Warning: Permanently added '10.128.1.3' (ED25519) to the list of known hosts. 2024/05/08 08:01:11 fuzzer started 2024/05/08 08:01:11 dialing manager at 10.128.0.169:30012 [ 161.622565][ T5036] cgroup: Unknown subsys name 'net' [ 161.782150][ T5036] cgroup: Unknown subsys name 'rlimit' 2024/05/08 08:01:58 code coverage: enabled 2024/05/08 08:01:58 comparison tracing: enabled 2024/05/08 08:01:58 extra coverage: enabled 2024/05/08 08:01:58 delay kcov mmap: enabled 2024/05/08 08:01:58 setuid sandbox: enabled 2024/05/08 08:01:58 namespace sandbox: enabled 2024/05/08 08:01:58 Android sandbox: /sys/fs/selinux/policy does not exist 2024/05/08 08:01:58 fault injection: enabled 2024/05/08 08:01:58 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2024/05/08 08:01:58 net packet injection: enabled 2024/05/08 08:01:58 net device setup: enabled 2024/05/08 08:01:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/05/08 08:01:58 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/05/08 08:01:58 NIC VF setup: PCI device 0000:00:11.0 is not available 2024/05/08 08:01:58 USB emulation: enabled 2024/05/08 08:01:58 hci packet injection: enabled 2024/05/08 08:01:58 wifi device emulation: enabled 2024/05/08 08:01:58 802.15.4 emulation: enabled 2024/05/08 08:01:58 swap file: enabled 2024/05/08 08:01:58 starting 5 executor processes [ 207.807316][ T5036] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 210.530373][ T5057] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 210.548398][ T5057] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 210.557951][ T5057] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 210.596683][ T5057] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 210.633351][ T5061] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 210.642853][ T5061] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 210.651911][ T5062] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.668261][ T5061] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.678290][ T5061] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.679613][ T5062] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.703088][ T5061] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.708908][ T5065] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.718300][ T5061] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.726581][ T4421] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.739720][ T5061] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.740528][ T5065] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 210.758472][ T5065] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.759247][ T5061] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.774632][ T5061] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.791462][ T4421] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 210.803056][ T4421] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.812231][ T5061] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.837701][ T5057] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 210.847333][ T5061] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.177285][ T5061] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.187353][ T5061] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.197918][ T5061] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.211817][ T5061] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.250766][ T5061] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 211.270261][ T5061] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.988407][ T5060] chnl_net:caif_netlink_parms(): no params data found [ 212.306259][ T5054] chnl_net:caif_netlink_parms(): no params data found [ 212.729113][ T5063] chnl_net:caif_netlink_parms(): no params data found [ 212.752493][ T5061] Bluetooth: hci0: command tx timeout [ 212.910793][ T5061] Bluetooth: hci3: command tx timeout [ 212.912467][ T5062] Bluetooth: hci1: command tx timeout [ 212.917515][ T4421] Bluetooth: hci2: command tx timeout [ 212.972299][ T5060] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.980081][ T5060] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.987941][ T5060] bridge_slave_0: entered allmulticast mode [ 212.996870][ T5060] bridge_slave_0: entered promiscuous mode [ 213.045607][ T5060] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.053505][ T5060] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.061474][ T5060] bridge_slave_1: entered allmulticast mode [ 213.070564][ T5060] bridge_slave_1: entered promiscuous mode [ 213.086523][ T5070] chnl_net:caif_netlink_parms(): no params data found [ 213.349048][ T5060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.387160][ T5061] Bluetooth: hci4: command tx timeout [ 213.466485][ T5060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.578523][ T5054] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.586477][ T5054] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.594206][ T5054] bridge_slave_0: entered allmulticast mode [ 213.603486][ T5054] bridge_slave_0: entered promiscuous mode [ 213.672799][ T5060] team0: Port device team_slave_0 added [ 213.681391][ T5054] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.691131][ T5054] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.698964][ T5054] bridge_slave_1: entered allmulticast mode [ 213.707950][ T5054] bridge_slave_1: entered promiscuous mode [ 213.739561][ T5060] team0: Port device team_slave_1 added [ 213.780567][ T5059] chnl_net:caif_netlink_parms(): no params data found [ 213.922336][ T5054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.953679][ T5060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.960986][ T5060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.987493][ T5060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.060209][ T5054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.188429][ T5060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.195597][ T5060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.222011][ T5060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.281798][ T5054] team0: Port device team_slave_0 added [ 214.402259][ T5054] team0: Port device team_slave_1 added [ 214.410623][ T5063] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.418645][ T5063] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.427612][ T5063] bridge_slave_0: entered allmulticast mode [ 214.436090][ T5063] bridge_slave_0: entered promiscuous mode [ 214.452199][ T5063] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.460215][ T5063] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.468105][ T5063] bridge_slave_1: entered allmulticast mode [ 214.477274][ T5063] bridge_slave_1: entered promiscuous mode [ 214.584268][ T5070] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.592158][ T5070] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.600199][ T5070] bridge_slave_0: entered allmulticast mode [ 214.609343][ T5070] bridge_slave_0: entered promiscuous mode [ 214.740474][ T5070] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.749148][ T5070] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.756945][ T5070] bridge_slave_1: entered allmulticast mode [ 214.764854][ T5070] bridge_slave_1: entered promiscuous mode [ 214.810347][ T5054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.817754][ T5054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.827578][ T5061] Bluetooth: hci0: command tx timeout [ 214.844287][ T5054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.972732][ T5054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.980104][ T5054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.995917][ T5061] Bluetooth: hci1: command tx timeout [ 215.006685][ T5054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.011747][ T5061] Bluetooth: hci3: command tx timeout [ 215.030469][ T4421] Bluetooth: hci2: command tx timeout [ 215.078122][ T5063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.142457][ T5070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.171484][ T5060] hsr_slave_0: entered promiscuous mode [ 215.181831][ T5060] hsr_slave_1: entered promiscuous mode [ 215.235495][ T5063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.259653][ T5070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.340932][ T5059] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.349531][ T5059] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.357411][ T5059] bridge_slave_0: entered allmulticast mode [ 215.366519][ T5059] bridge_slave_0: entered promiscuous mode [ 215.477223][ T5061] Bluetooth: hci4: command tx timeout [ 215.481133][ T5070] team0: Port device team_slave_0 added [ 215.512813][ T5070] team0: Port device team_slave_1 added [ 215.521258][ T5059] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.529127][ T5059] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.537961][ T5059] bridge_slave_1: entered allmulticast mode [ 215.546100][ T5059] bridge_slave_1: entered promiscuous mode [ 215.727567][ T5063] team0: Port device team_slave_0 added [ 215.746824][ T5054] hsr_slave_0: entered promiscuous mode [ 215.755933][ T5054] hsr_slave_1: entered promiscuous mode [ 215.763882][ T5054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.773086][ T5054] Cannot create hsr debugfs directory [ 215.820241][ T5070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.827571][ T5070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.853919][ T5070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.903071][ T5063] team0: Port device team_slave_1 added [ 215.920289][ T5059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.994217][ T5070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.002421][ T5070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.028782][ T5070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.099062][ T5059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.172579][ T5063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.179924][ T5063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.206628][ T5063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.227102][ T5063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.234258][ T5063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.263041][ T5063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.531357][ T5059] team0: Port device team_slave_0 added [ 216.615291][ T5059] team0: Port device team_slave_1 added [ 216.648262][ T5070] hsr_slave_0: entered promiscuous mode [ 216.657431][ T5070] hsr_slave_1: entered promiscuous mode [ 216.665152][ T5070] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.673156][ T5070] Cannot create hsr debugfs directory [ 216.853937][ T5063] hsr_slave_0: entered promiscuous mode [ 216.864044][ T5063] hsr_slave_1: entered promiscuous mode [ 216.873550][ T5063] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.881757][ T5063] Cannot create hsr debugfs directory [ 216.907791][ T5061] Bluetooth: hci0: command tx timeout [ 216.925430][ T5059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.932771][ T5059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.959148][ T5059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.043782][ T5059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.051177][ T5059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.077793][ T5059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.089632][ T5061] Bluetooth: hci3: command tx timeout [ 217.095256][ T5061] Bluetooth: hci2: command tx timeout [ 217.105463][ T5062] Bluetooth: hci1: command tx timeout [ 217.338508][ T5059] hsr_slave_0: entered promiscuous mode [ 217.347831][ T5059] hsr_slave_1: entered promiscuous mode [ 217.355657][ T5059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.363539][ T5059] Cannot create hsr debugfs directory [ 217.505328][ T5060] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 217.548276][ T5062] Bluetooth: hci4: command tx timeout [ 217.640371][ T5060] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 217.658804][ T5060] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 217.747468][ T5060] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 218.000299][ T5054] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 218.087700][ T5054] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 218.130358][ T5054] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 218.224805][ T5054] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 218.440045][ T5063] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 218.461525][ T5063] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 218.548881][ T5063] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 218.610886][ T5063] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 218.819597][ T5070] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 218.948800][ T5070] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 218.978072][ T5070] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 218.988143][ T5062] Bluetooth: hci0: command tx timeout [ 219.063617][ T5059] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 219.090255][ T5070] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 219.134723][ T5059] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 219.147363][ T5062] Bluetooth: hci2: command tx timeout [ 219.152988][ T5062] Bluetooth: hci3: command tx timeout [ 219.165854][ T5061] Bluetooth: hci1: command tx timeout [ 219.174655][ T1219] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.182310][ T1219] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.197966][ T5059] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 219.237228][ T5059] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 219.493570][ T5060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.652698][ T5062] Bluetooth: hci4: command tx timeout [ 219.674645][ T5054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.799861][ T5054] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.824586][ T5060] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.871150][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.878984][ T5108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.955030][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.962863][ T5108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.050041][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.057870][ T5108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.253960][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.261754][ T5108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.528913][ T5070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.624686][ T5063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.687748][ T5054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.872345][ T5070] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.965185][ T5063] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.002525][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.010351][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.148813][ T5059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.181480][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.189242][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.204943][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.212675][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.234507][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.242297][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.573445][ T5059] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.790477][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.798310][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.909911][ T5063] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.947457][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.955150][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.532427][ T5060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.868692][ T5054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.132680][ T5060] veth0_vlan: entered promiscuous mode [ 223.333797][ T5060] veth1_vlan: entered promiscuous mode [ 223.612833][ T5054] veth0_vlan: entered promiscuous mode [ 223.723201][ T5054] veth1_vlan: entered promiscuous mode [ 223.798062][ T5060] veth0_macvtap: entered promiscuous mode [ 223.901433][ T5060] veth1_macvtap: entered promiscuous mode [ 224.110377][ T5060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.151545][ T5070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.176647][ T5060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.242567][ T5054] veth0_macvtap: entered promiscuous mode [ 224.287816][ T5063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.308107][ T5060] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.317322][ T5060] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.326669][ T5060] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.335690][ T5060] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.432016][ T5054] veth1_macvtap: entered promiscuous mode [ 224.487164][ T5059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.671893][ T5054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.682763][ T5054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.697896][ T5054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.812494][ T5054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.824411][ T5054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.840651][ T5054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.985510][ T5063] veth0_vlan: entered promiscuous mode [ 225.011560][ T5054] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.020769][ T5054] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.030051][ T5054] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.039186][ T5054] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.277927][ T5059] veth0_vlan: entered