last executing test programs: 1m39.433179953s ago: executing program 1 (id=169): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001280)=@newtaction={0xf74, 0x30, 0x1, 0x0, 0x0, {}, [{0xf60, 0x1, [@m_simple={0xf5c, 0x11, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'vlan\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x6, 0x2, 0x7, 0xfffffffa}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xf04, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0xf74}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r5 = socket(0x10, 0x3, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000000)=0x4, 0x4) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, 0x0, &(0x7f0000000080)) r7 = socket(0x40000000015, 0x5, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, 0x0, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x2, 0x0, @mcast1, 0x9}, 0x1c) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000004c0)={0x138, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0x10, 0x0, 0x1, [@generic]}, @nested={0x11e, 0x6, 0x0, 0x1, [@typed={0xf1, 0x12b, 0x0, 0x0, @binary="8eab44a5159d834f7a577417b5091d0aac85ef225fb8e3c8fdd2f87bc9333944af4d958747a97f5dfa8f3a0df989a8f4cfcc8a0b0c74808d8ddfb58a24ace32cd6545f956216b8471f880e80f1f26bdcc7e4a4205744b9ceb87f7e8ba79cf7a294a9009fb421d24d53c0707e155e078a7839c40f0105a02b9c169f981fa3c96661f8579e1edb7b3b4222e84bfc269b9600d7e7e52d0874b155d588b935b48ae618a36ca423735f466467d01823ab53aff4cffb81a84735653bf5e2656f1c5db992060d7766b7aac5fffd3d2aea3579c8074e0f8681f4f8192dcda190a364823142539c7ad525134d072c0655df"}, @generic="26c1e5e4409b7b2f21eaecd84205d99f8ad8c8696cd5d3eed9ad9a6c845fff292724b9ce7c1b"]}]}, 0x138}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1], 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, 0x0, 0x0) 1m38.850927s ago: executing program 3 (id=175): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000780)) 1m38.675931289s ago: executing program 3 (id=177): syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) 1m38.446314956s ago: executing program 3 (id=178): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="83ecaa", 0x3}], 0x1, &(0x7f0000004980)=ANY=[@ANYBLOB="1c0000000000000000", @ANYRES32, @ANYBLOB], 0x110}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)="52ebdccdeac236c89202fb8602a6a2601077900aafacd55411a2216b4647510f28e104c3", 0x24}], 0x1}}, {{0x0, 0x0, &(0x7f0000004040)}}], 0x3, 0x8800) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 1m38.30513304s ago: executing program 0 (id=179): close(0x3) 1m38.200916606s ago: executing program 1 (id=182): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), 0x0}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 1m38.118467329s ago: executing program 0 (id=183): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 1m38.117660579s ago: executing program 4 (id=184): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) close(r0) 1m37.960566487s ago: executing program 1 (id=185): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r2, @ANYBLOB="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"], 0x184}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="4d5c65a111002ffad6369304b7a63092f2be89a8d99ee9e074301b5af825e03163bed3692b3f9f72aaac7754ac028c92c716c7d4cc1fca9ff8c1907556cc1f98e9c25610e86c120949cfe35b4ec1fffd914ceccb81c5aa607af136f93bc9df28985717eb8de604b58a5a636d371b7928b409a89b256f44c8f342b5ab0983c7b8562fbe61beb0c11883e7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x8918, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'vxcan1\x00', {'vxcan1\x00'}, 0xc6f}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x18, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000040)=0x8) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000010010000"], 0x28, 0xe000}, 0x5}], 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 1m37.769851264s ago: executing program 4 (id=187): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000780)) 1m37.768806551s ago: executing program 0 (id=188): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a80)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4040840) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001bc0), r0) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x32}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000001d00), 0x200, 0x0) 1m37.569295451s ago: executing program 1 (id=189): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r1, 0x105, 0xffffffff, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac01, 0xfac0c]}]]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x0) 1m37.390729423s ago: executing program 3 (id=191): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) 1m37.371458734s ago: executing program 0 (id=192): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r1, 0x105, 0xffffffff, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x0) 1m37.370502784s ago: executing program 4 (id=193): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a80)=@newqdisc={0x54, 0x24, 0xf0b, 0x4000, 0x25dfdbfc, {0x0, 0x0, 0x12, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x11}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x200}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x54}}, 0x48004) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, 0x0, 0x0) close(r4) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003a80)=""/4101, 0x1005}], 0x1}, 0x2101) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='vegas\x00', 0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m37.098127941s ago: executing program 1 (id=194): close(0x3) 1m36.87449994s ago: executing program 0 (id=195): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@mcast1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r0, 0x0, 0x20000c91) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(0xffffffffffffffff, 0xfffffffc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x18, 0x800, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vxcan1\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) 1m36.846010022s ago: executing program 2 (id=196): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 1m36.282343273s ago: executing program 3 (id=197): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x15}, 0xffff}, 0xe) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x70}, 0xe) 1m35.894173751s ago: executing program 4 (id=198): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) 1m35.754226226s ago: executing program 1 (id=199): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f0000000640), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4000010) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0xa, 0x3, 0x3a) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 1m35.543734219s ago: executing program 4 (id=200): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) close(0x4) 1m35.536418525s ago: executing program 2 (id=201): syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf252100000008000300", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40084) 1m35.291404353s ago: executing program 0 (id=202): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{0x0}], 0x1}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r0], 0x78}}, 0x20000800) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 1m35.290619615s ago: executing program 3 (id=203): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x8}]}}]}, 0x44}}, 0x800) 1m35.17344398s ago: executing program 2 (id=204): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) 1m35.009440264s ago: executing program 4 (id=205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r1, 0x105, 0xffffffff, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x0) 1m34.372887047s ago: executing program 2 (id=206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f0000050007"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1m34.16895422s ago: executing program 2 (id=207): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)='7', 0x1}], 0x1}}], 0x1, 0x1) 1m11.296825178s ago: executing program 2 (id=208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={0xa0, r1, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x6e, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xff}, @device_b, @device_b, @from_mac, {0x4, 0x3}}, 0x2, @random, 0x8086, @val, @void, @val={0x3, 0x1, 0x4}, @val={0x4, 0x6, {0x0, 0x2, 0xc, 0xff56}}, @val={0x6, 0x2, 0x46}, @void, @val={0x25, 0x3, {0x0, 0x0, 0xf5}}, @val={0x2a, 0x1, {0x1}}, @void, @val={0x2d, 0x1a, {0x1000, 0x3, 0x7, 0x0, {0x4, 0xff, 0x0, 0x55, 0x0, 0x1, 0x1, 0x3}, 0x8, 0x3, 0x4}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x4}}, @void}}, @NL80211_ATTR_IE={0x4}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x101}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20004090}, 0x888) 1m6.127225914s ago: executing program 32 (id=202): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{0x0}], 0x1}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r0], 0x78}}, 0x20000800) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 52.685271443s ago: executing program 33 (id=199): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f0000000640), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4000010) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0xa, 0x3, 0x3a) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 31.814824926s ago: executing program 34 (id=203): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x8}]}}]}, 0x44}}, 0x800) 25.676492692s ago: executing program 35 (id=205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r1, 0x105, 0xffffffff, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x0) 0s ago: executing program 36 (id=208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={0xa0, r1, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x6e, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xff}, @device_b, @device_b, @from_mac, {0x4, 0x3}}, 0x2, @random, 0x8086, @val, @void, @val={0x3, 0x1, 0x4}, @val={0x4, 0x6, {0x0, 0x2, 0xc, 0xff56}}, @val={0x6, 0x2, 0x46}, @void, @val={0x25, 0x3, {0x0, 0x0, 0xf5}}, @val={0x2a, 0x1, {0x1}}, @void, @val={0x2d, 0x1a, {0x1000, 0x3, 0x7, 0x0, {0x4, 0xff, 0x0, 0x55, 0x0, 0x1, 0x1, 0x3}, 0x8, 0x3, 0x4}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x4}}, @void}}, @NL80211_ATTR_IE={0x4}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x101}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20004090}, 0x888) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.97' (ED25519) to the list of known hosts. [ 82.983260][ T5825] cgroup: Unknown subsys name 'net' [ 83.240304][ T5825] cgroup: Unknown subsys name 'cpuset' [ 83.345833][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.033065][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.935792][ T9] cfg80211: failed to load regulatory.db [ 87.665549][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.695123][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.695857][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.697431][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.698339][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.699764][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.700566][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.752191][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.770745][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.778373][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.953910][ T5157] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.965751][ T5157] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.968205][ T5157] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.970248][ T5157] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.971275][ T5157] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.040331][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.042132][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.043516][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.045770][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.046978][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.119645][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.121092][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.121841][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.148872][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.150630][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.815114][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 88.821445][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 89.151314][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 