Warning: Permanently added '10.128.1.3' (ED25519) to the list of known hosts. 2024/04/25 17:12:49 fuzzer started 2024/04/25 17:12:50 dialing manager at 10.128.0.169:30013 [ 185.783232][ T5019] cgroup: Unknown subsys name 'net' [ 186.026411][ T5019] cgroup: Unknown subsys name 'rlimit' [ 229.375211][ T1218] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.382229][ T1218] ieee802154 phy1 wpan1: encryption failed: -22 [ 242.472224][ T5019] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/04/25 17:13:48 code coverage: enabled 2024/04/25 17:13:48 comparison tracing: enabled 2024/04/25 17:13:48 extra coverage: enabled 2024/04/25 17:13:48 delay kcov mmap: enabled 2024/04/25 17:13:48 setuid sandbox: enabled 2024/04/25 17:13:48 namespace sandbox: enabled 2024/04/25 17:13:48 Android sandbox: /sys/fs/selinux/policy does not exist 2024/04/25 17:13:48 fault injection: enabled 2024/04/25 17:13:48 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2024/04/25 17:13:48 net packet injection: enabled 2024/04/25 17:13:48 net device setup: enabled 2024/04/25 17:13:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/04/25 17:13:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/04/25 17:13:48 NIC VF setup: PCI device 0000:00:11.0 is not available 2024/04/25 17:13:48 USB emulation: enabled 2024/04/25 17:13:48 hci packet injection: enabled 2024/04/25 17:13:48 wifi device emulation: enabled 2024/04/25 17:13:48 802.15.4 emulation: enabled 2024/04/25 17:13:48 swap file: enabled 2024/04/25 17:13:49 starting 5 executor processes [ 245.526435][ T5039] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 245.538740][ T5039] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 245.579453][ T5039] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 245.596387][ T5039] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 245.636707][ T5039] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 245.665437][ T5039] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 246.028682][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 246.042282][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 246.064135][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 246.113089][ T5046] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 246.130331][ T5046] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 246.140190][ T5046] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 246.150688][ T5046] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 246.169604][ T4406] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 246.183345][ T4406] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 246.229799][ T4406] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 246.252087][ T4406] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 246.262361][ T4406] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 246.271747][ T5046] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 246.309568][ T4406] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 246.319026][ T5039] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 246.331095][ T5039] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 246.332907][ T4406] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 246.350006][ T5039] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 246.350429][ T4406] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 246.362218][ T5039] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 246.375866][ T5039] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 246.382249][ T4406] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 246.452814][ T5048] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 246.478008][ T5048] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 247.093797][ T5035] chnl_net:caif_netlink_parms(): no params data found [ 247.769107][ T5048] Bluetooth: hci0: command tx timeout [ 248.020257][ T5049] chnl_net:caif_netlink_parms(): no params data found [ 248.238457][ T5048] Bluetooth: hci1: command tx timeout [ 248.485652][ T5048] Bluetooth: hci3: command tx timeout [ 248.485723][ T5046] Bluetooth: hci2: command tx timeout [ 248.711853][ T5041] chnl_net:caif_netlink_parms(): no params data found [ 248.719695][ T5048] Bluetooth: hci4: command tx timeout [ 248.759777][ T5035] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.767651][ T5035] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.775717][ T5035] bridge_slave_0: entered allmulticast mode [ 248.785451][ T5035] bridge_slave_0: entered promiscuous mode [ 248.823702][ T5051] chnl_net:caif_netlink_parms(): no params data found [ 248.869118][ T5035] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.876991][ T5035] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.886465][ T5035] bridge_slave_1: entered allmulticast mode [ 248.896030][ T5035] bridge_slave_1: entered promiscuous mode [ 248.906186][ T5043] chnl_net:caif_netlink_parms(): no params data found [ 249.204003][ T5035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.291761][ T5035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.582584][ T5035] team0: Port device team_slave_0 added [ 249.607695][ T5049] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.615685][ T5049] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.623865][ T5049] bridge_slave_0: entered allmulticast mode [ 249.633675][ T5049] bridge_slave_0: entered promiscuous mode [ 249.663494][ T5035] team0: Port device team_slave_1 added [ 249.814356][ T5049] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.822904][ T5049] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.830966][ T5049] bridge_slave_1: entered allmulticast mode [ 249.838800][ T5048] Bluetooth: hci0: command tx timeout [ 249.840765][ T5049] bridge_slave_1: entered promiscuous mode [ 249.977880][ T5035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.986680][ T5035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.015066][ T5035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.256770][ T5035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.264233][ T5035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.291019][ T5035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.323708][ T5048] Bluetooth: hci1: command tx timeout [ 250.339262][ T5049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.536878][ T5049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.580258][ T5048] Bluetooth: hci3: command tx timeout [ 250.586028][ T5046] Bluetooth: hci2: command tx timeout [ 250.634949][ T5043] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.643023][ T5043] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.651158][ T5043] bridge_slave_0: entered allmulticast mode [ 250.660808][ T5043] bridge_slave_0: entered promiscuous mode [ 250.761055][ T5035] hsr_slave_0: entered promiscuous mode [ 250.771729][ T5035] hsr_slave_1: entered promiscuous mode [ 250.787442][ T5041] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.795419][ T5041] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.803608][ T5041] bridge_slave_0: entered allmulticast mode [ 250.805609][ T5046] Bluetooth: hci4: command tx timeout [ 250.813031][ T5041] bridge_slave_0: entered promiscuous mode [ 250.828561][ T5043] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.836368][ T5043] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.844285][ T5043] bridge_slave_1: entered allmulticast mode [ 250.853724][ T5043] bridge_slave_1: entered promiscuous mode [ 250.905834][ T5051] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.913867][ T5051] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.921980][ T5051] bridge_slave_0: entered allmulticast mode [ 250.931469][ T5051] bridge_slave_0: entered promiscuous mode [ 251.023195][ T5041] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.031196][ T5041] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.039463][ T5041] bridge_slave_1: entered allmulticast mode [ 251.049131][ T5041] bridge_slave_1: entered promiscuous mode [ 251.067740][ T5049] team0: Port device team_slave_0 added [ 251.076308][ T5051] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.084313][ T5051] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.092214][ T5051] bridge_slave_1: entered allmulticast mode [ 251.101887][ T5051] bridge_slave_1: entered promiscuous mode [ 251.121428][ T5049] team0: Port device team_slave_1 added [ 251.141155][ T5043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.294558][ T5043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.586367][ T5041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.605585][ T5043] team0: Port device team_slave_0 added [ 251.623210][ T5041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.690099][ T5049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.697461][ T5049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.724441][ T5049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.748541][ T5051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.760758][ T5049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.767961][ T5049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.794559][ T5049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.867219][ T5043] team0: Port device team_slave_1 added [ 251.941561][ T5046] Bluetooth: hci0: command tx timeout [ 251.951535][ T5051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.186821][ T5041] team0: Port device team_slave_0 added [ 252.221183][ T5041] team0: Port device team_slave_1 added [ 252.251701][ T5043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.259118][ T5043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.285552][ T5043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.401706][ T5046] Bluetooth: hci1: command tx timeout [ 252.438141][ T5043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.445561][ T5043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.472326][ T5043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.514232][ T5051] team0: Port device team_slave_0 added [ 252.621074][ T5049] hsr_slave_0: entered promiscuous mode [ 252.631578][ T5049] hsr_slave_1: entered promiscuous mode [ 252.641269][ T5046] Bluetooth: hci2: command tx timeout [ 252.641661][ T5048] Bluetooth: hci3: command tx timeout [ 252.653502][ T5049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.661549][ T5049] Cannot create hsr debugfs directory [ 252.723105][ T5051] team0: Port device team_slave_1 added [ 252.734294][ T5041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.741660][ T5041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.769760][ T5041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.809831][ T5041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.817055][ T5041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.843762][ T5041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.888565][ T5048] Bluetooth: hci4: command tx timeout [ 253.099757][ T5043] hsr_slave_0: entered promiscuous mode [ 253.112903][ T5043] hsr_slave_1: entered promiscuous mode [ 253.121710][ T5043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.129686][ T5043] Cannot create hsr debugfs directory [ 253.245841][ T5051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.253808][ T5051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.280285][ T5051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.329142][ T5035] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 253.390497][ T5051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.397704][ T5051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.424121][ T5051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.470503][ T5035] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 253.597309][ T5041] hsr_slave_0: entered promiscuous mode [ 253.607820][ T5041] hsr_slave_1: entered promiscuous mode [ 253.617495][ T5041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.625468][ T5041] Cannot create hsr debugfs directory [ 253.633243][ T5035] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 253.837382][ T5035] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 253.986665][ T5051] hsr_slave_0: entered promiscuous mode [ 254.000078][ T5048] Bluetooth: hci0: command tx timeout [ 254.006908][ T5051] hsr_slave_1: entered promiscuous mode [ 254.017337][ T5051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.026214][ T5051] Cannot create hsr debugfs directory [ 254.483295][ T5048] Bluetooth: hci1: command tx timeout [ 254.728593][ T5048] Bluetooth: hci2: command tx timeout [ 254.734296][ T5048] Bluetooth: hci3: command tx timeout [ 254.895817][ T5049] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 254.960587][ T5048] Bluetooth: hci4: command tx timeout [ 255.038073][ T5049] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 255.129706][ T5049] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 255.211638][ T5049] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 255.464979][ T5043] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 255.531361][ T5043] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 255.569519][ T5043] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 255.594321][ T5041] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 255.635281][ T5041] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 255.659321][ T5043] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 255.805825][ T5051] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 255.858448][ T5041] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 255.913398][ T5041] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 255.941065][ T5051] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 256.035673][ T5051] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 256.082704][ T5051] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 256.488004][ T5035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.830577][ T5035] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.995291][ T4654] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.003192][ T4654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.124145][ T5043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.146810][ T4654] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.154710][ T4654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.271197][ T5049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.515763][ T5043] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.623077][ T5041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.691578][ T5049] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.738045][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.745938][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.811866][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.819776][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.930896][ T778] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.938836][ T778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.078502][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.086449][ T5096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.289032][ T5041] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.355983][ T5051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.494820][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.502714][ T5096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.633213][ T5043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.688000][ T5051] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.725718][ T5049] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 258.737893][ T5049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.814862][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.822755][ T5096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.140420][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.148359][ T5096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.177742][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.185623][ T5096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.327095][ T5041] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 259.337970][ T5041] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 260.696563][ T5035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.414047][ T5049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.532027][ T5035] veth0_vlan: entered promiscuous mode [ 261.603192][ T5043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.740941][ T5035] veth1_vlan: entered promiscuous mode [ 261.810058][ T5041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.137273][ T5049] veth0_vlan: entered promiscuous mode [ 262.323998][ T5051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.381874][ T5035] veth0_macvtap: entered promiscuous mode [ 262.445987][ T5043] veth0_vlan: entered promiscuous mode [ 262.494353][ T5049] veth1_vlan: entered promiscuous mode [ 262.516771][ T5035] veth1_macvtap: entered promiscuous mode [ 262.626370][ T5043] veth1_vlan: entered promiscuous mode [ 262.876491][ T5035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.009741][ T5035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.155702][ T5043] veth0_macvtap: entered promiscuous mode [ 263.215588][ T5035] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.226119][ T5035] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.235464][ T5035] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.244770][ T5035] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.314590][ T5043] veth1_macvtap: entered promiscuous mode [ 263.332700][ T5051] veth0_vlan: entered promiscuous mode [ 263.355605][ T5049] veth0_macvtap: entered promiscuous mode [ 263.485278][ T5049] veth1_macvtap: entered promiscuous mode [ 263.540555][ T5051] veth1_vlan: entered promiscuous mode [ 263.621453][ T5043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.632441][ T5043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.650417][ T5043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.846630][ T5043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.859656][ T5043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.876177][ T5043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.911874][ T5049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.927078][ T5049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.940955][ T5049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.953783][ T5049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.971274][ T5049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.037664][ T5049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.048862][ T5049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.059076][ T5049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.070085][ T5049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.089037][ T5049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.149544][ T5043] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.158916][ T5043] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.168026][ T5043] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.177389][ T5043] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.295222][ T5049] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.304497][ T5049] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.313754][ T5049] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.325261][ T5049] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.368089][ T5051] veth0_macvtap: entered promiscuous mode [ 264.451368][ T5051] veth1_macvtap: entered promiscuous mode [ 264.690230][ T5051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.701210][ T5051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.713634][ T5051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.725277][ T5051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.735495][ T5051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.746292][ T5051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.762705][ T5051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.123084][ T5051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.138951][ T5051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.150760][ T5051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.161699][ T5051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.171871][ T5051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.182708][ T5051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.200824][ T5051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.438737][ T5051] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.447883][ T5051] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.457310][ T5051] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.466648][ T5051] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.695994][ T5041] veth0_vlan: entered promiscuous mode [ 265.927006][ T5041] veth1_vlan: entered promiscuous mode [ 266.329775][ T5041] veth0_macvtap: entered promiscuous mode [ 266.422558][ T5041] veth1_macvtap: entered promiscuous mode [ 266.750413][ T5041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.761906][ T5041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.772300][ T5041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.783191][ T5041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.793368][ T5041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.804446][ T5041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.814612][ T5041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.825844][ T5041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.842262][ T5041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.075132][ T5041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.087447][ T5041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.097968][ T5041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.108825][ T5041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.119099][ T5041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.129960][ T5041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.140422][ T5041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.151521][ T5041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.167643][ T5041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.363052][ T5041] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.372398][ T5041] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.383007][ T5041] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.392208][ T5041] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.554758][ T2501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.563085][ T2501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.908693][ T5096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.916814][ T5096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.029564][ T778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.037683][ T778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.303834][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.312838][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f0000000640)="04000ae2c9182c2f28f4bb606da93ffc9bb69a31c25f0c30de98f09791569772dc", 0x21) executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000001180), 0x4) write(r0, &(0x7f0000000000)="02", 0x35a63c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) [ 272.986844][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.995243][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.172604][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.181815][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = mq_open(&(0x7f0000000180)='\xfe\x9cK\x99\xbe\xc5\xfa\xe5\x9et\xc8y\xb3\xcc\x9b\xde\xb7\x91j\xfc\x84Q\xcc-qG\xae\xe4_\xf2,\"N2@|\x00\xa7\x12\xa4\xdf\xd6\xec\x8d\xd4\v\a\xb7\xaah\xb4I', 0x40, 0x0, 0x0) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) open(&(0x7f0000005a80)='.