] ? ipv6_find_hdr+0xc78/0x1050 [ 339.980074][ C1] nft_do_chain_inet+0x25d/0x340 [ 339.980093][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 339.980111][ C1] ? __lock_acquire+0xab9/0xd20 [ 339.980141][ C1] ? NF_HOOK+0x9a/0x3a0 [ 339.980171][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 339.980191][ C1] nf_hook_slow+0xc2/0x220 [ 339.980220][ C1] NF_HOOK+0x206/0x3a0 [ 339.980245][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 339.980271][ C1] ? NF_HOOK+0x9a/0x3a0 [ 339.980294][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 339.980319][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 339.980351][ C1] ip6_input+0x16a/0x270 [ 339.980374][ C1] ? ip6_input+0x23/0x270 [ 339.980400][ C1] NF_HOOK+0x309/0x3a0 [ 339.980425][ C1] ? skb_orphan+0xaf/0xd0 [ 339.980449][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 339.980472][ C1] ? NF_HOOK+0x9a/0x3a0 [ 339.980495][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 339.980521][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 339.980551][ C1] __netif_receive_skb+0xd3/0x380 [ 339.980574][ C1] ? rt_spin_unlock+0x65/0x80 [ 339.980599][ C1] ? process_backlog+0x27b/0x900 [ 339.980623][ C1] process_backlog+0x31e/0x900 [ 339.980654][ C1] __napi_poll+0xb3/0x540 [ 339.980678][ C1] net_rx_action+0x707/0xe00 [ 339.980701][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 339.980739][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 339.980783][ C1] handle_softirqs+0x22c/0x710 [ 339.980810][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 339.980839][ C1] run_ktimerd+0xcf/0x190 [ 339.980864][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 339.980888][ C1] ? schedule+0x91/0x360 [ 339.980918][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 339.980939][ C1] smpboot_thread_fn+0x542/0xa60 [ 339.980962][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 339.980989][ C1] kthread+0x711/0x8a0 [ 339.981017][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 339.981040][ C1] ? __pfx_kthread+0x10/0x10 [ 339.981069][ C1] ? __pfx_kthread+0x10/0x10 [ 339.981097][ C1] ret_from_fork+0x436/0x7d0 [ 339.981121][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 339.981148][ C1] ? __switch_to_asm+0x39/0x70 [ 339.981169][ C1] ? __switch_to_asm+0x33/0x70 [ 339.981185][ C1] ? __pfx_kthread+0x10/0x10 [ 339.981212][ C1] ret_from_fork_asm+0x1a/0x30 [ 339.981238][ C1] [ 342.143970][ T5855] Bluetooth: hci5: command 0x0406 tx timeout [ 344.392177][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 344.392203][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 344.392229][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 344.392242][ T39] Call Trace: [ 344.392251][ T39] [ 344.392261][ T39] dump_stack_lvl+0x99/0x250 [ 344.392299][ T39] ? __asan_memcpy+0x40/0x70 [ 344.392324][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.392356][ T39] ? __pfx__printk+0x10/0x10 [ 344.392394][ T39] vpanic+0x281/0x750 [ 344.392429][ T39] ? __pfx_vpanic+0x10/0x10 [ 344.392461][ T39] ? preempt_schedule+0xae/0xc0 [ 344.392495][ T39] ? preempt_schedule_common+0x83/0xd0 [ 344.392536][ T39] panic+0xb9/0xc0 [ 344.392566][ T39] ? __pfx_panic+0x10/0x10 [ 344.392599][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 344.392632][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 344.392665][ T39] watchdog+0xfd2/0xfe0 [ 344.392699][ T39] ? watchdog+0x1de/0xfe0 [ 344.392733][ T39] kthread+0x711/0x8a0 [ 344.392779][ T39] ? __pfx_watchdog+0x10/0x10 [ 344.392806][ T39] ? __pfx_kthread+0x10/0x10 [ 344.392845][ T39] ? __pfx_kthread+0x10/0x10 [ 344.392880][ T39] ret_from_fork+0x436/0x7d0 [ 344.392912][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 344.392946][ T39] ? __switch_to_asm+0x39/0x70 [ 344.392966][ T39] ? __switch_to_asm+0x33/0x70 [ 344.392986][ T39] ? __pfx_kthread+0x10/0x10 [ 344.393019][ T39] ret_from_fork_asm+0x1a/0x30 [ 344.393059][ T39] [ 344.393416][ T39] Kernel Offset: disabled