Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts. 2024/04/07 03:41:11 fuzzer started 2024/04/07 03:41:11 dialing manager at 10.128.0.169:30004 [ 73.941527][ T5059] cgroup: Unknown subsys name 'net' [ 74.080632][ T5059] cgroup: Unknown subsys name 'rlimit' 2024/04/07 03:41:13 syscalls: 3899 2024/04/07 03:41:13 code coverage: enabled 2024/04/07 03:41:13 comparison tracing: enabled 2024/04/07 03:41:13 extra coverage: enabled 2024/04/07 03:41:13 delay kcov mmap: enabled 2024/04/07 03:41:13 setuid sandbox: enabled 2024/04/07 03:41:13 namespace sandbox: enabled 2024/04/07 03:41:13 Android sandbox: /sys/fs/selinux/policy does not exist 2024/04/07 03:41:13 fault injection: enabled 2024/04/07 03:41:13 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2024/04/07 03:41:13 net packet injection: enabled 2024/04/07 03:41:13 net device setup: enabled 2024/04/07 03:41:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/04/07 03:41:13 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/04/07 03:41:13 NIC VF setup: PCI device 0000:00:11.0 is not available 2024/04/07 03:41:13 USB emulation: enabled 2024/04/07 03:41:13 hci packet injection: enabled 2024/04/07 03:41:13 wifi device emulation: enabled 2024/04/07 03:41:13 802.15.4 emulation: enabled 2024/04/07 03:41:13 swap file: enabled [ 75.818402][ T5059] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/04/07 03:41:14 starting 5 executor processes [ 76.962309][ T5080] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.970759][ T5080] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.975286][ T5084] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.979452][ T5080] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.987665][ T5084] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.992808][ T5080] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.000427][ T5084] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.006489][ T5080] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.014690][ T5084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.021847][ T5080] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.028150][ T5084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.035380][ T5080] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.042853][ T5084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.048163][ T5080] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.063078][ T5080] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.063232][ T5084] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.091175][ T5083] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.093794][ T4456] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.100265][ T5083] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.129460][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.137736][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.146659][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.154643][ T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.162184][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.172826][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.182853][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.190821][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.210927][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.220667][ T52] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.228152][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.792032][ T5073] chnl_net:caif_netlink_parms(): no params data found [ 77.847289][ T5081] chnl_net:caif_netlink_parms(): no params data found [ 77.906543][ T5074] chnl_net:caif_netlink_parms(): no params data found [ 77.939164][ T5085] chnl_net:caif_netlink_parms(): no params data found [ 78.121793][ T5073] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.130546][ T5073] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.137911][ T5073] bridge_slave_0: entered allmulticast mode [ 78.145637][ T5073] bridge_slave_0: entered promiscuous mode [ 78.155696][ T5073] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.163101][ T5073] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.170843][ T5073] bridge_slave_1: entered allmulticast mode [ 78.177911][ T5073] bridge_slave_1: entered promiscuous mode [ 78.185802][ T5072] chnl_net:caif_netlink_parms(): no params data found [ 78.291955][ T5073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.334052][ T5081] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.341514][ T5081] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.348734][ T5081] bridge_slave_0: entered allmulticast mode [ 78.356730][ T5081] bridge_slave_0: entered promiscuous mode [ 78.401435][ T5074] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.408718][ T5074] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.416124][ T5074] bridge_slave_0: entered allmulticast mode [ 78.426016][ T5074] bridge_slave_0: entered promiscuous mode [ 78.436501][ T5073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.462415][ T5081] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.469739][ T5081] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.476946][ T5081] bridge_slave_1: entered allmulticast mode [ 78.484290][ T5081] bridge_slave_1: entered promiscuous mode [ 78.504284][ T5085] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.511722][ T5085] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.519099][ T5085] bridge_slave_0: entered allmulticast mode [ 78.526345][ T5085] bridge_slave_0: entered promiscuous mode [ 78.534816][ T5085] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.542944][ T5085] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.550354][ T5085] bridge_slave_1: entered allmulticast mode [ 78.557702][ T5085] bridge_slave_1: entered promiscuous mode [ 78.565489][ T5074] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.572793][ T5074] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.580077][ T5074] bridge_slave_1: entered allmulticast mode [ 78.587077][ T5074] bridge_slave_1: entered promiscuous mode [ 78.624845][ T5073] team0: Port device team_slave_0 added [ 78.679023][ T5074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.695143][ T5073] team0: Port device team_slave_1 added [ 78.730219][ T5081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.756251][ T5085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.767981][ T5074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.802121][ T5073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.809196][ T5073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.835394][ T5073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.862860][ T5081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.885603][ T5085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.921899][ T5073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.929831][ T5073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.956610][ T5073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.968462][ T5072] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.976457][ T5072] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.984249][ T5072] bridge_slave_0: entered allmulticast mode [ 78.992545][ T5072] bridge_slave_0: entered promiscuous mode [ 79.036248][ T5074] team0: Port device team_slave_0 added [ 79.050915][ T5072] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.058141][ T5072] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.065494][ T5072] bridge_slave_1: entered allmulticast mode [ 79.072642][ T5072] bridge_slave_1: entered promiscuous mode [ 79.096397][ T5081] team0: Port device team_slave_0 added [ 79.107840][ T5085] team0: Port device team_slave_0 added [ 79.115740][ T5074] team0: Port device team_slave_1 added [ 79.163227][ T5081] team0: Port device team_slave_1 added [ 79.169588][ T52] Bluetooth: hci2: command tx timeout [ 79.169878][ T52] Bluetooth: hci0: command tx timeout [ 79.181147][ T5086] Bluetooth: hci1: command tx timeout [ 79.193196][ T5085] team0: Port device team_slave_1 added [ 79.215111][ T5074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.222214][ T5074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.248248][ T5074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.259639][ T52] Bluetooth: hci3: command tx timeout [ 79.267885][ T5074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.275045][ T5074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.301114][ T5074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.317012][ T5072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.329794][ T5072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.338991][ T52] Bluetooth: hci4: command tx timeout [ 79.356749][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.363934][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.389947][ T5081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.450224][ T5073] hsr_slave_0: entered promiscuous mode [ 79.456991][ T5073] hsr_slave_1: entered promiscuous mode [ 79.476534][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.483919][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.510232][ T5081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.529154][ T5085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.536186][ T5085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.562232][ T5085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.615551][ T5085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.622917][ T5085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.649209][ T5085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.687640][ T5074] hsr_slave_0: entered promiscuous mode [ 79.694305][ T5074] hsr_slave_1: entered promiscuous mode [ 79.700994][ T5074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.709569][ T5074] Cannot create hsr debugfs directory [ 79.718650][ T5072] team0: Port device team_slave_0 added [ 79.727771][ T5072] team0: Port device team_slave_1 added [ 79.764334][ T5081] hsr_slave_0: entered promiscuous mode [ 79.771389][ T5081] hsr_slave_1: entered promiscuous mode [ 79.777594][ T5081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.785309][ T5081] Cannot create hsr debugfs directory [ 79.888554][ T5072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.895840][ T5072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.921844][ T5072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.942020][ T5085] hsr_slave_0: entered promiscuous mode [ 79.948586][ T5085] hsr_slave_1: entered promiscuous mode [ 79.955623][ T5085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.963525][ T5085] Cannot create hsr debugfs directory [ 80.004742][ T5072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.012054][ T5072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.038174][ T5072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.171428][ T5072] hsr_slave_0: entered promiscuous mode [ 80.178003][ T5072] hsr_slave_1: entered promiscuous mode [ 80.184481][ T5072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.192530][ T5072] Cannot create hsr debugfs directory [ 80.606865][ T5073] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.621103][ T5073] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.633273][ T5073] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.644903][ T5073] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.705120][ T5074] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.721322][ T5074] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.734362][ T5074] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.748339][ T5074] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.841374][ T5085] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.853893][ T5085] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.864587][ T5085] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.877912][ T5085] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.036047][ T5081] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.065219][ T5081] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.077466][ T5081] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.125982][ T5081] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.166197][ T5074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.230472][ T5072] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.241139][ T5072] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.249216][ T5086] Bluetooth: hci0: command tx timeout [ 81.249822][ T4456] Bluetooth: hci1: command tx timeout [ 81.254710][ T52] Bluetooth: hci2: command tx timeout [ 81.290136][ T5072] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.301145][ T5072] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.323745][ T5074] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.345909][ T52] Bluetooth: hci3: command tx timeout [ 81.368301][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.375746][ T5120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.409186][ T52] Bluetooth: hci4: command tx timeout [ 81.424705][ T5085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.440154][ T5073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.473478][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.480762][ T5126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.542156][ T5073] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.604430][ T5085] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.625953][ T1759] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.633133][ T1759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.661491][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.668732][ T5126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.701477][ T5081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.727910][ T1759] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.735279][ T1759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.804322][ T1759] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.811562][ T1759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.837799][ T5081] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.853946][ T5072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.951886][ T5124] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.959305][ T5124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.005106][ T5072] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.026479][ T5124] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.033737][ T5124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.092280][ T1759] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.100099][ T1759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.154838][ T5124] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.162271][ T5124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.205357][ T5085] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.344855][ T5074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.405865][ T5073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.685452][ T5073] veth0_vlan: entered promiscuous mode [ 82.737574][ T5073] veth1_vlan: entered promiscuous mode [ 82.746833][ T5074] veth0_vlan: entered promiscuous mode [ 82.785163][ T5085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.804700][ T5074] veth1_vlan: entered promiscuous mode [ 82.847331][ T5072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.873099][ T5081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.965648][ T5074] veth0_macvtap: entered promiscuous mode [ 82.994751][ T5073] veth0_macvtap: entered promiscuous mode [ 83.011873][ T5074] veth1_macvtap: entered promiscuous mode [ 83.034362][ T5073] veth1_macvtap: entered promiscuous mode [ 83.107051][ T5072] veth0_vlan: entered promiscuous mode [ 83.134200][ T5074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.204201][ T5074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.214987][ T5073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.227202][ T5073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.261799][ T5073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.310138][ T5074] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.320714][ T5074] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.330748][ T52] Bluetooth: hci1: command tx timeout [ 83.337148][ T5074] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.339872][ T52] Bluetooth: hci2: command tx timeout [ 83.349026][ T4456] Bluetooth: hci0: command tx timeout [ 83.362502][ T5074] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.376941][ T5081] veth0_vlan: entered promiscuous mode [ 83.397389][ T5072] veth1_vlan: entered promiscuous mode [ 83.408271][ T5073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.419268][ T4456] Bluetooth: hci3: command tx timeout [ 83.434612][ T5073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.448692][ T5073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.477184][ T5081] veth1_vlan: entered promiscuous mode [ 83.490207][ T4456] Bluetooth: hci4: command tx timeout [ 83.501695][ T5073] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.512204][ T5073] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.521107][ T5073] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.530057][ T5073] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.705410][ T5072] veth0_macvtap: entered promiscuous mode [ 83.749296][ T5085] veth0_vlan: entered promiscuous mode [ 83.784438][ T5072] veth1_macvtap: entered promiscuous mode [ 83.795100][ T5081] veth0_macvtap: entered promiscuous mode [ 83.826657][ T5085] veth1_vlan: entered promiscuous mode [ 83.841702][ T5124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.856075][ T5124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.895632][ T5081] veth1_macvtap: entered promiscuous mode [ 83.943751][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.961862][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.973730][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.987719][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.000530][ T5072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.036106][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.047914][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.060490][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.071635][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.083599][ T5072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.102595][ T2452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.116952][ T2452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.120590][ T5072] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.134186][ T5072] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.144371][ T5072] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.153780][ T5072] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.201506][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.215791][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.226634][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.237829][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.248062][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.260252][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.271685][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.285784][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.297041][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.309940][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.321106][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.330983][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.341541][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.353463][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.364134][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.380670][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.387723][ T5085] veth0_macvtap: entered promiscuous mode [ 84.428267][ T5081] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.437797][ T5081] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.447347][ T5081] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.456344][ T5081] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.475143][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.483769][ T5085] veth1_macvtap: entered promiscuous mode [ 84.520305][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 03:41:22 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="180000fa01000000000000000000000095"], 0x0}, 0x90) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4e8b}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x74, &(0x7f00000000c0)=""/116, 0x41100, 0x20, '\x00', 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x8, 0x4, 0xf75}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000002c0)=[r0, r0, r0, 0xffffffffffffffff], &(0x7f0000000300)=[{0x5, 0x5, 0x8}, {0x1, 0x3, 0xf, 0xc}, {0x0, 0x5, 0x3, 0x4}, {0x2, 0x2, 0xe, 0x6}, {0x0, 0x4, 0xb}, {0x1, 0x4, 0xf, 0x1}, {0x5, 0x3, 0xd, 0x5}, {0x5, 0x1, 0xd, 0x3}, {0x2, 0x47, 0x3, 0x5}, {0x7, 0x1, 0xf, 0x8}], 0x10, 0xf0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x2d, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xf42}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x5, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000640)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x10, 0xb43, 0x8001}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000006c0)=[r0, r0, r0, r0, r0], &(0x7f0000000700)=[{0x1, 0x1, 0x7, 0xb}, {0x2, 0x3, 0x10, 0x6}, {0x3, 0x4, 0x2, 0x8}, {0x2, 0x2, 0x9, 0xc}, {0x3, 0x4, 0x6, 0x3}, {0x3, 0x1, 0x1, 0x9}, {0x2, 0x5, 0xa, 0x7}, {0x3, 0x5, 0x1, 0x9}, {0x2, 0x2, 0x5, 0x5}, {0x1, 0x5, 0x5, 0xc}], 0x10, 0x7fffffff}, 0x90) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r0, 0x2e, 0x0, @void}, 0x10) (async) r2 = socket$inet6(0xa, 0x2, 0x0) (async) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r3, 0x118, 0x0, 0x0, 0x20000000) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x1d, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) [ 84.588290][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.612607][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.638138][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.650412][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.661840][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.672802][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 