promiscuous mode [ 225.289509][ T5063] veth1_vlan: entered promiscuous mode [ 225.382330][ T5059] veth1_vlan: entered promiscuous mode [ 225.688139][ T5063] veth0_macvtap: entered promiscuous mode [ 225.767944][ T5063] veth1_macvtap: entered promiscuous mode [ 225.787000][ T5059] veth0_macvtap: entered promiscuous mode [ 225.892795][ T5059] veth1_macvtap: entered promiscuous mode [ 226.053542][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.064669][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.074897][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.085838][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.100902][ T5063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.154249][ T5059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.165064][ T5059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.175231][ T5059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.186847][ T5059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.197520][ T5059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.208290][ T5059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.223360][ T5059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.291864][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.304794][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.317028][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.327918][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.343164][ T5063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.491148][ T5063] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.500454][ T5063] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.511250][ T5063] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.521347][ T5063] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.556005][ T5059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.568429][ T5059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.578708][ T5059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.589498][ T5059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.599776][ T5059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.610531][ T5059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.625532][ T5059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.721334][ T5059] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.730489][ T5059] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.739772][ T5059] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.749035][ T5059] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.169714][ T5070] veth0_vlan: entered promiscuous mode [ 227.285551][ T5070] veth1_vlan: entered promiscuous mode [ 227.756198][ T5070] veth0_macvtap: entered promiscuous mode [ 227.813693][ T5070] veth1_macvtap: entered promiscuous mode [ 228.004638][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.015558][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.028509][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.040323][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.050483][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.063335][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.073479][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.084250][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.099443][ T5070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.183523][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.196995][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.207915][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.218744][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.228902][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.239781][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.249935][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.260748][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.276822][ T5070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.457742][ T5070] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.466878][ T5070] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.476094][ T5070] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.485134][ T5070] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.261170][ T3427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.269477][ T3427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.562382][ T5114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.570635][ T5114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 1: sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f57", 0x13f, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000000000004000ed00", "90be6a1c551265406c7fd2a3a9799300bd00"}}) [ 232.101783][ T5220] loop0: detected capacity change from 0 to 7 [ 232.180493][ T5220] Dev loop0: unable to read RDB block 7 [ 232.186891][ T5220] loop0: unable to read partition table [ 232.217701][ T5220] loop0: partition table beyond EOD, truncated [ 232.224351][ T5220] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 232.224351][ T5220] ) failed (rc=-5) executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) getdents(r0, 0x0, 0x0) [ 232.442169][ T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.452007][ T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.736279][ T4031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.744449][ T4031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 1: syz_mount_image$udf(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x800048, &(0x7f00000001c0)=ANY=[], 0x1, 0x4b1, &(0x7f0000001200)="$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") syz_mount_image$fuse(0x0, &(0x7f00000023c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}]}, 0x64}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) [ 233.337207][ T5236] tipc: Started in network mode [ 233.342442][ T5236] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 233.352199][ T5236] tipc: Enabled bearer , priority 10 [ 233.397822][ T5237] loop1: detected capacity change from 0 