last executing test programs: 28.844261836s ago: executing program 3 (id=3944): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r2 = syz_open_pts(r1, 0x800) r3 = dup3(r2, r1, 0x80000) read(r3, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000000280)=@raw=[@jmp={0x5, 0x1, 0xc, 0xa, 0xb, 0x50, 0x1}, @exit, @map_val={0x18, 0x5, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f00000000c0)='GPL\x00'}, 0x94) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare(0x8000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}]}, 0x5c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x70, 0x10, 0x403, 0xf00, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2205}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x5}]}}}]}, 0x70}, 0x1, 0xba01}, 0x0) syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000403512108040000102030109028a000301046008080b0001012430010904000000010120000a2401f5260005000000132403050004030306070000000400010004000924050679"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 27.965814473s ago: executing program 4 (id=3955): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES64=r1], 0x270}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 27.916240196s ago: executing program 4 (id=3956): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x5, 0x5, 0x2, 0x9, 0x0, 0x1, 0x10000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="84379f"], 0x0) syz_usb_connect$midi(0x1, 0xbe, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x5051, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xac, 0x1, 0x1, 0x8, 0x40, 0x8, "", {{{0x9, 0x4, 0x1, 0x0, 0x5, 0x1, 0x3, 0x30, 0x1, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x9, 0xff}, @midi_out_jack={0xd, 0x24, 0x3, 0x2, 0xf, 0x3, [{0x7d, 0x4}, {0xc, 0xf7}, {0xff}], 0x4}, @midi_out_jack={0x15, 0x24, 0x3, 0x1, 0x9, 0x7, [{0x5, 0xc}, {0x4}, {0x7, 0x9}, {0x91, 0x5}, {0x5, 0xc}, {0x40}, {0x9}], 0x18}], [{{0x9, 0x5, 0xe, 0x4, 0x400, 0x27, 0x4, 0xfe, {0x10, 0x25, 0x1, 0xc, "e995be2655a6b32f708175c0"}}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0xfa, 0x8, 0x7f, {0xc, 0x25, 0x1, 0x8, "5cac2a2e90027378"}}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x8, 0x2, 0x81, {0xa, 0x25, 0x1, 0x6, "70de47fff517"}}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x1, 0x3, 0xd, {0xc, 0x25, 0x1, 0x8, "6384ea0b8b7e2013"}}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x10, 0x5, 0x40, {0x13, 0x25, 0x1, 0xf, "b25a9764e95b61ff714d13800fe405"}}}]}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x8, 0x80, 0x2, 0x10, 0xaf}, 0x3f, &(0x7f0000000140)={0x5, 0xf, 0x3f, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "e5d730b21be96e818099ed657b458e41"}, @ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x48, 0xf0f, 0x3, [0xff3f00, 0xff00f0, 0x0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x9, 0x7, 0x1, 0x2b}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc07}}, {0xbd, &(0x7f0000000200)=@string={0xbd, 0x3, "d981634e8941de488cf16c5ddb6ef6731ff5a13c50e2c103b5e20e7520912e5c1203d71e58d95830cf1706d7e1adc8a2952ee6007dc0c4fed876ada6cfbcef123797be75f8ebd426640b70e006b14c86c90b400cc19f8ffef6b96cea10b8e50834ef80c1ea6c6d5ff702379d24c17a111db9ab016d6aabaccde9706e629d4fbce977f3b47361b68d6c5e11786f9edbb4da0598079622c46f47dbcb6f63f4d4511f9032a2846ea2d22fa95bbc94bb2101fbcf1f51071272094cd5a2"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc0c}}, {0xd7, &(0x7f0000000380)=@string={0xd7, 0x3, "df6c99966c34fbcc57bc6896ac285d0dd2c0879b9b40ce92ce5b3261ba573a14aa88cc5049f1c0aefb52fc5fdc4dd16a80c0ec04560e73a63ed8ac1f74f8a2b5b6d7e4ef39b52d7e18b9a8e1cba39e4e85a3b0c994ee83641d1f21eb16ab02619c29d33475f4e88ed9eef5fe4e8b6382be1e7fed9e0cfdce8e1c31ef27e06478dbbb720e195cbb1356d0b818e88b77fc801e8c395015ed959f5070e3876e8cb6027224aee375c6b90d9300a8ab859c9cdabf549cc51facfbe5d05f3b4565e86955faa465878917dbd29c93b750773144764a612d86"}}]}) 27.247312302s ago: executing program 3 (id=3958): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x121) r1 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_regs={0x4, 0x3}}) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='loginuid\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r7, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r8}]}, 0x3c}}, 0x0) fcntl$notify(r0, 0x402, 0x30) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) write$P9_RVERSION(r9, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r9, @ANYRESDEC=r9, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES8=0x0, @ANYRES32=r9, @ANYRES32=r9], 0x15) r10 = socket$packet(0x11, 0x2, 0x300) syz_open_dev$video4linux(0x0, 0x0, 0x200000) setsockopt$packet_int(r10, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) r13 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r13, &(0x7f00000000c0)='\t', 0x1, 0x100400c1, &(0x7f0000000140)={0x11, 0x8100, r12, 0x1, 0x87}, 0x14) 26.65196484s ago: executing program 4 (id=3960): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0002}]}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$midi(0x0, 0xa1, &(0x7f0000000600)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0xff, 0x1235, 0x8212, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x1, 0x1, 0x6, 0x90, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x20, 0x2, [@midi_out_jack={0x9, 0x24, 0x3, 0x1, 0x4, 0x1, [{0xff, 0x2f}], 0x8}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xf, 0xc1}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x6, 0xf}, @ms_header={0x7, 0x24, 0x1, 0x3ff, 0x7}], [{{0x9, 0x5, 0x7, 0x10, 0x200, 0x0, 0xd, 0x4, {0x7, 0x25, 0x1, 0x3, "9aa25e"}}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x0, 0x1, 0x3, {0x14, 0x25, 0x1, 0x10, "dda93ae8141b4836d58639d2dd0589ec"}}}, {{0x9, 0x5, 0x9, 0x3, 0x3ff, 0x4, 0xf5, 0xbc, {0xd, 0x25, 0x1, 0x9, "5cb36c2a1beea87aa0"}}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x4, 0xac, 0x4, {0x6, 0x25, 0x1, 0x2, "5eaa"}}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0xd, 0x0, 0x6, {0x6, 0x25, 0x1, 0x2, "35c9"}}}]}}}}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x201, 0xbe, 0x6, 0x9, 0x8, 0x8}, 0x3a, &(0x7f0000000700)={0x5, 0xf, 0x3a, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0xa4, 0x7f, 0x1, 0x7, 0x9}, @ssp_cap={0x20, 0x10, 0xa, 0xec, 0x5, 0x6, 0xf000, 0x1, [0x3f30, 0x3f, 0xf, 0xc0ff, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x5, 0x9, 0x6}]}, 0xa, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x1c0a}}, {0xaa, &(0x7f0000000780)=@string={0xaa, 0x3, "1bfcae66b88d1c0a2e11bee1eb0cc2a656fef8dffceaf2296ca1b093adfb53806673fb056e7ce66a7d46be5f056f703298e40631be1a06e3143ba95062545bafb50aa03885de1a0007220e00466413db6ce74b73705b4737beeb6e9ae5854672dc767326325ebe9f1ce5459cdfc947d36192e6e3313dff0f6b9668c07313b7694315a3209c908142041ca569d3fcfcdc2f26725092526282c6b9cbc821a6dc6d046f5a440d9c2962"}}, {0x65, &(0x7f0000000840)=@string={0x65, 0x3, "4476dcacb808df4c07f4369414134b2314ba5018ff47b64117339e8dc38f661b13327122dce0681a847906fd046791f40432543f50f55a6220a8f1e81a9775ca1ee15579d4639fdae3cd2aa2b73adbead7414557584aa1f105874d61f2fa43f15170c9"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x8}}, {0x37, &(0x7f0000000980)=@string={0x37, 0x3, "ebf9dc19df26205d25600a76d3e07b5417207faf711f7bf97b5ba3209445dd96c3cd1ddf010be23f2da6b88980b8e9768baae8b8f5"}}, {0x9c, &(0x7f00000009c0)=@string={0x9c, 0x3, "48213c0f74f7f30b0ea793bb3850d28d1a54a3007a65137de61bf31cc0e8a84d7ee923a063f3dc4f57208a9381b428eb362c456e22e6aebbdc316436cfff0f9ee90b88e7b84bc456f2c5ee6d059b8e18aa015658580dce04e251cac8a2bfc7a9adc8b580aa7270c98081572e22a3d99f3cbb8ef21a21b0cd66bfd817ef482f9278d79e1ac6d5b88f933844679566fd2ce35e5db9a9f5bc0809f4"}}, {0xdd, &(0x7f0000000a80)=@string={0xdd, 0x3, "3be634d38276e7dcfee94025d8073f5161cadf7838f331722420093be5385049b4943eef3e6a352392f0718ce5f288fd7a8c64dad403a121cffed512db4bae643a1934247444b1ba28cfb88888a0dd24a616ef65c294ff85eb00dfc9cb46b998ff495cb8766b6bc4ab1de1a8e197f2db6ac8f2ead1cfbc704b747281a3992ab4373c0b60120305ead64615cb2125dbdbee8b62ba927303b74f8c0462c1c21960cf28f2583a46b586f98a28c37cd7a62b46465cd47922cc3e9237336938149f645a2e348f46f2382155a1667438aef9dfbed715443076f4be2ad90c"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x1007}}]}) syz_usb_control_io$uac2(r1, &(0x7f0000000cc0)={0xc, &(0x7f0000000c40)={0x40, 0x23, 0xe, {0xe, 0xd, "5931a2673b6db22693029288"}}, &(0x7f0000000c80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xe0e34f5ff8b09c36}}}, &(0x7f0000000f80)={0x24, &(0x7f0000000d00)={0x40, 0x3, 0x87, "52d0fb471ea58aa22d17e887dc1a1f72f0ee8e6fdf530764e346fce9a400bdca4fb298a581326e6877d14167e6481231ef62a6fc509e21827748d238b1b52f7b8fddd06eff5e1cf3ff7f28032a7aa565710708e9a8b3e5704ee5ef9b60c28de1f343a501a3df6069455a5da6574ab384ed3ca16daec894545c45518c61c9ba87d997478134f27e"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e40)={0x20, 0x81, 0x1, "99"}, &(0x7f0000000e80)={0x20, 0x82, 0x1, 'd'}, &(0x7f0000000ec0)={0x20, 0x83, 0x1, 'u'}, &(0x7f0000000f00)={0x20, 0x84, 0x3, "2f2b12"}, &(0x7f0000000f40)={0x20, 0x85, 0x3, 'mPF'}}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000bf00000000bde930bc27857695abfe066fc1dd9dbcd2e79b4ad6711fc4d2a2d1a49794468b89b5459eae78434aca4dce977fbd5ad469d839daad466c5310eef1df5ec82ec6ea238e08"], &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x9}}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000', @ANYRESDEC=0x0, @ANYBLOB=',']) 24.86130788s ago: executing program 3 (id=3968): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r2 = syz_open_pts(r1, 0x800) r3 = dup3(r2, r1, 0x80000) read(r3, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000000280)=@raw=[@jmp={0x5, 0x1, 0xc, 0xa, 0xb, 0x50, 0x1}, @exit, @map_val={0x18, 0x5, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f00000000c0)='GPL\x00'}, 0x94) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare(0x8000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}]}, 0x5c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x70, 0x10, 0x403, 0xf00, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2205}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x5}]}}}]}, 0x70}, 0x1, 0xba01}, 0x0) syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000403512108040000102030109028a000301046008080b0001012430010904000000010120000a2401f5260005000000132403050004030306070000000400010004000924050679"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 23.482188504s ago: executing program 1 (id=3973): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1, 0x1}}, 0x10) 23.481260751s ago: executing program 1 (id=3974): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x121) r1 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_regs={0x4, 0x3}}) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='loginuid\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r7, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r8}]}, 0x3c}}, 0x0) fcntl$notify(r0, 0x402, 0x30) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) write$P9_RVERSION(r9, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r9, @ANYRESDEC=r9, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES8=0x0, @ANYRES32=r9, @ANYRES32=r9], 0x15) r10 = socket$packet(0x11, 0x2, 0x300) syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x200000) setsockopt$packet_int(r10, 0x107, 0x8, 0x0, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) r13 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r13, &(0x7f00000000c0)='\t', 0x1, 0x100400c1, &(0x7f0000000140)={0x11, 0x8100, r12, 0x1, 0x87}, 0x14) 23.395148695s ago: executing program 3 (id=3976): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4) (async) fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r3) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200051b08000300ac1414aa0800060021"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200051b08000300ac1414aa0800060021"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x7e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, 0x0, 0xd231c4f959ad4808) (async) sendmsg(r6, 0x0, 0xd231c4f959ad4808) syz_open_dev$dri(0x0, 0x1, 0x2200) (async) syz_open_dev$dri(0x0, 0x1, 0x2200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ppoll(&(0x7f0000000000)=[{r0, 0x7000}, {r0, 0x2333}], 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x6]}, 0x8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r7, 0x4008af83, &(0x7f00000001c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 23.090523981s ago: executing program 4 (id=3978): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 22.63847108s ago: executing program 4 (id=3980): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, 0x0, 0x0) socket(0x2, 0x2, 0x1) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_wolinfo={0x5, 0x1, 0xdf4, "d3e2ae09a105"}}) connect$unix(r1, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x4, 0xfffffffffffffe55) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)}], 0x1}}], 0x1, 0x20008000) recvmsg(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) shutdown(r4, 0x1) getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0100001000130426bd700040000000ac1414bb0000000000663f24a21696b516530e05cd2013f51b00000000000000ac1e010100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141422000000000000000000000000000004d43200000000000000000000000000ffffe000000100080000000000007d0100000000000000000000000000000400000000004000ffffffffffffffff06000000000000007f0000000000000002000000000000000000000000000000fd2100000000000004000000000000000400000000000000f6004000040000000800000000000000ff340000020001be330000004c001200726663343330392863636d28616573292900"/225], 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 22.434608688s ago: executing program 0 (id=3981): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x8000, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="a4db10030b52"}, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)={0x56fa9599}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0xeda7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x10, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0xd000, 0x200306}) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x12, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000fbffffff000000005e6300008500000011000000850000000f000000950000000000de000acedade0e404b64ebec41ff841e3837c6d246e5c891ddac75806470ed9a0fe74249c934c5c887474e4e66f1228377fc1e8c36c7ec828c63b62969fc3e3ac903c2d7ad05408c177ef7e6c9ace34f3832a32b7de223d4969d0190c1ab64612fb9e555dfca5bb8a6d79af52e42b3b0b21ea92f5b0c7f8f3c83ccc1e3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 21.652392328s ago: executing program 1 (id=3982): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, 0x0, 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) creat(&(0x7f0000000040)='./file0\x00', 0x102) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) io_setup(0x4, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f00000000c0)={0x0, 'wlan0\x00', {}, 0x9}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = io_uring_setup(0xad5, &(0x7f0000000140)={0x0, 0xc45e, 0x8, 0x2, 0x1000}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, 0x0) close(r6) r7 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) r9 = openat$cgroup_ro(r8, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000001f80)={0x6591, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000400)=""/209, 0xd1}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/4, 0x4}, {&(0x7f0000001cc0)=""/120, 0x78}, {&(0x7f0000001d40)=""/29, 0x1d}, {&(0x7f0000001d80)=""/133, 0x85}, {&(0x7f0000001e40)=""/136, 0x88}], &(0x7f0000001f40)=[0x9, 0x2, 0x9, 0x81], 0x8}, 0x20) write$cgroup_pid(r7, &(0x7f0000000140), 0x12) 21.300338162s ago: executing program 3 (id=3983): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100010, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x23e002, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x27, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000040)={0x86, 0x23, 0x9, 0xdedb, 0x14, "00faec694b00"}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000001c0)=0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x2000002061, &(0x7f0000000480)) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000100)=0xe) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x1, 0x4002) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x3, 0xa, 0x20, 0x0, 0x62, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, [@tmpl={0x4}]}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) 21.090505068s ago: executing program 2 (id=3985): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32, @ANYBLOB="d50633008000009e"], 0x6f4}}, 0x8044) (fail_nth: 2) 21.055683551s ago: executing program 0 (id=3986): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r2 = syz_open_pts(r1, 0x800) r3 = dup3(r2, r1, 0x80000) read(r3, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000000280)=@raw=[@jmp={0x5, 0x1, 0xc, 0xa, 0xb, 0x50, 0x1}, @exit, @map_val={0x18, 0x5, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f00000000c0)='GPL\x00'}, 0x94) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare(0x8000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}]}, 0x5c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x70, 0x10, 0x403, 0xf00, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2205}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x5}]}}}]}, 0x70}, 0x1, 0xba01}, 0x0) syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000403512108040000102030109028a000301046008080b0001012430010904000000010120000a2401f5260005000000132403050004030306070000000400010004000924050679"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 20.576374576s ago: executing program 1 (id=3987): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r5 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x0) ioctl$FE_SET_PROPERTY(r5, 0x40086f52, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x7, '\x00', @st={0x4, [{0x1, @uvalue=0x1000e}, {0x3, @svalue=0xfff}, {0x2, @svalue=0x1}, {0x1, @uvalue=0x10000}]}, 0x5}]}) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d10fffff500e90600"/20}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r2, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x381580, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) timer_delete(r1) 20.575911183s ago: executing program 2 (id=3988): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x5, 0x5, 0x2, 0x9, 0x0, 0x1, 0x10000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="84379f"], 0x0) syz_usb_connect$midi(0x1, 0xbe, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x5051, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xac, 0x1, 0x1, 0x8, 0x40, 0x8, "", {{{0x9, 0x4, 0x1, 0x0, 0x5, 0x1, 0x3, 0x30, 0x1, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x9, 0xff}, @midi_out_jack={0xd, 0x24, 0x3, 0x2, 0xf, 0x3, [{0x7d, 0x4}, {0xc, 0xf7}, {0xff}], 0x4}, @midi_out_jack={0x15, 0x24, 0x3, 0x1, 0x9, 0x7, [{0x5, 0xc}, {0x4}, {0x7, 0x9}, {0x91, 0x5}, {0x5, 0xc}, {0x40}, {0x9}], 0x18}], [{{0x9, 0x5, 0xe, 0x4, 0x400, 0x27, 0x4, 0xfe, {0x10, 0x25, 0x1, 0xc, "e995be2655a6b32f708175c0"}}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0xfa, 0x8, 0x7f, {0xc, 0x25, 0x1, 0x8, "5cac2a2e90027378"}}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x8, 0x2, 0x81, {0xa, 0x25, 0x1, 0x6, "70de47fff517"}}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x1, 0x3, 0xd, {0xc, 0x25, 0x1, 0x8, "6384ea0b8b7e2013"}}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x10, 0x5, 0x40, {0x13, 0x25, 0x1, 0xf, "b25a9764e95b61ff714d13800fe405"}}}]}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x8, 0x80, 0x2, 0x10, 0xaf}, 0x3f, &(0x7f0000000140)={0x5, 0xf, 0x3f, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "e5d730b21be96e818099ed657b458e41"}, @ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x48, 0xf0f, 0x3, [0xff3f00, 0xff00f0, 0x0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x9, 0x7, 0x1, 0x2b}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc07}}, {0xbd, &(0x7f0000000200)=@string={0xbd, 0x3, "d981634e8941de488cf16c5ddb6ef6731ff5a13c50e2c103b5e20e7520912e5c1203d71e58d95830cf1706d7e1adc8a2952ee6007dc0c4fed876ada6cfbcef123797be75f8ebd426640b70e006b14c86c90b400cc19f8ffef6b96cea10b8e50834ef80c1ea6c6d5ff702379d24c17a111db9ab016d6aabaccde9706e629d4fbce977f3b47361b68d6c5e11786f9edbb4da0598079622c46f47dbcb6f63f4d4511f9032a2846ea2d22fa95bbc94bb2101fbcf1f51071272094cd5a2"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc0c}}, {0xd7, &(0x7f0000000380)=@string={0xd7, 0x3, "df6c99966c34fbcc57bc6896ac285d0dd2c0879b9b40ce92ce5b3261ba573a14aa88cc5049f1c0aefb52fc5fdc4dd16a80c0ec04560e73a63ed8ac1f74f8a2b5b6d7e4ef39b52d7e18b9a8e1cba39e4e85a3b0c994ee83641d1f21eb16ab02619c29d33475f4e88ed9eef5fe4e8b6382be1e7fed9e0cfdce8e1c31ef27e06478dbbb720e195cbb1356d0b818e88b77fc801e8c395015ed959f5070e3876e8cb6027224aee375c6b90d9300a8ab859c9cdabf549cc51facfbe5d05f3b4565e86955faa465878917dbd29c93b750773144764a612d86"}}]}) 20.508538171s ago: executing program 4 (id=3989): socket$nl_generic(0x10, 0x3, 0x10) ptrace(0x10, 0x0) ptrace$getregset(0x4204, 0x0, 0x200, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x11) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x1, 0x0, 0x0) chmod(&(0x7f00000001c0)='./file0\x00', 0x44) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r0, 0x58, &(0x7f00000003c0)}, 0x10) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}}, 0x1, 0x0, 0x0) r2 = openat(r0, &(0x7f0000000080)='./file0/../file0\x00', 0x800c7, 0x59caa93f7db8951d) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x24020400) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, 0x0, 0x0) shutdown(r3, 0x0) epoll_wait(r2, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) clock_settime(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x989680}) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x2, 0x6, 0x3, 0xa, 0x0, {0x749cdfe83f96f7b4, 0x0, 0x3}}, 0x14}}, 0x8000) socket(0x2b, 0x1, 0x1) ptrace(0x8, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) 19.675112526s ago: executing program 1 (id=3990): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200080c1, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) 19.591390074s ago: executing program 3 (id=3991): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f00000061c0)={0x2020}, 0x2020) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0x8, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x3c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x5}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x400}}]}}]}, 0x68}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001dc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x40055}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="38010000100013040000000000000000fc010000000000000000000000000000200100000000000000000000000000004e2000074e2000000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc0200000000000000000000000000010000000032000000ac1414fe0000000000000000000000000000000000000000070000000000000005000000000000000c00000000000000ffffffffffffffff05000000000000000800010000020000000000000000000000000000000000000800000000000000cc000000000000000000000000000000f60000000100000001000000000000000000000002000101000000004c001200726663343330392863636d286165732929000000000000e18b000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000025afa19333713ef03b59b4a5350262de1735797c8268deecc81f257afbd908a92fcde309056021baff2b1dd2e0c0dbb917a34ca148acd8a2fcfb5aa71386636574a943e1e2b0f7746b9106ad06d00a471062af151cb35a50fa430da684c95097453b38136bc270c8d4c7f6b6218b79253bf56a3820c57b42dd"], 0x138}, 0x1, 0x0, 0x0, 0x80}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x10000, 0x3}, &(0x7f0000000040), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r6, r7, 0x2c, 0x10000) io_uring_enter(r5, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) io_uring_enter(r5, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) io_uring_enter(r5, 0x788, 0x6a29, 0x1, 0x0, 0xfffffffffffffd04) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, 0x0) 19.590538909s ago: executing program 1 (id=3992): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x20200, 0x0) ioctl$SNDCTL_MIDI_INFO(r2, 0xc074510c, &(0x7f0000000400)={"19c9e16cfde02405523ff0ddafcb3717b4d2a13d47b31159a742b04b90ad", 0x41c4, 0x10, 0x1, [0x9, 0x1, 0x0, 0x4, 0x10000, 0x4, 0x8, 0x5b6a, 0x9, 0x7, 0x3, 0x10001, 0x3, 0x3, 0x5a, 0x4, 0x2, 0x7]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r7, 0x1, 0x6}, 0x10) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) syz_usb_connect(0x3, 