last executing test programs: 1m56.667875674s ago: executing program 2 (id=77): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r1, 0x111, 0x1, 0x0, &(0x7f0000000080)) 1m56.305712905s ago: executing program 2 (id=78): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 1m55.922054258s ago: executing program 2 (id=82): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb) 1m55.455460558s ago: executing program 2 (id=85): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m54.941804441s ago: executing program 2 (id=89): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 1m53.071247949s ago: executing program 2 (id=99): io_setup(0x222, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) io_submit(r0, 0x2, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3, r1, &(0x7f0000000400)="a96617", 0x3, 0x6ed}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000000), 0x0, 0x3}]) 1m52.227990506s ago: executing program 32 (id=99): io_setup(0x222, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) io_submit(r0, 0x2, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3, r1, &(0x7f0000000400)="a96617", 0x3, 0x6ed}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000000), 0x0, 0x3}]) 48.614405495s ago: executing program 3 (id=509): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) 47.359936267s ago: executing program 3 (id=517): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) 47.066913594s ago: executing program 3 (id=521): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000000000e69a000040"]) 46.526094472s ago: executing program 3 (id=527): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) iopl(0x3) 45.395543566s ago: executing program 4 (id=533): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000300)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x68, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x8, @loopback, @loopback}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10040, 0x0) 45.182152368s ago: executing program 4 (id=534): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002c00)=""/4088, 0xff8}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000006ad873"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 44.791084186s ago: executing program 4 (id=537): unshare(0x22020600) r0 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x5949}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000080)={0x1908, r0}, 0x0) 44.548205679s ago: executing program 4 (id=540): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x80, 0x40, 0x5, 0x3, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x68, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 44.381373553s ago: executing program 3 (id=542): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x5, 0xc) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000340)=0x5, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x2, @mcast2, 0x3}, 0x1c, 0x0}}], 0x1, 0x55cfe9da1f5ebbe6) 44.251789554s ago: executing program 4 (id=543): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000040)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000044c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000005c0)=""/75, 0x4b}], 0x1}, 0x2}], 0x800000000000146, 0x14100, 0x0) 44.239294903s ago: executing program 3 (id=544): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000097, 0x0, 0xffffffffffff59a7}]}) 43.041659438s ago: executing program 4 (id=549): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000180)={0x82, 0x0, 0x0, 0x0}) 39.618356613s ago: executing program 0 (id=559): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) 38.728828621s ago: executing program 0 (id=562): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) 38.516304128s ago: executing program 0 (id=564): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000780)=[@in6={0xa, 0x4e23, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4a}]}, &(0x7f0000000400)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1, 0x8000, 0xffffffff, 0x80000001}, 0x10) 38.413382292s ago: executing program 1 (id=565): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000a40)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {0x0, r1, 0x2}}, 0x18) 38.356992652s ago: executing program 0 (id=566): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x54, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x20, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x3fd, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x5, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0xfe, 0x4, 0x40, 0x9, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x3042c26b, 0x68, 0x7, 0x1, 0x5, 0x8000, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffff0000, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x4, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0x2, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x80000004, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x5, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x8, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x100, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0xe, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0xb, 0x4, 0x8000005, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x0, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x5, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb8, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x81, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0x9, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0x10, 0x0, 0x3, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x0, 0x7f, 0x6, 0x8, 0x40, 0x2, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x2, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa958, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x6, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x5, 0xffff8000, 0xe0, 0xfffffffb, 0x85, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x101, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x8, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x4, 0x1, 0x2, 0xfb4, 0xbf9, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x8, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x3ff, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x8, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x10001, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0x7, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0xb, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0x65, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x7, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 38.262098591s ago: executing program 1 (id=567): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RREAD(r2, &(0x7f0000000380)={0xb, 0x75, 0x1}, 0xb) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x401, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 38.155442442s ago: executing program 5 (id=568): r0 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x107f) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4) 38.107339841s ago: executing program 1 (id=569): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x8, 0x3, 0x3, 0x2, 0x7fff, 0x5}}, {0x4}}]}, @qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x6}]}}]}, 0x60}}, 0x4000010) 37.211852305s ago: executing program 5 (id=570): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000040)=""/8, &(0x7f0000000440)=0x8) 37.024962858s ago: executing program 5 (id=571): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x2, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x627, 0x14, 0x43, 0x0, 0x0) 36.322823813s ago: executing program 5 (id=572): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 36.322638105s ago: executing program 0 (id=573): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlimit=3,noswap']) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 35.869784429s ago: executing program 1 (id=574): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x3, {{0xa, 0x1, 0x3, @mcast2, 0x10000000}}}, 0x88) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) 35.869487763s ago: executing program 5 (id=575): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 35.609801617s ago: executing program 5 (id=576): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="10008100c23b88a8", 0x8, 0x0, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0x1, 0x6, @multicast}, 0x14) 35.60942376s ago: executing program 0 (id=577): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000006207000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f000000a200)='afs_cell\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='source', &(0x7f00000001c0)='%(,:', 0x0) 35.444781159s ago: executing program 1 (id=578): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x4, 0x8, '9P2000.u'}, 0x15) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 24.051583265s ago: executing program 1 (id=579): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a48500000004000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4}}}}]}, 0x34}}, 0x0) 0s ago: executing program 33 (id=544): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000097, 0x0, 0xffffffffffff59a7}]}) kernel console output (not intermixed with test programs): [ 87.116508][ T992] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts. [ 91.465482][ T5825] cgroup: Unknown subsys name 'net' [ 91.698466][ T5825] cgroup: Unknown subsys name 'cpuset' [ 91.753814][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.685868][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.096193][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.098058][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.098911][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.108024][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.113558][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.114896][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.116630][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.117202][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.118658][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.120068][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.121558][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.122007][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.127100][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.127986][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.130887][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.153060][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.193047][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.204644][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.207647][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.209549][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.279700][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.296584][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.298830][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.301014][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.302546][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.076489][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 99.446710][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 99.468422][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 99.554326][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 99.644870][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 99.937413][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.938777][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.939510][ T5850] bridge_slave_0: entered allmulticast mode [ 99.941579][ T5850] bridge_slave_0: entered promiscuous mode [ 100.070450][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.070688][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.070906][ T5850] bridge_slave_1: entered allmulticast mode [ 100.074359][ T5850] bridge_slave_1: entered promiscuous mode [ 100.155254][ T5853] Bluetooth: hci3: command tx timeout [ 100.233174][ T5853] Bluetooth: hci0: command tx timeout [ 100.233379][ T5853] Bluetooth: hci2: command tx timeout [ 100.314058][ T59] Bluetooth: hci1: command tx timeout [ 100.393167][ T59] Bluetooth: hci4: command tx timeout [ 100.710984][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.727672][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.727782][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.727902][ T5842] bridge_slave_0: entered allmulticast mode [ 100.729677][ T5842] bridge_slave_0: entered promiscuous mode [ 100.820053][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.820175][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.820293][ T5841] bridge_slave_0: entered allmulticast mode [ 100.822002][ T5841] bridge_slave_0: entered promiscuous mode [ 100.829999][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.904081][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.904204][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.904326][ T5842] bridge_slave_1: entered allmulticast mode [ 100.906088][ T5842] bridge_slave_1: entered promiscuous mode [ 101.006007][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.006184][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.006888][ T5841] bridge_slave_1: entered allmulticast mode [ 101.010165][ T5841] bridge_slave_1: entered promiscuous mode [ 101.226454][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.226631][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.226882][ T5854] bridge_slave_0: entered allmulticast mode [ 101.230160][ T5854] bridge_slave_0: entered promiscuous mode [ 101.442516][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.442739][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.443071][ T5843] bridge_slave_0: entered allmulticast mode [ 101.445896][ T5843] bridge_slave_0: entered promiscuous mode [ 101.520913][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.521032][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.521179][ T5854] bridge_slave_1: entered allmulticast mode [ 101.523635][ T5854] bridge_slave_1: entered promiscuous mode [ 101.596264][ T5850] team0: Port device team_slave_0 added [ 101.597834][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.597921][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.598049][ T5843] bridge_slave_1: entered allmulticast mode [ 101.599773][ T5843] bridge_slave_1: entered promiscuous mode [ 101.620438][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.747980][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.750091][ T5850] team0: Port device team_slave_1 added [ 101.841272][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.920637][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.157391][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.234673][ T59] Bluetooth: hci3: command tx timeout [ 102.293903][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.313094][ T59] Bluetooth: hci2: command tx timeout [ 102.313129][ T59] Bluetooth: hci0: command tx timeout [ 102.360233][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.393198][ T5853] Bluetooth: hci1: command tx timeout [ 102.455217][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.455235][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.455266][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.459587][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.461482][ T5842] team0: Port device team_slave_0 added [ 102.473191][ T5853] Bluetooth: hci4: command tx timeout [ 102.759196][ T5841] team0: Port device team_slave_0 added [ 102.760684][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.760697][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.760726][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.857814][ T5842] team0: Port device team_slave_1 added [ 102.955470][ T5841] team0: Port device team_slave_1 added [ 103.087408][ T5854] team0: Port device team_slave_0 added [ 103.175620][ T5843] team0: Port device team_slave_0 added [ 103.288471][ T5854] team0: Port device team_slave_1 added [ 103.388326][ T5843] team0: Port device team_slave_1 added [ 103.389811][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.389823][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.389838][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.560635][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.560650][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.560666][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.649239][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.649255][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.649269][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.806969][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.806986][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.807013][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.021297][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.021315][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.021331][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.032755][ T5850] hsr_slave_0: entered promiscuous mode [ 104.035171][ T5850] hsr_slave_1: entered promiscuous mode [ 104.064273][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.064288][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.064310][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.073998][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.074012][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.074035][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.095216][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.095232][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.095254][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.313070][ T59] Bluetooth: hci3: command tx timeout [ 104.393113][ T59] Bluetooth: hci0: command tx timeout [ 104.393148][ T59] Bluetooth: hci2: command tx timeout [ 104.473276][ T5853] Bluetooth: hci1: command tx timeout [ 104.553302][ T5853] Bluetooth: hci4: command tx timeout [ 104.582033][ T5842] hsr_slave_0: entered promiscuous mode [ 104.590183][ T5842] hsr_slave_1: entered promiscuous mode [ 104.591459][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 104.591573][ T5842] Cannot create hsr debugfs directory [ 104.759911][ T5841] hsr_slave_0: entered promiscuous mode [ 104.760851][ T5841] hsr_slave_1: entered promiscuous mode [ 104.761482][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 104.761501][ T5841] Cannot create hsr debugfs directory [ 105.092492][ T5854] hsr_slave_0: entered promiscuous mode [ 105.099949][ T5854] hsr_slave_1: entered promiscuous mode [ 105.101065][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 105.101087][ T5854] Cannot create hsr debugfs directory [ 105.205385][ T5843] hsr_slave_0: entered promiscuous mode [ 105.206278][ T5843] hsr_slave_1: entered promiscuous mode [ 105.206907][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 105.206931][ T5843] Cannot create hsr debugfs directory [ 106.393152][ T5853] Bluetooth: hci3: command tx timeout [ 106.473459][ T59] Bluetooth: hci0: command tx timeout [ 106.473515][ T5853] Bluetooth: hci2: command tx timeout [ 106.554296][ T5853] Bluetooth: hci1: command tx timeout [ 106.633487][ T5853] Bluetooth: hci4: command tx timeout [ 106.808966][ T5850] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.862740][ T5850] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.889860][ T5850] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.942082][ T5850] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.129979][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.167629][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.211475][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.270922][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.432313][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.498741][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.562444][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.620537][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.796178][ T5854] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.839293][ T5854] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.897603][ T5854] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.964072][ T5854] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.181377][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.219476][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.277231][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.310666][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.311778][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.478170][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.541441][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.561598][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.562220][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.614404][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.614586][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.720246][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.748930][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.783029][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.783469][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.840798][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.840939][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.926774][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.952020][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.989947][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.990783][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.052380][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.053328][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.174959][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.239436][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.240263][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.271204][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.341528][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.343192][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.531264][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.629910][ T3491] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.630172][ T3491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.705776][ T3491] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.706602][ T3491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.757275][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.186644][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.366684][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.735698][ T5841] veth0_vlan: entered promiscuous mode [ 110.770808][ T5842] veth0_vlan: entered promiscuous mode [ 110.818885][ T5841] veth1_vlan: entered promiscuous mode [ 110.838108][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.866250][ T5842] veth1_vlan: entered promiscuous mode [ 110.962206][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.040426][ T5850] veth0_vlan: entered promiscuous mode [ 111.067517][ T5841] veth0_macvtap: entered promiscuous mode [ 111.113847][ T5841] veth1_macvtap: entered promiscuous mode [ 111.117551][ T5842] veth0_macvtap: entered promiscuous mode [ 111.120282][ T5850] veth1_vlan: entered promiscuous mode [ 111.178132][ T5842] veth1_macvtap: entered promiscuous mode [ 111.187937][ T5854] veth0_vlan: entered promiscuous mode [ 111.259345][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.262039][ T5854] veth1_vlan: entered promiscuous mode [ 111.310402][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.325099][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.326239][ T5843] veth0_vlan: entered promiscuous mode [ 111.371562][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.403905][ T157] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.427438][ T157] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.437354][ T157] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.446207][ T5843] veth1_vlan: entered promiscuous mode [ 111.464662][ T5850] veth0_macvtap: entered promiscuous mode [ 111.467586][ T157] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.479962][ T157] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.487728][ T157] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.554694][ T157] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.565759][ T5850] veth1_macvtap: entered promiscuous mode [ 111.568322][ T157] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.758049][ T5854] veth0_macvtap: entered promiscuous mode [ 111.907413][ T5854] veth1_macvtap: entered promiscuous mode [ 111.938128][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.983985][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.064731][ T5843] veth0_macvtap: entered promiscuous mode [ 112.111076][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.111099][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.150284][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.167038][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.171047][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.176655][ T5843] veth1_macvtap: entered promiscuous mode [ 112.212393][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.228620][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.252550][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.252572][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.267109][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.389897][ T1519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.389920][ T1519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.467923][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.484401][ T157] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.511218][ T157] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.576196][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.577245][ T157] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.624541][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.624565][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.728154][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.025038][ T1519] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.076990][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.078607][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.078626][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.171277][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.208038][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.469723][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.469746][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.684950][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.684969][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.774665][ T992] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 113.865343][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.865367][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.960023][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.960046][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.967758][ T992] usb 3-1: Using ep0 maxpacket: 16 [ 113.985239][ T992] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.985269][ T992] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.985296][ T992] usb 3-1: config 0 interface 0 has no altsetting 0 [ 113.985330][ T992] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 113.985350][ T992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.051369][ T992] usb 3-1: config 0 descriptor?? [ 114.215256][ T5972] loop7: detected capacity change from 0 to 7 [ 114.301750][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.301894][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 114.331018][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.331067][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 114.342959][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.342996][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 114.364543][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.364575][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 