to 128 [ 233.452600][ T5237] ======================================================= [ 233.452600][ T5237] WARNING: The mand mount option has been deprecated and [ 233.452600][ T5237] and is ignored by this kernel. Remove the mand [ 233.452600][ T5237] option from the mount to silence this warning. [ 233.452600][ T5237] ======================================================= [ 233.586818][ T5237] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 executing program 0: bpf$BPF_PROG_TEST_RUN(0x9, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x14, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) [ 233.699469][ T5237] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.853750][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.862154][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 1: madvise(&(0x7f0000958000/0x3000)=nil, 0x3000, 0xb) executing program 0: r0 = userfaultfd(0x80001) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) [ 234.189216][ T3857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.197412][ T3857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.281091][ T3857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.293408][ T3857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.441675][ T3427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.451182][ T3427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.474446][ T7] tipc: Node number set to 10005162 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="404d05"], 0x6) executing program 3: ioperm(0x0, 0x91c9, 0xffff) fanotify_init(0x364d2b47b507e56e, 0x0) executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/xfrm_stat\x00') syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x3, 0x1800, 0x10000) pread64(r1, &(0x7f0000004180)=""/4096, 0x1000, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000013c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x0, [0x8, 0x0, 0x0, 0x6]}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x1dd00) executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/xfrm_stat\x00') syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x3, 0x1800, 0x10000) pread64(r1, &(0x7f0000004180)=""/4096, 0x1000, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000013c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x0, [0x8, 0x0, 0x0, 0x6]}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x1dd00) executing program 3: syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000000380)={[{@utf8}, {@errors_continue}, {@namecase}, {@utf8}, {@gid}, {@umask={'umask', 0x3d, 0x3f}}, {@umask={'umask', 0x3d, 0xbbe}}, {}, {@gid}]}, 0x80, 0x1503, &(0x7f0000000580)="$eJzs3AuYj1XXMPC99t43Y5L+TXIY9trr5p8G2yRJDgk5JEmSJDklJCZJEhJDTklDEnKcJIchJIdpTBrn8yHnpMkjTZKE5BT2d+np/Tzv0/O+fe9X3+e93lm/69qXvdz/tf7rnjXX3Pf9v66Z73uOqtu8Xq2mRCT+FPj7P8lCiBghxDAhxA1CiEAIUTGuYtyV4/kUJP+5N2F/rUfTrnUH7Fri+eduPP/cjeefu/H8czeef+7G88/deP65G8+fsdxs+5yiN/LKvYs//8/N+Pr/P0hOuclfbyx3c6//QgrPP3fj+eduPP/cjeefu/H8czee//98Nf+TYzz/3I3nz1hudq0/f+Z1bde1/v5jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY7nPNXaSHEv+2vdV+MMcYYY4wxxhj76/i817oDxhhjjDHGGGOM/b8HQgoltAhEHpFXxIh8IlZcJ/KL60UBcYOIiBtFnLhJFBQ3i0KisCgiiop4UUwUF0agsIJEKEqIkiIqbhGlxK0iQZQWZURZ4UQ5kShuE+XF7aKCuENUFHeKSuIuUVlUEVVFNXG3qC7uETVETVFL3Ctqizqirqgn7hP1xf2igXhANBQPikbiIdFYPCyaiEdEU/GoaCYeE83F46KFeEK0FK1Ea9FGtP2/yn9Z9BWviH6iv0gWA8RA8aoYJAaLIWKoGCZeE8PF62KEeEOkiJFilHhTjBZviTHibTFWjBPjxTtigpgoJonJYoqYKlLFu2KaeE9MF++LGWKmmCVmizQxR8wVH4h5Yr5YID4UC8VHYpFYLJaIpSJdfCwyxDKRKT4Ry8WnIkusECvFKrFarBFrxTqxXmwQG8UmsVlsEVvFNrFdfCZ2iJ1il9gt9oi9Yp/4XOwXX4gD4kuRLb76L+af/af8XiBAgAQJGjTkgTwQAzEQC7GQH/JDASgAEYhAHMRBQSgIhaAQFIEiEA/xUByKAwICAUEJKAFRiEIpKAUJkABloAw4cJAIiVAebocKUAEqQkWoBJWgMlSBKlANqkF1qA41oAbUglpQG2pDXagL98F9cD80gAbQEBpCI2gEjaExNIEm0BSaQjNoBs2hObSAFtASWkJraA1toS20g3bQHtpDR+gInaATdIbOkARJ0BW6QjfoBt2hO/SAHtATekIv6A294WV4GV6BV6A/1JYDYCAMhEEwCIbAUBgKr8FweB1ehzcgBUbCKHgT3oS3YAycgbEwDsbDeKguJ8IkmAwkp0IqpMI0mAbTYTrMgJkwE2ZDGsyBuTAX5sF8mA8fwkL4CD6CxbAYlkI6pEMGLINMyITlcBayYAWshFWwGtbAalgH62EdbIRNsBG2wBbYBtvgM/gMdsJO2A27YS/shc/hc/gCvoAUyIZsOAgH4RAcgsNwGHIgB47AETgKR+EYHIPjcBxOwEk4BSfhNJyGM3AWzsE5uAAX4CK8GP9ts72lN6QIeYWWWuaReWSMjJGxMlbml/llAVlARmRExsk4WVAWlIVkIVlEFpHxMl4Wl8UlSpQkQ1lClogRQshSspRMkAmyjCwjnXQyUSbK8rK8rCAryIryTllJ3iUryyqyg6smq8nqsqOrIWvKWrKWrC3ryLqynqwn68v6soFsIBvKhrKRbCQby4dlEzkAhsCj8spkmsuR0EKOgpaylWwt28i34EnZTo6B9rKD7CifluNgLHSW7VySfFZ2lZOgm3xeToYXZA85FXrKl2Qv2Vv2kS/LvrK96yf7yxkwQA6Us2GQHCyHyKFyHtSRVyZWV74hU+RIOUq+KZfCW3KMfFuOlePkePmOnCAnyklyspwip8pU+a6cJt+T0+X7coacKWfJ2TJNzpFz5QdynpwvF8gP5UL5kVwkF8slcqlMlx/LDLlMZspP5HL5qcySK+RKuUqulmvkWrlOrpcb5Ea5SW6WW+RWuU1ul5/JHXKn3CV3yz1yr9wnP5f75RfygPxSZsuv5EH5N3lIfi0Py29kjvxWHpHfyaPye3lM/iCPyx/lCXlSnpI/ydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaDyqLwqRuVTseo6lV9drwqoG1RE3aji1E2qoLpZFVKFVRFVVMWrYqq4MgqVVaRCVUKVVFF1iyqlblUJqrQqo8oqp8qpRHWbKq9uVxXUHaqiulNVUnepyqqKqqqqqbtVdXWPqqFqqlrqXlVb1VF1VT11n6qv7lcN1AOqoXpQNVIPqcbqYdVEPaKaqkdVM/WYaq4eVy3UE6qlaqVaqzaqrXpStVNPqfaqg+qonlad1DOqs+qiktSzqqt6TnVTz6vu6gXVQ72oeqqXVC/VW/VRl9Rl5VU/1V8lqwFqoHpVDVKD1RA1VA1Tr6nh6nU1Qr2hUtRINUq9qUart9QY9bYaq8ap8eodNUFNVJPUZDVFTVWp6l01Tb2npqv31Qw1U81Ss1WamqOG/FZpwT/lD/jtqvuP+e/9i/wRv777NrVdfaZ2qJ1ql9qt9qi9ap/ap/ar/eqAOqCyVbY6qA6qQ+qQOqwOqxyVo46oI+qoOqqOqWPquDquTqiT6rz6SZ1WP6sz6qw6q86rC+qCuvjb10Bo0FIrrXWg8+i8Okbn07H6Op1fX68L6Bt0RN+o4/RNuqC+WRfShXURXVTH62K6uDYatdWkQ11Cl9RRfYsupW/VCbq0LqPLaqfL6UR925/O/6P+2uq2up1up9vr9rqj7qg76U66s+6sk3SS7qq76m66m+6uu+seuofuqXvqXrqX7qP76L66r+6n++lknawH6lf1ID1YD9FD9TD9mh6uh+sReoRO0Sl6lB6lR+vReoweo8fqsXq8Hq8n6Al6kp6kp+gpOlWn6ml6mp6up+sZeoaepWfpNJ2m5+q5ep6epxfoBXqhXqgX6UV6iV6i03W6ztAZOlNn6uV6uc7SK/QKvUqv0mv0Gr1Or9Mb9Aa9SW/SW/QWnaW36+16h96hd+ldeo/eo/fpfXq/3q8P6AM6W2frg/qgPqQP6cP6sM7ROfqIPqKP6qP6mD424Lg+rk/oE/qUPqVP69P6jD6jz+lz+oK+oC/qi/qyvnzlti+QgQx0oIM8QZ4gJogJYoPYIH+QPygQFAgiQSSIC+KCgsHNQaGgcFAkKBrEB8WC4oEJMLABBWFQIigZRINbglLBrUFCUDooE5QNXFAuSAxuC8oHtwcVgjuCisGdQaXgrqByUCWoGlQL7g6qB/cENYKaQa3g3qB2UCeoG9QL7gvqB/cHDYIHgobBg0Gj4KGgcfBw0CR4JGgaPBo0Cx4LmgePBy2CJ4KWQaugddAmaPuX1vf+TOGnXD/T3ySbAWagedUMMoPNEDPUDDOvmeHmdTPCvGFSzEgzyrxpRpu3zBjzthlrxpnx5h0zwUw0k8xkM8VMNanmXTPNvGemm/fNDDPTzDKzTZqZY+aaD8w8M98sMB+aheYjs8gsNkvMUpNuPjYZZpnJNJ+Y5eZTk2VWmJVmlVlt1py/UQiz3mwwG80ms9lsMVvNNrPdfGZ2mJ1ml9lt9pi9Zp/53Ow3X5gD5kuTbb4yB83fzCHztTlsvjE55ltzxHxnjprvzTHzgzlufjQnzElzyvxkTpufzRlz1pwz580F84u5aC6Zy8Zfubm/cnlHjRrzYB6MwRiMxVjMj/mxABbACEYwDuOwIBbEQlgIi2ARjMd4LI7F8QpCwhJYAqMYxVJYChMwActgGXToMBETsTyWxwpYAStiRayElbAyVsaqWBXvxrvxHrwHa2JNvBfvxTpYB+thPayP9bEBNsCG2BAbYSNsjI2xCTbBptgUm2EzbI7NsQW2wJbYEltja2yLbbEdtsP22B47YkfshJ2wM3bGJEzCrtgVu2E37I7dsQf2wJ7YE3thL+yDfbAv9sV+2A+TMRkH4kAchINwCA7BYTgMh+NwHIEjMAVTcBSOwtE4GsfgGByL43A8voMTcCJOwsk4BadiKqbiNJyG03E6zsAZOAtnYRqm4Vyci/NwHi7ABbgQF+IiXIRLcAmmYzpmYAZmYiYux+WYhVm4ElfialyNa3Etrsf1uBE34mbcjFtxK27H7bgDd+Au3IV7cA/uw324H/fjATyA2ZiNB/EgHsJDeBgPYw7m4BE8gkfxKB7DY3gcj+MJPIGn8BSextN4Bs/gOTyHF/AXvIiX8DJ6jLFSxNrrbH57vS1gb7AxNp/9x7iILWrjbTFb3BpbyBb+dzFaaxNsaVvGlrXOlrOJ9rbfxZVtFVvVVrN32+r2Hlvjd3F9e79tYB+wDe2Dtp6977c4769xI/uQbWwft03sE7apbWWb2Ta2uX3ctrBP2Ja2lW1t29hO9hnb2XaxSfZZ29U+97s4wy6z6+0Gu9FusvvtF/acPW+P2u/tBfuL7Wf722H2NTvcvm5H2Ddsih35u3i8fcdOsBPtJDvZTrFTfxfPsrNtmp1j59oP7Dw7/3dxuv3YLrSZdpFdbJfYpb/GV3rKtJ/Y5fZTm2VX2JV2lV1t19i1dt3/7nWV3WK32m12n/3c7rA77S672+6xe3+Nr5zHAfulzbZf2SP2O3vIfm0P22M2x377a3zl/I7ZH+xx+6M9YU/aU/Yne9r+bM/Ys7+e/5Vz/8lespett4KAJCnSFFAeyksxlI9i6TrKT9dTAbqBInQjxdFNVJBupkJUmIpQUYqnYlScDCFZIgqpBJWkKN1CpehWSqDSVIbKkqNylEi3UXm6nSrQHVSR7qRKdBdVpipUlarR3VSd7qEaVJNq0b1Um+pQXapH91F9up8a0APUkB6kRvQQNaaHqQk9Qk3pUWpGj1Fzepxa0BPUklpRa2pDbelJakdPUXvqQB3paepEz1Bn6kJJ9Cx1peeoGz1P3ekF6kEvUk96iXpRb+pDL1NfeoX6UX9KpgE0kF6lQTSYhtBQGkav0XB6nUbQG5RCI2kUvUmj6S0aQ2/TWBpH4+kdmkATaRJNpik0lVLpXTqb3qXIlXu9GTSTZtFsSqM5NJc+oHk0nxbQh7SQPqJFtJiW0FJKp48pg5ZRJn1Cy+lTyqIVtJJW0WpaQ2tpHa2nDbSRNtFm2kJbaRttp89oB+2kXbSb9tBe2kef0376gg7Ql5RNX9FB+hsdoq/pMH1DOfQtHaHv6Ch9T8foBzpOP9IJOkmn6Cc6TT/TGTpL5+g8XaBf6CJdosvkSYQQylCFOgzCPGHeMCbMF8aG14X5w+vDAuENYSS8MYwLbwoLhjeHhcLCYZGwaBgfFguLhybE0IYUhmGJsGQYDW8JS4W3hglh6bBMWDZ0YbkwMbwtLB/eHlYI7wgrhneGlcK7wsphlfDxB6uFd4fVw3vCGmHNsFZ4b1g7rBPWDeuF94X1w/vDBuEDYcPwwbBC+FDYOHw4bBI+EjYNHw2bhY+FzcPHwxbhE2HLsFXYOmwTtg2fDNuFT4Xtww5hx/DpsFP4TNg57BImhc+GXcPn/vB4cjggHBi+Gr4aev+AWhJdGk2PfhzNiC6LZkY/iS6PfhrNiq6Iroyuiq6Oromuja6Lro9uiG6Mbopujm6Jbo1ui3pfL69w4KRTTrvA5XF5XYzL52LddS6/u94VcDe4iLvRxbmbXEF3syvkCrsirqiLd8VccWccOuvIha6EK+mi7hZXyt3qElxpV8aVdc6Vc4mujWvr2rp27inX3nVwHd3T7mn3jHvGdXFd3LOuq3vOdXPPu+7uBdfDvehedC+5Xq636+Nedn3dK66f6++SXbIb6Aa6QW6QG+KGuGFumBvuhrsRboRLcSlulBvlRrvRbowb48a6sW68G+8muAlukpvkprgpLtWlumlumpvuprsZboab5Wa5NJfm5rq5bp6b5xa4BW5hwkK3yC1yS9wSl+7SXYbLcJku0y13y12Wy3Ir3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O9wOt8vtcnvcHrfP7XP73X53wB1w2S7bHXQH3SF3yB1237gc96074r5zR9337pj7wR13P7oT7qQ75X5yp93P7ow768658+6C+8VddJfcZeddauTdyLTIe5HpkfcjMyIzI7MisyNpkTmRuZEPIvMi8yMLIh9GFkY+iiyKLI4siSyNpEc+jmRElkUyI59Elkc+jWRFVkRWRlZFVkfWRLwvtiP0JXxJH/W3+FL+Vp/gS/syvqx3vpxP9Lf58v52X8Hf4Sv6O30lf5ev7Kv4qv4J39K38q19G9/WP+nb+ad8e9/Bd/RP+07+Gd/Zd/FJ/lnf1T/nu/nnfXf/gu/hX/Q9/Uu+l+/t+/iXfV//iu/n+/tkP8AP9K/6QX6wH+KH+mH+NT/cv+5H+Dd8ih/pR/k3/Wj/lh/j3/Zj/Tg/3r/jJ/iJfpKf7Kf4qT7Vv+un+ff8dP++n+Fn+ll+tk/zc/xc/4Gf5+f7Bf5Dv9B/5Bf5xX6JX+rT/cc+wy/zmf4Tv9x/6rP8Cr/Sr/Kr/Rq/1q/z6/0Gv9Fv8pv9Fr/Vb/Pb/Wd+h9/pd/ndfo/f6/f5z/1+/4U/4L/02f4rf9D/zR/yX/vD/huf47/1R/x3/qj/3h/zP/jj/kd/wp/0p/xP/rT/2Z/xZ/05f95f8L/4i/6Sv8y/s8YYY4wx9n9E/cHxAf/i/+Rv64qBQojrdxbN+eeamwv9fT9YxneKCCGe7d/z0X9btWsnJyf/9tosJYKSi4UQkav5ecTVeIXoKJ4RSaKDKP8v+xsse1+gP6gfvVOI2KuVfxUr/rn+7f9B/SefHp9RKTwX95/UXyxEQsmrOfnE1fhq/Qr/Qf3C7f6g/3xfpwrR/h9y8our8dX6ieIp8ZxI+nevZIwxxhhjjDHG/m6wrNr9j56frzyfx+urOXnF1fiPns8ZY4wxxhhjjDF27b3Qu0+XJ5OSOnTnzZ/Y1Pjv0QZvePOXba71TybGGGOMMcbYX+3qTf+17oQxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMu9/n/8ObFrfY6MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYtfa/AgAA///mJjhh") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) r1 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfd14) [ 235.523732][ T3427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.531942][ T3427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.802302][ T5268] loop3: detected capacity change from 0 to 256 [ 235.818904][ T5266] loop1: detected capacity change from 0 to 2048 [ 235.843999][ T5268] exfat: Deprecated parameter 'utf8' [ 235.850023][ T5268] exfat: Deprecated parameter 'namecase' [ 235.857084][ T5268] exfat: Deprecated parameter 'utf8' [ 235.868292][ T5263] loop0: detected capacity change from 0 to 2048 [ 235.921383][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.931259][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 2: unshare(0x26020480) unshare(0x2040080) [ 236.012577][ T5266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.038677][ T5263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. executing program 4: ioperm(0x0, 0x12e, 0x8000000000008) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0xee00) [ 236.192334][ T5268] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 236.263262][ T28] audit: type=1804 audit(1715155347.271:2): pid=5263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3309508833/syzkaller.vogvms/3/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 236.396478][ T28] audit: type=1804 audit(1715155347.331:3): pid=5263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3309508833/syzkaller.vogvms/3/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 236.459416][ T5277] exFAT-fs (loop3): error, tried to truncate zeroed cluster. executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@deltclass={0x24}, 0x24}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x308}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf0}, {&(0x7f00000007c0)=""/154, 0x85}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 236.694967][ T28] audit: type=1804 audit(1715155347.631:4): pid=5266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3258365677/syzkaller.Q1XKcc/4/file1/bus" dev="loop1" ino=18 res=1 errno=0 [ 236.721690][ T28] audit: type=1804 