89.178069][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 89.220895][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 89.796617][ T5849] Bluetooth: hci1: command tx timeout [ 89.869000][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.869622][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.869956][ T5843] bridge_slave_0: entered allmulticast mode [ 89.872449][ T5843] bridge_slave_0: entered promiscuous mode [ 89.881826][ T5849] Bluetooth: hci0: command tx timeout [ 89.883610][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.883736][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.883897][ T5846] bridge_slave_0: entered allmulticast mode [ 89.892975][ T5846] bridge_slave_0: entered promiscuous mode [ 89.957973][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.958081][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.958362][ T5843] bridge_slave_1: entered allmulticast mode [ 89.959914][ T5843] bridge_slave_1: entered promiscuous mode [ 89.961883][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.961959][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.962219][ T5846] bridge_slave_1: entered allmulticast mode [ 89.963708][ T5846] bridge_slave_1: entered promiscuous mode [ 90.034912][ T5849] Bluetooth: hci2: command tx timeout [ 90.114960][ T5849] Bluetooth: hci3: command tx timeout [ 90.195048][ T5849] Bluetooth: hci4: command tx timeout [ 90.685633][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.685748][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.685862][ T5851] bridge_slave_0: entered allmulticast mode [ 90.687360][ T5851] bridge_slave_0: entered promiscuous mode [ 90.702494][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.716893][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.719250][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.719378][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.719918][ T5853] bridge_slave_0: entered allmulticast mode [ 90.722488][ T5853] bridge_slave_0: entered promiscuous mode [ 90.825878][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.826010][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.826184][ T5851] bridge_slave_1: entered allmulticast mode [ 90.828460][ T5851] bridge_slave_1: entered promiscuous mode [ 90.832183][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.834279][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.834505][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.834639][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.845999][ T5853] bridge_slave_1: entered allmulticast mode [ 90.848564][ T5853] bridge_slave_1: entered promiscuous mode [ 90.850473][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.850608][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.850774][ T5855] bridge_slave_0: entered allmulticast mode [ 90.855581][ T5855] bridge_slave_0: entered promiscuous mode [ 91.167325][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.173440][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.173591][ T5855] bridge_slave_1: entered allmulticast mode [ 91.175562][ T5855] bridge_slave_1: entered promiscuous mode [ 91.688576][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.690426][ T5843] team0: Port device team_slave_0 added [ 91.692442][ T5846] team0: Port device team_slave_0 added [ 91.706620][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.800227][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.802893][ T5843] team0: Port device team_slave_1 added [ 91.807330][ T5846] team0: Port device team_slave_1 added [ 91.810983][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.815970][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.874979][ T5849] Bluetooth: hci1: command tx timeout [ 91.954940][ T5849] Bluetooth: hci0: command tx timeout [ 92.099646][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.116456][ T5849] Bluetooth: hci2: command tx timeout [ 92.194966][ T5849] Bluetooth: hci3: command tx timeout [ 92.275787][ T5849] Bluetooth: hci4: command tx timeout [ 92.457596][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.457612][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.457635][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.609838][ T5851] team0: Port device team_slave_0 added [ 92.610876][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.610888][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.610910][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.613093][ T5853] team0: Port device team_slave_0 added [ 92.708125][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.708141][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.708164][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.709993][ T5851] team0: Port device team_slave_1 added [ 92.710814][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.710825][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.710839][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.712450][ T5853] team0: Port device team_slave_1 added [ 92.713935][ T5855] team0: Port device team_slave_0 added [ 92.910617][ T5855] team0: Port device team_slave_1 added [ 93.106022][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.106032][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.106045][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.108047][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.108060][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.108074][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.337771][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.337788][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.337811][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.417566][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.417582][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.417606][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.518378][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.518400][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.518423][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.702667][ T5843] hsr_slave_0: entered promiscuous mode [ 93.703675][ T5843] hsr_slave_1: entered promiscuous mode [ 93.717627][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.717640][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.717661][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.728438][ T5846] hsr_slave_0: entered promiscuous mode [ 93.729768][ T5846] hsr_slave_1: entered promiscuous mode [ 93.732317][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 93.732426][ T5846] Cannot create hsr debugfs directory [ 93.954867][ T5849] Bluetooth: hci1: command tx timeout [ 94.034887][ T5849] Bluetooth: hci0: command tx timeout [ 94.194881][ T5849] Bluetooth: hci2: command tx timeout [ 94.275955][ T5849] Bluetooth: hci3: command tx timeout [ 94.345494][ T5851] hsr_slave_0: entered promiscuous mode [ 94.346842][ T5851] hsr_slave_1: entered promiscuous mode [ 94.347731][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 94.347752][ T5851] Cannot create hsr debugfs directory [ 94.354969][ T5849] Bluetooth: hci4: command tx timeout [ 94.550929][ T5853] hsr_slave_0: entered promiscuous mode [ 94.552386][ T5853] hsr_slave_1: entered promiscuous mode [ 94.552908][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 94.552927][ T5853] Cannot create hsr debugfs directory [ 94.640355][ T5855] hsr_slave_0: entered promiscuous mode [ 94.641130][ T5855] hsr_slave_1: entered promiscuous mode [ 94.641640][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 94.641658][ T5855] Cannot create hsr debugfs directory [ 96.034836][ T5849] Bluetooth: hci1: command tx timeout [ 96.088429][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.115023][ T5849] Bluetooth: hci0: command tx timeout [ 96.139486][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.161581][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.217654][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.276531][ T5849] Bluetooth: hci2: command tx timeout [ 96.332971][ T5851] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.354897][ T5849] Bluetooth: hci3: command tx timeout [ 96.364210][ T5851] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.416597][ T5851] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.438350][ T5849] Bluetooth: hci4: command tx timeout [ 96.463657][ T5851] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.624259][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.682248][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.730934][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.797977][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.966698][ T5855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.026066][ T5855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.068482][ T5855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.121705][ T5855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.300963][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.301505][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.351844][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.384389][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.441302][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.525731][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.559296][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.606017][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.606214][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.661582][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.661731][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.728895][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.771586][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.798843][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.799069][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.845477][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.845568][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.913181][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.946701][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.966256][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.966619][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.051868][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.052910][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.157965][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.251291][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.257121][ T1344] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.257823][ T1344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.318409][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.318525][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.430372][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.516777][ T1344] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.516995][ T1344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.539398][ T1344] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.539570][ T1344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.569450][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.924245][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.073718][ T5843] veth0_vlan: entered promiscuous mode [ 99.122814][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.153004][ T5843] veth1_vlan: entered promiscuous mode [ 99.407868][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.459076][ T5843] veth0_macvtap: entered promiscuous mode [ 99.485630][ T5853] veth0_vlan: entered promiscuous mode [ 99.520134][ T5843] veth1_macvtap: entered promiscuous mode [ 99.557371][ T5853] veth1_vlan: entered promiscuous mode [ 99.643898][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.682640][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.688496][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.747840][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.767123][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.780502][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.799337][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.800226][ T5855] veth0_vlan: entered promiscuous mode [ 99.812924][ T5853] veth0_macvtap: entered promiscuous mode [ 99.919164][ T5853] veth1_macvtap: entered promiscuous mode [ 99.977500][ T5851] veth0_vlan: entered promiscuous mode [ 99.986024][ T5855] veth1_vlan: entered promiscuous mode [ 100.105698][ T5851] veth1_vlan: entered promiscuous mode [ 100.160698][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.200974][ T5846] veth0_vlan: entered promiscuous mode [ 100.202495][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.202519][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.213518][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.270671][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.289030][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.304496][ T5846] veth1_vlan: entered promiscuous mode [ 100.308868][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.325756][ T5855] veth0_macvtap: entered promiscuous mode [ 100.327476][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.439767][ T5855] veth1_macvtap: entered promiscuous mode [ 100.443709][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.443727][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.454979][ T5851] veth0_macvtap: entered promiscuous mode [ 100.551153][ T5851] veth1_macvtap: entered promiscuous mode [ 100.666754][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.796548][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.797122][ T5846] veth0_macvtap: entered promiscuous mode [ 100.965487][ T1344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.965506][ T1344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.969315][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.971103][ T5846] veth1_macvtap: entered promiscuous mode [ 101.001403][ T1119] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.005556][ T1119] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.051039][ T1119] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.090996][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.680314][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.891778][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.891797][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.916208][ T1042] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.921528][ T1042] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.922891][ T5956] batadv_slave_1: entered promiscuous mode [ 101.940715][ T1042] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.980987][ T5956] netlink: 37548 bytes leftover after parsing attributes in process `syz.1.6'. [ 102.000015][ T1042] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.011503][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.145434][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.252409][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.270199][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.291099][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.325635][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.325655][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.326082][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.345343][ T5827] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.463568][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.463587][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.517761][ T5827] usb 2-1: Using ep0 maxpacket: 32 [ 102.530526][ T5827] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 102.530551][ T5827] usb 2-1: config 0 has no interface number 0 [ 102.530602][ T5827] usb 2-1: config 0 interface 230 has no altsetting 0 [ 102.545429][ T5827] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 102.545458][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.545488][ T5827] usb 2-1: Product: syz [ 102.545501][ T5827] usb 2-1: Manufacturer: syz [ 102.545514][ T5827] usb 2-1: SerialNumber: syz [ 102.601795][ T5827] usb 2-1: config 0 descriptor?? [ 102.640954][ T5827] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 102.675394][ T5957] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.681586][ T5827] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 102.814420][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.814439][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.829753][ T5957] usb 1-1: Using ep0 maxpacket: 8 [ 102.834239][ T5957] usb 1-1: config 5 has an invalid interface number: 52 but max is 1 [ 102.834263][ T5957] usb 1-1: config 5 has an invalid interface number: 4 but max is 1 [ 102.834281][ T5957] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 102.834298][ T5957] usb 1-1: config 5 has no interface number 0 [ 102.835826][ T5957] usb 1-1: config 5 has no interface number 1 [ 102.835887][ T5957] usb 1-1: config 5 interface 52 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.836143][ T5957] usb 1-1: config 5 interface 4 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 102.836169][ T5957] usb 1-1: config 5 interface 52 has no altsetting 0 [ 102.836186][ T5957] usb 1-1: config 5 interface 4 has no altsetting 0 [ 102.849231][ T5957] usb 1-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 102.849467][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.849487][ T5957] usb 1-1: Product: syz [ 102.849500][ T5957] usb 1-1: Manufacturer: syz [ 102.849512][ T5957] usb 1-1: SerialNumber: syz [ 102.986716][ T5955] batadv_slave_1: left promiscuous mode [ 103.098186][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.098205][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.115463][ T5827] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 103.202736][ T1344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.202754][ T1344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.246086][ T5957] cytherm 1-1:5.52: Cypress thermometer device now attached [ 103.274342][ T5827] usb 2-1: USB disconnect, device number 2 [ 103.403028][ T5957] cytherm 1-1:5.4: Cypress thermometer device now attached [ 103.479193][ T5957] usb 1-1: USB disconnect, device number 2 [ 103.497717][ T5957] cytherm 1-1:5.52: Cypress thermometer now disconnected [ 103.542730][ T5957] cytherm 1-1:5.4: Cypress thermometer now disconnected [ 103.861561][ T1344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.861580][ T1344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.014723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.024716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.034691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.044689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.054691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.064689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.074690][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.084698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.094694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.101813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.313729][ T5980] fuse: Bad value for 'fd' [ 105.874934][ T5901] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.056088][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 106.068528][ T5901] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 106.068554][ T5901] usb 1-1: config 0 has no interface number 0 [ 106.068603][ T5901] usb 1-1: config 0 interface 184 has no altsetting 0 [ 106.089298][ T5901] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 106.089326][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.089343][ T5901] usb 1-1: Product: syz [ 106.089353][ T5901] usb 1-1: Manufacturer: syz [ 106.089374][ T5901] usb 1-1: SerialNumber: syz [ 106.189355][ T5901] usb 1-1: config 0 descriptor?? [ 106.215881][ T5901] smsc75xx v1.0.0 [ 107.658548][ T5992] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 107.663754][ T5992] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 108.951642][ T5901] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 109.180462][ T6006] Bluetooth: MGMT ver 1.23 [ 109.869064][ T5983] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 110.166771][ T1042] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.215486][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.216771][ T1042] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.231579][ T1042] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.335036][ T6010] capability: warning: `syz.3.14' uses deprecated v2 capabilities in a way that may be insecure [ 110.755119][ T5961] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.755136][ T5901] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 110.755159][ T5901] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 110.755176][ T5901] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 110.755212][ T5901] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 110.756207][ T5901] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 110.890015][ T5901] usb 1-1: USB disconnect, device number 3 [ 110.904784][ T5961] usb 4-1: Using ep0 maxpacket: 32 [ 110.907223][ T5961] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 110.907246][ T5961] usb 4-1: config 0 has no interface number 0 [ 110.952273][ T5961] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 110.952303][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.952322][ T5961] usb 4-1: Product: syz [ 110.952335][ T5961] usb 4-1: Manufacturer: syz [ 110.952348][ T5961] usb 4-1: SerialNumber: syz [ 110.998670][ T5961] usb 4-1: config 0 descriptor?? [ 111.008299][ T5961] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 111.626821][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 111.667218][ T5961] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 111.762742][ T5961] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 111.797572][ T5961] usb 4-1: USB disconnect, device number 2 [ 111.885738][ T5961] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 111.938742][ T5961] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 111.939862][ T5961] quatech2 4-1:0.51: device disconnected [ 112.156065][ T6022] netlink: 88 bytes leftover after parsing attributes in process `syz.1.19'. [ 112.556743][ T6025] NILFS (loop1): device size too small [ 115.773556][ T6040] fuse: Bad value for 'fd' [ 116.003627][ T6039] overlayfs: failed to resolve './file1': -2 [ 117.074912][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 117.460046][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 117.460165][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 117.460202][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 117.460224][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.512657][ T9] usb 1-1: config 0 descriptor?? [ 117.857152][ T6039] warning: `syz.0.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.936795][ T9] usb 1-1: USB disconnect, device number 4 [ 118.003726][ T6058] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 119.047666][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'. [ 120.140258][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.32'. [ 121.793583][ T6091] batadv_slave_1: entered promiscuous mode [ 121.826418][ T6091] netlink: 159784 bytes leftover after parsing attributes in process `syz.1.36'. [ 122.039702][ T6095] netlink: 20 bytes leftover after parsing attributes in process `syz.3.35'. [ 122.040086][ T6095] netlink: 20 bytes leftover after parsing attributes in process `syz.3.35'. [ 122.116023][ T5923] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 122.156902][ T6098] batadv_slave_1: entered promiscuous mode [ 122.378896][ T6098] netlink: 37548 bytes leftover after parsing attributes in process `syz.4.38'. [ 123.184750][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 123.187317][ T5923] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 123.187341][ T5923] usb 2-1: config 0 has no interface number 0 [ 123.187392][ T5923] usb 2-1: config 0 interface 230 has no altsetting 0 [ 123.192452][ T5923] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 123.192480][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.192499][ T5923] usb 2-1: Product: syz [ 123.192512][ T5923] usb 2-1: Manufacturer: syz [ 123.192526][ T5923] usb 2-1: SerialNumber: syz [ 123.241335][ T5923] usb 2-1: config 0 descriptor?? [ 123.248539][ T5923] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 123.287383][ T5923] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 123.616493][ T6090] batadv_slave_1: left promiscuous mode [ 123.972373][ T6005] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 124.155233][ T5923] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 124.687134][ T5923] usb 2-1: USB disconnect, device number 3 [ 125.014782][ T6005] usb 5-1: Using ep0 maxpacket: 32 [ 125.040723][ T6005] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 125.040750][ T6005] usb 5-1: config 0 has no interface number 0 [ 125.040802][ T6005] usb 5-1: config 0 interface 