Warning: Permanently added '10.128.0.231' (ECDSA) to the list of known hosts. syzkaller login: [ 95.133373][ T117] cfg80211: failed to load regulatory.db 2021/12/20 18:18:40 fuzzer started 2021/12/20 18:18:41 dialing manager at 10.128.0.169:41097 [ 106.006203][ T3484] cgroup: Unknown subsys name 'net' [ 106.164108][ T3484] cgroup: Unknown subsys name 'rlimit' 2021/12/20 18:18:48 syscalls: 3601 2021/12/20 18:18:48 code coverage: enabled 2021/12/20 18:18:48 comparison tracing: enabled 2021/12/20 18:18:48 extra coverage: enabled 2021/12/20 18:18:48 delay kcov mmap: mmap returned an invalid pointer 2021/12/20 18:18:48 setuid sandbox: enabled 2021/12/20 18:18:48 namespace sandbox: enabled 2021/12/20 18:18:48 Android sandbox: /sys/fs/selinux/policy does not exist 2021/12/20 18:18:48 fault injection: enabled 2021/12/20 18:18:48 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/12/20 18:18:48 net packet injection: enabled 2021/12/20 18:18:48 net device setup: enabled 2021/12/20 18:18:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/12/20 18:18:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/12/20 18:18:48 USB emulation: enabled 2021/12/20 18:18:48 hci packet injection: enabled 2021/12/20 18:18:48 wifi device emulation: enabled 2021/12/20 18:18:48 802.15.4 emulation: enabled 2021/12/20 18:18:48 fetching corpus: 0, signal 0/2000 (executing program) 2021/12/20 18:18:48 fetching corpus: 50, signal 19282/23100 (executing program) 2021/12/20 18:18:48 fetching corpus: 100, signal 28901/34467 (executing program) 2021/12/20 18:18:48 fetching corpus: 150, signal 34845/42137 (executing program) 2021/12/20 18:18:48 fetching corpus: 200, signal 38825/47834 (executing program) 2021/12/20 18:18:48 fetching corpus: 250, signal 42078/52781 (executing program) 2021/12/20 18:18:48 fetching corpus: 300, signal 46878/59195 (executing program) 2021/12/20 18:18:48 fetching corpus: 350, signal 49233/63205 (executing program) 2021/12/20 18:18:48 fetching corpus: 400, signal 52721/68269 (executing program) 2021/12/20 18:18:49 fetching corpus: 450, signal 55602/72719 (executing program) 2021/12/20 18:18:49 fetching corpus: 500, signal 57975/76693 (executing program) 2021/12/20 18:18:49 fetching corpus: 550, signal 60432/80704 (executing program) 2021/12/20 18:18:49 fetching corpus: 600, signal 62303/84139 (executing program) 2021/12/20 18:18:49 fetching corpus: 650, signal 66292/89541 (executing program) 2021/12/20 18:18:49 fetching corpus: 700, signal 68792/93523 (executing program) 2021/12/20 18:18:49 fetching corpus: 750, signal 70897/97107 (executing program) 2021/12/20 18:18:49 fetching corpus: 800, signal 73604/101199 (executing program) 2021/12/20 18:18:49 fetching corpus: 850, signal 75278/104319 (executing program) 2021/12/20 18:18:49 fetching corpus: 900, signal 77410/107870 (executing program) 2021/12/20 18:18:50 fetching corpus: 950, signal 80270/112039 (executing program) 2021/12/20 18:18:50 fetching corpus: 1000, signal 82250/115376 (executing program) 2021/12/20 18:18:50 fetching corpus: 1050, signal 84060/118548 (executing program) 2021/12/20 18:18:50 fetching corpus: 1100, signal 85082/121036 (executing program) 2021/12/20 18:18:50 fetching corpus: 1150, signal 86794/124115 (executing program) 2021/12/20 18:18:50 fetching corpus: 1200, signal 88547/127192 (executing program) 2021/12/20 18:18:50 fetching corpus: 1250, signal 90300/130268 (executing program) 2021/12/20 18:18:50 fetching corpus: 1300, signal 91385/132747 (executing program) 2021/12/20 18:18:50 fetching corpus: 1350, signal 92620/135316 (executing program) 2021/12/20 18:18:50 fetching corpus: 1400, signal 93930/137936 (executing program) 2021/12/20 18:18:50 fetching corpus: 1450, signal 96832/141895 (executing program) 2021/12/20 18:18:50 fetching corpus: 1500, signal 98137/144482 (executing program) 2021/12/20 18:18:50 fetching corpus: 1550, signal 99410/147062 (executing program) 2021/12/20 18:18:50 fetching corpus: 1600, signal 101443/150232 (executing program) 2021/12/20 18:18:50 fetching corpus: 1650, signal 104462/154186 (executing program) 2021/12/20 18:18:51 fetching corpus: 1700, signal 106442/157253 (executing program) 2021/12/20 18:18:51 fetching corpus: 1750, signal 107345/159423 (executing program) 2021/12/20 18:18:51 fetching corpus: 1800, signal 108180/161581 (executing program) 2021/12/20 18:18:51 fetching corpus: 1850, signal 109152/163786 (executing program) 2021/12/20 18:18:51 fetching corpus: 1900, signal 110024/165922 (executing program) 2021/12/20 18:18:51 fetching corpus: 1950, signal 111669/168632 (executing program) 2021/12/20 18:18:51 fetching corpus: 2000, signal 112708/170863 (executing program) 2021/12/20 18:18:51 fetching corpus: 2050, signal 114501/173685 (executing program) 2021/12/20 18:18:51 fetching corpus: 2100, signal 115726/176050 (executing program) 2021/12/20 18:18:51 fetching corpus: 2150, signal 116742/178241 (executing program) 2021/12/20 18:18:51 fetching corpus: 2200, signal 117652/180353 (executing program) 2021/12/20 18:18:51 fetching corpus: 2250, signal 119235/182938 (executing program) 2021/12/20 18:18:51 fetching corpus: 2300, signal 120379/185171 (executing program) 2021/12/20 18:18:51 fetching corpus: 2350, signal 121438/187402 (executing program) 2021/12/20 18:18:51 fetching corpus: 2400, signal 123018/189965 (executing program) 2021/12/20 18:18:51 fetching corpus: 2450, signal 124315/192312 (executing program) 2021/12/20 18:18:52 fetching corpus: 2499, signal 125299/194460 (executing program) 2021/12/20 18:18:52 fetching corpus: 2549, signal 126480/196652 (executing program) 2021/12/20 18:18:52 fetching corpus: 2599, signal 127388/198596 (executing program) 2021/12/20 18:18:52 fetching corpus: 2649, signal 128798/200973 (executing program) 2021/12/20 18:18:52 fetching corpus: 2699, signal 129833/203037 (executing program) 2021/12/20 18:18:52 fetching corpus: 2749, signal 131064/205225 (executing program) 2021/12/20 18:18:52 fetching corpus: 2799, signal 132136/207306 (executing program) 2021/12/20 18:18:52 fetching corpus: 2849, signal 133360/209451 (executing program) 2021/12/20 18:18:52 fetching corpus: 2899, signal 134295/211365 (executing program) 2021/12/20 18:18:52 fetching corpus: 2949, signal 135140/213295 (executing program) 2021/12/20 18:18:52 fetching corpus: 2999, signal 136431/215463 (executing program) 2021/12/20 18:18:52 fetching corpus: 3049, signal 137464/217468 (executing program) 2021/12/20 18:18:52 fetching corpus: 3099, signal 138454/219461 (executing program) 2021/12/20 18:18:52 fetching corpus: 3149, signal 139210/221308 (executing program) 2021/12/20 18:18:52 fetching corpus: 3199, signal 140564/223494 (executing program) 2021/12/20 18:18:52 fetching corpus: 3249, signal 141480/225333 (executing program) 2021/12/20 18:18:53 fetching corpus: 3299, signal 142196/227056 (executing program) 2021/12/20 18:18:53 fetching corpus: 3349, signal 142966/228854 (executing program) 2021/12/20 18:18:53 fetching corpus: 3399, signal 143746/230630 (executing program) 2021/12/20 18:18:53 fetching corpus: 3449, signal 144349/232266 (executing program) 2021/12/20 18:18:53 fetching corpus: 3499, signal 146899/235165 (executing program) 2021/12/20 18:18:53 fetching corpus: 3548, signal 148093/237159 (executing program) 2021/12/20 18:18:53 fetching corpus: 3598, signal 148888/238893 (executing program) 2021/12/20 18:18:53 fetching corpus: 3648, signal 149522/240492 (executing program) 2021/12/20 18:18:53 fetching corpus: 3698, signal 150118/242088 (executing program) 2021/12/20 18:18:53 fetching corpus: 3748, signal 150861/243804 (executing program) 2021/12/20 18:18:53 fetching corpus: 3798, signal 151725/245590 (executing program) 2021/12/20 18:18:53 fetching corpus: 3848, signal 153129/247661 (executing program) 2021/12/20 18:18:53 fetching corpus: 3898, signal 154034/249424 (executing program) 2021/12/20 18:18:53 fetching corpus: 3948, signal 155354/251400 (executing program) 2021/12/20 18:18:53 fetching corpus: 3998, signal 156108/253044 (executing program) 2021/12/20 18:18:53 fetching corpus: 4048, signal 156877/254638 (executing program) 2021/12/20 18:18:54 fetching corpus: 4098, signal 157767/256367 (executing program) 2021/12/20 18:18:54 fetching corpus: 4148, signal 158470/257930 (executing program) 2021/12/20 18:18:54 fetching corpus: 4198, signal 159982/259970 (executing program) 2021/12/20 18:18:54 fetching corpus: 4248, signal 160666/261535 (executing program) 2021/12/20 18:18:54 fetching corpus: 4298, signal 161183/262970 (executing program) 2021/12/20 18:18:54 fetching corpus: 4348, signal 162209/264630 (executing program) 2021/12/20 18:18:54 fetching corpus: 4397, signal 163118/266301 (executing program) 2021/12/20 18:18:54 fetching corpus: 4447, signal 164029/267945 (executing program) 2021/12/20 18:18:54 fetching corpus: 4497, signal 164515/269362 (executing program) 2021/12/20 18:18:54 fetching corpus: 4547, signal 165395/270965 (executing program) 2021/12/20 18:18:54 fetching corpus: 4597, signal 166108/272509 (executing program) 2021/12/20 18:18:54 fetching corpus: 4647, signal 166646/273951 (executing program) 2021/12/20 18:18:54 fetching corpus: 4697, signal 167394/275436 (executing program) 2021/12/20 18:18:54 fetching corpus: 4747, signal 168182/276983 (executing program) 2021/12/20 18:18:54 fetching corpus: 4797, signal 168957/278450 (executing program) 2021/12/20 18:18:54 fetching corpus: 4847, signal 169660/279964 (executing program) 2021/12/20 18:18:55 fetching corpus: 4897, signal 170192/281326 (executing program) 2021/12/20 18:18:55 fetching corpus: 4947, signal 170825/282762 (executing program) 2021/12/20 18:18:55 fetching corpus: 4997, signal 171380/284133 (executing program) 2021/12/20 18:18:55 fetching corpus: 5047, signal 172396/285744 (executing program) 2021/12/20 18:18:55 fetching corpus: 5097, signal 173115/287182 (executing program) 2021/12/20 18:18:55 fetching corpus: 5147, signal 173694/288521 (executing program) 2021/12/20 18:18:55 fetching corpus: 5197, signal 174420/289929 (executing program) 2021/12/20 18:18:55 fetching corpus: 5247, signal 175531/291505 (executing program) 2021/12/20 18:18:55 fetching corpus: 5297, signal 176069/292808 (executing program) 2021/12/20 18:18:55 fetching corpus: 5347, signal 176500/294114 (executing program) 2021/12/20 18:18:55 fetching corpus: 5397, signal 177357/295577 (executing program) 2021/12/20 18:18:55 fetching corpus: 5447, signal 177958/296918 (executing program) 2021/12/20 18:18:55 fetching corpus: 5497, signal 178503/298226 (executing program) 2021/12/20 18:18:55 fetching corpus: 5547, signal 178951/299512 (executing program) 2021/12/20 18:18:55 fetching corpus: 5597, signal 179444/300773 (executing program) 2021/12/20 18:18:55 fetching corpus: 5647, signal 179928/302010 (executing program) 2021/12/20 18:18:55 fetching corpus: 5697, signal 180446/303306 (executing program) 2021/12/20 18:18:56 fetching corpus: 5747, signal 181151/304644 (executing program) 2021/12/20 18:18:56 fetching corpus: 5797, signal 181600/305890 (executing program) 2021/12/20 18:18:56 fetching corpus: 5847, signal 182370/307244 (executing program) 2021/12/20 18:18:56 fetching corpus: 5897, signal 183373/308711 (executing program) 2021/12/20 18:18:56 fetching corpus: 5947, signal 184108/310004 (executing program) 2021/12/20 18:18:56 fetching corpus: 5997, signal 184687/311283 (executing program) 2021/12/20 18:18:56 fetching corpus: 6047, signal 185500/312617 (executing program) 2021/12/20 18:18:56 fetching corpus: 6097, signal 185823/313794 (executing program) 2021/12/20 18:18:56 fetching corpus: 6147, signal 186501/315047 (executing program) 2021/12/20 18:18:56 fetching corpus: 6197, signal 187139/316301 (executing program) 2021/12/20 18:18:56 fetching corpus: 6247, signal 187834/317555 (executing program) 2021/12/20 18:18:56 fetching corpus: 6297, signal 188507/318885 (executing program) 2021/12/20 18:18:56 fetching corpus: 6347, signal 189129/320074 (executing program) 2021/12/20 18:18:56 fetching corpus: 6397, signal 189689/321284 (executing program) 2021/12/20 18:18:56 fetching corpus: 6447, signal 190402/322520 (executing program) 2021/12/20 18:18:57 fetching corpus: 6497, signal 190959/323767 (executing program) 2021/12/20 18:18:57 fetching corpus: 6547, signal 191453/324957 (executing program) 2021/12/20 18:18:57 fetching corpus: 6597, signal 192075/326171 (executing program) 2021/12/20 18:18:57 fetching corpus: 6647, signal 192596/327337 (executing program) 2021/12/20 18:18:57 fetching corpus: 6697, signal 193277/328497 (executing program) 2021/12/20 18:18:57 fetching corpus: 6747, signal 193888/329661 (executing program) 2021/12/20 18:18:57 fetching corpus: 6797, signal 194645/330876 (executing program) 2021/12/20 18:18:57 fetching corpus: 6847, signal 195450/332110 (executing program) 2021/12/20 18:18:57 fetching corpus: 6897, signal 195925/333195 (executing program) 2021/12/20 18:18:57 fetching corpus: 6947, signal 196786/334408 (executing program) 2021/12/20 18:18:57 fetching corpus: 6997, signal 198093/335775 (executing program) 2021/12/20 18:18:57 fetching corpus: 7047, signal 198550/336876 (executing program) 2021/12/20 18:18:57 fetching corpus: 7097, signal 199235/338049 (executing program) 2021/12/20 18:18:58 fetching corpus: 7147, signal 199599/339118 (executing program) 2021/12/20 18:18:58 fetching corpus: 7197, signal 200191/340221 (executing program) 2021/12/20 18:18:58 fetching corpus: 7247, signal 200823/341309 (executing program) 2021/12/20 18:18:58 fetching corpus: 7297, signal 201138/342313 (executing program) 2021/12/20 18:18:58 fetching corpus: 7347, signal 201940/343452 (executing program) 2021/12/20 18:18:58 fetching corpus: 7397, signal 202530/344578 (executing program) 2021/12/20 18:18:58 fetching corpus: 7447, signal 203220/345747 (executing program) 2021/12/20 18:18:58 fetching corpus: 7497, signal 203736/346848 (executing program) 2021/12/20 18:18:58 fetching corpus: 7547, signal 204358/347918 (executing program) 2021/12/20 18:18:58 fetching corpus: 7597, signal 204924/348980 (executing program) 2021/12/20 18:18:58 fetching corpus: 7647, signal 205259/349958 (executing program) 2021/12/20 18:18:58 fetching corpus: 7697, signal 205569/350955 (executing program) 2021/12/20 18:18:58 fetching corpus: 7747, signal 205855/351956 (executing program) 2021/12/20 18:18:58 fetching corpus: 7797, signal 206403/352990 (executing program) 2021/12/20 18:18:59 fetching corpus: 7847, signal 206929/354053 (executing program) 2021/12/20 18:18:59 fetching corpus: 7897, signal 207530/355092 (executing program) 2021/12/20 18:18:59 fetching corpus: 7947, signal 208158/356133 (executing program) 2021/12/20 18:18:59 fetching corpus: 7997, signal 208794/357181 (executing program) 2021/12/20 18:18:59 fetching corpus: 8047, signal 209198/358178 (executing program) 2021/12/20 18:18:59 fetching corpus: 8097, signal 210109/359235 (executing program) 2021/12/20 18:18:59 fetching corpus: 8147, signal 210767/360240 (executing program) 2021/12/20 18:18:59 fetching corpus: 8197, signal 211440/361241 (executing program) 2021/12/20 18:18:59 fetching corpus: 8247, signal 211913/362221 (executing program) 2021/12/20 18:18:59 fetching corpus: 8297, signal 212611/363229 (executing program) 2021/12/20 18:18:59 fetching corpus: 8347, signal 213510/364198 (executing program) 2021/12/20 18:18:59 fetching corpus: 8397, signal 213946/365166 (executing program) 2021/12/20 18:18:59 fetching corpus: 8447, signal 214322/366119 (executing program) 2021/12/20 18:18:59 fetching corpus: 8497, signal 214818/367061 (executing program) 2021/12/20 18:19:00 fetching corpus: 8547, signal 215141/368001 (executing program) 2021/12/20 18:19:00 fetching corpus: 8597, signal 215596/368925 (executing program) 2021/12/20 18:19:00 fetching corpus: 8647, signal 216103/369889 (executing program) 2021/12/20 18:19:00 fetching corpus: 8697, signal 216634/370868 (executing program) 2021/12/20 18:19:00 fetching corpus: 8747, signal 217325/371799 (executing program) 2021/12/20 18:19:00 fetching corpus: 8796, signal 218349/372753 (executing program) 2021/12/20 18:19:00 fetching corpus: 8846, signal 218761/373662 (executing program) 2021/12/20 18:19:00 fetching corpus: 8896, signal 219214/374520 (executing program) 2021/12/20 18:19:00 fetching corpus: 8946, signal 220027/375454 (executing program) 2021/12/20 18:19:00 fetching corpus: 8996, signal 220626/376350 (executing program) 2021/12/20 18:19:00 fetching corpus: 9046, signal 220976/377209 (executing program) 2021/12/20 18:19:00 fetching corpus: 9096, signal 221450/378099 (executing program) 2021/12/20 18:19:00 fetching corpus: 9146, signal 222193/378999 (executing program) 2021/12/20 18:19:00 fetching corpus: 9196, signal 222605/379898 (executing program) 2021/12/20 18:19:00 fetching corpus: 9246, signal 223084/380753 (executing program) 2021/12/20 18:19:01 fetching corpus: 9296, signal 223394/381598 (executing program) 2021/12/20 18:19:01 fetching corpus: 9345, signal 223901/382433 (executing program) 2021/12/20 18:19:01 fetching corpus: 9395, signal 224326/383267 (executing program) 2021/12/20 18:19:01 fetching corpus: 9445, signal 224698/384147 (executing program) 2021/12/20 18:19:01 fetching corpus: 9494, signal 224974/384957 (executing program) 2021/12/20 18:19:01 fetching corpus: 9544, signal 225694/385808 (executing