114.365674][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.365702][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 114.367117][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.367142][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 114.368977][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.368998][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 114.369233][ T5972] ldm_validate_partition_table(): Disk read failed. [ 114.369605][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.369630][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 114.372802][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.372829][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 114.381455][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.381485][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 114.384677][ T5972] Dev loop7: unable to read RDB block 0 [ 114.429281][ T5972] loop7: unable to read partition table [ 114.429690][ T5972] loop7: partition table beyond EOD, truncated [ 114.429770][ T5972] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 114.591917][ T1519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.591940][ T1519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.609739][ T992] hid (null): unknown global tag 0xd [ 114.609764][ T992] hid (null): unknown global tag 0xe [ 114.609777][ T992] hid (null): usage index exceeded [ 114.855947][ T992] usb 3-1: USB disconnect, device number 2 [ 115.189039][ T5980] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.992187][ T37] audit: type=1326 audit(1757069049.460:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6020 comm="syz.3.26" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8b55aebe9 code=0x0 [ 118.731317][ T6033] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 122.151397][ T6122] syz.1.48 uses obsolete (PF_INET,SOCK_PACKET) [ 123.783404][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 123.830684][ T6131] syz.2.52 (6131) used greatest stack depth: 18968 bytes left [ 123.975565][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.975600][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.975641][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 123.975665][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.002354][ T9] usb 4-1: config 0 descriptor?? [ 124.125781][ T6146] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 124.490772][ T9] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 124.490817][ T9] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 124.490842][ T9] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 124.490866][ T9] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 124.490891][ T9] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 124.490915][ T9] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 124.490941][ T9] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 124.509777][ T9] pyra 0003:1E7D:2CF6.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 124.873712][ T9] pyra 0003:1E7D:2CF6.0002: couldn't init struct pyra_device [ 124.873777][ T9] pyra 0003:1E7D:2CF6.0002: couldn't install mouse [ 124.885560][ T9] pyra 0003:1E7D:2CF6.0002: probe with driver pyra failed with error -71 [ 125.082813][ T9] usb 4-1: USB disconnect, device number 2 [ 125.641280][ T6161] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.566686][ T6183] netlink: 16 bytes leftover after parsing attributes in process `syz.1.69'. [ 126.608013][ T6185] capability: warning: `syz.4.70' uses deprecated v2 capabilities in a way that may be insecure [ 126.976971][ T992] kernel read not supported for file /dsp1 (pid: 992 comm: kworker/0:2) [ 127.833877][ T6209] input: syz1 as /devices/virtual/input/input7 [ 129.291338][ T6232] netlink: 88 bytes leftover after parsing attributes in process `syz.3.87'. [ 129.705698][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 129.860047][ T9] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 129.860079][ T9] usb 5-1: config 0 has no interface number 0 [ 129.866755][ T9] usb 5-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84 [ 129.866783][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.866800][ T9] usb 5-1: Product: syz [ 129.866813][ T9] usb 5-1: Manufacturer: syz [ 129.866825][ T9] usb 5-1: SerialNumber: syz [ 129.896463][ T9] usb 5-1: config 0 descriptor?? [ 129.933273][ T5847] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 130.107757][ T5847] usb 4-1: config 0 has an invalid interface number: 229 but max is 0 [ 130.107788][ T5847] usb 4-1: config 0 has no interface number 0 [ 130.107849][ T5847] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 130.107888][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.161655][ T5847] usb 4-1: config 0 descriptor?? [ 130.293673][ T9] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in cold state, will try to load a firmware [ 130.415956][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 130.416022][ T9] dib0700: firmware download failed at 7 with -22 [ 130.455802][ T9] usb 5-1: USB disconnect, device number 2 [ 130.476714][ T5927] usb 4-1: USB disconnect, device number 3 [ 130.601229][ T6257] netlink: 16 bytes leftover after parsing attributes in process `syz.0.94'. [ 130.823130][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'. [ 130.823619][ T6261] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 130.823657][ T6261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.936888][ T6057] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.749017][ T6057] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.104181][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 133.202095][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.202214][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.274517][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 133.286010][ T9] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.286042][ T9] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.286061][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 133.293209][ T9] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 133.293236][ T9] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 133.293253][ T9] usb 2-1: Product: syz [ 133.313316][ T9] usb 2-1: config 0 descriptor?? [ 133.439183][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 133.450633][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 133.452694][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 133.472427][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 133.481009][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 133.552972][ T6057] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.663547][ T6307] netlink: 888 bytes leftover after parsing attributes in process `syz.3.112'. [ 133.794769][ T9] waterforce 0003:1044:7A4D.0003: unknown main item tag 0x0 [ 133.794807][ T9] waterforce 0003:1044:7A4D.0003: unknown main item tag 0x0 [ 133.794831][ T9] waterforce 0003:1044:7A4D.0003: item fetching failed at offset 2/5 [ 133.795748][ T9] waterforce 0003:1044:7A4D.0003: hid parse failed with -22 [ 133.795869][ T9] waterforce 0003:1044:7A4D.0003: probe with driver waterforce failed with error -22 [ 133.971501][ T6014] usb 2-1: USB disconnect, device number 2 [ 134.114631][ T6057] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.263085][ T6317] warning: `syz.0.115' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 135.514539][ T59] Bluetooth: hci1: command tx timeout [ 135.675893][ T6057] bridge_slave_1: left allmulticast mode [ 135.676333][ T6057] bridge_slave_1: left promiscuous mode [ 135.679048][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.928648][ T6057] bridge_slave_0: left allmulticast mode [ 135.928685][ T6057] bridge_slave_0: left promiscuous mode [ 135.928978][ T6057] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.593173][ T59] Bluetooth: hci1: command tx timeout [ 138.793915][ T6057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.855867][ T6057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.900610][ T6057] bond0 (unregistering): Released all slaves [ 138.965885][ T6374] netlink: 40 bytes leftover after parsing attributes in process `syz.0.139'. [ 139.557784][ T6057] IPVS: stopping backup sync thread 6146 ... [ 139.673211][ T59] Bluetooth: hci1: command tx timeout [ 140.434630][ T6310] chnl_net:caif_netlink_parms(): no params data found [ 140.629882][ T6406] netlink: 256 bytes leftover after parsing attributes in process `syz.1.150'. [ 141.753005][ T59] Bluetooth: hci1: command tx timeout [ 141.973043][ T5919] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 142.128659][ T5919] usb 1-1: Using ep0 maxpacket: 16 [ 142.132514][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.132547][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.132570][ T5919] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 142.132615][ T5919] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 142.132638][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.194661][ T5919] usb 1-1: config 0 descriptor?? [ 142.584581][ T6057] hsr_slave_0: left promiscuous mode [ 142.623072][ T6057] hsr_slave_1: left promiscuous mode [ 142.626561][ T6057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.627447][ T6057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.718018][ T6057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.718054][ T6057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.737897][ T5919] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 142.737930][ T5919] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 142.737952][ T5919] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 142.737974][ T5919] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 142.737995][ T5919] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 142.738027][ T5919] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 142.738049][ T5919] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 142.738071][ T5919] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 142.738093][ T5919] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 142.738115][ T5919] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 142.890301][ T6057] veth1_macvtap: left promiscuous mode [ 142.890569][ T6057] veth0_macvtap: left promiscuous mode [ 142.890938][ T6057] veth1_vlan: left promiscuous mode [ 142.891315][ T6057] veth0_vlan: left promiscuous mode [ 143.023975][ T5919] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0004/input/input8 [ 143.115352][ T5919] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 143.175639][ T5919] usb 1-1: USB disconnect, device number 2 [ 143.348845][ T6454] fido_id[6454]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 145.831440][ T6057] team0 (unregistering): Port device team_slave_1 removed [ 146.104083][ T6057] team0 (unregistering): Port device team_slave_0 removed [ 148.478155][ T6453] netlink: 'syz.1.165': attribute type 1 has an invalid length. [ 148.478180][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.165'. [ 148.478495][ T6453] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.956326][ T6310] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.956492][ T6310] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.956738][ T6310] bridge_slave_0: entered allmulticast mode [ 149.000839][ T6310] bridge_slave_0: entered promiscuous mode [ 149.047308][ T6471] pimreg: tun_chr_ioctl cmd 1074025677 [ 149.047468][ T6471] pimreg: linktype set to 778 [ 149.320616][ T6310] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.320785][ T6310] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.321016][ T6310] bridge_slave_1: entered allmulticast mode [ 149.334515][ T6310] bridge_slave_1: entered promiscuous mode [ 149.655368][ T6483] hsr0: entered promiscuous mode [ 150.272707][ T6310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.362500][ T6310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.851293][ T6310] team0: Port device team_slave_0 added [ 150.964713][ T6310] team0: Port device team_slave_1 added [ 150.973064][ T5927] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 151.134090][ T5927] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 151.134124][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.158954][ T5978] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 151.178442][ T5927] usb 4-1: config 0 descriptor?? [ 151.310493][ T5978] usb 2-1: Using ep0 maxpacket: 32 [ 151.314063][ T5978] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 151.314089][ T5978] usb 2-1: config 0 has no interface number 0 [ 151.320111][ T5978] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 151.320138][ T5978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.320157][ T5978] usb 2-1: Product: syz [ 151.320170][ T5978] usb 2-1: Manufacturer: syz [ 151.320184][ T5978] usb 2-1: SerialNumber: syz [ 151.370242][ T5978] usb 2-1: config 0 descriptor?? [ 151.398157][ T5978] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 151.454687][ T5927] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 151.764564][ T5978] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 151.854522][ T5927] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 151.854548][ T5927] [drm] Initialized udl on minor 2 [ 151.886961][ T5927] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 151.889280][ T5927] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 152.001525][ T5978] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 152.053460][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 152.123576][ T5927] usb 4-1: USB disconnect, device number 4 [ 152.125431][ T5906] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 152.128434][ T5906] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 152.128820][ T5906] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 152.202801][ T5978] usb 2-1: USB disconnect, device number 3 [ 152.259797][ T6310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.259814][ T6310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.259841][ T6310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.289885][ T6310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.289901][ T6310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.289933][ T6310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.340974][ T5978] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 152.538380][ T5978] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 152.540893][ T5978] quatech2 2-1:0.51: device disconnected [ 153.267605][ T6310] hsr_slave_0: entered promiscuous mode [ 153.268964][ T6310] hsr_slave_1: entered promiscuous mode [ 153.269858][ T6310] debugfs: 'hsr0' already exists in 'hsr' [ 153.269882][ T6310] Cannot create hsr debugfs directory [ 153.355457][ T5978] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 153.504023][ T5978] usb 5-1: Using ep0 maxpacket: 8 [ 153.506976][ T5978] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 153.507007][ T5978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.540170][ T6539] hsr0: entered promiscuous mode [ 153.637619][ T5978] pvrusb2: Hardware description: Terratec Grabster AV400 [ 153.637639][ T5978] pvrusb2: ********** [ 153.637646][ T5978] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 153.637658][ T5978] pvrusb2: Important functionality might not be entirely working. [ 153.637667][ T5978] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 153.637678][ T5978] pvrusb2: ********** [ 153.939208][ T2365] pvrusb2: Invalid write control endpoint [ 154.185832][ T6533] pvrusb2: Invalid write control endpoint [ 154.188868][ T6014] usb 5-1: USB disconnect, device number 3 [ 154.237749][ T2365] pvrusb2: Invalid write control endpoint [ 154.237766][ T2365] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 154.237776][ T2365] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 154.237784][ T2365] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 154.237794][ T2365] pvrusb2: Device being rendered inoperable [ 154.279873][ T2365] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 154.279950][ T2365] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 154.310200][ T2365] pvrusb2: Attached sub-driver cx25840 [ 154.310218][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 154.310228][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 155.826152][ T6310] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 155.897511][ T6310] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 156.080186][ T6310] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 156.142815][ T6310] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 156.208294][ T6591] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.889052][ T6310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.079428][ T6310] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.169378][ T6053] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.169700][ T6053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.251993][ T6053] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.252172][ T6053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.959161][ T6628] mmap: syz.0.220 (6628) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 158.951772][ T6310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.446133][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.232'. [ 159.446384][ T6668] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 159.446418][ T6668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.025019][ T6310] veth0_vlan: entered promiscuous mode [ 161.075713][ T6310] veth1_vlan: entered promiscuous mode [ 161.206487][ T6310] veth0_macvtap: entered promiscuous mode [ 161.246759][ T6310] veth1_macvtap: entered promiscuous mode [ 161.321373][ T6310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.465789][ T6310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.508043][ T3425] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.528341][ T3425] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.533631][ T1335] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.534300][ T1335] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.920318][ T6729] loop7: detected capacity change from 0 to 524255232 [ 162.303957][ T6068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.303979][ T6068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.713543][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 162.730123][ T6057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.730143][ T6057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.891633][ T9] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 162.891665][ T9] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 162.891686][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 162.891708][ T9] usb 4-1: config 1 has no interface number 0 [ 162.891760][ T9] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 162.891787][ T9] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 162.891830][ T9] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 162.891853][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.046656][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 163.662587][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 163.908127][ T6014] usb 4-1: USB disconnect, device number 5 [ 163.923189][ T6014] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 164.677393][ T37] audit: type=1804 audit(1757069096.020:3): pid=6778 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.271" name="/newroot/60/bus" dev="tmpfs" ino=322 res=1 errno=0 [ 165.437755][ T6806] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.280'. [ 165.463338][ T6805] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.280'. [ 166.483959][ T6830] program syz.3.287 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.845842][ T6837] netlink: 'syz.5.292': attribute type 13 has an invalid length. [ 166.845903][ T6837] macvtap0: entered promiscuous mode [ 166.968850][ T6837] macvtap0: refused to change device tx_queue_len [ 167.200621][ T37] audit: type=1326 audit(1757069098.660:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6845 comm="syz.5.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f597f60ebe9 code=0x7ffc0000 [ 167.237733][ T37] audit: type=1326 audit(1757069098.710:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6845 comm="syz.5.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f597f60ebe9 code=0x7ffc0000 [ 167.267449][ T37] audit: type=1326 audit(1757069098.740:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6845 comm="syz.5.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f597f60ebe9 code=0x7ffc0000 [ 167.267508][ T37] audit: type=1326 audit(1757069098.740:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6845 comm="syz.5.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f597f60ebe9 code=0x7ffc0000 [ 167.267556][ T37] audit: type=1326 audit(1757069098.740:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6845 comm="syz.5.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f597f60ebe9 code=0x7ffc0000 [ 167.305015][ T37] audit: type=1326 audit(1757069098.780:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6845 comm="syz.5.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f597f60ebe9 code=0x7ffc0000 [ 167.331330][ T37] audit: type=1326 audit(1757069098.780:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6845 comm="syz.5.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f597f60ebe9 code=0x7ffc0000 [ 167.331384][ T37] audit: type=1326 audit(1757069098.800:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6845 comm="syz.5.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f597f605ba7 code=0x7ffc0000 [ 167.331426][ T37] audit: type=1326 audit(1757069098.800:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6845 comm="syz.5.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f597f5aadb9 code=0x7ffc0000 [ 168.123111][ T6014] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 168.293194][ T6014] usb 1-1: Using ep0 maxpacket: 8 [ 168.294125][ T6014] usb 1-1: too many configurations: 129, using maximum allowed: 8 [ 168.295950][ T6014] usb 1-1: config 0 has no interfaces? [ 168.297439][ T6014] usb 1-1: config 0 has no interfaces? [ 168.299356][ T6014] usb 1-1: config 0 has no interfaces? [ 168.302010][ T6014] usb 1-1: config 0 has no interfaces? [ 168.355522][ T6014] usb 1-1: config 0 has no interfaces? [ 168.360036][ T6014] usb 1-1: config 0 has no interfaces? [ 168.373647][ T6014] usb 1-1: config 0 has no interfaces? [ 168.377917][ T6014] usb 1-1: config 0 has no interfaces? [ 168.401022][ T6014] usb 1-1: New USB device found, idVendor=0a5c, idProduct=bd27, bcdDevice=6e.27 [ 168.401055][ T6014] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.401075][ T6014] usb 1-1: Product: syz [ 168.401090][ T6014] usb 1-1: Manufacturer: syz [ 168.401104][ T6014] usb 1-1: SerialNumber: syz [ 168.451875][ T6014] usb 1-1: config 0 descriptor?? [ 169.317904][ T5919] usb 1-1: USB disconnect, device number 3 [ 169.825744][ T6899] netlink: 44 bytes leftover after parsing attributes in process `syz.4.317'. [ 170.159577][ T6903] ref_ctr_offset mismatch. inode: 0x15c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 170.292488][ T6910] @: renamed from vlan0 (while UP) [ 170.876707][ T6915] block device autoloading is deprecated and will be removed. [ 171.315369][ T6926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.327'. [ 171.466340][ T5919] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 171.569550][ T6932] netlink: 'syz.0.330': attribute type 2 has an invalid length. [ 171.623102][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 171.638200][ T5919] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 171.638230][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.638249][ T5919] usb 4-1: config 0 has no interface number 0 [ 171.642121][ T5919] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 171.642149][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.642168][ T5919] usb 4-1: Product: syz [ 171.642182][ T5919] usb 4-1: Manufacturer: syz [ 171.642196][ T5919] usb 4-1: SerialNumber: syz [ 171.699622][ T5906] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 171.732953][ T5919] usb 4-1: config 0 descriptor?? [ 171.760180][ T5919] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 171.760216][ T5919] usb 4-1: No valid video chain found. [ 171.842965][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 171.848671][ T5906] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 171.848698][ T5906] usb 2-1: config 0 has no interface number 0 [ 171.848748][ T5906] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.848786][ T5906] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.848825][ T5906] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 171.848847][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.925029][ T5906] usb 2-1: config 0 descriptor?? [ 172.009761][ T5847] usb 4-1: USB disconnect, device number 6 [ 172.274130][ T6943] netlink: 27 bytes leftover after parsing attributes in process `syz.5.335'. [ 172.570078][ T6948] netlink: 14 bytes leftover after parsing attributes in process `syz.5.337'. [ 172.583113][ T5906] uclogic 0003:28BD:0094.0005: pen parameters not found [ 172.583141][ T5906] uclogic 0003:28BD:0094.0005: interface is invalid, ignoring [ 172.631962][ T6948] hsr_slave_0: left promiscuous mode [ 172.694277][ T6948] hsr_slave_1: left promiscuous mode [ 172.808276][ T5919] usb 2-1: USB disconnect, device number 4 [ 173.341214][ T6962] netlink: 32 bytes leftover after parsing attributes in process `syz.0.343'. [ 174.763496][ T6991] pimreg: tun_chr_ioctl cmd 35111 [ 176.548379][ T7028] Zero length message leads to an empty skb [ 177.754770][ T59] Bluetooth: hci1: command tx timeout [ 178.026632][ T7051] bridge0: entered promiscuous mode [ 179.368012][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'. [ 180.153677][ T7101] netlink: 52 bytes leftover after parsing attributes in process `syz.1.400'. [ 180.343095][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 180.499095][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 180.501682][ T9] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.501715][ T9] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.525538][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 180.525569][ T9] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 180.525589][ T9] usb 1-1: Product: syz [ 180.525603][ T9] usb 1-1: Manufacturer: syz [ 180.570771][ T9] hub 1-1:4.0: USB hub found [ 180.857370][ T9] hub 1-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 181.243480][ T5927] usb 1-1: USB disconnect, device number 4 [ 181.261386][ T7122] sctp: [Deprecated]: syz.3.407 (pid 7122) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.261386][ T7122] Use struct sctp_sack_info instead [ 181.983404][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 182.133100][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 182.156466][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 182.156501][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 182.162556][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 182.162586][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.162606][ T9] usb 2-1: Product: syz [ 182.162620][ T9] usb 2-1: Manufacturer: syz [ 182.162634][ T9] usb 2-1: SerialNumber: syz [ 182.191959][ T5978] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 182.246929][ T9] usb 2-1: config 0 descriptor?? [ 182.296686][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 182.296732][ T9] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 182.372776][ T5978] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 182.372804][ T5978] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 182.372823][ T5978] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.413567][ T5978] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.413665][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.413685][ T5978] usb 1-1: Product: syz [ 182.413709][ T5978] usb 1-1: Manufacturer: syz [ 182.413723][ T5978] usb 1-1: SerialNumber: syz [ 182.920062][ T9] em28xx 2-1:0.0: chip ID is em2870 [ 183.149741][ T5906] usb 2-1: USB