audit(1715155347.691:5): pid=5266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3258365677/syzkaller.Q1XKcc/4/file1/bus" dev="loop1" ino=18 res=1 errno=0 executing program 0: r0 = socket(0x2b, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="63202a3a2a20770077610dace808b164c9b418d8a95b112d3dd86e2780c665896e2b9b50648ac2bd2c6d9df94e51"], 0x27) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000180)={@private0}, &(0x7f00000001c0)=0x14) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) [ 237.022124][ T5054] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.300206][ T5060] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143ffd, 0x7fe2, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x20000400) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r0, &(0x7f0000000180), 0x20000000}, 0x20) executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x890b, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x34}}, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1}}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000011000100"/20, @ANYRES32=r2], 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r3 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x0, 0x0}, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r3, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x40030000000000}, 0x0) executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x21, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x74, 0x93, 0x1d, 0x40, 0xc45, 0x614a, 0xe6af, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9c, 0x80, 0xf4}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000006c0), 0x0, 0x0}) [ 238.397981][ T5293] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 238.524905][ T5293] veth1_macvtap: left promiscuous mode [ 238.747859][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 239.177621][ T7] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 239.187429][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.248755][ T7] usb 1-1: config 0 descriptor?? [ 239.315550][ T7] gspca_main: sonixj-2.14.0 probing 0c45:614a executing program 3: syz_emit_ethernet(0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="f60db9be9ce2aaaadcaaaaaa81"], 0x0) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a80)=@newlink={0x38, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000500)=[{&(0x7f00000004c0)="9e01", 0x2}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @local}}}], 0x20}, 0x0) executing program 1: [ 239.753275][ T7] gspca_sonixj: reg_r err -71 [ 239.759083][ T7] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3}, 0x8) [ 239.834113][ T7] usb 1-1: USB disconnect, device number 2 executing program 3: io_uring_setup(0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) executing program 4: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x2a}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0, 0x2}, 0x20) executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/62, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x200000000) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/119, 0x77}], 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) executing program 0: syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac00090400000107000009090585"], 0x0) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x12, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30) executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/xfrm_stat\x00') syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x3, 0x1800, 0x10000) pread64(r1, &(0x7f0000004180)=""/4096, 0x1000, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000013c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x0, [0x8, 0x0, 0x0, 0x6]}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x1dd00) executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@deltclass={0x24}, 0x24}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x308}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf0}, {&(0x7f00000007c0)=""/154, 0x85}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x2c, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)) [ 241.187454][ T7] usb 1-1: new low-speed USB device number 3 using dummy_hcd executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) [ 241.339341][ T5324] loop2: detected capacity change from 0 to 2048 [ 241.523072][ T5324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.636738][ T7] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 241.647038][ T7] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 241.656629][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.684593][ T5329] loop3: detected capacity change from 0 to 512 [ 241.794732][ T28] audit: type=1804 audit(1715155352.751:6): pid=5324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3247654853/syzkaller.oJfkkV/5/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 241.821244][ T28] audit: type=1804 audit(1715155352.801:7): pid=5324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3247654853/syzkaller.oJfkkV/5/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 241.983961][ T5329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.997482][ T5329] ext4 filesystem being mounted at /root/syzkaller-testdir2780282300/syzkaller.6Y9wrO/7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.136797][ T7] usb 1-1: string descriptor 0 read error: -71 [ 242.145042][ T7] hub 1-1:32.0: bad descriptor, ignoring hub [ 242.151486][ T7] hub 1-1:32.0: probe with driver hub failed with error -5 [ 242.279753][ T7] usb 1-1: USB disconnect, device number 3 [ 242.565111][ T5063] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.762839][ T5059] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.828308][ T5336] udevd[5336]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x10) executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) executing program 0: socket$inet(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$rxrpc(0x21, 0x2, 