program) 2021/12/20 18:19:01 fetching corpus: 9594, signal 226092/386590 (executing program) 2021/12/20 18:19:01 fetching corpus: 9644, signal 227075/386987 (executing program) 2021/12/20 18:19:01 fetching corpus: 9694, signal 227632/386987 (executing program) 2021/12/20 18:19:01 fetching corpus: 9744, signal 228012/386987 (executing program) 2021/12/20 18:19:01 fetching corpus: 9794, signal 228432/386987 (executing program) 2021/12/20 18:19:01 fetching corpus: 9844, signal 228740/386987 (executing program) 2021/12/20 18:19:01 fetching corpus: 9894, signal 229093/386995 (executing program) 2021/12/20 18:19:01 fetching corpus: 9944, signal 229444/386995 (executing program) 2021/12/20 18:19:02 fetching corpus: 9994, signal 229935/386995 (executing program) 2021/12/20 18:19:02 fetching corpus: 10044, signal 230500/386995 (executing program) 2021/12/20 18:19:02 fetching corpus: 10094, signal 231133/386995 (executing program) 2021/12/20 18:19:02 fetching corpus: 10144, signal 231624/386995 (executing program) 2021/12/20 18:19:02 fetching corpus: 10194, signal 232107/387009 (executing program) 2021/12/20 18:19:02 fetching corpus: 10244, signal 232568/387009 (executing program) 2021/12/20 18:19:02 fetching corpus: 10294, signal 232892/387009 (executing program) 2021/12/20 18:19:02 fetching corpus: 10344, signal 233162/387009 (executing program) 2021/12/20 18:19:02 fetching corpus: 10394, signal 233530/387009 (executing program) 2021/12/20 18:19:02 fetching corpus: 10444, signal 234009/387009 (executing program) 2021/12/20 18:19:02 fetching corpus: 10494, signal 234507/387009 (executing program) 2021/12/20 18:19:02 fetching corpus: 10544, signal 234894/387009 (executing program) 2021/12/20 18:19:02 fetching corpus: 10594, signal 235407/387009 (executing program) 2021/12/20 18:19:02 fetching corpus: 10644, signal 235775/387009 (executing program) 2021/12/20 18:19:02 fetching corpus: 10694, signal 236356/387009 (executing program) 2021/12/20 18:19:02 fetching corpus: 10744, signal 236914/387009 (executing program) 2021/12/20 18:19:02 fetching corpus: 10794, signal 237465/387009 (executing program) 2021/12/20 18:19:03 fetching corpus: 10844, signal 237981/387009 (executing program) 2021/12/20 18:19:03 fetching corpus: 10894, signal 238298/387012 (executing program) 2021/12/20 18:19:03 fetching corpus: 10944, signal 238738/387012 (executing program) 2021/12/20 18:19:03 fetching corpus: 10994, signal 239039/387012 (executing program) 2021/12/20 18:19:03 fetching corpus: 11044, signal 239526/387012 (executing program) 2021/12/20 18:19:03 fetching corpus: 11094, signal 239969/387021 (executing program) 2021/12/20 18:19:03 fetching corpus: 11144, signal 240582/387021 (executing program) 2021/12/20 18:19:03 fetching corpus: 11194, signal 240902/387021 (executing program) 2021/12/20 18:19:03 fetching corpus: 11244, signal 241335/387021 (executing program) 2021/12/20 18:19:03 fetching corpus: 11294, signal 241723/387021 (executing program) 2021/12/20 18:19:03 fetching corpus: 11344, signal 242016/387024 (executing program) 2021/12/20 18:19:03 fetching corpus: 11394, signal 242360/387024 (executing program) 2021/12/20 18:19:03 fetching corpus: 11444, signal 242849/387024 (executing program) 2021/12/20 18:19:03 fetching corpus: 11494, signal 243306/387024 (executing program) 2021/12/20 18:19:03 fetching corpus: 11544, signal 243600/387024 (executing program) 2021/12/20 18:19:03 fetching corpus: 11594, signal 243880/387024 (executing program) 2021/12/20 18:19:03 fetching corpus: 11644, signal 244509/387024 (executing program) 2021/12/20 18:19:03 fetching corpus: 11694, signal 244871/387024 (executing program) 2021/12/20 18:19:04 fetching corpus: 11744, signal 245359/387024 (executing program) 2021/12/20 18:19:04 fetching corpus: 11794, signal 245763/387024 (executing program) 2021/12/20 18:19:04 fetching corpus: 11844, signal 246267/387024 (executing program) 2021/12/20 18:19:04 fetching corpus: 11894, signal 246555/387024 (executing program) 2021/12/20 18:19:04 fetching corpus: 11944, signal 246926/387029 (executing program) 2021/12/20 18:19:04 fetching corpus: 11994, signal 247716/387029 (executing program) 2021/12/20 18:19:04 fetching corpus: 12044, signal 248042/387029 (executing program) 2021/12/20 18:19:04 fetching corpus: 12094, signal 248288/387029 (executing program) 2021/12/20 18:19:04 fetching corpus: 12144, signal 248737/387029 (executing program) 2021/12/20 18:19:04 fetching corpus: 12194, signal 248958/387029 (executing program) 2021/12/20 18:19:04 fetching corpus: 12244, signal 249601/387029 (executing program) 2021/12/20 18:19:04 fetching corpus: 12294, signal 250088/387029 (executing program) 2021/12/20 18:19:04 fetching corpus: 12344, signal 250438/387029 (executing program) 2021/12/20 18:19:04 fetching corpus: 12394, signal 250940/387029 (executing program) 2021/12/20 18:19:04 fetching corpus: 12444, signal 251232/387029 (executing program) 2021/12/20 18:19:04 fetching corpus: 12494, signal 251570/387029 (executing program) 2021/12/20 18:19:04 fetching corpus: 12544, signal 252305/387029 (executing program) 2021/12/20 18:19:05 fetching corpus: 12594, signal 252727/387029 (executing program) 2021/12/20 18:19:05 fetching corpus: 12644, signal 253027/387029 (executing program) 2021/12/20 18:19:05 fetching corpus: 12694, signal 253455/387030 (executing program) 2021/12/20 18:19:05 fetching corpus: 12744, signal 253859/387030 (executing program) 2021/12/20 18:19:05 fetching corpus: 12794, signal 254203/387030 (executing program) 2021/12/20 18:19:05 fetching corpus: 12844, signal 254932/387035 (executing program) 2021/12/20 18:19:05 fetching corpus: 12894, signal 255522/387035 (executing program) 2021/12/20 18:19:05 fetching corpus: 12944, signal 255934/387035 (executing program) 2021/12/20 18:19:05 fetching corpus: 12994, signal 256357/387035 (executing program) 2021/12/20 18:19:05 fetching corpus: 13044, signal 256853/387035 (executing program) 2021/12/20 18:19:05 fetching corpus: 13094, signal 257120/387035 (executing program) 2021/12/20 18:19:05 fetching corpus: 13144, signal 257605/387035 (executing program) 2021/12/20 18:19:05 fetching corpus: 13194, signal 257984/387035 (executing program) 2021/12/20 18:19:05 fetching corpus: 13244, signal 258270/387035 (executing program) 2021/12/20 18:19:05 fetching corpus: 13294, signal 258730/387035 (executing program) 2021/12/20 18:19:06 fetching corpus: 13344, signal 259291/387035 (executing program) 2021/12/20 18:19:06 fetching corpus: 13394, signal 259657/387035 (executing program) 2021/12/20 18:19:06 fetching corpus: 13444, signal 259961/387035 (executing program) 2021/12/20 18:19:06 fetching corpus: 13494, signal 260296/387035 (executing program) 2021/12/20 18:19:06 fetching corpus: 13544, signal 260587/387035 (executing program) 2021/12/20 18:19:06 fetching corpus: 13594, signal 260982/387035 (executing program) 2021/12/20 18:19:06 fetching corpus: 13644, signal 261374/387035 (executing program) 2021/12/20 18:19:06 fetching corpus: 13694, signal 261681/387035 (executing program) 2021/12/20 18:19:06 fetching corpus: 13744, signal 262077/387035 (executing program) 2021/12/20 18:19:06 fetching corpus: 13794, signal 262406/387035 (executing program) 2021/12/20 18:19:06 fetching corpus: 13844, signal 262698/387045 (executing program) 2021/12/20 18:19:06 fetching corpus: 13894, signal 263077/387045 (executing program) 2021/12/20 18:19:06 fetching corpus: 13944, signal 263330/387045 (executing program) 2021/12/20 18:19:06 fetching corpus: 13994, signal 263625/387045 (executing program) 2021/12/20 18:19:06 fetching corpus: 14044, signal 263929/387045 (executing program) 2021/12/20 18:19:06 fetching corpus: 14094, signal 264200/387045 (executing program) 2021/12/20 18:19:06 fetching corpus: 14144, signal 264794/387045 (executing program) 2021/12/20 18:19:07 fetching corpus: 14194, signal 265002/387045 (executing program) 2021/12/20 18:19:07 fetching corpus: 14244, signal 265281/387045 (executing program) 2021/12/20 18:19:07 fetching corpus: 14294, signal 265547/387045 (executing program) 2021/12/20 18:19:07 fetching corpus: 14344, signal 265742/387045 (executing program) 2021/12/20 18:19:07 fetching corpus: 14394, signal 266067/387045 (executing program) 2021/12/20 18:19:07 fetching corpus: 14444, signal 266391/387045 (executing program) 2021/12/20 18:19:07 fetching corpus: 14494, signal 266699/387045 (executing program) 2021/12/20 18:19:07 fetching corpus: 14544, signal 267075/387045 (executing program) 2021/12/20 18:19:07 fetching corpus: 14594, signal 267315/387045 (executing program) 2021/12/20 18:19:07 fetching corpus: 14644, signal 267619/387045 (executing program) 2021/12/20 18:19:07 fetching corpus: 14694, signal 267952/387045 (executing program) 2021/12/20 18:19:07 fetching corpus: 14744, signal 268317/387045 (executing program) 2021/12/20 18:19:07 fetching corpus: 14794, signal 268682/387045 (executing program) 2021/12/20 18:19:07 fetching corpus: 14844, signal 268991/387045 (executing program) 2021/12/20 18:19:07 fetching corpus: 14894, signal 269233/387045 (executing program) 2021/12/20 18:19:07 fetching corpus: 14944, signal 269565/387045 (executing program) 2021/12/20 18:19:07 fetching corpus: 14994, signal 269789/387045 (executing program) 2021/12/20 18:19:07 fetching corpus: 15044, signal 270035/387045 (executing program) 2021/12/20 18:19:07 fetching corpus: 15094, signal 270368/387045 (executing program) 2021/12/20 18:19:08 fetching corpus: 15144, signal 270640/387045 (executing program) 2021/12/20 18:19:08 fetching corpus: 15194, signal 271085/387045 (executing program) 2021/12/20 18:19:08 fetching corpus: 15244, signal 271476/387045 (executing program) 2021/12/20 18:19:08 fetching corpus: 15294, signal 271699/387045 (executing program) 2021/12/20 18:19:08 fetching corpus: 15344, signal 271995/387045 (executing program) 2021/12/20 18:19:08 fetching corpus: 15394, signal 272311/387058 (executing program) 2021/12/20 18:19:08 fetching corpus: 15444, signal 272739/387058 (executing program) 2021/12/20 18:19:08 fetching corpus: 15494, signal 273216/387058 (executing program) 2021/12/20 18:19:08 fetching corpus: 15544, signal 273582/387058 (executing program) 2021/12/20 18:19:08 fetching corpus: 15594, signal 273886/387058 (executing program) 2021/12/20 18:19:08 fetching corpus: 15644, signal 274246/387058 (executing program) 2021/12/20 18:19:08 fetching corpus: 15694, signal 274536/387058 (executing program) 2021/12/20 18:19:08 fetching corpus: 15744, signal 274786/387059 (executing program) 2021/12/20 18:19:08 fetching corpus: 15794, signal 275078/387059 (executing program) 2021/12/20 18:19:09 fetching corpus: 15844, signal 275482/387059 (executing program) 2021/12/20 18:19:09 fetching corpus: 15894, signal 275876/387059 (executing program) 2021/12/20 18:19:09 fetching corpus: 15944, signal 276268/387059 (executing program) 2021/12/20 18:19:09 fetching corpus: 15994, signal 276641/387059 (executing program) 2021/12/20 18:19:09 fetching corpus: 16044, signal 277068/387059 (executing program) 2021/12/20 18:19:09 fetching corpus: 16094, signal 277432/387061 (executing program) 2021/12/20 18:19:09 fetching corpus: 16144, signal 277707/387061 (executing program) 2021/12/20 18:19:09 fetching corpus: 16194, signal 278092/387061 (executing program) 2021/12/20 18:19:09 fetching corpus: 16244, signal 278294/387061 (executing program) 2021/12/20 18:19:09 fetching corpus: 16294, signal 278558/387068 (executing program) 2021/12/20 18:19:09 fetching corpus: 16344, signal 278800/387068 (executing program) 2021/12/20 18:19:09 fetching corpus: 16394, signal 278995/387068 (executing program) 2021/12/20 18:19:09 fetching corpus: 16444, signal 279359/387068 (executing program) 2021/12/20 18:19:09 fetching corpus: 16494, signal 279677/387068 (executing program) 2021/12/20 18:19:09 fetching corpus: 16544, signal 280052/387068 (executing program) 2021/12/20 18:19:09 fetching corpus: 16594, signal 280418/387068 (executing program) 2021/12/20 18:19:09 fetching corpus: 16644, signal 280718/387068 (executing program) 2021/12/20 18:19:10 fetching corpus: 16694, signal 281325/387068 (executing program) 2021/12/20 18:19:10 fetching corpus: 16744, signal 281521/387068 (executing program) 2021/12/20 18:19:10 fetching corpus: 16794, signal 282214/387068 (executing program) 2021/12/20 18:19:10 fetching corpus: 16844, signal 282482/387068 (executing program) 2021/12/20 18:19:10 fetching corpus: 16894, signal 282773/387068 (executing program) 2021/12/20 18:19:10 fetching corpus: 16944, signal 283004/387068 (executing program) 2021/12/20 18:19:10 fetching corpus: 16994, signal 283328/387070 (executing program) 2021/12/20 18:19:10 fetching corpus: 17044, signal 283653/387071 (executing program) 2021/12/20 18:19:10 fetching corpus: 17094, signal 283939/387071 (executing program) 2021/12/20 18:19:10 fetching corpus: 17143, signal 284499/387080 (executing program) 2021/12/20 18:19:10 fetching corpus: 17193, signal 284699/387080 (executing program) 2021/12/20 18:19:10 fetching corpus: 17243, signal 284885/387080 (executing program) 2021/12/20 18:19:10 fetching corpus: 17293, signal 285162/387080 (executing program) 2021/12/20 18:19:10 fetching corpus: 17343, signal 285494/387080 (executing program) 2021/12/20 18:19:10 fetching corpus: 17393, signal 285728/387080 (executing program) 2021/12/20 18:19:10 fetching corpus: 17443, signal 285999/387080 (executing program) 2021/12/20 18:19:10 fetching corpus: 17493, signal 286311/387080 (executing program) 2021/12/20 18:19:11 fetching corpus: 17543, signal 286578/387080 (executing program) 2021/12/20 18:19:11 fetching corpus: 17593, signal 287018/387080 (executing program) 2021/12/20 18:19:11 fetching corpus: 17643, signal 287273/387080 (executing program) 2021/12/20 18:19:11 fetching corpus: 17693, signal 287526/387080 (executing program) 2021/12/20 18:19:11 fetching corpus: 17743, signal 287827/387080 (executing program) 2021/12/20 18:19:11 fetching corpus: 17793, signal 288108/387080 (executing program) 2021/12/20 18:19:11 fetching corpus: 17843, signal 288498/387080 (executing program) 2021/12/20 18:19:11 fetching corpus: 17893, signal 289067/387080 (executing program) 2021/12/20 18:19:11 fetching corpus: 17943, signal 289396/387080 (executing program) 2021/12/20 18:19:11 fetching corpus: 17993, signal 289782/387080 (executing program) 2021/12/20 18:19:11 fetching corpus: 18043, signal 290117/387080 (executing program) 2021/12/20 18:19:11 fetching corpus: 18093, signal 290433/387080 (executing program) 2021/12/20 18:19:11 fetching corpus: 18143, signal 290871/387080 (executing program) 2021/12/20 18:19:11 fetching corpus: 18193, signal 291157/387080 (executing program) 2021/12/20 18:19:11 fetching corpus: 18243, signal 291450/387080 (executing program) 2021/12/20 18:19:11 fetching corpus: 18293, signal 291724/387080 (executing program) 2021/12/20 18:19:11 fetching corpus: 18343, signal 291982/387080 (executing program) 2021/12/20 18:19:11 fetching corpus: 18393, signal 292214/387080 (executing program) 2021/12/20 18:19:12 fetching corpus: 18442, signal 292782/387080 (executing program) 2021/12/20 18:19:12 fetching corpus: 18492, signal 293132/387080 (executing program) 2021/12/20 18:19:12 fetching corpus: 18542, signal 293544/387080 (executing program) 2021/12/20 18:19:12 fetching corpus: 18592, signal 293760/387080 (executing program) 2021/12/20 18:19:12 fetching corpus: 18642, signal 294105/387080 (executing program) 2021/12/20 18:19:12 fetching corpus: 18692, signal 294365/387080 (executing program) 2021/12/20 18:19:12 fetching corpus: 18742, signal 294593/387080 (executing program) 2021/12/20 18:19:12 fetching corpus: 18792, signal 294851/387080 (executing program) 2021/12/20 18:19:12 fetching corpus: 18842, signal 295217/387080 (executing program) 2021/12/20 18:19:12 fetching corpus: 18892, signal 295438/387080 (executing program) 2021/12/20 18:19:12 fetching corpus: 18942, signal 295834/387093 (executing program) 2021/12/20 18:19:12 fetching corpus: 18992, signal 296094/387093 (executing program) 2021/12/20 18:19:12 fetching corpus: 19042, signal 296294/387093 (executing program) 2021/12/20 18:19:12 fetching corpus: 19092, signal 296679/387093 (executing program) 2021/12/20 18:19:12 fetching corpus: 19142, signal 296999/387093 (executing program) 2021/12/20 18:19:12 fetching corpus: 19192, signal 297290/387093 (executing program) 2021/12/20 18:19:12 fetching corpus: 19242, signal 297495/387093 (executing program) 2021/12/20 18:19:13 fetching corpus: 19292, signal 297874/387093 (executing program) 2021/12/20 18:19:13 fetching corpus: 19342, signal 298156/387093 (executing program) 2021/12/20 18:19:13 fetching corpus: 19392, signal 298490/387103 (executing program) 2021/12/20 18:19:13 fetching corpus: 19442, signal 298784/387103 (executing program) 2021/12/20 18:19:13 fetching corpus: 19492, signal 299041/387105 (executing program) 2021/12/20 18:19:13 fetching corpus: 19542, signal 299320/387105 (executing program) 2021/12/20 18:19:13 fetching corpus: 19592, signal 299565/387105 (executing program) 2021/12/20 18:19:13 fetching corpus: 19642, signal 299894/387105 (executing program) 2021/12/20 18:19:13 fetching corpus: 19692, signal 300104/387105 (executing program) 2021/12/20 18:19:13 fetching corpus: 19742, signal 300352/387105 (executing program) 