disconnect, device number 5 [ 183.154664][ T5906] em28xx 2-1:0.0: Disconnecting em28xx [ 183.164828][ T5978] usb 1-1: 0:2 : does not exist [ 183.303016][ T7162] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 183.348023][ T5906] em28xx 2-1:0.0: Freeing device [ 183.415232][ T5978] usb 1-1: USB disconnect, device number 5 [ 183.635036][ T6766] udevd[6766]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.929812][ T7175] netlink: 20 bytes leftover after parsing attributes in process `syz.1.427'. [ 184.363032][ T5906] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 184.563024][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 184.565816][ T5906] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 184.565843][ T5906] usb 4-1: config 0 has no interface number 0 [ 184.565900][ T5906] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 184.565925][ T5906] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 184.570666][ T5906] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 184.570694][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.570713][ T5906] usb 4-1: Product: syz [ 184.570727][ T5906] usb 4-1: Manufacturer: syz [ 184.570741][ T5906] usb 4-1: SerialNumber: syz [ 184.597769][ T7191] netlink: 48 bytes leftover after parsing attributes in process `syz.4.433'. [ 184.597795][ T7191] netlink: 48 bytes leftover after parsing attributes in process `syz.4.433'. [ 184.686283][ T5906] usb 4-1: config 0 descriptor?? [ 184.687275][ T7178] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 184.687441][ T7178] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 184.929878][ T7178] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 184.931039][ T7178] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 185.342493][ T5906] asix 4-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 185.343321][ T5906] asix 4-1:0.251: probe with driver asix failed with error -524 [ 185.390919][ T5847] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 185.473360][ T5927] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 185.559758][ T5847] usb 5-1: Using ep0 maxpacket: 32 [ 185.567384][ T5847] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 185.567411][ T5847] usb 5-1: config 0 has no interface number 0 [ 185.567460][ T5847] usb 5-1: config 0 interface 12 has no altsetting 0 [ 185.572091][ T5847] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 185.572116][ T5847] usb 5-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 185.572133][ T5847] usb 5-1: Product: syz [ 185.572146][ T5847] usb 5-1: Manufacturer: syz [ 185.572158][ T5847] usb 5-1: SerialNumber: syz [ 185.634502][ T6014] usb 4-1: USB disconnect, device number 7 [ 185.643035][ T5927] usb 6-1: Using ep0 maxpacket: 16 [ 185.657022][ T5927] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 185.657089][ T5927] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.657116][ T5927] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.657139][ T5927] usb 6-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 185.657165][ T5927] usb 6-1: config 7 interface 0 has no altsetting 0 [ 185.657203][ T5927] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 185.657227][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.789801][ T5847] usb 5-1: config 0 descriptor?? [ 186.260308][ T5927] hid (null): invalid report_size 812540268 [ 186.481441][ T5927] input: HID 0458:5010 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:7.0/0003:0458:5010.0006/input/input9 [ 186.697100][ T5847] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 186.697166][ T5847] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 186.697184][ T5847] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 186.697293][ T5847] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 186.756846][ T5847] usb 5-1: USB disconnect, device number 4 [ 186.786529][ T5927] kye 0003:0458:5010.0006: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.5-1/input0 [ 187.031891][ T5927] usb 6-1: USB disconnect, device number 2 [ 187.483220][ T5978] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 187.633226][ T5978] usb 2-1: Using ep0 maxpacket: 16 [ 187.637834][ T5978] usb 2-1: config 4 has an invalid interface number: 9 but max is 0 [ 187.637862][ T5978] usb 2-1: config 4 has no interface number 0 [ 187.637897][ T5978] usb 2-1: config 4 interface 9 has no altsetting 0 [ 187.654470][ T7231] fido_id[7231]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 187.683704][ T5978] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 187.683737][ T5978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.683757][ T5978] usb 2-1: Product: syz [ 187.683771][ T5978] usb 2-1: Manufacturer: syz [ 187.683785][ T5978] usb 2-1: SerialNumber: syz [ 187.797928][ T5978] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 188.112180][ T3425] usb 2-1: Failed to submit usb control message: -71 [ 188.112218][ T3425] usb 2-1: unable to send the bmi data to the device: -71 [ 188.112232][ T3425] usb 2-1: unable to get target info from device [ 188.112244][ T3425] usb 2-1: could not get target info (-71) [ 188.112260][ T3425] usb 2-1: could not probe fw (-71) [ 188.114965][ T5927] usb 2-1: USB disconnect, device number 6 [ 188.299204][ T7252] ======================================================= [ 188.299204][ T7252] WARNING: The mand mount option has been deprecated and [ 188.299204][ T7252] and is ignored by this kernel. Remove the mand [ 188.299204][ T7252] option from the mount to silence this warning. [ 188.299204][ T7252] ======================================================= [ 188.299485][ T7252] 9pnet_fd: Insufficient options for proto=fd [ 188.907179][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 188.907199][ T37] audit: type=1326 audit(1757069120.380:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7261 comm="syz.5.453" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f597f60ebe9 code=0x0 [ 190.183006][ T5926] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 190.336001][ T5926] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 190.336033][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.378590][ T5926] usb 6-1: config 0 descriptor?? [ 190.406824][ T5926] cp210x 6-1:0.0: cp210x converter detected [ 190.890744][ T5926] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 190.959808][ T5926] usb 6-1: cp210x converter now attached to ttyUSB0 [ 191.157042][ T5926] usb 6-1: USB disconnect, device number 3 [ 191.290804][ T5926] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 191.365840][ T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 191.545910][ T9] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 191.545940][ T9] usb 5-1: config 1 has an invalid interface number: 4 but max is 0 [ 191.545960][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 191.545980][ T9] usb 5-1: config 1 has no interface number 0 [ 191.545996][ T9] usb 5-1: config 1 has no interface number 1 [ 191.546062][ T9] usb 5-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 191.546108][ T9] usb 5-1: config 1 interface 4 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 191.546130][ T9] usb 5-1: config 1 interface 4 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 191.546156][ T9] usb 5-1: config 1 interface 105 has no altsetting 0 [ 191.546174][ T9] usb 5-1: config 1 interface 4 has no altsetting 0 [ 191.734427][ T9] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 191.734459][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.734478][ T9] usb 5-1: Product: syz [ 191.734492][ T9] usb 5-1: Manufacturer: syz [ 191.734505][ T9] usb 5-1: SerialNumber: syz [ 191.796107][ T5926] cp210x 6-1:0.0: device disconnected [ 192.070215][ T9] aqc111 5-1:1.105: probe with driver aqc111 failed with error -22 [ 192.327184][ T5906] usb 5-1: USB disconnect, device number 5 [ 193.225087][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 193.403266][ T9] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 193.403296][ T9] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 193.403314][ T9] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 193.403333][ T9] usb 4-1: config 220 has no interface number 2 [ 193.403434][ T9] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 193.403462][ T9] usb 4-1: config 220 interface 0 has no altsetting 0 [ 193.403480][ T9] usb 4-1: config 220 interface 76 has no altsetting 0 [ 193.403498][ T9] usb 4-1: config 220 interface 1 has no altsetting 0 [ 193.410141][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 193.410173][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.410193][ T9] usb 4-1: Product: syz [ 193.410207][ T9] usb 4-1: Manufacturer: syz [ 193.410221][ T9] usb 4-1: SerialNumber: syz [ 193.493056][ T7357] program syz.1.486 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.802426][ T9] usb 4-1: selecting invalid altsetting 0 [ 193.809159][ T9] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 193.809195][ T9] usb 4-1: No valid video chain found. [ 193.864172][ T9] usb 4-1: selecting invalid altsetting 0 [ 193.864217][ T9] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 193.887453][ T9] usb 4-1: USB disconnect, device number 8 [ 194.529975][ T7374] syz.5.495 (7374) used greatest stack depth: 18472 bytes left [ 194.643151][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.643237][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.733681][ T7378] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.497'. [ 197.770234][ T7442] netlink: 188 bytes leftover after parsing attributes in process `syz.0.525'. [ 199.340521][ T7463] netlink: 20 bytes leftover after parsing attributes in process `syz.1.535'. [ 199.779107][ T67] tipc: Subscription rejected, illegal request [ 201.076127][ T7482] syz.4.543 (7482) used greatest stack depth: 16696 bytes left [ 201.419665][ T7497] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 201.419665][ T7497] The task syz.1.548 (7497) triggered the difference, watch for misbehavior. [ 202.542377][ T7512] process 'syz.1.556' launched './file2' with NULL argv: empty string added [ 204.926322][ T37] audit: type=1326 audit(1757069136.400:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7522 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb8bca95ba7 code=0x7ffc0000 [ 204.926390][ T37] audit: type=1326 audit(1757069136.400:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7522 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb8bca3adb9 code=0x7ffc0000 [ 204.993011][ T37] audit: type=1326 audit(1757069136.400:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7522 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb8bca95ba7 code=0x7ffc0000 [ 204.993075][ T37] audit: type=1326 audit(1757069136.460:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7522 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb8bca3adb9 code=0x7ffc0000 [ 204.993124][ T37] audit: type=1326 audit(1757069136.460:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7522 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb8bca95ba7 code=0x7ffc0000 [ 204.993182][ T37] audit: type=1326 audit(1757069136.460:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7522 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb8bca3adb9 code=0x7ffc0000 [ 204.993230][ T37] audit: type=1326 audit(1757069136.460:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7522 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb8bca95ba7 code=0x7ffc0000 [ 204.993278][ T37] audit: type=1326 audit(1757069136.460:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7522 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb8bca3adb9 code=0x7ffc0000 [ 204.995001][ T37] audit: type=1326 audit(1757069136.460:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7522 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb8bca95ba7 code=0x7ffc0000 [ 204.995054][ T37] audit: type=1326 audit(1757069136.470:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7522 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb8bca3adb9 code=0x7ffc0000 [ 205.303044][ T5927] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 207.631461][ T7548] netlink: 132 bytes leftover after parsing attributes in process `syz.5.572'. [ 207.668183][ T7549] netlink: 'syz.5.572': attribute type 12 has an invalid length. [ 207.668210][ T7549] netlink: 132 bytes leftover after parsing attributes in process `syz.5.572'. [ 223.322168][ T5154] Bluetooth: hci3: command 0x0406 tx timeout [ 223.322321][ T5154] Bluetooth: hci0: command 0x0406 tx timeout [ 223.322350][ T5154] Bluetooth: hci2: command 0x0406 tx timeout [ 255.024264][ T5154] Bluetooth: hci4: command 0x0406 tx timeout [ 256.966686][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.265161][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.325643][ C0] sched: DL replenish lagged too much [ 274.375651][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.029958][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.009734][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.569209][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.586910][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.640886][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.641428][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.642446][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.171356][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.172386][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 300.595067][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 378.351303][ T38] INFO: task kworker/u9:6:5857 blocked for more than 143 seconds. [ 378.351330][ T38] Not tainted syzkaller #0 [ 378.351340][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 378.351350][ T38] task:kworker/u9:6 state:D stack:26536 pid:5857 tgid:5857 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 378.351427][ T38] Workqueue: hci3 hci_cmd_sync_work [ 378.351453][ T38] Call Trace: [ 378.351461][ T38] [ 378.351477][ T38] __schedule+0x16f3/0x4c20 [ 378.351538][ T38] ? __pfx___schedule+0x10/0x10 [ 