03:41:22 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd6007000000060000009ace00000000000000002100000002ff02000000000000000000100000000104004e"], 0x0) [ 84.683470][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.695743][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.720292][ T5085] batman_adv: batadv0: Interface activated: batadv_slave_0 03:41:22 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000200)={0x24, @long={0x3, 0x2, {0x5555555555550001}}}, 0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, r6}, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d00)={'syztnl1\x00', &(0x7f0000001c80)={'syztnl0\x00', r6, 0x2f, 0x0, 0x0, 0x10000, 0x42, @dev={0xfe, 0x80, '\x00', 0x15}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x7800, 0x39b8, 0xfa}}) bind$inet(r7, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r7, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x200116c0}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r7, &(0x7f0000000740)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRES8, @ANYRES16], 0x100000530) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f00000004c0)=""/29, 0x1d, 0x0, &(0x7f0000000500)=""/100, 0x64}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000050000000000000056f9ffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7fc0000000000008500000083000000bf0900000000000055090100000000009500000000000000180000000100000000000000f8ffffff17120000", @ANYRES32, @ANYRESOCT=r7], &(0x7f0000000400)='GPL\x00', 0x100, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x405, 0x9, 0x5}, 0x10, r8, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000600)=[{0x0, 0x1, 0xc, 0x9}], 0x10, 0x3ff}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x7, 0x18, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x2, 0x2, 0x0, 0x6, 0x9, 0x10, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}}, @map_fd, @tail_call]}, &(0x7f0000000880)='GPL\x00', 0x1, 0x1000, &(0x7f0000000b80)=""/4096, 0x41000, 0xd, '\x00', r6, 0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, 0xffffffffffffffff, 0x0, &(0x7f0000001b80)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xfff}, 0x90) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x59, 0x0, r4, 0x81, '\x00', 0x0, r2, 0x3, 0x2, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0x6, &(0x7f00000002c0)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x101}], &(0x7f0000000300)='syzkaller\x00', 0x100, 0xe7, &(0x7f0000000340)=""/231, 0x41000, 0x40, '\x00', 0x0, 0xe, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x4, 0x3, 0x80, 0x5}, 0x10, r8, r5, 0x4, &(0x7f0000000600)=[r9, r1, 0x1], &(0x7f0000000640)=[{0x2, 0x1, 0xb, 0xc}, {0x3, 0x3, 0xd, 0xb}, {0x2, 0x3, 0xf, 0x3}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x61}, 0x90) r10 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r10, 0x81fd) io_setup(0x3, &(0x7f0000002140)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) creat(&(0x7f0000000040)='./bus\x00', 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r11}, 0x10) write$cgroup_type(r2, &(0x7f0000000980), 0x9) [ 84.800771][ T5128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.816240][ T5128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 03:41:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc040aed4, &(0x7f0000000400)={0x0, 0x0, 0x300, 0x20002000, &(0x7f0000000000/0x2000)=nil}) [ 84.914342][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.955578][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.976487][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.987320][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.006007][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.017760][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.028159][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.041302][ T5169] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.049135][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.097100][ T5085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.118521][ T5085] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.128403][ T5085] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.139917][ T5085] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.151025][ T5085] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 03:41:23 executing program 3: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) pipe(&(0x7f00000001c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r2 = memfd_create(&(0x7f0000000140)='D\xa3\xd5Wj\xfcwx0\xc1\xac\x12\x1a\vG\xa9~vB\xbc\\$w\xb5VoA\xaa\t\xc3\xe3Q\xbc\xee[\xbe\xe1\xa2\xe0\xff\x8e\t\xb0\x1a\xe7\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xde*W\x1dPL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)]\xfb\x83i\xfc\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\x92\xad\xd0\xa2\x9a\x1cV\xcc6P-Qi:T\xc0\xd2\t?\bpBl\xf4*', 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) r3 = dup3(r1, r2, 0x0) readlinkat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/114, 0x72) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r5, &(0x7f0000000000)="240000001a005f0500f9f4070009040180000000000000000000000008000400c00e0000", 0x24) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe80, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) [ 85.310017][ T5128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.320672][ T5128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.411125][ T4456] Bluetooth: hci0: command tx timeout [ 85.411157][ T52] Bluetooth: hci2: command tx timeout [ 85.416686][ T4456] Bluetooth: hci1: command tx timeout [ 85.489612][ T4456] Bluetooth: hci3: command tx timeout [ 85.508422][ T5124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 03:41:23 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5c6, &(0x7f0000000200), &(0x7f0000000300)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r0, 0x381b, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004e0001"], 0x1c}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = add_key$user(&(0x7f0000002f00), &(0x7f0000002f40)={'syz', 0x2}, &(0x7f0000003280)='#', 0x1, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="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", 0x7f1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000001080)={r5, r6, r5}, &(0x7f00000010c0)=""/48, 0x30, &(0x7f0000001180)={&(0x7f0000001100)={'sha1-generic\x00'}, &(0x7f0000001140)="63a5ff66", 0x4}) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000080)={'ah\x00'}, &(0x7f00000000c0)=0x1e) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote, @multicast1}, &(0x7f00000001c0)=0xc) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000130000012abd7000ffdbdf2500000000", @ANYRES32=r7, @ANYBLOB="0100009664e826914a862610e3387d42c19900800100eb240000008000000000cf0577705e973c180000000005000000000000028e0200000000000000000000000000000000000300000000000000d8365e4c15a6c66f8988128fe62ee700c846753a0cf8053ec92049062b5d4b1aa507a6ff7e8cc6d4a603e9ba530b"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:41:23 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x401, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x100}, 0x48) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0xfffff612, 0x81}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r2}, 