230 has no altsetting 0 [ 125.932396][ T6005] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 125.932426][ T6005] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.932446][ T6005] usb 5-1: Product: syz [ 125.932460][ T6005] usb 5-1: Manufacturer: syz [ 126.015165][ T6101] batadv_slave_1: left promiscuous mode [ 126.016828][ T6005] usb 5-1: config 0 descriptor?? [ 126.025935][ T6005] usb 5-1: can't set config #0, error -71 [ 126.045520][ T6005] usb 5-1: USB disconnect, device number 2 [ 126.115311][ T5894] udevd[5894]: setting mode of /dev/bus/usb/005/002 to 020664 failed: No such file or directory [ 126.115514][ T5894] udevd[5894]: setting owner of /dev/bus/usb/005/002 to uid=0, gid=0 failed: No such file or directory [ 126.625935][ T6127] batadv_slave_1: entered promiscuous mode [ 126.649274][ T6127] netlink: 159784 bytes leftover after parsing attributes in process `syz.3.45'. [ 126.943925][ T5827] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 128.155767][ T5827] usb 4-1: Using ep0 maxpacket: 32 [ 128.188529][ T5827] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 128.188557][ T5827] usb 4-1: config 0 has no interface number 0 [ 128.188610][ T5827] usb 4-1: config 0 interface 230 has no altsetting 0 [ 128.192801][ T5827] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 128.192829][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.192848][ T5827] usb 4-1: Product: syz [ 128.192863][ T5827] usb 4-1: Manufacturer: syz [ 128.192877][ T5827] usb 4-1: SerialNumber: syz [ 128.417287][ T5827] usb 4-1: config 0 descriptor?? [ 128.468265][ T5827] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 128.502537][ T5827] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 128.834760][ T6123] batadv_slave_1: left promiscuous mode [ 128.905383][ T5827] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 128.967069][ T5827] usb 4-1: USB disconnect, device number 3 [ 130.787375][ T6153] batadv_slave_1: entered promiscuous mode [ 130.802535][ T6153] netlink: 159784 bytes leftover after parsing attributes in process `syz.3.52'. [ 130.999341][ T6158] batadv_slave_1: entered promiscuous mode [ 131.078176][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.121358][ T6158] netlink: 37548 bytes leftover after parsing attributes in process `syz.2.54'. [ 131.224825][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 131.228309][ T10] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 131.228336][ T10] usb 4-1: config 0 has no interface number 0 [ 131.228389][ T10] usb 4-1: config 0 interface 230 has no altsetting 0 [ 131.233675][ T10] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 131.233703][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.233723][ T10] usb 4-1: Product: syz [ 131.233737][ T10] usb 4-1: Manufacturer: syz [ 131.233751][ T10] usb 4-1: SerialNumber: syz [ 131.337131][ T10] usb 4-1: config 0 descriptor?? [ 131.388742][ T10] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 131.454856][ T5827] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 132.235948][ T6152] batadv_slave_1: left promiscuous mode [ 132.438645][ T10] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 132.544880][ T5827] usb 3-1: Using ep0 maxpacket: 32 [ 132.555242][ T5827] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 132.555269][ T5827] usb 3-1: config 0 has no interface number 0 [ 132.555317][ T5827] usb 3-1: config 0 interface 230 has no altsetting 0 [ 132.567459][ T5827] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 132.567487][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.567506][ T5827] usb 3-1: Product: syz [ 132.567520][ T5827] usb 3-1: Manufacturer: syz [ 132.567534][ T5827] usb 3-1: SerialNumber: syz [ 132.605912][ T5827] usb 3-1: config 0 descriptor?? [ 132.633458][ T5827] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 132.677704][ T5827] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 132.708602][ T10] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 132.860757][ T6174] netlink: 20 bytes leftover after parsing attributes in process `syz.0.56'. [ 132.860901][ T6174] netlink: 20 bytes leftover after parsing attributes in process `syz.0.56'. [ 133.205635][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.205732][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.508710][ T10] usb 4-1: USB disconnect, device number 4 [ 133.850777][ T6157] batadv_slave_1: left promiscuous mode [ 134.755189][ T5827] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5 [ 134.861864][ T5827] usb 3-1: USB disconnect, device number 2 [ 137.010223][ T6202] batadv_slave_1: entered promiscuous mode [ 137.231340][ T6202] netlink: 37548 bytes leftover after parsing attributes in process `syz.3.64'. [ 137.504762][ T44] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 137.605693][ T6208] batadv_slave_1: entered promiscuous mode [ 137.616084][ T6208] netlink: 159784 bytes leftover after parsing attributes in process `syz.0.67'. [ 137.664771][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 137.667130][ T44] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 137.667154][ T44] usb 4-1: config 0 has no interface number 0 [ 137.667201][ T44] usb 4-1: config 0 interface 230 has no altsetting 0 [ 137.670206][ T44] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 137.670231][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.670249][ T44] usb 4-1: Product: syz [ 137.670262][ T44] usb 4-1: Manufacturer: syz [ 137.670283][ T44] usb 4-1: SerialNumber: syz [ 137.737515][ T44] usb 4-1: config 0 descriptor?? [ 137.744546][ T44] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 137.955173][ T5957] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 137.966133][ T44] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 138.910827][ T6201] batadv_slave_1: left promiscuous mode [ 138.924800][ T5957] usb 3-1: Using ep0 maxpacket: 32 [ 139.004850][ T5957] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 139.004878][ T5957] usb 3-1: config 0 has no interface number 0 [ 139.004929][ T5957] usb 3-1: config 0 interface 184 has no altsetting 0 [ 139.020672][ T5827] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 139.393894][ T5957] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 139.394499][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.395738][ T5957] usb 3-1: Product: syz [ 139.395753][ T5957] usb 3-1: Manufacturer: syz [ 139.395820][ T5957] usb 3-1: SerialNumber: syz [ 139.569739][ T5827] usb 1-1: Using ep0 maxpacket: 32 [ 139.718679][ T5957] usb 3-1: config 0 descriptor?? [ 139.720274][ T5827] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 139.720299][ T5827] usb 1-1: config 0 has no interface number 0 [ 139.720394][ T5827] usb 1-1: config 0 interface 230 has no altsetting 0 [ 139.721922][ T44] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 139.796169][ T44] usb 4-1: USB disconnect, device number 5 [ 139.805572][ T5827] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 139.805599][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.805618][ T5827] usb 1-1: Product: syz [ 139.805631][ T5827] usb 1-1: Manufacturer: syz [ 139.805644][ T5827] usb 1-1: SerialNumber: syz [ 139.989573][ T5957] smsc75xx v1.0.0 [ 140.062268][ T5827] usb 1-1: config 0 descriptor?? [ 140.097294][ T6223] netlink: 37548 bytes leftover after parsing attributes in process `syz.4.69'. [ 140.411943][ T5827] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 140.487276][ T6207] batadv_slave_1: left promiscuous mode [ 140.515972][ T5961] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 140.530689][ T5827] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 140.620749][ T5827] ums-usbat 1-1:0.230: probe with driver ums-usbat failed with error -5 [ 140.677920][ T5961] usb 5-1: Using ep0 maxpacket: 32 [ 140.685398][ T5961] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 140.685478][ T5961] usb 5-1: config 0 has no interface number 0 [ 140.685526][ T5961] usb 5-1: config 0 interface 230 has no altsetting 0 [ 140.712373][ T5961] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 140.712457][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.712484][ T5961] usb 5-1: Product: syz [ 140.712497][ T5961] usb 5-1: Manufacturer: syz [ 140.712510][ T5961] usb 5-1: SerialNumber: syz [ 140.836386][ T5827] usb 1-1: USB disconnect, device number 5 [ 140.843143][ T5961] usb 5-1: config 0 descriptor?? [ 140.938754][ T5961] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 140.994055][ T5961] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 141.046358][ T5957] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 141.227316][ T5961] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5 [ 141.244933][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 141.501896][ T6238] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 141.553581][ T1358] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.555358][ T5957] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 141.555383][ T5957] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 141.555400][ T5957] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 141.555418][ T5957] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 141.555723][ T5957] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 141.558150][ T1344] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.560603][ T1344] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.563045][ T1344] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.870460][ T5961] usb 5-1: USB disconnect, device number 3 [ 141.920774][ T5957] usb 3-1: USB disconnect, device number 3 [ 143.534896][ T5957] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 143.684881][ T5957] usb 5-1: Using ep0 maxpacket: 32 [ 143.687330][ T5957] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 143.687356][ T5957] usb 5-1: config 0 has no interface number 0 [ 143.687404][ T5957] usb 5-1: config 0 interface 184 has no altsetting 0 [ 143.690563][ T5957] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 143.690591][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.690609][ T5957] usb 5-1: Product: syz [ 143.690622][ T5957] usb 5-1: Manufacturer: syz [ 143.690635][ T5957] usb 5-1: SerialNumber: syz [ 143.785764][ T5957] usb 5-1: config 0 descriptor?? [ 143.802733][ T5957] smsc75xx v1.0.0 [ 145.103121][ T5957] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 145.334245][ T1344] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.334387][ T6253] Zero length message leads to an empty skb [ 145.337339][ T1344] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.337384][ T1344] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.337417][ T1344] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.344363][ T6253] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 145.383767][ T5957] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 145.383795][ T5957] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 145.383813][ T5957] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 145.383831][ T5957] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 145.384129][ T5957] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 145.447052][ T5957] usb 5-1: USB disconnect, device number 4 [ 152.922063][ T6260] batadv_slave_1: entered promiscuous mode [ 152.934006][ T6260] netlink: 159784 bytes leftover after parsing attributes in process `syz.1.79'. [ 153.205195][ T5827] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 154.401723][ T5827] usb 2-1: Using ep0 maxpacket: 32 [ 154.420274][ T5827] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 154.420411][ T5827] usb 2-1: config 0 has no interface number 0 [ 154.420465][ T5827] usb 2-1: config 0 interface 230 has no altsetting 0 [ 154.424591][ T5827] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 154.424622][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.424641][ T5827] usb 2-1: Product: syz [ 154.424808][ T5827] usb 2-1: Manufacturer: syz [ 154.424822][ T5827] usb 2-1: SerialNumber: syz [ 154.744907][ T5827] usb 2-1: config 0 descriptor?? [ 154.786115][ T5827] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 154.817608][ T5827] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 155.050700][ T6259] batadv_slave_1: left promiscuous mode [ 155.244518][ T5827] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 155.306104][ T5827] usb 2-1: USB disconnect, device number 4 [ 156.367114][ T6298] netlink: 'syz.3.89': attribute type 10 has an invalid length. [ 156.369645][ T6298] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.377584][ T6298] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.411561][ T6298] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.412152][ T6298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.413671][ T6298] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.413853][ T6298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.542562][ T6298] team0: Port device bridge0 added [ 157.985184][ T5827] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 158.007142][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.87'. [ 158.007547][ T6305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.052477][ T6279] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 158.174870][ T5827] usb 5-1: device descriptor read/64, error -71 [ 158.279236][ T6279] usb 4-1: Using ep0 maxpacket: 32 [ 158.399195][ T6279] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 158.399223][ T6279] usb 4-1: config 0 has no interface number 0 [ 158.399285][ T6279] usb 4-1: config 0 interface 184 has no altsetting 0 [ 158.569633][ T6279] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 158.569652][ T6279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.569662][ T6279] usb 4-1: Product: syz [ 158.569669][ T6279] usb 4-1: Manufacturer: syz [ 158.569676][ T6279] usb 4-1: SerialNumber: syz [ 158.606424][ T6279] usb 4-1: config 0 descriptor?? [ 158.644865][ T5827] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 158.647637][ T6279] smsc75xx v1.0.0 [ 158.774953][ T5827] usb 5-1: device descriptor read/64, error -71 [ 158.886058][ T5827] usb usb5-port1: attempt power cycle [ 159.249615][ T5827] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 159.276151][ T5827] usb 5-1: device descriptor read/8, error -71 [ 161.518016][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.94'. [ 161.680653][ T6279] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 161.680684][ T6279] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 161.681210][ T6279] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 161.681233][ T6279] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 161.681250][ T6279] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 161.681268][ T6279] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 161.682256][ T6279] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 161.773066][ T6279] usb 4-1: USB disconnect, device number 6 [ 162.098656][ T6334] netlink: 88 bytes leftover after parsing attributes in process `syz.3.97'. [ 162.735710][ T6344] NILFS (loop3): device size too small [ 164.317174][ T6279] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 165.044802][ T6279] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 165.044839][ T6279] usb 3-1: can't read configurations, error -71 [ 168.614561][ T6371] netlink: 20 bytes leftover after parsing attributes in process `syz.0.102'. [ 168.637289][ T6371] netlink: 20 bytes leftover after parsing attributes in process `syz.0.102'. [ 169.529971][ T6386] netlink: 'syz.3.109': attribute type 10 has an invalid length. [ 169.530289][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.531043][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.817143][ T6279] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 170.644774][ T6279] usb 3-1: Using ep0 maxpacket: 8 [ 170.647110][ T6279] usb 3-1: config 5 has an invalid interface number: 52 but max is 1 [ 170.647135][ T6279] usb 3-1: config 5 has an invalid interface number: 4 but max is 1 [ 170.647154][ T6279] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 170.647172][ T6279] usb 3-1: config 5 has no interface number 0 [ 170.647188][ T6279] usb 3-1: config 5 has no interface number 1 [ 170.647249][ T6279] usb 3-1: config 5 interface 52 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.647294][ T6279] usb 3-1: config 5 interface 4 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 170.647319][ T6279] usb 3-1: config 5 interface 52 has no altsetting 0 [ 170.647336][ T6279] usb 3-1: config 5 interface 4 has no altsetting 0 [ 170.650624][ T6279] usb 3-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 170.650652][ T6279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.650671][ T6279] usb 3-1: Product: syz [ 170.650685][ T6279] usb 3-1: Manufacturer: syz [ 170.650699][ T6279] usb 3-1: SerialNumber: syz [ 170.804860][ T5922] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 170.954808][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 171.007750][ T5922] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 171.007778][ T5922] usb 4-1: config 0 has no interface number 0 [ 171.007823][ T5922] usb 4-1: config 0 interface 184 has no altsetting 0 [ 171.044800][ T5922] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 171.044829][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.044847][ T5922] usb 4-1: Product: syz [ 171.044859][ T5922] usb 4-1: Manufacturer: syz [ 171.044872][ T5922] usb 4-1: SerialNumber: syz [ 171.130619][ T6279] cytherm 3-1:5.52: Cypress thermometer device now attached [ 171.131204][ T5922] usb 4-1: config 0 descriptor?? [ 171.150442][ T6279] cytherm 3-1:5.4: Cypress thermometer device now attached [ 171.178408][ T6279] usb 3-1: USB disconnect, device number 6 [ 171.179910][ T6279] cytherm 3-1:5.52: Cypress thermometer now disconnected [ 171.183303][ T5922] smsc75xx v1.0.0 [ 171.187456][ T6279] cytherm 3-1:5.4: Cypress thermometer now disconnected [ 173.533556][ T6324] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.552011][ T6324] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.552059][ T6324] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.552092][ T6324] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.027793][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.052218][ T6423] openvswitch: netlink: Message has 4 unknown bytes. [ 174.052252][ T6423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.170542][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 174.660223][ T5922] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 174.660258][ T5922] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 174.660883][ T5922] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 174.660906][ T5922] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 174.660925][ T5922] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 174.660940][ T5922] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 174.661195][ T5922] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 174.767899][ T5922] usb 4-1: USB disconnect, device number 7 [ 174.927325][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805aa4fc00: rx timeout, send abort [ 174.928985][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805aa4fc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 174.956622][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805aa4f400: rx timeout, send abort [ 174.956833][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805aa4f400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 175.332112][ T6440] syz.4.125 uses obsolete (PF_INET,SOCK_PACKET) [ 175.735415][ T6450] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 177.080040][ T6444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.121742][ T6444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.399310][ T6468] tipc: Started in network mode [ 178.399341][ T6468] tipc: Node identity 66b8cd5984c4, cluster identity 4711 [ 178.399973][ T6468] tipc: Enabled bearer , priority 0 [ 178.425891][ T6469] syzkaller0: entered promiscuous mode [ 178.425921][ T6469] syzkaller0: entered allmulticast mode [ 178.518279][ T6484] tipc: Resetting bearer [ 178.529156][ T64] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.529216][ T64] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.575990][ T6462] tipc: Resetting bearer [ 178.739705][ T6462] tipc: Disabling bearer [ 179.038588][ T64] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.038622][ T64] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.038740][ T6502] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 179.095254][ T64] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.095289][ T64] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.098739][ T64] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.098772][ T64] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.123277][ T6512] team0 (unregistering): Port device team_slave_0 removed [ 180.150835][ T6512] team0 (unregistering): Port device team_slave_1 removed [ 180.963737][ T6279] hid-generic 0005:16C0:5501.0002: unknown main item tag 0x0 [ 180.996593][ T6279] hid-generic 0005:16C0:5501.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 181.732809][ T6575] netlink: 'syz.0.159': attribute type 10 has an invalid length. [ 181.985449][ T6575] syz_tun: entered promiscuous mode [ 182.017078][ T6575] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 182.199711][ T6589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.253713][ T6582] syz.3.160 (6582) used greatest stack depth: 17800 bytes left [ 182.299634][ T6593] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 182.579739][ T6600] netlink: 24 bytes leftover after parsing attributes in process `syz.3.168'. [ 183.253530][ T6625] netlink: 'syz.2.172': attribute type 10 has an invalid length. [ 183.470296][ T6625] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 184.180152][ T6652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.185'. [ 184.180180][ T6652] netlink: 56 bytes leftover after parsing attributes in process `syz.1.185'. [ 184.180194][ T6652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'. [ 186.612673][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.201'. [ 186.935643][ T6694] netlink: 64 bytes leftover after parsing attributes in process `syz.0.202'. [ 187.020410][ T6696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.155615][ C0] sched: DL replenish lagged too much [ 198.859571][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.172938][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 216.772327][ T6710] Bluetooth: hci1: command 0x0406 tx timeout [ 216.772365][ T6710] Bluetooth: hci0: command 0x0406 tx timeout [ 216.772389][ T6710] Bluetooth: hci2: command 0x0406 tx timeout [ 216.772412][ T6710] Bluetooth: hci3: command 0x0406 tx timeout [ 244.087053][ T6710] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 244.095710][ T6710] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 244.096853][ T6710] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 244.098092][ T6710] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 244.099469][ T6710] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 249.791587][ T6709] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 249.857241][ T6709] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 250.026767][ T6726] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 250.653924][ T6709] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 250.663338][ T6709] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 268.832831][ T6709] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 268.926379][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 268.942521][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.197734][ T6710] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 269.198312][ T6710] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 269.199822][ T6710] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 269.200667][ T6710] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 270.307378][ T6726] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 270.311772][ T6726] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 270.312856][ T6726] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 270.313993][ T6726] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 270.315688][ T6726] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 278.113974][ T6726] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 278.123040][ T6726] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 278.124127][ T6726] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 280.315067][ T6739] Bluetooth: hci7: Opcode 0x1005 failed: -110 [ 282.055337][ T6726] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 283.708057][ T6745] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 286.454748][ T6742] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 297.211257][ T6756] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 297.214472][ T6756] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 