378.351588][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 378.351628][ T38] rt_mutex_schedule+0x77/0xf0 [ 378.351650][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 378.351672][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 378.351716][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 378.351742][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 378.351766][ T38] ? __pfx[ 378.351766][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 378.351786][ T38] ? __lock_acquire+0xab9/0xd20 [ 378.351828][ T38] ? hci_conn_failed+0x165/0x310 [ 378.351862][ T38] ? __pfx_mgmt_connect_failed+0x10/0x10 [ 378.351900][ T38] ? hci_conn_failed+0x165/0x310 [ 378.351923][ T38] mutex_lock_nested+0x16a/0x1d0 [ 378.351953][ T38] hci_conn_failed+0x165/0x310 [ 378.351983][ T38] ? hci_abort_conn_sync+0x24e/0xe30 [ 378.352009][ T38] hci_abort_conn_sync+0x658/0xe30 [ 378.352049][ T38] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 378.352079][ T38] ? hci_conn_valid+0x21/0x230 [ 378.352098][ T38] ? hci_conn_valid+0x21/0x230 [ 378.352114][ T38] ? hci_conn_valid+0x21/0x230 [ 378.352134][ T38] ? hci_conn_valid+0x211/0x230 [ 378.352153][ T38] ? __pfx_abort_conn_sync+0x10/0x10 [ 378.352187][ T38] hci_cmd_sync_work+0x213/0x3a0 [ 378.352214][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 378.352244][ T38] process_scheduled_works+0xade/0x17b0 [ 378.352307][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 378.352355][ T38] worker_thread+0x8a0/0xda0 [ 378.352413][ T38] kthread+0x70e/0x8a0 [ 378.352448][ T38] ? __pfx_worker_thread+0x10/0x10 [ 378.352475][ T38] ? __pfx_kthread+0x10/0x10 [ 378.352512][ T38] ? __pfx_kthread+0x10/0x10 [ 378.352545][ T38] ret_from_fork+0x3f9/0x770 [ 378.352575][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 378.352610][ T38] ? __switch_to_asm+0x39/0x70 [ 378.352636][ T38] ? __switch_to_asm+0x33/0x70 [ 378.352654][ T38] ? __pfx_kthread+0x10/0x10 [ 378.352686][ T38] ret_from_fork_asm+0x1a/0x30 [ 378.352727][ T38] [ 378.698102][ T38] INFO: task kworker/1:7:6014 blocked for more than 143 seconds. [ 378.698129][ T38] Not tainted syzkaller #0 [ 378.698140][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 378.698150][ T38] task:kworker/1:7 state:D stack:21512 pid:6014 tgid:6014 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 378.698214][ T38] Workqueue: events_power_efficient reg_check_chans_work [ 378.698248][ T38] Call Trace: [ 378.698256][ T38] [ 378.698272][ T38] __schedule+0x16f3/0x4c20 [ 378.698317][ T38] ? __lock_acquire+0xab9/0xd20 [ 378.698369][ T38] ? __pfx___schedule+0x10/0x10 [ 378.698426][ T38] rt_mutex_schedule+0x77/0xf0 [ 378.698447][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 378.698487][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 378.698514][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 378.698541][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 378.698565][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 378.698585][ T38] ? __lock_acquire+0xab9/0xd20 [ 378.698624][ T38] ? reg_check_chans_work+0x164/0xf30 [ 378.698655][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 378.698684][ T38] ? __lock_acquire+0xab9/0xd20 [ 378.698718][ T38] ? reg_check_chans_work+0x164/0xf30 [ 378.698742][ T38] mutex_lock_nested+0x16a/0x1d0 [ 378.698764][ T38] ? reg_check_chans_work+0x95/0xf30 [ 378.698796][ T38] reg_check_chans_work+0x164/0xf30 [ 378.698832][ T38] ? __lock_acquire+0xab9/0xd20 [ 378.698869][ T38] ? __pfx_reg_check_chans_work+0x10/0x10 [ 378.698898][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 378.698933][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 378.698959][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 378.698983][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 378.699011][ T38] process_scheduled_works+0xade/0x17b0 [ 378.699073][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 378.699121][ T38] worker_thread+0x8a0/0xda0 [ 378.699151][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 378.699190][ T38] ? __kthread_parkme+0x7b/0x200 [ 378.699232][ T38] kthread+0x70e/0x8a0 [ 378.699267][ T38] ? __pfx_worker_thread+0x10/0x10 [ 378.699292][ T38] ? __pfx_kthread+0x10/0x10 [ 378.699329][ T38] ? __pfx_kthread+0x10/0x10 [ 378.699369][ T38] ret_from_fork+0x3f9/0x770 [ 378.699401][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 378.699435][ T38] ? __switch_to_asm+0x39/0x70 [ 378.699455][ T38] ? __switch_to_asm+0x33/0x70 [ 378.699473][ T38] ? __pfx_kthread+0x10/0x10 [ 378.699504][ T38] ret_from_fork_asm+0x1a/0x30 [ 378.699544][ T38] [ 378.699595][ T38] [ 378.699595][ T38] Showing all locks held in the system: [ 378.699604][ T38] 4 locks held by kworker/0:0/9: [ 378.699616][ T38] #0: ffff88823bf54f38 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.699676][ T38] #1: ffffc900000e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.699743][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.699796][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.699847][ T38] 4 locks held by kworker/0:1/10: [ 378.699859][ T38] #0: ffff88805c6bc538 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.699915][ T38] #1: ffffc900000f7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.699981][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.700032][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.700084][ T38] 7 locks held by kworker/u8:0/12: [ 378.700095][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.700146][ T38] #1: ffffc90000117bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.700198][ T38] #2: ffff88803b72f300 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 378.700258][ T38] #3: ffff88805df51520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 378.700312][ T38] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 378.700367][ T38] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.700417][ T38] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.700468][ T38] 6 locks held by kworker/u8:1/13: [ 378.700479][ T38] #0: ffff88806163a138 ((wq_completion)wg-kex-wg1#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.700536][ T38] #1: ffffc90000127bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.700590][ T38] #2: ffff88805e7b95f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 378.700638][ T38] #3: ffff88805dea7880 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 378.700695][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.700745][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.700797][ T38] 2 locks held by ksoftirqd/0/15: [ 378.700808][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.700858][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.700910][ T38] 4 locks held by ktimers/0/16: [ 378.700921][ T38] 4 locks held by pr/legacy/17: [ 378.700933][ T38] 2 locks held by rcuc/0/20: [ 378.700944][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.700993][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.701047][ T38] 2 locks held by rcuc/1/28: [ 378.701058][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.701108][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.701161][ T38] 1 lock held by khungtaskd/38: [ 378.701172][ T38] #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 378.701236][ T38] 5 locks held by kworker/u8:2/43: [ 378.701247][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.701299][ T38] #1: ffffc90000b47bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.701359][ T38] #2: ffff88805f570898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 378.701410][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.701461][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.701515][ T38] 6 locks held by kworker/1:1/49: [ 378.701526][ T38] #0: ffff888035935538 ((wq_completion)wg-kex-wg1#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.701583][ T38] #1: ffffc90000bb7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.701647][ T38] #2: ffff8880362915f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x115/0x970 [ 378.701693][ T38] #3: ffff88803b710e90 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x126/0x970 [ 378.701740][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.701790][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.701843][ T38] 2 locks held by kworker/u9:0/59: [ 378.701855][ T38] 3 locks held by kworker/u8:4/67: [ 378.701866][ T38] #0: ffff888030276938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.701917][ T38] #1: ffffc9000152fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.701969][ T38] #2: ffffffff8ecd2978 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 378.702020][ T38] 4 locks held by kworker/u8:5/157: [ 378.702036][ T38] 3 locks held by kworker/0:2/992: [ 378.702051][ T38] 4 locks held by kworker/u8:6/1123: [ 378.702062][ T38] #0: ffff88805c4e6938 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.702117][ T38] #1: ffffc90004f57bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.702170][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.702219][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.702270][ T38] 4 locks held by kworker/u8:7/1160: [ 378.702281][ T38] #0: ffff888035d9f938 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.702332][ T38] #1: ffffc90004ff7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.702392][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.702442][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.702495][ T38] 2 locks held by aoe_tx0/1322: [ 378.702505][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.702555][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.702605][ T38] 5 locks held by kworker/u8:8/1335: [ 378.702616][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.702667][ T38] #1: ffffc90005547bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.702718][ T38] #2: ffff888049680898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 378.748051][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.748110][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.748165][ T38] 4 locks held by kworker/u8:9/1519: [ 378.748177][ T38] #0: ffff888035d9d138 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.748230][ T38] #1: ffffc90005a57bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.748283][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.748334][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.748408][ T38] 4 locks held by kworker/u8:10/3425: [ 378.748419][ T38] #0: ffff888030a38938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.748470][ T38] #1: ffffc9000d6ffbc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.748523][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.748573][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.748623][ T38] 5 locks held by kworker/u8:11/3491: [ 378.748635][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.748686][ T38] #1: ffffc9000d82fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.748738][ T38] #2: ffff888049430898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 378.748789][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.748841][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.748892][ T38] 5 locks held by kworker/u8:12/5043: [ 378.748904][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.748955][ T38] #1: ffffc9001003fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.749006][ T38] #2: ffff888049100898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 378.749056][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.749142][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.749195][ T38] 5 locks held by kworker/u9:1/5154: [ 378.749206][ T38] #0: ffff8880277e6938 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.749257][ T38] #1: ffffc9001027fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.749308][ T38] #2: ffff88805ecb4e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 378.749362][ T38] #3: ffff88805ecb40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 378.749415][ T38] #4: ffffffff8ee3a338 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 378.749469][ T38] 4 locks held by kworker/0:3/5220: [ 378.749481][ T38] #0: ffff88805c6a9d38 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.749537][ T38] #1: ffffc90003c7fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.749603][ T38] #2: ffff88805c6a55f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 378.749652][ T38] #3: ffff888021b74e20 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 378.749700][ T38] 3 locks held by dhcpcd/5501: [ 378.749711][ T38] #0: ffff88803822d050 (sk_lock-AF_UNIX){+.+.