\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r2 = dup3(r0, r1, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = open(0x0, 0x0, 0x0) mkdirat$cgroup(r3, &(0x7f0000000140)='syz0\x00', 0x1ff) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x5451, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x514, [0x0, 0x20000400, 0x200008e4, 0x20000914], 0x0, &(0x7f0000000000), 0x0}, 0x588) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) [ 273.743561][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.751830][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100012020702500000000002020207b1af8ff00000000bfa100000000230007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='9p_protocol_dump\x00', r0}, 0x10) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000800)=ANY=[@ANYBLOB="1000000000000000000400000000000038110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095", @ANYBLOB="be24be463e0012fd9f18fa5fd75aa5b5cba6607c0e79c52ec8ae3694a0326d6e8dd250c6b573d7ded4f9e527c692872b457532cdf29199da781dc998b88145cb15e8ab9fabd134562a5e4d91f166ae", @ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2800000002070102"], 0x28}}, 0x0) [ 274.022094][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.030418][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket(0x2, 0x1, 0x0) r2 = dup(r1) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) r4 = dup3(r0, r3, 0x0) ioctl$FIONREAD(r4, 0x4004667f, &(0x7f00000001c0)) executing program 1: r0 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000000)) [ 274.673124][ T5227] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r0 = syz_io_uring_setup(0x404a, &(0x7f0000000080)={0x0, 0x0, 0x11180}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = fcntl$dupfd(r0, 0x0, r1) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) executing program 0: r0 = socket(0x1f, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) executing program 1: mknod(&(0x7f0000000080)='./file0\x00', 0x8000, 0x4100) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x20004b07, &(0x7f0000000000)) executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f0000000640)="04000ae2c9182c2f28f4bb606da93ffc9bb69a31c25f0c30de98f09791569772dc", 0x21) [ 275.846864][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.855178][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.141768][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.150730][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0xe02) r0 = socket(0x18, 0x2, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) r1 = socket(0x18, 0x3, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r1, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000001180), 0x4) write(r0, &(0x7f0000000000)="02", 0x35a63c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000012002102000000000000000007000000", @ANYRES64=r0], 0x28}}, 0x0) executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180300002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001a00)=ANY=[@ANYBLOB="620af8ff0c011021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf9943134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2eed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583584acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff4e6b0cf09f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7c48de61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf184fa141f9421a43d7d2cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e4000000000d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb8434503680300383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd574d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0d3848eee5937f82a7f15fea34444f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51361c37c61a43b5afd865b60d4cae891b73220f17d25979a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e9611d2e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4b28aafe23de66fed972e0dddfb33f64e64701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f842c32fef175d577eaf5576830e88a42d93e1fe9c0b4a4a2689217380400a9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000020bd79e41c682139c58ac1deb039a691ad640e12c12fe11d70fe495906f2d5d71778acbd4eee53a3996cb0de84bd2b059d60c0f96a53ea44e0b293865aa68df494f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c519663b4652ff871e0f6dfff9f7d34ecf04be0a58c3d53174b67d1886e34b81e19f60da56acc64739c3acab24aa8d0ac92d465074f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c5100000000000000000000000000000000000000000000000054371e0e813db47d3cb1cbcd162c6103ebc77dc9beb0070e216e0124883e187514104a9352b26ad7e3a0524145d7c42d2a26ae0344eef9482e6781d43326b8a090600bcbfe1e3230ba95f738239d88a3b9fbc7f79a333414ab3fc69761aca15cbe1b3e1e23dc7774f9caf14f0103e97c31be313b964569b1f44beaebe42dd6620357325e96caab5fddd92ff12cd86c05d7235f459c68cec48e5cb46679e03c75c20a49d541fade58bf4e6bd29b4168810e2e09b044ab3daf55d1bce03daf577ac5f14953261839fd5430de6f9b217074890b20a193d13001ac9b0683884be993cd43136b91bc25fde2d7fe95c55668a3da7db41225349a86f1287f0c88790cdc5d57f90e773430e7750c6bad2139f4cd3768ce4c71788220bc8983316b818bc3db233ceef74a89a842f5cb63a1fc71df206947b3109697325d5921bcc57b39e0843ca6064fe07128ecdb98b2d86d5bb2f0c34ee737357920297a63b6fe168acbe040d5a709dbe0d6289abd6312dd14e32aab0d82af9faf21f7dff14abd652910135208c6cc761704275bb0bb771dabac04078a243010cd665a555ae313529dffe7b439144bcf8b84f6a71b296ddbffbafe79531e6a79a87f07c39a7cf5a029a36996c9dec1543391c4b5a6712e65a822fafd98f587000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f00000ad000/0x3000)=nil) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004038101014000000000001090224000100000000090400000103000000092100001d0122030009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000004c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x3, {0x3, 0x0, "ba"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100012020702500000000002020207b1af8ff00000000bfa100000000230007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='9p_protocol_dump\x00', r0}, 0x10) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000800)=ANY=[@ANYBLOB="1000000000000000000400000000000038110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095", @ANYBLOB="be24be463e0012fd9f18fa5fd75aa5b5cba6607c0e79c52ec8ae3694a0326d6e8dd250c6b573d7ded4f9e527c692872b457532cdf29199da781dc998b88145cb15e8ab9fabd134562a5e4d91f166ae", @ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2800000002070102"], 0x28}}, 0x0) [ 277.192956][ T5250] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}, {&(0x7f0000000000)="abd9c32b4cda1a3216bc6122ab0ebef711bf97a83ccff2ec04bc2736da4d14867e89bcdc377bd92cc83485d6f81e83b19e9080e96d134274c555d19ce69f0491caafdf835b18ad8c7cbdd3e3a7a4f47d790ad5bf52a3487031c32ed5e4b0f7b40342aaa4946bb75275e416f41670faafa8090beb20a3250ab86b48d7bc0ccbdd9ab25c1b82ccab807d6ce3aacbc22f55", 