2021/12/20 18:19:13 fetching corpus: 19792, signal 300690/387105 (executing program) 2021/12/20 18:19:13 fetching corpus: 19842, signal 300936/387105 (executing program) 2021/12/20 18:19:13 fetching corpus: 19892, signal 301170/387105 (executing program) 2021/12/20 18:19:13 fetching corpus: 19942, signal 301424/387105 (executing program) 2021/12/20 18:19:13 fetching corpus: 19992, signal 301637/387105 (executing program) 2021/12/20 18:19:13 fetching corpus: 20042, signal 301870/387105 (executing program) 2021/12/20 18:19:14 fetching corpus: 20092, signal 302139/387105 (executing program) 2021/12/20 18:19:14 fetching corpus: 20142, signal 302420/387105 (executing program) 2021/12/20 18:19:14 fetching corpus: 20192, signal 302669/387105 (executing program) 2021/12/20 18:19:14 fetching corpus: 20242, signal 302915/387105 (executing program) 2021/12/20 18:19:14 fetching corpus: 20292, signal 303186/387113 (executing program) 2021/12/20 18:19:14 fetching corpus: 20342, signal 303490/387113 (executing program) 2021/12/20 18:19:14 fetching corpus: 20392, signal 303781/387113 (executing program) 2021/12/20 18:19:14 fetching corpus: 20442, signal 304059/387113 (executing program) 2021/12/20 18:19:14 fetching corpus: 20492, signal 304239/387113 (executing program) 2021/12/20 18:19:14 fetching corpus: 20542, signal 304867/387113 (executing program) 2021/12/20 18:19:14 fetching corpus: 20592, signal 305125/387113 (executing program) 2021/12/20 18:19:14 fetching corpus: 20641, signal 305391/387113 (executing program) 2021/12/20 18:19:14 fetching corpus: 20691, signal 305604/387113 (executing program) 2021/12/20 18:19:14 fetching corpus: 20741, signal 305987/387113 (executing program) 2021/12/20 18:19:14 fetching corpus: 20791, signal 306215/387113 (executing program) 2021/12/20 18:19:14 fetching corpus: 20841, signal 306488/387113 (executing program) 2021/12/20 18:19:14 fetching corpus: 20891, signal 306721/387113 (executing program) 2021/12/20 18:19:14 fetching corpus: 20941, signal 307004/387113 (executing program) 2021/12/20 18:19:15 fetching corpus: 20991, signal 307377/387113 (executing program) 2021/12/20 18:19:15 fetching corpus: 21041, signal 307694/387113 (executing program) 2021/12/20 18:19:15 fetching corpus: 21091, signal 307860/387113 (executing program) 2021/12/20 18:19:15 fetching corpus: 21140, signal 308164/387113 (executing program) 2021/12/20 18:19:15 fetching corpus: 21190, signal 308355/387113 (executing program) 2021/12/20 18:19:15 fetching corpus: 21240, signal 308542/387113 (executing program) 2021/12/20 18:19:15 fetching corpus: 21289, signal 308962/387113 (executing program) 2021/12/20 18:19:15 fetching corpus: 21339, signal 309175/387113 (executing program) 2021/12/20 18:19:15 fetching corpus: 21389, signal 309392/387113 (executing program) 2021/12/20 18:19:15 fetching corpus: 21438, signal 309689/387113 (executing program) 2021/12/20 18:19:15 fetching corpus: 21488, signal 309986/387113 (executing program) 2021/12/20 18:19:15 fetching corpus: 21538, signal 310327/387123 (executing program) 2021/12/20 18:19:15 fetching corpus: 21588, signal 310559/387123 (executing program) 2021/12/20 18:19:15 fetching corpus: 21638, signal 310754/387123 (executing program) 2021/12/20 18:19:15 fetching corpus: 21688, signal 310935/387123 (executing program) 2021/12/20 18:19:15 fetching corpus: 21738, signal 311191/387123 (executing program) 2021/12/20 18:19:15 fetching corpus: 21788, signal 311565/387123 (executing program) 2021/12/20 18:19:15 fetching corpus: 21838, signal 311777/387123 (executing program) 2021/12/20 18:19:16 fetching corpus: 21888, signal 312018/387123 (executing program) 2021/12/20 18:19:16 fetching corpus: 21938, signal 312406/387123 (executing program) 2021/12/20 18:19:16 fetching corpus: 21988, signal 312809/387123 (executing program) 2021/12/20 18:19:16 fetching corpus: 22038, signal 313030/387123 (executing program) 2021/12/20 18:19:17 fetching corpus: 22088, signal 313281/387123 (executing program) 2021/12/20 18:19:17 fetching corpus: 22138, signal 313443/387125 (executing program) 2021/12/20 18:19:17 fetching corpus: 22188, signal 313609/387125 (executing program) 2021/12/20 18:19:17 fetching corpus: 22238, signal 313795/387148 (executing program) 2021/12/20 18:19:17 fetching corpus: 22288, signal 314057/387148 (executing program) 2021/12/20 18:19:17 fetching corpus: 22338, signal 314338/387148 (executing program) 2021/12/20 18:19:17 fetching corpus: 22388, signal 314633/387148 (executing program) 2021/12/20 18:19:17 fetching corpus: 22438, signal 314891/387148 (executing program) 2021/12/20 18:19:17 fetching corpus: 22488, signal 315125/387148 (executing program) 2021/12/20 18:19:17 fetching corpus: 22538, signal 315323/387148 (executing program) 2021/12/20 18:19:17 fetching corpus: 22588, signal 315937/387148 (executing program) 2021/12/20 18:19:17 fetching corpus: 22638, signal 316169/387148 (executing program) 2021/12/20 18:19:17 fetching corpus: 22688, signal 316356/387148 (executing program) 2021/12/20 18:19:17 fetching corpus: 22738, signal 316609/387148 (executing program) 2021/12/20 18:19:17 fetching corpus: 22788, signal 316820/387149 (executing program) 2021/12/20 18:19:17 fetching corpus: 22838, signal 317027/387149 (executing program) 2021/12/20 18:19:17 fetching corpus: 22888, signal 317261/387149 (executing program) 2021/12/20 18:19:17 fetching corpus: 22938, signal 317498/387149 (executing program) 2021/12/20 18:19:17 fetching corpus: 22988, signal 317675/387149 (executing program) 2021/12/20 18:19:18 fetching corpus: 23038, signal 317868/387149 (executing program) 2021/12/20 18:19:18 fetching corpus: 23087, signal 318009/387149 (executing program) 2021/12/20 18:19:18 fetching corpus: 23137, signal 318235/387149 (executing program) 2021/12/20 18:19:18 fetching corpus: 23187, signal 318486/387149 (executing program) 2021/12/20 18:19:18 fetching corpus: 23237, signal 318766/387149 (executing program) 2021/12/20 18:19:18 fetching corpus: 23287, signal 319282/387149 (executing program) 2021/12/20 18:19:18 fetching corpus: 23337, signal 319581/387149 (executing program) 2021/12/20 18:19:18 fetching corpus: 23387, signal 319798/387149 (executing program) 2021/12/20 18:19:18 fetching corpus: 23437, signal 319994/387325 (executing program) 2021/12/20 18:19:18 fetching corpus: 23487, signal 320168/387325 (executing program) 2021/12/20 18:19:18 fetching corpus: 23537, signal 320358/387325 (executing program) 2021/12/20 18:19:18 fetching corpus: 23587, signal 320725/387325 (executing program) 2021/12/20 18:19:18 fetching corpus: 23637, signal 320948/387325 (executing program) 2021/12/20 18:19:18 fetching corpus: 23687, signal 321148/387325 (executing program) 2021/12/20 18:19:18 fetching corpus: 23737, signal 321383/387325 (executing program) 2021/12/20 18:19:18 fetching corpus: 23787, signal 321605/387325 (executing program) 2021/12/20 18:19:19 fetching corpus: 23837, signal 321764/387325 (executing program) 2021/12/20 18:19:19 fetching corpus: 23887, signal 322035/387325 (executing program) 2021/12/20 18:19:19 fetching corpus: 23937, signal 322233/387325 (executing program) 2021/12/20 18:19:19 fetching corpus: 23987, signal 322444/387325 (executing program) 2021/12/20 18:19:19 fetching corpus: 24037, signal 322666/387334 (executing program) 2021/12/20 18:19:19 fetching corpus: 24087, signal 322897/387336 (executing program) 2021/12/20 18:19:19 fetching corpus: 24137, signal 323123/387336 (executing program) 2021/12/20 18:19:19 fetching corpus: 24187, signal 323339/387336 (executing program) 2021/12/20 18:19:19 fetching corpus: 24237, signal 323531/387336 (executing program) 2021/12/20 18:19:19 fetching corpus: 24287, signal 323861/387336 (executing program) 2021/12/20 18:19:19 fetching corpus: 24337, signal 324109/387336 (executing program) 2021/12/20 18:19:19 fetching corpus: 24387, signal 324349/387336 (executing program) 2021/12/20 18:19:19 fetching corpus: 24437, signal 324577/387336 (executing program) 2021/12/20 18:19:19 fetching corpus: 24487, signal 324914/387336 (executing program) 2021/12/20 18:19:19 fetching corpus: 24537, signal 325053/387342 (executing program) 2021/12/20 18:19:19 fetching corpus: 24587, signal 325291/387342 (executing program) 2021/12/20 18:19:19 fetching corpus: 24637, signal 325558/387342 (executing program) 2021/12/20 18:19:19 fetching corpus: 24687, signal 325757/387342 (executing program) 2021/12/20 18:19:20 fetching corpus: 24737, signal 325941/387342 (executing program) 2021/12/20 18:19:20 fetching corpus: 24787, signal 326262/387342 (executing program) 2021/12/20 18:19:20 fetching corpus: 24837, signal 326619/387342 (executing program) 2021/12/20 18:19:20 fetching corpus: 24887, signal 326789/387342 (executing program) 2021/12/20 18:19:20 fetching corpus: 24937, signal 326959/387342 (executing program) 2021/12/20 18:19:20 fetching corpus: 24987, signal 327195/387342 (executing program) 2021/12/20 18:19:20 fetching corpus: 25037, signal 327412/387342 (executing program) 2021/12/20 18:19:20 fetching corpus: 25087, signal 327683/387342 (executing program) 2021/12/20 18:19:20 fetching corpus: 25137, signal 328022/387342 (executing program) 2021/12/20 18:19:20 fetching corpus: 25187, signal 328202/387342 (executing program) 2021/12/20 18:19:20 fetching corpus: 25237, signal 328381/387342 (executing program) 2021/12/20 18:19:20 fetching corpus: 25286, signal 328602/387342 (executing program) 2021/12/20 18:19:20 fetching corpus: 25336, signal 328787/387342 (executing program) 2021/12/20 18:19:20 fetching corpus: 25386, signal 329050/387342 (executing program) 2021/12/20 18:19:20 fetching corpus: 25436, signal 329316/387342 (executing program) 2021/12/20 18:19:21 fetching corpus: 25486, signal 329538/387342 (executing program) 2021/12/20 18:19:21 fetching corpus: 25536, signal 329853/387342 (executing program) 2021/12/20 18:19:21 fetching corpus: 25586, signal 330084/387342 (executing program) 2021/12/20 18:19:21 fetching corpus: 25636, signal 330313/387342 (executing program) 2021/12/20 18:19:21 fetching corpus: 25686, signal 330471/387342 (executing program) 2021/12/20 18:19:21 fetching corpus: 25736, signal 330736/387342 (executing program) 2021/12/20 18:19:21 fetching corpus: 25786, signal 331023/387342 (executing program) 2021/12/20 18:19:21 fetching corpus: 25836, signal 331220/387342 (executing program) 2021/12/20 18:19:21 fetching corpus: 25886, signal 331433/387342 (executing program) 2021/12/20 18:19:21 fetching corpus: 25936, signal 331657/387342 (executing program) 2021/12/20 18:19:21 fetching corpus: 25986, signal 332052/387342 (executing program) 2021/12/20 18:19:21 fetching corpus: 26036, signal 332354/387348 (executing program) 2021/12/20 18:19:21 fetching corpus: 26086, signal 332551/387348 (executing program) 2021/12/20 18:19:21 fetching corpus: 26136, signal 332804/387348 (executing program) 2021/12/20 18:19:21 fetching corpus: 26186, signal 333008/387348 (executing program) 2021/12/20 18:19:21 fetching corpus: 26236, signal 333333/387348 (executing program) 2021/12/20 18:19:21 fetching corpus: 26286, signal 333504/387348 (executing program) 2021/12/20 18:19:21 fetching corpus: 26336, signal 333770/387348 (executing program) 2021/12/20 18:19:21 fetching corpus: 26386, signal 334093/387348 (executing program) 2021/12/20 18:19:22 fetching corpus: 26436, signal 334385/387348 (executing program) 2021/12/20 18:19:22 fetching corpus: 26486, signal 334589/387348 (executing program) 2021/12/20 18:19:22 fetching corpus: 26536, signal 334759/387348 (executing program) 2021/12/20 18:19:22 fetching corpus: 26586, signal 334972/387348 (executing program) 2021/12/20 18:19:22 fetching corpus: 26636, signal 335207/387348 (executing program) 2021/12/20 18:19:22 fetching corpus: 26686, signal 335378/387348 (executing program) 2021/12/20 18:19:22 fetching corpus: 26736, signal 335638/387348 (executing program) 2021/12/20 18:19:22 fetching corpus: 26786, signal 335838/387348 (executing program) 2021/12/20 18:19:22 fetching corpus: 26836, signal 336028/387348 (executing program) 2021/12/20 18:19:22 fetching corpus: 26886, signal 336316/387348 (executing program) 2021/12/20 18:19:22 fetching corpus: 26936, signal 336527/387348 (executing program) 2021/12/20 18:19:22 fetching corpus: 26986, signal 336717/387348 (executing program) 2021/12/20 18:19:22 fetching corpus: 27036, signal 337021/387360 (executing program) 2021/12/20 18:19:22 fetching corpus: 27086, signal 337236/387360 (executing program) 2021/12/20 18:19:22 fetching corpus: 27136, signal 337421/387360 (executing program) 2021/12/20 18:19:22 fetching corpus: 27186, signal 337652/387360 (executing program) 2021/12/20 18:19:22 fetching corpus: 27236, signal 337871/387360 (executing program) 2021/12/20 18:19:22 fetching corpus: 27286, signal 338043/387360 (executing program) 2021/12/20 18:19:22 fetching corpus: 27336, signal 338194/387360 (executing program) 2021/12/20 18:19:23 fetching corpus: 27386, signal 338372/387360 (executing program) 2021/12/20 18:19:23 fetching corpus: 27436, signal 338574/387360 (executing program) 2021/12/20 18:19:23 fetching corpus: 27486, signal 338819/387360 (executing program) 2021/12/20 18:19:23 fetching corpus: 27536, signal 339082/387360 (executing program) 2021/12/20 18:19:23 fetching corpus: 27586, signal 339303/387360 (executing program) 2021/12/20 18:19:23 fetching corpus: 27636, signal 339491/387360 (executing program) 2021/12/20 18:19:23 fetching corpus: 27686, signal 339683/387360 (executing program) 2021/12/20 18:19:23 fetching corpus: 27736, signal 339910/387360 (executing program) 2021/12/20 18:19:23 fetching corpus: 27786, signal 340099/387360 (executing program) 2021/12/20 18:19:23 fetching corpus: 27836, signal 340513/387360 (executing program) 2021/12/20 18:19:23 fetching corpus: 27885, signal 340834/387360 (executing program) 2021/12/20 18:19:23 fetching corpus: 27935, signal 341113/387360 (executing program) 2021/12/20 18:19:23 fetching corpus: 27985, signal 341294/387360 (executing program) 2021/12/20 18:19:23 fetching corpus: 28035, signal 341487/387360 (executing program) 2021/12/20 18:19:24 fetching corpus: 28085, signal 341679/387360 (executing program) 2021/12/20 18:19:24 fetching corpus: 28135, signal 341925/387360 (executing program) 2021/12/20 18:19:24 fetching corpus: 28185, signal 342080/387360 (executing program) 2021/12/20 18:19:24 fetching corpus: 28235, signal 342247/387360 (executing program) 2021/12/20 18:19:24 fetching corpus: 28285, signal 342484/387360 (executing program) 2021/12/20 18:19:24 fetching corpus: 28335, signal 342817/387360 (executing program) 2021/12/20 18:19:24 fetching corpus: 28385, signal 342943/387360 (executing program) 2021/12/20 18:19:24 fetching corpus: 28435, signal 343160/387360 (executing program) 2021/12/20 18:19:24 fetching corpus: 28485, signal 343351/387360 (executing program) 2021/12/20 18:19:24 fetching corpus: 28535, signal 343520/387360 (executing program) 2021/12/20 18:19:24 fetching corpus: 28585, signal 343674/387360 (executing program) 2021/12/20 18:19:24 fetching corpus: 28635, signal 343983/387360 (executing program) 2021/12/20 18:19:24 fetching corpus: 28685, signal 344183/387360 (executing program) 2021/12/20 18:19:24 fetching corpus: 28735, signal 344466/387360 (executing program) 2021/12/20 18:19:24 fetching corpus: 28785, signal 344815/387365 (executing program) 2021/12/20 18:19:24 fetching corpus: 28835, signal 345050/387365 (executing program) 2021/12/20 18:19:24 fetching corpus: 28885, signal 345320/387365 (executing program) 2021/12/20 18:19:24 fetching corpus: 28935, signal 345589/387366 (executing program) 2021/12/20 18:19:24 fetching corpus: 28985, signal 345748/387366 (executing program) 2021/12/20 18:19:24 fetching corpus: 29035, signal 345884/387366 (executing program) 2021/12/20 18:19:24 fetching corpus: 29085, signal 346048/387366 (executing program) 2021/12/20 18:19:25 fetching corpus: 29135, signal 346190/387366 (executing program) 2021/12/20 18:19:25 fetching corpus: 29185, signal 346359/387366 (executing program) 2021/12/20 18:19:25 fetching corpus: 29235, signal 346520/387366 (executing program) 2021/12/20 18:19:25 fetching corpus: 29285, signal 346661/387369 (executing program) 2021/12/20 18:19:25 fetching corpus: 29335, signal 346850/387369 (executing program) 2021/12/20 18:19:25 fetching corpus: 29385, signal 347036/387369 (executing program) 2021/12/20 18:19:25 fetching corpus: 29434, signal 347209/387369 (executing program) 2021/12/20 18:19:25 fetching corpus: 29484, signal 347418/387369 (executing program) 2021/12/20 18:19:25 fetching corpus: 29534, signal 347653/387369 (executing program) 2021/12/20 18:19:25 fetching corpus: 29584, signal 347835/387369 (executing program) 2021/12/20 18:19:25 fetching corpus: 29634, signal 347989/387369 (executing program) 2021/12/20 18:19:25 fetching corpus: 29684, signal 348147/387369 (executing program) 2021/12/20 18:19:25 fetching corpus: 29734, signal 348341/387386 (executing program) 2021/12/20 18:19:25 fetching corpus: 29784, signal 348594/387386 (executing program) 2021/12/20 18:19:25 fetching corpus: 29833, signal 348820/387386 (executing program) 2021/12/20 18:19:25 fetching corpus: 29883, signal 349032/387386 (executing program) 2021/12/20 18:19:26 fetching corpus: 29933, signal 349227/387391 (executing program) 