last executing test programs: 10.638028759s ago: executing program 4 (id=2614): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f00000007c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004804) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@generic={0x91, 0x1, 0x1, 0x82}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000300)={0x2, 'bridge0\x00', 0x1}, 0x18) 9.572480203s ago: executing program 4 (id=2618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x1, @local, 0x5}, 0x1c) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001e40), &(0x7f0000001f40), 0x2248, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000340)={@any, 0x4}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000002c0)={r3, &(0x7f0000000180)='\x00', 0x4000, &(0x7f00000001c0)={@align=0x665, {0x2, 0xc2da, 0x6, 0xf7e3}}, 0x80000000, &(0x7f0000000200), &(0x7f0000000240)=0x4}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x19}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xd9, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0x7, "04030e5c61"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000010c0), 0x40000, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000001100)=0x8) bind$bt_rfcomm(r4, &(0x7f0000000300)={0x1f, @none, 0x7}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, &(0x7f0000000480)="00d0954942b1085082f0e459e12f214e2875a68b", 0x0, 0x0, 0x0, 0x8}, 0x50) 8.641195192s ago: executing program 4 (id=2621): r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x7, @dev={0xfe, 0x80, '\x00', 0x1d}}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000340)="000010000000008f77eba783d112bae0c4f37b0f682c3c70d43af594d595", 0x1e}, {0x0}], 0x2}, 0x4000) 7.927484085s ago: executing program 4 (id=2626): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120012000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 7.220533146s ago: executing program 4 (id=2630): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f00000001c0)=@raw=[@exit], &(0x7f0000000000)='GPL\x00', 0x2, 0xe5, &(0x7f0000000240)=""/229, 0x0, 0x11}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x7ffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x1, 0x4d89c374, 0x1, 0x8}, 0x1000b, 0xfffffffe, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x5, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x1008, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.416893197s ago: executing program 4 (id=2635): socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x81) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x84e56105723e644b}, @TCA_TBF_BURST={0x8, 0x6, 0x20000000}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x2, 0xa, 0x4}, {0x9c, 0x0, 0x7, 0x1, 0x6, 0x5}, 0x6, 0x71d, 0xa74}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 6.315657866s ago: executing program 2 (id=2637): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='veno', 0x4) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000740)}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)="bae4", 0x2}, {&(0x7f00000000c0)="d825079a98f00eedab87b0af330c7e2d626924216763b5579a3c85b2d1d46bc5b3ec13932a25cc7486d10c7a582a9d573d6807ca73ae27ac0c656b8ff80c5277da81f2bd35f1070706da1c17f225db1a5b84ae6628b081dafe87bf4de0728e1c2b76e0c0d91e622fc1c716", 0x6b}], 0x2}}, {{&(0x7f0000000280)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000340)="8c15d6644b8d3401adbf061fbe5223c5d59119f6ca7c1697e3", 0x19}, {&(0x7f0000000680)="1947597dea9f0f4a01f1d14a58f4c12c5e2fc94d10615872f04c99fb7fa4768198114d6f2510ef645c082160d4a1d575b85db7381c927db9d7355362f2d1953d5c5ad3278280521598d474b9d2b6165801c51b68a494d6b493afa4cb2019ddd1c69a6a801798028359c134d92be08d2d690364d1ebaef586df2c8792950a335316d24f75a7b9912d951482b1ff05a90462319f09ad2d683c4bc6f4f0736a67710d93c5a51db9a61fd209ba13d5d78fad6e43c7b1c25979e3f24469f68bf9b699", 0xc0}, {&(0x7f0000000900)="28d81e", 0x3}], 0x3, &(0x7f0000000980)=[@ip_retopts={{0xc}}], 0xc}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000cc0)="79bfc144c4c525e196e5dbc7b6859ccedeed94bdae5932f50a5fbb9fc4f04b471ab3d0235b362cb3233bdcb8a0cf02c28985d89da4b2", 0x36}, {&(0x7f0000000d00)="09fd9fe1d7cde071df1ee3288a6645058d1fcf7c25cd31fb50c12ddeb7921cca97a9e254aeb6ff9bfd5d9bb8d0bb9d40bce96872602cf7cd0206702aa1250a5d36810edaeb9835b7769280726c9ddae8e75930ba53ccdd5d41dd6c4e606e152994c9fea7cb0dc3544dd01e221e268a95f2593d5087789aa428f8283073dfd755f8e785f4d892c25d69bb73cd246efa2e1b0d2fda76d5397b7553dd357da59850d5db79a33865a206cc330bd07ddef9870c380de8453ae9d3b8a0f0349e2a405ac385bc11ea8f8b646e68a271859480bf6274f5d13dbd506c2edfd3594cb2a608150cb51f47a36ee4e9", 0xe9}, {&(0x7f0000000e00)="6e6fe6b112843ef70f427639093fe3e680d0e3c14f1dd5f90ea8c97ed4bdb11f764f522c3c8fe54a257ff664594910e188a0f90a356e30b2784ca46eb73afff82f2d1b23d5adf5627baf8cfef7be2a48545af4f69f9b8492080924a200a2535174dc39811decd149255144ff84cccd7110b899cb224ffb4cec49739a28eef5f5bdfd9d82c02284c333fca2b0e371db34a2a53c532b5aff57717debf3a60fd19c78779c75718e69279e9752bbcaf4fbe7cfee7ff804", 0xb5}, {&(0x7f0000001040)="f4f3dced06654bb0871debaccbf1f1f5dfcdb0d4da35323e2558b1bfa466a2d1877bf1534411b724fb2c0a23cf27f13a9b98c47ca5208737a64b2a5f8660485110", 0x41}, {&(0x7f0000001100)="0dd6066936dee6fc25b54e462b910274e8582a24387adf7571e5aec3ca40cf1b1a6074087d30d3583b5395ca93aa7b9d470504aac6427fbccda91606c3241d67f558d755be26ebf1cb20191d45c35b56cdad87dac8342ba276337a3297a00e7e2aabef40e5f93d94cd6084694aeef9163972c283d5d3f67f6954bfd44fc84d4a676885a9d766513416e250d1501dca72b4ab", 0x92}, {&(0x7f00000011c0)="575064afeda318e1b7", 0x9}], 0x6}}], 0x4, 0x4004) 5.813553127s ago: executing program 2 (id=2639): writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff00000003", 0x41}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 5.7449125s ago: executing program 1 (id=2640): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x9, 0x6, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x55) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000076000100fefffffffddbdf25810a000000000000080001"], 0x20}}, 0x0) 5.27944936s ago: executing program 0 (id=2641): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x40) recvmmsg(r0, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x400002}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/72, 0x48}, 0x81}], 0x2, 0x20000020, 0x0) 4.861741823s ago: executing program 1 (id=2642): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004800000040000eb0300000000410000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket(0x23, 0x80805, 0x0) connect$phonet_pipe(r3, &(0x7f0000000080)={0x23, 0xed, 0x80, 0x3}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8982, &(0x7f0000000340)={0x7, 'vlan0\x00', {0x3}, 0xd96}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 4.159776989s ago: executing program 1 (id=2643): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x2000c011) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a3100000000050001000700000034000780"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0xb83, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800) bind$inet6(r0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r4, 0x5, 0x0, @void}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r5, r3, 0x4, r6}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32, @ANYBLOB="60005080110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.839131792s ago: executing program 0 (id=2644): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}, 0x1, 0x2}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x60) 3.649761087s ago: executing program 2 (id=2645): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x2, 0x1170000) close(r3) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x48) splice(r1, 0x0, r3, 0x0, 0x3000, 0x100000000000000d) 3.642482327s ago: executing program 3 (id=2646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x1, @local, 0x5}, 0x1c) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001e40), &(0x7f0000001f40), 0x2248, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000340)={@any, 0x4}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f00000002c0)={r4, &(0x7f0000000180)='\x00', 0x4000, &(0x7f00000001c0)={@align=0x665, {0x2, 0xc2da, 0x6, 0xf7e3}}, 0x80000000, &(0x7f0000000200), &(0x7f0000000240)=0x4}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x19}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xd9, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0x7, "04030e5c61"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000010c0), 0x40000, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000001100)=0x8) bind$bt_rfcomm(r5, &(0x7f0000000300)={0x1f, @none, 0x7}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, &(0x7f0000000480)="00d0954942b1085082f0e459e12f214e2875a68b", 0x0, 0x0, 0x0, 0x8}, 0x50) 3.442762869s ago: executing program 0 (id=2647): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f00000001c0)=@raw=[@exit], &(0x7f0000000000)='GPL\x00', 0x2, 0xe5, &(0x7f0000000240)=""/229, 0x0, 0x11}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x7ffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x1, 0x4d89c374, 0x1, 0x8}, 0x1000b, 0xfffffffe, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x5, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x1008, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.794327118s ago: executing program 3 (id=2648): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x6c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffc, 0x20, 0xb, 0xff, 0x6, 0x7, 0xffff}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) 2.770489901s ago: executing program 0 (id=2649): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4c840) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) sendto$inet(r1, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000380)='x', 0x1, 0x480c1, 0x0, 0x0) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 2.567537692s ago: executing program 2 (id=2650): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000540)) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x80000000, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x2, 0x1, 0x2, 0x2, 0x5, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_proto_private(r5, 0x89e0, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1}, 0x4) 2.40765838s ago: executing program 3 (id=2651): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="00008100ffffffffffffbbbbbbbbbbbb0800450000784000e000062f00000a010101000600000001880b"], 0x8a) 1.832868546s ago: executing program 2 (id=2652): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x9, 0x6, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x55) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000076000100fefffffffddbdf25810a000000000000080001"], 0x20}}, 0x0) 1.418243079s ago: executing program 0 (id=2653): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004800000040000eb0300000000410000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket(0x23, 0x80805, 0x0) connect$phonet_pipe(r2, &(0x7f0000000080)={0x23, 0xed, 0x80, 0x3}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, &(0x7f0000000340)={0x7, 'vlan0\x00', {0x3}, 0xd96}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.289600201s ago: executing program 1 (id=2654): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r0, 0x0, 0x0, 0x20000020, 0x0) 1.26093951s ago: executing program 3 (id=2655): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001500)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x3, 0x1, 0x2}}) 1.150892354s ago: executing program 2 (id=2656): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) syz_usb_connect$uac3(0x5, 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000040630780204000010203010902"], 0x0) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045540, &(0x7f0000000000)=0x80000000) r7 = accept4(r5, 0x0, 0x0, 0x80800) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x4040080}, 0x8000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newspdinfo={0x14, 0x24, 0x1, 0x70bd25, 0x25dfdbfb, 0x80007f}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r9, 0x4020aed2, &(0x7f00000000c0)={0xe000, 0x201000, 0x8}) 722.430426ms ago: executing program 1 (id=2657): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}, 0x1, 0x2}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x60) 722.096026ms ago: executing program 3 (id=2658): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000080), &(0x7f0000000580)}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}}, 0x20}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 718.857933ms ago: executing program 0 (id=2659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x1, @local, 0x5}, 0x1c) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001e40), &(0x7f0000001f40), 0x2248, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000340)={@any, 0x4}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f00000002c0)={r4, &(0x7f0000000180)='\x00', 0x4000, &(0x7f00000001c0)={@align=0x665, {0x2, 0xc2da, 0x6, 0xf7e3}}, 0x80000000, &(0x7f0000000200), &(0x7f0000000240)=0x4}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x19}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xd9, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0x7, "04030e5c61"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000010c0), 0x40000, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000001100)=0x8) bind$bt_rfcomm(r5, &(0x7f0000000300)={0x1f, @none, 0x7}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, &(0x7f0000000480)="00d0954942b1085082f0e459e12f214e2875a68b", 0x0, 0x0, 0x0, 0x8}, 0x50) 239.315373ms ago: executing program 1 (id=2660): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) sendmsg$802154_dgram(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) 0s ago: executing program 3 (id=2661): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140)=0x3, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) kernel console output (not intermixed with test programs): es/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 345.351088][ T7725] sctp: [Deprecated]: syz.2.660 (pid 7725) Use of int in max_burst socket option. [ 345.351088][ T7725] Use struct sctp_assoc_value instead [ 345.440045][ T7725] syzkaller0: entered promiscuous mode [ 345.472360][ T7725] syzkaller0: entered allmulticast mode [ 345.748990][ T7734] sctp: [Deprecated]: syz.3.661 (pid 7734) Use of int in max_burst socket option. [ 345.748990][ T7734] Use struct sctp_assoc_value instead [ 346.546489][ T7744] netlink: 52 bytes leftover after parsing attributes in process `syz.2.664'. [ 346.911054][ T7747] netlink: 48 bytes leftover after parsing attributes in process `syz.3.666'. [ 349.087832][ T7777] sctp: [Deprecated]: syz.1.676 (pid 7777) Use of int in max_burst socket option. [ 349.087832][ T7777] Use struct sctp_assoc_value instead [ 349.236901][ T7775] syzkaller0: entered promiscuous mode [ 349.253408][ T7775] syzkaller0: entered allmulticast mode [ 349.902850][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.680'. [ 350.247194][ T7790] sctp: [Deprecated]: syz.4.681 (pid 7790) Use of int in max_burst socket option. [ 350.247194][ T7790] Use struct sctp_assoc_value instead [ 350.698632][ T5678] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 350.897018][ T5678] usb 4-1: config 0 has no interfaces? [ 350.951477][ T5678] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 350.986673][ T5678] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.997153][ T5678] usb 4-1: Product: syz [ 351.002561][ T5678] usb 4-1: Manufacturer: syz [ 351.007833][ T5678] usb 4-1: SerialNumber: syz [ 351.052258][ T5678] usb 4-1: config 0 descriptor?? [ 351.846803][ T7819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.689'. [ 352.406466][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880525c3000: rx timeout, send abort [ 352.416592][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880525c3000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 352.990769][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.694'. [ 353.881997][ T7840] sctp: [Deprecated]: syz.1.696 (pid 7840) Use of int in max_burst socket option. [ 353.881997][ T7840] Use struct sctp_assoc_value instead [ 353.913343][ T5678] usb 4-1: USB disconnect, device number 19 [ 353.942196][ T7838] syzkaller0: entered promiscuous mode [ 353.974693][ T7838] syzkaller0: entered allmulticast mode [ 354.664494][ T7849] sctp: [Deprecated]: syz.0.699 (pid 7849) Use of int in max_burst socket option. [ 354.664494][ T7849] Use struct