0x98, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001186360088d0e3f76239b010203010902860003a2000000090454020317987b5b0a24010a00060201020c2408050600070d0a329ce2090586100004f40804072501832f08000905000040008103ff0905091b08000c078009040201042e2b1503090509000000030004090502020002f7810609050303ff030840040705a6c6415a9f0905850340"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 19.177523378s ago: executing program 2 (id=3993): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x8000, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="a4db10030b52"}, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)={0x56fa9599}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0xeda7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x10, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0xd000, 0x200306}) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x12, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000fbffffff000000005e6300008500000011000000850000000f000000950000000000de000acedade0e404b64ebec41ff841e3837c6d246e5c891ddac75806470ed9a0fe74249c934c5c887474e4e66f1228377fc1e8c36c7ec828c63b62969fc3e3ac903c2d7ad05408c177ef7e6c9ace34f3832a32b7de223d4969d0190c1ab64612fb9e555dfca5bb8a6d79af52e42b3b0b21ea92f5b0c7f8f3c83ccc1e3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 18.089976604s ago: executing program 2 (id=3994): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000100), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) 18.058769004s ago: executing program 2 (id=3995): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) 17.984111479s ago: executing program 2 (id=3996): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@deltclass={0x3c, 0x29, 0x334, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x1c, 0x3}, {0xe, 0x6}, {0x3, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @TCA_RATE={0x6, 0x5, {0xf8, 0x4}}, @tclass_kind_options=@c_sfb={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d080}, 0xd0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff2424852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff0e0b5a293e3877adc1660edbc9a0307a25720a70e419dc44febf7ddc73fd4a5a0b6c28667f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$urandom(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@getsa={0x8c, 0x12, 0x100, 0x70bd27, 0x25dfdbfc, {@in=@private=0xa010100, 0x4d4, 0xa, 0x47}, [@proto={0x5, 0x19, 0x32}, @replay_thresh={0x8, 0xb, 0x1}, @lifetime_val={0x24, 0x9, {0x9, 0x0, 0x3, 0x4}}, @lastused={0xc, 0xf, 0x8000000000000000}, @replay_val={0x10, 0xa, {0x70bd2a, 0x70bd29, 0x9c}}, @offload={0xc, 0x1c, {0x0, 0x5}}, @etimer_thresh={0x8, 0xc, 0xf8ca}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000009, 0x31, 0xffffffffffffffff, 0x7c5c7000) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x8004000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x12, 0xffffffffffffffff, 0x6000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mlock(&(0x7f0000008000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00004bf000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x12, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001100)='syzkaller\x00', 0x5, 0xc7, &(0x7f0000001300)=""/199, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x2, 0x9}) mq_timedsend(r5, 0x0, 0x0, 0x5, 0x0) epoll_create1(0x0) 17.976155277s ago: executing program 0 (id=3997): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x58f, 0x9410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x82, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x6ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 16.431050181s ago: executing program 0 (id=3998): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000100), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) (fail_nth: 2) 16.116538264s ago: executing program 0 (id=3999): bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x11, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) (fail_nth: 2) 15.819027228s ago: executing program 0 (id=4000): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000300)={0x2, 0x1, @stop_pts=0x9}) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x94, 0x0, 0x2, 0x201, 0x0, 0x0, {0x7}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x41}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xcf78}]}, 0x94}, 0x1, 0x0, 0x0, 0x20008004}, 0x20004885) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) readv(r3, &(0x7f0000000380)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xe}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24041080) close_range(r3, r4, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r9, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r9, 0xc0045516, &(0x7f0000000b40)=0xe) r10 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r10, 0xc01864b0, &(0x7f0000000000)={r11, 0x0, 0x1, 0x0, 0x3}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0x8}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) close_range(r9, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffd4, 0x0, 0x0, 0x10}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r12 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r12, &(0x7f0000000180)=[{&(0x7f0000000040)="e26c", 0x2}], 0x1) 5.090910324s ago: executing program 32 (id=3989): socket$nl_generic(0x10, 0x3, 0x10) ptrace(0x10, 0x0) ptrace$getregset(0x4204, 0x0, 0x200, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x11) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x1, 0x0, 0x0) chmod(&(0x7f00000001c0)='./file0\x00', 0x44) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r0, 0x58, &(0x7f00000003c0)}, 0x10) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}}, 0x1, 0x0, 0x0) r2 = openat(r0, &(0x7f0000000080)='./file0/../file0\x00', 0x800c7, 0x59caa93f7db8951d) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x24020400) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, 0x0, 0x0) shutdown(r3, 0x0) epoll_wait(r2, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) clock_settime(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x989680}) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x2, 0x6, 0x3, 0xa, 0x0, {0x749cdfe83f96f7b4, 0x0, 0x3}}, 0x14}}, 0x8000) socket(0x2b, 0x1, 0x1) ptrace(0x8, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) 4.060437812s ago: executing program 33 (id=3992): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x20200, 0x0) ioctl$SNDCTL_MIDI_INFO(r2, 0xc074510c, &(0x7f0000000400)={"19c9e16cfde02405523ff0ddafcb3717b4d2a13d47b31159a742b04b90ad", 0x41c4, 0x10, 0x1, [0x9, 0x1, 0x0, 0x4, 0x10000, 0x4, 0x8, 0x5b6a, 0x9, 0x7, 0x3, 0x10001, 0x3, 0x3, 0x5a, 0x4, 0x2, 0x7]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r7, 0x1, 0x6}, 0x10) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) syz_usb_connect(0x3, 0x98, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001186360088d0e3f76239b010203010902860003a2000000090454020317987b5b0a24010a00060201020c2408050600070d0a329ce2090586100004f40804072501832f08000905000040008103ff0905091b08000c078009040201042e2b1503090509000000030004090502020002f7810609050303ff030840040705a6c6415a9f0905850340"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.038009338s ago: executing program 34 (id=3991): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f00000061c0)={0x2020}, 0x2020) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0x8, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x3c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x5}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x400}}]}}]}, 0x68}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001dc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x40055}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="38010000100013040000000000000000fc010000000000000000000000000000200100000000000000000000000000004e2000074e2000000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x80}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x10000, 0x3}, &(0x7f0000000040), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r6, r7, 0x2c, 0x10000) io_uring_enter(r5, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) io_uring_enter(r5, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) io_uring_enter(r5, 0x788, 0x6a29, 0x1, 0x0, 0xfffffffffffffd04) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, 0x0) 2.01830014s ago: executing program 35 (id=3996): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@deltclass={0x3c, 0x29, 0x334, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x1c, 0x3}, {0xe, 0x6}, {0x3, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @TCA_RATE={0x6, 0x5, {0xf8, 0x4}}, @tclass_kind_options=@c_sfb={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d080}, 0xd0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff2424852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff0e0b5a293e3877adc1660edbc9a0307a25720a70e419dc44febf7ddc73fd4a5a0b6c28667f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$urandom(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@getsa={0x8c, 0x12, 0x100, 0x70bd27, 0x25dfdbfc, {@in=@private=0xa010100, 0x4d4, 0xa, 0x47}, [@proto={0x5, 0x19, 0x32}, @replay_thresh={0x8, 0xb, 0x1}, @lifetime_val={0x24, 0x9, {0x9, 0x0, 0x3, 0x4}}, @lastused={0xc, 0xf, 0x8000000000000000}, @replay_val={0x10, 0xa, {0x70bd2a, 0x70bd29, 0x9c}}, @offload={0xc, 0x1c, {0x0, 0x5}}, @etimer_thresh={0x8, 0xc, 0xf8ca}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000009, 0x31, 0xffffffffffffffff, 0x7c5c7000) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x8004000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x12, 0xffffffffffffffff, 0x6000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mlock(&(0x7f0000008000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00004bf000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x12, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001100)='syzkaller\x00', 0x5, 0xc7, &(0x7f0000001300)=""/199, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x2, 0x9}) mq_timedsend(r5, 0x0, 0x0, 0x5, 0x0) epoll_create1(0x0) 0s ago: executing program 36 (id=4000): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000300)={0x2, 0x1, @stop_pts=0x9}) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x94, 0x0, 0x2, 0x201, 0x0, 0x0, {0x7}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x41}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xcf78}]}, 0x94}, 0x1, 0x0, 0x0, 0x20008004}, 0x20004885) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) readv(r3, &(0x7f0000000380)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xe}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24041080) close_range(r3, r4, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r9, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r9, 0xc0045516, &(0x7f0000000b40)=0xe) r10 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r10, 0xc01864b0, &(0x7f0000000000)={r11, 0x0, 0x1, 0x0, 0x3}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0x8}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) close_range(r9, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffd4, 0x0, 0x0, 0x10}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r12 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r12, &(0x7f0000000180)=[{&(0x7f0000000040)="e26c", 0x2}], 0x1) kernel console output (not intermixed with test programs): : type=1326 audit(1781916200.239:30100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17972 comm="syz.3.3894" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 877.603607][ T42] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 877.640980][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.663668][T17993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3901'. [ 877.672939][ T5675] usb 3-1: device descriptor read/8, error -71 [ 877.702249][ T42] usb 1-1: config 0 descriptor?? [ 877.707297][ T29] audit: type=1326 audit(1781916200.249:30101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17972 comm="syz.3.3894" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 877.781716][ T5675] usb usb3-port1: unable to enumerate USB device [ 877.854625][T18001] fuse: root generation should be zero [ 877.927556][T18003] FAULT_INJECTION: forcing a failure. [ 877.927556][T18003] name failslab, interval 1, probability 0, space 0, times 0 [ 877.940853][T18003] CPU: 0 UID: 0 PID: 18003 Comm: syz.1.3905 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.940887][T18003] Tainted: [L]=SOFTLOCKUP [ 877.940895][T18003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 877.940908][T18003] Call Trace: [ 877.940921][T18003] [ 877.940932][T18003] dump_stack_lvl+0xe8/0x150 [ 877.940975][T18003] should_fail_ex+0x40c/0x560 [ 877.941015][T18003] should_failslab+0xa8/0x100 [ 877.941071][T18003] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 877.941108][T18003] ? rcu_is_watching+0x15/0xb0 [ 877.941140][T18003] ? __alloc_skb+0x1d7/0x7a0 [ 877.941173][T18003] ? trace_irq_enable+0x3b/0x140 [ 877.941226][T18003] __alloc_skb+0x1d7/0x7a0 [ 877.941259][T18003] netlink_sendmsg+0x5d4/0xb40 [ 877.941302][T18003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 877.941328][T18003] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 877.941357][T18003] ? __import_iovec+0x5d7/0x7e0 [ 877.941387][T18003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 877.941412][T18003] sock_sendmsg_nosec+0x13a/0x180 [ 877.941431][T18003] ____sys_sendmsg+0x54e/0x850 [ 877.941456][T18003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 877.941487][T18003] ___sys_sendmsg+0x2a5/0x360 [ 877.941511][T18003] ? get_pid_task+0x20/0x1f0 [ 877.941539][T18003] ? __pfx____sys_sendmsg+0x10/0x10 [ 877.941569][T18003] ? __mutex_trylock_common+0x15f/0x270 [ 877.941599][T18003] ? get_pid_task+0x20/0x1f0 [ 877.941622][T18003] ? get_pid_task+0x20/0x1f0 [ 877.941661][T18003] ? __fget_files+0x2a/0x420 [ 877.941705][T18003] ? __fget_files+0x3a2/0x420 [ 877.941734][T18003] __sys_sendmsg+0x177/0x240 [ 877.941782][T18003] ? __pfx___sys_sendmsg+0x10/0x10 [ 877.941819][T18003] ? rcu_is_watching+0x15/0xb0 [ 877.941868][T18003] __do_fast_syscall_32+0x23e/0x6f0 [ 877.941897][T18003] ? do_fast_syscall_32+0x33/0x70 [ 877.941924][T18003] ? asm_int80_emulation+0x1a/0x20 [ 877.941950][T18003] ? do_int80_emulation+0x29f/0x550 [ 877.941987][T18003] do_fast_syscall_32+0x33/0x70 [ 877.942022][T18003] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 877.942053][T18003] RIP: 0023:0xf7f190ec [ 877.942071][T18003] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 877.942095][T18003] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 877.942123][T18003] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080 [ 877.942142][T18003] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 877.942160][T18003] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 877.942175][T18003] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 877.942192][T18003] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 877.942214][T18003] [ 878.139248][ T42] plantronics 0003:047F:FFFF.0064: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 878.276445][ T5742] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 878.323838][T17988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.355979][T17988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.382223][T18008] netlink: 'syz.1.3907': attribute type 13 has an invalid length. [ 878.432377][ T5742] usb 5-1: Using ep0 maxpacket: 32 [ 878.439244][ T5742] usb 5-1: unable to get BOS descriptor or descriptor too short [ 878.450874][ T5742] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 878.464467][ T5742] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 878.474129][ T5742] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.482748][ T5742] usb 5-1: Product: syz [ 878.487105][ T5742] usb 5-1: Manufacturer: syz [ 878.492201][ T5742] usb 5-1: SerialNumber: syz [ 878.671797][ T42] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 878.705710][T18000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.715864][T18000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.727346][ T5742] usb 5-1: Limiting number of CPorts to U8_MAX [ 878.734822][ T5742] usb 5-1: Not enough endpoints found in device, aborting! [ 878.811343][ T42] usb 2-1: device descriptor read/64, error -71 [ 878.823294][T18010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.835212][T18010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.846398][ C0] plantronics 0003:047F:FFFF.0064: hid_field_extract() called with n (132) > 32! (syz.3.3894) [ 878.937454][T18000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.949054][T18000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.966696][T18000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.993904][T18011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.002397][T18000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.017090][T18011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.051350][ T42] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 879.060169][ T5742] usb 1-1: USB disconnect, device number 40 [ 879.072722][ T5675] usb 5-1: USB disconnect, device number 53 [ 879.192933][ T42] usb 2-1: device descriptor read/64, error -71 [ 879.292624][T18021] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3910'. [ 879.305416][T14223] usb 4-1: string descriptor 0 read error: -71 [ 879.312327][ T42] usb usb2-port1: attempt power cycle [ 879.334241][T14223] usb 4-1: USB disconnect, device number 68 [ 879.671424][ T42] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 879.712123][ T42] usb 2-1: device descriptor read/8, error -71 [ 879.791406][T17391] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 879.831334][ T5742] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 879.901342][ T5675] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 879.961426][ T42] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 879.971361][ T5742] usb 4-1: device descriptor read/64, error -71 [ 879.971362][T17391] usb 5-1: Using ep0 maxpacket: 32 [ 879.975514][T17391] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 879.994025][T17391] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.003649][T17391] usb 5-1: config 0 descriptor?? [ 880.014858][T17391] gspca_main: sunplus-2.14.0 probing 041e:400b [ 880.021853][ T42] usb 2-1: device descriptor read/8, error -71 [ 880.087430][ T5675] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 880.102975][ T5675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.112569][ T5675] usb 1-1: Product: syz [ 880.117364][ T5675] usb 1-1: Manufacturer: syz [ 880.122392][ T5675] usb 1-1: SerialNumber: syz [ 880.128165][ T5675] usb 1-1: config 0 descriptor?? [ 880.133782][ T42] usb usb2-port1: unable to enumerate USB device [ 880.143295][ T5675] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 880.231503][ T5742] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 880.361348][ T5742] usb 4-1: device descriptor read/64, error -71 [ 880.481700][ T5742] usb usb4-port1: attempt power cycle [ 880.551405][ T42] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 880.701346][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 880.707736][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 880.717974][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 880.729270][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 880.738995][ T42] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 880.749082][ T42] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 880.764296][ T42] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 880.773411][ T42] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 880.781828][ T42] usb 3-1: Manufacturer: syz [ 880.787844][ T42] usb 3-1: config 0 descriptor?? [ 880.819098][T18027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.828033][T18027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.841432][ T5742] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 880.871853][ T5742] usb 4-1: device descriptor read/8, error -71 [ 881.042188][ T42] rc_core: IR keymap rc-hauppauge not found [ 881.048458][ T42] Registered IR keymap rc-empty [ 881.048647][T18042] FAULT_INJECTION: forcing a failure. [ 881.048647][T18042] name failslab, interval 1, probability 0, space 0, times 0 [ 881.057709][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 881.066943][T18042] CPU: 0 UID: 0 PID: 18042 Comm: syz.2.3917 Tainted: G L syzkaller #0 PREEMPT(full) [ 881.067012][T18042] Tainted: [L]=SOFTLOCKUP [ 881.067030][T18042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 881.067058][T18042] Call Trace: [ 881.067075][T18042] [ 881.067093][T18042] dump_stack_lvl+0xe8/0x150 [ 881.067161][T18042] should_fail_ex+0x40c/0x560 [ 881.067240][T18042] should_failslab+0xa8/0x100 [ 881.067323][T18042] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 881.067395][T18042] ? rcu_is_watching+0x15/0xb0 [ 881.067447][T18042] ? __alloc_skb+0x1d7/0x7a0 [ 881.067529][T18042] ? trace_irq_enable+0x3b/0x140 [ 881.067623][T18042] __alloc_skb+0x1d7/0x7a0 [ 881.067698][T18042] netlink_sendmsg+0x5d4/0xb40 [ 881.067794][T18042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 881.067868][T18042] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 881.067944][T18042] ? __import_iovec+0x5d7/0x7e0 [ 881.068008][T18042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 881.068074][T18042] sock_sendmsg_nosec+0x13a/0x180 [ 881.068129][T18042] ____sys_sendmsg+0x54e/0x850 [ 881.068202][T18042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 881.068280][T18042] ___sys_sendmsg+0x2a5/0x360 [ 881.068351][T18042] ? get_pid_task+0x20/0x1f0 [ 881.068402][T18042] ? __pfx____sys_sendmsg+0x10/0x10 [ 881.068471][T18042] ? __mutex_trylock_common+0x15f/0x270 [ 881.068536][T18042] ? get_pid_task+0x20/0x1f0 [ 881.068581][T18042] ? get_pid_task+0x20/0x1f0 [ 881.068657][T18042] ? __fget_files+0x2a/0x420 [ 881.068712][T18042] ? __fget_files+0x3a2/0x420 [ 881.068779][T18042] __sys_sendmsg+0x177/0x240 [ 881.068844][T18042] ? __pfx___sys_sendmsg+0x10/0x10 [ 881.068922][T18042] ? rcu_is_watching+0x15/0xb0 [ 881.068992][T18042] __do_fast_syscall_32+0x23e/0x6f0 [ 881.069095][T18042] ? do_fast_syscall_32+0x33/0x70 [ 881.069149][T18042] ? asm_int80_emulation+0x1a/0x20 [ 881.069200][T18042] ? do_int80_emulation+0x29f/0x550 [ 881.069249][T18042] ? trace_irq_disable+0x3b/0x140 [ 881.069317][T18042] do_fast_syscall_32+0x33/0x70 [ 881.069392][T18042] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 881.069451][T18042] RIP: 0023:0xf6fcf0ec [ 881.069497][T18042] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 881.069535][T18042] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 881.069591][T18042] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 881.069623][T18042] RDX: 0000000004000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 881.069658][T18042] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 881.069696][T18042] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 881.069723][T18042] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 881.069775][T18042] [ 881.133624][ T5742] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 881.152689][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 881.180722][ T42] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 881.185857][ T42] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input97 [ 881.196033][ T5675] gspca_sunplus: reg_w_riv err -71 [ 881.196099][ T5675] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 881.262479][ T5742] usb 4-1: device descriptor read/8, error -71 [ 881.277149][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 881.401873][ T5742] usb usb4-port1: unable to enumerate USB device [ 881.409436][ T5675] usb 1-1: USB disconnect, device number 41 [ 881.452033][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 881.472393][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 881.493088][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 881.511974][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 881.533755][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 881.551891][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 881.571767][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 881.592393][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 881.621522][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 881.642682][ T42] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 881.650762][ T42] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 881.664051][ T42] usb 3-1: USB disconnect, device number 19 [ 881.687519][T17391] gspca_sunplus: reg_w_riv err -71 [ 881.702628][T17391] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 