2021/12/20 18:19:26 fetching corpus: 29982, signal 349424/387391 (executing program) 2021/12/20 18:19:26 fetching corpus: 30032, signal 349650/387391 (executing program) 2021/12/20 18:19:26 fetching corpus: 30082, signal 349964/387391 (executing program) 2021/12/20 18:19:26 fetching corpus: 30132, signal 350246/387391 (executing program) 2021/12/20 18:19:26 fetching corpus: 30182, signal 350408/387391 (executing program) 2021/12/20 18:19:26 fetching corpus: 30232, signal 350604/387391 (executing program) 2021/12/20 18:19:26 fetching corpus: 30282, signal 350792/387391 (executing program) 2021/12/20 18:19:26 fetching corpus: 30332, signal 350978/387391 (executing program) 2021/12/20 18:19:26 fetching corpus: 30382, signal 351148/387391 (executing program) 2021/12/20 18:19:26 fetching corpus: 30432, signal 351361/387391 (executing program) 2021/12/20 18:19:26 fetching corpus: 30482, signal 351553/387391 (executing program) 2021/12/20 18:19:26 fetching corpus: 30532, signal 351722/387391 (executing program) 2021/12/20 18:19:26 fetching corpus: 30582, signal 351994/387391 (executing program) 2021/12/20 18:19:26 fetching corpus: 30632, signal 352238/387391 (executing program) 2021/12/20 18:19:27 fetching corpus: 30682, signal 352413/387391 (executing program) 2021/12/20 18:19:27 fetching corpus: 30732, signal 352626/387391 (executing program) 2021/12/20 18:19:27 fetching corpus: 30782, signal 352828/387391 (executing program) 2021/12/20 18:19:27 fetching corpus: 30832, signal 353101/387391 (executing program) 2021/12/20 18:19:27 fetching corpus: 30882, signal 353389/387391 (executing program) 2021/12/20 18:19:27 fetching corpus: 30932, signal 353583/387391 (executing program) 2021/12/20 18:19:27 fetching corpus: 30982, signal 353948/387391 (executing program) 2021/12/20 18:19:27 fetching corpus: 31032, signal 354138/387391 (executing program) 2021/12/20 18:19:27 fetching corpus: 31082, signal 354330/387391 (executing program) 2021/12/20 18:19:27 fetching corpus: 31132, signal 354527/387391 (executing program) 2021/12/20 18:19:27 fetching corpus: 31182, signal 354709/387401 (executing program) 2021/12/20 18:19:28 fetching corpus: 31232, signal 354888/387401 (executing program) 2021/12/20 18:19:28 fetching corpus: 31282, signal 355102/387401 (executing program) 2021/12/20 18:19:28 fetching corpus: 31332, signal 355270/387408 (executing program) 2021/12/20 18:19:28 fetching corpus: 31382, signal 355508/387408 (executing program) 2021/12/20 18:19:28 fetching corpus: 31432, signal 355745/387423 (executing program) 2021/12/20 18:19:28 fetching corpus: 31482, signal 355903/387423 (executing program) 2021/12/20 18:19:28 fetching corpus: 31532, signal 356144/387423 (executing program) 2021/12/20 18:19:28 fetching corpus: 31582, signal 356356/387423 (executing program) 2021/12/20 18:19:28 fetching corpus: 31632, signal 356594/387423 (executing program) [ 146.344932][ T1199] ieee802154 phy0 wpan0: encryption failed: -22 [ 146.351405][ T1199] ieee802154 phy1 wpan1: encryption failed: -22 2021/12/20 18:19:28 fetching corpus: 31682, signal 356819/387423 (executing program) 2021/12/20 18:19:28 fetching corpus: 31732, signal 356995/387423 (executing program) 2021/12/20 18:19:28 fetching corpus: 31782, signal 357175/387423 (executing program) 2021/12/20 18:19:28 fetching corpus: 31832, signal 357434/387423 (executing program) 2021/12/20 18:19:28 fetching corpus: 31881, signal 357553/387423 (executing program) 2021/12/20 18:19:28 fetching corpus: 31931, signal 357723/387423 (executing program) 2021/12/20 18:19:28 fetching corpus: 31981, signal 357882/387423 (executing program) 2021/12/20 18:19:28 fetching corpus: 32031, signal 358021/387429 (executing program) 2021/12/20 18:19:29 fetching corpus: 32081, signal 358220/387429 (executing program) 2021/12/20 18:19:29 fetching corpus: 32131, signal 358415/387429 (executing program) 2021/12/20 18:19:29 fetching corpus: 32181, signal 358542/387429 (executing program) 2021/12/20 18:19:29 fetching corpus: 32231, signal 358702/387444 (executing program) 2021/12/20 18:19:29 fetching corpus: 32281, signal 358890/387444 (executing program) 2021/12/20 18:19:29 fetching corpus: 32331, signal 359101/387444 (executing program) 2021/12/20 18:19:29 fetching corpus: 32381, signal 359550/387445 (executing program) 2021/12/20 18:19:29 fetching corpus: 32431, signal 359802/387445 (executing program) 2021/12/20 18:19:29 fetching corpus: 32481, signal 359951/387447 (executing program) 2021/12/20 18:19:29 fetching corpus: 32531, signal 360171/387447 (executing program) 2021/12/20 18:19:29 fetching corpus: 32581, signal 360336/387447 (executing program) 2021/12/20 18:19:29 fetching corpus: 32631, signal 360511/387447 (executing program) 2021/12/20 18:19:29 fetching corpus: 32681, signal 360641/387447 (executing program) 2021/12/20 18:19:29 fetching corpus: 32731, signal 360857/387447 (executing program) 2021/12/20 18:19:29 fetching corpus: 32781, signal 361067/387449 (executing program) 2021/12/20 18:19:29 fetching corpus: 32831, signal 361239/387449 (executing program) 2021/12/20 18:19:29 fetching corpus: 32881, signal 361460/387449 (executing program) 2021/12/20 18:19:29 fetching corpus: 32931, signal 361676/387449 (executing program) 2021/12/20 18:19:30 fetching corpus: 32981, signal 361870/387449 (executing program) 2021/12/20 18:19:30 fetching corpus: 33031, signal 362017/387449 (executing program) 2021/12/20 18:19:30 fetching corpus: 33081, signal 362210/387449 (executing program) 2021/12/20 18:19:30 fetching corpus: 33131, signal 362477/387449 (executing program) 2021/12/20 18:19:30 fetching corpus: 33181, signal 362614/387449 (executing program) 2021/12/20 18:19:30 fetching corpus: 33231, signal 362774/387449 (executing program) 2021/12/20 18:19:30 fetching corpus: 33281, signal 363997/387449 (executing program) 2021/12/20 18:19:30 fetching corpus: 33331, signal 364205/387462 (executing program) 2021/12/20 18:19:30 fetching corpus: 33381, signal 364412/387462 (executing program) 2021/12/20 18:19:30 fetching corpus: 33431, signal 364624/387462 (executing program) 2021/12/20 18:19:30 fetching corpus: 33481, signal 364780/387463 (executing program) 2021/12/20 18:19:30 fetching corpus: 33530, signal 364925/387468 (executing program) 2021/12/20 18:19:30 fetching corpus: 33580, signal 365112/387468 (executing program) 2021/12/20 18:19:30 fetching corpus: 33630, signal 365308/387468 (executing program) 2021/12/20 18:19:30 fetching corpus: 33680, signal 365480/387468 (executing program) 2021/12/20 18:19:31 fetching corpus: 33730, signal 365652/387468 (executing program) 2021/12/20 18:19:31 fetching corpus: 33780, signal 365833/387468 (executing program) 2021/12/20 18:19:31 fetching corpus: 33830, signal 366061/387468 (executing program) 2021/12/20 18:19:31 fetching corpus: 33880, signal 366221/387471 (executing program) 2021/12/20 18:19:31 fetching corpus: 33930, signal 366350/387471 (executing program) 2021/12/20 18:19:31 fetching corpus: 33980, signal 366501/387471 (executing program) 2021/12/20 18:19:31 fetching corpus: 34030, signal 366645/387471 (executing program) 2021/12/20 18:19:31 fetching corpus: 34080, signal 366811/387471 (executing program) 2021/12/20 18:19:31 fetching corpus: 34130, signal 367034/387471 (executing program) 2021/12/20 18:19:31 fetching corpus: 34180, signal 367188/387471 (executing program) 2021/12/20 18:19:31 fetching corpus: 34230, signal 367412/387471 (executing program) 2021/12/20 18:19:31 fetching corpus: 34279, signal 367610/387471 (executing program) 2021/12/20 18:19:31 fetching corpus: 34328, signal 367770/387471 (executing program) 2021/12/20 18:19:31 fetching corpus: 34377, signal 367908/387471 (executing program) 2021/12/20 18:19:31 fetching corpus: 34427, signal 368091/387471 (executing program) 2021/12/20 18:19:32 fetching corpus: 34477, signal 368216/387471 (executing program) 2021/12/20 18:19:32 fetching corpus: 34527, signal 368395/387471 (executing program) 2021/12/20 18:19:32 fetching corpus: 34577, signal 368562/387471 (executing program) 2021/12/20 18:19:32 fetching corpus: 34627, signal 368748/387481 (executing program) 2021/12/20 18:19:32 fetching corpus: 34677, signal 368936/387484 (executing program) 2021/12/20 18:19:32 fetching corpus: 34727, signal 369141/387484 (executing program) 2021/12/20 18:19:32 fetching corpus: 34777, signal 369260/387484 (executing program) 2021/12/20 18:19:32 fetching corpus: 34827, signal 369465/387484 (executing program) 2021/12/20 18:19:32 fetching corpus: 34876, signal 369616/387484 (executing program) 2021/12/20 18:19:32 fetching corpus: 34926, signal 369751/387484 (executing program) 2021/12/20 18:19:32 fetching corpus: 34976, signal 370064/387484 (executing program) 2021/12/20 18:19:32 fetching corpus: 35026, signal 370300/387484 (executing program) 2021/12/20 18:19:32 fetching corpus: 35076, signal 370433/387484 (executing program) 2021/12/20 18:19:33 fetching corpus: 35126, signal 370715/387484 (executing program) 2021/12/20 18:19:33 fetching corpus: 35176, signal 370843/387486 (executing program) 2021/12/20 18:19:33 fetching corpus: 35226, signal 371068/387486 (executing program) 2021/12/20 18:19:33 fetching corpus: 35276, signal 371228/387486 (executing program) 2021/12/20 18:19:33 fetching corpus: 35326, signal 371384/387486 (executing program) 2021/12/20 18:19:33 fetching corpus: 35376, signal 371603/387486 (executing program) 2021/12/20 18:19:33 fetching corpus: 35426, signal 371755/387486 (executing program) 2021/12/20 18:19:33 fetching corpus: 35476, signal 371959/387486 (executing program) 2021/12/20 18:19:33 fetching corpus: 35526, signal 372205/387486 (executing program) 2021/12/20 18:19:33 fetching corpus: 35576, signal 372310/387491 (executing program) 2021/12/20 18:19:33 fetching corpus: 35626, signal 372488/387491 (executing program) 2021/12/20 18:19:33 fetching corpus: 35676, signal 372640/387491 (executing program) 2021/12/20 18:19:33 fetching corpus: 35726, signal 372868/387491 (executing program) 2021/12/20 18:19:33 fetching corpus: 35776, signal 373045/387491 (executing program) 2021/12/20 18:19:33 fetching corpus: 35826, signal 373231/387491 (executing program) 2021/12/20 18:19:33 fetching corpus: 35876, signal 373408/387491 (executing program) 2021/12/20 18:19:34 fetching corpus: 35926, signal 373563/387491 (executing program) 2021/12/20 18:19:34 fetching corpus: 35976, signal 373760/387491 (executing program) 2021/12/20 18:19:34 fetching corpus: 36026, signal 373955/387491 (executing program) 2021/12/20 18:19:34 fetching corpus: 36076, signal 374114/387509 (executing program) 2021/12/20 18:19:34 fetching corpus: 36125, signal 374236/387509 (executing program) 2021/12/20 18:19:34 fetching corpus: 36175, signal 374439/387529 (executing program) 2021/12/20 18:19:34 fetching corpus: 36225, signal 374567/387529 (executing program) 2021/12/20 18:19:34 fetching corpus: 36275, signal 374680/387529 (executing program) 2021/12/20 18:19:34 fetching corpus: 36325, signal 374848/387529 (executing program) 2021/12/20 18:19:34 fetching corpus: 36375, signal 375224/387529 (executing program) 2021/12/20 18:19:34 fetching corpus: 36424, signal 375485/387529 (executing program) 2021/12/20 18:19:34 fetching corpus: 36474, signal 375654/387529 (executing program) 2021/12/20 18:19:34 fetching corpus: 36523, signal 375989/387529 (executing program) 2021/12/20 18:19:34 fetching corpus: 36573, signal 376143/387529 (executing program) 2021/12/20 18:19:34 fetching corpus: 36623, signal 376275/387529 (executing program) 2021/12/20 18:19:34 fetching corpus: 36673, signal 379229/387529 (executing program) 2021/12/20 18:19:34 fetching corpus: 36723, signal 379486/387529 (executing program) 2021/12/20 18:19:34 fetching corpus: 36773, signal 379608/387529 (executing program) 2021/12/20 18:19:35 fetching corpus: 36823, signal 379765/387529 (executing program) 2021/12/20 18:19:35 fetching corpus: 36873, signal 379884/387529 (executing program) 2021/12/20 18:19:35 fetching corpus: 36923, signal 380086/387529 (executing program) 2021/12/20 18:19:35 fetching corpus: 36973, signal 380353/387538 (executing program) 2021/12/20 18:19:35 fetching corpus: 37022, signal 380546/387538 (executing program) 2021/12/20 18:19:35 fetching corpus: 37072, signal 380685/387538 (executing program) 2021/12/20 18:19:35 fetching corpus: 37122, signal 380882/387538 (executing program) 2021/12/20 18:19:35 fetching corpus: 37172, signal 380996/387538 (executing program) 2021/12/20 18:19:35 fetching corpus: 37222, signal 381168/387538 (executing program) 2021/12/20 18:19:35 fetching corpus: 37272, signal 381334/387538 (executing program) 2021/12/20 18:19:35 fetching corpus: 37322, signal 381505/387538 (executing program) 2021/12/20 18:19:35 fetching corpus: 37372, signal 381627/387538 (executing program) 2021/12/20 18:19:35 fetching corpus: 37422, signal 381780/387538 (executing program) 2021/12/20 18:19:35 fetching corpus: 37472, signal 381930/387538 (executing program) 2021/12/20 18:19:35 fetching corpus: 37522, signal 382134/387538 (executing program) 2021/12/20 18:19:36 fetching corpus: 37572, signal 382348/387538 (executing program) 2021/12/20 18:19:36 fetching corpus: 37622, signal 382516/387538 (executing program) 2021/12/20 18:19:36 fetching corpus: 37672, signal 382701/387538 (executing program) 2021/12/20 18:19:36 fetching corpus: 37722, signal 382889/387538 (executing program) 2021/12/20 18:19:36 fetching corpus: 37772, signal 383085/387538 (executing program) 2021/12/20 18:19:36 fetching corpus: 37822, signal 383279/387538 (executing program) 2021/12/20 18:19:36 fetching corpus: 37872, signal 383480/387538 (executing program) 2021/12/20 18:19:36 fetching corpus: 37922, signal 383670/387538 (executing program) 2021/12/20 18:19:36 fetching corpus: 37931, signal 383704/387538 (executing program) 2021/12/20 18:19:36 fetching corpus: 37931, signal 383704/387538 (executing program) 2021/12/20 18:19:38 starting 6 fuzzer processes 18:19:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x109, 0x0, 0x0, {{}, {0x0, 0x4101}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 18:19:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x81000000}]}, 0x28}}, 0x0) 18:19:38 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', '::\n'}, 0x9) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/130, 0x82}], 0x1, 0xfffffffe, 0x0) 18:19:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x0) 18:19:38 executing program 3: unshare(0x8000400) r0 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 18:19:38 executing program 4: rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000000)) r0 = openat$tcp_congestion(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) ftruncate(r0, 0xfff) [ 158.473085][ T3506] chnl_net:caif_netlink_parms(): no params data found [ 159.011882][ T3507] chnl_net:caif_netlink_parms(): no params data found [ 159.248439][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.255913][ T3506] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.265463][ T3506] device bridge_slave_0 entered promiscuous mode [ 159.284749][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.292201][ T3506] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.301543][ T3506] device bridge_slave_1 entered promiscuous mode [ 159.358020][ T3510] chnl_net:caif_netlink_parms(): no params data found [ 159.478759][ T3506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.498367][ T3506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.748925][ T3506] team0: Port device team_slave_0 added [ 159.834132][ T3506] team0: Port device team_slave_1 added [ 159.856320][ T3507] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.864591][ T3507] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.874146][ T3507] device bridge_slave_0 entered promiscuous mode [ 159.896740][ T3511] chnl_net:caif_netlink_parms(): no params data found [ 159.917598][ T3509] chnl_net:caif_netlink_parms(): no params data found [ 159.960681][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.968460][ T3507] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.978245][ T3507] device bridge_slave_1 entered promiscuous mode [ 160.092010][ T115] Bluetooth: hci0: command 0x0409 tx timeout [ 160.143787][ T3507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.177333][ T115] Bluetooth: hci1: command 0x0409 tx timeout [ 160.202433][ T3506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.209467][ T3506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.235720][ T3506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.252141][ T115] Bluetooth: hci2: command 0x0409 tx timeout [ 160.261398][ T3507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.316841][ T3506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.324916][ T3506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.351123][ T3506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.363762][ T3508] chnl_net:caif_netlink_parms(): no params data found [ 160.428829][ T117] Bluetooth: hci3: command 0x0409 tx timeout [ 160.493471][ T115] Bluetooth: hci4: command 0x0409 tx timeout [ 160.562514][ T3507] team0: Port device team_slave_0 added [ 160.588203][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 160.672489][ T3507] team0: Port device team_slave_1 added [ 160.679329][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.686807][ T3510] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.695950][ T3510] device bridge_slave_0 entered promiscuous mode [ 160.745038][ T3506] device hsr_slave_0 entered promiscuous mode [ 160.763197][ T3506] device hsr_slave_1 entered promiscuous mode [ 160.814157][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.822308][ T3510] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.831727][ T3510] device bridge_slave_1 entered promiscuous mode [ 161.009270][ T3507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.017087][ T3507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.043576][ T3507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.112119][ T3511] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.119671][ T3511] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.129344][ T3511] device bridge_slave_0 entered promiscuous mode [ 161.145593][ T3510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.155123][ T3511] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.155426][ T3511] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.172316][ T3511] device bridge_slave_1 entered promiscuous mode [ 161.182985][ T3507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.190021][ T3507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.216370][ T3507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.263502][ T3510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.329231][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.336816][ T3509] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.346200][ T3509] device bridge_slave_0 entered promiscuous mode [ 161.366606][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.374818][ T3509] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.384323][ T3509] device bridge_slave_1 entered promiscuous mode [ 161.447183][ T3511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.460589][ T3510] team0: Port device team_slave_0 added [ 161.573090][ T3511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.587254][ T3510] team0: Port device team_slave_1 added [ 161.610268][ T3509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.766838][ T3509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.806995][ T3507] device hsr_slave_0 entered promiscuous mode [ 161.816526][ T3507] device hsr_slave_1 entered promiscuous mode [ 161.824812][ T3507] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.832633][ T3507] Cannot create hsr debugfs directory [ 161.852367][ T3511] team0: Port device team_slave_0 added [ 161.884220][ T3510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.891264][ T3510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.917719][ T3510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.007589][ T3511] team0: Port device team_slave_1 added [ 162.047545][ T3510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.054840][ T3510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.081047][ T3510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.117603][ T3509] team0: Port device team_slave_0 added [ 162.124653][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.132432][ T3508] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.142145][ T3508] device bridge_slave_0 entered promiscuous mode [ 162.172254][ T115] Bluetooth: hci0: command 0x041b tx timeout [ 162.245374][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.252113][ T115] Bluetooth: hci1: command 0x041b tx timeout [ 162.252928][ T3508] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.268464][ T3508] device bridge_slave_1 entered promiscuous mode [ 162.286689][ T3509] team0: Port device team_slave_1 added [ 162.321241][ T3511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.328537][ T3511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.333122][ T115] Bluetooth: hci2: command 0x041b tx timeout [ 162.354733][ T3511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.489857][ T3511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.497210][ T3511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.523513][ T3511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.535559][ T115] Bluetooth: hci3: command 0x041b tx timeout [ 162.572032][ T115] Bluetooth: hci4: command 0x041b tx timeout [ 162.616250][ T3508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.652855][ T115] Bluetooth: hci5: command 0x041b tx timeout [ 162.684517][ T3510] device hsr_slave_0 entered promiscuous mode [ 162.698639][ T3510] device hsr_slave_1 entered promiscuous mode [ 162.706447][ T3510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.714368][ T3510] Cannot create hsr debugfs directory [ 162.722741][ T3509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.729771][ T3509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.756370][ T3509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.773669][ T3508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.784621][ T3509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.791644][ T3509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.818073][ T3509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.869019][ T3511] device hsr_slave_0 entered promiscuous mode [ 162.877452][ T3511] device hsr_slave_1 entered promiscuous mode [ 162.886756][ T3511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.894631][ T3511] Cannot create hsr debugfs directory [ 162.904172][ T3506] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 163.000837][ T3506] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 163.062835][ T3508] team0: Port device team_slave_0 added [ 163.090385][ T3506] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 163.169079][ T3508] team0: Port device team_slave_1 added [ 163.232276][ T3506] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 163.338773][ T3508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.345896][ T3508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.372236][ T3508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.395767][ T3509] device hsr_slave_0 entered promiscuous mode [ 163.405166][ T3509] device hsr_slave_1 entered promiscuous mode [ 163.413261][ T3509] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.420858][ T3509] Cannot create hsr debugfs directory [ 163.485585][ T3508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.493154][ T3508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.519398][ T3508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.714877][ T3508] device hsr_slave_0 entered promiscuous mode [ 163.724824][ T3508] device hsr_slave_1 entered promiscuous mode [ 163.732870][ T3508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.740463][ T3508] Cannot create hsr debugfs directory [ 164.041697][ T3507] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 164.113901][ T3507] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 164.209867][ T3507] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 164.259520][ T3552] Bluetooth: hci0: command 0x040f tx timeout [ 164.306458][ T3507] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 164.363601][ T3552] Bluetooth: hci1: command 0x040f tx timeout [ 164.420021][ T19] Bluetooth: hci2: command 0x040f tx timeout [ 164.450935][ T3511] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 164.483021][ T3511] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 164.527006][ T3511] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 164.545202][ T3511] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 164.575258][ T115] Bluetooth: hci3: command 0x040f tx timeout [ 164.652018][ T3552] Bluetooth: hci4: command 0x040f tx timeout [ 164.693501][ T3510] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 164.730841][ T3510] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 164.737357][ T19] Bluetooth: hci5: command 0x040f tx timeout [ 164.755603][ T3508] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 164.780203][ T3508] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 164.818090][ T3510] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 164.842577][ T3508] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 164.887912][ T3510] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 164.912005][ T3508] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 165.086177][ T3509] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 165.120418][ T3509] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 165.157720][ T3506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.171428][ T3509] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 165.196088][ T3509] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 165.285419][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.294802][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.337211][ T3506] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.415670][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.425829][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.435685][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.443081][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.482433][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.491746][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.503650][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.513246][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.520555][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.691540][ T3507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.735546][ T117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.747078][ T117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.758117][ T117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.768879][ T117] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.779342][ T117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.790036][ T117] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.811168][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.873286][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.883813][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.917611][ T3511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.948585][ T3507] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.967646][ T3506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.981100][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.013235][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.023336][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.033353][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.042976][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.088931][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.100153][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.109858][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.117276][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.144193][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.198139][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.209103][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.218710][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.226120][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.234879][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.244184][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.253318][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.306878][ T3511] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.333725][ T3564] Bluetooth: hci0: command 0x0419 tx timeout [ 166.357310][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.368563][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.379946][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.391289][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.426526][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.434489][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.442572][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.452653][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.462254][ T3564] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.469560][ T3564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.478718][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.489572][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.509289][ T3510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.512276][ T3557] Bluetooth: hci1: command 0x0419 tx timeout [ 166.538920][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.580800][ T3506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.592951][ T3557] Bluetooth: hci2: command 0x0419 tx timeout [ 166.625185][ T3509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.658331][ T3562] Bluetooth: hci3: command 0x0419 tx timeout [ 166.665169][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.675686][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.685437][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.692805][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.702656][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.713924][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.724665][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.734800][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.744747][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.755654][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.771198][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.782970][ T3557] Bluetooth: hci4: command 0x0419 tx timeout [ 166.813325][ T3557] Bluetooth: hci5: command 0x0419 tx timeout [ 166.815460][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.830690][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.841321][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.850566][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.886562][ T3507] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.901101][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.921519][ T3511] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 166.933261][ T3511] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.951685][ T3510] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.993488][ T3508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.011328][ T3509] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.057172][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.067165][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.077066][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.086948][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.097812][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.107660][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.117456][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.126662][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.135940][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.146162][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.155915][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.163299][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.172090][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.182467][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.194207][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.204393][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.313165][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.323447][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.333440][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.340753][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.349943][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.360114][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.369783][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.377191][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.386446][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.395789][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.404603][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.412529][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.434160][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.481023][ T3508] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.513480][ T3511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.527084][ T3507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.549900][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.559915][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.570782][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.580893][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.590580][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.597967][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.607723][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.615928][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.623985][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.635315][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.654873][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.664339][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.680164][ T3506] device veth0_vlan entered promiscuous mode [ 167.738569][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.749539][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.760495][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.772452][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.782675][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.792323][ T3564] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.799638][ T3564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.859862][ T3506] device veth1_vlan entered promiscuous mode [ 167.987022][ T3510] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 167.998238][ T3510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.078418][ T3508] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 168.089507][ T3508] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.123807][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 168.133834][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 168.143828][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.153962][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.163413][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.173970][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.183619][ T3564] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.190932][ T3564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.200172][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.211223][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.222073][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.232101][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.242894][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.254061][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.265410][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.276774][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 168.287853][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.298535][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.309433][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.320144][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.330227][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.340183][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 168.351134][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.361992][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.371953][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.382837][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.393159][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.403681][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.413659][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.423599][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.434592][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.484619][ T3506] device veth0_macvtap entered promiscuous mode [ 168.559429][ T3509] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 168.570586][ T3509] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.609758][ T3511] device veth0_vlan entered promiscuous mode [ 168.620100][ T3506] device veth1_macvtap entered promiscuous mode [ 168.655235][ T3508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.752904][ T3506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.766082][ T3511] device veth1_vlan entered promiscuous mode [ 168.790080][ T3510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.824440][ T3506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.887289][ T3509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.902785][ T3506] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.911683][ T3506] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.920731][ T3506] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.929791][ T3506] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.035755][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 169.046013][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 169.057205][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 169.067517][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 169.077055][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.087263][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.098460][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 169.109180][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 169.119691][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 169.129777][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.141123][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.152220][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 169.162257][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 169.172269][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.182582][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.192807][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.200720][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.209661][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.217716][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.225686][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.236286][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.246904][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.257448][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.268015][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.276043][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.284022][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.294452][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.304849][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.315182][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.325232][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.335658][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.349609][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 169.359127][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 169.369671][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.380337][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.460381][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.471000][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.481755][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 169.492098][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 169.574450][ T3510] device veth0_vlan entered promiscuous mode [ 169.595668][ T3508] device veth0_vlan entered promiscuous mode [ 169.617559][ T3511] device veth0_macvtap entered promiscuous mode [ 169.649643][ T3510] device veth1_vlan entered promiscuous mode [ 169.668468][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.678393][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.688032][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 169.697953][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.708114][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.718956][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 169.728845][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.738822][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.762847][ T3507] device veth0_vlan entered promiscuous mode [ 169.780894][ T3508] device veth1_vlan entered promiscuous mode [ 169.791989][ T117] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 169.801547][ T117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.811184][ T117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.820596][ T117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.829987][ T117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.857305][ T3511] device veth1_macvtap entered promiscuous mode [ 169.893512][ T3507] device veth1_vlan entered promiscuous mode [ 170.004066][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 170.013975][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 170.024043][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 170.034041][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 170.043933][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.055129][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.093505][ T3510] device veth0_macvtap entered promiscuous mode [ 170.107825][ T3511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 170.118789][ T3511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.133317][ T3511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.170969][ T3510] device veth1_macvtap entered promiscuous mode [ 170.201107][ T3511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 170.212306][ T3511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.226352][ T3511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.298899][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 170.309393][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.319448][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 170.329318][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 170.339752][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.350348][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 170.360870][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 170.371687][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.382039][ T115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.418892][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.429606][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.458834][ T3508] device veth0_macvtap entered promiscuous mode [ 170.482110][ T3510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 170.494382][ T3510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.504486][ T3510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 170.515133][ T3510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.529282][ T3510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.538850][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.549505][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 170.560079][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.578661][ T3511] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.587868][ T3511] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.596923][ T3511] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.605975][ T3511] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.632949][ T3508] device veth1_macvtap entered promiscuous mode [ 170.654871][ T3507] device veth0_macvtap entered promiscuous mode [ 170.717534][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.727747][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.739306][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.758157][ T3507] device veth1_macvtap entered promiscuous mode [ 170.794687][ T3510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 170.805833][ T3510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.818489][ T3510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 170.829215][ T3510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.843380][ T3510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.913282][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 170.923355][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 170.933893][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 170.955472][ T3508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 170.966226][ T3508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.978208][ T3508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 170.988891][ T3508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.998959][ T3508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 171.009569][ T3508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.023985][ T3508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.040855][ T3510] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.050138][ T3510] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.059885][ T3510] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.069047][ T3510] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.093344][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.104236][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.141193][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 171.152545][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.162611][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 171.173233][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.183293][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 171.193936][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.204105][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 171.215709][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.229984][ T3507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.249210][ T3509] device veth0_vlan entered promiscuous mode [ 171.259617][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.270194][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.281340][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.291927][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.351484][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.361013][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.389948][ T3508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 171.401470][ T3508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.411541][ T3508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 171.422288][ T3508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.432367][ T3508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 171.442972][ T3508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.457255][ T3508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.472461][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 171.482884][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.520441][ T3509] device veth1_vlan entered promiscuous mode [ 171.540468][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 171.552010][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.562115][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 171.572742][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.582851][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 171.593482][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.603647][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 171.614278][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.628357][ T3507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.649539][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 171.660258][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.685741][ T3508] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.694988][ T3508] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.704260][ T3508] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.713646][ T3508] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.972356][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 171.983392][ T3533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.030600][ T3509] device veth0_macvtap entered promiscuous mode [ 172.069088][ T3507] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.078194][ T3507] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.087355][ T3507] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.096429][ T3507] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.166297][ T3509] device veth1_macvtap entered promiscuous mode [ 172.355850][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.366444][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.396091][ T3509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 172.406853][ T3509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.417522][ T3509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 172.428135][ T3509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.438124][ T3509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 172.448733][ T3509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.458732][ T3509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 172.469388][ T3509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.479468][ T3509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 172.490097][ T3509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.505356][ T3509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.553042][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.563555][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.943903][ T3509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 172.955330][ T3509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.965354][ T3509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 172.975941][ T3509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.985925][ T3509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 172.996636][ T3509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.006666][ T3509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 173.017262][ T3509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.027309][ T3509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 173.037905][ T3509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.052349][ T3509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.061151][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.071705][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.389222][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.397458][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.440982][ T3509] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.450735][ T3509] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.459900][ T3509] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.468898][ T3509] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.484784][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 