sctp_assoc_value instead [ 355.633170][ T7866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.706'. [ 355.920844][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.704'. [ 356.819192][ T5678] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 357.024482][ T5678] usb 3-1: config 0 has no interfaces? [ 357.072669][ T5678] usb 3-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 357.116095][ T5678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.155905][ T5678] usb 3-1: Product: syz [ 357.181920][ T5678] usb 3-1: Manufacturer: syz [ 357.208677][ T5678] usb 3-1: SerialNumber: syz [ 357.260762][ T5678] usb 3-1: config 0 descriptor?? [ 357.395540][ T7892] sctp: [Deprecated]: syz.0.711 (pid 7892) Use of int in max_burst socket option. [ 357.395540][ T7892] Use struct sctp_assoc_value instead [ 357.526561][ T7892] syzkaller0: entered promiscuous mode [ 357.556704][ T7892] syzkaller0: entered allmulticast mode [ 358.442128][ T7908] sctp: [Deprecated]: syz.3.714 (pid 7908) Use of int in max_burst socket option. [ 358.442128][ T7908] Use struct sctp_assoc_value instead [ 359.224617][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.719'. [ 359.253604][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.719'. [ 359.775870][ T5681] usb 3-1: USB disconnect, device number 13 [ 360.179746][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.721'. [ 361.243555][ T7946] sctp: [Deprecated]: syz.4.726 (pid 7946) Use of int in max_burst socket option. [ 361.243555][ T7946] Use struct sctp_assoc_value instead [ 361.699447][ T7953] netlink: 16 bytes leftover after parsing attributes in process `syz.3.728'. [ 362.089181][ T7958] sctp: [Deprecated]: syz.2.729 (pid 7958) Use of int in max_burst socket option. [ 362.089181][ T7958] Use struct sctp_assoc_value instead [ 362.390097][ T7966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.732'. [ 362.438960][ T7966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.732'. [ 363.259987][ T5681] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 363.462544][ T5681] usb 5-1: config 0 has no interfaces? [ 363.512737][ T5681] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 363.524668][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.737'. [ 363.543161][ T5681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.590265][ T5681] usb 5-1: Product: syz [ 363.604143][ T5681] usb 5-1: Manufacturer: syz [ 363.626441][ T5681] usb 5-1: SerialNumber: syz [ 363.670555][ T5681] usb 5-1: config 0 descriptor?? [ 364.363691][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880525bba00: rx timeout, send abort [ 364.374284][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880525bba00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 364.786584][ T8000] sctp: [Deprecated]: syz.3.740 (pid 8000) Use of int in max_burst socket option. [ 364.786584][ T8000] Use struct sctp_assoc_value instead [ 364.938700][ T8002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.742'. [ 365.675565][ T8012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.746'. [ 365.744909][ T8012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.746'. [ 365.755212][ T8013] sctp: [Deprecated]: syz.2.745 (pid 8013) Use of int in max_burst socket option. [ 365.755212][ T8013] Use struct sctp_assoc_value instead [ 366.256195][ T5678] usb 5-1: USB disconnect, device number 13 [ 366.615721][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.750'. [ 368.050130][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'. [ 368.135965][ T8045] sctp: [Deprecated]: syz.3.756 (pid 8045) Use of int in max_burst socket option. [ 368.135965][ T8045] Use struct sctp_assoc_value instead [ 368.431599][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'. [ 369.332575][ T8063] sctp: [Deprecated]: syz.0.760 (pid 8063) Use of int in max_burst socket option. [ 369.332575][ T8063] Use struct sctp_assoc_value instead [ 369.548363][ T5681] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 369.693886][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.763'. [ 369.773132][ T5681] usb 4-1: config 0 has no interfaces? [ 369.806226][ T5681] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 369.845564][ T5681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.892941][ T5681] usb 4-1: Product: syz [ 369.912379][ T5681] usb 4-1: Manufacturer: syz [ 369.937750][ T5681] usb 4-1: SerialNumber: syz [ 370.004483][ T5681] usb 4-1: config 0 descriptor?? [ 372.607012][ T5681] usb 4-1: USB disconnect, device number 20 [ 372.913027][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.772'. [ 373.826489][ T8118] sctp: [Deprecated]: syz.4.776 (pid 8118) Use of int in max_burst socket option. [ 373.826489][ T8118] Use struct sctp_assoc_value instead [ 374.115141][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.777'. [ 376.159593][ T5683] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 376.373746][ T5683] usb 4-1: config 0 has no interfaces? [ 376.415509][ T5683] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 376.458243][ T5683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.484321][ T5683] usb 4-1: Product: syz [ 376.505026][ T5683] usb 4-1: Manufacturer: syz [ 376.516130][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.785'. [ 376.520841][ T5683] usb 4-1: SerialNumber: syz [ 376.573501][ T5683] usb 4-1: config 0 descriptor?? [ 377.389920][ T8178] sctp: [Deprecated]: syz.4.790 (pid 8178) Use of int in max_burst socket option. [ 377.389920][ T8178] Use struct sctp_assoc_value instead [ 378.885930][ T8191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.792'. [ 379.311966][ T5683] usb 4-1: USB disconnect, device number 21 [ 379.924724][ T8198] ip6tnl2: entered allmulticast mode [ 381.794861][ T8222] sctp: [Deprecated]: syz.0.801 (pid 8222) Use of int in max_burst socket option. [ 381.794861][ T8222] Use struct sctp_assoc_value instead [ 382.499314][ T5683] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 382.713678][ T5683] usb 3-1: config 0 has no interfaces? [ 382.761572][ T5683] usb 3-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 382.795130][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.832423][ T5683] usb 3-1: Product: syz [ 382.858229][ T5683] usb 3-1: Manufacturer: syz [ 382.882763][ T5683] usb 3-1: SerialNumber: syz [ 382.933294][ T5683] usb 3-1: config 0 descriptor?? [ 382.958956][ T8243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.806'. [ 385.638283][ T5683] usb 3-1: USB disconnect, device number 14 [ 387.273300][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.821'. [ 387.971553][ T5678] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 388.175668][ T5678] usb 5-1: unable to get BOS descriptor or descriptor too short [ 388.214743][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.225179][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.277556][ T5678] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 388.304563][ T5678] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.351148][ T5678] usb 5-1: Product: syz [ 388.367696][ T5678] usb 5-1: Manufacturer: syz [ 388.396437][ T5678] usb 5-1: SerialNumber: syz [ 388.695045][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.824'. [ 388.878424][ T5678] usb 5-1: 1:1: cannot set freq 48000 to ep 0x1 [ 389.679249][ T5678] usb 5-1: USB disconnect, device number 14 [ 390.220203][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 391.803397][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.836'. [ 392.959356][ T5681] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 393.207681][ T5681] usb 1-1: unable to get BOS descriptor or descriptor too short [ 393.276589][ T5681] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 393.317506][ T5681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.350999][ T5681] usb 1-1: Product: syz [ 393.357196][ T5681] usb 1-1: Manufacturer: syz [ 393.366517][ T5681] usb 1-1: SerialNumber: syz [ 393.695510][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.840'. [ 393.914301][ T5681] usb 1-1: 1:1: cannot set freq 48000 to ep 0x1 [ 394.576232][ T5681] usb 1-1: USB disconnect, device number 13 [ 395.359164][ T5951] udevd[5951]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.409728][ T4873] Bluetooth: hci4: command 0x0405 tx timeout [ 395.780556][ T8406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.852'. [ 398.713197][ T5683] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 398.948544][ T5683] usb 5-1: unable to get BOS descriptor or descriptor too short [ 398.999880][ T5683] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 399.031940][ T5683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.061649][ T5683] usb 5-1: Product: syz [ 399.075415][ T5683] usb 5-1: Manufacturer: syz [ 399.123681][ T5683] usb 5-1: SerialNumber: syz [ 399.400592][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.859'. [ 399.591711][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.866'. [ 399.622686][ T5683] usb 5-1: 1:1: cannot set freq 48000 to ep 0x1 [ 400.343188][ T5683] usb 5-1: USB disconnect, device number 15 [ 401.323609][ T5951] udevd[5951]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 402.428264][ T8491] netlink: 44 bytes leftover after parsing attributes in process `syz.4.877'. [ 402.782105][ T5678] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 403.003933][ T5678] usb 1-1: unable to get BOS descriptor or descriptor too short [ 403.057838][ T5678] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 403.078630][ T5678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.086918][ T5678] usb 1-1: Product: syz [ 403.095074][ T5678] usb 1-1: Manufacturer: syz [ 403.114442][ T5678] usb 1-1: SerialNumber: syz [ 403.252593][ T8507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.882'. [ 403.440447][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.879'. [ 403.663523][ T5678] usb 1-1: 1:1: cannot set freq 48000 to ep 0x1 [ 404.265610][ T5678] usb 1-1: USB disconnect, device number 14 [ 404.827902][ T5948] udevd[5948]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 406.084247][ T8534] syzkaller0: entered promiscuous mode [ 406.101800][ T8534] syzkaller0: entered allmulticast mode [ 406.239585][ T8542] netlink: 44 bytes leftover after parsing attributes in process `syz.2.891'. [ 407.649110][ T5681] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 407.857723][ T5681] usb 3-1: unable to get BOS descriptor or descriptor too short [ 407.936073][ T5681] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 407.972953][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.015021][ T5681] usb 3-1: Product: syz [ 408.037778][ T5681] usb 3-1: Manufacturer: syz [ 408.056826][ T5681] usb 3-1: SerialNumber: syz [ 408.103023][ T8568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.901'. [ 408.351473][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.897'. [ 408.461662][ T5681] usb 3-1: 1:1: cannot set freq 48000 to ep 0x1 [ 409.218513][ T5681] usb 3-1: USB disconnect, device number 15 [ 409.655641][ T8588] netlink: 44 bytes leftover after parsing attributes in process `syz.4.907'. [ 410.318904][ T5951] udevd[5951]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 410.622922][ T8590] syzkaller0: entered promiscuous mode [ 410.678927][ T8590] syzkaller0: entered allmulticast mode [ 412.242655][ T8623] netlink: 44 bytes leftover after parsing attributes in process `syz.0.921'. [ 412.271737][ T5681] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 412.473382][ T5681] usb 3-1: unable to get BOS descriptor or descriptor too short [ 412.580878][ T5681] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 412.617253][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.652044][ T5681] usb 3-1: Product: syz [ 412.676596][ T5681] usb 3-1: Manufacturer: syz [ 412.697450][ T5681] usb 3-1: SerialNumber: syz [ 412.999255][ T8619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.919'. [ 413.147656][ T5681] usb 3-1: 1:1: cannot set freq 48000 to ep 0x1 [ 413.670338][ T5681] usb 3-1: USB disconnect, device number 16 [ 414.565192][ T6197] udevd[6197]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 414.933642][ T8643] syzkaller0: entered promiscuous mode [ 414.950604][ T8643] syzkaller0: entered allmulticast mode [ 416.128359][ T5681] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 416.335656][ T5681] usb 4-1: unable to get BOS descriptor or descriptor too short [ 416.411765][ T5681] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 416.448547][ T5681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.477836][ T5681] usb 4-1: Product: syz [ 416.503111][ T5681] usb 4-1: Manufacturer: syz [ 416.537618][ T5681] usb 4-1: SerialNumber: syz [ 416.830936][ T8669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.941'. [ 416.993340][ T5681] usb 4-1: 1:1: cannot set freq 48000 to ep 0x1 [ 417.504989][ T5681] usb 4-1: USB disconnect, device number 22 [ 418.678103][ T5951] udevd[5951]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 418.826300][ T8693] syzkaller0: entered promiscuous mode [ 418.895400][ T8693] syzkaller0: entered allmulticast mode [ 421.398704][ T5681] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 421.576757][ T5681] usb 4-1: unable to get BOS descriptor or descriptor too short [ 421.630369][ T5681] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 421.661504][ T5681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.695267][ T5681] usb 4-1: Product: syz [ 421.724440][ T5681] usb 4-1: Manufacturer: syz [ 421.751324][ T5681] usb 4-1: SerialNumber: syz [ 422.044654][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.963'. [ 422.431778][ T5681] usb 4-1: 1:1: cannot set freq 48000 to ep 0x1 [ 423.006083][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.969'. [ 423.036141][ T5681] usb 4-1: USB disconnect, device number 23 [ 423.714336][ T8741] syzkaller0: entered promiscuous mode [ 423.768340][ T8741] syzkaller0: entered allmulticast mode [ 423.801023][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 427.590542][ T8777] syzkaller0: entered promiscuous mode [ 427.604914][ T8777] syzkaller0: entered allmulticast mode [ 428.764699][ T8792] netlink: 40 bytes leftover after parsing attributes in process `syz.2.990'. [ 430.923318][ T8827] sctp: [Deprecated]: syz.1.1004 (pid 8827) Use of int in max_burst socket option. [ 430.923318][ T8827] Use struct sctp_assoc_value instead [ 431.253167][ T8832] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1005'. [ 431.274044][ T8823] syzkaller0: entered promiscuous mode [ 431.289267][ T8823] syzkaller0: entered allmulticast mode [ 433.816634][ T8871] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1019'. [ 433.971095][ T4873] Bluetooth: hci4: command 0x0405 tx timeout [ 434.841150][ T8878] syzkaller0: entered promiscuous mode [ 434.847355][ T8878] syzkaller0: entered allmulticast mode [ 434.870084][ T8883] sctp: [Deprecated]: syz.1.1023 (pid 8883) Use of int in max_burst socket option. [ 434.870084][ T8883] Use struct sctp_assoc_value instead [ 435.268343][ T8888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1025'. [ 436.304732][ T8903] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1032'. [ 437.475086][ T8920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1039'. [ 438.151514][ T8921] syzkaller0: entered promiscuous mode [ 438.171436][ T8921] syzkaller0: entered allmulticast mode [ 439.363426][ T8952] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1046'. [ 439.821368][ T8957] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1049'. [ 440.194422][ T8963] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1052'. [ 440.240087][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 440.463215][ T9] usb 5-1: config 0 has no interfaces? [ 440.493150][ T9] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 440.519776][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.540667][ T9] usb 5-1: Product: syz [ 440.556044][ T9] usb 5-1: Manufacturer: syz [ 440.580631][ T9] usb 5-1: SerialNumber: syz [ 440.614524][ T9] usb 5-1: config 0 descriptor?? [ 441.155910][ T8974] syzkaller0: entered promiscuous mode [ 441.175168][ T8974] syzkaller0: entered allmulticast mode [ 441.699524][ T9] usb 5-1: USB disconnect, device number 16 [ 441.889401][ T8981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1057'. [ 442.353358][ T8985] syzkaller0: entered promiscuous mode [ 442.373750][ T8985] syzkaller0: entered allmulticast mode [ 442.887527][ T8993] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1062'. [ 443.288457][ T8996] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1064'. [ 443.330370][ T8999] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1065'. [ 444.024835][ T9008] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1069'. [ 444.492691][ T9013] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1071'. [ 444.656132][ T9007] syzkaller0: entered promiscuous mode [ 444.678562][ T9007] syzkaller0: entered allmulticast mode [ 445.893407][ T9032] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1076'. [ 445.985565][ T9030] syzkaller0: entered promiscuous mode [ 446.006556][ T9030] syzkaller0: entered allmulticast mode [ 446.069809][ T9036] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1078'. [ 446.375885][ T9038] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1079'. [ 447.130839][ T9050] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1085'. [ 447.173629][ T9049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1082'. [ 448.492366][ T9063] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1090'. [ 448.593703][ T9058] syzkaller0: entered promiscuous mode [ 448.618949][ T9058] syzkaller0: entered allmulticast mode [ 449.646717][ T9072] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1092'. [ 449.667506][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.667745][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.752874][ T9071] syzkaller0: entered promiscuous mode [ 449.766257][ T9071] syzkaller0: entered allmulticast mode [ 450.140822][ T5678] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 450.358582][ T5678] usb 1-1: config 0 has no interfaces? [ 450.414271][ T5678] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 450.453073][ T5678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.487783][ T5678] usb 1-1: Product: syz [ 450.494325][ T5678] usb 1-1: Manufacturer: syz [ 450.502472][ T5678] usb 1-1: SerialNumber: syz [ 450.533160][ T5678] usb 1-1: config 0 descriptor?? [ 450.579947][ T9081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1097'. [ 451.438361][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1101'. [ 451.472961][ T9] usb 1-1: USB disconnect, device number 15 [ 452.037819][ T9099] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1104'. [ 452.566898][ T9105] netlink: 'syz.1.1106': attribute type 10 has an invalid length. [ 452.615124][ T9101] syzkaller0: entered promiscuous mode [ 452.627018][ T9101] syzkaller0: entered allmulticast mode [ 452.671897][ T9105] bridge0: port 3(team0) entered disabled state [ 452.680332][ T9105] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.688763][ T9105] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.741730][ T9112] netlink: 'syz.4.1108': attribute type 1 has an invalid length. [ 452.769298][ T9105] bridge0: port 3(team0) entered blocking state [ 452.776251][ T9105] bridge0: port 3(team0) entered forwarding state [ 452.784372][ T9105] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.792100][ T9105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.800758][ T9105] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.808447][ T9105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.835203][ T9105] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 453.822255][ T9129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1114'. [ 454.710676][ T5678] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 454.854434][ T9141] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1119'. [ 454.909323][ T5678] usb 2-1: config 0 has no interfaces? [ 454.944055][ T5678] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 454.973521][ T5678] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.007386][ T5678] usb 2-1: Product: syz [ 455.020079][ T5678] usb 2-1: Manufacturer: syz [ 455.032034][ T5678] usb 2-1: SerialNumber: syz [ 455.065366][ T5678] usb 2-1: config 0 descriptor?? [ 456.054653][ T9] usb 2-1: USB disconnect, device number 17 [ 456.158941][ T9152] netlink: 'syz.0.1122': attribute type 10 has an invalid length. [ 456.186373][ T9152] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.195456][ T9152] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.277856][ T9152] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.285555][ T9152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.294362][ T9152] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.302032][ T9152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.330177][ T9152] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 456.353245][ T9156] netlink: 'syz.2.1123': attribute type 1 has an invalid length. [ 456.859649][ T9158] syzkaller0: entered promiscuous mode [ 456.873987][ T9158] syzkaller0: entered allmulticast mode [ 457.772770][ T9170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1128'. [ 458.701102][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1134'. [ 458.756330][ T9185] netlink: 'syz.2.1135': attribute type 1 has an invalid length. [ 459.200207][ T5678] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 459.391549][ T5678] usb 2-1: config 0 has no interfaces? [ 459.433289][ T5678] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 459.450721][ T5678] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.459970][ T9192] netlink: 'syz.3.1137': attribute type 10 has an invalid length. [ 459.479602][ T9192] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.488110][ T9192] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.503350][ T5678] usb 2-1: Product: syz [ 459.509126][ T5678] usb 2-1: Manufacturer: syz [ 459.516160][ T5678] usb 2-1: SerialNumber: syz [ 459.541699][ T5678] usb 2-1: config 0 descriptor?? [ 459.653783][ T9192] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.661539][ T9192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.670369][ T9192] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.678030][ T9192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.787087][ T9192] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 460.445587][ T9200] syzkaller0: entered promiscuous mode [ 460.460103][ T5677] usb 2-1: USB disconnect, device number 18 [ 460.478314][ T9200] syzkaller0: entered allmulticast mode [ 461.141243][ T5580] Bluetooth: hci0: unexpected event for opcode 0x0406 [ 463.502637][ T9238] syzkaller0: entered promiscuous mode [ 463.525482][ T9238] syzkaller0: entered allmulticast mode [ 464.088134][ T29] audit: type=1326 audit(1779409438.386:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.0.1144" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 464.183643][ T29] audit: type=1326 audit(1779409438.386:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.0.1144" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 464.285140][ T29] audit: type=1326 audit(1779409438.396:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.0.1144" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71b61ab code=0x7ffc0000 [ 464.361606][ T29] audit: type=1326 audit(1779409438.396:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.0.1144" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 464.534895][ T29] audit: type=1326 audit(1779409438.396:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.0.1144" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 464.637609][ T29] audit: type=1326 audit(1779409438.436:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.0.1144" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=232 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 464.750027][ T29] audit: type=1326 audit(1779409438.436:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.0.1144" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 464.840266][ T29] audit: type=1326 audit(1779409438.456:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.0.1144" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 464.942606][ T29] audit: type=1326 audit(1779409438.456:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.0.1144" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 465.060164][ T29] audit: type=1326 audit(1779409438.466:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.0.1144" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 466.644700][ T9269] syzkaller0: entered promiscuous mode [ 466.667877][ T9269] syzkaller0: entered allmulticast mode [ 467.476397][ T9280] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1172'. [ 469.660031][ T9298] syzkaller0: entered promiscuous mode [ 469.686958][ T9298] syzkaller0: entered allmulticast mode [ 470.013888][ T9306] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1184'. [ 472.334718][ T9329] IPVS: Scheduler module ip_vs_ not found [ 472.625405][ T9335] syzkaller0: entered promiscuous mode [ 472.649932][ T9335] syzkaller0: entered allmulticast mode [ 472.913921][ T9340] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1198'. [ 473.759961][ T5681] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 473.955721][ T5681] usb 3-1: config 0 has no interfaces? [ 473.992816][ T5681] usb 3-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 474.018164][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.049386][ T5681] usb 3-1: Product: syz [ 474.069503][ T5681] usb 3-1: Manufacturer: syz [ 474.099739][ T5681] usb 3-1: SerialNumber: syz [ 474.129867][ T5681] usb 3-1: config 0 descriptor?? [ 475.023855][ T5681] usb 3-1: USB disconnect, device number 17 [ 475.684168][ T9371] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1210'. [ 477.075010][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 477.075099][ T29] audit: type=1326 audit(1779409451.376:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9355 comm="syz.1.1205" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 477.230978][ T29] audit: type=1326 audit(1779409451.426:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9355 comm="syz.1.1205" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 477.344665][ T29] audit: type=1326 audit(1779409451.536:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9355 comm="syz.1.1205" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=232 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 477.458416][ T29] audit: type=1326 audit(1779409451.536:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9355 comm="syz.1.1205" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 477.595796][ T29] audit: type=1326 audit(1779409451.566:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9355 comm="syz.1.1205" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 477.727566][ T29] audit: type=1326 audit(1779409451.576:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9355 comm="syz.1.1205" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 477.836237][ T29] audit: type=1326 audit(1779409451.576:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9355 comm="syz.1.1205" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 477.946593][ T29] audit: type=1326 audit(1779409451.576:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9355 comm="syz.1.1205" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 478.368289][ T5580] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 478.376909][ T5580] Bluetooth: hci2: Injecting HCI hardware error event [ 478.384776][ T5580] Bluetooth: hci2: hardware error 0x00 [ 478.977804][ T9404] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1223'. [ 479.030103][ T5683] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 479.211143][ T5683] usb 3-1: config 0 has no interfaces? [ 479.272361][ T5683] usb 3-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 479.300806][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.324525][ T5683] usb 3-1: Product: syz [ 479.347094][ T5683] usb 3-1: Manufacturer: syz [ 479.364733][ T5683] usb 3-1: SerialNumber: syz [ 479.403719][ T5683] usb 3-1: config 0 descriptor?? [ 479.866778][ T5683] usb 3-1: USB disconnect, device number 18 [ 480.448250][ T5580] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 481.860730][ T9442] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1235'. [ 481.946723][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1234'. [ 484.000639][ T5683] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 484.207303][ T5683] usb 4-1: config 0 has no interfaces? [ 484.250791][ T5683] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 484.276001][ T5683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.306939][ T5683] usb 4-1: Product: syz [ 484.318086][ T5683] usb 4-1: Manufacturer: syz [ 484.343178][ T5683] usb 4-1: SerialNumber: syz [ 484.406665][ T5683] usb 4-1: config 0 descriptor?? [ 485.039316][ T5677] usb 4-1: USB disconnect, device number 24 [ 485.573069][ T9482] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1247'. [ 486.287547][ T9493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1252'. [ 486.874865][ T5580] Bluetooth: hci4: unexpected event for opcode 0x0406 [ 487.588659][ T9505] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1256'. [ 488.524050][ T9517] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1259'. [ 489.988396][ T5677] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 490.195157][ T5677] usb 1-1: config 0 has no interfaces? [ 490.234089][ T5677] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 490.258090][ T5677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.275057][ T5677] usb 1-1: Product: syz [ 490.292165][ T5677] usb 1-1: Manufacturer: syz [ 490.303866][ T5677] usb 1-1: SerialNumber: syz [ 490.344048][ T5677] usb 1-1: config 0 descriptor?? [ 490.812940][ T5677] usb 1-1: USB disconnect, device number 16 [ 490.929233][ T5580] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 490.940352][ T5580] Bluetooth: hci4: Injecting HCI hardware error event [ 490.947834][ T5580] Bluetooth: hci4: hardware error 0x00 [ 491.273171][ T9546] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1268'. [ 491.928575][ T9552] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1271'. [ 491.983707][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1270'. [ 493.008149][ T5580] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 494.438192][ T5683] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 494.468813][ T9584] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1281'. [ 494.622672][ T5683] usb 3-1: config 0 has no interfaces? [ 494.659554][ T5683] usb 3-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 494.689900][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.716575][ T5683] usb 3-1: Product: syz [ 494.732247][ T5683] usb 3-1: Manufacturer: syz [ 494.757412][ T5683] usb 3-1: SerialNumber: syz [ 494.801730][ T5683] usb 3-1: config 0 descriptor?? [ 495.716911][ T9597] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1284'. [ 495.861061][ T5677] usb 3-1: USB disconnect, device number 19 [ 496.142627][ T29] audit: type=1326 audit(1779409470.436:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.3.1278" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0401c code=0x7ffc0000 [ 496.231180][ T29] audit: type=1326 audit(1779409470.476:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.3.1278" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71061ab code=0x7ffc0000 [ 496.323938][ T29] audit: type=1326 audit(1779409470.476:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.3.1278" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0401c code=0x7ffc0000 [ 496.392503][ T29] audit: type=1326 audit(1779409470.486:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.3.1278" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0401c code=0x7ffc0000 [ 496.457187][ T29] audit: type=1326 audit(1779409470.496:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.3.1278" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=232 compat=1 ip=0xf7f0401c code=0x7ffc0000 [ 496.568390][ T29] audit: type=1326 audit(1779409470.496:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.3.1278" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0401c code=0x7ffc0000 [ 496.693716][ T29] audit: type=1326 audit(1779409470.506:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.3.1278" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f0401c code=0x7ffc0000 [ 496.809156][ T29] audit: type=1326 audit(1779409470.506:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.3.1278" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0401c code=0x7ffc0000 [ 496.908235][ T29] audit: type=1326 audit(1779409470.506:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.3.1278" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0401c