0x2) socket$rxrpc(0x21, 0x2, 0xa) pipe(&(0x7f00000001c0)) inotify_init() dup(0xffffffffffffffff) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2000, &(0x7f000003d000/0x2000)=nil}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYRES16=r1], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) [ 243.467941][ T5343] ===================================================== [ 243.475374][ T5343] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x17ad/0x1ee0 [ 243.483816][ T5343] bpf_prog_run_generic_xdp+0x17ad/0x1ee0 [ 243.489844][ T5343] do_xdp_generic+0xb68/0x1440 [ 243.494827][ T5343] tun_get_user+0x4bcd/0x69e0 [ 243.499873][ T5343] tun_chr_write_iter+0x3af/0x5d0 [ 243.505114][ T5343] vfs_write+0xb63/0x1520 [ 243.509779][ T5343] ksys_write+0x20f/0x4c0 [ 243.514319][ T5343] __x64_sys_write+0x93/0xe0 [ 243.519232][ T5343] x64_sys_call+0x3062/0x3b50 [ 243.524181][ T5343] do_syscall_64+0xcf/0x1e0 [ 243.529090][ T5343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.535231][ T5343] [ 243.537753][ T5343] Uninit was stored to memory at: [ 243.543143][ T5343] pskb_expand_head+0x30f/0x19d0 [ 243.548377][ T5343] do_xdp_generic+0x931/0x1440 [ 243.553324][ T5343] tun_get_user+0x4bcd/0x69e0 [ 243.558290][ T5343] tun_chr_write_iter+0x3af/0x5d0 [ 243.563502][ T5343] vfs_write+0xb63/0x1520 [ 243.568143][ T5343] ksys_write+0x20f/0x4c0 [ 243.572682][ T5343] __x64_sys_write+0x93/0xe0 [ 243.577552][ T5343] x64_sys_call+0x3062/0x3b50 [ 243.582435][ T5343] do_syscall_64+0xcf/0x1e0 [ 243.587226][ T5343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.593327][ T5343] [ 243.595831][ T5343] Uninit was created at: [ 243.600390][ T5343] __kmalloc_node_track_caller+0x767/0x10c0 [ 243.606635][ T5343] kmalloc_reserve+0x249/0x4a0 [ 243.611573][ T5343] __alloc_skb+0x35b/0x7a0 [ 243.616267][ T5343] alloc_skb_with_frags+0xc8/0xbf0 [ 243.621623][ T5343] sock_alloc_send_pskb+0xa81/0xbf0 [ 243.627225][ T5343] tun_get_user+0x209a/0x69e0 [ 243.632097][ T5343] tun_chr_write_iter+0x3af/0x5d0 [ 243.637446][ T5343] vfs_write+0xb63/0x1520 [ 243.641981][ T5343] ksys_write+0x20f/0x4c0 [ 243.646613][ T5343] __x64_sys_write+0x93/0xe0 [ 243.651406][ T5343] x64_sys_call+0x3062/0x3b50 [ 243.656451][ T5343] do_syscall_64+0xcf/0x1e0 [ 243.661149][ T5343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.667349][ T5343] [ 243.669770][ T5343] CPU: 0 PID: 5343 Comm: syz-executor.4 Not tainted 6.9.0-rc7-syzkaller-00012-gdccb07f2914c #0 [ 243.680396][ T5343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 243.690782][ T5343] ===================================================== [ 243.697935][ T5343] Disabling lock debugging due to kernel taint [ 243.704207][ T5343] Kernel panic - not syncing: kmsan.panic set ... [ 243.710749][ T5343] CPU: 0 PID: 5343 Comm: syz-executor.4 Tainted: G B 6.9.0-rc7-syzkaller-00012-gdccb07f2914c #0 [ 243.722757][ T5343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 243.732969][ T5343] Call Trace: [ 243.736367][ T5343] [ 243.739412][ T5343] dump_stack_lvl+0x216/0x2d0 [ 243.744298][ T5343] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 243.750318][ T5343] dump_stack+0x1e/0x30 [ 243.754668][ T5343] panic+0x4e2/0xcd0 [ 243.758805][ T5343] ? kmsan_get_metadata+0x51/0x1d0 [ 243.764125][ T5343] kmsan_report+0x2d5/0x2e0 [ 243.768815][ T5343] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 243.774828][ T5343] ? __msan_warning+0x95/0x120 [ 243.779824][ T5343] ? bpf_prog_run_generic_xdp+0x17ad/0x1ee0 [ 243.785920][ T5343] ? do_xdp_generic+0xb68/0x1440 [ 243.791046][ T5343] ? tun_get_user+0x4bcd/0x69e0 [ 243.796092][ T5343] ? tun_chr_write_iter+0x3af/0x5d0 [ 243.801485][ T5343] ? vfs_write+0xb63/0x1520 [ 243.806186][ T5343] ? ksys_write+0x20f/0x4c0 [ 243.810906][ T5343] ? __x64_sys_write+0x93/0xe0 [ 243.815879][ T5343] ? x64_sys_call+0x3062/0x3b50 [ 243.820944][ T5343] ? do_syscall_64+0xcf/0x1e0 [ 243.825814][ T5343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.832090][ T5343] ? ___bpf_prog_run+0xe018/0xe0f0 [ 243.837448][ T5343] ? kmsan_get_metadata+0x146/0x1d0 [ 243.842856][ T5343] ? __bpf_prog_run32+0xb2/0xe0 [ 243.847913][ T5343] ? kmsan_get_metadata+0x146/0x1d0 [ 243.853335][ T5343] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 243.859348][ T5343] __msan_warning+0x95/0x120 [ 243.864168][ T5343] bpf_prog_run_generic_xdp+0x17ad/0x1ee0 [ 243.870156][ T5343] do_xdp_generic+0xb68/0x1440 [ 243.875140][ T5343] ? tun_get_user+0x4b4d/0x69e0 [ 243.880185][ T5343] tun_get_user+0x4bcd/0x69e0 [ 243.885059][ T5343] ? kmsan_get_metadata+0x146/0x1d0 [ 243.890450][ T5343] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 243.896946][ T5343] ? ref_tracker_alloc+0x420/0x7e0 [ 243.902377][ T5343] ? kmsan_get_metadata+0x146/0x1d0 [ 243.907771][ T5343] tun_chr_write_iter+0x3af/0x5d0 [ 243.913020][ T5343] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 243.918768][ T5343] vfs_write+0xb63/0x1520 [ 243.923345][ T5343] ksys_write+0x20f/0x4c0 [ 243.927906][ T5343] __x64_sys_write+0x93/0xe0 [ 243.932743][ T5343] x64_sys_call+0x3062/0x3b50 [ 243.937637][ T5343] do_syscall_64+0xcf/0x1e0 [ 243.942335][ T5343] ? clear_bhb_loop+0x25/0x80 [ 243.947263][ T5343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.953356][ T5343] RIP: 0033:0x7fb7d827caaf [ 243.957913][ T5343] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 243.977734][ T5343] RSP: 002b:00007fb7d8f84090 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 243.986342][ T5343] RAX: ffffffffffffffda RBX: 00007fb7d83abf80 RCX: 00007fb7d827caaf [ 243.994490][ T5343] RDX: 000000000000fdef RSI: 0000000020000580 RDI: 00000000000000c8 [ 244.002624][ T5343] RBP: 00007fb7d82ca49e R08: 0000000000000000 R09: 0000000000000000 [ 244.010756][ T5343] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 244.018882][ T5343] R13: 000000000000000b R14: 00007fb7d83abf80 R15: 00007ffceb9aa3f8 [ 244.027043][ T5343] [ 244.030500][ T5343] Kernel Offset: disabled [ 244.034911][ T5343] Rebooting in 86400 seconds..