0x90}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0x6, &(0x7f0000006e00)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @loopback}}}}, &(0x7f0000006b40)=0xb0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000180)={0x0, 0x0, 0x1}, 0x8) executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r0 = syz_io_uring_setup(0x404a, &(0x7f0000000080)={0x0, 0x0, 0x11180}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) [ 277.722669][ T5256] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 277.854500][ T4654] usb 4-1: new high-speed USB device number 2 using dummy_hcd executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7ffe) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = memfd_create(&(0x7f0000000480)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xcef\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9\xc0\xf1\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad#\xd8b\x90\xeb\x05\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdem\xe3+q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\x99[\xff\x1f\x94\xc2\xdb\xbaG\xa6UD\x88Y6\x11Y\xd4\xd1\xde\x9a{]\xe2\x98W\xb9\x13\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x15\x7f\xd5WS\xfbN\xec)B\xe7R\xa5\xd7O\x83\x80}\xcc5\x99\xdb\xd6\xbd\x9c\x05l\xfc.\xf4\xbbeF\xa3\xea}\xf1\x86z\xca\xad\x82\xd9IRV5\xa77\'\x1a\x1c\x89\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c!@JRY\xa3|Pjk\xdc\xa5d\xc2\xecn\xc9X\xfc\xd4D\x13\"\xb2\x06\xbd&\xf86\xddXv\xc9\x1322L\xd6\x99\xf6\t\x9d\xbeZ\x02\xc0\xa41\xf9sNG\x02\x83\xe6Bl\xd2\x02\xfb[\x82\xc0I\xb7\xf6\xe5Z\xa1}\xee}\x8b\x89\x04\x8a\'\xc7J\xca\xdf:\x8ft\xe0\xf8\a~\xf7\v\xd7&6\xf4\xde\x10d\xb3\xdc\xb22`\x8cT\x92\xdcf\xab\t-:\x14\aKN\xc1\xecvrE\x8a\xca\xb0\x92g\xc1\tC\xd9\x94\x13\"\x05\xb9\xf3\x89\xc9\xf9', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, r2, 0x16, 0x0, @val=@tcx={@prog_fd}}, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000), 0x4) executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x48c00, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800}) read(r0, 0x0, 0x0) [ 278.286092][ T4654] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.298382][ T4654] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.308897][ T4654] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 278.318543][ T4654] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.421410][ T4654] usb 4-1: config 0 descriptor?? executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = fcntl$dupfd(r0, 0x0, r1) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000300)={0x0, 0x1}, 0xc) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1}, 0xc) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000012002102000000000000000007000000", @ANYRES64=r0], 0x28}}, 0x0) [ 278.987393][ T4654] steelseries 0003:1038:1410.0001: item fetching failed at offset 0/3 [ 279.154629][ T4654] steelseries 0003:1038:1410.0001: parse failed [ 279.161909][ T4654] steelseries 0003:1038:1410.0001: probe with driver steelseries failed with error -22 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100012020702500000000002020207b1af8ff00000000bfa100000000230007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='9p_protocol_dump\x00', r0}, 0x10) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000800)=ANY=[@ANYBLOB="1000000000000000000400000000000038110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095", @ANYBLOB="be24be463e0012fd9f18fa5fd75aa5b5cba6607c0e79c52ec8ae3694a0326d6e8dd250c6b573d7ded4f9e527c692872b457532cdf29199da781dc998b88145cb15e8ab9fabd134562a5e4d91f166ae", @ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2800000002070102"], 0x28}}, 0x0) [ 279.324753][ T4654] usb 4-1: USB disconnect, device number 2 [ 279.426639][ T5269] pim6reg: entered allmulticast mode executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) read$watch_queue(r0, &(0x7f00000001c0)=""/153, 0x99) [ 279.717565][ T5271] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000001180), 0x4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) [ 279.903092][ T5274] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r0 = syz_io_uring_setup(0x404a, &(0x7f0000000080)={0x0, 0x0, 0x11180}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r0, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) executing program 1: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x48c00, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800}) read(r0, 0x0, 0x0) executing program 2: r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) flock(r0, 0x6) unlink(&(0x7f0000000040)='./bus\x00') socket(0x18, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x709d, &(0x7f0000000000)) read$FUSE(0xffffffffffffffff, &(0x7f0000008bc0)={0x2020}, 0x2020) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f000000ac40)={0x0, 0x0}) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f000000ad80)={&(0x7f000000ad00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x7}, {0x0, [0x0, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f000000ad40)=""/15, 0x1f, 0xf, 0x0, 0x2f}, 0x20) syz_open_dev$loop(&(0x7f0000000100), 0x7ffffffffffffffd, 0x882) socket(0x2, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_read_resolv_list_size={{}, {0x2}}}}, 0x8) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000012002102000000000000000007000000", @ANYRES64=r0], 0x28}}, 0x0) executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = fcntl$dupfd(r0, 0x0, r1) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) [ 281.288729][ T28] audit: type=1800 audit(1714065266.703:2): pid=5286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1943 res=0 errno=0 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @local}, @redirect={0x5, 0x0, 0x0, @local, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c61e0000000000000001a13bd5c510069d9d0000e01f00ff0200000000000000000000000000010001c204"], 0x0) [ 281.799734][ T5295] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100012020702500000000002020207b1af8ff00000000bfa100000000230007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='9p_protocol_dump\x00', r0}, 0x10) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2800000002070102"], 0x28}}, 0x0) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000040)={0x0, 