code=0x7ffc0000 [ 497.649135][ T5580] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 497.657697][ T5580] Bluetooth: hci3: Injecting HCI hardware error event [ 497.668431][ T5580] Bluetooth: hci3: hardware error 0x00 [ 498.107707][ T9617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1291'. [ 498.546803][ T9619] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1292'. [ 499.728350][ T5580] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 500.203175][ T5683] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 500.382489][ T9635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1299'. [ 500.407867][ T5683] usb 5-1: config 0 has no interfaces? [ 500.452677][ T5683] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 500.478338][ T5683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.489629][ T5683] usb 5-1: Product: syz [ 500.508193][ T5683] usb 5-1: Manufacturer: syz [ 500.529009][ T5683] usb 5-1: SerialNumber: syz [ 500.557483][ T5683] usb 5-1: config 0 descriptor?? [ 501.133437][ T9649] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1304'. [ 501.443145][ T5683] usb 5-1: USB disconnect, device number 17 [ 503.293902][ T9672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1310'. [ 503.775780][ T9679] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1312'. [ 504.408892][ T9683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1313'. [ 504.948447][ T9689] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1316'. [ 505.699269][ T5580] Bluetooth: hci0: unexpected event for opcode 0x0406 [ 505.850608][ T5683] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 506.043859][ T5683] usb 5-1: config 0 has no interfaces? [ 506.086852][ T5683] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 506.116175][ T5683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.148713][ T5683] usb 5-1: Product: syz [ 506.162456][ T5683] usb 5-1: Manufacturer: syz [ 506.178449][ T5683] usb 5-1: SerialNumber: syz [ 506.202832][ T5683] usb 5-1: config 0 descriptor?? [ 507.047064][ T5683] usb 5-1: USB disconnect, device number 18 [ 507.073637][ T9707] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1323'. [ 508.251423][ T9720] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1329'. [ 508.329431][ T29] audit: type=1326 audit(1779409482.636:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9694 comm="syz.0.1319" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 508.394303][ T9724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1328'. [ 508.438448][ T29] audit: type=1326 audit(1779409482.636:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9694 comm="syz.0.1319" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 508.501819][ T29] audit: type=1326 audit(1779409482.636:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9694 comm="syz.0.1319" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71b61ab code=0x7ffc0000 [ 508.612952][ T29] audit: type=1326 audit(1779409482.636:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9694 comm="syz.0.1319" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 508.717721][ T29] audit: type=1326 audit(1779409482.636:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9694 comm="syz.0.1319" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=232 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 508.818681][ T29] audit: type=1326 audit(1779409482.636:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9694 comm="syz.0.1319" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 508.925627][ T29] audit: type=1326 audit(1779409482.656:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9694 comm="syz.0.1319" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 509.073687][ T29] audit: type=1326 audit(1779409482.656:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9694 comm="syz.0.1319" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 509.228158][ T29] audit: type=1326 audit(1779409482.666:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9694 comm="syz.0.1319" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 509.874938][ T9738] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1334'. [ 510.921939][ T5677] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 511.097616][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.107225][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.130848][ T5677] usb 1-1: config 0 has no interfaces? [ 511.177216][ T5677] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 511.216142][ T5677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.243167][ T5677] usb 1-1: Product: syz [ 511.262797][ T5677] usb 1-1: Manufacturer: syz [ 511.279570][ T5677] usb 1-1: SerialNumber: syz [ 511.309830][ T5677] usb 1-1: config 0 descriptor?? [ 511.842887][ T9760] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1342'. [ 512.245257][ T5677] usb 1-1: USB disconnect, device number 17 [ 512.969130][ T9770] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1346'. [ 513.352488][ T5580] Bluetooth: hci0: unexpected event for opcode 0x0406 [ 513.642865][ T9776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1348'. [ 515.502802][ T9788] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1354'. [ 515.940854][ T29] audit: type=1326 audit(1779409490.246:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.0.1347" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 516.056809][ T29] audit: type=1326 audit(1779409490.266:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.0.1347" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 516.158198][ T29] audit: type=1326 audit(1779409490.276:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.0.1347" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71b61ab code=0x7ffc0000 [ 516.239149][ T29] audit: type=1326 audit(1779409490.276:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.0.1347" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 516.309655][ T29] audit: type=1326 audit(1779409490.286:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.0.1347" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 516.375100][ T29] audit: type=1326 audit(1779409490.286:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.0.1347" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=232 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 516.470590][ T29] audit: type=1326 audit(1779409490.286:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.0.1347" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 516.496237][ T5677] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 516.566904][ T29] audit: type=1326 audit(1779409490.286:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.0.1347" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 516.624643][ T9800] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1359'. [ 516.639102][ T29] audit: type=1326 audit(1779409490.286:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.0.1347" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 516.689283][ T5677] usb 2-1: config 0 has no interfaces? [ 516.723052][ T5677] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 516.756456][ T5677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.778194][ T29] audit: type=1326 audit(1779409490.286:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.0.1347" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 516.806254][ T5677] usb 2-1: Product: syz [ 516.828299][ T5677] usb 2-1: Manufacturer: syz [ 516.836911][ T5677] usb 2-1: SerialNumber: syz [ 516.873710][ T5677] usb 2-1: config 0 descriptor?? [ 517.895568][ T5677] usb 2-1: USB disconnect, device number 19 [ 518.491563][ T9822] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1366'. [ 518.754564][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1367'. [ 519.584389][ T9838] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1372'. [ 521.571299][ T9856] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1380'. [ 521.688175][ T5677] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 521.880290][ T5677] usb 1-1: config 0 has no interfaces? [ 521.919636][ T5677] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 521.963895][ T5677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.998431][ T5677] usb 1-1: Product: syz [ 522.014614][ T5677] usb 1-1: Manufacturer: syz [ 522.038571][ T5677] usb 1-1: SerialNumber: syz [ 522.077232][ T5677] usb 1-1: config 0 descriptor?? [ 522.386353][ T9867] smc: net device hsr0 applied user defined pnetid SYZ2 [ 523.033444][ T5683] usb 1-1: USB disconnect, device number 18 [ 523.250765][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 523.250837][ T29] audit: type=1326 audit(1779409497.556:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.4.1375" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f01c code=0x7ffc0000 [ 523.341955][ T29] audit: type=1326 audit(1779409497.556:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.4.1375" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71861ab code=0x7ffc0000 [ 523.396652][ T29] audit: type=1326 audit(1779409497.556:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.4.1375" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f01c code=0x7ffc0000 [ 523.456330][ T29] audit: type=1326 audit(1779409497.556:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.4.1375" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f01c code=0x7ffc0000 [ 523.511420][ T29] audit: type=1326 audit(1779409497.556:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.4.1375" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=232 compat=1 ip=0xf704f01c code=0x7ffc0000 [ 523.609788][ T29] audit: type=1326 audit(1779409497.556:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.4.1375" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f01c code=0x7ffc0000 [ 523.708857][ T29] audit: type=1326 audit(1779409497.556:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.4.1375" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704f01c code=0x7ffc0000 [ 523.819323][ T29] audit: type=1326 audit(1779409497.556:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.4.1375" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f01c code=0x7ffc0000 [ 523.925419][ T29] audit: type=1326 audit(1779409497.556:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.4.1375" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f01c code=0x7ffc0000 [ 524.041784][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1391'. [ 524.610255][ T5580] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 524.621382][ T5580] Bluetooth: hci1: Injecting HCI hardware error event [ 524.629010][ T5580] Bluetooth: hci1: hardware error 0x00 [ 525.173946][ T9899] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1395'. [ 526.688569][ T5580] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 526.868315][ T5681] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 527.072331][ T5681] usb 5-1: config 0 has no interfaces? [ 527.121396][ T5681] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 527.149064][ T5681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.168156][ T5681] usb 5-1: Product: syz [ 527.172581][ T5681] usb 5-1: Manufacturer: syz [ 527.177350][ T5681] usb 5-1: SerialNumber: syz [ 527.211439][ T5681] usb 5-1: config 0 descriptor?? [ 528.136644][ T9935] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1407'. [ 528.167493][ T5677] usb 5-1: USB disconnect, device number 19 [ 528.997667][ T9949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1411'. [ 529.067623][ T9941] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.075794][ T9941] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.034151][ T29] audit: type=1326 audit(1779409504.336:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.1.1406" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 530.127453][ T29] audit: type=1326 audit(1779409504.336:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.1.1406" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71661ab code=0x7ffc0000 [ 530.266593][ T29] audit: type=1326 audit(1779409504.336:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.1.1406" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 530.360536][ T29] audit: type=1326 audit(1779409504.336:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.1.1406" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=232 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 530.480617][ T29] audit: type=1326 audit(1779409504.336:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.1.1406" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 530.585011][ T29] audit: type=1326 audit(1779409504.336:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.1.1406" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 530.661658][ T29] audit: type=1326 audit(1779409504.336:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.1.1406" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 530.738611][ T29] audit: type=1326 audit(1779409504.336:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.1.1406" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 530.815810][ T29] audit: type=1326 audit(1779409504.336:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.1.1406" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 531.511748][ T9975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1419'. [ 531.946409][ T9978] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1420'. [ 532.609149][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 532.827018][ T9] usb 3-1: config 0 has no interfaces? [ 532.882811][ T9] usb 3-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 532.925266][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.972644][ T9] usb 3-1: Product: syz [ 532.994252][ T9] usb 3-1: Manufacturer: syz [ 533.013657][ T9] usb 3-1: SerialNumber: syz [ 533.067596][ T9] usb 3-1: config 0 descriptor?? [ 533.143170][T10002] netlink: 'syz.3.1426': attribute type 10 has an invalid length. [ 533.387615][T10002] team0: Port device wlan0 added [ 534.167175][ T5678] usb 3-1: USB disconnect, device number 20 [ 534.793132][T10023] IPVS: Scheduler module ip_vs_ not found [ 535.131461][T10031] vxcan0: tx drop: invalid da for name 0x00000000000000c7 [ 535.432654][T10035] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1436'. [ 535.643716][T10037] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1437'. [ 536.381120][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880525b2a00: rx timeout, send abort [ 536.881972][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888052602a00: rx timeout, send abort [ 536.891097][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880525b2a00: abort rx timeout. Force session deactivation [ 537.251614][T10058] IPVS: Scheduler module ip_vs_ not found [ 537.290289][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 537.390349][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805260f200: rx timeout, send abort [ 537.401648][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888052602a00: abort rx timeout. Force session deactivation [ 537.450516][ T29] audit: type=1326 audit(1779409511.756:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10028 comm="syz.1.1433" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 537.496433][ T9] usb 4-1: config 0 has no interfaces? [ 537.518398][ T9] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 537.538671][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.547168][ T29] audit: type=1326 audit(1779409511.776:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10028 comm="syz.1.1433" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 537.578291][ T9] usb 4-1: Product: syz [ 537.584746][ T9] usb 4-1: Manufacturer: syz [ 537.612624][ T9] usb 4-1: SerialNumber: syz [ 537.635867][ T9] usb 4-1: config 0 descriptor?? [ 537.899149][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805260f200: abort rx timeout. Force session deactivation [ 538.320876][T10072] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1450'. [ 538.494009][ T5678] usb 4-1: USB disconnect, device number 25 [ 538.522540][T10074] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1451'. [ 540.277755][T10091] IPVS: Scheduler module ip_vs_ not found [ 540.808999][T10104] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1462'. [ 540.874008][T10105] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1463'. [ 541.368979][ T5580] Bluetooth: hci0: unexpected event for opcode 0x0406 [ 541.698244][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 541.890151][ T9] usb 4-1: config 0 has no interfaces? [ 541.937403][ T9] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 541.971087][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.992316][ T9] usb 4-1: Product: syz [ 542.001526][ T9] usb 4-1: Manufacturer: syz [ 542.014548][ T9] usb 4-1: SerialNumber: syz [ 542.051998][ T9] usb 4-1: config 0 descriptor?? [ 542.993039][ T9] usb 4-1: USB disconnect, device number 26 [ 543.815767][ T29] audit: type=1326 audit(1779409518.106:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10111 comm="syz.0.1465" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 543.891976][ T29] audit: type=1326 audit(1779409518.146:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10111 comm="syz.0.1465" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 544.142215][T10142] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1476'. [ 544.166979][T10143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1475'. [ 544.718948][T10150] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1478'. [ 545.149795][T10147] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.158439][T10147] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.784399][T10147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.886914][T10147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.674532][ T80] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.715867][ T80] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.769134][ T80] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.798959][ T80] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.558163][T10151] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 547.714812][T10177] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1488'. [ 547.746697][T10151] usb 5-1: config 0 has no interfaces? [ 547.770529][T10174] syzkaller0: entered promiscuous mode [ 547.782287][T10151] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 547.808518][T10151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.809296][T10174] syzkaller0: entered allmulticast mode [ 547.822619][T10151] usb 5-1: Product: syz [ 547.832997][T10151] usb 5-1: Manufacturer: syz [ 547.848583][T10151] usb 5-1: SerialNumber: syz [ 547.871412][T10151] usb 5-1: config 0 descriptor?? [ 548.238367][ T5580] Bluetooth: hci0: unexpected event for opcode 0x0406 [ 548.721754][T10151] usb 5-1: USB disconnect, device number 20 [ 549.040104][T10195] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1495'. [ 549.079045][T10194] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1493'. [ 550.406165][T10212] netlink: 'syz.3.1501': attribute type 1 has an invalid length. [ 550.458243][T10212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1501'. [ 550.502889][T10151] IPVS: starting estimator thread 0... [ 550.628641][T10215] IPVS: using max 240 ests per chain, 12000 per kthread [ 550.879690][ T29] audit: type=1326 audit(1779409525.176:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.0.1490" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 550.890217][T10223] vxcan0: tx drop: invalid da for name 0x00000000000000c7 [ 550.964141][ T29] audit: type=1326 audit(1779409525.176:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.0.1490" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 551.544391][T10230] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1507'. [ 551.585489][T10231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1508'. [ 552.180986][T10151] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 552.388175][T10151] usb 4-1: config 0 has no interfaces? [ 552.427808][T10151] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 552.465531][T10151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.481872][T10151] usb 4-1: Product: syz [ 552.492786][T10151] usb 4-1: Manufacturer: syz [ 552.504259][T10151] usb 4-1: SerialNumber: syz [ 552.537076][T10151] usb 4-1: config 0 descriptor?? [ 552.948701][T10246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1514'. [ 553.475363][ T5677] usb 4-1: USB disconnect, device number 27 [ 554.268649][T10261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1520'. [ 554.634701][T10263] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1521'. [ 554.855771][ T5580] Bluetooth: hci0: unexpected event for opcode 0x0406 [ 554.913486][ T29] audit: type=1326 audit(1779409529.206:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10266 comm="syz.0.1523" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 555.056925][ T29] audit: type=1326 audit(1779409529.216:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10266 comm="syz.0.1523" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 555.156607][ T29] audit: type=1326 audit(1779409529.246:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10266 comm="syz.0.1523" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71b61ab code=0x7ffc0000 [ 555.270015][ T29] audit: type=1326 audit(1779409529.256:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10266 comm="syz.0.1523" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 555.386825][ T29] audit: type=1326 audit(1779409529.256:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10266 comm="syz.0.1523" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 555.456733][ T29] audit: type=1326 audit(1779409529.266:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10266 comm="syz.0.1523" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=232 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 555.528451][ T29] audit: type=1326 audit(1779409529.266:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10266 comm="syz.0.1523" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 555.618202][ T29] audit: type=1326 audit(1779409529.276:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10266 comm="syz.0.1523" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 556.558566][ T5677] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 556.747488][ T5677] usb 2-1: config 0 has no interfaces? [ 556.766562][ T5677] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 556.807603][ T5677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.835266][ T5677] usb 2-1: Product: syz [ 556.853645][ T5677] usb 2-1: Manufacturer: syz [ 556.872891][ T5677] usb 2-1: SerialNumber: syz [ 556.915084][ T5677] usb 2-1: config 0 descriptor?? [ 557.618646][T10302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1535'. [ 558.015100][ T5677] usb 2-1: USB disconnect, device number 20 [ 558.169500][ T4873] Bluetooth: hci0: unexpected event for opcode 0x0406 [ 558.194054][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 558.194131][ T29] audit: type=1326 audit(1779409532.496:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10312 comm="syz.0.1538" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 558.237412][ T29] audit: type=1326 audit(1779409532.536:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10312 comm="syz.0.1538" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 558.366972][ T29] audit: type=1326 audit(1779409532.536:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10312 comm="syz.0.1538" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71b61ab code=0x7ffc0000 [ 558.546579][ T29] audit: type=1326 audit(1779409532.536:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10312 comm="syz.0.1538" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 558.660746][ T29] audit: type=1326 audit(1779409532.536:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10312 comm="syz.0.1538" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 558.798448][ T29] audit: type=1326 audit(1779409532.536:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10312 comm="syz.0.1538" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=232 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 558.883889][ T29] audit: type=1326 audit(1779409532.536:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10312 comm="syz.0.1538" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 559.021591][ T29] audit: type=1326 audit(1779409532.536:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10312 comm="syz.0.1538" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 559.114063][ T29] audit: type=1326 audit(1779409532.536:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10312 comm="syz.0.1538" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 559.222438][ T29] audit: type=1326 audit(1779409532.536:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10312 comm="syz.0.1538" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb901c code=0x7ffc0000 [ 560.067782][T10344] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 560.467256][ T4873] Bluetooth: hci0: unexpected event for opcode 0x0406 [ 560.636287][T10351] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1554'. [ 560.675692][T10351] NCSI netlink: No device for ifindex 566712438 [ 561.347285][T10355] IPVS: persistence engine module ip_vs_pe_‘‚ not found [ 561.372154][T10151] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 561.406354][T10366] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 561.584896][T10151] usb 5-1: config 0 has no interfaces? [ 561.634631][T10151] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 561.674609][T10151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.711470][T10151] usb 5-1: Product: syz [ 561.741843][T10151] usb 5-1: Manufacturer: syz [ 561.756049][T10151] usb 5-1: SerialNumber: syz [ 561.806147][T10151] usb 5-1: config 0 descriptor?? [ 562.508909][T10380] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 562.855939][T10151] usb 5-1: USB disconnect, device number 21 [ 563.083175][T10392] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1567'. [ 563.937448][T10401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1571'. [ 563.954830][T10402] netlink: 'syz.4.1570': attribute type 13 has an invalid length. [ 564.022355][T10402] netlink: 'syz.4.1570': attribute type 17 has an invalid length. [ 564.993899][T10400] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.002452][T10400] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.965295][T10400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.060520][T10423] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1578'. [ 566.123136][T10400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.022797][ T5681] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 567.255324][ T5681] usb 3-1: config 0 has no interfaces? [ 567.273040][ T5681] usb 3-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 567.288720][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.302545][ T5681] usb 3-1: Product: syz [ 567.307280][ T5681] usb 3-1: Manufacturer: syz [ 567.315654][ T5681] usb 3-1: SerialNumber: syz [ 567.329463][ T5681] usb 3-1: config 0 descriptor?? [ 568.118499][T10402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.171956][T10402] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.255697][T10402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.315550][ T5677] usb 3-1: USB disconnect, device number 21 [ 568.615147][T10402] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.622921][T10402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.676959][T10402] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.684856][T10402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.895333][T10402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.975591][T10402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.199349][T10402] veth1_vlan: left promiscuous mode [ 569.218643][T10402] veth0_vlan: left promiscuous mode [ 569.232019][T10402] veth0_vlan: entered promiscuous mode [ 569.271243][T10402] veth1_vlan: entered promiscuous mode [ 569.317046][T10402] veth1_macvtap: left promiscuous mode [ 569.333640][T10402] veth0_macvtap: left promiscuous mode [ 569.352381][T10402] veth0_macvtap: entered promiscuous mode [ 569.420583][T10402] veth1_macvtap: entered promiscuous mode [ 569.461937][T10402] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 569.503800][T10402] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 569.558047][T10402] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 569.623063][T10402] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 569.712964][T10402] ip6tnl1: left allmulticast mode [ 569.735205][T10402] ip6tnl2: left allmulticast mode [ 570.093240][T10423] ip6tnl2: entered allmulticast mode [ 570.299971][ T1141] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 571.366693][T10461] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1588'. [ 571.442414][T10459] syzkaller0: entered promiscuous mode [ 571.460904][T10459] syzkaller0: entered allmulticast mode [ 571.759165][T10465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1589'. [ 572.535659][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.545874][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.470773][T10444] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1583'. [ 573.635710][T10408] Set syz1 is full, maxelem 65536 reached [ 573.688871][ T5677] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 573.900629][ T5677] usb 2-1: config 0 has no interfaces? [ 573.921080][ T5677] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 573.950021][ T5677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.990801][ T5677] usb 2-1: Product: syz [ 574.016029][ T5677] usb 2-1: Manufacturer: syz [ 574.037676][ T5677] usb 2-1: SerialNumber: syz [ 574.080061][ T5677] usb 2-1: config 0 descriptor?? [ 574.097055][T10478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1595'. [ 574.185493][T10478] ip6tnl3: entered allmulticast mode [ 574.528607][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 574.932327][ T9] usb 2-1: USB disconnect, device number 21 [ 575.219573][T10492] netlink: 264 bytes leftover after parsing attributes in process `syz.3.1599'. [ 575.406432][T10494] syzkaller0: entered promiscuous mode [ 575.426799][T10494] syzkaller0: entered allmulticast mode [ 575.683979][T10500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1602'. [ 576.031661][T10505] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1605'. [ 576.814585][T10517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1608'. [ 576.910819][T10517] ip6tnl3: entered allmulticast mode [ 577.428554][T10525] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1613'. [ 578.160328][ T5677] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 578.185406][T10538] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1618'. [ 578.332833][T10532] syzkaller0: entered promiscuous mode [ 578.340394][T10532] syzkaller0: entered allmulticast mode [ 578.364337][ T5677] usb 2-1: config 0 has no interfaces? [ 578.405812][ T5677] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 578.431560][ T5677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.452527][ T5677] usb 2-1: Product: syz [ 578.504105][ T5677] usb 2-1: Manufacturer: syz [ 578.527207][ T5677] usb 2-1: SerialNumber: syz [ 578.569063][ T5677] usb 2-1: config 0 descriptor?? [ 579.519246][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1623'. [ 579.526308][ T9] usb 2-1: USB disconnect, device number 22 [ 579.637081][T10555] ip6tnl3: entered allmulticast mode [ 579.646934][T10560] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1625'. [ 580.136162][T10566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1627'. [ 580.899890][T10575] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1630'. [ 581.982530][T10581] syzkaller0: entered promiscuous mode [ 582.012436][T10581] syzkaller0: entered allmulticast mode [ 582.049244][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1636'. [ 582.171496][T10595] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1637'. [ 582.196105][T10593] ip6tnl4: entered allmulticast mode [ 582.958272][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 583.146630][ T9] usb 2-1: config 0 has no interfaces? [ 583.185276][ T9] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 583.202623][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.212455][ T9] usb 2-1: Product: syz [ 583.220654][ T9] usb 2-1: Manufacturer: syz [ 583.228813][ T9] usb 2-1: SerialNumber: syz [ 583.266472][ T9] usb 2-1: config 0 descriptor?? [ 583.410601][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 583.620367][T10614] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1644'. [ 