}-{0:0}, at: sk_setsockopt+0xc2f/0x2a70 [ 378.749764][ T38] #1: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.749815][ T38] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.749867][ T38] 2 locks held by getty/5598: [ 378.749878][ T38] #0: ffff88823bf660a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 378.749932][ T38] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 378.749980][ T38] 2 locks held by dhcpcd/5638: [ 378.749990][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.750041][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.750091][ T38] 3 locks held by syz-executor/5825: [ 378.750102][ T38] #0: ffff8880380721d0 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 378.750149][ T38] #1: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.750200][ T38] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.750252][ T38] 2 locks held by syz-executor/5843: [ 378.750264][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.750314][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.750373][ T38] 5 locks held by kworker/u9:2/5846: [ 378.750384][ T38] #0: ffff88802930d938 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.750435][ T38] #1: ffffc9000457fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.750484][ T38] #2: ffff88805b604e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 378.750526][ T38] #3: ffff88805b6040a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 378.750577][ T38] #4: ffffffff8ee3a338 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 378.750628][ T38] 4 locks held by kworker/1:2/5847: [ 378.750639][ T38] #0: ffff888032b78138 ((wq_completion)wg-kex-wg1#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.750695][ T38] #1: ffffc9000459fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.750761][ T38] #2: ffff88805e7b95f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 378.750809][ T38] #3: ffff88805dea7880 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 378.750857][ T38] 2 locks held by syz-executor/5850: [ 378.750868][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.750918][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.750969][ T38] 4 locks held by kworker/u9:3/5851: [ 378.750980][ T38] #0: ffff888038ef4938 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.751036][ T38] #1: ffffc900045cfbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.751087][ T38] #2: ffff8880605140a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 378.751135][ T38] #3: ffffffff8ee3a338 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 378.751184][ T38] 6 locks held by kworker/u9:4/5852: [ 378.751195][ T38] #0: ffff8880365fb138 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.751245][ T38] #1: ffffc900045dfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.751297][ T38] #2: ffff888059ea0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 378.751342][ T38] #3: ffff888059ea00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 378.751400][ T38] #4: ffffffff8ee3a338 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 378.751452][ T38] #5: ffff888027f88b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 378.751510][ T38] 4 locks held by kworker/u9:5/5853: [ 378.751522][ T38] #0: ffff8880256fb938 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.751572][ T38] #1: ffffc9000460fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.751622][ T38] #2: ffff888038eb8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 378.751665][ T38] #3: ffff888038eb80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 378.751717][ T38] 5 locks held by kworker/u9:6/5857: [ 378.751728][ T38] #0: ffff8880256ff138 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.751778][ T38] #1: ffffc9000462fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.751829][ T38] #2: ffff88803c9c8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 378.751874][ T38] #3: ffff88803c9c80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 378.751926][ T38] #4: ffffffff8ee3a338 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 378.751979][ T38] 4 locks held by kworker/1:3/5881: [ 378.751990][ T38] #0: ffff88805c6a8938 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.752047][ T38] #1: ffffc90004b4fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.752113][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.752163][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.752215][ T38] 4 locks held by kworker/1:5/5926: [ 378.752225][ T38] #0: ffff88823bf54f38 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.752273][ T38] #1: ffffc90004f37bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.752333][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.752390][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.752441][ T38] 4 locks held by kworker/0:5/5978: [ 378.752452][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.752504][ T38] #1: ffffc90005247bc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.752554][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.752603][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.752653][ T38] 4 locks held by kworker/0:7/5993: [ 378.752664][ T38] #0: ffff88805bed5938 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.752720][ T38] #1: ffffc900052c7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.820633][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.820681][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.820726][ T38] 4 locks held by kworker/1:7/6014: [ 378.820736][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.820778][ T38] #1: ffffc900052b7bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.820819][ T38] #2: ffffffff8ecd2978 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30 [ 378.820862][ T38] #3: ffff888049ce0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x164/0xf30 [ 378.820905][ T38] 5 locks held by kworker/u8:13/6039: [ 378.820914][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.820956][ T38] #1: ffffc90005077bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.820998][ T38] #2: ffff88805f780898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 378.821040][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.821079][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.821122][ T38] 7 locks held by kworker/u8:16/6043: [ 378.821131][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.821171][ T38] #1: ffffc90005157bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.821229][ T38] #2: ffff88803734a300 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 378.821276][ T38] #3: ffff88804b69f920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 378.821319][ T38] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 378.821358][ T38] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.821398][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.821438][ T38] 7 locks held by kworker/u8:20/6047: [ 378.821449][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.821496][ T38] #1: ffffc90005497bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.821547][ T38] #2: ffff88805ddf3300 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 378.821613][ T38] #3: ffff88805dc27520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 378.821666][ T38] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 378.821707][ T38] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.821743][ T38] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.821789][ T38] 6 locks held by kworker/u8:25/6052: [ 378.821800][ T38] #0: ffff888035d9f938 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.821851][ T38] #1: ffffc90005517bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.821903][ T38] #2: ffff8880354b15f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 378.821952][ T38] #3: ffff88805dea1928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 378.822000][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.822051][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.822102][ T38] 5 locks held by kworker/u8:26/6053: [ 378.822113][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.822164][ T38] #1: ffffc90005527bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.822215][ T38] #2: ffff888049bc0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 378.822266][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.822314][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.822362][ T38] 4 locks held by kworker/u8:28/6055: [ 378.822373][ T38] #0: ffff88805c784938 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.822428][ T38] #1: ffffc90005557bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.822478][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.822528][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.822579][ T38] 6 locks held by kworker/u8:30/6057: [ 378.822590][ T38] #0: ffff888035e4c938 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.822654][ T38] #1: ffffc90005587bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.822697][ T38] #2: ffff88805c1e95f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 378.822738][ T38] #3: ffff888021b723c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 378.951427][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.951483][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.951538][ T38] 6 locks held by kworker/u8:33/6060: [ 378.951551][ T38] #0: ffff88805de8e138 ((wq_completion)wg-kex-wg0#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.951610][ T38] #1: ffffc900055b7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.951668][ T38] #2: ffff888060e015f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 378.951718][ T38] #3: ffff88803b714e20 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 378.951764][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.951815][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.951866][ T38] 5 locks held by kworker/u8:35/6063: [ 378.951876][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.951927][ T38] #1: ffffc900055d7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.951977][ T38] #2: ffff8880498d0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 378.952029][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.952079][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.952130][ T38] 6 locks held by kworker/u8:36/6066: [ 378.952141][ T38] #0: ffff88805c4e7938 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.952193][ T38] #1: ffffc900055e7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.952246][ T38] #2: ffff88805c6a55f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 378.952293][ T38] #3: ffff888021b74e20 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 378.952341][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.952452][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 378.952503][ T38] 5 locks held by kworker/u8:37/6067: [ 378.952513][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.952565][ T38] #1: ffffc900055f7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.952614][ T38] #2: ffff888049ce0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 378.952664][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 378.952715][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 379.053479][ T38] 5 locks held by kworker/u8:38/6068: [ 379.053491][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 379.053531][ T38] #1: ffffc90005607bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 379.053572][ T38] #2: ffff888049af0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 379.053614][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 379.053656][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 379.053698][ T38] 7 locks held by kworker/u8:40/6071: [ 379.053708][ T38] 5 locks held by kworker/u8:41/6072: [ 379.053718][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 379.053759][ T38] #1: ffffc90005647bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 379.053800][ T38] #2: ffff888048e10898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 379.053842][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 379.053882][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 379.053922][ T38] 7 locks held by kworker/u8:42/6074: [ 379.053932][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 379.053973][ T38] #1: ffffc90005657bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 379.054014][ T38] #2: ffff88801a7ba300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 379.054058][ T38] #3: ffff88805d979d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 379.054100][ T38] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 379.054139][ T38] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 379.054179][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 379.054220][ T38] 6 locks held by kworker/u8:43/6075: [ 379.054228][ T38] #0: ffff88805c8d8138 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 379.054273][ T38] #1: ffffc90005977bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 379.054314][ T38] #2: ffff8880362955f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 379.054354][ T38] #3: ffff88803b7138f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 379.054403][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 379.054444][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 379.054485][ T38] 6 locks held by kworker/u8:44/6076: [ 379.054494][ T38] #0: ffff88806163a138 ((wq_completion)wg-kex-wg1#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 379.054539][ T38] #1: ffffc90005987bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 379.054580][ T38] #2: ffff88805e7b95f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 379.054618][ T38] #3: ffff8880367303f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 379.054656][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 379.054697][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 379.054737][ T38] 7 locks held by kworker/u8:45/6079: [ 379.054746][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 379.054787][ T38] #1: ffffc90005997bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 379.054828][ T38] #2: ffff88803712d300 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 379.054874][ T38] #3: ffff888048d6b920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 379.054915][ T38] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 379.054953][ T38] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 379.054992][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 379.055033][ T38] 6 locks held by kworker/u8:48/6083: [ 379.055045][ T38] 4 locks held by syz-executor/6310: [ 379.055055][ T38] #0: ffff88803db260f8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 379.055098][ T38] #1: ffff888035fba350 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 379.055139][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 379.055178][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 379.055220][ T38] 2 locks held by napi/wg2-0/6597: [ 379.055229][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 379.055270][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 379.055313][ T38] 1 lock held by syz.3.544/7483: [ 379.055323][ T38] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 379.055367][ T38] 6 locks held by kworker/1:8/7561: [ 379.055377][ T38] #0: ffff88805beb7d38 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 379.055439][ T38] #1: ffffc90003d3fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 379.055493][ T38] #2: ffff8880358dd5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x115/0x970 [ 379.055530][ T38] #3: ffff888021b70e90 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x126/0x970 [ 379.055567][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 379.055606][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 379.055646][ T38] 2 locks held by kworker/1:9/7563: [ 379.055657][ T38] 4 locks held by kworker/1:13/7567: [ 379.055667][ T38] #0: ffff88805bed4138 ((wq_completion)wg-crypt-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 379.055713][ T38] #1: ffffc90005007bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 379.055753][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 379.055790][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 379.055829][ T38] 4 locks held by kworker/1:14/7568: [ 379.055838][ T38] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 379.055879][ T38] #1: ffffc90004fd7bc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 379.055921][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 379.055959][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 379.055999][ T38] 4 locks held by kworker/1:16/7571: [ 379.056008][ T38] #0: ffff88805e7ec138 ((wq_completion)wg-crypt-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 379.056056][ T38] #1: ffffc90005057bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 379.056097][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 379.056137][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 379.056179][ T38] 4 locks held by kworker/1:17/7572: [ 379.056188][ T38] #0: ffff88805e7ed138 ((wq_completion)wg-crypt-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 379.056232][ T38] #1: ffffc90006267bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 379.056278][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 379.056323][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 379.056368][ T38] 1 lock held by dhcpcd/7573: [ 379.056378][ T38] #0: ffff88805e221d78 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 379.056441][ T38] 4 locks held by kworker/1:18/7574: [ 379.056451][ T38] #0: ffff88805c6bc538 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 379.056506][ T38] #1: ffffc90005f87bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 379.056577][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 379.056632][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 379.056676][ T38] 2 locks held by kworker/1:19/7575: [ 379.056687][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 379.056737][ T38] #1: ffffc90005f77bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 379.056790][ T38] 4 locks held by kworker/1:20/7576: [ 379.056800][ T38] #0: ffff88805bfd8538 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 379.056850][ T38] #1: ffffc90005f67bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 379.056900][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 379.056938][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 379.056977][ T38] 1 lock held by syz-executor/7577: [ 379.056986][ T38] #0: ffffffff8ecd2978 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 379.057023][ T38] 4 locks held by kworker/0:8/7580: [ 379.057032][ T38] #0: ffff88805c6d5138 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 379.057079][ T38] #1: ffffc90005f17bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 379.057128][ T38] #2: ffff88805ca695f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 379.057165][ T38] #3: ffff88805dea6de8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 379.057203][ T38] 5 locks held by kworker/0:9/7581: [ 379.057212][ T38] #0: ffff88805e7ec538 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 379.057257][ T38] #1: ffffc90005ef7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 379.057307][ T38] #2: ffff88805e7bd5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x1c7/0xb00 [ 379.057345][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 379.057385][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 379.057515][ T38] 1 lock held by dhcpcd/7582: [ 379.057524][ T38] #0: ffff8880352d8350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 379.057562][ T38] 14 locks held by kworker/0:10/7583: [ 379.057572][ T38] #0: ffff88805bfd8538 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 379.057621][ T38] #1: ffffc900059b7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 379.057679][ T38] #2: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 379.057728][ T38] #3: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 379.057770][ T38] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 379.057797][ T38] #5: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x27b/0x900 [ 379.057825][ T38] #6: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: ip6_input+0x23/0x270 [ 379.057853][ T38] #7: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9a/0x3a0 [ 379.057879][ T38] #8: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x710/0x1720 [ 379.057906][ T38] #9: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 379.057933][ T38] #10: ffffffff8d9a8c20 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x26f/0x3b70 [ 379.057959][ T38] #11: ffff8880602bd318 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#8){+...}-{3:3}, at: __dev_queue_xmit+0xd58/0x3b70 [ 379.057988][ T38] #12: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 379.058013][ T38] #13: ffff8880602bd188 (&sch->root_lock_key#56){+...}-{3:3}, at: __dev_queue_xmit+0xd62/0x3b70 [ 379.058041][ T38] 6 locks held by kworker/0:11/7584: [ 379.058048][ T38] #0: ffff88805beb7d38 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 379.058078][ T38] #1: ffffc90005967bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 379.058117][ T38] #2: ffff8880358dd5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x115/0x970 [ 379.058144][ T38] #3: ffff888021b703f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x126/0x970 [ 379.058170][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 379.058198][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 379.058227][ T38] 1 lock held by syz.1.579/7596: [ 379.058233][ T38] #0: ffffffff8ecd2978 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newroute+0x109/0x210 [ 379.058260][ T38] 5 locks held by kworker/1:24/7588: [ 379.058266][ T38] #0: ffff888032146538 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 379.058297][ T38] #1: ffffc90004e47bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 379.058334][ T38] #2: ffff88803550d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x1c7/0xb00 [ 379.058361][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 379.058388][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 379.058424][ T38] 4 locks held by kworker/1:25/7589: [ 379.058430][ T38] #0: ffff88805c6d5538 ((wq_completion)wg-crypt-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 379.058460][ T38] #1: ffffc90004e37bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 379.058488][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 379.058516][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 379.058544][ T38] 5 locks held by kworker/1:26/7590: [ 379.058550][ T38] #0: ffff88805c6a9d38 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 379.058581][ T38] #1: ffffc90004e27bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 379.058618][ T38] #2: ffff88805c6a55f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 379.058647][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 379.058675][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 379.058703][ T38] 4 locks held by kworker/1:27/7591: [ 379.058709][ T38] #0: ffff88805bed5938 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 379.058739][ T38] #1: ffffc90004dd7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 379.058776][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 379.058803][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 379.058831][ T38] 4 locks held by kworker/1:28/7592: [ 379.058837][ T38] #0: ffff88805c6be938 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 379.058868][ T38] #1: ffffc90004db7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 379.058905][ T38] #2: ffff88805c7bd5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 379.058931][ T38] #3: ffff88805dea58b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 379.058960][ T38] 3 locks held by kworker/0:12/7598: [ 379.058966][ T38] #0: ffff888032b78138 ((wq_completion)wg-kex-wg1#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 379.058996][ T38] #1: ffffc90004f97bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 379.059033][ T38] #2: ffff8880367303f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 379.059060][ T38] 1 lock held by dhcpcd/7599: [ 379.059066][ T38] #0: ffff8880352ba350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 379.059093][ T38] 4 locks held by kworker/0:14/7601: [ 379.059099][ T38] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 379.059127][ T38] #1: ffffc9000444fbc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 379.059156][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 379.059183][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 379.059211][ T38] 1 lock held by dhcpcd/7603: [ 379.059217][ T38] #0: ffff8880357da350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 379.059246][ T38] [ 379.059249][ T38] ============================================= [ 379.059249][ T38] [ 379.059255][ T38] NMI backtrace for cpu 1 [ 379.059264][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 379.059279][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 379.059286][ T38] Call Trace: [ 379.059292][ T38] [ 379.059299][ T38] dump_stack_lvl+0x189/0x250 [ 379.059318][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.059334][ T38] ? __pfx__printk+0x10/0x10 [ 379.059353][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 379.059368][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 379.059382][ T38] ? __pfx__printk+0x10/0x10 [ 379.059402][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 379.059417][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 379.059432][ T38] watchdog+0xf93/0xfe0 [ 379.059450][ T38] ? watchdog+0x1de/0xfe0 [ 379.059466][ T38] kthread+0x70e/0x8a0 [ 379.059485][ T38] ? __pfx_watchdog+0x10/0x10 [ 379.059498][ T38] ? __pfx_kthread+0x10/0x10 [ 379.059518][ T38] ? __pfx_kthread+0x10/0x10 [ 379.059534][ T38] ret_from_fork+0x3f9/0x770 [ 379.059550][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 379.059567][ T38] ? __switch_to_asm+0x39/0x70 [ 379.059577][ T38] ? __switch_to_asm+0x33/0x70 [ 379.059587][ T38] ? __pfx_kthread+0x10/0x10 [ 379.059612][ T38] ret_from_fork_asm+0x1a/0x30 [ 379.059631][ T38] [ 379.059635][ T38] Sending NMI from CPU 1 to CPUs 0: [ 379.059679][ C0] NMI backtrace for cpu 0 [ 379.059694][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 379.059711][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 379.059720][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 379.059743][ C0] Code: d3 b2 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 93 11 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 379.059756][ C0] RSP: 0018:ffffffff8d607d80 EFLAGS: 000002c6 [ 379.059771][ C0] RAX: 8ede4c7b7d7eb100 RBX: ffffffff81954f48 RCX: 8ede4c7b7d7eb100 [ 379.059783][ C0] RDX: 0000000000000001 RSI: ffffffff8d039955 RDI: ffffffff8b620e80 [ 379.059795][ C0] RBP: ffffffff8d607eb8 R08: ffff8880b883341b R09: 1ffff11017106683 [ 379.059807][ C0] R10: dffffc0000000000 R11: ffffed1017106684 R12: ffffffff8f1d5130 [ 379.059818][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1ae0620 [ 379.059853][ C0] FS: 0000000000000000(0000) GS:ffff8881268c1000(0000) knlGS:0000000000000000 [ 379.059867][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 379.059880][ C0] CR2: 000056120da58fe0 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 379.059896][ C0] Call Trace: [ 379.059902][ C0] [ 379.059909][ C0] default_idle+0x13/0x20 [ 379.059931][ C0] default_idle_call+0x74/0xb0 [ 379.059954][ C0] do_idle+0x1e8/0x510 [ 379.059973][ C0] ? __pfx_do_idle+0x10/0x10 [ 379.059987][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 379.060009][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 379.060029][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 379.060053][ C0] cpu_startup_entry+0x44/0x60 [ 379.060069][ C0] rest_init+0x2de/0x300 [ 379.060085][ C0] start_kernel+0x3a9/0x410 [ 379.060106][ C0] x86_64_start_reservations+0x24/0x30 [ 379.060126][ C0] x86_64_start_kernel+0x143/0x1c0 [ 379.060146][ C0] common_startup_64+0x13e/0x147 [ 379.060170][ C0] [ 379.060657][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 379.060667][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 379.060680][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 379.060686][ T38] Call Trace: [ 379.060691][ T38] [ 379.060695][ T38] dump_stack_lvl+0x99/0x250 [ 379.060712][ T38] ? __asan_memcpy+0x40/0x70 [ 379.060725][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.060741][ T38] ? __pfx__printk+0x10/0x10 [ 379.060759][ T38] vpanic+0x281/0x750 [ 379.060777][ T38] ? __pfx_vpanic+0x10/0x10 [ 379.060791][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 379.060803][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.060823][ T38] panic+0xb9/0xc0 [ 379.060843][ T38] ? __pfx_panic+0x10/0x10 [ 379.060860][ T38] ? irq_work_queue+0xc3/0x140 [ 379.060877][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 379.060890][ T38] watchdog+0xfd2/0xfe0 [ 379.060907][ T38] ? watchdog+0x1de/0xfe0 [ 379.060924][ T38] kthread+0x70e/0x8a0 [ 379.060941][ T38] ? __pfx_watchdog+0x10/0x10 [ 379.060955][ T38] ? __pfx_kthread+0x10/0x10 [ 379.060974][ T38] ? __pfx_kthread+0x10/0x10 [ 379.060990][ T38] ret_from_fork+0x3f9/0x770 [ 379.061006][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 379.061024][ T38] ? __switch_to_asm+0x39/0x70 [ 379.061033][ T38] ? __switch_to_asm+0x33/0x70 [ 379.061043][ T38] ? __pfx_kthread+0x10/0x10 [ 379.061060][ T38] ret_from_fork_asm+0x1a/0x30 [ 379.061078][ T38] [ 379.061248][ T38] Kernel Offset: disabled