0x0, 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f00000004c0), &(0x7f0000000180)=@tcp6=r4}, 0x20) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000000c0)="45b46fbe7fdca862f4484ad916fa919c93ce789aa142d489c5c618a242a6a6562e8410232a1a30da2dcca2d0023792d730311c7f6f52fe2c476b50a2cf43dfbf1bd69c74423ec5d003355b58735f7d1e195da755909b013846d77d0ce825bda2a5ba9952e169374b01829b61e5df3494b127b514df0f65cab0aef36090977d88130c5944645a291fc7") ptrace$getregset(0x4205, r5, 0x200, &(0x7f00000004c0)={&(0x7f0000002080)=""/4096, 0x1000}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000004c40)={r3, &(0x7f0000006100)="c02e7039d56450a1ad5fff387cf7991736f0c3586559d5ea1871d935c56daf59510410f2", &(0x7f00000061c0)=""/4096}, 0x20) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000300)=ANY=[]) [ 85.549288][ T5124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.571476][ T4456] Bluetooth: hci4: command tx timeout [ 85.647207][ T5177] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 85.685101][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 03:41:23 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000780)='+', 0xffc3, 0x5d0d, 0x0, 0x0) [ 85.716643][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.783608][ T5179] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 85.906681][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.923205][ T5182] dccp_xmit_packet: Payload too large (65475) for featneg. [ 85.967928][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 03:41:23 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8949, &(0x7f0000000100)={'bond0\x00', @ifru_names='ipvlan0\x00'}) [ 86.086305][ T5127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.127042][ T5127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 03:41:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="400100001000210400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000001c002400128009000100766c616e0000000014000280100003800c00fbffffffffffffff000014000300766c616e30"], 0x58}}, 0x0) 03:41:24 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300000000806d850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000003740)=ANY=[@ANYBLOB="01000000000000008804"]) ioctl$TCSBRKP(r0, 0x5425, 0x0) r7 = io_uring_setup(0x2ad5, &(0x7f00000001c0)) close(r7) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "3c890901e58dbc1953d9c777db37cd2967ed02"}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002, 0x8072, r0, 0x9e043000) 03:41:24 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x9, 0x1c, 0x2f, 0x20, 0x14c8, 0x3, 0x56c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x8e, 0xa4, 0x43, 0x0, [], [{{0x9, 0x5, 0x85, 0xe50c5d80f30f71da, 0x20}}]}}]}}]}}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, r2, 0x16, 0x0, @val=@tcx={@prog_fd}}, 0x40) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x21, &(0x7f0000000000), 0x8) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)=ANY=[@ANYBLOB="5de5ef84d2932b1d4d4f4c789861b0f648c66b963d02cc4e3dce2d3b110d224dae3ecbb98b60006debfb549c43187a7d51dc1ecaeb6e996af0579b3f9bad1afcd9a32d98ee389509ab84cb611d01bc0ff0c2cdedf9bbd2b86d2d1e485c57d305462aaf7856951a476c32608955cbdfc030ef66eea8ee21c1724eacb4bb9bdc90f1dd7b1ef1"]) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000ec0)={0x1, r1}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x2, 0x21, 0x0, &(0x7f00000000c0)=""/71, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 03:41:24 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0x401c5820, &(0x7f0000000200)={0x0, 0x0, 0x0, {0xe, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 03:41:24 executing program 3: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000010000000000000002200018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_ext_handle_unwritten_extents\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='ext4_ext_handle_unwritten_extents\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdir(0x0, 0x0) chdir(0x0) ioctl$SIOCSIFHWADDR(r4, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x2, 0x80, 0xc2, 0x5}}) 03:41:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000400)={@val, @val, @mpls={[], @ipv6=@generic={0x0, 0x6, "5ac432", 0x0, 0x0, 0x0, @mcast2, @private0}}}, 0x36) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd0600030000002b00000067ec970001982c00fc000000000000000000000000000000ff020000000000000000000000000001"], 0xfdef) 03:41:24 executing program 4: fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r2, @ANYBLOB="0800060058"], 0x24}}, 0x0) 03:41:24 executing program 3: bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000600), 0xc30, r0}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000091000000000000000000001811000078783f2227c199d58cb72de2a559c9f052700eeff976546e7b6d16731065a6178cd3a7069dfb410b3a0eca67a576a7aece046cf81835ea99d36955c4b3ba386d860b128843c653e4ff20727c51", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000001f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) [ 86.841675][ T5199] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 86.913744][ T5190] Illegal XDP return value 4294967274 on prog (id 5) dev N/A, expect packet loss! 03:41:24 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000680)='GPL\x00'}, 0x90) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x0, {0xe, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x9, 0x43353039, 0x2, @stepwise={0x20, 0x1f, 0x2, 0x5, 0x23}}) 03:41:25 executing program 1: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000800)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5319, &(0x7f0000000240)=ANY=[@ANYBLOB="ba"]) 03:41:25 executing program 3: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)="eb", 0x1a000, 0xfe80, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:41:25 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r2}, 0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', r2}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86697bbf6e111b0549ddf382b132f837d42a8b9590a9c52bea97b9642e306953ca2845f28cd714452a0726ec9e58c3bf6364164bea4875ca24d6b49cec6b7fdea2d3414af9e4"], 0x0) [ 87.143333][ T5127] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.277958][ T5211] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 03:41:25 executing program 1: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x17, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x7f, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2000, &(0x7f000003d000/0x2000)=nil}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r3, @ANYRES16=r2], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000073213600000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x90) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r5, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000001001000002"], 0x20}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000004c0)=r0}, 0x20) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0)=r1, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x7, 0x10003, '\x00', [{0xffffffff}, {0xffffffff, 0x0, 0xfffffffffffff2b9}]}) sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xe867}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xea}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8000}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c004}, 0x4004880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x6, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x1, 