584.217152][ T5677] usb 2-1: USB disconnect, device number 23 [ 584.461489][T10630] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1649'. [ 585.156851][T10638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1651'. [ 586.030740][T10652] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1658'. [ 586.472796][T10658] netlink: 264 bytes leftover after parsing attributes in process `syz.3.1660'. [ 587.080745][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1664'. [ 587.168579][ T5677] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 587.194803][T10669] ip6tnl5: entered allmulticast mode [ 587.353895][ T5677] usb 1-1: config 0 has no interfaces? [ 587.394798][ T5677] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 587.420018][ T5677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.442176][ T5677] usb 1-1: Product: syz [ 587.454478][ T5677] usb 1-1: Manufacturer: syz [ 587.473710][ T5677] usb 1-1: SerialNumber: syz [ 587.508810][ T5677] usb 1-1: config 0 descriptor?? [ 588.516421][ T5677] usb 1-1: USB disconnect, device number 19 [ 588.800852][T10692] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1671'. [ 589.015984][T10695] syzkaller0: entered promiscuous mode [ 589.036065][T10695] syzkaller0: entered allmulticast mode [ 589.419100][T10700] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1674'. [ 591.854662][T10739] syzkaller0: entered promiscuous mode [ 591.865655][T10739] syzkaller0: entered allmulticast mode [ 591.926913][T10733] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1686'. [ 591.970723][ T5678] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 592.177388][ T5678] usb 5-1: config 0 has no interfaces? [ 592.232381][ T5678] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 592.273563][ T5678] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.304497][ T5678] usb 5-1: Product: syz [ 592.323772][ T5678] usb 5-1: Manufacturer: syz [ 592.343767][ T5678] usb 5-1: SerialNumber: syz [ 592.475444][ T5678] usb 5-1: config 0 descriptor?? [ 592.804388][T10747] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1691'. [ 593.648716][ T9] usb 5-1: USB disconnect, device number 22 [ 595.512664][T10775] syzkaller0: entered promiscuous mode [ 595.534643][T10775] syzkaller0: entered allmulticast mode [ 595.830616][T10780] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1702'. [ 596.121964][T10782] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1703'. [ 597.151453][T10151] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 597.354035][T10151] usb 5-1: config 0 has no interfaces? [ 597.383737][T10151] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 597.399794][T10151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.412684][T10151] usb 5-1: Product: syz [ 597.417353][T10151] usb 5-1: Manufacturer: syz [ 597.438696][T10151] usb 5-1: SerialNumber: syz [ 597.459913][T10151] usb 5-1: config 0 descriptor?? [ 598.343592][T10817] syzkaller0: entered promiscuous mode [ 598.355802][T10817] syzkaller0: entered allmulticast mode [ 598.466340][ T5678] usb 5-1: USB disconnect, device number 23 [ 599.196000][T10828] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1718'. [ 600.688447][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 601.113765][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888056280a00: rx timeout, send abort [ 601.442204][T10852] netlink: 'syz.2.1725': attribute type 13 has an invalid length. [ 601.622556][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888056280a00: abort rx timeout. Force session deactivation [ 603.181100][T10864] syzkaller0: entered promiscuous mode [ 603.202138][T10864] syzkaller0: entered allmulticast mode [ 603.339946][T10151] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 603.558861][T10151] usb 3-1: config 0 has no interfaces? [ 603.597419][T10151] usb 3-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 603.619561][T10151] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.644885][T10151] usb 3-1: Product: syz [ 603.684467][T10151] usb 3-1: Manufacturer: syz [ 603.699412][T10151] usb 3-1: SerialNumber: syz [ 603.724323][T10151] usb 3-1: config 0 descriptor?? [ 604.792297][T10151] usb 3-1: USB disconnect, device number 22 [ 605.034475][T10889] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1738'. [ 606.299279][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880527fc400: rx timeout, send abort [ 606.360109][T10909] syzkaller0: entered promiscuous mode [ 606.366266][T10909] syzkaller0: entered allmulticast mode [ 606.825613][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880527fc400: abort rx timeout. Force session deactivation [ 608.928374][T10151] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 609.109392][T10151] usb 1-1: config 0 has no interfaces? [ 609.141946][T10151] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 609.160184][T10151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.188108][T10151] usb 1-1: Product: syz [ 609.194402][T10151] usb 1-1: Manufacturer: syz [ 609.209462][T10151] usb 1-1: SerialNumber: syz [ 609.227051][T10151] usb 1-1: config 0 descriptor?? [ 609.389537][T10930] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1750'. [ 609.886907][T10946] syzkaller0: entered promiscuous mode [ 609.912569][T10946] syzkaller0: entered allmulticast mode [ 610.205621][T10151] usb 1-1: USB disconnect, device number 20 [ 611.250351][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807d11fc00: rx timeout, send abort [ 611.763671][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807d11fc00: abort rx timeout. Force session deactivation [ 612.903147][T10988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1769'. [ 613.005743][T10988] ip6tnl2: entered allmulticast mode [ 613.209636][T10991] syzkaller0: entered promiscuous mode [ 613.230905][T10991] syzkaller0: entered allmulticast mode [ 613.840114][ T5678] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 613.857598][T10984] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1768'. [ 614.034487][ T5678] usb 1-1: config 0 has no interfaces? [ 614.057254][ T5678] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 614.102951][ T5678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.127457][ T5678] usb 1-1: Product: syz [ 614.144664][ T5678] usb 1-1: Manufacturer: syz [ 614.154330][ T5678] usb 1-1: SerialNumber: syz [ 614.184050][ T5678] usb 1-1: config 0 descriptor?? [ 614.816628][ T5678] usb 1-1: USB disconnect, device number 21 [ 615.432333][T11015] hsr0: entered promiscuous mode [ 616.243711][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807d107000: rx timeout, send abort [ 616.294612][T11014] hsr0: left promiscuous mode [ 616.752364][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807d107000: abort rx timeout. Force session deactivation [ 617.216071][T11025] ip6tnl3: entered allmulticast mode [ 618.172585][T11029] syzkaller0: entered promiscuous mode [ 618.198951][T11029] syzkaller0: entered allmulticast mode [ 619.140844][T10151] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 619.339999][T10151] usb 5-1: config 0 has no interfaces? [ 619.377056][T10151] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 619.412621][T10151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.444122][T10151] usb 5-1: Product: syz [ 619.456463][T10151] usb 5-1: Manufacturer: syz [ 619.466850][T10151] usb 5-1: SerialNumber: syz [ 619.505045][T10151] usb 5-1: config 0 descriptor?? [ 619.800622][T11053] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1794'. [ 620.508757][ T5678] usb 5-1: USB disconnect, device number 24 [ 621.781020][T11074] syzkaller0: entered promiscuous mode [ 621.815676][T11074] syzkaller0: entered allmulticast mode [ 624.556025][T10151] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 624.754027][T10151] usb 4-1: config 0 has no interfaces? [ 624.786977][T10151] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 624.821789][T10151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.841023][T10151] usb 4-1: Product: syz [ 624.853497][T10151] usb 4-1: Manufacturer: syz [ 624.860139][T10151] usb 4-1: SerialNumber: syz [ 624.879413][T10151] usb 4-1: config 0 descriptor?? [ 625.066432][T11091] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1806'. [ 625.797680][T10151] usb 4-1: USB disconnect, device number 28 [ 626.918298][T11121] syzkaller0: entered promiscuous mode [ 626.931912][T11121] syzkaller0: entered allmulticast mode [ 628.529389][T11151] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1826'. [ 628.929691][T10151] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 629.115038][T10151] usb 5-1: config 0 has no interfaces? [ 629.146795][T10151] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 629.166539][T10151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.187722][T10151] usb 5-1: Product: syz [ 629.210823][T10151] usb 5-1: Manufacturer: syz [ 629.234457][T10151] usb 5-1: SerialNumber: syz [ 629.256870][T10151] usb 5-1: config 0 descriptor?? [ 629.989009][T11164] syzkaller0: entered promiscuous mode [ 630.019117][T11164] syzkaller0: entered allmulticast mode [ 630.508236][ T5678] usb 5-1: USB disconnect, device number 25 [ 631.579769][T11186] syzkaller0: entered promiscuous mode [ 631.596299][T11186] syzkaller0: entered allmulticast mode [ 631.623342][T11197] netlink: 'syz.2.1838': attribute type 13 has an invalid length. [ 632.495156][T11208] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1842'. [ 633.328498][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 633.991833][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 633.999498][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.596017][ T5678] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 634.820012][ T5678] usb 3-1: config 0 has no interfaces? [ 634.876278][ T5678] usb 3-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 634.909075][ T5678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.934782][ T5678] usb 3-1: Product: syz [ 634.958741][ T5678] usb 3-1: Manufacturer: syz [ 634.974377][ T5678] usb 3-1: SerialNumber: syz [ 635.036751][ T5678] usb 3-1: config 0 descriptor?? [ 635.759279][ T5678] usb 3-1: USB disconnect, device number 23 [ 635.973823][T11249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1855'. [ 636.160719][T11247] syzkaller0: entered promiscuous mode [ 636.188476][T11247] syzkaller0: entered allmulticast mode [ 636.576945][T11263] netlink: 'syz.0.1857': attribute type 13 has an invalid length. [ 636.692256][T11262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1858'. [ 637.053054][T11262] bond0: option lp_interval: invalid value (0) [ 637.072788][T11262] bond0: option lp_interval: allowed values 1 - 2147483647 [ 637.770773][T11275] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1861'. [ 639.233372][T11295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1866'. [ 640.558445][ T5678] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 640.613217][T11306] syzkaller0: entered promiscuous mode [ 640.648179][T11306] syzkaller0: entered allmulticast mode [ 640.743308][ T5678] usb 4-1: config 0 has no interfaces? [ 640.780016][ T5678] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 640.808427][ T5678] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.827635][ T5678] usb 4-1: Product: syz [ 640.838249][ T5678] usb 4-1: Manufacturer: syz [ 640.860492][ T5678] usb 4-1: SerialNumber: syz [ 640.904459][ T5678] usb 4-1: config 0 descriptor?? [ 641.903635][ T5678] usb 4-1: USB disconnect, device number 29 [ 642.069916][T11328] netlink: 'syz.1.1874': attribute type 13 has an invalid length. [ 643.356530][T11337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1876'. [ 644.067381][T11347] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1879'. [ 644.779748][T11353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1882'. [ 645.513529][T11357] syzkaller0: entered promiscuous mode [ 645.544231][T11357] syzkaller0: entered allmulticast mode [ 645.708831][ T5678] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 645.933030][ T5678] usb 1-1: config 0 has no interfaces? [ 645.976118][ T5678] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 646.005792][ T5678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.023819][ T5678] usb 1-1: Product: syz [ 646.032179][ T5678] usb 1-1: Manufacturer: syz [ 646.047564][ T5678] usb 1-1: SerialNumber: syz [ 646.082705][ T5678] usb 1-1: config 0 descriptor?? [ 647.178118][T10151] usb 1-1: USB disconnect, device number 22 [ 647.204716][T11381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'. [ 649.105834][T11416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1900'. [ 649.461259][T11411] syzkaller0: entered promiscuous mode [ 649.495670][T11411] syzkaller0: entered allmulticast mode [ 650.879596][T11432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1904'. [ 651.558212][ T5677] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 651.753343][ T5677] usb 1-1: config 0 has no interfaces? [ 651.787002][ T5677] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 651.819077][ T5677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.850524][ T5677] usb 1-1: Product: syz [ 651.870318][ T5677] usb 1-1: Manufacturer: syz [ 651.887323][ T5677] usb 1-1: SerialNumber: syz [ 651.934438][ T5677] usb 1-1: config 0 descriptor?? [ 652.037285][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 652.037359][ T29] audit: type=1326 audit(1779409626.336:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11443 comm="syz.2.1908" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb801c code=0x7ffc0000 [ 652.139447][ T29] audit: type=1326 audit(1779409626.376:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11443 comm="syz.2.1908" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71b61ab code=0x7ffc0000 [ 652.265887][ T29] audit: type=1326 audit(1779409626.376:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11443 comm="syz.2.1908" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb801c code=0x7ffc0000 [ 652.379258][ T29] audit: type=1326 audit(1779409626.376:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11443 comm="syz.2.1908" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb801c code=0x7ffc0000 [ 652.476864][ T29] audit: type=1326 audit(1779409626.376:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11443 comm="syz.2.1908" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=232 compat=1 ip=0xf7fb801c code=0x7ffc0000 [ 652.605217][ T29] audit: type=1326 audit(1779409626.386:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11443 comm="syz.2.1908" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb801c code=0x7ffc0000 [ 652.722339][ T29] audit: type=1326 audit(1779409626.386:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11443 comm="syz.2.1908" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb801c code=0x7ffc0000 [ 652.810851][ T29] audit: type=1326 audit(1779409626.386:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11443 comm="syz.2.1908" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb801c code=0x7ffc0000 [ 652.909130][ T29] audit: type=1326 audit(1779409626.396:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11443 comm="syz.2.1908" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb801c code=0x7ffc0000 [ 652.945803][T10151] usb 1-1: USB disconnect, device number 23 [ 653.083164][T11458] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1911'. [ 653.538646][T11465] syzkaller0: entered promiscuous mode [ 653.544656][T11465] syzkaller0: entered allmulticast mode [ 653.618772][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880526e4400: rx timeout, send abort [ 654.127469][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880526e4400: abort rx timeout. Force session deactivation [ 655.010158][T11485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1917'. [ 657.742902][T11521] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1926'. [ 657.761508][T10151] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 657.946647][T10151] usb 5-1: config 0 has no interfaces? [ 657.987559][T10151] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 658.012203][T10151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.036090][T10151] usb 5-1: Product: syz [ 658.054032][T10151] usb 5-1: Manufacturer: syz [ 658.067504][T10151] usb 5-1: SerialNumber: syz [ 658.101482][T10151] usb 5-1: config 0 descriptor?? [ 659.007339][T10151] usb 5-1: USB disconnect, device number 26 [ 