0xffffffffffffffff, &(0x7f0000000100), &(0x7f00000002c0), 0x71ae8a72, r0}, 0x38) [ 282.320530][ T5300] net_ratelimit: 2 callbacks suppressed [ 282.320614][ T5300] dccp_invalid_packet: P.Data Offset(172) too large executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000001180), 0x4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) [ 282.627455][ T5302] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x48c00, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800}) read(r0, 0x0, 0x0) executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000005c0)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f00000014c0)="0b02b75dadaf814291ff4103a5b753c04d9bf169", 0x14) executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_read_resolv_list_size={{}, {0x2}}}}, 0x8) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000012002102000000000000000007000000", @ANYRES64=r0], 0x28}}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x0, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f00000003c0)={0x0, 0x6800}, 0x10) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100012020702500000000002020207b1af8ff00000000bfa100000000230007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='9p_protocol_dump\x00', r0}, 0x10) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2800000002070102"], 0x28}}, 0x0) [ 284.324800][ T5319] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = fcntl$dupfd(r0, 0x0, r1) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000001180), 0x4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) [ 284.814932][ T5327] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x48c00, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800}) read(r0, 0x0, 0x0) executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 285.759327][ T5048] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 285.767980][ T5048] Bluetooth: hci0: Injecting HCI hardware error event [ 285.776368][ T5046] Bluetooth: hci0: hardware error 0x00 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_read_resolv_list_size={{}, {0x2}}}}, 0x8) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000012002102000000000000000007000000", @ANYRES64=r0], 0x28}}, 0x0) executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000008000000000000000000851000000600000018290000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x90) executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100012020702500000000002020207b1af8ff00000000bfa100000000230007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='9p_protocol_dump\x00', r0}, 0x10) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2800000002070102"], 0x28}}, 0x0) [ 286.766744][ T5048] Bluetooth: hci0: unexpected event for opcode 0x202a executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x420f, r0) executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) write(r0, &(0x7f0000000000)="02", 0x35a63c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) [ 287.360302][ T5347] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 287.371001][ T5347] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 287.412597][ T5346] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x48c00, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800}) read(r0, 0x0, 0x0) executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) [ 287.859253][ T5046] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 287.922895][ T5046] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 287.931664][ T5046] Bluetooth: hci3: Injecting HCI hardware error event [ 287.939425][ T5046] Bluetooth: hci3: hardware error 0x00 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000180)='./bus\x00', 0x400, &(0x7f0000000440)=ANY=[], 0x1, 0x63a, &(0x7f0000000840)="$eJzs3c1vHGcdB/DvbDZONpTUTZM2oEq1GgkQFolf5IK5EBBCPlSoKgfOVuI0VjZpsV3kVoia92sP/QPKwTdOSNwjlQsXuPXqYyUkLr1gTotmdna98VvtNvGu288nmn2eZ5+ZZ37Pb2Z2dteKNsCX1sJkmg9TZGHylfWyvbU5297anL3fqyc5l2QjaSZpJCn+2+l0PkxuJkV/mGJXucf7y/OvffTJ1sfdVrNeqvUbh213NBv1kokkZ+rycY1363OPV/RneDPJtbqEoTubpPOIX/zjqX7PgNZ+W58/kRiBJ6vo3jf3GE8u1Bd6+T6ge1fs3rNPtY1hBwAAAAAn4OntbGe9uDjsOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC02Nj5/f+iXhq9+kSK3u//j9XPpa6PlhePt/rDJxUHAAAAAAAAAJygF7eznfVc7LU7RfU3/5eqxuXq8St5K6tZykquZz2LWctaVjKdZHxgoLH1xbW1lekjbDmz75YznxLoubpsPZ55AwAAAAAAAMAXzG+zsPP3fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAVFcqZbVMvlXn08jWaS80nGyvU2kn/16qfZw2EHAAAAACfg6e1sZz0Xe+1OUX3mf6763H8+b+VB1rKctbSzlNvVdwHdT/2Nrc3Z9tbm7P1y2TvuD/9zrDCqEdP97mH/PV+t1mjlTparZ67nVt5IO7fTqLYsXa3j6Y26K67flDEVP6gdMbLbdVnO/L263OPdY032IMf8MmW8ysjZfkam6tjKbDzTOzL7H6FjHp3de5pOox/s5V172jWJz5TzC3VZzuePB+V8KHZnYmbg7Hvu8Jwn3/zbX35+t/3g3t07q5OjM6WjOVOXneqxtTcTswOZeP6LnIk9pqpMXOm3F/KT/CyTmcirWclyfpnFrGUpE/lxVVusz+di4JI/IFM3H2m9+mmRjNVnaPdgHS+ml6ptL2Y5P80buZ2lvFz9m8l0vpu5zGV+4AhfOfwIV1d944CrvvPVfYO/9q260kryp7ocDWVenxnI6+Br7njVN/jMTpYuHSFLx3xtbH69rpT7+F1djobdmZgeyMSzh2fiz9XLymr7wb2Vu4tvHm13l96rK+V19IeRukuU58ul8mBVrUfPjrLv2X37pqu+y/2+xp6+K/2+7pW6ceCVOla/h9s70kzV9/y+fbNV39WBvv3ebwEw8i58+8JY69+tf7Y+aP2+dbf1yvkfnfveuRfGcvbvZ7/fnDrzjcYLxV/zQX698/kfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD47FbffufeYru9tLKr0ul03j2g6zRXej9ndoI7/dpTyUjMfaiV/3U6nfqZYhTiObzSqY1KPMOoDPmFCXjibqzdf/PG6tvvfGf5/uLrS68vPZifm5ufmp97efbGneX20lT3cdhRAk/Czk1/2JEAAAAAAAAAAAAAR3US/51g2HMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATreFyTQfpsj01PWpsr21Odsul159Z81mkkaS4ldJ8WFyM90l4wPDFQft5/3l+dc++mTr452xmr31G4dtdzQb9ZKJJGfq8nGNd+tzj1f0Z1gm7FovcTBs/w8AAP//JggO2w==") truncate(&(0x7f00000001c0)='./file2\x00', 0x0) executing program 2: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000180)='./file0\x00', r3, &(0x7f00000001c0)='./file0\x00') executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_read_resolv_list_size={{}, {0x2}}}}, 0x8) executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00!', 0x2}], 0x4, 0x0, 0x0) [ 288.916675][ T5361] loop0: detected capacity change from 0 to 1024 [ 289.151005][ T5361] ===================================================== [ 289.158722][ T5361] BUG: KMSAN: uninit-value in hfsplus_lookup+0x671/0xf00 [ 289.166039][ T5361] hfsplus_lookup+0x671/0xf00 [ 289.171200][ T5361] __lookup_slow+0x506/0x6e0 [ 289.176033][ T5361] lookup_slow+0x6a/0xd0 [ 289.180970][ T5361] walk_component+0x467/0x650 [ 289.185867][ T5361] path_lookupat+0x27d/0x6f0 [ 289.190934][ T5361] filename_lookup+0x22f/0x750 [ 289.195935][ T5361] user_path_at_empty+0x8b/0x3a0 [ 289.201404][ T5361] do_sys_truncate+0x85/0x250 [ 289.206355][ T5361] __ia32_compat_sys_truncate+0x6c/0xa0 [ 289.212477][ T5361] ia32_sys_call+0x24d4/0x40a0 [ 289.217533][ T5361] __do_fast_syscall_32+0xb4/0x120 [ 289.223089][ T5361] do_fast_syscall_32+0x38/0x80 [ 289.228308][ T5361] do_SYSENTER_32+0x1f/0x30 [ 289.238769][ T5361] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 289.247022][ T5361] [ 289.249698][ T5361] Uninit was created at: [ 289.254221][ T5361] __alloc_pages+0x9d6/0xe70 [ 289.259200][ T5361] new_slab+0x2de/0x1400 [ 289.263651][ T5361] ___slab_alloc+0x1184/0x33d0 [ 289.268916][ T5361] kmem_cache_alloc_lru+0x6d7/0xbe0 [ 289.274393][ T5361] hfsplus_alloc_inode+0x5a/0xd0 [ 289.282203][ T5361] alloc_inode+0x86/0x460 [ 289.286808][ T5361] iget_locked+0x2bf/0xee0 [ 289.292110][ T5361] hfsplus_iget+0x59/0xaf0 [ 289.296752][ T5361] hfsplus_btree_open+0x13e/0x1d10 [ 289.302313][ T5361] hfsplus_fill_super+0x1113/0x2700 [ 289.307754][ T5361] mount_bdev+0x397/0x520 [ 289.312670][ T5361] hfsplus_mount+0x4d/0x60 [ 289.317313][ T5361] legacy_get_tree+0x114/0x290 [ 289.322517][ T5361] vfs_get_tree+0xa7/0x570 [ 289.327210][ T5361] do_new_mount+0x71f/0x15e0 [ 289.332613][ T5361] path_mount+0x742/0x1f20 [ 289.343040][ T5361] __se_sys_mount+0x725/0x810 [ 289.347991][ T5361] __ia32_sys_mount+0xe3/0x150 [ 289.355109][ T5361] ia32_sys_call+0x3a9a/0x40a0 [ 289.360888][ T5361] __do_fast_syscall_32+0xb4/0x120 [ 289.366249][ T5361] do_fast_syscall_32+0x38/0x80 [ 289.371673][ T5361] do_SYSENTER_32+0x1f/0x30 [ 289.376420][ T5361] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 289.383263][ T5361] [ 289.385721][ T5361] CPU: 0 PID: 5361 Comm: syz-executor.0 Not tainted 6.9.0-rc5-syzkaller-00042-ge88c4cfcb7b8 #0 [ 289.396578][ T5361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 289.407044][ T5361] ===================================================== [ 289.414291][ T5361] Disabling lock debugging due to kernel taint [ 289.420765][ T5361] Kernel panic - not syncing: kmsan.panic set ... [ 289.427332][ T5361] CPU: 0 PID: 5361 Comm: syz-executor.0 Tainted: G B 6.9.0-rc5-syzkaller-00042-ge88c4cfcb7b8 #0 [ 289.439390][ T5361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 289.449665][ T5361] Call Trace: [ 289.453096][ T5361] [ 289.456175][ T5361] dump_stack_lvl+0x216/0x2d0 [ 289.461109][ T5361] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 289.467251][ T5361] dump_stack+0x1e/0x30 [ 289.471670][ T5361] panic+0x4e2/0xcd0 [ 289.475813][ T5361] ? kmsan_get_metadata+0x101/0x1d0 [ 289.481277][ T5361] kmsan_report+0x2d5/0x2e0 [ 289.486165][ T5361] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 289.492214][ T5361] ? __msan_warning+0x95/0x120 [ 289.497268][ T5361] ? hfsplus_lookup+0x671/0xf00 [ 289.502396][ T5361] ? __lookup_slow+0x506/0x6e0 [ 289.507411][ T5361] ? lookup_slow+0x6a/0xd0 [ 289.512067][ T5361] ? walk_component+0x467/0x650 [ 289.517151][ T5361] ? path_lookupat+0x27d/0x6f0 [ 289.522152][ T5361] ? filename_lookup+0x22f/0x750 [ 289.527323][ T5361] ? user_path_at_empty+0x8b/0x3a0 [ 289.532672][ T5361] ? do_sys_truncate+0x85/0x250 [ 289.537798][ T5361] ? __ia32_compat_sys_truncate+0x6c/0xa0 [ 289.543804][ T5361] ? ia32_sys_call+0x24d4/0x40a0 [ 289.549024][ T5361] ? __do_fast_syscall_32+0xb4/0x120 [ 289.554569][ T5361] ? do_fast_syscall_32+0x38/0x80 [ 289.559854][ T5361] ? do_SYSENTER_32+0x1f/0x30 [ 289.564875][ T5361] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 289.571761][ T5361] ? __hfsplus_brec_find+0x6a4/0x7b0 [ 289.577345][ T5361] ? kmsan_get_metadata+0x146/0x1d0 [ 289.582791][ T5361] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 289.589357][ T5361] ? __msan_memcpy+0x108/0x1c0 [ 289.594383][ T5361] ? hfsplus_bnode_read+0x23a/0x250 [ 289.599855][ T5361] ? kmsan_get_metadata+0x146/0x1d0 [ 289.605262][ T5361] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 289.611284][ T5361] __msan_warning+0x95/0x120 [ 289.616139][ T5361] hfsplus_lookup+0x671/0xf00 [ 289.621096][ T5361] ? __d_lookup_rcu_op_compare+0x6ab/0x6f0 [ 289.627243][ T5361] ? kmsan_get_metadata+0x146/0x1d0 [ 289.632669][ T5361] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 289.638702][ T5361] ? __pfx_hfsplus_lookup+0x10/0x10 [ 289.644154][ T5361] ? __pfx_hfsplus_lookup+0x10/0x10 [ 289.649649][ T5361] __lookup_slow+0x506/0x6e0 [ 289.654510][ T5361] lookup_slow+0x6a/0xd0 [ 289.658980][ T5361] walk_component+0x467/0x650 [ 289.663864][ T5361] ? kmsan_get_metadata+0x146/0x1d0 [ 289.669328][ T5361] path_lookupat+0x27d/0x6f0 [ 289.674164][ T5361] filename_lookup+0x22f/0x750 [ 289.679170][ T5361] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 289.685319][ T5361] user_path_at_empty+0x8b/0x3a0 [ 289.690530][ T5361] ? do_sys_truncate+0x3d/0x250 [ 289.695650][ T5361] do_sys_truncate+0x85/0x250 [ 289.700569][ T5361] __ia32_compat_sys_truncate+0x6c/0xa0 [ 289.706386][ T5361] ia32_sys_call+0x24d4/0x40a0 [ 289.711417][ T5361] __do_fast_syscall_32+0xb4/0x120 [ 289.716757][ T5361] ? irqentry_exit+0x16/0x60 [ 289.721539][ T5361] do_fast_syscall_32+0x38/0x80 [ 289.726640][ T5361] do_SYSENTER_32+0x1f/0x30 [ 289.731354][ T5361] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 289.737920][ T5361] RIP: 0023:0xf7307579 [ 289.742141][ T5361] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 289.761981][ T5361] RSP: 002b:00000000f5ef95ac EFLAGS: 00000206 ORIG_RAX: 000000000000005c [ 289.770691][ T5361] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 0000000000000000 [ 289.778858][ T5361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 289.787009][ T5361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 289.795135][ T5361] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 289.803359][ T5361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 289.811510][ T5361] [ 289.814952][ T5361] Kernel Offset: disabled [ 289.819364][ T5361] Rebooting in 86400 seconds..