297.229989][ T6756] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 297.524892][ T6756] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 297.526986][ T6756] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 301.150549][ T6745] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 301.151000][ T6745] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 301.151416][ T6745] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 301.152550][ T6745] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 301.153314][ T6745] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 309.073855][ T6710] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 309.509272][ T6726] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 309.511028][ T6726] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 309.512623][ T6726] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 309.513420][ T6726] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 317.826400][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.896052][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.635536][ T6710] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 320.655011][ T6710] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 320.655469][ T6710] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 320.656656][ T6710] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 320.676605][ T6710] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 340.276326][ T6756] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 340.297738][ T6756] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 340.298884][ T6756] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 340.300187][ T6756] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 340.301369][ T6756] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 350.490947][ T6726] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 351.424949][ T6726] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 351.426837][ T6726] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 351.428039][ T6726] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 351.429221][ T6726] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 352.997037][ T38] INFO: task syz.0.202:6692 blocked for more than 146 seconds. [ 352.997065][ T38] Not tainted syzkaller #0 [ 352.997075][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 352.997087][ T38] task:syz.0.202 state:D stack:25128 pid:6692 tgid:6692 ppid:5853 task_flags:0x400040 flags:0x00004004 [ 352.997149][ T38] Call Trace: [ 352.997155][ T38] [ 352.997169][ T38] __schedule+0x16f3/0x4c20 [ 352.997217][ T38] ? sched_clock+0x3f/0x60 [ 352.997240][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 352.997272][ T38] ? __pfx___schedule+0x10/0x10 [ 352.997320][ T38] rt_mutex_schedule+0x77/0xf0 [ 352.997339][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 352.997374][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 352.997400][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 352.997424][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 352.997446][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 352.997464][ T38] ? __lock_acquire+0xab9/0xd20 [ 352.997498][ T38] ? gtp_encap_destroy+0x12/0x20 [ 352.997526][ T38] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 352.997545][ T38] ? rt_spin_lock+0x1bb/0x2c0 [ 352.997565][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 352.997600][ T38] ? gtp_encap_destroy+0x12/0x20 [ 352.997623][ T38] mutex_lock_nested+0x16a/0x1d0 [ 352.997642][ T38] ? rt_spin_unlock+0x65/0x80 [ 352.997663][ T38] ? __pfx_gtp_encap_destroy+0x10/0x10 [ 352.997686][ T38] ? sk_common_release+0x72/0x330 [ 352.997707][ T38] gtp_encap_destroy+0x12/0x20 [ 352.997731][ T38] udp_destroy_sock+0x232/0x320 [ 352.997759][ T38] ? __pfx_udp_destroy_sock+0x10/0x10 [ 352.997781][ T38] sk_common_release+0x72/0x330 [ 352.997807][ T38] inet_release+0x144/0x190 [ 352.997830][ T38] sock_close+0xc3/0x240 [ 352.997852][ T38] ? __pfx_sock_close+0x10/0x10 [ 352.997872][ T38] __fput+0x458/0xa80 [ 352.997908][ T38] task_work_run+0x1d4/0x260 [ 352.997931][ T38] ? __pfx_task_work_run+0x10/0x10 [ 352.997956][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 352.997982][ T38] exit_to_user_mode_loop+0xec/0x110 [ 352.998006][ T38] do_syscall_64+0x2bd/0x3b0 [ 352.998022][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.998046][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.998065][ T38] ? clear_bhb_loop+0x60/0xb0 [ 352.998087][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.998105][ T38] RIP: 0033:0x7f348e3aeba9 [ 352.998125][ T38] RSP: 002b:00007ffe49c01068 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 352.998144][ T38] RAX: 0000000000000000 RBX: 00007f348e5f7da0 RCX: 00007f348e3aeba9 [ 352.998156][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 352.998168][ T38] RBP: 00007f348e5f7da0 R08: 00000000000000e4 R09: 0000000c49c0135f [ 352.998180][ T38] R10: 00000000003ffcf8 R11: 0000000000000246 R12: 000000000002dc46 [ 352.998191][ T38] R13: 00007f348e5f6090 R14: ffffffffffffffff R15: 00007ffe49c01180 [ 352.998222][ T38] [ 352.998231][ T38] INFO: task syz.4.205:6701 blocked for more than 146 seconds. [ 352.998243][ T38] Not tainted syzkaller #0 [ 352.998252][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 352.998260][ T38] task:syz.4.205 state:D stack:26440 pid:6701 tgid:6700 ppid:5851 task_flags:0x400140 flags:0x00004004 [ 352.998303][ T38] Call Trace: [ 352.998308][ T38] [ 352.998320][ T38] __schedule+0x16f3/0x4c20 [ 352.998364][ T38] ? __kernel_text_address+0xd/0x40 [ 352.998387][ T38] ? __pfx___schedule+0x10/0x10 [ 352.998429][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 352.998457][ T38] rt_mutex_schedule+0x77/0xf0 [ 352.998475][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 352.998496][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 352.998534][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 352.998558][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 352.998587][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 352.998606][ T38] ? __lock_acquire+0xab9/0xd20 [ 352.998640][ T38] ? nl80211_pre_doit+0x5f/0x930 [ 352.998667][ T38] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 352.998693][ T38] ? nl80211_pre_doit+0x5f/0x930 [ 352.998710][ T38] mutex_lock_nested+0x16a/0x1d0 [ 352.998729][ T38] ? __nla_parse+0x40/0x60 [ 352.998752][ T38] nl80211_pre_doit+0x5f/0x930 [ 352.998771][ T38] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 352.998797][ T38] genl_family_rcv_msg_doit+0x1bb/0x300 [ 352.998824][ T38] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 352.998857][ T38] ? bpf_lsm_capable+0x9/0x20 [ 352.998878][ T38] ? security_capable+0x7e/0x2e0 [ 352.998908][ T38] genl_rcv_msg+0x60e/0x790 [ 352.998935][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 352.998952][ T38] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 352.998969][ T38] ? __pfx_nl80211_connect+0x10/0x10 [ 352.998990][ T38] ? __pfx_nl80211_post_doit+0x10/0x10 [ 352.999013][ T38] ? __lock_acquire+0xab9/0xd20 [ 352.999044][ T38] netlink_rcv_skb+0x208/0x470 [ 352.999069][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 352.999089][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 352.999128][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 352.999151][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 352.999178][ T38] genl_rcv+0x28/0x40 [ 352.999195][ T38] netlink_unicast+0x846/0xa10 [ 352.999226][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 352.999250][ T38] ? netlink_sendmsg+0x642/0xb30 [ 352.999271][ T38] ? skb_put+0x11b/0x210 [ 352.999300][ T38] netlink_sendmsg+0x805/0xb30 [ 352.999334][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.999366][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 352.999384][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.999408][ T38] __sock_sendmsg+0x21c/0x270 [ 352.999434][ T38] ____sys_sendmsg+0x508/0x820 [ 352.999458][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 352.999486][ T38] ? import_iovec+0x74/0xa0 [ 352.999512][ T38] ___sys_sendmsg+0x21f/0x2a0 [ 352.999533][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.999595][ T38] ? __fget_files+0x2a/0x420 [ 352.999618][ T38] ? __fget_files+0x3a6/0x420 [ 352.999653][ T38] __x64_sys_sendmsg+0x1a1/0x260 [ 352.999674][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 352.999703][ T38] ? rcu_is_watching+0x15/0xb0 [ 352.999734][ T38] ? do_syscall_64+0xbe/0x3b0 [ 352.999755][ T38] do_syscall_64+0xfa/0x3b0 [ 352.999770][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.999794][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.999812][ T38] ? clear_bhb_loop+0x60/0xb0 [ 352.999834][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.999851][ T38] RIP: 0033:0x7f2f5562eba9 [ 352.999865][ T38] RSP: 002b:00007f2f53896038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.999883][ T38] RAX: ffffffffffffffda RBX: 00007f2f55875fa0 RCX: 00007f2f5562eba9 [ 352.999897][ T38] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 352.999908][ T38] RBP: 00007f2f556b1e19 R08: 0000000000000000 R09: 0000000000000000 [ 352.999919][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.999930][ T38] R13: 00007f2f55876038 R14: 00007f2f55875fa0 R15: 00007ffee71523a8 [ 352.999961][ T38] [ 352.999992][ T38] [ 352.999992][ T38] Showing all locks held in the system: [ 353.000001][ T38] 4 locks held by kworker/0:0/9: [ 353.000011][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.000060][ T38] #1: ffffc900000e7bc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.000105][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.000149][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.000193][ T38] 4 locks held by kworker/0:1/10: [ 353.000203][ T38] #0: ffff888020bc0138 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.000252][ T38] #1: ffffc900000f7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.000306][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.000349][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.000394][ T38] 7 locks held by kworker/u8:0/12: [ 353.000404][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.000448][ T38] #1: ffffc90000117bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.000504][ T38] #2: ffff88805a1c7300 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 353.000557][ T38] #3: ffff88805a095920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 353.000613][ T38] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 353.000655][ T38] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.000699][ T38] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.000743][ T38] 6 locks held by kworker/u8:1/13: [ 353.000753][ T38] #0: ffff888035a0a938 ((wq_completion)wg-kex-wg0#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.000802][ T38] #1: ffffc90000127bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.000847][ T38] #2: ffff888035a1d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 353.000891][ T38] #3: ffff88805995d8b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 353.000934][ T38] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.000978][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.001023][ T38] 8 locks held by ktimers/0/16: [ 353.001035][ T38] 2 locks held by rcuc/1/28: [ 353.001045][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.001088][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.001133][ T38] 7 locks held by ktimers/1/29: [ 353.001143][ T38] 1 lock held by khungtaskd/38: [ 353.001153][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 353.001195][ T38] 3 locks held by kworker/u8:2/43: [ 353.001205][ T38] #0: ffff888030438938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.001249][ T38] #1: ffffc90000b47bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.001294][ T38] #2: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 353.001342][ T38] 4 locks held by kworker/u8:3/57: [ 353.001352][ T38] #0: ffff88814da76138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.001396][ T38] #1: ffffc9000123fbc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.001441][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.001484][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.001528][ T38] 6 locks held by kworker/u9:0/59: [ 353.001538][ T38] #0: ffff888033d78938 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.001589][ T38] #1: ffffc9000125fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.001634][ T38] #2: ffff88803e238e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 353.001676][ T38] #3: ffff88803e2380a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 353.001723][ T38] #4: ffffffff8ee3b018 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 353.001769][ T38] #5: ffff888026cdbb58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 353.001829][ T38] 5 locks held by kworker/u8:6/1042: [ 353.001840][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.001884][ T38] #1: ffffc900048b7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.001929][ T38] #2: ffff88805b690898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 353.001975][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.002018][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.002071][ T38] 5 locks held by kworker/u8:7/1110: [ 353.002081][ T38] 2 locks held by kworker/u8:8/1119: [ 353.002093][ T38] 7 locks held by kworker/u8:9/1279: [ 353.002102][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.002147][ T38] #1: ffffc90004df7bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.002192][ T38] #2: ffff888059a89300 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 353.002243][ T38] #3: ffff8880599dcd20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 353.002291][ T38] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 353.002333][ T38] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.002377][ T38] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.002422][ T38] 6 locks held by kworker/u8:11/1358: [ 353.002432][ T38] #0: ffff888058061138 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.002481][ T38] #1: ffffc90004f87bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.002525][ T38] #2: ffff8880580355f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 353.002569][ T38] #3: ffff8880599be350 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 353.002618][ T38] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.002662][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.002706][ T38] 2 locks held by kworker/1:2/1566: [ 353.002729][ T38] 5 locks held by kworker/u8:12/3562: [ 353.002739][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.002783][ T38] #1: ffffc9000d8e7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.002827][ T38] #2: ffff88805bb50898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 353.002880][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.002924][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.002967][ T38] 5 locks held by kworker/u8:13/4435: [ 353.002977][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.003022][ T38] #1: ffffc9000f287bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.003066][ T38] #2: ffff88805b4b0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 353.003112][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.003155][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.003200][ T38] 5 locks held by kworker/u9:1/5157: [ 353.003210][ T38] #0: ffff888030ca0138 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.003254][ T38] #1: ffffc9001018fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.003298][ T38] #2: ffff888034ac0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 353.003340][ T38] #3: ffff888034ac00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 353.003386][ T38] #4: ffffffff8ee3b018 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 353.003434][ T38] 3 locks held by udevd/5208: [ 353.003445][ T38] 2 locks held by getty/5598: [ 353.003454][ T38] #0: ffff88823bf3e8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 353.003503][ T38] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 353.003549][ T38] 3 locks held by syz-executor/5825: [ 353.003559][ T38] #0: ffff8880280aa1d0 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_recvmsg+0xd3/0x560 [ 353.003608][ T38] #1: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.003650][ T38] #2: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.003695][ T38] 5 locks held by kworker/u9:2/5845: [ 353.003704][ T38] #0: ffff8880365f7138 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.003748][ T38] #1: ffffc90004c67bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.003793][ T38] #2: ffff8880529f0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 353.003834][ T38] #3: ffff8880529f00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 353.003880][ T38] #4: ffffffff8ee3b018 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 353.003927][ T38] 5 locks held by kworker/u9:3/5848: [ 353.003937][ T38] #0: ffff8880365f0138 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.003980][ T38] #1: ffffc90004da7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.004024][ T38] #2: ffff8880343b0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 353.004065][ T38] #3: ffff8880343b00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 353.004110][ T38] #4: ffffffff8ee3b018 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 353.004156][ T38] 4 locks held by kworker/u9:4/5849: [ 353.004166][ T38] #0: ffff88803043d938 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.004209][ T38] #1: ffffc90004db7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.004254][ T38] #2: ffff888056d74e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 353.004296][ T38] #3: ffff888056d740a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 353.004347][ T38] 5 locks held by kworker/1:6/5923: [ 353.004356][ T38] #0: ffff888020bc0138 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.004404][ T38] #1: ffffc90005267bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.004460][ T38] #2: ffff8880356555f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x1c7/0xb00 [ 353.004514][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.004558][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.004606][ T38] 4 locks held by kworker/0:5/5957: [ 353.004616][ T38] #0: ffff888058072538 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.024772][ T38] #1: ffffc90005337bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.024826][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.024869][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.024913][ T38] 4 locks held by kworker/0:7/5962: [ 353.024924][ T38] 4 locks held by kworker/1:7/6005: [ 353.024932][ T38] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.024974][ T38] #1: ffffc900060efbc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.025018][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.025061][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.025105][ T38] 5 locks held by kworker/u8:16/6324: [ 353.025115][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.025159][ T38] #1: ffffc9000ca17bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.025203][ T38] #2: ffff88805c430898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 353.025249][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.025289][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.025334][ T38] 4 locks held by kworker/1:9/6456: [ 353.025344][ T38] #0: ffff888020bc0938 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.025392][ T38] #1: ffffc9000cef7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.025447][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.025490][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.025534][ T38] 4 locks held by kworker/1:12/6463: [ 353.025544][ T38] #0: ffff888034b45538 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.025596][ T38] #1: ffffc9000d377bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.025648][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.025688][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.025728][ T38] 4 locks held by kworker/1:14/6465: [ 353.025738][ T38] #0: ffff888057e29d38 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.025785][ T38] #1: ffffc9000d3d7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.025840][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.025884][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.025926][ T38] 4 locks held by kworker/1:15/6466: [ 353.025936][ T38] #0: ffff888057d97138 ((wq_completion)wg-kex-wg1#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.025984][ T38] #1: ffffc9000d3e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.026041][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.026085][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.026130][ T38] 4 locks held by kworker/0:9/6492: [ 353.026140][ T38] #0: ffff888034b45538 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.026188][ T38] #1: ffffc9000d417bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.026243][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.026287][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.026332][ T38] 4 locks held by kworker/0:11/6494: [ 353.026342][ T38] #0: ffff888020bc3538 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.026390][ T38] #1: ffffc9000d497bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.026447][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.026490][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.026535][ T38] 3 locks held by kworker/0:12/6495: [ 353.026546][ T38] 3 locks held by kworker/0:13/6496: [ 353.026556][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.026607][ T38] #1: ffffc9000d4b7bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.026650][ T38] #2: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30 [ 353.026700][ T38] 2 locks held by syz.0.202/6692: [ 353.026710][ T38] #0: ffff88805bd7e7b8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 353.026759][ T38] #1: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: gtp_encap_destroy+0x12/0x20 [ 353.026807][ T38] 1 lock held by syz.3.203/6693: [ 353.026817][ T38] #0: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 353.026864][ T38] 2 locks held by syz.4.205/6701: [ 353.026874][ T38] #0: ffffffff8ed39540 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 353.026914][ T38] #1: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 353.026956][ T38] 4 locks held by kworker/u9:5/6708: [ 353.026966][ T38] #0: ffff88802c899138 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.027014][ T38] #1: ffffc9000f0f7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.027058][ T38] #2: ffff88805fa600a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 353.027103][ T38] #3: ffffffff8ee3b018 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 353.027148][ T38] 4 locks held by kworker/u9:6/6709: [ 353.027158][ T38] #0: ffff88805b445138 ((wq_completion)hci6#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.027206][ T38] #1: ffffc9000f127bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.027250][ T38] #2: ffff888038a400a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 353.027294][ T38] #3: ffffffff8ee3b018 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 353.027338][ T38] 4 locks held by kworker/u9:7/6710: [ 353.027348][ T38] #0: ffff88805999c138 ((wq_completion)hci7#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.027397][ T38] #1: ffffc9000d85fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.027441][ T38] #2: ffff888072d800a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 353.027484][ T38] #3: ffffffff8ee3b018 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 353.027528][ T38] 1 lock held by syz-executor/6715: [ 353.027539][ T38] #0: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 353.027588][ T38] 1 lock held by dhcpcd/6722: [ 353.027598][ T38] #0: ffff888026ad8350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 353.027643][ T38] 1 lock held by syz-executor/6723: [ 353.027653][ T38] #0: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 353.027694][ T38] 1 lock held by dhcpcd/6725: [ 353.027704][ T38] #0: ffff88805ca36350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 353.027748][ T38] 7 locks held by kworker/u8:23/6728: [ 353.027758][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.027802][ T38] #1: ffffc9000f1f7bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.027845][ T38] #2: ffff88805957f300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 353.027899][ T38] #3: ffff88802f1efd20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 353.027947][ T38] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 353.027991][ T38] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.028034][ T38] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.028079][ T38] 7 locks held