659.217470][T11527] syzkaller0: entered promiscuous mode [ 659.232220][T11527] syzkaller0: entered allmulticast mode [ 662.236705][T11564] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1940'. [ 662.289891][ T5677] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 662.360566][T11566] syzkaller0: entered promiscuous mode [ 662.366965][T11566] syzkaller0: entered allmulticast mode [ 662.487027][ T5677] usb 4-1: config 0 has no interfaces? [ 662.532939][ T5677] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 662.566886][ T5677] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.596850][ T5677] usb 4-1: Product: syz [ 662.610825][ T5677] usb 4-1: Manufacturer: syz [ 662.630969][ T5677] usb 4-1: SerialNumber: syz [ 662.676873][ T5677] usb 4-1: config 0 descriptor?? [ 663.678995][T10151] usb 4-1: USB disconnect, device number 30 [ 666.957586][T11617] syzkaller0: entered promiscuous mode [ 667.002725][T11617] syzkaller0: entered allmulticast mode [ 667.076561][T11621] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1958'. [ 667.592244][T11627] Driver unsupported XDP return value 0 on prog (id 231) dev N/A, expect packet loss! [ 667.676856][T11626] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 668.762083][T11644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1968'. [ 670.001176][T11662] syzkaller0: entered promiscuous mode [ 670.032955][T11662] syzkaller0: entered allmulticast mode [ 670.094100][T11664] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1974'. [ 671.192377][T11677] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1976'. [ 672.390528][T11692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1981'. [ 673.549990][T11705] syzkaller0: entered promiscuous mode [ 673.555975][T11705] syzkaller0: entered allmulticast mode [ 673.631026][T11706] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1986'. [ 676.192190][T11736] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1995'. [ 676.846831][T11744] syzkaller0: entered promiscuous mode [ 676.874088][T11744] syzkaller0: entered allmulticast mode [ 677.721428][T11755] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2002'. [ 679.761729][T11779] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2010'. [ 680.450672][T11784] syzkaller0: entered promiscuous mode [ 680.491732][T11784] syzkaller0: entered allmulticast mode [ 681.456906][T11803] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2018'. [ 682.813041][T11822] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2025'. [ 683.281593][T11824] syzkaller0: entered promiscuous mode [ 683.303702][T11824] syzkaller0: entered allmulticast mode [ 683.903561][T11829] syzkaller0: entered promiscuous mode [ 683.940760][T11829] syzkaller0: entered allmulticast mode [ 684.920956][T11846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2032'. [ 685.163114][T11848] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2035'. [ 685.332976][T11850] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2036'. [ 685.753380][T11855] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2038'. [ 686.628814][T11864] syzkaller0: entered promiscuous mode [ 686.634675][T11864] syzkaller0: entered allmulticast mode [ 687.006934][T11871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2044'. [ 687.647431][T11881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2049'. [ 687.736213][T11883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2048'. [ 688.125648][T11891] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2052'. [ 688.320585][T11892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2051'. [ 688.638857][T11885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.724448][T11885] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.950394][T11885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.537047][T11885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 689.609164][T11885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.780082][T11885] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 689.861166][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.868595][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.939663][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.947026][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.314976][T11914] syzkaller0: entered promiscuous mode [ 691.345109][T11914] syzkaller0: entered allmulticast mode [ 692.644369][T11935] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2066'. [ 692.720706][T11938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2065'. [ 694.886352][T11956] syzkaller0: entered promiscuous mode [ 694.906498][T11956] syzkaller0: entered allmulticast mode [ 695.376863][T11966] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2078'. [ 695.428793][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.436473][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.972859][T10151] IPVS: starting estimator thread 0... [ 696.088670][T11979] IPVS: using max 240 ests per chain, 12000 per kthread [ 697.386638][T12000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2086'. [ 698.141992][T12008] syzkaller0: entered promiscuous mode [ 698.161952][T12008] syzkaller0: entered allmulticast mode [ 698.799067][T12019] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2093'. [ 700.530444][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 700.651564][T12037] syzkaller0: entered promiscuous mode [ 700.670212][T12037] syzkaller0: entered allmulticast mode [ 701.792075][T12055] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2107'. [ 703.847919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 704.745940][T12099] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2122'. [ 705.374460][T12108] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2124'. [ 706.024167][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2125'. [ 707.183789][T12127] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2132'. [ 707.342819][T12133] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2134'. [ 707.615805][T12137] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2135'. [ 709.388044][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888056188800: rx timeout, send abort [ 709.896754][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888056188800: abort rx timeout. Force session deactivation [ 710.094458][T12164] netlink: 'syz.0.2145': attribute type 1 has an invalid length. [ 710.186811][T12166] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2146'. [ 710.215868][T12164] 8021q: adding VLAN 0 to HW filter on device bond2 [ 710.836307][T12175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2147'. [ 713.166288][T12208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2156'. [ 713.268623][T12210] netlink: 'syz.1.2158': attribute type 1 has an invalid length. [ 713.637085][T12210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 716.321043][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880561eda00: rx timeout, send abort [ 716.651273][T12254] netlink: 'syz.2.2174': attribute type 1 has an invalid length. [ 716.829785][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880561eda00: abort rx timeout. Force session deactivation [ 717.069497][T12254] 8021q: adding VLAN 0 to HW filter on device bond1 [ 717.880188][T12273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2180'. [ 719.357099][T12289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2185'. [ 719.415572][T12289] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.536719][T12289] bridge_slave_1 (unregistering): left allmulticast mode [ 719.565300][T12289] bridge_slave_1 (unregistering): left promiscuous mode [ 719.594609][T12289] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.558363][T12299] netlink: 'syz.0.2190': attribute type 1 has an invalid length. [ 720.701861][T12299] 8021q: adding VLAN 0 to HW filter on device bond3 [ 721.134163][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888052714400: rx timeout, send abort [ 721.297314][T12311] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2193'. [ 721.360538][T12314] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2193'. [ 721.642954][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888052714400: abort rx timeout. Force session deactivation [ 721.913347][T12325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2198'. [ 723.310424][T12339] netlink: 'syz.1.2204': attribute type 1 has an invalid length. [ 723.656025][T12339] 8021q: adding VLAN 0 to HW filter on device bond2 [ 724.873368][ T80] syzkaller0: tun_net_xmit 76 [ 724.894585][ T80] syzkaller0: tun_net_xmit 48 [ 724.900503][ T9] syzkaller0: tun_net_xmit 76 [ 725.048621][ T9] syzkaller0: tun_net_xmit 76 [ 725.123068][T12367] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2214'. [ 725.165202][T12367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2214'. [ 725.211874][T12356] syzkaller0: delete flow: hash 3132355934 index 1 [ 725.449571][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805901a600: rx timeout, send abort [ 725.958272][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805901a600: abort rx timeout. Force session deactivation [ 726.711328][T12384] netlink: 'syz.4.2220': attribute type 1 has an invalid length. [ 726.732794][T12387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2219'. [ 726.835684][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2218'. [ 727.095291][T12384] 8021q: adding VLAN 0 to HW filter on device bond1 [ 729.110345][T12419] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2232'. [ 729.179490][T12419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2232'. [ 729.282188][T12423] netlink: 'syz.1.2234': attribute type 1 has an invalid length. [ 729.426528][T12423] 8021q: adding VLAN 0 to HW filter on device bond3 [ 729.986954][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880563e5800: rx timeout, send abort [ 730.472388][T12437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2236'. [ 730.495933][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880563e5800: abort rx timeout. Force session deactivation [ 732.592091][T12458] team_slave_1: Caught tx_queue_len zero misconfig [ 732.739568][T12460] netlink: 'syz.1.2245': attribute type 1 has an invalid length. [ 733.058751][T12460] 8021q: adding VLAN 0 to HW filter on device bond4 [ 733.736209][T12475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2250'. [ 734.183018][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880525ade00: rx timeout, send abort [ 734.691742][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880525ade00: abort rx timeout. Force session deactivation [ 736.385059][T12509] netlink: 'syz.4.2260': attribute type 1 has an invalid length. [ 736.719184][T12509] 8021q: adding VLAN 0 to HW filter on device bond2 [ 737.344659][T12527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2265'. [ 737.995192][T12532] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 738.562539][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888051bf6600: rx timeout, send abort [ 739.071379][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888051bf6600: abort rx timeout. Force session deactivation [ 739.442844][T12553] netlink: 'syz.1.2276': attribute type 1 has an invalid length. [ 739.817314][T12553] 8021q: adding VLAN 0 to HW filter on device bond5 [ 741.032983][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2281'. [ 741.459947][T12584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2284'. [ 741.536748][T12584] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.619989][T12584] bridge_slave_1 (unregistering): left allmulticast mode [ 741.648777][T12584] bridge_slave_1 (unregistering): left promiscuous mode [ 741.666445][T12584] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.874397][T12597] netlink: 'syz.3.2290': attribute type 1 has an invalid length. [ 743.177103][T12597] 8021q: adding VLAN 0 to HW filter on device bond1 [ 744.042502][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880232cf600: rx timeout, send abort [ 744.551231][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880232cf600: abort rx timeout. Force session deactivation [ 744.871785][T12618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2296'. [ 745.487441][T12631] netlink: 'syz.4.2302': attribute type 1 has an invalid length. [ 745.792850][T12631] 8021q: adding VLAN 0 to HW filter on device bond3 [ 746.572269][T12657] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 748.525780][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880561ed600: rx timeout, send abort [ 748.812742][T12679] netlink: 'syz.0.2317': attribute type 1 has an invalid length. [ 748.879925][T12682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2317'. [ 748.921510][T12679] 8021q: adding VLAN 0 to HW filter on device bond4 [ 749.034420][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880561ed600: abort rx timeout. Force session deactivation [ 751.282861][T12712] netlink: 'syz.0.2330': attribute type 1 has an invalid length. [ 751.383889][T12714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2330'. [ 751.453670][T12712] 8021q: adding VLAN 0 to HW filter on device bond5 [ 752.900699][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802a975000: rx timeout, send abort [ 753.409516][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802a975000: abort rx timeout. Force session deactivation [ 753.561979][T12744] netlink: 'syz.1.2343': attribute type 1 has an invalid length. [ 753.672601][T12748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2343'. [ 753.677064][T12744] 8021q: adding VLAN 0 to HW filter on device bond6 [ 754.835234][T12773] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2353'. [ 756.126884][T12786] netlink: 'syz.4.2357': attribute type 1 has an invalid length. [ 756.234273][T12792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2357'. [ 756.567702][T12786] 8021q: adding VLAN 0 to HW filter on device bond4 [ 756.857262][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.864510][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.428534][T12806] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2365'. [ 757.998109][T12814] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 758.025941][T12814] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 758.804915][T12825] netlink: 'syz.0.2372': attribute type 1 has an invalid length. [ 758.869937][T12827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2372'. [ 759.309908][T12825] 8021q: adding VLAN 0 to HW filter on device bond6 [ 759.392992][T12836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2374'. [ 760.422574][T12846] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2379'. [ 762.003104][T12851] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 762.024535][T12870] netlink: 'syz.0.2387': attribute type 1 has an invalid length. [ 762.089983][T12871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2387'. [ 762.286745][T12851] ip6tnl1: left allmulticast mode [ 762.313017][T12851] ip6tnl2: left allmulticast mode [ 762.339973][T12851] ip6tnl3: left allmulticast mode [ 762.836216][T12870] 8021q: adding VLAN 0 to HW filter on device bond7 [ 763.056176][T12879] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 763.766755][T12892] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2394'. [ 764.017501][T12896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2397'. [ 765.023342][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888052709600: rx timeout, send abort [ 765.231736][T12909] netlink: 'syz.0.2402': attribute type 1 has an invalid length. [ 765.333428][T12911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2402'. [ 765.532038][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888052709600: abort rx timeout. Force session deactivation [ 765.633568][T12909] 8021q: adding VLAN 0 to HW filter on device bond8 [ 765.716775][T12911] bond8: entered promiscuous mode [ 765.753161][T12911] bond8: entered allmulticast mode [ 765.826535][T12913] IPVS: persistence engine module ip_vs_pe_‘‚ not found [ 766.889800][T12926] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2408'. [ 768.402504][T12945] IPVS: persistence engine module ip_vs_pe_‘‚ not found [ 768.929068][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888052709600: rx timeout, send abort [ 769.438014][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888052709600: abort rx timeout. Force session deactivation [ 