881.721725][T18051] trusted_key: encrypted_key: insufficient parameters specified [ 881.730396][T17391] usb 5-1: USB disconnect, device number 54 [ 881.769186][T18053] syzkaller0: entered promiscuous mode [ 881.774826][T18053] syzkaller0: entered allmulticast mode [ 881.999799][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 881.999818][ T29] audit: type=1326 audit(1781916205.189:30231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18026 comm="syz.4.3912" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71971eb code=0x7ffc0000 [ 882.132956][ T29] audit: type=1326 audit(1781916205.329:30232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18026 comm="syz.4.3912" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71971eb code=0x7ffc0000 [ 882.167668][T17391] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 882.240716][ T29] audit: type=1326 audit(1781916205.429:30233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18026 comm="syz.4.3912" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f960ec code=0x7ffc0000 [ 882.340807][T17391] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 882.362059][T17391] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 882.382735][T17391] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.417336][T17391] usb 3-1: config 0 descriptor?? [ 882.639564][T18057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.667254][T18057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.713134][T17391] ath6kl: Failed to submit usb control message: -71 [ 882.743412][T17391] ath6kl: unable to send the bmi data to the device: -71 [ 882.773600][T17391] ath6kl: Unable to send get target info: -71 [ 882.798511][T17391] ath6kl: Failed to init ath6kl core: -71 [ 882.818109][T18078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3927'. [ 882.828946][T17391] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 882.879403][T17391] usb 3-1: USB disconnect, device number 20 [ 882.932105][T14223] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 882.951868][ T5742] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 883.093962][T14223] usb 1-1: unable to get BOS descriptor or descriptor too short [ 883.102873][T14223] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 883.113723][T14223] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 883.125056][ T5742] usb 5-1: unable to get BOS descriptor or descriptor too short [ 883.134563][T14223] usb 1-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 883.144160][T14223] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.152367][ T5742] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 883.164382][T14223] usb 1-1: Product: syz [ 883.168592][T14223] usb 1-1: Manufacturer: syz [ 883.173380][ T5742] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 883.182514][T14223] usb 1-1: SerialNumber: syz [ 883.189836][ T5742] usb 5-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 883.191560][ T42] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 883.208846][ T5742] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.219554][ T5742] usb 5-1: Product: syz [ 883.224059][ T5742] usb 5-1: Manufacturer: syz [ 883.228926][ T5742] usb 5-1: SerialNumber: syz [ 883.376614][ T42] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 883.398785][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.419790][ T42] usb 4-1: Product: syz [ 883.432099][ T42] usb 4-1: Manufacturer: syz [ 883.441972][ T42] usb 4-1: SerialNumber: syz [ 883.447214][T14223] usb 1-1: unit 3 not found! [ 883.454048][ T42] usb 4-1: config 0 descriptor?? [ 883.468253][ T42] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 883.504175][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 883.522870][ T42] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 883.541698][ T42] usb 4-1: media controller created [ 883.565683][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 883.573891][ T5742] usb 5-1: unit 3 not found! [ 883.581705][T14223] usb 1-1: USB disconnect, device number 42 [ 883.647423][ T42] DVB: Unable to find symbol mt352_attach() [ 883.687739][ T5742] usb 5-1: USB disconnect, device number 55 [ 883.711741][T17391] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 883.725136][ T42] DVB: Unable to find symbol nxt6000_attach() [ 883.760194][ T6340] udevd[6340]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 883.789463][ T6350] udevd[6350]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 883.828211][ T42] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 883.855820][ T42] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input98 [ 883.875893][ T42] dvb-usb: schedule remote query interval to 1000 msecs. [ 883.884403][ T42] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 883.899841][ T42] dvb-usb: bulk message failed: -22 (7/0) [ 883.913248][T17391] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 883.926031][T17391] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.937108][ T42] dvb-usb: bulk message failed: -22 (7/0) [ 883.947265][T17391] usb 3-1: Product: syz [ 883.952303][T17391] usb 3-1: Manufacturer: syz [ 883.958628][T17391] usb 3-1: SerialNumber: syz [ 883.978616][T17391] usb 3-1: config 0 descriptor?? [ 884.020442][T17391] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 884.120720][ T29] audit: type=1326 audit(1781916207.309:30234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18095 comm="syz.0.3934" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe80ec code=0x7ffc0000 [ 884.166269][ T29] audit: type=1326 audit(1781916207.309:30235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18095 comm="syz.0.3934" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe80ec code=0x7ffc0000 [ 884.192040][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 884.221046][ T29] audit: type=1326 audit(1781916207.349:30236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18095 comm="syz.0.3934" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe80ec code=0x7ffc0000 [ 884.246962][ T29] audit: type=1326 audit(1781916207.349:30237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18095 comm="syz.0.3934" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe80ec code=0x7ffc0000 [ 884.278586][ T29] audit: type=1326 audit(1781916207.349:30238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18095 comm="syz.0.3934" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71e71eb code=0x7ffc0000 [ 884.322856][ T29] audit: type=1326 audit(1781916207.349:30239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18095 comm="syz.0.3934" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe80ec code=0x7ffc0000 [ 884.349559][ T29] audit: type=1326 audit(1781916207.349:30240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18095 comm="syz.0.3934" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe80ec code=0x7ffc0000 [ 884.401376][ T42] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 884.551352][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 884.551375][T14223] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 884.564610][ T42] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 884.574211][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.584537][ T42] usb 1-1: config 0 descriptor?? [ 884.595204][ T42] gspca_main: sunplus-2.14.0 probing 041e:400b [ 884.714409][T14223] usb 2-1: Using ep0 maxpacket: 32 [ 884.722699][T14223] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 884.738631][T14223] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 884.749782][T14223] usb 2-1: config 0 interface 0 has no altsetting 0 [ 884.762691][T14223] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 884.772117][T14223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.780216][T14223] usb 2-1: Product: syz [ 884.785922][T14223] usb 2-1: Manufacturer: syz [ 884.792154][T14223] usb 2-1: SerialNumber: syz [ 884.802347][T14223] usb 2-1: config 0 descriptor?? [ 884.911842][ T9406] dvb-usb: bulk message failed: -22 (7/0) [ 884.921824][ T9406] dvb-usb: error while querying for an remote control event. [ 885.089797][T17391] gspca_sunplus: reg_w_riv err -71 [ 885.098650][T17391] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 885.110228][T17391] usb 3-1: USB disconnect, device number 21 [ 885.251422][ T9406] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 885.405245][ T9406] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 885.420382][T18096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.432263][ T9406] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 885.451506][ T9406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.452592][T18096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.483867][ T9406] usb 5-1: config 0 descriptor?? [ 885.693325][T18113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.707952][T18113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.725854][ T9406] ath6kl: Failed to submit usb control message: -71 [ 885.736271][ T9406] ath6kl: unable to send the bmi data to the device: -71 [ 885.744012][ T9406] ath6kl: Unable to send get target info: -71 [ 885.750576][ T9406] ath6kl: Failed to init ath6kl core: -71 [ 885.758161][ T9406] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 885.774573][ T9406] usb 5-1: USB disconnect, device number 56 [ 885.951443][ T808] dvb-usb: bulk message failed: -22 (7/0) [ 885.957812][ T808] dvb-usb: error while querying for an remote control event. [ 885.991534][ T10] usb 4-1: USB disconnect, device number 73 [ 886.033437][T14223] gs_usb 2-1:0.0: Couldn't get device config: (err=-110) [ 886.053147][T14223] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110 [ 886.063301][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 886.082518][T18125] FAULT_INJECTION: forcing a failure. [ 886.082518][T18125] name failslab, interval 1, probability 0, space 0, times 0 [ 886.098670][T18125] CPU: 1 UID: 0 PID: 18125 Comm: syz.3.3943 Tainted: G L syzkaller #0 PREEMPT(full) [ 886.098702][T18125] Tainted: [L]=SOFTLOCKUP [ 886.098710][T18125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 886.098723][T18125] Call Trace: [ 886.098734][T18125] [ 886.098743][T18125] dump_stack_lvl+0xe8/0x150 [ 886.098772][T18125] should_fail_ex+0x40c/0x560 [ 886.098805][T18125] should_failslab+0xa8/0x100 [ 886.098837][T18125] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 886.098864][T18125] ? rcu_is_watching+0x15/0xb0 [ 886.098888][T18125] ? __alloc_skb+0x1d7/0x7a0 [ 886.098912][T18125] ? trace_irq_enable+0x3b/0x140 [ 886.098944][T18125] __alloc_skb+0x1d7/0x7a0 [ 886.098970][T18125] netlink_sendmsg+0x5d4/0xb40 [ 886.099017][T18125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 886.099046][T18125] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 886.099096][T18125] ? __import_iovec+0x5d7/0x7e0 [ 886.099121][T18125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 886.099150][T18125] sock_sendmsg_nosec+0x13a/0x180 [ 886.099172][T18125] ____sys_sendmsg+0x54e/0x850 [ 886.099203][T18125] ? __pfx_____sys_sendmsg+0x10/0x10 [ 886.099239][T18125] ___sys_sendmsg+0x2a5/0x360 [ 886.099266][T18125] ? get_pid_task+0x20/0x1f0 [ 886.099288][T18125] ? __pfx____sys_sendmsg+0x10/0x10 [ 886.099315][T18125] ? __mutex_trylock_common+0x15f/0x270 [ 886.099341][T18125] ? get_pid_task+0x20/0x1f0 [ 886.099360][T18125] ? get_pid_task+0x20/0x1f0 [ 886.099394][T18125] ? __fget_files+0x2a/0x420 [ 886.099428][T18125] ? __fget_files+0x3a2/0x420 [ 886.099461][T18125] __sys_sendmsg+0x177/0x240 [ 886.099488][T18125] ? __pfx___sys_sendmsg+0x10/0x10 [ 886.099519][T18125] ? rcu_is_watching+0x15/0xb0 [ 886.099543][T18125] __do_fast_syscall_32+0x23e/0x6f0 [ 886.099571][T18125] ? do_fast_syscall_32+0x33/0x70 [ 886.099596][T18125] ? asm_int80_emulation+0x1a/0x20 [ 886.099615][T18125] ? do_int80_emulation+0x29f/0x550 [ 886.099638][T18125] ? trace_irq_disable+0x3b/0x140 [ 886.099668][T18125] do_fast_syscall_32+0x33/0x70 [ 886.099693][T18125] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 886.099717][T18125] RIP: 0023:0xf708f0ec [ 886.099733][T18125] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 886.099748][T18125] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 886.099769][T18125] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 886.099782][T18125] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 886.099793][T18125] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 886.099804][T18125] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 886.099815][T18125] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 886.099833][T18125] [ 886.447684][ T42] gspca_sunplus: reg_w_riv err -71 [ 886.453386][ T42] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 886.467520][ T42] usb 1-1: USB disconnect, device number 43 [ 886.500912][T18127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3945'. [ 886.510928][T18127] netlink: 'syz.4.3945': attribute type 1 has an invalid length. [ 886.666020][T18132] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 886.681673][T18132] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 886.699394][T18132] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 886.707447][T18132] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 886.855038][T18140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3948'. [ 886.878222][T18140] 8021q: adding VLAN 0 to HW filter on device bond2 [ 886.901086][T18140] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 886.916413][T18140] netlink: 'syz.2.3948': attribute type 10 has an invalid length. [ 886.925703][T18140] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3948'. [ 886.935909][T18140] dummy0: entered promiscuous mode [ 886.944424][T18140] bond2: (slave dummy0): Releasing backup interface [ 886.971412][ T10] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 887.102587][T18154] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 887.122871][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 887.134799][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 887.148172][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 887.163266][ T10] usb 4-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 887.172988][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.181064][ T10] usb 4-1: Product: syz [ 887.186592][ T10] usb 4-1: Manufacturer: syz [ 887.191316][ T10] usb 4-1: SerialNumber: syz [ 887.262923][T18161] syzkaller0: entered promiscuous mode [ 887.268646][T18161] syzkaller0: entered allmulticast mode [ 887.271885][ T808] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 887.384974][ T5742] usb 2-1: USB disconnect, device number 30 [ 887.414562][ T10] usb 4-1: unit 3 not found! [ 887.434882][ T808] usb 3-1: Using ep0 maxpacket: 8 [ 887.462871][ T808] usb 3-1: config 0 has an invalid interface number: 252 but max is 0 [ 887.484060][ T808] usb 3-1: config 0 has no interface number 0 [ 887.491667][ T808] usb 3-1: too many endpoints for config 0 interface 252 altsetting 212: 174, using maximum allowed: 30 [ 887.505484][ T10] usb 4-1: USB disconnect, device number 74 [ 887.519211][ T808] usb 3-1: config 0 interface 252 altsetting 212 has 0 endpoint descriptors, different from the interface descriptor's value: 174 [ 887.539208][ T808] usb 3-1: config 0 interface 252 has no altsetting 0 [ 887.541921][ T5626] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 887.569174][ T808] usb 3-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=5b.65 [ 887.587389][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.597985][ T6340] udevd[6340]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 887.605928][ T808] usb 3-1: Product: syz [ 887.631516][ T9406] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 887.642407][ T808] usb 3-1: Manufacturer: syz [ 887.647641][ T808] usb 3-1: SerialNumber: syz [ 887.654434][ T808] usb 3-1: config 0 descriptor?? [ 887.711344][ T5626] usb 1-1: Using ep0 maxpacket: 32 [ 887.719382][ T5626] usb 1-1: config 123 interface 0 has no altsetting 0 [ 887.728707][ T5626] usb 1-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 887.738113][ T5626] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.746357][ T5626] usb 1-1: Product: syz [ 887.750758][ T5626] usb 1-1: Manufacturer: syz [ 887.756149][ T5626] usb 1-1: SerialNumber: syz [ 887.793143][ T9406] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 887.807138][ T9406] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 887.822811][ T9406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.839509][ T9406] usb 5-1: config 0 descriptor?? [ 887.872449][ T808] pegasus 3-1:0.252: Missing or invalid endpoints [ 887.884581][ T808] usb 3-1: USB disconnect, device number 22 [ 887.980511][ T5626] usb 1-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 888.016887][ T5626] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 888.053992][T18165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.067265][T18165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.076528][ T9406] ath6kl: Failed to submit usb control message: -71 [ 888.097869][ T5626] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 888.101673][ T9406] ath6kl: unable to send the bmi data to the device: -71 [ 888.120423][ T9406] ath6kl: Unable to send get target info: -71 [ 888.120511][ T5626] usb 1-1: media controller created [ 888.140195][ T9406] ath6kl: Failed to init ath6kl core: -71 [ 888.154204][ T9406] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 888.167828][ T5626] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 888.180088][ T9406] usb 5-1: USB disconnect, device number 57 [ 888.209760][ T5626] set interface failed [ 888.209873][ T5626] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 888.238223][ T5626] error writing reg: 0xff, val: 0x00 [ 888.278226][ T5626] dvb_usb_mxl111sf 1-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 888.315380][ T5626] usb 1-1: USB disconnect, device number 44 [ 888.654954][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 888.654979][ T29] audit: type=1326 audit(1781916211.849:30340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18181 comm="syz.4.3960" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f960ec code=0x7ffc0000 [ 888.693227][ T4940] Bluetooth: hci4: command 0x0406 tx timeout [ 888.739627][ T29] audit: type=1326 audit(1781916211.889:30341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18181 comm="syz.4.3960" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f960ec code=0x7ffc0000 [ 888.765440][ T4940] Bluetooth: hci0: command 0x0c1a tx timeout [ 888.771556][ T4940] Bluetooth: hci3: command 0x0c1a tx timeout [ 888.774769][ T7566] Bluetooth: hci2: command 0x0c1a tx timeout [ 888.777856][ T29] audit: type=1326 audit(1781916211.889:30342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18181 comm="syz.4.3960" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f960ec code=0x7ffc0000 [ 888.811070][ T29] audit: type=1326 audit(1781916211.889:30343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18181 comm="syz.4.3960" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f960ec code=0x7ffc0000 [ 888.845718][ T9406] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 888.868344][ T29] audit: type=1326 audit(1781916211.889:30344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18181 comm="syz.4.3960" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71971eb code=0x7ffc0000 [ 888.952043][ T808] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 888.968701][ T29] audit: type=1326 audit(1781916211.889:30345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18181 comm="syz.4.3960" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f960ec code=0x7ffc0000 [ 889.012608][ T9406] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 889.031974][ T9406] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 889.056273][ T29] audit: type=1326 audit(1781916211.889:30346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18181 comm="syz.4.3960" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f960ec code=0x7ffc0000 [ 889.091383][ T9406] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 889.110861][ T9406] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 889.122271][ T808] usb 5-1: Using ep0 maxpacket: 32 [ 889.130409][ T808] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 889.142587][ T29] audit: type=1326 audit(1781916211.889:30347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18181 comm="syz.4.3960" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f960ec code=0x7ffc0000 [ 889.167743][ T9406] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 889.179232][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.196323][ T9406] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 889.206117][ T9406] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 889.215036][ T808] usb 5-1: config 0 descriptor?? [ 889.223867][ T29] audit: type=1326 audit(1781916211.889:30348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18181 comm="syz.4.3960" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f960ec code=0x7ffc0000 [ 889.248917][ T9406] usb 3-1: Product: syz [ 889.258421][ T9406] usb 3-1: Manufacturer: syz [ 889.264981][ T808] gspca_main: sunplus-2.14.0 probing 041e:400b [ 889.285167][ T9406] cdc_wdm 3-1:1.0: skipping garbage [ 889.297304][T18188] FAULT_INJECTION: forcing a failure. [ 889.297304][T18188] name failslab, interval 1, probability 0, space 0, times 0 [ 889.323299][T18188] CPU: 0 UID: 0 PID: 18188 Comm: syz.0.3963 Tainted: G L syzkaller #0 PREEMPT(full) [ 889.323330][T18188] Tainted: [L]=SOFTLOCKUP [ 889.323338][T18188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 889.323350][T18188] Call Trace: [ 889.323358][T18188] [ 889.323372][T18188] dump_stack_lvl+0xe8/0x150 [ 889.323412][T18188] should_fail_ex+0x40c/0x560 [ 889.323462][T18188] should_failslab+0xa8/0x100 [ 889.323515][T18188] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 889.323536][T18188] ? rcu_is_watching+0x15/0xb0 [ 889.323572][T18188] ? __alloc_skb+0x1d7/0x7a0 [ 889.323599][T18188] ? trace_irq_enable+0x3b/0x140 [ 889.323632][T18188] __alloc_skb+0x1d7/0x7a0 [ 889.323663][T18188] netlink_sendmsg+0x5d4/0xb40 [ 889.323689][T18188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 889.323732][T18188] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 889.323766][T18188] ? __import_iovec+0x5d7/0x7e0 [ 889.323791][T18188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 889.323821][T18188] sock_sendmsg_nosec+0x13a/0x180 [ 889.323837][T18188] ____sys_sendmsg+0x54e/0x850 [ 889.323878][T18188] ? __pfx_____sys_sendmsg+0x10/0x10 [ 889.323915][T18188] ___sys_sendmsg+0x2a5/0x360 [ 889.323942][T18188] ? get_pid_task+0x20/0x1f0 [ 889.323966][T18188] ? __pfx____sys_sendmsg+0x10/0x10 [ 889.323986][T18188] ? __mutex_trylock_common+0x15f/0x270 [ 889.324006][T18188] ? get_pid_task+0x20/0x1f0 [ 889.324039][T18188] ? get_pid_task+0x20/0x1f0 [ 889.324072][T18188] ? __fget_files+0x2a/0x420 [ 889.324094][T18188] ? __fget_files+0x3a2/0x420 [ 889.324124][T18188] __sys_sendmsg+0x177/0x240 [ 889.324151][T18188] ? __pfx___sys_sendmsg+0x10/0x10 [ 889.324196][T18188] ? rcu_is_watching+0x15/0xb0 [ 889.324222][T18188] __do_fast_syscall_32+0x23e/0x6f0 [ 889.324250][T18188] ? do_fast_syscall_32+0x33/0x70 [ 889.324278][T18188] ? asm_int80_emulation+0x1a/0x20 [ 889.324292][T18188] ? do_int80_emulation+0x29f/0x550 [ 889.324311][T18188] ? trace_irq_disable+0x3b/0x140 [ 889.324356][T18188] do_fast_syscall_32+0x33/0x70 [ 889.324383][T18188] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 889.324410][T18188] RIP: 0023:0xf7fe80ec [ 889.324428][T18188] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 889.324442][T18188] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 889.324458][T18188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40 [ 889.324469][T18188] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 889.324496][T18188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 889.324509][T18188] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 889.324522][T18188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 889.324542][T18188] [ 889.370344][ T9406] cdc_wdm 3-1:1.0: skipping garbage [ 889.617217][ T29] audit: type=1326 audit(1781916211.889:30349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18181 comm="syz.4.3960" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f960ec code=0x7ffc0000 [ 889.648142][ T9406] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 889.654481][ T9406] cdc_wdm 3-1:1.0: Unknown control protocol [ 889.734024][T18192] FAULT_INJECTION: forcing a failure. [ 889.734024][T18192] name