by kworker/u8:24/6729: [ 353.028089][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.028133][ T38] #1: ffffc9000f207bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.028179][ T38] #2: ffff888036f45300 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 353.028231][ T38] #3: ffff888032472520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 353.028279][ T38] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 353.028322][ T38] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.028365][ T38] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.028410][ T38] 4 locks held by kworker/u8:25/6730: [ 353.028420][ T38] #0: ffff888058061138 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.028469][ T38] #1: ffffc9000f217bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.028515][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.028558][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.028608][ T38] 1 lock held by dhcpcd/6731: [ 353.028618][ T38] #0: ffff888027ff6350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 353.028663][ T38] 1 lock held by dhcpcd/6732: [ 353.028672][ T38] #0: ffff88805b364350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 353.028716][ T38] 5 locks held by kworker/1:17/6735: [ 353.028726][ T38] #0: ffff8880576e8538 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.028775][ T38] #1: ffffc9000f257bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.028831][ T38] #2: ffff88805a5883f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 353.028876][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.028920][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.028965][ T38] 1 lock held by dhcpcd/6738: [ 353.028975][ T38] #0: ffff88802d792350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 353.029018][ T38] 1 lock held by dhcpcd/6740: [ 353.029028][ T38] #0: ffff888038b0a350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 353.029072][ T38] 2 locks held by kworker/0:14/6744: [ 353.029083][ T38] 4 locks held by kworker/u9:9/6745: [ 353.029093][ T38] #0: ffff88805d7f9938 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.029141][ T38] #1: ffffc9000fec7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.029185][ T38] #2: ffff8880684700a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 353.029229][ T38] #3: ffffffff8ee3b018 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 353.029273][ T38] 4 locks held by kworker/0:15/6746: [ 353.029283][ T38] #0: ffff888057d97538 ((wq_completion)wg-crypt-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.029332][ T38] #1: ffffc9000fed7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.029389][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.029432][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.029477][ T38] 4 locks held by kworker/0:16/6748: [ 353.029487][ T38] #0: ffff88803645e938 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.029535][ T38] #1: ffffc9000fee7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.029598][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.029641][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.029686][ T38] 4 locks held by kworker/0:17/6749: [ 353.029696][ T38] #0: ffff888057d97138 ((wq_completion)wg-kex-wg1#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.029751][ T38] #1: ffffc9000fef7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.029807][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.029850][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.029892][ T38] 4 locks held by kworker/0:18/6750: [ 353.029900][ T38] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.029936][ T38] #1: ffffc9000ff07bc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.029973][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.030012][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.030054][ T38] 4 locks held by kworker/0:19/6753: [ 353.030063][ T38] #0: ffff888020bc0938 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.030109][ T38] #1: ffffc9000ff17bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.030159][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.030197][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.030235][ T38] 1 lock held by syz-executor/6754: [ 353.030245][ T38] #0: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 353.030282][ T38] 4 locks held by kworker/u9:10/6756: [ 353.030292][ T38] #0: ffff88803097e138 ((wq_completion)krxrpcd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.030333][ T38] #1: ffffc9000ff37bc0 ((work_completion)(&rxnet->peer_keepalive_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.030373][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.030410][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.030448][ T38] 3 locks held by kworker/u8:27/6758: [ 353.030457][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.030497][ T38] #1: ffffc9000ff57bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.030537][ T38] #2: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 353.030591][ T38] 3 locks held by syz-executor/6760: [ 353.030600][ T38] #0: ffff888024850350 (sk_lock-AF_NETLINK){+.+.}-{0:0}, at: netlink_insert+0xd3/0x1370 [ 353.030641][ T38] #1: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.030682][ T38] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.030726][ T38] 3 locks held by syz-executor/6768: [ 353.030736][ T38] #0: ffff88805a8a4350 (sk_lock-AF_BLUETOOTH-BTPROTO_HCI){+.+.}-{0:0}, at: hci_sock_ioctl+0x247/0x910 [ 353.030784][ T38] #1: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.030823][ T38] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.030863][ T38] 2 locks held by syz-executor/6771: [ 353.030873][ T38] 6 locks held by syz-executor/6772: [ 353.030886][ T38] [ 353.030890][ T38] ============================================= [ 353.030890][ T38] [ 353.030912][ T38] NMI backtrace for cpu 1 [ 353.030935][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 353.030955][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 353.030965][ T38] Call Trace: [ 353.030972][ T38] [ 353.030979][ T38] dump_stack_lvl+0x189/0x250 [ 353.031007][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.031031][ T38] ? __pfx__printk+0x10/0x10 [ 353.031062][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 353.031086][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 353.031110][ T38] ? __pfx__printk+0x10/0x10 [ 353.031133][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 353.031156][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 353.031179][ T38] watchdog+0xf93/0xfe0 [ 353.031203][ T38] ? watchdog+0x1de/0xfe0 [ 353.031228][ T38] kthread+0x70e/0x8a0 [ 353.031255][ T38] ? __pfx_watchdog+0x10/0x10 [ 353.031273][ T38] ? __pfx_kthread+0x10/0x10 [ 353.031300][ T38] ? __pfx_kthread+0x10/0x10 [ 353.031323][ T38] ret_from_fork+0x439/0x7d0 [ 353.031347][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 353.031372][ T38] ? __switch_to_asm+0x39/0x70 [ 353.031386][ T38] ? __switch_to_asm+0x33/0x70 [ 353.031399][ T38] ? __pfx_kthread+0x10/0x10 [ 353.031422][ T38] ret_from_fork_asm+0x1a/0x30 [ 353.031453][ T38] [ 353.031460][ T38] Sending NMI from CPU 1 to CPUs 0: [ 353.031489][ C0] NMI backtrace for cpu 0 [ 353.031502][ C0] CPU: 0 UID: 0 PID: 5208 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 353.031519][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 353.031528][ C0] RIP: 0010:__lock_acquire+0x6dc/0xd20 [ 353.031548][ C0] Code: 00 83 3d f6 75 65 17 00 75 13 48 63 44 24 20 48 0f a3 05 27 e6 61 11 0f 83 15 05 00 00 31 ed 48 8b 3c 24 4c 8b bf 10 0b 00 00 <48> 83 7c 24 28 00 75 1e 83 3d c5 75 65 17 00 0f 95 c0 49 83 ff ff [ 353.031560][ C0] RSP: 0018:ffffc90003a7f6c8 EFLAGS: 00000046 [ 353.031573][ C0] RAX: 000000000000000b RBX: 0000000000000001 RCX: ffffffff929efb88 [ 353.031583][ C0] RDX: 0000000000000008 RSI: ffff888036402908 RDI: ffff888036401dc0 [ 353.031594][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8172c165 [ 353.031603][ C0] R10: ffffc90003a7f978 R11: fffff5200074ff31 R12: 00000000ffffff05 [ 353.031614][ C0] R13: 0000000000000001 R14: ffff888036402908 R15: 2ba0465223da7e95 [ 353.031625][ C0] FS: 00007f0620764880(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 353.031638][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.031649][ C0] CR2: 00007fe220f03060 CR3: 00000000361ba000 CR4: 00000000003526f0 [ 353.031663][ C0] Call Trace: [ 353.031669][ C0] [ 353.031678][ C0] ? unwind_next_frame+0xa5/0x2390 [ 353.031696][ C0] lock_acquire+0x120/0x360 [ 353.031713][ C0] ? unwind_next_frame+0xa5/0x2390 [ 353.031735][ C0] ? unwind_next_frame+0xa5/0x2390 [ 353.031752][ C0] ? arch_stack_walk+0xe4/0x150 [ 353.031771][ C0] ? unwind_next_frame+0xa5/0x2390 [ 353.031788][ C0] unwind_next_frame+0xc2/0x2390 [ 353.031806][ C0] ? unwind_next_frame+0xa5/0x2390 [ 353.031831][ C0] ? unwind_next_frame+0xa5/0x2390 [ 353.031850][ C0] ? __unwind_start+0xf8/0x760 [ 353.031870][ C0] __unwind_start+0x5b9/0x760 [ 353.031890][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 353.031907][ C0] arch_stack_walk+0xe4/0x150 [ 353.031928][ C0] ? arch_stack_walk+0xe4/0x150 [ 353.031949][ C0] stack_trace_save+0x9c/0xe0 [ 353.031963][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 353.031978][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 353.032001][ C0] save_stack+0xf7/0x1f0 [ 353.032019][ C0] ? __pfx_save_stack+0x10/0x10 [ 353.032041][ C0] ? page_ext_put+0x97/0xc0 [ 353.032059][ C0] __reset_page_owner+0x71/0x1f0 [ 353.032076][ C0] __free_frozen_pages+0xb59/0xce0 [ 353.032098][ C0] ? reacquire_held_locks+0x127/0x1d0 [ 353.032119][ C0] ? __pfx___free_frozen_pages+0x10/0x10 [ 353.032143][ C0] __put_partials+0x159/0x1a0 [ 353.032158][ C0] __slab_free+0x2b3/0x390 [ 353.032174][ C0] ? qlist_free_all+0x8c/0x140 [ 353.032190][ C0] qlist_free_all+0x97/0x140 [ 353.032206][ C0] kasan_quarantine_reduce+0x148/0x160 [ 353.032223][ C0] __kasan_slab_alloc+0x22/0x80 [ 353.032240][ C0] ? getname_flags+0xb8/0x540 [ 353.032259][ C0] kmem_cache_alloc_noprof+0x143/0x310 [ 353.032279][ C0] getname_flags+0xb8/0x540 [ 353.032299][ C0] __x64_sys_unlink+0x3a/0x50 [ 353.032316][ C0] do_syscall_64+0xfa/0x3b0 [ 353.032329][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.032347][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.032362][ C0] ? clear_bhb_loop+0x60/0xb0 [ 353.032378][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.032392][ C0] RIP: 0033:0x7f06208c0937 [ 353.032404][ C0] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 353.032415][ C0] RSP: 002b:00007ffc0c939468 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 353.032430][ C0] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f06208c0937 [ 353.032440][ C0] RDX: ffffffffffffffff RSI: 00007ffc0c939550 RDI: 000055f52e51602e [ 353.032451][ C0] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 353.032460][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000055f5589d9a50 [ 353.032470][ C0] R13: 000055f52e531100 R14: 000055f52e516008 R15: 0000000000000000 [ 353.032486][ C0] [ 353.033491][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 353.033504][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 353.033523][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 353.033532][ T38] Call Trace: [ 353.033538][ T38] [ 353.033545][ T38] dump_stack_lvl+0x99/0x250 [ 353.033569][ T38] ? __asan_memcpy+0x40/0x70 [ 353.033593][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.033615][ T38] ? __pfx__printk+0x10/0x10 [ 353.033644][ T38] vpanic+0x281/0x750 [ 353.033669][ T38] ? __pfx_vpanic+0x10/0x10 [ 353.033689][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 353.033706][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.033739][ T38] panic+0xb9/0xc0 [ 353.033762][ T38] ? __pfx_panic+0x10/0x10 [ 353.033787][ T38] ? irq_work_queue+0xc3/0x140 [ 353.033812][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 353.033836][ T38] watchdog+0xfd2/0xfe0 [ 353.033863][ T38] ? watchdog+0x1de/0xfe0 [ 353.033889][ T38] kthread+0x70e/0x8a0 [ 353.033915][ T38] ? __pfx_watchdog+0x10/0x10 [ 353.033933][ T38] ? __pfx_kthread+0x10/0x10 [ 353.033959][ T38] ? __pfx_kthread+0x10/0x10 [ 353.033983][ T38] ret_from_fork+0x439/0x7d0 [ 353.034005][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 353.034032][ T38] ? __switch_to_asm+0x39/0x70 [ 353.034046][ T38] ? __switch_to_asm+0x33/0x70 [ 353.034060][ T38] ? __pfx_kthread+0x10/0x10 [ 353.034083][ T38] ret_from_fork_asm+0x1a/0x30 [ 353.034113][ T38] [ 353.034374][ T38] Kernel Offset: disabled