769.546669][T12962] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2423'. [ 770.918646][T12976] IPVS: persistence engine module ip_vs_pe_‘‚ not found [ 771.839234][T12994] syzkaller0: entered promiscuous mode [ 771.857437][T12994] syzkaller0: entered allmulticast mode [ 772.446466][T13005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2439'. [ 772.911674][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880563e8800: rx timeout, send abort [ 773.420501][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880563e8800: abort rx timeout. Force session deactivation [ 774.079270][T13025] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 774.445858][T13022] IPVS: persistence engine module ip_vs_pe_‘‚ not found [ 775.621185][T13037] syzkaller0: entered promiscuous mode [ 775.640919][T13037] syzkaller0: entered allmulticast mode [ 775.810809][T13049] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2454'. [ 776.321397][T13054] syzkaller0: entered promiscuous mode [ 776.338907][T13054] syzkaller0: entered allmulticast mode [ 776.681882][T13061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2458'. [ 776.926347][T13063] IPVS: persistence engine module ip_vs_pe_‘‚ not found [ 776.962196][T13066] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 777.259197][T13069] syzkaller0: entered promiscuous mode [ 777.280363][T13069] syzkaller0: entered allmulticast mode [ 777.486964][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805545c600: rx timeout, send abort [ 777.995728][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805545c600: abort rx timeout. Force session deactivation [ 778.746241][T13089] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2468'. [ 779.569137][T13093] syzkaller0: entered promiscuous mode [ 779.594792][T13093] syzkaller0: entered allmulticast mode [ 780.176056][T13104] IPVS: persistence engine module ip_vs_pe_‘‚ not found [ 781.069060][T13127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2477'. [ 781.636805][T13135] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2482'. [ 783.117581][T13148] syzkaller0: entered promiscuous mode [ 783.136777][T13148] syzkaller0: entered allmulticast mode [ 783.173233][T13151] IPVS: persistence engine module ip_vs_pe_‘‚ not found [ 783.737431][T13162] syzkaller0: entered promiscuous mode [ 783.761776][T13162] syzkaller0: entered allmulticast mode [ 784.728760][T13178] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2496'. [ 785.164229][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880525d3600: rx timeout, send abort [ 785.496997][T13190] IPVS: persistence engine module ip_vs_pe_‘‚ not found [ 785.672967][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880525d3600: abort rx timeout. Force session deactivation [ 786.463306][T13199] syzkaller0: entered promiscuous mode [ 786.486042][T13199] syzkaller0: entered allmulticast mode [ 787.117298][T13210] syzkaller0: entered promiscuous mode [ 787.138850][T13210] syzkaller0: entered allmulticast mode [ 788.290350][T13227] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2512'. [ 788.396571][T13231] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 788.920951][T13234] IPVS: persistence engine module ip_vs_pe_‘‚ not found [ 789.653161][T13248] syzkaller0: entered promiscuous mode [ 789.672531][T13248] syzkaller0: entered allmulticast mode [ 790.235651][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805546f200: rx timeout, send abort [ 790.462790][T13258] syzkaller0: entered promiscuous mode [ 790.478333][T13258] syzkaller0: entered allmulticast mode [ 790.744445][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805546f200: abort rx timeout. Force session deactivation [ 791.224476][T13269] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2527'. [ 791.423227][T13274] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 791.696224][T13272] IPVS: persistence engine module ip_vs_pe_‘‚ not found [ 792.268054][T13287] syzkaller0: entered promiscuous mode [ 792.299275][T13287] syzkaller0: entered allmulticast mode [ 792.982536][T13301] syzkaller0: entered promiscuous mode [ 793.008451][T13301] syzkaller0: entered allmulticast mode [ 793.682988][T13311] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2542'. [ 794.205869][T13320] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 794.613306][T13314] IPVS: persistence engine module ip_vs_pe_‘‚ not found [ 795.276501][T13333] syzkaller0: entered promiscuous mode [ 795.303726][T13333] syzkaller0: entered allmulticast mode [ 795.839203][T13344] syzkaller0: entered promiscuous mode [ 795.857162][T13344] syzkaller0: entered allmulticast mode [ 796.737504][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807d327600: rx timeout, send abort [ 797.139157][T13363] IPVS: persistence engine module ip_vs_pe_‘‚ not found [ 797.246271][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807d327600: abort rx timeout. Force session deactivation [ 797.894891][T13378] syzkaller0: entered promiscuous mode [ 797.928281][T13378] syzkaller0: entered allmulticast mode [ 798.693676][T13390] syzkaller0: entered promiscuous mode [ 798.712361][T13390] syzkaller0: entered allmulticast mode [ 800.130557][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888059099a00: rx timeout, send abort [ 800.644824][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888052429c00: rx timeout, send abort [ 800.653429][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888059099a00: abort rx timeout. Force session deactivation [ 800.654020][T13418] syzkaller0: entered promiscuous mode [ 800.707620][T13418] syzkaller0: entered allmulticast mode [ 801.153448][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888052429c00: abort rx timeout. Force session deactivation [ 802.688390][ T9] IPVS: starting estimator thread 0... [ 802.778130][T13442] IPVS: using max 240 ests per chain, 12000 per kthread [ 803.140635][ T5677] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 803.338804][ T5677] usb 5-1: config 0 has no interfaces? [ 803.365662][ T5677] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 803.394908][ T5677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.419463][ T5677] usb 5-1: Product: syz [ 803.431132][ T5677] usb 5-1: Manufacturer: syz [ 803.434767][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805545c600: rx timeout, send abort [ 803.450966][ T5677] usb 5-1: SerialNumber: syz [ 803.482162][ T5677] usb 5-1: config 0 descriptor?? [ 803.717261][T13455] syzkaller0: entered promiscuous mode [ 803.726752][T13455] syzkaller0: entered allmulticast mode [ 803.935579][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807d326c00: rx timeout, send abort [ 803.946266][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805545c600: abort rx timeout. Force session deactivation [ 804.303638][T10151] usb 5-1: USB disconnect, device number 27 [ 804.444183][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807d326c00: abort rx timeout. Force session deactivation [ 805.891927][T13487] syzkaller0: entered promiscuous mode [ 805.918233][T13487] syzkaller0: entered allmulticast mode [ 806.326128][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888059099000: rx timeout, send abort [ 806.825577][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888051bf7000: rx timeout, send abort [ 806.834792][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888059099000: abort rx timeout. Force session deactivation [ 807.334342][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888051bf7000: abort rx timeout. Force session deactivation [ 807.758736][T10151] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 807.951187][T10151] usb 4-1: config 0 has no interfaces? [ 807.987136][T10151] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 808.066157][T10151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.106177][T10151] usb 4-1: Product: syz [ 808.132715][T10151] usb 4-1: Manufacturer: syz [ 808.178072][T10151] usb 4-1: SerialNumber: syz [ 808.231638][T10151] usb 4-1: config 0 descriptor?? [ 808.446786][T13507] IPVS: persistence engine module ip_vs_pe_‘‚ not found [ 809.176712][T10151] usb 4-1: USB disconnect, device number 31 [ 809.432551][T13527] syzkaller0: entered promiscuous mode [ 809.470754][T13527] syzkaller0: entered allmulticast mode [ 810.873815][T13546] netlink: 'syz.3.2627': attribute type 17 has an invalid length. [ 810.909567][T13546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2627'. [ 812.016913][T13560] syzkaller0: entered promiscuous mode [ 812.049377][T13560] syzkaller0: entered allmulticast mode [ 812.349019][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 812.559236][ T9] usb 4-1: config 0 has no interfaces? [ 812.645749][ T9] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 812.666490][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.700228][ T9] usb 4-1: Product: syz [ 812.721900][ T9] usb 4-1: Manufacturer: syz [ 812.736089][ T9] usb 4-1: SerialNumber: syz [ 812.794039][ T9] usb 4-1: config 0 descriptor?? [ 813.944600][ T9] usb 4-1: USB disconnect, device number 32 [ 815.003577][T13593] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2643'. [ 816.095924][T13614] syzkaller0: entered promiscuous mode [ 816.121752][T13614] syzkaller0: entered allmulticast mode [ 817.758452][ T5677] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 817.958050][ T5677] usb 3-1: config 0 has no interfaces? [ 818.005891][ T5677] usb 3-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 818.036466][ T5677] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.058023][ T5677] usb 3-1: Product: syz [ 818.062454][ T5677] usb 3-1: Manufacturer: syz [ 818.067235][ T5677] usb 3-1: SerialNumber: syz [ 818.102518][ T5677] usb 3-1: config 0 descriptor?? [ 818.296165][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.303229][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.409498][T13641] ===================================================== [ 818.417237][T13641] BUG: KMSAN: uninit-value in ieee802154_hdr_push+0x9a4/0xa30 [ 818.425376][T13641] ieee802154_hdr_push+0x9a4/0xa30 [ 818.432885][T13641] ieee802154_header_create+0x854/0xb90 [ 818.438946][T13641] dgram_sendmsg+0xb55/0x16f0 [ 818.443929][T13641] ieee802154_sock_sendmsg+0x91/0xe0 [ 818.449543][T13641] ____sys_sendmsg+0xf37/0xfd0 [ 818.454584][T13641] ___sys_sendmsg+0x271/0x3b0 [ 818.459611][T13641] __sys_sendmsg+0x1aa/0x300 [ 818.464954][T13641] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 818.471067][T13641] ia32_sys_call+0x1e4a/0x4360 [ 818.476073][T13641] __do_fast_syscall_32+0x180/0x460 [ 818.481805][T13641] do_fast_syscall_32+0x37/0x80 [ 818.486921][T13641] do_SYSENTER_32+0x1f/0x30 [ 818.491745][T13641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 818.498455][T13641] [ 818.500845][T13641] Uninit was stored to memory at: [ 818.506082][T13641] ieee802154_hdr_push+0x99d/0xa30 [ 818.512915][T13641] ieee802154_header_create+0x854/0xb90 [ 818.518797][T13641] dgram_sendmsg+0xb55/0x16f0 [ 818.523679][T13641] ieee802154_sock_sendmsg+0x91/0xe0 [ 818.529432][T13641] ____sys_sendmsg+0xf37/0xfd0 [ 818.534386][T13641] ___sys_sendmsg+0x271/0x3b0 [ 818.539362][T13641] __sys_sendmsg+0x1aa/0x300 [ 818.544116][T13641] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 818.550045][T13641] ia32_sys_call+0x1e4a/0x4360 [ 818.555003][T13641] __do_fast_syscall_32+0x180/0x460 [ 818.560499][T13641] do_fast_syscall_32+0x37/0x80 [ 818.565553][T13641] do_SYSENTER_32+0x1f/0x30 [ 818.570437][T13641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 818.576960][T13641] [ 818.579475][T13641] Local variable hdr created at: [ 818.584493][T13641] ieee802154_header_create+0x4e/0xb90 [ 818.590634][T13641] dgram_sendmsg+0xb55/0x16f0 [ 818.595574][T13641] [ 818.598222][T13641] CPU: 0 UID: 0 PID: 13641 Comm: syz.1.2660 Not tainted syzkaller #0 PREEMPT(full) [ 818.607939][T13641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 818.618408][T13641] ===================================================== [ 818.625470][T13641] Disabling lock debugging due to kernel taint [ 818.715308][T13641] Kernel panic - not syncing: kmsan.panic set ... [ 818.721895][T13641] CPU: 0 UID: 0 PID: 13641 Comm: syz.1.2660 Tainted: G B syzkaller #0 PREEMPT(full) [ 818.733042][T13641] Tainted: [B]=BAD_PAGE [ 818.737288][T13641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 818.747479][T13641] Call Trace: [ 818.750842][T13641] [ 818.753848][T13641] __dump_stack+0x26/0x30 [ 818.758326][T13641] dump_stack_lvl+0x50/0x1c0 [ 818.763058][T13641] ? dump_stack+0x12/0x25 [ 818.767524][T13641] dump_stack+0x1e/0x25 [ 818.771817][T13641] vpanic+0x7b4/0x1430 [ 818.776069][T13641] panic+0x15d/0x160 [ 818.780160][T13641] kmsan_report+0x31a/0x320 [ 818.784832][T13641] ? __msan_warning+0x1b/0x30 [ 818.789648][T13641] ? ieee802154_hdr_push+0x9a4/0xa30 [ 818.795073][T13641] ? ieee802154_header_create+0x854/0xb90 [ 818.800967][T13641] ? dgram_sendmsg+0xb55/0x16f0 [ 818.805992][T13641] ? ieee802154_sock_sendmsg+0x91/0xe0 [ 818.811592][T13641] ? ____sys_sendmsg+0xf37/0xfd0 [ 818.816684][T13641] ? ___sys_sendmsg+0x271/0x3b0 [ 818.821683][T13641] ? __sys_sendmsg+0x1aa/0x300 [ 818.826596][T13641] ? __ia32_compat_sys_sendmsg+0xa4/0x100 [ 818.832493][T13641] ? ia32_sys_call+0x1e4a/0x4360 [ 818.837599][T13641] ? __do_fast_syscall_32+0x180/0x460 [ 818.843143][T13641] ? do_fast_syscall_32+0x37/0x80 [ 818.848327][T13641] ? do_SYSENTER_32+0x1f/0x30 [ 818.853160][T13641] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 818.859821][T13641] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 818.866481][T13641] ? ___sys_sendmsg+0x271/0x3b0 [ 818.871500][T13641] ? __sys_sendmsg+0x1aa/0x300 [ 818.876408][T13641] ? __ia32_compat_sys_sendmsg+0xa4/0x100 [ 818.882313][T13641] ? ia32_sys_call+0x1e4a/0x4360 [ 818.887545][T13641] ? kmsan_get_metadata+0xf1/0x160 [ 818.892843][T13641] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 818.898832][T13641] ? ieee802154_hdr_push+0x1/0xa30 [ 818.904082][T13641] ? filter_irq_stacks+0x49/0x190 [ 818.909276][T13641] ? kmsan_get_metadata+0xf1/0x160 [ 818.914566][T13641] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 818.920964][T13641] ? kmsan_get_metadata+0xf1/0x160 [ 818.926244][T13641] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 818.932744][T13641] ? kmsan_get_metadata+0xf1/0x160 [ 818.938113][T13641] __msan_warning+0x1b/0x30 [ 818.942760][T13641] ieee802154_hdr_push+0x9a4/0xa30 [ 818.948034][T13641] ? __i915_error_grow+0xa02/0xa10 [ 818.953405][T13641] ? __msan_memcpy+0x105/0x1c0 [ 818.958328][T13641] ieee802154_header_create+0x854/0xb90 [ 818.964073][T13641] ? kmsan_get_metadata+0xf1/0x160 [ 818.969358][T13641] dgram_sendmsg+0xb55/0x16f0 [ 818.974230][T13641] ? __pfx_ieee802154_header_create+0x10/0x10 [ 818.980514][T13641] ? __pfx_dgram_sendmsg+0x10/0x10 [ 818.985798][T13641] ieee802154_sock_sendmsg+0x91/0xe0 [ 818.991220][T13641] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 818.997332][T13641] ____sys_sendmsg+0xf37/0xfd0 [ 819.002294][T13641] ___sys_sendmsg+0x271/0x3b0 [ 819.007119][T13641] ? kmsan_get_metadata+0xf1/0x160 [ 819.012408][T13641] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 819.018397][T13641] ? __rcu_read_unlock+0x6c/0xd0 [ 819.023464][T13641] ? __fget_files+0x3b4/0x4a0 [ 819.028304][T13641] ? __fget_files+0x3b9/0x4a0 [ 819.033121][T13641] ? kmsan_get_metadata+0xf1/0x160 [ 819.038397][T13641] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 819.044388][T13641] __sys_sendmsg+0x1aa/0x300 [ 819.049168][T13641] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 819.054902][T13641] ia32_sys_call+0x1e4a/0x4360 [ 819.059837][T13641] __do_fast_syscall_32+0x180/0x460 [ 819.065218][T13641] do_fast_syscall_32+0x37/0x80 [ 819.070243][T13641] do_SYSENTER_32+0x1f/0x30 [ 819.074904][T13641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 819.081403][T13641] RIP: 0023:0xf702f01c [ 819.085581][T13641] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 819.105328][T13641] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 819.113918][T13641] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000540 [ 819.121993][T13641] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 819.130052][T13641] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 819.138116][T13641] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 819.146181][T13641] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 819.154276][T13641] [ 819.157665][T13641] Kernel Offset: disabled [ 819.162041][T13641] Rebooting in 86400 seconds..