failslab, interval 1, probability 0, space 0, times 0 [ 889.775799][T18192] CPU: 0 UID: 0 PID: 18192 Comm: syz.1.3965 Tainted: G L syzkaller #0 PREEMPT(full) [ 889.775831][T18192] Tainted: [L]=SOFTLOCKUP [ 889.775839][T18192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 889.775851][T18192] Call Trace: [ 889.775858][T18192] [ 889.775867][T18192] dump_stack_lvl+0xe8/0x150 [ 889.775894][T18192] should_fail_ex+0x40c/0x560 [ 889.775926][T18192] should_failslab+0xa8/0x100 [ 889.775955][T18192] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 889.775980][T18192] ? rcu_is_watching+0x15/0xb0 [ 889.776002][T18192] ? __alloc_skb+0x1d7/0x7a0 [ 889.776026][T18192] ? trace_irq_enable+0x3b/0x140 [ 889.776057][T18192] __alloc_skb+0x1d7/0x7a0 [ 889.776081][T18192] netlink_sendmsg+0x5d4/0xb40 [ 889.776112][T18192] ? __pfx_netlink_sendmsg+0x10/0x10 [ 889.776140][T18192] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 889.776172][T18192] ? __import_iovec+0x5d7/0x7e0 [ 889.776195][T18192] ? __pfx_netlink_sendmsg+0x10/0x10 [ 889.776222][T18192] sock_sendmsg_nosec+0x13a/0x180 [ 889.776243][T18192] ____sys_sendmsg+0x54e/0x850 [ 889.776272][T18192] ? __pfx_____sys_sendmsg+0x10/0x10 [ 889.776306][T18192] ___sys_sendmsg+0x2a5/0x360 [ 889.776332][T18192] ? get_pid_task+0x20/0x1f0 [ 889.776352][T18192] ? __pfx____sys_sendmsg+0x10/0x10 [ 889.776376][T18192] ? __mutex_trylock_common+0x15f/0x270 [ 889.776412][T18192] ? get_pid_task+0x20/0x1f0 [ 889.776428][T18192] ? get_pid_task+0x20/0x1f0 [ 889.776459][T18192] ? __fget_files+0x2a/0x420 [ 889.776478][T18192] ? __fget_files+0x3a2/0x420 [ 889.776501][T18192] __sys_sendmsg+0x177/0x240 [ 889.776531][T18192] ? __pfx___sys_sendmsg+0x10/0x10 [ 889.776552][T18192] ? rcu_is_watching+0x15/0xb0 [ 889.776567][T18192] __do_fast_syscall_32+0x23e/0x6f0 [ 889.776616][T18192] ? do_fast_syscall_32+0x33/0x70 [ 889.776639][T18192] ? asm_int80_emulation+0x1a/0x20 [ 889.776657][T18192] ? do_int80_emulation+0x29f/0x550 [ 889.776682][T18192] ? trace_irq_disable+0x3b/0x140 [ 889.776703][T18192] do_fast_syscall_32+0x33/0x70 [ 889.776721][T18192] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 889.776751][T18192] RIP: 0023:0xf7f190ec [ 889.776768][T18192] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 889.776784][T18192] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 889.776803][T18192] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 889.776815][T18192] RDX: 0000000004000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 889.776831][T18192] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 889.776839][T18192] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 889.776847][T18192] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 889.776860][T18192] [ 890.361481][ T9406] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 890.508731][T18182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.524811][ T9406] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 890.553272][T18182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.572517][ T9406] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 890.596463][ T9406] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 890.623348][ T9406] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 890.640016][ T9406] usb 2-1: SerialNumber: syz [ 890.801861][ T5626] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 890.869749][ T9406] usb 2-1: 0:2 : does not exist [ 890.891959][ T9406] usb 2-1: USB disconnect, device number 31 [ 890.910528][ T6340] udevd[6340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 890.941688][ T5742] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 890.963509][ T5626] usb 4-1: unable to get BOS descriptor or descriptor too short [ 890.972155][ T5626] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 890.982550][ T5626] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 890.995250][ T5626] usb 4-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 891.005143][ T5626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.013569][ T5626] usb 4-1: Product: syz [ 891.017813][ T5626] usb 4-1: Manufacturer: syz [ 891.022487][ T5626] usb 4-1: SerialNumber: syz [ 891.103932][ T5742] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 891.115021][ T5742] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 891.124179][ T5742] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.133742][ T5742] usb 1-1: config 0 descriptor?? [ 891.237802][ T5626] usb 4-1: unit 3 not found! [ 891.276196][ T5626] usb 4-1: USB disconnect, device number 75 [ 891.305864][ T6340] udevd[6340]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 891.342075][T18208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.350869][T18208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.360492][ T5742] ath6kl: Failed to submit usb control message: -71 [ 891.367418][ T5742] ath6kl: unable to send the bmi data to the device: -71 [ 891.375693][ T5742] ath6kl: Unable to send get target info: -71 [ 891.382252][ T5742] ath6kl: Failed to init ath6kl core: -71 [ 891.388685][ T5742] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 891.400984][ T5742] usb 1-1: USB disconnect, device number 45 [ 891.427146][ T808] gspca_sunplus: reg_w_riv err -71 [ 891.432514][ T808] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 891.446579][ T808] usb 5-1: USB disconnect, device number 58 [ 891.483541][ T9406] usb 3-1: USB disconnect, device number 23 [ 891.485741][T18211] FAULT_INJECTION: forcing a failure. [ 891.485741][T18211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 891.503156][T18211] CPU: 0 UID: 0 PID: 18211 Comm: syz.1.3972 Tainted: G L syzkaller #0 PREEMPT(full) [ 891.503183][T18211] Tainted: [L]=SOFTLOCKUP [ 891.503190][T18211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 891.503201][T18211] Call Trace: [ 891.503208][T18211] [ 891.503216][T18211] dump_stack_lvl+0xe8/0x150 [ 891.503241][T18211] should_fail_ex+0x40c/0x560 [ 891.503270][T18211] _copy_to_user+0x31/0xb0 [ 891.503292][T18211] simple_read_from_buffer+0xe1/0x170 [ 891.503316][T18211] proc_fail_nth_read+0x1bb/0x230 [ 891.503341][T18211] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 891.503365][T18211] ? rw_verify_area+0x24a/0x4c0 [ 891.503389][T18211] ? do_tcp_setsockopt+0x277/0x1f80 [ 891.503510][T18211] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 891.503535][T18211] vfs_read+0x213/0xa80 [ 891.503557][T18211] ? __local_bh_enable_ip+0xd0/0x130 [ 891.503594][T18211] ? __pfx___mutex_lock+0x10/0x10 [ 891.503617][T18211] ? __pfx_vfs_read+0x10/0x10 [ 891.503644][T18211] ? __fget_files+0x3a2/0x420 [ 891.503664][T18211] ? __fget_files+0x2a/0x420 [ 891.503687][T18211] ksys_read+0x150/0x270 [ 891.503712][T18211] ? __pfx_ksys_read+0x10/0x10 [ 891.503735][T18211] ? rcu_is_watching+0x15/0xb0 [ 891.503757][T18211] ? rcu_is_watching+0x15/0xb0 [ 891.503777][T18211] ? asm_int80_emulation+0x1a/0x20 [ 891.503798][T18211] do_int80_emulation+0x19a/0x550 [ 891.503839][T18211] ? trace_irq_disable+0x3b/0x140 [ 891.503868][T18211] ? asm_int80_emulation+0x1a/0x20 [ 891.503886][T18211] ? clear_bhb_loop+0x40/0x90 [ 891.503906][T18211] ? clear_bhb_loop+0x40/0x90 [ 891.503927][T18211] asm_int80_emulation+0x1a/0x20 [ 891.503946][T18211] RIP: 0023:0xf71171eb [ 891.503962][T18211] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 891.503980][T18211] RSP: 002b:00000000f53d64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 891.504010][T18211] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53d65d0 [ 891.504025][T18211] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 891.504037][T18211] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 891.504048][T18211] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 891.504060][T18211] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 891.504080][T18211] [ 892.121383][ T9406] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 892.172695][T18226] FAULT_INJECTION: forcing a failure. [ 892.172695][T18226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 892.215357][T18226] CPU: 0 UID: 0 PID: 18226 Comm: syz.0.3977 Tainted: G L syzkaller #0 PREEMPT(full) [ 892.215379][T18226] Tainted: [L]=SOFTLOCKUP [ 892.215384][T18226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 892.215393][T18226] Call Trace: [ 892.215399][T18226] [ 892.215405][T18226] dump_stack_lvl+0xe8/0x150 [ 892.215426][T18226] should_fail_ex+0x40c/0x560 [ 892.215454][T18226] strncpy_from_user+0x36/0x2c0 [ 892.215504][T18226] do_getname+0x77/0x250 [ 892.215525][T18226] do_sys_openat2+0xcc/0x200 [ 892.215545][T18226] ? __pfx_do_sys_openat2+0x10/0x10 [ 892.215560][T18226] ? ksys_write+0x242/0x270 [ 892.215577][T18226] ? __pfx_ksys_write+0x10/0x10 [ 892.215596][T18226] __ia32_compat_sys_openat+0x131/0x160 [ 892.215612][T18226] do_int80_emulation+0x19a/0x550 [ 892.215630][T18226] ? trace_irq_disable+0x3b/0x140 [ 892.215651][T18226] ? asm_int80_emulation+0x1a/0x20 [ 892.215665][T18226] ? clear_bhb_loop+0x40/0x90 [ 892.215679][T18226] ? clear_bhb_loop+0x40/0x90 [ 892.215693][T18226] asm_int80_emulation+0x1a/0x20 [ 892.215706][T18226] RIP: 0023:0xf71e71eb [ 892.215717][T18226] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 892.215729][T18226] RSP: 002b:00000000f54a603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 892.215744][T18226] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f54a6100 [ 892.215754][T18226] RDX: 0000000000020200 RSI: 0000000000000000 RDI: 0000000000000000 [ 892.215763][T18226] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 892.215771][T18226] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 892.215780][T18226] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 892.215794][T18226] [ 892.526493][ T9406] usb 3-1: config 0 has an invalid descriptor of length 231, skipping remainder of the config [ 892.610515][ T9406] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 232, changing to 11 [ 892.648862][ T9406] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8784, setting to 1024 [ 892.674528][ T9406] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 892.697043][ T9406] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.728769][ T9406] usb 3-1: config 0 descriptor?? [ 892.855561][T18235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3980'. [ 893.163945][ T9406] hid-rmi 0003:0461:4E72.0065: unknown main item tag 0x6 [ 893.206962][ T9406] hid-rmi 0003:0461:4E72.0065: item fetching failed at offset 8/11 [ 893.254965][ T9406] hid-rmi 0003:0461:4E72.0065: parse failed [ 893.275047][T18241] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 893.299014][ T9406] hid-rmi 0003:0461:4E72.0065: probe with driver hid-rmi failed with error -22 [ 893.382248][ T9406] usb 3-1: USB disconnect, device number 24 [ 894.263603][T18256] FAULT_INJECTION: forcing a failure. [ 894.263603][T18256] name failslab, interval 1, probability 0, space 0, times 0 [ 894.329521][T18256] CPU: 0 UID: 0 PID: 18256 Comm: syz.2.3985 Tainted: G L syzkaller #0 PREEMPT(full) [ 894.329554][T18256] Tainted: [L]=SOFTLOCKUP [ 894.329562][T18256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 894.329574][T18256] Call Trace: [ 894.329582][T18256] [ 894.329594][T18256] dump_stack_lvl+0xe8/0x150 [ 894.329620][T18256] should_fail_ex+0x40c/0x560 [ 894.329652][T18256] should_failslab+0xa8/0x100 [ 894.329683][T18256] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 894.329710][T18256] ? rcu_is_watching+0x15/0xb0 [ 894.329734][T18256] ? __alloc_skb+0x1d7/0x7a0 [ 894.329758][T18256] ? trace_irq_enable+0x3b/0x140 [ 894.329789][T18256] __alloc_skb+0x1d7/0x7a0 [ 894.329822][T18256] netlink_sendmsg+0x5d4/0xb40 [ 894.329856][T18256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 894.329885][T18256] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 894.329917][T18256] ? __import_iovec+0x5d7/0x7e0 [ 894.329940][T18256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 894.329967][T18256] sock_sendmsg_nosec+0x13a/0x180 [ 894.329987][T18256] ____sys_sendmsg+0x54e/0x850 [ 894.330016][T18256] ? __pfx_____sys_sendmsg+0x10/0x10 [ 894.330051][T18256] ___sys_sendmsg+0x2a5/0x360 [ 894.330096][T18256] ? get_pid_task+0x20/0x1f0 [ 894.330120][T18256] ? __pfx____sys_sendmsg+0x10/0x10 [ 894.330148][T18256] ? __mutex_trylock_common+0x15f/0x270 [ 894.330176][T18256] ? get_pid_task+0x20/0x1f0 [ 894.330196][T18256] ? get_pid_task+0x20/0x1f0 [ 894.330231][T18256] ? __fget_files+0x2a/0x420 [ 894.330255][T18256] ? __fget_files+0x3a2/0x420 [ 894.330284][T18256] __sys_sendmsg+0x177/0x240 [ 894.330315][T18256] ? __pfx___sys_sendmsg+0x10/0x10 [ 894.330350][T18256] ? rcu_is_watching+0x15/0xb0 [ 894.330376][T18256] __do_fast_syscall_32+0x23e/0x6f0 [ 894.330406][T18256] ? do_fast_syscall_32+0x33/0x70 [ 894.330434][T18256] ? asm_int80_emulation+0x1a/0x20 [ 894.330456][T18256] ? do_int80_emulation+0x29f/0x550 [ 894.330483][T18256] ? trace_irq_disable+0x3b/0x140 [ 894.330516][T18256] do_fast_syscall_32+0x33/0x70 [ 894.330545][T18256] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 894.330571][T18256] RIP: 0023:0xf6fcf0ec [ 894.330590][T18256] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 894.330610][T18256] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 894.330643][T18256] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001380 [ 894.330660][T18256] RDX: 0000000000008044 RSI: 0000000000000000 RDI: 0000000000000000 [ 894.330674][T18256] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 894.330687][T18256] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 894.330700][T18256] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 894.330722][T18256] [ 894.723783][T18260] ip6gre1: entered allmulticast mode [ 894.779036][T18269] fuse: Bad value for 'fd' [ 894.910139][T18274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.940041][T18274] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.951925][T17391] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 894.971643][ T9406] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 894.983995][T18274] batman_adv: batadv0: Interface activated: dummy0 [ 895.004909][T18274] batadv0: mtu less than device minimum [ 895.019859][T18274] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 895.031059][T18274] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 895.041861][T18274] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 895.052689][T18274] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 895.063485][T18274] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 895.074229][T18274] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 895.085055][T18274] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 895.095824][T18274] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 895.106592][T18274] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 895.156142][T18274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 895.190936][T18274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 895.212216][T17391] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 895.224072][T17391] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 895.234185][T17391] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.242571][ T9406] usb 1-1: unable to get BOS descriptor or descriptor too short [ 895.252082][ T9406] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 895.262778][ T9406] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 895.278781][T17391] usb 3-1: config 0 descriptor?? [ 895.285021][T18274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 895.299008][ T9406] usb 1-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 895.309505][ T9406] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.331578][ T9406] usb 1-1: Product: syz [ 895.336868][ T9406] usb 1-1: Manufacturer: syz [ 895.346962][T18274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 895.358939][ T9406] usb 1-1: SerialNumber: syz [ 895.365423][T18274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 895.391137][T18274] veth1_vlan: left promiscuous mode [ 895.397955][T18274] veth0_vlan: left promiscuous mode [ 895.406018][T18274] veth0_vlan: entered promiscuous mode [ 895.415567][T18274] veth1_vlan: entered promiscuous mode [ 895.427276][T18274] veth1_macvtap: left promiscuous mode [ 895.434460][T18274] veth0_macvtap: left promiscuous mode [ 895.441475][T18274] veth0_macvtap: entered promiscuous mode [ 895.449379][T18274] veth1_macvtap: entered promiscuous mode [ 895.462611][T18274] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 895.500832][T18265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.510035][T18265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.530044][T17391] ath6kl: Failed to submit usb control message: -71 [ 895.536892][T17391] ath6kl: unable to send the bmi data to the device: -71 [ 895.555957][T17391] ath6kl: Unable to send get target info: -71 [ 895.569891][T17391] ath6kl: Failed to init ath6kl core: -71 [ 895.578233][T17391] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 895.607314][T17391] usb 3-1: USB disconnect, device number 25 [ 896.193659][T18308] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 896.271342][ T5742] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 896.421320][ T5742] usb 2-1: Using ep0 maxpacket: 8 [ 896.428247][ T5742] usb 2-1: config 162 has an invalid interface number: 84 but max is 2 [ 896.437708][ T5742] usb 2-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 896.448459][ T5742] usb 2-1: config 162 has 2 interfaces, different from the descriptor's value: 3 [ 896.458019][ T5742] usb 2-1: config 162 has no interface number 0 [ 896.464765][ T5742] usb 2-1: config 162 has no interface number 1 [ 896.474055][ T5742] usb 2-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 896.489638][ T5742] usb 2-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 896.500966][ T5742] usb 2-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 896.514619][ T5742] usb 2-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 896.526840][ T5742] usb 2-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 896.538031][ T5742] usb 2-1: config 162 interface 2 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 896.549567][ T5742] usb 2-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 896.563099][ T5742] usb 2-1: config 162 interface 84 has no altsetting 0 [ 896.570156][ T5742] usb 2-1: config 162 interface 2 has no altsetting 0 [ 896.581102][ T5742] usb 2-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 896.592757][ T5742] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.600922][ T5742] usb 2-1: Product: syz [ 896.605689][ T5742] usb 2-1: Manufacturer: syz [ 896.610444][ T5742] usb 2-1: SerialNumber: syz [ 897.281053][ T9406] usb 1-1: unit 3 not found! [ 897.336557][ T9406] usb 1-1: USB disconnect, device number 46 [ 897.374701][ T6340] udevd[6340]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 897.661342][ T9406] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 897.812973][ T9406] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 897.824877][ T9406] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 897.835783][ T9406] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 897.849225][ T9406] usb 1-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 897.858351][ T9406] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.869203][ T9406] usb 1-1: config 0 descriptor?? [ 897.875416][T18320] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 898.299819][ T9406] usbhid 1-1:0.0: can't add hid device: -71 [ 898.307730][ T9406] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 898.318454][ T9406] usb 1-1: USB disconnect, device number 47 [ 898.846019][T18322] FAULT_INJECTION: forcing a failure. [ 898.846019][T18322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 898.859229][T18322] CPU: 1 UID: 0 PID: 18322 Comm: syz.0.3998 Tainted: G L syzkaller #0 PREEMPT(full) [ 898.859260][T18322] Tainted: [L]=SOFTLOCKUP [ 898.859268][T18322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 898.859285][T18322] Call Trace: [ 898.859291][T18322] [ 898.859312][T18322] dump_stack_lvl+0xe8/0x150 [ 898.859341][T18322] should_fail_ex+0x40c/0x560 [ 898.859373][T18322] _copy_from_user+0x2d/0xb0 [ 898.859402][T18322] move_addr_to_kernel+0x7e/0x160 [ 898.859418][T18322] get_compat_msghdr+0x3db/0x4c0 [ 898.859441][T18322] ? __pfx_get_compat_msghdr+0x10/0x10 [ 898.859487][T18322] ___sys_sendmsg+0x201/0x360 [ 898.859514][T18322] ? get_pid_task+0x20/0x1f0 [ 898.859535][T18322] ? __pfx____sys_sendmsg+0x10/0x10 [ 898.859563][T18322] ? __mutex_trylock_common+0x15f/0x270 [ 898.859582][T18322] ? get_pid_task+0x20/0x1f0 [ 898.859595][T18322] ? get_pid_task+0x20/0x1f0 [ 898.859638][T18322] ? __fget_files+0x2a/0x420 [ 898.859662][T18322] ? __fget_files+0x3a2/0x420 [ 898.859687][T18322] __sys_sendmsg+0x177/0x240 [ 898.859717][T18322] ? __pfx___sys_sendmsg+0x10/0x10 [ 898.859741][T18322] ? rcu_is_watching+0x15/0xb0 [ 898.859759][T18322] __do_fast_syscall_32+0x23e/0x6f0 [ 898.859801][T18322] ? do_fast_syscall_32+0x33/0x70 [ 898.859827][T18322] ? asm_int80_emulation+0x1a/0x20 [ 898.859847][T18322] ? do_int80_emulation+0x29f/0x550 [ 898.859873][T18322] ? trace_irq_disable+0x3b/0x140 [ 898.859895][T18322] do_fast_syscall_32+0x33/0x70 [ 898.859914][T18322] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 898.859958][T18322] RIP: 0023:0xf7fe80ec [ 898.859975][T18322] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 898.859993][T18322] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 898.860021][T18322] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 898.860032][T18322] RDX: 0000000000008001 RSI: 0000000000000000 RDI: 0000000000000000 [ 898.860041][T18322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 898.860049][T18322] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 898.860090][T18322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 898.860119][T18322] [ 899.116097][T18324] FAULT_INJECTION: forcing a failure. [ 899.116097][T18324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 899.129416][T18324] CPU: 0 UID: 0 PID: 18324 Comm: syz.0.3999 Tainted: G L syzkaller #0 PREEMPT(full) [ 899.129440][T18324] Tainted: [L]=SOFTLOCKUP [ 899.129446][T18324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 899.129454][T18324] Call Trace: [ 899.129460][T18324] [ 899.129465][T18324] dump_stack_lvl+0xe8/0x150 [ 899.129484][T18324] should_fail_ex+0x40c/0x560 [ 899.129507][T18324] _copy_from_iter+0x1d3/0x1660 [ 899.129521][T18324] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 899.129544][T18324] ? __pfx_policy_nodemask+0x10/0x10 [ 899.129565][T18324] ? trace_irq_enable+0x3b/0x140 [ 899.129592][T18324] ? __pfx__copy_from_iter+0x10/0x10 [ 899.129604][T18324] ? irqentry_exit+0x218/0x8f0 [ 899.129622][T18324] ? alloc_pages_mpol+0x24a/0x380 [ 899.129645][T18324] copy_page_from_iter+0x219/0x2d0 [ 899.129660][T18324] tun_get_user+0x1bd0/0x4350 [ 899.129675][T18324] ? is_bpf_text_address+0x292/0x2b0 [ 899.129690][T18324] ? tun_get_user+0x718/0x4350 [ 899.129707][T18324] ? aa_file_perm+0x4ed/0x15f0 [ 899.129728][T18324] ? __pfx_tun_get_user+0x10/0x10 [ 899.129746][T18324] ? ref_tracker_alloc+0x341/0x4b0 [ 899.129758][T18324] ? get_pid_task+0x20/0x1f0 [ 899.129772][T18324] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 899.129784][T18324] ? rcu_is_watching+0x15/0xb0 [ 899.129800][T18324] ? tun_get+0x1c/0x2f0 [ 899.129811][T18324] ? tun_get+0x1c/0x2f0 [ 899.129823][T18324] ? rcu_is_watching+0x15/0xb0 [ 899.129837][T18324] ? tun_get+0x1c/0x2f0 [ 899.129848][T18324] ? lock_release+0x4b/0x3c0 [ 899.129861][T18324] ? apparmor_file_permission+0x1f4/0x300 [ 899.129877][T18324] ? tun_get+0x1c/0x2f0 [ 899.129891][T18324] tun_chr_write_iter+0x113/0x200 [ 899.129913][T18324] vfs_write+0x612/0xba0 [ 899.129934][T18324] ? __pfx_vfs_write+0x10/0x10 [ 899.129955][T18324] ? __fget_files+0x2a/0x420 [ 899.129973][T18324] ksys_write+0x150/0x270 [ 899.129992][T18324] ? __pfx_ksys_write+0x10/0x10 [ 899.130011][T18324] ? rcu_is_watching+0x15/0xb0 [ 899.130027][T18324] ? asm_int80_emulation+0x1a/0x20 [ 899.130042][T18324] do_int80_emulation+0x19a/0x550 [ 899.130078][T18324] ? trace_irq_disable+0x3b/0x140 [ 899.130100][T18324] ? asm_int80_emulation+0x1a/0x20 [ 899.130113][T18324] ? clear_bhb_loop+0x40/0x90 [ 899.130128][T18324] ? clear_bhb_loop+0x40/0x90 [ 899.130143][T18324] asm_int80_emulation+0x1a/0x20 [ 899.130157][T18324] RIP: 0023:0xf71e71eb [ 899.130170][T18324] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 899.130182][T18324] RSP: 002b:00000000f54a644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 