173.614194][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.622612][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.631253][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:19:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x109, 0x0, 0x0, {{}, {0x0, 0x4101}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 18:19:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x109, 0x0, 0x0, {{}, {0x0, 0x4101}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) [ 175.233542][ T942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.241475][ T942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.251535][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 18:19:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x109, 0x0, 0x0, {{}, {0x0, 0x4101}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) [ 175.354323][ T3611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.362833][ T3611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.381016][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 175.736104][ T923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.744160][ T923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.754495][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 175.936826][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.936936][ T923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.937000][ T923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.945088][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.948467][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 175.978968][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 176.053722][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.061738][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:19:58 executing program 3: unshare(0x8000400) r0 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) [ 176.102518][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.232494][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.240711][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.259430][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.267732][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:19:58 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000700004e2f9663a918fa1efd9b0b"}, 0x38}}, 0x0) [ 176.302881][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 176.313400][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:19:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x81000000}]}, 0x28}}, 0x0) 18:19:58 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000700004e2f9663a918fa1efd9b0b"}, 0x38}}, 0x0) 18:19:58 executing program 3: unshare(0x8000400) r0 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 18:19:59 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', '::\n'}, 0x9) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/130, 0x82}], 0x1, 0xfffffffe, 0x0) 18:19:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x0) 18:19:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x81000000}]}, 0x28}}, 0x0) [ 178.016482][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.027194][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.085726][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 178.109634][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.117918][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.130021][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:20:00 executing program 4: rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000000)) r0 = openat$tcp_congestion(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) ftruncate(r0, 0xfff) 18:20:00 executing program 3: unshare(0x8000400) r0 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 18:20:00 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000700004e2f9663a918fa1efd9b0b"}, 0x38}}, 0x0) 18:20:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x0) 18:20:00 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', '::\n'}, 0x9) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/130, 0x82}], 0x1, 0xfffffffe, 0x0) 18:20:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x81000000}]}, 0x28}}, 0x0) 18:20:00 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', '::\n'}, 0x9) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/130, 0x82}], 0x1, 0xfffffffe, 0x0) 18:20:00 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000700004e2f9663a918fa1efd9b0b"}, 0x38}}, 0x0) 18:20:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x0) 18:20:00 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', '::\n'}, 0x9) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/130, 0x82}], 0x1, 0xfffffffe, 0x0) 18:20:00 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080)=0xfffffff8, 0x4) 18:20:00 executing program 4: rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000000)) r0 = openat$tcp_congestion(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) ftruncate(r0, 0xfff) 18:20:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_FLOW={0x8, 0xb, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x40040) 18:20:01 executing program 0: r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x0, 0x1, 0x7, &(0x7f0000000040)={0x0, "6d13f1fd68c56d90ffdc1d0332c1588398efb250d15db7b22236af887131b108ed"}}) 18:20:01 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', '::\n'}, 0x9) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/130, 0x82}], 0x1, 0xfffffffe, 0x0) 18:20:01 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) sendto$inet6(r0, &(0x7f0000000500)="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", 0xb01, 0x0, &(0x7f0000000040)={0xa, 0x6, 0x0, @empty}, 0x1c) 18:20:01 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x891f, 0x0) 18:20:01 executing program 4: rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000000)) r0 = openat$tcp_congestion(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) ftruncate(r0, 0xfff) 18:20:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_FLOW={0x8, 0xb, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x40040) 18:20:01 executing program 0: r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x0, 0x1, 0x7, &(0x7f0000000040)={0x0, "6d13f1fd68c56d90ffdc1d0332c1588398efb250d15db7b22236af887131b108ed"}}) 18:20:01 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', '::\n'}, 0x9) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/130, 0x82}], 0x1, 0xfffffffe, 0x0) 18:20:01 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) sendto$inet6(r0, &(0x7f0000000500)="6593d54e6b9ae096f4b181c3a414e9fb7e7bc81a8aa3e5c158a2f320efc10e5b07cdcb00cdd25ebd4715e6b0dbadb403f8a4e0ae671fb35d71310f1e21f857cee0ae4670e58cfc3f7a8a8da4589c3cbb48d7c5f62fab2a4b99288ab6bc0eeea405b289022242add37a66a9416b1b03e1942c7abeb3aaada9a6b65ed4bcd984089810e29f8edb5682630aec1a21b9cf52d1584b2bbdcd255e22529b9c4b621f2b6ccdc6bb3c2f33ba55cc5901a5d2aecfa28d071756e45969e92b06f645a8ed9b2716baf393a702a294563a6fda22b1a1ae0b016a14712a1c6973057a9eab6814df3c10899ffb755cd8459820f7d57bee441133a52f8d7b4fcd3a5ab30e3136a381d33ebdd39a6c55b46285892441e44d7b189b0c81ab598d3f6229b2e818df24f52606ff595ebc25c08d06089d6466a640686b4e8c3e92d56d9af59648ff5c3fa3347ce3c0c9e3e9561afc4c2282af81132b50dbd7208de165b60ebc1b12dafa11b51cc9208ca8358cd38deefb0c9706b9b11d27a356d3f74839d4b3de70d93cd4145ac15d3d8dfef6a5bbe039f1e35e94c687c2c141cef870813445511e7c6308574a11742e87341b326e3a86ece9f2e30503edbb06e0afe9debcbc89a654d7a57a5b3c368fd6438d20d1160f60d3b9bd924b289e168f8069ff297dc62c18c87ff7dccf6d1ad1411e0f27b53b9cc33e8ad278fb050576f587eda39a236b41db41a08448558b1b856d72c773d2ab234bf16c021379030bb385473cef4b5a40dc15fd47bedddd749a4e9390ca242f4ceee2d1c3550eabb940a327d1d2bd1b710113a2c8d5d94717a550f525560b6651fdb72b30999442a221e09966249690761515e87abc76b7b78293e67ab3d0050e5975d9cfa66c054d00d77ff47caf0a689fd384b1ebfa02141b0c2eeab0609273d2e0b4c2c1e1119afe3006c3dcd990bfc30cdb376c4fbe804883fd268ce18ed9c53acd4d79bd9f79215ca5e92b497591efa56d07262f68d95b15931f28d88c87e80320390ee7e3397cf9ecf48ef093696ccaa032da04f498f38a551a4a36967ee920cb22999c9279f393b9ac73185ac8300c518db52b39c0ccc1e1ee486cd23be46848b7db2daff405b174690c1cc0474a61ac6096bb7ca69f09bfb71612fdfbeee816675b2f07f9de0e540d2f768d442c2af25b6350840792863c47c9a7380ab5134748f7635496e5e0aba933874109d2d0f6e804330097568366228a667adef12db0f5fb68cf44f6e4bd9862ccb02903807bd82905282b0e8dde8891e116b0a9073ed33e2a8cd782b501c532afbdd117075c98838ac4faf1192c52e55e8912d3ef5db60e8ddd9fe5ff92ba429fbc88eb7a57966d0565d406f4ea94e437e07b4aa0c395ab7c02602294ea46fe98b1c95cfd5de2964c75e23022b5cd2e7fd3f2fd335162f41bd2ed0974be9b6c69b3f986416add96c724c7942602f4325f014dac35103e48bb0ce9a9aa7e9d77efc1a9e05ec485ee6b03f28225828a786def7904ddadd5ffac4afc0f9f333d7d422bc57be5c4e5d476014918ed350948cc39cbcefea3ee6169c7798f7f29d66b34e9134b5598909d837eda0357a81f7bdfab8dfb3fd20962073eb41c9dbf566de5a656f3ee756fd2d8dc6a93897488bd92189e0bd544d1e7d4be69ce355eb046ad5217c44bcf14ad8541312877db57d09801ba894237f52dc62de6da8b7f50e876d49e28bb6a1a2dc5445f32cb79458b47ad16fec449fe03735365ac86e86644efa07f4ecf52af8fad911e6c517e9aa7900b84a911c01fc3a7e6741236e691a6be3f97ffd86abeb2b29b1b71069a4b7cfa427834548fe39a364145233a0f2d3ea7f1f1f21a3d366db19467ff3dcaa6750477aaad0198d26dd1a480ec6f19117a0cd65c44a40f88d9f3453d8765ba7e7313c115e547085d8267eff5ddd299a821a39469d81f8c58199b29933a706d72433e70cd7c940d74bd4c77838b78c0b53b3b26f6eea7a068c4deaddebedc54d5686ae1953e0956d09fdad2bb78e797a4fe4ad744c9fd30a7226bdc51ef0a7d27587eb7082b0b93c677011c2612d3200fdf12a1d48b7f2b3c292e5d836a40ad0ab66255c6cbd9b16582fc0a3a43f063dc113b70b1967a9d72032b9e61f28a0e7a485a9f49878da290d91b8513d36e17b0496462228b06a944aa88a2d88d3f88ccf02fd112875c8f784b8f51811a03c1dcea39822ef28beafce9ff0b473a0dcef3651f223b92b5afe8b37011b7fce983c83e27cdd3a70be32f1ee2b4d5a3a13c47914effd48f950703a3ace14eb2450026e7270d485650249f25a62e841bdfc6cc0823f0409ee85ed5132684d23eb80ee46204e7502c4019fbdfc03ffaa80e0338222bb52ad39c7c9f150fdabd7ef11ad21894305c7b02ef2b47a024eaa9aef1e0703716a5436dec9110eae56cd019e1e85c4192035dc49b3149f5db207ebaf39cee8b9f9c145d898d4368e27a2129971bf05db848b44148843e5f679dc4b878216e2ad97b86da4b8547c2946d96513b54279a72649556a14f161a4dae8bafc6e7494a1fec65c3fcd70ad76e7d630d8f7043c5cef9cef177bc3e90ef844c93494c24974f81f23c8aed703c64b8cd237412e2069f710ae4643e96458e7e097b842a594aac76e4682aa6d70556c60b8a33e306d0e6feacf954b9b63fc753554d917d202a9f419ce533bed567ec52be2a0d0574f915e25bdc1fcb87a88e840f095f83e9d9ae9452c51386cd83412c6ac21f7e45f987f9cfe32455935b4c6222386f8de5daa916a483607192369601bc4357138304a0eec5d0c5052d397e1fdd3e8c2426cc0f0f976b38597ec17967983e6f2ed814818e44b4c64e6bf147a05776ffff86d1f2f6520a11e75f101adf855c5c766b466fa379b6826ef024138478137993d3dea29d70291d185132415f82acbea5faea1faa6c90ff2505685bd8be111846d3988b9ad27f56f9b948cb3274b0705a879449e5fb90af8d190e9d5742dc9dbd6d825026fead753e5a1c5862ec202ccd8fbc6d377d8eadd52e79dee40594562313d8e26d5b3c729f4907c0e256162a7bb6a35892cd87e21dbee0ae26608d1e73249635a7980ac5d33b99608a6e93d29eabb6ad569f35f432698159e4cda60ab0cd44cd168fd7e7c70275aaffa7225e56b4f222ff66c8228518c1bab1e1830f5f3773453fd723a5d92cb10cbdd8eb23ee290e1d3c4fb1661719bdbc22759b7792598d3f542bc054dc5d46aec59171481894b72e6df94235598883fac48d773cccae81ebb21066489258d590e49d59fcd5d566e200620c5b670e2d52bf1a7548ac309a873308f51d438ee8e37d02552d08a48be13fdb1a03945920e690ebedd1df856010cfc04716f750ae7b34a87e31c457dfe7e57d9ffc8b58a8cae411b2087518afa8d2fa7965b7ad9df641f2950599e8e1d2b05ed2f8b030388c0c769f634e1306244bcf5775525922987c49d5a00179c3073f8bfd495b18c9176906f2be2ce9572c91bfcadccb38c047646e01891180b3427a10e3919d07cac8ff4c39a07f805434bfe59a87f7ed041379dcee8883594c56a01bf7ef2c81ba361cc7376f0cc7d8a36f016238349b5bea26e4941abd8be1870f384f16e837aaa8d1fe01ff2ef23dcdd2f159b3c88f1e84b707e48abfd14e70b182d56c75ccd7f56d22297e23a2e575796c9a65d9298794eafe89a321c0b228cce7cf438934d5883bf40155b3da9682344aec0262a574006bec48633d25f4038a8642b6061b6433f348211205a3fa7d570f9ab84dbd9a084c90cf58026037591563fa9f6b200976b5530adcd832747ba42fb5ccb2f9fb6b01bde6faeae35ceb20db7ee48f61f77adb59e7920d84cae906ec003ba377712c048932c04ee9568faa206c9f0a4416a54df8c5249ce963209eb68383daa5c7ad1f1677b45623d8e70147c7b745d89c2b7307fa62ad1a8ef4efaae0ca2ac5e244a4b099d61bc2742e43a5f6", 0xb01, 0x0, &(0x7f0000000040)={0xa, 0x6, 0x0, @empty}, 0x1c) 18:20:01 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x891f, 0x0) 18:20:02 executing program 4: r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0}) 18:20:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_FLOW={0x8, 0xb, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x40040) 18:20:02 executing program 0: r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x0, 0x1, 0x7, &(0x7f0000000040)={0x0, "6d13f1fd68c56d90ffdc1d0332c1588398efb250d15db7b22236af887131b108ed"}}) 18:20:02 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000001) r2 = accept4(r0, 0x0, 0x0, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @empty}, 0x10) 18:20:02 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) sendto$inet6(r0, &(0x7f0000000500)="6593d54e6b9ae096f4b181c3a414e9fb7e7bc81a8aa3e5c158a2f320efc10e5b07cdcb00cdd25ebd4715e6b0dbadb403f8a4e0ae671fb35d71310f1e21f857cee0ae4670e58cfc3f7a8a8da4589c3cbb48d7c5f62fab2a4b99288ab6bc0eeea405b289022242add37a66a9416b1b03e1942c7abeb3aaada9a6b65ed4bcd984089810e29f8edb5682630aec1a21b9cf52d1584b2bbdcd255e22529b9c4b621f2b6ccdc6bb3c2f33ba55cc5901a5d2aecfa28d071756e45969e92b06f645a8ed9b2716baf393a702a294563a6fda22b1a1ae0b016a14712a1c6973057a9eab6814df3c10899ffb755cd8459820f7d57bee441133a52f8d7b4fcd3a5ab30e3136a381d33ebdd39a6c55b46285892441e44d7b189b0c81ab598d3f6229b2e818df24f52606ff595ebc25c08d06089d6466a640686b4e8c3e92d56d9af59648ff5c3fa3347ce3c0c9e3e9561afc4c2282af81132b50dbd7208de165b60ebc1b12dafa11b51cc9208ca8358cd38deefb0c9706b9b11d27a356d3f74839d4b3de70d93cd4145ac15d3d8dfef6a5bbe039f1e35e94c687c2c141cef870813445511e7c6308574a11742e87341b326e3a86ece9f2e30503edbb06e0afe9debcbc89a654d7a57a5b3c368fd6438d20d1160f60d3b9bd924b289e168f8069ff297dc62c18c87ff7dccf6d1ad1411e0f27b53b9cc33e8ad278fb050576f587eda39a236b41db41a08448558b1b856d72c773d2ab234bf16c021379030bb385473cef4b5a40dc15fd47bedddd749a4e9390ca242f4ceee2d1c3550eabb940a327d1d2bd1b710113a2c8d5d94717a550f525560b6651fdb72b30999442a221e09966249690761515e87abc76b7b78293e67ab3d0050e5975d9cfa66c054d00d77ff47caf0a689fd384b1ebfa02141b0c2eeab0609273d2e0b4c2c1e1119afe3006c3dcd990bfc30cdb376c4fbe804883fd268ce18ed9c53acd4d79bd9f79215ca5e92b497591efa56d07262f68d95b15931f28d88c87e80320390ee7e3397cf9ecf48ef093696ccaa032da04f498f38a551a4a36967ee920cb22999c9279f393b9ac73185ac8300c518db52b39c0ccc1e1ee486cd23be46848b7db2daff405b174690c1cc0474a61ac6096bb7ca69f09bfb71612fdfbeee816675b2f07f9de0e540d2f768d442c2af25b6350840792863c47c9a7380ab5134748f7635496e5e0aba933874109d2d0f6e804330097568366228a667adef12db0f5fb68cf44f6e4bd9862ccb02903807bd82905282b0e8dde8891e116b0a9073ed33e2a8cd782b501c532afbdd117075c98838ac4faf1192c52e55e8912d3ef5db60e8ddd9fe5ff92ba429fbc88eb7a57966d0565d406f4ea94e437e07b4aa0c395ab7c02602294ea46fe98b1c95cfd5de2964c75e23022b5cd2e7fd3f2fd335162f41bd2ed0974be9b6c69b3f986416add96c724c7942602f4325f014dac35103e48bb0ce9a9aa7e9d77efc1a9e05ec485ee6b03f28225828a786def7904ddadd5ffac4afc0f9f333d7d422bc57be5c4e5d476014918ed350948cc39cbcefea3ee6169c7798f7f29d66b34e9134b5598909d837eda0357a81f7bdfab8dfb3fd20962073eb41c9dbf566de5a656f3ee756fd2d8dc6a93897488bd92189e0bd544d1e7d4be69ce355eb046ad5217c44bcf14ad8541312877db57d09801ba894237f52dc62de6da8b7f50e876d49e28bb6a1a2dc5445f32cb79458b47ad16fec449fe03735365ac86e86644efa07f4ecf52af8fad911e6c517e9aa7900b84a911c01fc3a7e6741236e691a6be3f97ffd86abeb2b29b1b71069a4b7cfa427834548fe39a364145233a0f2d3ea7f1f1f21a3d366db19467ff3dcaa6750477aaad0198d26dd1a480ec6f19117a0cd65c44a40f88d9f3453d8765ba7e7313c115e547085d8267eff5ddd299a821a39469d81f8c58199b29933a706d72433e70cd7c940d74bd4c77838b78c0b53b3b26f6eea7a068c4deaddebedc54d5686ae1953e0956d09fdad2bb78e797a4fe4ad744c9fd30a7226bdc51ef0a7d27587eb7082b0b93c677011c2612d3200fdf12a1d48b7f2b3c292e5d836a40ad0ab66255c6cbd9b16582fc0a3a43f063dc113b70b1967a9d72032b9e61f28a0e7a485a9f49878da290d91b8513d36e17b0496462228b06a944aa88a2d88d3f88ccf02fd112875c8f784b8f51811a03c1dcea39822ef28beafce9ff0b473a0dcef3651f223b92b5afe8b37011b7fce983c83e27cdd3a70be32f1ee2b4d5a3a13c47914effd48f950703a3ace14eb2450026e7270d485650249f25a62e841bdfc6cc0823f0409ee85ed5132684d23eb80ee46204e7502c4019fbdfc03ffaa80e0338222bb52ad39c7c9f150fdabd7ef11ad21894305c7b02ef2b47a024eaa9aef1e0703716a5436dec9110eae56cd019e1e85c4192035dc49b3149f5db207ebaf39cee8b9f9c145d898d4368e27a2129971bf05db848b44148843e5f679dc4b878216e2ad97b86da4b8547c2946d96513b54279a72649556a14f161a4dae8bafc6e7494a1fec65c3fcd70ad76e7d630d8f7043c5cef9cef177bc3e90ef844c93494c24974f81f23c8aed703c64b8cd237412e2069f710ae4643e96458e7e097b842a594aac76e4682aa6d70556c60b8a33e306d0e6feacf954b9b63fc753554d917d202a9f419ce533bed567ec52be2a0d0574f915e25bdc1fcb87a88e840f095f83e9d9ae9452c51386cd83412c6ac21f7e45f987f9cfe32455935b4c6222386f8de5daa916a483607192369601bc4357138304a0eec5d0c5052d397e1fdd3e8c2426cc0f0f976b38597ec17967983e6f2ed814818e44b4c64e6bf147a05776ffff86d1f2f6520a11e75f101adf855c5c766b466fa379b6826ef024138478137993d3dea29d70291d185132415f82acbea5faea1faa6c90ff2505685bd8be111846d3988b9ad27f56f9b948cb3274b0705a879449e5fb90af8d190e9d5742dc9dbd6d825026fead753e5a1c5862ec202ccd8fbc6d377d8eadd52e79dee40594562313d8e26d5b3c729f4907c0e256162a7bb6a35892cd87e21dbee0ae26608d1e73249635a7980ac5d33b99608a6e93d29eabb6ad569f35f432698159e4cda60ab0cd44cd168fd7e7c70275aaffa7225e56b4f222ff66c8228518c1bab1e1830f5f3773453fd723a5d92cb10cbdd8eb23ee290e1d3c4fb1661719bdbc22759b7792598d3f542bc054dc5d46aec59171481894b72e6df94235598883fac48d773cccae81ebb21066489258d590e49d59fcd5d566e200620c5b670e2d52bf1a7548ac309a873308f51d438ee8e37d02552d08a48be13fdb1a03945920e690ebedd1df856010cfc04716f750ae7b34a87e31c457dfe7e57d9ffc8b58a8cae411b2087518afa8d2fa7965b7ad9df641f2950599e8e1d2b05ed2f8b030388c0c769f634e1306244bcf5775525922987c49d5a00179c3073f8bfd495b18c9176906f2be2ce9572c91bfcadccb38c047646e01891180b3427a10e3919d07cac8ff4c39a07f805434bfe59a87f7ed041379dcee8883594c56a01bf7ef2c81ba361cc7376f0cc7d8a36f016238349b5bea26e4941abd8be1870f384f16e837aaa8d1fe01ff2ef23dcdd2f159b3c88f1e84b707e48abfd14e70b182d56c75ccd7f56d22297e23a2e575796c9a65d9298794eafe89a321c0b228cce7cf438934d5883bf40155b3da9682344aec0262a574006bec48633d25f4038a8642b6061b6433f348211205a3fa7d570f9ab84dbd9a084c90cf58026037591563fa9f6b200976b5530adcd832747ba42fb5ccb2f9fb6b01bde6faeae35ceb20db7ee48f61f77adb59e7920d84cae906ec003ba377712c048932c04ee9568faa206c9f0a4416a54df8c5249ce963209eb68383daa5c7ad1f1677b45623d8e70147c7b745d89c2b7307fa62ad1a8ef4efaae0ca2ac5e244a4b099d61bc2742e43a5f6", 