0xa, 0x1, 0xa, 0x50}, @map_fd={0x18, 0x5, 0x1, 0x0, r6}]}, &(0x7f0000000580)='syzkaller\x00', 0x7, 0xed, &(0x7f00000005c0)=""/237, 0x41100, 0x1c, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000700)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0x6, 0x9, 0x2df}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000780)=[r8], &(0x7f00000007c0)=[{0x2, 0x3, 0xd, 0x5}, {0x2, 0x4, 0x6, 0xb}, {0x2, 0x4, 0xb, 0xc}], 0x10, 0x64f}, 0x90) 03:41:25 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a00)={0x28, 0x8, 0x6, 0x416, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) [ 87.418990][ T5127] usb 3-1: Using ep0 maxpacket: 32 03:41:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x10000000, 0x2c, &(0x7f00000004c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) [ 87.490536][ T5215] Bluetooth: MGMT ver 1.22 03:41:25 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000400)={@val, @val, @mpls={[], @ipv6=@generic={0x0, 0x6, "5ac432", 0x0, 0x0, 0x0, @mcast2, @private0}}}, 0x36) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd0700030000002b00000067ec970001982c00fc000000000000000000000000000000ff020000000000000000000000000001"], 0xfdef) [ 87.559055][ T5127] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 03:41:25 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095282fe89be77d15f2f7406c3855ca88cab131f68d601151334e2db265dafd874270e5954b5971b8307253290d139bfb980bcab9f11d8e9ae7ced664d5c22676eade0bf39c307848c13df5bf5e89a66d026c5930d9437c2757268f00ff948dba9437ae83d99390bd0d725d018fee7d90bcbc8ba8b650e205c1f62b17c7d0310ab4d6946608067361290f2365db0b54d320c98786dc335e337b3ea7ab83ec267f7a44d22296470605e959d6e0f20fb67b3fdf98a5703f5427ded253a89f94cebd1902a39c8bbe6eb4ae482f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = epoll_create1(0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000380)=0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000001100)={0x0, 0x0, 0x1, 0x2}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) write(r4, &(0x7f0000000080)="09000300010000", 0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='fscache_acquire\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) [ 87.650737][ T44] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.769273][ T5127] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 87.792961][ T5127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.807711][ T5127] usb 3-1: Product: syz 03:41:25 executing program 0: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000010000000000000002200018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_ext_handle_unwritten_extents\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='ext4_ext_handle_unwritten_extents\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdir(0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x2, 0x80, 0xc2, 0x5}}) [ 87.816591][ T5127] usb 3-1: Manufacturer: syz [ 87.827833][ T5127] usb 3-1: SerialNumber: syz [ 87.873141][ T5127] usb 3-1: config 0 descriptor?? [ 87.910089][ T5197] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 87.944798][ T5127] hub 3-1:0.0: bad descriptor, ignoring hub 03:41:25 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x0, {0xe, @win={{0x5, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x1}) [ 87.974769][ T5127] hub: probe of 3-1:0.0 failed with error -5 [ 87.989462][ T44] usb 5-1: too many configurations: 9, using maximum allowed: 8 03:41:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x1000000, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r1, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) [ 88.018674][ T5127] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 03:41:26 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300000000806d850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000003740)=ANY=[@ANYBLOB="01000000000000008804"]) ioctl$TCSBRKP(r0, 0x5425, 0x0) r7 = io_uring_setup(0x2ad5, &(0x7f00000001c0)) close(r7) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "3c890901e58dbc1953d9c777db37cd2967ed02"}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002, 0x8072, r0, 0x9e043000) [ 88.091450][ T44] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.119262][ T44] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 123, changing to 10 03:41:26 executing program 3: r0 = landlock_create_ruleset(&(0x7f0000000040)={0x800, 0x2}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000000)={0x2}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f00000000c0)={0x2, 0x20}, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r1, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) r2 = syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2810880, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES16=r1], 0x8b, 0x2bd, &(0x7f0000000700)="$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") r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x208241, 0x0) copy_file_range(r3, &(0x7f00000000c0)=0x5, r2, &(0x7f0000000100)=0x3, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f00000001c0)={0x2, 0x401}, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) timerfd_create(0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000080)=0x3, 0x4) r4 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100)={[{@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@numtail}, {@rodir}, {@fat=@dos1xfloppy}]}, 0x1, 0x217, &(0x7f00000004c0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB='T'], 0x9) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xd, 0x10012, r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)=@l2tp6={0xa, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x80, 0x0}, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x355, 0x3, 0x8}]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) write$binfmt_script(r6, &(0x7f0000000100)=ANY=[], 0x61) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", "5d362ced", "bc3a20b10f4ad11e"}, 0x38) [ 88.164838][ T44] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 24966, setting to 1024 [ 88.183041][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 03:41:26 executing program 0: r0 = syz_io_uring_setup(0x4072, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x2da5, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0xa, &(0x7f0000000040)=0x4c03, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) [ 88.319726][ T44] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.349836][ T44] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 123, changing to 10 [ 88.403551][ T44] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 24966, setting to 1024 [ 88.405809][ T5127] usb 3-1: USB disconnect, device number 2 [ 88.414854][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 88.452546][ T5239] loop3: detected capacity change from 0 to 64 [ 88.485074][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 03:41:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) [ 88.555265][ T5239] hfs: unable to open extent tree [ 88.573357][ T5239] hfs: can't find a HFS filesystem on dev loop3 [ 88.591710][ T44] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.630058][ T44] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 123, changing to 10 [ 88.665342][ T44] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 24966, setting to 1024 [ 88.687745][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 03:41:26 