899.130198][T18324] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000080 [ 899.130208][T18324] RDX: 0000000000000036 RSI: 0000000000000000 RDI: 0000000000000000 [ 899.130217][T18324] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 899.130226][T18324] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 899.130235][T18324] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 899.130250][T18324] [ 899.951411][ T5675] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 900.101341][ T5675] usb 1-1: Using ep0 maxpacket: 8 [ 900.108505][ T5675] usb 1-1: unable to get BOS descriptor or descriptor too short [ 900.118236][ T5675] usb 1-1: config 4 interface 0 has no altsetting 0 [ 900.127427][ T5675] usb 1-1: string descriptor 0 read error: -22 [ 900.134039][ T5675] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 900.143130][ T5675] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 900.156953][ T5675] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 900.172126][ T5675] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 900.182755][ T5675] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 900.189937][ T5675] usb 1-1: media controller created [ 900.204684][ T5675] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 900.251648][ T57] net_ratelimit: 59 callbacks suppressed [ 900.251665][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 900.782107][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 901.231953][ T5675] zl10353_read_register: readreg error (reg=127, ret==0) [ 901.301382][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 901.649083][ T7566] Bluetooth: hci1: Opcode 0x0c03 failed: -32 [ 901.821401][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 902.341415][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 902.861715][ T48] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 903.381408][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 903.901823][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 904.421379][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 904.941454][ T48] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 905.461995][ T48] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 905.981422][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 906.501644][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 907.021452][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 907.541496][ T48] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 908.061440][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 908.581470][ T48] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 909.101489][ T48] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 909.621506][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 910.141463][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 910.247745][T15534] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 910.257358][T15534] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 910.266474][T15534] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 910.274358][T15534] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 910.282295][T15534] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 910.661653][ T48] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 911.181987][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 911.292260][ T7566] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 911.299874][ T7566] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 911.307258][ T7566] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 911.315805][ T7566] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 911.323315][ T7566] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 911.335225][T15534] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 911.343235][T15534] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 911.351854][T15534] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 911.359456][T15534] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 911.367091][T15534] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 911.701420][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 912.221406][ T48] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 912.351597][ T7566] Bluetooth: hci6: command tx timeout [ 912.741510][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 913.261378][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 913.332564][T15534] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 913.339853][T15534] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 913.347156][T15534] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 913.354830][T15534] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 913.362392][T15534] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 913.391405][T15534] Bluetooth: hci7: command tx timeout [ 913.396831][ T7566] Bluetooth: hci8: command tx timeout [ 913.801437][ T48] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 914.321502][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 914.431610][ T7566] Bluetooth: hci6: command tx timeout [ 914.841417][ T48] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 915.328844][T15534] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 915.336273][T15534] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 915.343677][T15534] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 915.351878][T15534] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 915.359294][T15534] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 915.366384][ T48] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 915.391619][T15534] Bluetooth: hci9: command tx timeout [ 915.471442][T15534] Bluetooth: hci8: command tx timeout [ 915.477062][ T7566] Bluetooth: hci7: command tx timeout [ 915.871463][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 916.392154][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 916.511415][ T7566] Bluetooth: hci6: command tx timeout [ 916.911431][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 917.391440][ T7566] Bluetooth: hci3: command tx timeout [ 917.431445][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 917.471791][ T7566] Bluetooth: hci9: command tx timeout [ 917.551451][ T7566] Bluetooth: hci8: command tx timeout [ 917.551488][T15534] Bluetooth: hci7: command tx timeout [ 917.951416][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 918.472131][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 918.591613][T15534] Bluetooth: hci6: command tx timeout [ 919.001493][ T48] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 919.471355][T15534] Bluetooth: hci3: command tx timeout [ 919.521529][ T48] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 919.551573][T15534] Bluetooth: hci9: command tx timeout [ 919.631438][T15534] Bluetooth: hci8: command tx timeout [ 919.631454][ T7566] Bluetooth: hci7: command tx timeout [ 920.042151][ T48] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 920.561647][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 921.081715][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 921.551379][T15534] Bluetooth: hci3: command tx timeout [ 921.601433][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 921.631506][T15534] Bluetooth: hci9: command tx timeout [ 922.122049][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 922.641474][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 923.161712][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 923.631583][T15534] Bluetooth: hci3: command tx timeout [ 923.681377][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 924.201445][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 924.721636][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 925.241468][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 925.762035][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 926.281563][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 926.801504][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 927.321471][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 927.841441][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 928.361428][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 928.881471][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 929.401809][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 929.921465][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 930.441407][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 930.961964][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 931.481393][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 931.553559][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.560225][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.001453][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 932.521436][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 933.042007][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 933.561444][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 934.081510][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 934.601449][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 935.131466][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 935.651750][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 936.171410][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 936.691696][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 937.211462][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 937.731416][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 938.252229][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 938.771422][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 939.291414][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 939.811387][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 940.331389][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 940.851433][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 941.371544][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 941.891404][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 942.411855][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 942.931419][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 943.451417][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 943.971766][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 944.491467][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 945.011602][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 945.531887][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 946.051367][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 946.571413][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 947.091411][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 947.611409][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 948.131928][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 948.651390][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 949.171393][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 949.692265][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 950.211495][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 950.731603][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 951.251898][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 951.781530][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 952.031548][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 952.301542][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 952.821424][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 953.341451][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 953.861473][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 954.381475][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 954.901372][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 955.421925][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 955.941444][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 956.461388][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 956.981427][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 957.501376][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 958.021442][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 958.541499][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 959.061520][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 959.581420][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 960.101386][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 960.621405][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 961.141532][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 961.661391][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 962.181472][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 962.701448][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 963.221382][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 963.741385][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 964.261675][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 964.782094][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 965.301428][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 965.821405][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 966.341628][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 966.861455][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 967.381476][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 967.901454][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 968.421421][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 968.941371][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 969.461415][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 969.981435][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 970.286166][ T7566] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 970.294962][ T7566] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 970.303100][ T7566] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 970.310901][ T7566] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 970.318602][ T7566] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 970.501431][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 971.021397][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 971.541364][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 971.814525][T15534] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 971.822228][T15534] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 971.829582][T15534] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 971.837930][T15534] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 971.845787][T15534] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 971.859086][T15534] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 971.866732][T15534] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 971.875039][T15534] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 971.883576][T15534] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 971.891074][T15534] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 972.061928][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 972.351379][ T7566] Bluetooth: hci10: command tx timeout [ 972.581395][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 973.101413][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 973.621598][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 973.871409][ T7566] Bluetooth: hci11: command tx timeout [ 973.951354][ T7566] Bluetooth: hci12: command tx timeout [ 974.141433][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 974.294801][T15534] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 974.302421][T15534] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 974.309747][T15534] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 974.318103][T15534] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 974.325937][T15534] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 974.431432][T15534] Bluetooth: hci10: command tx timeout [ 974.661454][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 975.181452][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 975.701690][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 975.951408][T15534] Bluetooth: hci11: command tx timeout [ 976.031400][T15534] Bluetooth: hci12: command tx timeout [ 976.221914][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 976.307023][ T7566] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 976.314734][ T7566] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 976.322135][ T7566] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 976.329822][ T7566] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 976.337669][ T7566] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 976.351699][T15534] Bluetooth: hci13: command tx timeout [ 976.511336][T15534] Bluetooth: hci10: command tx timeout [ 976.741398][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 977.261391][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 977.781831][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 978.031368][T15534] Bluetooth: hci11: command tx timeout [ 978.111472][T15534] Bluetooth: hci12: command tx timeout [ 978.301400][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 978.351394][T15534] Bluetooth: hci14: command tx timeout [ 978.431395][T15534] Bluetooth: hci13: command tx timeout [ 978.591573][T15534] Bluetooth: hci10: command tx timeout [ 978.821392][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 979.341540][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 979.872237][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 980.111474][T15534] Bluetooth: hci11: command tx timeout [ 980.191489][T15534] Bluetooth: hci12: command tx timeout [ 980.391427][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 980.431379][T15534] Bluetooth: hci14: command tx timeout [ 980.511447][T15534] Bluetooth: hci13: command tx timeout [ 980.913518][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 981.431523][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 981.955338][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 982.471408][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 982.511335][T15534] Bluetooth: hci14: command tx timeout [ 982.591387][T15534] Bluetooth: hci13: command tx timeout [ 982.995529][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 983.511989][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 984.045246][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 984.561393][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 984.591390][T15534] Bluetooth: hci14: command tx timeout [ 985.081393][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 985.601384][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 986.121367][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 986.641408][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 987.161429][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 987.682171][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 988.201516][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 988.721812][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 989.241757][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 989.761458][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 990.285078][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 990.811398][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 991.331407][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 991.851420][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 992.371631][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 992.891442][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 992.993398][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.999811][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.411414][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 993.931441][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 994.451414][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 994.971529][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 995.491456][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 996.011435][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 996.531403][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 997.051407][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 997.571397][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 998.091601][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 998.611850][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 999.131831][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 999.651386][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1000.171450][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1000.691406][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1001.211402][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1001.731740][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1002.251437][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1002.771415][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1003.291582][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1003.811410][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1004.331548][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1004.851541][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1005.371666][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1005.891964][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1006.411401][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1006.931397][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1007.451435][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1007.971403][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1008.491902][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1009.011401][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1009.531851][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1010.051436][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1010.571361][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1011.091506][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1011.611903][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1012.131479][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1012.651469][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1013.171314][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1013.691327][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1014.211730][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1014.731728][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1015.251529][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1015.771944][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1016.291406][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1016.811432][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1017.331470][T18348] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1017.851473][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1018.371535][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1018.891401][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1019.411327][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1019.931503][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1020.451438][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1020.971385][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1021.491403][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1022.011349][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1022.531638][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1023.051345][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1023.571362][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1024.091367][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1024.611399][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1025.131808][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1025.651990][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1026.171346][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1026.691716][ T249] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1027.211453][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1027.731361][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1028.251413][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1028.771451][ T249] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1029.291600][ T249] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1029.811392][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1030.341456][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1030.367216][ T7566] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1030.375608][ T7566] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1030.383098][ T7566] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1030.390878][ T7566] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1030.399042][ T7566] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1030.861422][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1031.381403][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1031.901890][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1032.398032][T15534] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1032.405435][T15534] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1032.413455][T15534] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1032.421343][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1032.436435][T15534] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1032.443898][T15534] Bluetooth: hci15: command tx timeout [ 1032.449838][T15534] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1032.464415][ T7566] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1032.471783][ T7566] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1032.479087][ T7566] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1032.486923][ T7566] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1032.494663][ T7566] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1032.961406][ T249] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1033.481476][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1034.001434][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1034.389871][T18388] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1034.397802][T18388] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1034.405168][T18388] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1034.413052][T18388] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1034.420568][T18388] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1034.511344][T18388] Bluetooth: hci16: command tx timeout [ 1034.516928][ T4940] Bluetooth: hci15: command tx timeout [ 1034.517965][T18392] Bluetooth: hci17: command tx timeout [ 1034.528050][ T249] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1035.052245][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1035.571418][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1036.031587][T18394] Bluetooth: hci6: command 0x0406 tx timeout [ 1036.031606][ T4940] Bluetooth: hci9: command 0x0406 tx timeout [ 1036.031656][ T4940] Bluetooth: hci7: command 0x0406 tx timeout [ 1036.038027][T18392] Bluetooth: hci8: command 0x0406 tx timeout [ 1036.091387][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1036.431358][T18389] Bluetooth: hci18: command tx timeout [ 1036.591436][T18389] Bluetooth: hci15: command tx timeout [ 1036.591455][ T7566] Bluetooth: hci16: command tx timeout [ 1036.591467][T15534] Bluetooth: hci17: command tx timeout [ 1036.611340][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1036.867104][ T7566] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1036.874526][ T7566] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1036.881981][ T7566] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1036.889648][ T7566] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1036.897292][ T7566] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1037.131371][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1037.651417][ T249] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1038.181358][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1038.511357][T18389] Bluetooth: hci18: command tx timeout [ 1038.671372][T15534] Bluetooth: hci16: command tx timeout [ 1038.676902][ T7566] Bluetooth: hci17: command tx timeout [ 1038.681602][T18389] Bluetooth: hci15: command tx timeout [ 1038.701410][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1038.911441][T18389] Bluetooth: hci19: command tx timeout [ 1039.221425][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1039.741444][ T249] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1040.261924][ T249] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1040.591908][T15534] Bluetooth: hci18: command tx timeout [ 1040.751409][T15534] Bluetooth: hci17: command tx timeout [ 1040.752401][ T7566] Bluetooth: hci16: command tx timeout [ 1040.781300][ T249] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1040.991532][ T7566] Bluetooth: hci19: command tx timeout [ 1041.151366][ T7566] Bluetooth: hci3: command 0x0406 tx timeout [ 1041.301348][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1041.821413][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1042.341374][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1042.671304][T18389] Bluetooth: hci18: command tx timeout [ 1042.861361][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1043.071747][T18389] Bluetooth: hci19: command tx timeout [ 1043.381387][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1043.901380][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1044.421447][ T249] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1044.941437][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1045.151440][T18389] Bluetooth: hci19: command tx timeout [ 1045.461401][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1045.991475][ T249] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1046.511957][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1047.031440][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1047.391624][ T30] INFO: task kworker/u8:0:12 blocked for more than 143 seconds. [ 1047.399356][ T30] Tainted: G L syzkaller #0 [ 1047.406003][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1047.415322][ T30] task:kworker/u8:0 state:D stack:21512 pid:12 tgid:12 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1047.427420][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 1047.433836][ T30] Call Trace: [ 1047.437126][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1047.440055][ T30] __schedule+0x17d9/0x56c0 [ 1047.445278][ T30] ? unwind_next_frame+0x8f/0x2550 [ 1047.450500][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 1047.456077][ T30] ? arch_stack_walk+0x11b/0x150 [ 1047.461068][ T30] ? __pfx___schedule+0x10/0x10 [ 1047.466036][ T30] ? rcu_is_watching+0x15/0xb0 [ 1047.471157][ T30] ? rcu_is_watching+0x15/0xb0 [ 1047.476049][ T30] ? lock_release+0x4b/0x3c0 [ 1047.480679][ T30] ? wq_worker_sleeping+0x66/0x250 [ 1047.501421][ T30] schedule+0x164/0x360 [ 1047.505677][ T30] schedule_preempt_disabled+0x13/0x30 [ 1047.513500][ T30] __mutex_lock+0x7bf/0x1550 [ 1047.518247][ T30] ? __mutex_lock+0x5d4/0x1550 [ 1047.524303][ T30] ? addrconf_dad_work+0x116/0x15c0 [ 1047.529563][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1047.534986][ T30] ? rcu_is_watching+0x15/0xb0 [ 1047.539823][ T30] ? trace_hrtimer_start+0x82/0x200 [ 1047.552935][ T30] addrconf_dad_work+0x116/0x15c0 [ 1047.563901][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1047.578505][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1047.578547][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1047.578578][ T30] ? rcu_is_watching+0x15/0xb0 [ 1047.578602][ T30] ? lock_acquire+0x5f/0x350 [ 1047.578623][ T30] ? rcu_is_watching+0x15/0xb0 [ 1047.609520][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 1047.615546][ T30] process_scheduled_works+0xa8e/0x14e0 [ 1047.621145][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1047.627191][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 1047.632875][ T30] ? assign_work+0x3cf/0x5d0 [ 1047.637537][ T30] worker_thread+0xa47/0xfb0 [ 1047.642210][ T30] kthread+0x388/0x470 [ 1047.646301][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1047.651893][ T30] ? __pfx_kthread+0x10/0x10 [ 1047.656516][ T30] ret_from_fork+0x514/0xb70 [ 1047.661112][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1047.666741][ T30] ? __switch_to+0xc89/0x1420 [ 1047.672000][ T30] ? __pfx_kthread+0x10/0x10 [ 1047.676805][ T30] ret_from_fork_asm+0x1a/0x30 [ 1047.681648][ T30] [ 1047.684735][ T30] INFO: task kworker/1:2:808 blocked for more than 143 seconds. [ 1047.692411][ T30] Tainted: G L syzkaller #0 [ 1047.698913][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1047.707614][ T30] task:kworker/1:2 state:D stack:20840 pid:808 tgid:808 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1047.719736][ T30] Workqueue: events netdev_rx_mode_work [ 1047.725378][ T30] Call Trace: [ 1047.728674][ T30] [ 1047.731685][ T30] __schedule+0x17d9/0x56c0 [ 1047.736217][ T30] ? kasan_save_track+0x3e/0x80 [ 1047.741078][ T30] ? kasan_save_free_info+0x40/0x50 [ 1047.746373][ T30] ? __kasan_slab_free+0x5c/0x80 [ 1047.751408][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 1047.756483][ T30] ? __pfx___schedule+0x10/0x10 [ 1047.761432][ T30] ? rcu_is_watching+0x15/0xb0 [ 1047.766226][ T30] ? rcu_is_watching+0x15/0xb0 [ 1047.771004][ T30] ? lock_release+0x4b/0x3c0 [ 1047.775870][ T30] ? rcu_is_watching+0x15/0xb0 [ 1047.780700][ T30] ? schedule+0x90/0x360 [ 1047.785423][ T30] ? trace_irq_enable+0x3b/0x140 [ 1047.790505][ T30] schedule+0x164/0x360 [ 1047.795203][ T30] schedule_preempt_disabled+0x13/0x30 [ 1047.800689][ T30] __mutex_lock+0x7bf/0x1550 [ 1047.805344][ T30] ? __mutex_lock+0x5d4/0x1550 [ 1047.810132][ T30] ? netdev_rx_mode_work+0x18/0x3c0 [ 1047.815452][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1047.820509][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1047.825957][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 1047.831734][ T30] ? rcu_is_watching+0x15/0xb0 [ 1047.836510][ T30] ? lock_acquire+0x5f/0x350 [ 1047.841098][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 1047.846859][ T30] netdev_rx_mode_work+0x18/0x3c0 [ 1047.851927][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 1047.857665][ T30] process_scheduled_works+0xa8e/0x14e0 [ 1047.863260][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1047.869258][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 1047.874415][ T30] ? assign_work+0x3cf/0x5d0 [ 1047.879220][ T30] worker_thread+0xa47/0xfb0 [ 1047.883896][ T30] ? __kthread_parkme+0x71/0x1f0 [ 1047.888869][ T30] kthread+0x388/0x470 [ 1047.893032][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1047.898172][ T30] ? __pfx_kthread+0x10/0x10 [ 1047.902799][ T30] ret_from_fork+0x514/0xb70 [ 1047.907410][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1047.912613][ T30] ? __switch_to+0xc89/0x1420 [ 1047.917345][ T30] ? __pfx_kthread+0x10/0x10 [ 1047.921973][ T30] ret_from_fork_asm+0x1a/0x30 [ 1047.926774][ T30] [ 1047.929837][ T30] INFO: task kworker/u8:8:1162 blocked for more than 143 seconds. [ 1047.937710][ T30] Tainted: G L syzkaller #0 [ 1047.944234][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1047.952927][ T30] task:kworker/u8:8 state:D stack:21568 pid:1162 tgid:1162 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1047.964985][ T30] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 1047.972475][ T30] Call Trace: [ 1047.975750][ T30] [ 1047.978677][ T30] __schedule+0x17d9/0x56c0 [ 1047.983379][ T30] ? arch_stack_walk+0x11b/0x150 [ 1047.988354][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 1047.993368][ T30] ? process_scheduled_works+0xa8e/0x14e0 [ 1047.999135][ T30] ? __pfx___schedule+0x10/0x10 [ 1048.004027][ T30] ? rcu_is_watching+0x15/0xb0 [ 1048.008834][ T30] ? rcu_is_watching+0x15/0xb0 [ 1048.013654][ T30] ? lock_release+0x4b/0x3c0 [ 1048.018278][ T30] ? wq_worker_sleeping+0x66/0x250 [ 1048.023578][ T30] schedule+0x164/0x360 [ 1048.027764][ T30] schedule_preempt_disabled+0x13/0x30 [ 1048.033335][ T30] __mutex_lock+0x7bf/0x1550 [ 1048.037957][ T30] ? __mutex_lock+0x5d4/0x1550 [ 1048.042804][ T30] ? udp_tunnel_nic_device_sync_work+0x29/0xa20 [ 1048.049077][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1048.054161][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 1048.059213][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1048.064647][ T30] ? rcu_is_watching+0x15/0xb0 [ 1048.069439][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 1048.075224][ T30] ? rcu_is_watching+0x15/0xb0 [ 1048.080022][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 1048.085996][ T30] udp_tunnel_nic_device_sync_work+0x29/0xa20 [ 1048.092169][ T30] ? rcu_is_watching+0x15/0xb0 [ 1048.096963][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 1048.102736][ T30] process_scheduled_works+0xa8e/0x14e0 [ 1048.103066][ T249] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1048.108329][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1048.128726][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 1048.134166][ T30] ? assign_work+0x3cf/0x5d0 [ 1048.138820][ T30] worker_thread+0xa47/0xfb0 [ 1048.143463][ T30] kthread+0x388/0x470 [ 1048.147548][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1048.152716][ T30] ? __pfx_kthread+0x10/0x10 [ 1048.157337][ T30] ret_from_fork+0x514/0xb70 [ 1048.161973][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1048.167112][ T30] ? __switch_to+0xc89/0x1420 [ 1048.171841][ T30] ? __pfx_kthread+0x10/0x10 [ 1048.176471][ T30] ret_from_fork_asm+0x1a/0x30 [ 1048.181307][ T30] [ 1048.184429][ T30] INFO: task kworker/1:3:5675 blocked for more than 144 seconds. [ 1048.195663][ T30] Tainted: G L syzkaller #0 [ 1048.202218][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1048.210900][ T30] task:kworker/1:3 state:D stack:21416 pid:5675 tgid:5675 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1048.222971][ T30] Workqueue: usb_hub_wq hub_event [ 1048.228143][ T30] Call Trace: [ 1048.231495][ T30] [ 1048.234443][ T30] __schedule+0x17d9/0x56c0 [ 1048.238946][ T30] ? kobject_uevent_env+0x375/0x9e0 [ 1048.244243][ T30] ? rcu_is_watching+0x15/0xb0 [ 1048.249074][ T30] ? really_probe+0x254/0xae0 [ 1048.253912][ T30] ? find_inode_fast+0xd2/0x740 [ 1048.258794][ T30] ? rcu_is_watching+0x15/0xb0 [ 1048.263628][ T30] ? __pfx___schedule+0x10/0x10 [ 1048.268503][ T30] ? schedule+0x90/0x360 [ 1048.272876][ T30] ? rcu_is_watching+0x15/0xb0 [ 1048.277699][ T30] ? lock_release+0x4b/0x3c0 [ 1048.282335][ T30] ? schedule+0x90/0x360 [ 1048.286610][ T30] ? wq_worker_sleeping+0x66/0x250 [ 1048.291955][ T30] schedule+0x164/0x360 [ 1048.296168][ T30] schedule_timeout+0xc0/0x2c0 [ 1048.300974][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1048.306450][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 1048.311547][ T30] ? rcu_is_watching+0x15/0xb0 [ 1048.316331][ T30] ? rcu_is_watching+0x15/0xb0 [ 1048.321097][ T30] ? trace_irq_enable+0x3b/0x140 [ 1048.326126][ T30] ? wait_for_completion+0x272/0x5e0 [ 1048.331453][ T30] wait_for_completion+0x2ca/0x5e0 [ 1048.336572][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 1048.342254][ T30] ? kobject_put+0x50f/0x550 [ 1048.346950][ T30] i2c_del_adapter+0x281/0x430 [ 1048.351844][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1048.357145][ T30] ? dvb_usbv2_exit+0x94d/0xb80 [ 1048.362139][ T30] dvb_usbv2_probe+0x4bb/0x3950 [ 1048.367047][ T30] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 1048.372391][ T30] ? __pm_runtime_set_status+0x994/0xc80 [ 1048.378152][ T30] usb_probe_interface+0x653/0xc60 [ 1048.383378][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 1048.389037][ T30] really_probe+0x254/0xae0 [ 1048.393782][ T30] __driver_probe_device+0x1e8/0x360 [ 1048.399230][ T30] driver_probe_device+0x4f/0x240 [ 1048.404327][ T30] __device_attach_driver+0x270/0x410 [ 1048.409729][ T30] bus_for_each_drv+0x258/0x2f0 [ 1048.414662][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 1048.420579][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1048.426048][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1048.431927][ T30] __device_attach+0x2c4/0x450 [ 1048.436742][ T30] ? __pfx___device_attach+0x10/0x10 [ 1048.442077][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 1048.447218][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1048.452140][ T30] device_initial_probe+0xa1/0xd0 [ 1048.457197][ T30] bus_probe_device+0x12a/0x220 [ 1048.462108][ T30] device_add+0x7d7/0xb80 [ 1048.466466][ T30] usb_set_configuration+0x1ad8/0x2180 [ 1048.471997][ T30] usb_generic_driver_probe+0x8d/0x150 [ 1048.477549][ T30] usb_probe_device+0x1c3/0x3b0 [ 1048.482448][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 1048.487857][ T30] really_probe+0x254/0xae0 [ 1048.492663][ T30] __driver_probe_device+0x1e8/0x360 [ 1048.498017][ T30] driver_probe_device+0x4f/0x240 [ 1048.503133][ T30] __device_attach_driver+0x270/0x410 [ 1048.508526][ T30] bus_for_each_drv+0x258/0x2f0 [ 1048.517610][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 1048.523595][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1048.529002][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1048.534879][ T30] __device_attach+0x2c4/0x450 [ 1048.539675][ T30] ? rcu_is_watching+0x15/0xb0 [ 1048.544478][ T30] ? __pfx___device_attach+0x10/0x10 [ 1048.549793][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 1048.554974][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1048.559851][ T30] device_initial_probe+0xa1/0xd0 [ 1048.564929][ T30] bus_probe_device+0x12a/0x220 [ 1048.569828][ T30] device_add+0x7d7/0xb80 [ 1048.574227][ T30] usb_new_device+0x99d/0x1620 [ 1048.579100][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1048.585145][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 1048.590385][ T30] ? rcu_is_watching+0x15/0xb0 [ 1048.595488][ T30] ? trace_irq_enable+0x3b/0x140 [ 1048.600623][ T30] hub_event+0x28e8/0x4d30 [ 1048.605142][ T30] ? __pfx_hub_event+0x10/0x10 [ 1048.609969][ T30] ? rcu_is_watching+0x15/0xb0 [ 1048.614836][ T30] ? lock_acquire+0x5f/0x350 [ 1048.619487][ T30] ? rcu_is_watching+0x15/0xb0 [ 1048.624320][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 1048.630070][ T30] process_scheduled_works+0xa8e/0x14e0 [ 1048.631476][ T249] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1048.635782][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1048.656052][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 1048.661138][ T30] ? assign_work+0x3cf/0x5d0 [ 1048.665810][ T30] worker_thread+0xa47/0xfb0 [ 1048.670436][ T30] kthread+0x388/0x470 [ 1048.674646][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1048.679803][ T30] ? __pfx_kthread+0x10/0x10 [ 1048.684442][ T30] ret_from_fork+0x514/0xb70 [ 1048.689068][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1048.694240][ T30] ? __switch_to+0xc89/0x1420 [ 1048.699164][ T30] ? __pfx_kthread+0x10/0x10 [ 1048.703819][ T30] ret_from_fork_asm+0x1a/0x30 [ 1048.708610][ T30] [ 1048.711678][ T30] INFO: task kworker/u8:2:9803 blocked for more than 144 seconds. [ 1048.719497][ T30] Tainted: G L syzkaller #0 [ 1048.726036][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1048.734772][ T30] task:kworker/u8:2 state:D stack:21656 pid:9803 tgid:9803 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1048.746867][ T30] Workqueue: events_unbound linkwatch_event [ 1048.752904][ T30] Call Trace: [ 1048.756203][ T30] [ 1048.759149][ T30] __schedule+0x17d9/0x56c0 [ 1048.763709][ T30] ? __pfx___schedule+0x10/0x10 [ 1048.768583][ T30] ? rcu_is_watching+0x15/0xb0 [ 1048.773419][ T30] ? rcu_is_watching+0x15/0xb0 [ 1048.778211][ T30] ? lock_release+0x4b/0x3c0 [ 1048.782847][ T30] ? wq_worker_sleeping+0x66/0x250 [ 1048.788115][ T30] schedule+0x164/0x360 [ 1048.792346][ T30] schedule_preempt_disabled+0x13/0x30 [ 1048.797830][ T30] __mutex_lock+0x7bf/0x1550 [ 1048.802694][ T30] ? __mutex_lock+0x5d4/0x1550 [ 1048.807501][ T30] ? linkwatch_event+0xe/0x60 [ 1048.812224][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1048.817271][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 1048.823039][ T30] ? rcu_is_watching+0x15/0xb0 [ 1048.827823][ T30] ? rcu_is_watching+0x15/0xb0 [ 1048.832669][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 1048.838444][ T30] linkwatch_event+0xe/0x60 [ 1048.842981][ T30] process_scheduled_works+0xa8e/0x14e0 [ 1048.848558][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1048.854596][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 1048.859640][ T30] ? assign_work+0x3cf/0x5d0 [ 1048.864288][ T30] worker_thread+0xa47/0xfb0 [ 1048.868928][ T30] ? __kthread_parkme+0x71/0x1f0 [ 1048.873921][ T30] kthread+0x388/0x470 [ 1048.878011][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1048.883181][ T30] ? __pfx_kthread+0x10/0x10 [ 1048.887787][ T30] ret_from_fork+0x514/0xb70 [ 1048.892414][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1048.897542][ T30] ? load_gs_index+0x97/0xc0 [ 1048.902359][ T30] ? __switch_to+0xc89/0x1420 [ 1048.907080][ T30] ? __pfx_kthread+0x10/0x10 [ 1048.911826][ T30] ret_from_fork_asm+0x1a/0x30 [ 1048.916630][ T30] [ 1048.919711][ T30] INFO: task syz.4.3989:18274 blocked for more than 144 seconds. [ 1048.927629][ T30] Tainted: G L syzkaller #0 [ 1048.934203][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1048.942928][ T30] task:syz.4.3989 state:D stack:21720 pid:18274 tgid:18268 ppid:12195 task_flags:0x400140 flags:0x08080002 [ 1048.954901][ T30] Call Trace: [ 1048.958203][ T30] [ 1048.961133][ T30] __schedule+0x17d9/0x56c0 [ 1048.965721][ T30] ? do_fast_syscall_32+0x33/0x70 [ 1048.970771][ T30] ? __pfx___schedule+0x10/0x10 [ 1048.975673][ T30] ? rcu_is_watching+0x15/0xb0 [ 1048.980463][ T30] ? rcu_is_watching+0x15/0xb0 [ 1048.985308][ T30] ? lock_release+0x4b/0x3c0 [ 1048.989933][ T30] ? rcu_is_watching+0x15/0xb0 [ 1048.994777][ T30] schedule+0x164/0x360 [ 1048.998967][ T30] schedule_preempt_disabled+0x13/0x30 [ 1049.004678][ T30] __mutex_lock+0x7bf/0x1550 [ 1049.009317][ T30] ? __mutex_lock+0x5d4/0x1550 [ 1049.014199][ T30] ? __ethtool_get_link_ksettings+0x109/0x250 [ 1049.020384][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1049.025486][ T30] ? igmp_group_added+0x238/0x910 [ 1049.030541][ T30] ? igmpv3_del_delrec+0x204/0x710 [ 1049.035732][ T30] __ethtool_get_link_ksettings+0x109/0x250 [ 1049.041696][ T30] bond_netdev_event+0x643/0xf80 [ 1049.046754][ T30] ? __pfx_bond_netdev_event+0x10/0x10 [ 1049.052270][ T30] ? __pfx_inetdev_event+0x10/0x10 [ 1049.057403][ T30] ? ipmr_device_event+0x1f6/0x220 [ 1049.062587][ T30] notifier_call_chain+0x1a5/0x3d0 [ 1049.067740][ T30] __dev_notify_flags+0x1aa/0x310 [ 1049.072910][ T30] ? __pfx___dev_notify_flags+0x10/0x10 [ 1049.078481][ T30] ? __dev_change_flags+0x5f1/0x820 [ 1049.083868][ T30] ? __pfx___dev_change_flags+0x10/0x10 [ 1049.089448][ T30] ? __kmalloc_cache_noprof+0x318/0x660 [ 1049.095066][ T30] netif_change_flags+0xde/0x1b0 [ 1049.100039][ T30] dev_change_flags+0x128/0x260 [ 1049.104962][ T30] vlan_device_event+0x1b4e/0x1f00 [ 1049.110385][ T30] ? packet_notifier+0xf1b/0xf70 [ 1049.115498][ T30] ? br_device_event+0x282/0x9c0 [ 1049.120568][ T30] ? __pfx_phonet_device_notify+0x10/0x10 [ 1049.126393][ T30] ? __pfx_vlan_device_event+0x10/0x10 [ 1049.131904][ T30] ? bcm_notifier+0xa9/0x890 [ 1049.136570][ T30] ? raw_notifier+0x9d/0x7d0 [ 1049.141158][ T30] ? cgw_notifier+0x314/0x380 [ 1049.145947][ T30] notifier_call_chain+0x1a5/0x3d0 [ 1049.151069][ T30] __dev_notify_flags+0x1aa/0x310 [ 1049.156166][ T30] ? __pfx___dev_notify_flags+0x10/0x10 [ 1049.161552][ T249] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1049.161978][ T30] ? __dev_change_flags+0x5f1/0x820 [ 1049.181283][ T30] ? __pfx___dev_change_flags+0x10/0x10 [ 1049.186880][ T30] ? do_setlink+0x3c9f/0x4670 [ 1049.191630][ T30] netif_change_flags+0xde/0x1b0 [ 1049.196612][ T30] do_setlink+0xdd6/0x4670 [ 1049.201047][ T30] ? __pfx_do_setlink+0x10/0x10 [ 1049.205952][ T30] ? stack_trace_save+0xa9/0x100 [ 1049.211138][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1049.216604][ T30] ? __mutex_trylock_common+0x15f/0x270 [ 1049.222217][ T30] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1049.228154][ T30] ? rcu_is_watching+0x15/0xb0 [ 1049.232984][ T30] ? trace_contention_end+0x3d/0x140 [ 1049.238308][ T30] ? __mutex_lock+0x30d/0x1550 [ 1049.243133][ T30] ? rtnl_newlink+0x8a3/0x1bd0 [ 1049.247926][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1049.253009][ T30] ? ns_capable+0x89/0xe0 [ 1049.257371][ T30] ? rtnl_link_get_net_capable+0xd3/0x310 [ 1049.263162][ T30] rtnl_newlink+0x148e/0x1bd0 [ 1049.267899][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 1049.272971][ T30] ? unwind_next_frame+0x8f/0x2550 [ 1049.278111][ T30] ? rcu_is_watching+0x15/0xb0 [ 1049.282929][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 1049.288141][ T30] ? rcu_is_watching+0x15/0xb0 [ 1049.292979][ T30] ? unwind_next_frame+0x8f/0x2550 [ 1049.298147][ T30] ? rcu_is_watching+0x15/0xb0 [ 1049.302966][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 1049.308187][ T30] ? rcu_is_watching+0x15/0xb0 [ 1049.315126][ T30] ? rcu_is_watching+0x15/0xb0 [ 1049.319947][ T30] ? lock_release+0x4b/0x3c0 [ 1049.324714][ T30] ? lock_release+0x4b/0x3c0 [ 1049.329356][ T30] ? is_bpf_text_address+0x292/0x2b0 [ 1049.334697][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 1049.339942][ T30] ? kernel_text_address+0xa5/0xe0 [ 1049.345125][ T30] ? __kernel_text_address+0xd/0x30 [ 1049.350343][ T30] ? unwind_get_return_address+0x4d/0x90 [ 1049.356058][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1049.362298][ T30] ? arch_stack_walk+0xfb/0x150 [ 1049.367196][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1049.372365][ T30] ? rcu_is_watching+0x15/0xb0 [ 1049.377158][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 1049.382247][ T30] ? rcu_is_watching+0x15/0xb0 [ 1049.387037][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 1049.392113][ T30] ? lock_release+0x4b/0x3c0 [ 1049.396719][ T30] ? bpf_lsm_capable+0x9/0x20 [ 1049.401455][ T30] ? security_capable+0x7e/0x2c0 [ 1049.406500][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 1049.411563][ T30] rtnetlink_rcv_msg+0x802/0xc00 [ 1049.416692][ T30] ? kasan_save_track+0x3e/0x80 [ 1049.421631][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1049.426772][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1049.432290][ T30] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1049.438823][ T30] ? __netlink_lookup+0xc6/0x8b0 [ 1049.443832][ T30] ? rcu_is_watching+0x15/0xb0 [ 1049.448621][ T30] netlink_rcv_skb+0x226/0x4a0 [ 1049.453451][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1049.458948][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1049.464314][ T30] ? net_generic+0x1e/0x240 [ 1049.468847][ T30] ? net_generic+0x1e/0x240 [ 1049.473573][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1049.478795][ T30] netlink_unicast+0x7bb/0x940 [ 1049.483603][ T30] netlink_sendmsg+0x813/0xb40 [ 1049.488408][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1049.493784][ T30] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1049.500235][ T30] ? __import_iovec+0x5d7/0x7e0 [ 1049.505179][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1049.510495][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 1049.515576][ T30] ____sys_sendmsg+0x54e/0x850 [ 1049.520583][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1049.526032][ T30] ? __pfx_futex_wake_mark+0x10/0x10 [ 1049.531400][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1049.536102][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1049.541360][ T30] ? futex_wait+0x2a2/0x390 [ 1049.545909][ T30] ? __fget_files+0x2a/0x420 [ 1049.550696][ T30] ? __fget_files+0x3a2/0x420 [ 1049.557948][ T30] __sys_sendmsg+0x177/0x240 [ 1049.562635][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 1049.567773][ T30] ? rcu_is_watching+0x15/0xb0 [ 1049.572594][ T30] __do_fast_syscall_32+0x23e/0x6f0 [ 1049.577817][ T30] ? do_fast_syscall_32+0x33/0x70 [ 1049.582909][ T30] ? irqentry_exit+0x10f/0x8f0 [ 1049.587717][ T30] ? trace_irq_disable+0x3b/0x140 [ 1049.592799][ T30] do_fast_syscall_32+0x33/0x70 [ 1049.597671][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1049.604043][ T30] RIP: 0023:0xf7f960ec [ 1049.608133][ T30] RSP: 002b:00000000f543550c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1049.616611][ T30] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000200 [ 1049.624844][ T30] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1049.633191][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1049.641286][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1049.649370][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1049.657396][ T30] [ 1049.660450][ T30] INFO: task syz.3.3991:18296 blocked for more than 145 seconds. [ 1049.668610][ T30] Tainted: G L syzkaller #0 [ 1049.675197][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1049.681649][T18311] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1049.683974][ T30] task:syz.3.3991 state:D stack:28696 pid:18296 tgid:18294 ppid:16390 task_flags:0x400040 flags:0x08080002 [ 1049.710204][ T30] Call Trace: [ 1049.713547][ T30] [ 1049.716490][ T30] __schedule+0x17d9/0x56c0 [ 1049.721013][ T30] ? __pfx___schedule+0x10/0x10 [ 1049.726103][ T30] ? rcu_is_watching+0x15/0xb0 [ 1049.730899][ T30] ? rcu_is_watching+0x15/0xb0 [ 1049.735723][ T30] ? lock_release+0x4b/0x3c0 [ 1049.740337][ T30] ? rcu_is_watching+0x15/0xb0 [ 1049.745154][ T30] schedule+0x164/0x360 [ 1049.749332][ T30] schedule_preempt_disabled+0x13/0x30 [ 1049.754847][ T30] __mutex_lock+0x7bf/0x1550 [ 1049.759480][ T30] ? __mutex_lock+0x5d4/0x1550 [ 1049.764492][ T30] ? __tun_chr_ioctl+0x3bc/0x1e10 [ 1049.769547][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1049.774618][ T30] ? lock_release+0x4b/0x3c0 [ 1049.779240][ T30] ? __might_fault+0xaf/0x130 [ 1049.783957][ T30] ? __might_fault+0xcb/0x130 [ 1049.788782][ T30] __tun_chr_ioctl+0x3bc/0x1e10 [ 1049.793680][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1049.798985][ T30] ? __fget_files+0x3a2/0x420 [ 1049.803735][ T30] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1049.809308][ T30] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1049.814837][ T30] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1049.820854][ T30] ? __se_sys_futex_time32+0x3ab/0x440 [ 1049.826551][ T30] ? rcu_is_watching+0x15/0xb0 [ 1049.831383][ T30] ? rcu_is_watching+0x15/0xb0 [ 1049.836167][ T30] __do_fast_syscall_32+0x23e/0x6f0 [ 1049.841424][ T30] ? do_fast_syscall_32+0x33/0x70 [ 1049.846489][ T30] ? asm_int80_emulation+0x1a/0x20 [ 1049.851634][ T30] ? do_int80_emulation+0x29f/0x550 [ 1049.856880][ T30] ? trace_irq_disable+0x3b/0x140 [ 1049.861947][ T30] do_fast_syscall_32+0x33/0x70 [ 1049.866829][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1049.873298][ T30] RIP: 0023:0xf708f0ec [ 1049.877412][ T30] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1049.885901][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000400454ca [ 1049.893931][ T30] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1049.901957][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1049.909954][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1049.917965][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1049.926229][ T30] [ 1049.929289][ T30] INFO: task syz.1.3992:18297 blocked for more than 145 seconds. [ 1049.937149][ T30] Tainted: G L syzkaller #0 [ 1049.943689][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1049.952459][ T30] task:syz.1.3992 state:D stack:28088 pid:18297 tgid:18295 ppid:15751 task_flags:0x400140 flags:0x08080002 [ 1049.964446][ T30] Call Trace: [ 1049.967721][ T30] [ 1049.970648][ T30] __schedule+0x17d9/0x56c0 [ 1049.975210][ T30] ? __pfx___schedule+0x10/0x10 [ 1049.980084][ T30] ? rcu_is_watching+0x15/0xb0 [ 1049.984910][ T30] ? rcu_is_watching+0x15/0xb0 [ 1049.989696][ T30] ? lock_release+0x4b/0x3c0 [ 1049.994354][ T30] ? rcu_is_watching+0x15/0xb0 [ 1049.999159][ T30] schedule+0x164/0x360 [ 1050.003383][ T30] schedule_preempt_disabled+0x13/0x30 [ 1050.008871][ T30] __mutex_lock+0x7bf/0x1550 [ 1050.013532][ T30] ? __mutex_lock+0x5d4/0x1550 [ 1050.018313][ T30] ? __tun_chr_ioctl+0x3bc/0x1e10 [ 1050.023368][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1050.028625][ T30] ? lock_release+0x4b/0x3c0 [ 1050.033268][ T30] ? __might_fault+0xaf/0x130 [ 1050.037963][ T30] ? __might_fault+0xcb/0x130 [ 1050.042680][ T30] __tun_chr_ioctl+0x3bc/0x1e10 [ 1050.047573][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1050.052917][ T30] ? __fget_files+0x3a2/0x420 [ 1050.057627][ T30] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1050.063237][ T30] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1050.068732][ T30] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1050.074767][ T30] ? __se_sys_futex_time32+0x3ab/0x440 [ 1050.080261][ T30] ? rcu_is_watching+0x15/0xb0 [ 1050.085084][ T30] ? rcu_is_watching+0x15/0xb0 [ 1050.089917][ T30] __do_fast_syscall_32+0x23e/0x6f0 [ 1050.095170][ T30] ? do_fast_syscall_32+0x33/0x70 [ 1050.100227][ T30] ? asm_int80_emulation+0x1a/0x20 [ 1050.105407][ T30] ? do_int80_emulation+0x29f/0x550 [ 1050.110630][ T30] ? trace_irq_disable+0x3b/0x140 [ 1050.115852][ T30] do_fast_syscall_32+0x33/0x70 [ 1050.120753][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1050.127131][ T30] RIP: 0023:0xf7f190ec [ 1050.131478][ T30] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1050.139929][ T30] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000400454ca [ 1050.147975][ T30] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1050.156003][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1050.164182][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1050.172384][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1050.180399][ T30] [ 1050.183538][ T30] INFO: task syz.1.3992:18298 blocked for more than 146 seconds. [ 1050.192014][ T30] Tainted: G L syzkaller #0 [ 1050.198559][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1050.201658][ T249] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1050.207294][ T30] task:syz.1.3992 state:D stack:27416 pid:18298 tgid:18295 ppid:15751 task_flags:0x400040 flags:0x08080002 [ 1050.233770][ T30] Call Trace: [ 1050.237087][ T30] [ 1050.240019][ T30] __schedule+0x17d9/0x56c0 [ 1050.244584][ T30] ? __resched_curr+0x23e/0x530 [ 1050.249466][ T30] ? __pfx___resched_curr+0x10/0x10 [ 1050.254743][ T30] ? __pfx___schedule+0x10/0x10 [ 1050.259620][ T30] ? rcu_is_watching+0x15/0xb0 [ 1050.264439][ T30] ? rcu_is_watching+0x15/0xb0 [ 1050.269219][ T30] ? lock_release+0x4b/0x3c0 [ 1050.273873][ T30] ? rcu_is_watching+0x15/0xb0 [ 1050.278668][ T30] schedule+0x164/0x360 [ 1050.282875][ T30] schedule_preempt_disabled+0x13/0x30 [ 1050.288361][ T30] __mutex_lock+0x7bf/0x1550 [ 1050.293015][ T30] ? __mutex_lock+0x5d4/0x1550 [ 1050.297800][ T30] ? tun_chr_close+0x3e/0x1c0 [ 1050.302534][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1050.307587][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 1050.312743][ T30] tun_chr_close+0x3e/0x1c0 [ 1050.317256][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 1050.322398][ T30] __fput+0x418/0xa50 [ 1050.326400][ T30] fput_close_sync+0x11f/0x240 [ 1050.331162][ T30] ? __pfx_fput_close_sync+0x10/0x10 [ 1050.336716][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 1050.341913][ T30] __ia32_sys_close+0x7e/0x110 [ 1050.346794][ T30] __do_fast_syscall_32+0x23e/0x6f0 [ 1050.352043][ T30] ? do_fast_syscall_32+0x33/0x70 [ 1050.357084][ T30] ? irqentry_exit+0x10f/0x8f0 [ 1050.361891][ T30] ? trace_irq_disable+0x3b/0x140 [ 1050.366959][ T30] do_fast_syscall_32+0x33/0x70 [ 1050.371859][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1050.378206][ T30] RIP: 0023:0xf7f190ec [ 1050.382338][ T30] RSP: 002b:00000000f53b550c EFLAGS: 00000206 ORIG_RAX: 0000000000000006 [ 1050.390775][ T30] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000000 [ 1050.398790][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1050.406805][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1050.414840][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1050.423403][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1050.431435][ T30] [ 1050.434483][ T30] INFO: task syz.1.3992:18300 blocked for more than 146 seconds. [ 1050.442450][ T30] Tainted: G L syzkaller #0 [ 1050.448968][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1050.457760][ T30] task:syz.1.3992 state:D stack:26152 pid:18300 tgid:18295 ppid:15751 task_flags:0x400140 flags:0x08080002 [ 1050.469770][ T30] Call Trace: [ 1050.473094][ T30] [ 1050.476038][ T30] __schedule+0x17d9/0x56c0 [ 1050.480543][ T30] ? stack_trace_save+0xa9/0x100 [ 1050.485541][ T30] ? __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 1050.492167][ T30] ? genl_rcv_msg+0x614/0x7a0 [ 1050.496846][ T30] ? netlink_rcv_skb+0x226/0x4a0 [ 1050.501832][ T30] ? __pfx___schedule+0x10/0x10 [ 1050.506727][ T30] ? rcu_is_watching+0x15/0xb0 [ 1050.511559][ T30] ? rcu_is_watching+0x15/0xb0 [ 1050.516367][ T30] ? lock_release+0x4b/0x3c0 [ 1050.520959][ T30] ? rcu_is_watching+0x15/0xb0 [ 1050.525778][ T30] schedule+0x164/0x360 [ 1050.529951][ T30] schedule_preempt_disabled+0x13/0x30 [ 1050.535463][ T30] __mutex_lock+0x7bf/0x1550 [ 1050.540091][ T30] ? __mutex_lock+0x5d4/0x1550 [ 1050.545100][ T30] ? tipc_nl_compat_doit+0x22a/0x650 [ 1050.550523][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1050.555616][ T30] tipc_nl_compat_doit+0x22a/0x650 [ 1050.560760][ T30] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 1050.566453][ T30] ? bpf_lsm_capable+0x9/0x20 [ 1050.571149][ T30] ? security_capable+0x7e/0x2c0 [ 1050.576182][ T30] tipc_nl_compat_recv+0x8d3/0xcf0 [ 1050.581347][ T30] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 1050.586999][ T30] ? __mutex_trylock_common+0x15f/0x270 [ 1050.595281][ T30] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 1050.601457][ T30] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 1050.607890][ T30] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1050.613851][ T30] ? trace_contention_end+0x3d/0x140 [ 1050.619163][ T30] ? genl_family_rcv_msg_attrs_parse+0xe9/0x2f0 [ 1050.625451][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 1050.631023][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1050.637196][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 1050.642449][ T30] genl_rcv_msg+0x614/0x7a0 [ 1050.647179][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1050.652301][ T30] ? ref_tracker_free+0x689/0x830 [ 1050.657383][ T30] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 1050.663078][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 1050.668474][ T30] netlink_rcv_skb+0x226/0x4a0 [ 1050.673495][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1050.678562][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1050.683898][ T30] ? down_read+0x2be/0x330 [ 1050.688336][ T30] genl_rcv+0x28/0x40 [ 1050.692417][ T30] netlink_unicast+0x7bb/0x940 [ 1050.697229][ T30] netlink_sendmsg+0x813/0xb40 [ 1050.702058][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1050.707376][ T30] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1050.713830][ T30] ? __import_iovec+0x5d7/0x7e0 [ 1050.718699][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1050.724033][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 1050.729073][ T30] ____sys_sendmsg+0x54e/0x850 [ 1050.731567][ T249] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1050.733914][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1050.753854][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 1050.759272][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1050.763993][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1050.769207][ T30] ? futex_private_hash_put+0x14e/0x180 [ 1050.774879][ T30] ? futex_wake+0x51b/0x5f0 [ 1050.779464][ T30] ? __fget_files+0x2a/0x420 [ 1050.784515][ T30] ? __fget_files+0x3a2/0x420 [ 1050.789346][ T30] __sys_sendmsg+0x177/0x240 [ 1050.794023][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 1050.799171][ T30] ? rcu_is_watching+0x15/0xb0 [ 1050.804163][ T30] __do_fast_syscall_32+0x23e/0x6f0 [ 1050.809395][ T30] ? do_fast_syscall_32+0x33/0x70 [ 1050.814515][ T30] ? asm_int80_emulation+0x1a/0x20 [ 1050.819666][ T30] ? do_int80_emulation+0x29f/0x550 [ 1050.824905][ T30] ? trace_irq_disable+0x3b/0x140 [ 1050.829960][ T30] do_fast_syscall_32+0x33/0x70 [ 1050.835323][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1050.841718][ T30] RIP: 0023:0xf7f190ec [ 1050.845797][ T30] RSP: 002b:00000000f539450c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1050.854500][ T30] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800002c0 [ 1050.862565][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1050.870558][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1050.878618][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1050.886632][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1050.894739][ T30] [ 1050.897811][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1050.906924][ T30] INFO: task syz.1.3992:18301 blocked for more than 146 seconds. [ 1050.915028][ T30] Tainted: G L syzkaller #0 [ 1050.921586][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1050.930269][ T30] task:syz.1.3992 state:D stack:29144 pid:18301 tgid:18295 ppid:15751 task_flags:0x400140 flags:0x08080002 [ 1050.942337][ T30] Call Trace: [ 1050.945655][ T30] [ 1050.948595][ T30] __schedule+0x17d9/0x56c0 [ 1050.953360][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1050.958791][ T30] ? tomoyo_condition+0x220/0x3320 [ 1050.964009][ T30] ? kasan_save_track+0x4f/0x80 [ 1050.968898][ T30] ? kasan_save_track+0x3e/0x80 [ 1050.973785][ T30] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 1050.979441][ T30] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1050.986046][ T30] ? __pfx___schedule+0x10/0x10 [ 1050.990939][ T30] ? rcu_is_watching+0x15/0xb0 [ 1050.995792][ T30] ? rcu_is_watching+0x15/0xb0 [ 1051.000597][ T30] ? lock_release+0x4b/0x3c0 [ 1051.005325][ T30] ? rcu_is_watching+0x15/0xb0 [ 1051.010162][ T30] schedule+0x164/0x360 [ 1051.014368][ T30] schedule_preempt_disabled+0x13/0x30 [ 1051.019842][ T30] __mutex_lock+0x7bf/0x1550 [ 1051.024595][ T30] ? __mutex_lock+0x5d4/0x1550 [ 1051.029405][ T30] ? dev_ioctl+0x7a4/0x1150 [ 1051.034045][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1051.039097][ T30] ? security_capable+0xb9/0x2c0 [ 1051.044123][ T30] ? dev_load+0x21/0x1f0 [ 1051.048412][ T30] dev_ioctl+0x7a4/0x1150 [ 1051.052989][ T30] sock_do_ioctl+0x23e/0x320 [ 1051.057605][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1051.062804][ T30] ? rcu_is_watching+0x15/0xb0 [ 1051.067605][ T30] compat_sock_ioctl+0xbb9/0xcc0 [ 1051.072592][ T30] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1051.078071][ T30] ? __fget_files+0x3a2/0x420 [ 1051.082830][ T30] ? __fget_files+0x2a/0x420 [ 1051.087454][ T30] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1051.093090][ T30] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1051.098590][ T30] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1051.104684][ T30] ? rcu_is_watching+0x15/0xb0 [ 1051.109506][ T30] ? trace_irq_enable+0x3b/0x140 [ 1051.114521][ T30] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1051.119772][ T30] ? __ia32_compat_sys_rt_sigprocmask+0x2c6/0x340 [ 1051.126271][ T30] ? __pfx___ia32_compat_sys_rt_sigprocmask+0x10/0x10 [ 1051.133081][ T30] ? lock_release+0x4b/0x3c0 [ 1051.137673][ T30] ? rcu_is_watching+0x15/0xb0 [ 1051.142528][ T30] ? rcu_is_watching+0x15/0xb0 [ 1051.147337][ T30] __do_fast_syscall_32+0x23e/0x6f0 [ 1051.152629][ T30] ? do_fast_syscall_32+0x33/0x70 [ 1051.157907][ T30] ? irqentry_exit+0x10f/0x8f0 [ 1051.162777][ T30] ? trace_irq_disable+0x3b/0x140 [ 1051.167853][ T30] do_fast_syscall_32+0x33/0x70 [ 1051.172782][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1051.179148][ T30] RIP: 0023:0xf7f190ec [ 1051.183290][ T30] RSP: 002b:00000000f4f7150c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1051.191763][ T30] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000008914 [ 1051.199770][ T30] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 1051.207868][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1051.215894][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1051.223943][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1051.231972][ T30] [ 1051.235021][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1051.244133][ T30] INFO: task syz.1.3992:18302 blocked for more than 147 seconds. [ 1051.251942][ T30] Tainted: G L syzkaller #0 [ 1051.258657][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1051.261683][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1051.267447][ T30] task:syz.1.3992 state:D stack:27504 pid:18302 tgid:18295 ppid:15751 task_flags:0x400140 flags:0x08080002 [ 1051.293643][ T30] Call Trace: [ 1051.296969][ T30] [ 1051.299931][ T30] __schedule+0x17d9/0x56c0 [ 1051.304499][ T30] ? trace_irq_enable+0x3b/0x140 [ 1051.309471][ T30] ? __pfx___schedule+0x10/0x10 [ 1051.314435][ T30] ? rcu_is_watching+0x15/0xb0 [ 1051.319235][ T30] ? rcu_is_watching+0x15/0xb0 [ 1051.324054][ T30] ? lock_release+0x4b/0x3c0 [ 1051.328657][ T30] ? rcu_is_watching+0x15/0xb0 [ 1051.333507][ T30] schedule+0x164/0x360 [ 1051.337699][ T30] schedule_preempt_disabled+0x13/0x30 [ 1051.343199][ T30] __mutex_lock+0x7bf/0x1550 [ 1051.347823][ T30] ? __mutex_lock+0x5d4/0x1550 [ 1051.352674][ T30] ? rtnetlink_rcv_msg+0x767/0xc00 [ 1051.357823][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1051.363089][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1051.368240][ T30] ? rcu_is_watching+0x15/0xb0 [ 1051.373126][ T30] ? lock_release+0x4b/0x3c0 [ 1051.377783][ T30] ? bpf_lsm_capable+0x9/0x20 [ 1051.382517][ T30] ? security_capable+0x7e/0x2c0 [ 1051.387480][ T30] rtnetlink_rcv_msg+0x767/0xc00 [ 1051.392510][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1051.397664][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1051.403172][ T30] ? ref_tracker_free+0x689/0x830 [ 1051.408217][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 1051.413677][ T30] netlink_rcv_skb+0x226/0x4a0 [ 1051.418493][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1051.424110][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1051.429443][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1051.434794][ T30] netlink_unicast+0x7bb/0x940 [ 1051.439639][ T30] netlink_sendmsg+0x813/0xb40 [ 1051.444472][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1051.449779][ T30] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1051.456279][ T30] ? __import_iovec+0x5d7/0x7e0 [ 1051.461216][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1051.466698][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 1051.471844][ T30] ____sys_sendmsg+0x54e/0x850 [ 1051.476663][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1051.481988][ T30] ? __pfx_futex_wake_mark+0x10/0x10 [ 1051.487295][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1051.492057][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1051.497289][ T30] ? futex_wait+0x2a2/0x390 [ 1051.501873][ T30] ? __fget_files+0x2a/0x420 [ 1051.506498][ T30] ? __fget_files+0x3a2/0x420 [ 1051.511231][ T30] __sys_sendmsg+0x177/0x240 [ 1051.515884][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 1051.520999][ T30] ? rcu_is_watching+0x15/0xb0 [ 1051.525858][ T30] __do_fast_syscall_32+0x23e/0x6f0 [ 1051.531106][ T30] ? do_fast_syscall_32+0x33/0x70 [ 1051.536188][ T30] ? irqentry_exit+0x10f/0x8f0 [ 1051.540969][ T30] ? trace_irq_disable+0x3b/0x140 [ 1051.546092][ T30] do_fast_syscall_32+0x33/0x70 [ 1051.550999][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1051.557569][ T30] RIP: 0023:0xf7f190ec [ 1051.561727][ T30] RSP: 002b:00000000f4b4e50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1051.570394][ T30] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800002c0 [ 1051.578457][ T30] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 1051.586484][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1051.594505][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1051.602511][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1051.610486][ T30] [ 1051.613556][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1051.622617][ T30] INFO: task syz.1.3992:18303 blocked for more than 147 seconds. [ 1051.630354][ T30] Tainted: G L syzkaller #0 [ 1051.639366][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1051.648117][ T30] task:syz.1.3992 state:D stack:27504 pid:18303 tgid:18295 ppid:15751 task_flags:0x400140 flags:0x08080002 [ 1051.660095][ T30] Call Trace: [ 1051.663431][ T30] [ 1051.666385][ T30] __schedule+0x17d9/0x56c0 [ 1051.671123][ T30] ? trace_irq_enable+0x3b/0x140 [ 1051.676167][ T30] ? __pfx___schedule+0x10/0x10 [ 1051.681037][ T30] ? rcu_is_watching+0x15/0xb0 [ 1051.685865][ T30] ? rcu_is_watching+0x15/0xb0 [ 1051.690651][ T30] ? lock_release+0x4b/0x3c0 [ 1051.695310][ T30] ? rcu_is_watching+0x15/0xb0 [ 1051.700112][ T30] schedule+0x164/0x360 [ 1051.704352][ T30] schedule_preempt_disabled+0x13/0x30 [ 1051.709838][ T30] __mutex_lock+0x7bf/0x1550 [ 1051.714653][ T30] ? __mutex_lock+0x5d4/0x1550 [ 1051.719569][ T30] ? rtnetlink_rcv_msg+0x767/0xc00 [ 1051.724753][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1051.729813][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1051.734978][ T30] ? rcu_is_watching+0x15/0xb0 [ 1051.739770][ T30] ? lock_release+0x4b/0x3c0 [ 1051.744410][ T30] ? bpf_lsm_capable+0x9/0x20 [ 1051.749122][ T30] ? security_capable+0x7e/0x2c0 [ 1051.754105][ T30] rtnetlink_rcv_msg+0x767/0xc00 [ 1051.759067][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1051.764234][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1051.769943][ T30] ? ref_tracker_free+0x689/0x830 [ 1051.775053][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 1051.780464][ T30] netlink_rcv_skb+0x226/0x4a0 [ 1051.785300][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1051.790955][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1051.796400][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1051.801666][ T30] netlink_unicast+0x7bb/0x940 [ 1051.806442][ T30] netlink_sendmsg+0x813/0xb40 [ 1051.811271][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1051.812101][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1051.816616][ T30] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1051.837350][ T30] ? __import_iovec+0x5d7/0x7e0 [ 1051.842243][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1051.847551][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 1051.852622][ T30] ____sys_sendmsg+0x54e/0x850 [ 1051.857414][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1051.862760][ T30] ? __pfx_futex_wake_mark+0x10/0x10 [ 1051.868080][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1051.873056][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1051.878307][ T30] ? futex_wait+0x2a2/0x390 [ 1051.882891][ T30] ? __fget_files+0x2a/0x420 [ 1051.887502][ T30] ? __fget_files+0x3a2/0x420 [ 1051.892217][ T30] __sys_sendmsg+0x177/0x240 [ 1051.896839][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 1051.902006][ T30] ? rcu_is_watching+0x15/0xb0 [ 1051.906819][ T30] __do_fast_syscall_32+0x23e/0x6f0 [ 1051.912086][ T30] ? do_fast_syscall_32+0x33/0x70 [ 1051.917130][ T30] ? asm_int80_emulation+0x1a/0x20 [ 1051.922291][ T30] ? do_int80_emulation+0x29f/0x550 [ 1051.927536][ T30] ? trace_irq_disable+0x3b/0x140 [ 1051.932611][ T30] do_fast_syscall_32+0x33/0x70 [ 1051.937489][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1051.943875][ T30] RIP: 0023:0xf7f190ec [ 1051.947963][ T30] RSP: 002b:00000000f472b50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1051.956415][ T30] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800003c0 [ 1051.964420][ T30] RDX: 0000000000004890 RSI: 0000000000000000 RDI: 0000000000000000 [ 1051.972447][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1051.980634][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1051.988701][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1051.996710][ T30] [ 1051.999727][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1052.008810][ T30] INFO: task syz.1.3992:18304 blocked for more than 147 seconds. [ 1052.016975][ T30] Tainted: G L syzkaller #0 [ 1052.023532][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1052.032242][ T30] task:syz.1.3992 state:D stack:27696 pid:18304 tgid:18295 ppid:15751 task_flags:0x400140 flags:0x08080002 [ 1052.044233][ T30] Call Trace: [ 1052.047524][ T30] [ 1052.050456][ T30] __schedule+0x17d9/0x56c0 [ 1052.055021][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1052.060436][ T30] ? kasan_save_track+0x4f/0x80 [ 1052.065367][ T30] ? kasan_save_track+0x4f/0x80 [ 1052.070247][ T30] ? kasan_save_track+0x3e/0x80 [ 1052.075185][ T30] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 1052.081024][ T30] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1052.087609][ T30] ? __pfx___schedule+0x10/0x10 [ 1052.092545][ T30] ? rcu_is_watching+0x15/0xb0 [ 1052.097336][ T30] ? rcu_is_watching+0x15/0xb0 [ 1052.102169][ T30] ? lock_release+0x4b/0x3c0 [ 1052.106794][ T30] ? rcu_is_watching+0x15/0xb0 [ 1052.111624][ T30] schedule+0x164/0x360 [ 1052.115825][ T30] schedule_preempt_disabled+0x13/0x30 [ 1052.121352][ T30] __mutex_lock+0x7bf/0x1550 [ 1052.125967][ T30] ? __mutex_lock+0x5d4/0x1550 [ 1052.130741][ T30] ? dev_ioctl+0x7a4/0x1150 [ 1052.135307][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1052.140357][ T30] ? security_capable+0xb9/0x2c0 [ 1052.145364][ T30] ? dev_load+0x21/0x1f0 [ 1052.149624][ T30] dev_ioctl+0x7a4/0x1150 [ 1052.154010][ T30] sock_do_ioctl+0x23e/0x320 [ 1052.158631][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1052.163803][ T30] compat_sock_ioctl+0xbb9/0xcc0 [ 1052.168776][ T30] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1052.174329][ T30] ? __fget_files+0x3a2/0x420 [ 1052.179265][ T30] ? __fget_files+0x2a/0x420 [ 1052.183944][ T30] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1052.189521][ T30] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1052.195051][ T30] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1052.201062][ T30] ? clockevents_program_event+0x491/0x630 [ 1052.206913][ T30] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1052.212275][ T30] ? irqtime_account_irq+0x1f8/0x260 [ 1052.217564][ T30] ? rcu_is_watching+0x15/0xb0 [ 1052.222418][ T30] __do_fast_syscall_32+0x23e/0x6f0 [ 1052.227653][ T30] ? do_fast_syscall_32+0x33/0x70 [ 1052.232755][ T30] ? irqentry_exit+0x10f/0x8f0 [ 1052.237541][ T30] do_fast_syscall_32+0x33/0x70 [ 1052.242450][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1052.248798][ T30] RIP: 0023:0xf7f190ec [ 1052.252913][ T30] RSP: 002b:00000000f430850c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1052.261391][ T30] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000008922 [ 1052.269400][ T30] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 1052.277425][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1052.285629][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1052.293669][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1052.301696][ T30] [ 1052.304745][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1052.313838][ T30] INFO: task syz.2.3996:18317 blocked for more than 148 seconds. [ 1052.321608][ T30] Tainted: G L syzkaller #0 [ 1052.328126][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1052.336847][ T30] task:syz.2.3996 state:D stack:27504 pid:18317 tgid:18316 ppid:13737 task_flags:0x400140 flags:0x08080002 [ 1052.341605][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1052.348913][ T30] Call Trace: [ 1052.366415][ T30] [ 1052.369382][ T30] __schedule+0x17d9/0x56c0 [ 1052.373988][ T30] ? trace_irq_enable+0x3b/0x140 [ 1052.378964][ T30] ? __pfx___schedule+0x10/0x10 [ 1052.384090][ T30] ? rcu_is_watching+0x15/0xb0 [ 1052.388888][ T30] ? rcu_is_watching+0x15/0xb0 [ 1052.393695][ T30] ? lock_release+0x4b/0x3c0 [ 1052.398307][ T30] ? rcu_is_watching+0x15/0xb0 [ 1052.403149][ T30] schedule+0x164/0x360 [ 1052.407326][ T30] schedule_preempt_disabled+0x13/0x30 [ 1052.412835][ T30] __mutex_lock+0x7bf/0x1550 [ 1052.417472][ T30] ? __mutex_lock+0x5d4/0x1550 [ 1052.422299][ T30] ? rtnetlink_rcv_msg+0x767/0xc00 [ 1052.427449][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1052.432593][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1052.437752][ T30] ? rcu_is_watching+0x15/0xb0 [ 1052.442597][ T30] ? lock_release+0x4b/0x3c0 [ 1052.447208][ T30] ? bpf_lsm_capable+0x9/0x20 [ 1052.451921][ T30] ? security_capable+0x7e/0x2c0 [ 1052.456889][ T30] rtnetlink_rcv_msg+0x767/0xc00 [ 1052.461896][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1052.467041][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1052.472550][ T30] ? ref_tracker_free+0x689/0x830 [ 1052.477598][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 1052.483025][ T30] netlink_rcv_skb+0x226/0x4a0 [ 1052.488006][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1052.493571][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1052.498887][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1052.504131][ T30] netlink_unicast+0x7bb/0x940 [ 1052.508943][ T30] netlink_sendmsg+0x813/0xb40 [ 1052.513766][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1052.519074][ T30] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1052.525582][ T30] ? __import_iovec+0x5d7/0x7e0 [ 1052.530457][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1052.535818][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 1052.540863][ T30] ____sys_sendmsg+0x54e/0x850 [ 1052.545678][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1052.551000][ T30] ? __pfx_futex_wake_mark+0x10/0x10 [ 1052.556394][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1052.561115][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1052.566402][ T30] ? futex_wait+0x2a2/0x390 [ 1052.570946][ T30] ? __fget_files+0x2a/0x420 [ 1052.575584][ T30] ? __fget_files+0x3a2/0x420 [ 1052.580295][ T30] __sys_sendmsg+0x177/0x240 [ 1052.584949][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 1052.590326][ T30] ? rcu_is_watching+0x15/0xb0 [ 1052.595182][ T30] __do_fast_syscall_32+0x23e/0x6f0 [ 1052.600418][ T30] ? do_fast_syscall_32+0x33/0x70 [ 1052.605501][ T30] ? irqentry_exit+0x10f/0x8f0 [ 1052.610286][ T30] ? trace_irq_disable+0x3b/0x140 [ 1052.615381][ T30] do_fast_syscall_32+0x33/0x70 [ 1052.620267][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1052.626641][ T30] RIP: 0023:0xf6fcf0ec [ 1052.630726][ T30] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1052.639242][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800012c0 [ 1052.647278][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1052.655298][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1052.663317][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1052.673648][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1052.681701][ T30] [ 1052.684741][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1052.693985][ T30] INFO: task syz.0.4000:18327 blocked for more than 148 seconds. [ 1052.701753][ T30] Tainted: G L syzkaller #0 [ 1052.708277][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1052.716979][ T30] task:syz.0.4000 state:D stack:28728 pid:18327 tgid:18325 ppid:15947 task_flags:0x400040 flags:0x08080002 [ 1052.728952][ T30] Call Trace: [ 1052.732312][ T30] [ 1052.735277][ T30] __schedule+0x17d9/0x56c0 [ 1052.739807][ T30] ? __pfx___schedule+0x10/0x10 [ 1052.744700][ T30] ? rcu_is_watching+0x15/0xb0 [ 1052.749490][ T30] ? rcu_is_watching+0x15/0xb0 [ 1052.754554][ T30] ? lock_release+0x4b/0x3c0 [ 1052.759191][ T30] ? rcu_is_watching+0x15/0xb0 [ 1052.764017][ T30] schedule+0x164/0x360 [ 1052.768190][ T30] schedule_preempt_disabled+0x13/0x30 [ 1052.773685][ T30] __mutex_lock+0x7bf/0x1550 [ 1052.778295][ T30] ? __mutex_lock+0x5d4/0x1550 [ 1052.783090][ T30] ? __tun_chr_ioctl+0x3bc/0x1e10 [ 1052.788247][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1052.793517][ T30] ? lock_release+0x4b/0x3c0 [ 1052.798144][ T30] ? __might_fault+0xaf/0x130 [ 1052.802857][ T30] ? __might_fault+0xcb/0x130 [ 1052.807591][ T30] __tun_chr_ioctl+0x3bc/0x1e10 [ 1052.812505][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1052.817808][ T30] ? __fget_files+0x3a2/0x420 [ 1052.822538][ T30] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1052.828105][ T30] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1052.833603][ T30] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1052.839612][ T30] ? __se_sys_futex_time32+0x3ab/0x440 [ 1052.845121][ T30] ? __pfx___ia32_compat_sys_rt_sigprocmask+0x10/0x10 [ 1052.851945][ T30] ? lock_release+0x4b/0x3c0 [ 1052.856556][ T30] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 1052.862402][ T30] ? rcu_is_watching+0x15/0xb0 [ 1052.867189][ T30] __do_fast_syscall_32+0x23e/0x6f0 [ 1052.871598][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1052.872511][ T30] ? do_fast_syscall_32+0x33/0x70 [ 1052.891867][ T30] ? irqentry_exit+0x10f/0x8f0 [ 1052.896872][ T30] ? trace_irq_disable+0x3b/0x140 [ 1052.902144][ T30] do_fast_syscall_32+0x33/0x70 [ 1052.907031][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1052.913483][ T30] RIP: 0023:0xf7fe80ec [ 1052.917579][ T30] RSP: 002b:00000000f548550c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1052.926033][ T30] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000400454ca [ 1052.934058][ T30] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1052.942088][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1052.950083][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1052.958168][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1052.966208][ T30] [ 1052.969247][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1052.978332][ T30] INFO: task syz.0.4000:18328 blocked for more than 148 seconds. [ 1052.986093][ T30] Tainted: G L syzkaller #0 [ 1052.992623][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1053.001506][ T30] task:syz.0.4000 state:D stack:27504 pid:18328 tgid:18325 ppid:15947 task_flags:0x400140 flags:0x08080002 [ 1053.013508][ T30] Call Trace: [ 1053.016796][ T30] [ 1053.019725][ T30] __schedule+0x17d9/0x56c0 [ 1053.024315][ T30] ? trace_irq_enable+0x3b/0x140 [ 1053.029288][ T30] ? __pfx___schedule+0x10/0x10 [ 1053.034198][ T30] ? rcu_is_watching+0x15/0xb0 [ 1053.038990][ T30] ? rcu_is_watching+0x15/0xb0 [ 1053.043802][ T30] ? lock_release+0x4b/0x3c0 [ 1053.048421][ T30] ? rcu_is_watching+0x15/0xb0 [ 1053.053228][ T30] schedule+0x164/0x360 [ 1053.057405][ T30] schedule_preempt_disabled+0x13/0x30 [ 1053.062906][ T30] __mutex_lock+0x7bf/0x1550 [ 1053.067525][ T30] ? __mutex_lock+0x5d4/0x1550 [ 1053.072346][ T30] ? rtnetlink_rcv_msg+0x767/0xc00 [ 1053.077495][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1053.082584][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1053.087735][ T30] ? rcu_is_watching+0x15/0xb0 [ 1053.092572][ T30] ? lock_release+0x4b/0x3c0 [ 1053.097181][ T30] ? bpf_lsm_capable+0x9/0x20 [ 1053.102051][ T30] ? security_capable+0x7e/0x2c0 [ 1053.107024][ T30] rtnetlink_rcv_msg+0x767/0xc00 [ 1053.112052][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1053.117225][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1053.122721][ T30] ? ref_tracker_free+0x689/0x830 [ 1053.127781][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 1053.133231][ T30] netlink_rcv_skb+0x226/0x4a0 [ 1053.138024][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1053.143531][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1053.148836][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1053.154154][ T30] netlink_unicast+0x7bb/0x940 [ 1053.158964][ T30] netlink_sendmsg+0x813/0xb40 [ 1053.163784][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1053.169092][ T30] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1053.175558][ T30] ? __import_iovec+0x5d7/0x7e0 [ 1053.180451][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1053.185795][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 1053.190865][ T30] ____sys_sendmsg+0x54e/0x850 [ 1053.195709][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1053.201032][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1053.205951][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1053.211298][ T30] ? __fget_files+0x2a/0x420 [ 1053.215919][ T30] ? __fget_files+0x3a2/0x420 [ 1053.220599][ T30] __sys_sendmsg+0x177/0x240 [ 1053.225253][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 1053.230395][ T30] ? rcu_is_watching+0x15/0xb0 [ 1053.235232][ T30] __do_fast_syscall_32+0x23e/0x6f0 [ 1053.240462][ T30] ? do_fast_syscall_32+0x33/0x70 [ 1053.245580][ T30] ? irqentry_exit+0x10f/0x8f0 [ 1053.250392][ T30] do_fast_syscall_32+0x33/0x70 [ 1053.255306][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1053.261680][ T30] RIP: 0023:0xf7fe80ec [ 1053.265748][ T30] RSP: 002b:00000000f546450c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1053.274219][ T30] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800012c0 [ 1053.282255][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1053.290238][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1053.298267][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1053.306426][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1053.314584][ T30] [ 1053.317660][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1053.326735][ T30] INFO: task syz.0.4000:18329 blocked for more than 149 seconds. [ 1053.334540][ T30] Tainted: G L syzkaller #0 [ 1053.341076][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1053.349791][ T30] task:syz.0.4000 state:D stack:27504 pid:18329 tgid:18325 ppid:15947 task_flags:0x400040 flags:0x08080002 [ 1053.361758][ T30] Call Trace: [ 1053.365061][ T30] [ 1053.367993][ T30] __schedule+0x17d9/0x56c0 [ 1053.372576][ T30] ? stack_depot_save_flags+0x33/0x800 [ 1053.378061][ T30] ? kasan_save_track+0x4f/0x80 [ 1053.382973][ T30] ? kasan_save_track+0x3e/0x80 [ 1053.387857][ T30] ? __pfx___schedule+0x10/0x10 [ 1053.392775][ T30] ? rcu_is_watching+0x15/0xb0 [ 1053.397113][ T1130] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1053.397562][ T30] ? rcu_is_watching+0x15/0xb0 [ 1053.416778][ T30] ? lock_release+0x4b/0x3c0 [ 1053.421471][ T30] ? rcu_is_watching+0x15/0xb0 [ 1053.426262][ T30] schedule+0x164/0x360 [ 1053.430428][ T30] schedule_preempt_disabled+0x13/0x30 [ 1053.435949][ T30] __mutex_lock+0x7bf/0x1550 [ 1053.440575][ T30] ? __mutex_lock+0x5d4/0x1550 [ 1053.445413][ T30] ? rtnl_dumpit+0x92/0x200 [ 1053.449955][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1053.455080][ T30] ? __kmalloc_node_track_caller_noprof+0x4f5/0x7b0 [ 1053.461755][ T30] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 1053.467159][ T30] rtnl_dumpit+0x92/0x200 [ 1053.471528][ T30] netlink_dump+0x711/0xee0 [ 1053.476063][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 1053.481152][ T30] ? netlink_lookup+0x30/0x200 [ 1053.486005][ T30] __netlink_dump_start+0x589/0x7b0 [ 1053.491276][ T30] rtnetlink_rcv_msg+0xa48/0xc00 [ 1053.496254][ T30] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 1053.501603][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1053.506747][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1053.512436][ T30] ? ref_tracker_free+0x689/0x830 [ 1053.517487][ T30] ? __pfx_rtnl_dumpit+0x10/0x10 [ 1053.522489][ T30] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 1053.527841][ T30] netlink_rcv_skb+0x226/0x4a0 [ 1053.532661][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1053.538145][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1053.543479][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1053.548698][ T30] netlink_unicast+0x7bb/0x940 [ 1053.553525][ T30] netlink_sendmsg+0x813/0xb40 [ 1053.558314][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1053.563643][ T30] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1053.570086][ T30] ? __import_iovec+0x5d7/0x7e0 [ 1053.575012][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1053.580341][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 1053.585486][ T30] ____sys_sendmsg+0x54e/0x850 [ 1053.590302][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1053.595677][ T30] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1053.600749][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1053.605481][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1053.610735][ T30] ? trace_irq_enable+0x3b/0x140 [ 1053.615934][ T30] ? irqentry_exit+0x218/0x8f0 [ 1053.620727][ T30] ? trace_irq_disable+0x3b/0x140 [ 1053.625813][ T30] ? __fget_files+0x2a/0x420 [ 1053.630423][ T30] ? __fget_files+0x3a2/0x420 [ 1053.635412][ T30] __sys_sendmsg+0x177/0x240 [ 1053.640073][ T30] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1053.645349][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 1053.650505][ T30] ? rcu_is_watching+0x15/0xb0 [ 1053.655332][ T30] __do_fast_syscall_32+0x23e/0x6f0 [ 1053.660562][ T30] ? do_fast_syscall_32+0x33/0x70 [ 1053.665639][ T30] ? irqentry_exit+0x10f/0x8f0 [ 1053.670421][ T30] ? trace_irq_disable+0x3b/0x140 [ 1053.675500][ T30] do_fast_syscall_32+0x33/0x70 [ 1053.680384][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1053.686793][ T30] RIP: 0023:0xf7fe80ec [ 1053.690875][ T30] RSP: 002b:00000000f504150c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1053.699349][ T30] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080006040 [ 1053.707376][ T30] RDX: 0000000024041080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1053.718017][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1053.726153][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1053.734193][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1053.742228][ T30] [ 1053.745263][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1053.754432][ T30] INFO: lockdep is turned off. [ 1053.759227][ T30] NMI backtrace for cpu 0 [ 1053.759241][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1053.759260][ T30] Tainted: [L]=SOFTLOCKUP [ 1053.759266][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1053.759274][ T30] Call Trace: [ 1053.759280][ T30] [ 1053.759285][ T30] dump_stack_lvl+0xe8/0x150 [ 1053.759305][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1053.759319][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1053.759336][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1053.759350][ T30] sys_info+0x135/0x170 [ 1053.759370][ T30] watchdog+0xfd7/0x1030 [ 1053.759392][ T30] ? watchdog+0x1c7/0x1030 [ 1053.759414][ T30] kthread+0x388/0x470 [ 1053.759427][ T30] ? __pfx_watchdog+0x10/0x10 [ 1053.759446][ T30] ? __pfx_kthread+0x10/0x10 [ 1053.759459][ T30] ret_from_fork+0x514/0xb70 [ 1053.759475][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1053.759489][ T30] ? __switch_to+0xc89/0x1420 [ 1053.759510][ T30] ? __pfx_kthread+0x10/0x10 [ 1053.759524][ T30] ret_from_fork_asm+0x1a/0x30 [ 1053.759545][ T30] [ 1053.759550][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1053.875271][ C1] NMI backtrace for cpu 1 [ 1053.875292][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1053.875316][ C1] Tainted: [L]=SOFTLOCKUP [ 1053.875323][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1053.875334][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1053.875362][ C1] Code: 7c 7b 02 e9 d3 03 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 38 1c 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1053.875377][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000246 [ 1053.875394][ C1] RAX: ffff88812535a000 RBX: ffffffff819a7300 RCX: 0000000080000001 [ 1053.875408][ C1] RDX: 0000000000000001 RSI: ffffffff8c293c80 RDI: ffffffff819a7300 [ 1053.875421][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 1053.875434][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 1053.875446][ C1] R13: 1ffff11003bd0000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 1053.875460][ C1] FS: 0000000000000000(0000) GS:ffff88812535a000(0000) knlGS:0000000000000000 [ 1053.875475][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1053.875487][ C1] CR2: 000056138c4f7f40 CR3: 000000000e746000 CR4: 00000000003526f0 [ 1053.875503][ C1] Call Trace: [ 1053.875511][ C1] [ 1053.875518][ C1] default_idle+0x9/0x20 [ 1053.875541][ C1] default_idle_call+0x72/0xb0 [ 1053.875567][ C1] do_idle+0x2e0/0x540 [ 1053.875584][ C1] ? __pfx_do_idle+0x10/0x10 [ 1053.875603][ C1] cpu_startup_entry+0x43/0x60 [ 1053.875631][ C1] start_secondary+0x101/0x110 [ 1053.875648][ C1] common_startup_64+0x13e/0x157 [ 1053.875677][ C1] [ 1053.922179][ T57] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1053.932129][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1053.932191][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1053.932262][ T30] Tainted: [L]=SOFTLOCKUP [ 1053.932281][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1053.932329][ T30] Call Trace: [ 1053.932353][ T30] [ 1053.932380][ T30] vpanic+0x56c/0xa60 [ 1053.932542][ T30] ? __pfx___schedule+0x10/0x10 [ 1053.932598][ T30] ? __pfx_vpanic+0x10/0x10 [ 1053.932662][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1053.932726][ T30] panic+0xc5/0xd0 [ 1053.932780][ T30] ? __pfx_panic+0x10/0x10 [ 1053.932834][ T30] ? preempt_schedule_common+0x82/0xd0 [ 1053.932890][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 1053.932961][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1053.933002][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1053.933054][ T30] watchdog+0x1030/0x1030 [ 1053.933128][ T30] ? watchdog+0x1c7/0x1030 [ 1053.933219][ T30] kthread+0x388/0x470 [ 1053.933287][ T30] ? __pfx_watchdog+0x10/0x10 [ 1053.933355][ T30] ? __pfx_kthread+0x10/0x10 [ 1053.933398][ T30] ret_from_fork+0x514/0xb70 [ 1053.933459][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1053.933530][ T30] ? __switch_to+0xc89/0x1420 [ 1053.933618][ T30] ? __pfx_kthread+0x10/0x10 [ 1053.933697][ T30] ret_from_fork_asm+0x1a/0x30 [ 1053.933800][ T30] [ 1053.937476][ T30] Kernel Offset: disabled