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x3, 0x0, {0x1, @pix_mp}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f00000000c0)=0x10000) connect$inet(r4, &(0x7f0000001fc0)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x541b, &(0x7f0000000040)) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x2, 0x0, 0x0, 0xfa000, 0x1a5e00}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r1, 0x16, 0x0, @val=@tcx={@prog_fd}}, 0x40) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x1d, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) [ 88.799230][ T44] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.827478][ T44] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 123, changing to 10 [ 88.868477][ T44] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 24966, setting to 1024 [ 88.888032][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 03:41:26 executing program 0: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r1, &(0x7f0000000100)={0x20}, 0xfdef) writev(r1, &(0x7f0000003480)=[{&(0x7f0000000180)="f6b53e51a38427902d4ce1b567521aec3f62d2b5d640d9f73344c02efe13904ad2e8d9a253e251cad15f40a63601a58f0905add58fafcb8091f83f98cbef6fd3b922be0b0a5c79ff1e1a001e73a86be304733299b1e53adb97750d24244c81e509a844fca255b68f45bfcecc536f03daf8350300e20053b191c2b2eae7f25e28d4fcbf3d6ccde3ca1b", 0x89}, {&(0x7f0000002280)="4507c3993ccb3c9e1bd57957ee881a5d174ea8a4c7bf1f086b2f3acce03aeec3c9c8bb8792d8249cdd2395e0ae50b7a11d5d34d3fdc031fbc011d2bf0d7fdec103180e66cd53156f8825c45b835bad13b31af9bc2c9e392ebc07b160dbd15575d30fd27d51c2ce5829044b24303ffa661b79f569827e9ad8f2e5ff574a2036f772e55a9456d5f0f848af82e31a9836118d25d0002475cd7261e31d48522d5bd9248202b8693ed22401a8b73fd9ef5762a06c74673ffa3ed971d289584a2019a6ad0a4561ca2f272ac2a12612f6bc024d7a61e83a5b79b30773e2e655154006ddf9252f2b8c2290b7583cadb96aada03e01fe58d510c4", 0xf6}, {&(0x7f0000002380)="993a571020d77d415ee874f5a1840f3c4a0fe50fd73e7f703cb49974b44c04a998420117eefba1f48e9ec528b4103f5466f8324c9ee84f2c5c", 0x39}], 0x3) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r2, 0x4024700a) read$FUSE(r1, &(0x7f0000000240)={0x2020}, 0xffa6) r3 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r3, &(0x7f0000000100)={0x20}, 0xfdef) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000feffff018000000800395032303030"], 0x15) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '/'}}], [], 0x6b}}) r7 = getuid() quotactl_fd$Q_GETFMT(r4, 0xffffffff80000401, r7, &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000023c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) read$FUSE(r3, &(0x7f0000005500)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) 03:41:26 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x400) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x18) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="800000002a00090000000000000000000440002c08001700020000000400450004000e"], 0x80}}, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0), 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040), 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{r4}, &(0x7f0000000a80), &(0x7f0000000ac0)='%-010d \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0xfffffffffffffc65, 0x2) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) r8 = open(&(0x7f0000000480)='./bus\x00', 0xe0101, 0x0) pwrite64(r8, &(0x7f0000000000)='+', 0x1, 0x4010000bffd) ioctl$VIDIOC_S_EDID(r8, 0xc0285629, &(0x7f0000000240)={0x0, 0x5, 0x0, '\x00', &(0x7f0000000200)=0x2}) r9 = open(&(0x7f0000000080)='./bus\x00', 0x40002, 0x0) fallocate(r9, 0x3, 0xe0ff, 0x400001) [ 88.993649][ T44] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 03:41:26 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x16, 0x0, @val=@tcx={@prog_fd}}, 0x40) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = dup2(r2, r2) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x8, &(0x7f0000000040), 0x2) 03:41:27 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x9, [@const={0xd, 0x0, 0x0, 0xa, 0x1}, @struct={0x2, 0x2, 0x0, 0x4, 0x1, 0x3, [{0xa, 0x1, 0x3}, {0x0, 0x0, 0x9}]}, @func={0x8, 0x0, 0x0, 0xc, 0x5}, @typedef={0xe, 0x0, 0x0, 0x8, 0x1}, @func={0x5, 0x0, 0x0, 0xc, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x3}}, @var={0x6, 0x0, 0x0, 0xe, 0x3, 0x1}, @union={0xd, 0x6, 0x0, 0x5, 0x0, 0x78ed08fd, [{0x3, 0x5, 0x7ff}, {0x4, 0x1, 0x10000}, {0x6, 0x4, 0x1}, {0xd, 0x7, 0x5}, {0x8, 0x4, 0x3ff}, {0x6, 0x3, 0x5}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x58, 0x0, 0xe}]}, {0x0, [0x0, 0x61, 0x30, 0x2e, 0x61, 0x4f, 0x2e]}}, &(0x7f0000000080)=""/11, 0x101, 0xb, 0x1, 0x3f}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r0, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%-010d \x00'}, 0x20) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0x8000, 0x49, &(0x7f0000000180)=""/73, 0x41100, 0x20, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x4, 0xd, 0x100, 0x3ff}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[r0, r0, r0, r2, r0, r0, r3, r0], &(0x7f0000000600)=[{0x2, 0x5, 0xe, 0x4}], 0x10, 0x3}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bea200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 89.035148][ T44] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 123, changing to 10 [ 89.061265][ T44] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 24966, setting to 1024 [ 89.131232][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 89.181080][ T5256] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.1'. [ 89.215562][ T5259] ================================================================== [ 89.223691][ T5259] BUG: KASAN: slab-out-of-bounds in l2cap_sock_setsockopt+0x21f4/0x2930 [ 89.232182][ T5259] Read of size 4 at addr ffff888024137a63 by task syz-executor.3/5259 [ 89.240363][ T5259] [ 89.242724][ T5259] CPU: 1 PID: 5259 Comm: syz-executor.3 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 [ 89.252731][ T5259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 89.262818][ T5259] Call Trace: [ 89.266115][ T5259] [ 89.269067][ T5259] dump_stack_lvl+0x241/0x360 [ 89.273811][ T5259] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.279024][ T5259] ? __pfx__printk+0x10/0x10 [ 89.283636][ T5259] ? _printk+0xd5/0x120 [ 89.287808][ T5259] ? __virt_addr_valid+0x183/0x520 [ 89.292989][ T5259] ? __virt_addr_valid+0x183/0x520 [ 89.298117][ T5259] print_report+0x169/0x550 [ 89.302678][ T5259] ? __virt_addr_valid+0x183/0x520 [ 89.307804][ T5259] ? __virt_addr_valid+0x183/0x520 [ 89.312928][ T5259] ? __virt_addr_valid+0x44e/0x520 [ 89.318052][ T5259] ? __phys_addr+0xba/0x170 [ 89.322701][ T5259] ? l2cap_sock_setsockopt+0x21f4/0x2930 [ 89.328350][ T5259] kasan_report+0x143/0x180 [ 89.332895][ T5259] ? l2cap_sock_setsockopt+0x214/0x2930 [ 89.338457][ T5259] ? l2cap_sock_setsockopt+0x21f4/0x2930 [ 89.344108][ T5259] l2cap_sock_setsockopt+0x21f4/0x2930 [ 89.349589][ T5259] ? __cgroup_bpf_run_filter_setsockopt+0x4c9/0x1040 [ 89.356298][ T5259] ? __pfx___cgroup_bpf_run_filter_setsockopt+0x10/0x10 [ 89.363241][ T5259] ? __pfx_l2cap_sock_setsockopt+0x10/0x10 [ 89.369068][ T5259] ? fget_task+0x40/0x90 [ 89.373347][ T5259] ? __pfx_lock_release+0x10/0x10 [ 89.378390][ T5259] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 89.383958][ T5259] ? __pfx_l2cap_sock_setsockopt+0x10/0x10 [ 89.389773][ T5259] do_sock_setsockopt+0x3af/0x720 [ 89.394841][ T5259] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 89.401212][ T5259] ? __fget_files+0x3f4/0x470 [ 89.406151][ T5259] ? __fget_files+0x28/0x470 [ 89.410788][ T5259] __sys_setsockopt+0x1ae/0x250 [ 89.415658][ T5259] __x64_sys_setsockopt+0xb5/0xd0 [ 89.420719][ T5259] do_syscall_64+0xfb/0x240 [ 89.425235][ T5259] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 89.431178][ T5259] RIP: 0033:0x7f84aae7de69 [ 89.435601][ T5259] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 89.455222][ T5259] RSP: 002b:00007f84abca80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 89.463651][ T5259] RAX: ffffffffffffffda RBX: 00007f84aafabf80 RCX: 00007f84aae7de69 [ 89.471639][ T5259] RDX: 0000000000000008 RSI: 0000000000000112 RDI: 0000000000000007 [ 89.479620][ T5259] RBP: 00007f84aaeca47a R08: 0000000000000002 R09: 0000000000000000 [ 89.487595][ T5259] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 89.495571][ T5259] R13: 000000000000000b R14: 00007f84aafabf80 R15: 00007ffe5e969c28 [ 89.503562][ T5259] [ 89.506588][ T5259] [ 89.508914][ T5259] Allocated by task 5259: [ 89.513250][ T5259] kasan_save_track+0x3f/0x80 [ 89.517930][ T5259] __kasan_kmalloc+0x98/0xb0 [ 89.522525][ T5259] __kmalloc+0x233/0x4a0 [ 89.526782][ T5259] __cgroup_bpf_run_filter_setsockopt+0xd2f/0x1040 [ 89.533286][ T5259] do_sock_setsockopt+0x6b4/0x720 [ 89.538309][ T5259] __sys_setsockopt+0x1ae/0x250 [ 89.543164][ T5259] __x64_sys_setsockopt+0xb5/0xd0 [ 89.548191][ T5259] do_syscall_64+0xfb/0x240 [ 89.552702][ T5259] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 89.558608][ T5259] [ 89.560936][ T5259] The buggy address belongs to the object at ffff888024137a60 [ 89.560936][ T5259] which belongs to the cache kmalloc-8 of size 8 [ 89.574650][ T5259] The buggy address is located 1 bytes to the right of [ 89.574650][ T5259] allocated 2-byte region [ffff888024137a60, ffff888024137a62) [ 89.588978][ T5259] [ 89.591303][ T5259] The buggy address belongs to the physical page: [ 89.597712][ T5259] page:ffffea0000904dc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888024137b60 pfn:0x24137 [ 89.609173][ T5259] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 89.616725][ T5259] page_type: 0xffffffff() [ 89.621058][ T5259] raw: 00fff00000000800 ffff888014c41280 ffffea00008fd300 dead000000000002 [ 89.629665][ T5259] raw: ffff888024137b60 0000000080800076 00000001ffffffff 0000000000000000 [ 89.638244][ T5259] page dumped because: kasan: bad access detected [ 89.644665][ T5259] page_owner tracks the page as allocated [ 89.650380][ T5259] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 16401131008, free_ts 0 [ 89.667058][ T5259] post_alloc_hook+0x1ea/0x210 [ 89.671846][ T5259] get_page_from_freelist+0x33ea/0x3580 [ 89.677401][ T5259] __alloc_pages+0x256/0x680 [ 89.682000][ T5259] alloc_slab_page+0x5f/0x160 [ 89.686711][ T5259] new_slab+0x84/0x2f0 [ 89.690796][ T5259] ___slab_alloc+0xc73/0x1260 [ 89.695484][ T5259] __kmalloc+0x2e5/0x4a0 [ 89.699742][ T5259] usb_get_status+0x93/0x2b0 [ 89.704375][ T5259] hub_probe+0x1c70/0x3640 [ 89.708805][ T5259] usb_probe_interface+0x5cb/0xb00 [ 89.713948][ T5259] really_probe+0x29e/0xc50 [ 89.718502][ T5259] __driver_probe_device+0x1a2/0x3e0 [ 89.723811][ T5259] driver_probe_device+0x50/0x430 [ 89.728877][ T5259] __device_attach_driver+0x2d6/0x530 [ 89.734286][ T5259] bus_for_each_drv+0x24e/0x2e0 [ 89.739158][ T5259] __device_attach+0x333/0x520 [ 89.743969][ T5259] page_owner free stack trace missing [ 89.749353][ T5259] [ 89.751687][ T5259] Memory state around the buggy address: [ 89.757323][ T5259] ffff888024137900: 06 fc fc fc fa fc fc fc fa fc fc fc 05 fc fc fc [ 89.765457][ T5259] ffff888024137980: 05 fc fc fc fa fc fc fc fa fc fc fc 05 fc fc fc [ 89.773700][ T5259] >ffff888024137a00: 05 fc fc fc 00 fc fc fc 07 fc fc fc 02 fc fc fc [ 89.781773][ T5259] ^ [ 89.788980][ T5259] ffff888024137a80: 06 fc fc fc fa fc fc fc 00 fc fc fc 05 fc fc fc [ 89.797092][ T5259] ffff888024137b00: 05 fc fc fc fa fc fc fc 05 fc fc fc fa fc fc fc [ 89.805246][ T5259] ================================================================== 03:41:27 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x800, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2200c3a, &(0x7f0000000140)={[{}, {@mode}]}) [ 89.917011][ T44] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.926455][ T44] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 123, changing to 10 [ 89.941554][ T44] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 24966, setting to 1024 [ 89.958822][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 89.968509][ T5259] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 89.975749][ T5259] CPU: 0 PID: 5259 Comm: syz-executor.3 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 [ 89.985776][ T5259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 89.995874][ T5259] Call Trace: [ 89.999187][ T5259] [ 90.002206][ T5259] dump_stack_lvl+0x241/0x360 [ 90.006930][ T5259] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.012207][ T5259] ? __pfx__printk+0x10/0x10 [ 90.016864][ T5259] ? preempt_schedule+0xe1/0xf0 [ 90.021787][ T5259] ? vscnprintf+0x5d/0x90 [ 90.026158][ T5259] panic+0x349/0x860 [ 90.030113][ T5259] ? check_panic_on_warn+0x21/0xb0 [ 90.035374][ T5259] ? __pfx_panic+0x10/0x10 [ 90.039845][ T5259] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 90.045880][ T5259] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 90.052252][ T5259] ? print_report+0x502/0x550 [ 90.056971][ T5259] check_panic_on_warn+0x86/0xb0 [ 90.061952][ T5259] ? l2cap_sock_setsockopt+0x21f4/0x2930 [ 90.067616][ T5259] end_report+0x6e/0x140 [ 90.071899][ T5259] kasan_report+0x154/0x180 [ 90.076445][ T5259] ? l2cap_sock_setsockopt+0x214/0x2930 [ 90.082036][ T5259] ? l2cap_sock_setsockopt+0x21f4/0x2930 [ 90.087721][ T5259] l2cap_sock_setsockopt+0x21f4/0x2930 [ 90.093228][ T5259] ? __cgroup_bpf_run_filter_setsockopt+0x4c9/0x1040 [ 90.099948][ T5259] ? __pfx___cgroup_bpf_run_filter_setsockopt+0x10/0x10 [ 90.107128][ T5259] ? __pfx_l2cap_sock_setsockopt+0x10/0x10 [ 90.112987][ T5259] ? fget_task+0x40/0x90 [ 90.117273][ T5259] ? __pfx_lock_release+0x10/0x10 [ 90.122340][ T5259] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 90.127929][ T5259] ? __pfx_l2cap_sock_setsockopt+0x10/0x10 [ 90.133774][ T5259] do_sock_setsockopt+0x3af/0x720 [ 90.138853][ T5259] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 90.144454][ T5259] ? __fget_files+0x3f4/0x470 [ 90.149171][ T5259] ? __fget_files+0x28/0x470 [ 90.153801][ T5259] __sys_setsockopt+0x1ae/0x250 [ 90.158691][ T5259] __x64_sys_setsockopt+0xb5/0xd0 [ 90.163738][ T5259] do_syscall_64+0xfb/0x240 [ 90.168249][ T5259] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 90.174164][ T5259] RIP: 0033:0x7f84aae7de69 [ 90.178592][ T5259] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 90.198201][ T5259] RSP: 002b:00007f84abca80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 90.206637][ T5259] RAX: ffffffffffffffda RBX: 00007f84aafabf80 RCX: 00007f84aae7de69 [ 90.214628][ T5259] RDX: 0000000000000008 RSI: 0000000000000112 RDI: 0000000000000007 [ 90.222659][ T5259] RBP: 00007f84aaeca47a R08: 0000000000000002 R09: 0000000000000000 [ 90.230660][ T5259] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 90.238636][ T5259] R13: 000000000000000b R14: 00007f84aafabf80 R15: 00007ffe5e969c28 [ 90.246627][ T5259] [ 90.249947][ T5259] Kernel Offset: disabled [ 90.254275][ T5259] Rebooting in 86400 seconds..