0xb01, 0x0, &(0x7f0000000040)={0xa, 0x6, 0x0, @empty}, 0x1c) 18:20:02 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x891f, 0x0) 18:20:02 executing program 4: r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0}) 18:20:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_FLOW={0x8, 0xb, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x40040) 18:20:02 executing program 0: r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x0, 0x1, 0x7, &(0x7f0000000040)={0x0, "6d13f1fd68c56d90ffdc1d0332c1588398efb250d15db7b22236af887131b108ed"}}) 18:20:02 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x891f, 0x0) 18:20:03 executing program 4: r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0}) 18:20:03 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) sendto$inet6(r0, &(0x7f0000000500)="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", 0xb01, 0x0, &(0x7f0000000040)={0xa, 0x6, 0x0, @empty}, 0x1c) 18:20:03 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) readv(r0, &(0x7f0000002400)=[{&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000000080)=""/4096, 0x1000}], 0x2) 18:20:03 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000001) r2 = accept4(r0, 0x0, 0x0, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @empty}, 0x10) 18:20:03 executing program 2: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000008c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x74, &(0x7f0000003a40)=@generic={0x0, 0x2, 0x6c, "7187c71d", "e2bf4f0b2c5a1add5ffea1a77f1476a9cee723838c09a79f6e7bfce046722653edd4ccd39f727999801c28b9f597c159ba6a20c65029dd5bd082161837c7ebc81c3d82f327392cfd6d353f7fc7ceafdbff16ba1f90d65561582226af9e487d63e557764b460bf01d97f27769"}) read$hiddev(0xffffffffffffffff, &(0x7f0000003b40)=""/222, 0xde) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000003e00)=""/245) r1 = syz_open_dev$evdev(&(0x7f0000003f40), 0x5, 0x800) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000003f80)=0x1) 18:20:03 executing program 5: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x241, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x40, 0x7, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x3, 0x6}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x1}}]}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0xf9, &(0x7f00000000c0)={0x5, 0xf, 0xf9, 0x2, [@generic={0xe4, 0x10, 0xa, "4519eb3e22e7bbf64df50594b260821eea417fe45a501a72276ded318680aa2063ed34aace6cb8bc2c6fcb53972f3ab40b176e44d87954e6e82e8302571bdf2d5715fac68ecd0e5b0837bc6a7934cd08d9e5e2735401cc9413b8b056f1c90add77668ea194d8c3f89687065ec684014eb5e9eda125d97a63c8de145a9abe28b50bc16507fb8acee0141830a25e23e57e45eb8b6eff4f25d37c41219946ea5b10edc55fde6597508b6a01721f3636389c938b4c0f999c2a98672b4d2dae5e185ccb4d90849ba6018caa9662e3e49c016b12c96fbf9464bb994a4c8870a32aa9ad8d"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0xff00]}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2c09}}, {0x56, &(0x7f0000000280)=@string={0x56, 0x3, "7a3aa275e56aa0766ac9ae97a1d602e357e0b85a0df1ad62c627cbf5909d01d734115f4353cbbf6a05383f1d20ab511a4f291437216472d78402701487b7992bc6cf15ae4d299ac258dc692cb8ffe8076eb8d512"}}, {0x4d, &(0x7f0000000300)=@string={0x4d, 0x3, "e7bb560561e59263c03f4e84bad0a182bbbbcee4a64f3264bc562a9d89da51c25c875e69e543e898e0b5848ea6f5a32e161d12740a8e78d1a96ede0c84e2474376366db3effe2d60dd151c"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4}}]}) 18:20:03 executing program 4: r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0}) 18:20:03 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) readv(r0, &(0x7f0000002400)=[{&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000000080)=""/4096, 0x1000}], 0x2) 18:20:03 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x18d1, 0x5028, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x18, {0x18, 0xf, "a751a5cfb2dbe92a0a734031ff512017b0e5c35b8765"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 18:20:03 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000001) r2 = accept4(r0, 0x0, 0x0, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @empty}, 0x10) 18:20:03 executing program 4: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000080)=0x6bc, 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x9, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 181.922336][ T3555] usb 3-1: new high-speed USB device number 2 using dummy_hcd 18:20:04 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) readv(r0, &(0x7f0000002400)=[{&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000000080)=""/4096, 0x1000}], 0x2) [ 182.062099][ T3564] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 182.103115][ T3552] usb 4-1: new high-speed USB device number 2 using dummy_hcd 18:20:04 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000001) r2 = accept4(r0, 0x0, 0x0, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @empty}, 0x10) [ 182.170785][ T3823] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! 18:20:04 executing program 4: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000080)=0x6bc, 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x9, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 182.303132][ T3564] usb 6-1: Using ep0 maxpacket: 8 [ 182.344440][ T3552] usb 4-1: Using ep0 maxpacket: 32 [ 182.463669][ T3552] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.474867][ T3552] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.485065][ T3552] usb 4-1: New USB device found, idVendor=18d1, idProduct=5028, bcdDevice= 0.00 [ 182.493160][ T3555] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 182.494389][ T3552] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:20:04 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) readv(r0, &(0x7f0000002400)=[{&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000000080)=""/4096, 0x1000}], 0x2) [ 182.503446][ T3555] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.519709][ T3555] usb 3-1: Product: syz [ 182.524148][ T3555] usb 3-1: Manufacturer: syz [ 182.531089][ T3555] usb 3-1: SerialNumber: syz [ 182.544846][ T3564] usb 6-1: config 1 interface 0 has no altsetting 0 [ 182.633817][ T3555] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 18:20:04 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x10) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) [ 182.743013][ T3564] usb 6-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.40 [ 182.752529][ T3564] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.762149][ T3564] usb 6-1: Product: 믧Ֆ排㿀葎킺芡뮻侦搲嚼鴪쉑蝜楞䏥飨뗠躄⺣ᴖ琒踊텸溩ೞ䍇㙶덭ﻯ怭ᗝ [ 182.775690][ T3564] usb 6-1: Manufacturer: 㩺疢櫥皠쥪鞮횡媸抭⟆鶐휁ᄴ䍟쭓檿㠅ᴿꬠᩑ⥏㜔搡흲ʄᑰ랇⮙쿆긕⥍슚Ⱪᄌߨ롮ዕ [ 182.859622][ T3552] usb 4-1: config 0 descriptor?? [ 183.327271][ T3552] hid-multitouch 0003:18D1:5028.0001: hidraw0: USB HID v0.00 Device [HID 18d1:5028] on usb-dummy_hcd.3-1/input0 [ 183.357365][ T3564] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input5 [ 183.386175][ T2832] bcm5974 6-1:1.0: could not read from device [ 183.403001][ T3533] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 183.429952][ T3564] usb 6-1: USB disconnect, device number 2 [ 183.451297][ T2832] bcm5974 6-1:1.0: could not read from device [ 183.528372][ T30] usb 4-1: USB disconnect, device number 2 [ 183.610325][ T3811] UDC core: couldn't find an available UDC or it's busy: -16 [ 183.618476][ T3811] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 183.909859][ T30] usb 3-1: USB disconnect, device number 2 18:20:06 executing program 2: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000008c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x74, &(0x7f0000003a40)=@generic={0x0, 0x2, 0x6c, "7187c71d", "e2bf4f0b2c5a1add5ffea1a77f1476a9cee723838c09a79f6e7bfce046722653edd4ccd39f727999801c28b9f597c159ba6a20c65029dd5bd082161837c7ebc81c3d82f327392cfd6d353f7fc7ceafdbff16ba1f90d65561582226af9e487d63e557764b460bf01d97f27769"}) read$hiddev(0xffffffffffffffff, &(0x7f0000003b40)=""/222, 0xde) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000003e00)=""/245) r1 = syz_open_dev$evdev(&(0x7f0000003f40), 0x5, 0x800) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000003f80)=0x1) 18:20:06 executing program 4: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000080)=0x6bc, 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x9, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 18:20:06 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x10) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) 18:20:06 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x33, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 18:20:06 executing program 5: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x241, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x40, 0x7, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x3, 0x6}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x1}}]}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0xf9, &(0x7f00000000c0)={0x5, 0xf, 0xf9, 0x2, [@generic={0xe4, 0x10, 0xa, "4519eb3e22e7bbf64df50594b260821eea417fe45a501a72276ded318680aa2063ed34aace6cb8bc2c6fcb53972f3ab40b176e44d87954e6e82e8302571bdf2d5715fac68ecd0e5b0837bc6a7934cd08d9e5e2735401cc9413b8b056f1c90add77668ea194d8c3f89687065ec684014eb5e9eda125d97a63c8de145a9abe28b50bc16507fb8acee0141830a25e23e57e45eb8b6eff4f25d37c41219946ea5b10edc55fde6597508b6a01721f3636389c938b4c0f999c2a98672b4d2dae5e185ccb4d90849ba6018caa9662e3e49c016b12c96fbf9464bb994a4c8870a32aa9ad8d"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0xff00]}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2c09}}, {0x56, &(0x7f0000000280)=@string={0x56, 0x3, "7a3aa275e56aa0766ac9ae97a1d602e357e0b85a0df1ad62c627cbf5909d01d734115f4353cbbf6a05383f1d20ab511a4f291437216472d78402701487b7992bc6cf15ae4d299ac258dc692cb8ffe8076eb8d512"}}, {0x4d, &(0x7f0000000300)=@string={0x4d, 0x3, "e7bb560561e59263c03f4e84bad0a182bbbbcee4a64f3264bc562a9d89da51c25c875e69e543e898e0b5848ea6f5a32e161d12740a8e78d1a96ede0c84e2474376366db3effe2d60dd151c"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4}}]}) 18:20:06 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x18d1, 0x5028, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x18, {0x18, 0xf, "a751a5cfb2dbe92a0a734031ff512017b0e5c35b8765"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 184.492220][ T3533] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 184.499476][ T3533] ath9k_htc: Failed to initialize the device [ 184.569499][ T30] usb 3-1: ath9k_htc: USB layer deinitialized 18:20:06 executing program 4: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000080)=0x6bc, 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x9, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 18:20:06 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x33, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 18:20:06 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x10) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) [ 184.822923][ T3564] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 184.873259][ T3555] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 185.062618][ T3564] usb 6-1: Using ep0 maxpacket: 8 18:20:07 executing program 4: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000008c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x74, &(0x7f0000003a40)=@generic={0x0, 0x2, 0x6c, "7187c71d", "e2bf4f0b2c5a1add5ffea1a77f1476a9cee723838c09a79f6e7bfce046722653edd4ccd39f727999801c28b9f597c159ba6a20c65029dd5bd082161837c7ebc81c3d82f327392cfd6d353f7fc7ceafdbff16ba1f90d65561582226af9e487d63e557764b460bf01d97f27769"}) read$hiddev(0xffffffffffffffff, &(0x7f0000003b40)=""/222, 0xde) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000003e00)=""/245) r1 = syz_open_dev$evdev(&(0x7f0000003f40), 0x5, 0x800) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000003f80)=0x1) [ 185.153939][ T30] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 185.160297][ T3555] usb 4-1: Using ep0 maxpacket: 32 18:20:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x33, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 18:20:07 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x10) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) [ 185.263451][ T3564] usb 6-1: config 1 interface 0 has no altsetting 0 [ 185.302922][ T3555] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.314162][ T3555] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.324246][ T3555] usb 4-1: New USB device found, idVendor=18d1, idProduct=5028, bcdDevice= 0.00 [ 185.333558][ T3555] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.423209][ T3564] usb 6-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.40 [ 185.432936][ T3564] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.441073][ T3564] usb 6-1: Product: 믧Ֆ排㿀葎킺芡뮻侦搲嚼鴪쉑蝜楞䏥飨뗠躄⺣ᴖ琒踊텸溩ೞ䍇㙶덭ﻯ怭ᗝ [ 185.455713][ T3564] usb 6-1: Manufacturer: 㩺疢櫥皠쥪鞮횡媸抭⟆鶐휁ᄴ䍟쭓檿㠅ᴿꬠᩑ⥏㜔搡흲ʄᑰ랇⮙쿆긕⥍슚Ⱪᄌߨ롮ዕ [ 185.488680][ T3555] usb 4-1: config 0 descriptor?? [ 185.713455][ T30] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 185.723131][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.731280][ T30] usb 3-1: Product: syz [ 185.735771][ T30] usb 3-1: Manufacturer: syz [ 185.740494][ T30] usb 3-1: SerialNumber: syz [ 185.800952][ T3564] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input6 [ 185.832798][ T2832] bcm5974 6-1:1.0: could not read from device [ 185.864267][ T30] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 185.912612][ T2832] bcm5974 6-1:1.0: could not read from device [ 185.924066][ C0] hrtimer: interrupt took 232312 ns [ 185.930064][ T3564] usb 6-1: USB disconnect, device number 3 [ 185.974916][ T5] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 185.996489][ T3555] hid-multitouch 0003:18D1:5028.0002: hidraw0: USB HID v0.00 Device [HID 18d1:5028] on usb-dummy_hcd.3-1/input0 [ 186.225846][ T30] usb 4-1: USB disconnect, device number 3 [ 186.447069][ T3562] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 186.542365][ T5] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 186.551650][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.559982][ T5] usb 5-1: Product: syz [ 186.564482][ T5] usb 5-1: Manufacturer: syz [ 186.569266][ T5] usb 5-1: SerialNumber: syz [ 186.637179][ T5] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 186.679802][ T3850] UDC core: couldn't find an available UDC or it's busy: -16 [ 186.687442][ T3850] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 186.920913][ T5] usb 3-1: USB disconnect, device number 3 [ 187.352176][ T3555] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 18:20:09 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x50}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x23}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x6, 0x10, 0x0}, 0x15) 18:20:09 executing program 2: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000008c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x74, &(0x7f0000003a40)=@generic={0x0, 0x2, 0x6c, "7187c71d", "e2bf4f0b2c5a1add5ffea1a77f1476a9cee723838c09a79f6e7bfce046722653edd4ccd39f727999801c28b9f597c159ba6a20c65029dd5bd082161837c7ebc81c3d82f327392cfd6d353f7fc7ceafdbff16ba1f90d65561582226af9e487d63e557764b460bf01d97f27769"}) read$hiddev(0xffffffffffffffff, &(0x7f0000003b40)=""/222, 0xde) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000003e00)=""/245) r1 = syz_open_dev$evdev(&(0x7f0000003f40), 0x5, 0x800) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000003f80)=0x1) 18:20:09 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x33, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 18:20:09 executing program 5: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x241, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x40, 0x7, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x3, 0x6}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x1}}]}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0xf9, &(0x7f00000000c0)={0x5, 0xf, 0xf9, 0x2, [@generic={0xe4, 0x10, 0xa, "4519eb3e22e7bbf64df50594b260821eea417fe45a501a72276ded318680aa2063ed34aace6cb8bc2c6fcb53972f3ab40b176e44d87954e6e82e8302571bdf2d5715fac68ecd0e5b0837bc6a7934cd08d9e5e2735401cc9413b8b056f1c90add77668ea194d8c3f89687065ec684014eb5e9eda125d97a63c8de145a9abe28b50bc16507fb8acee0141830a25e23e57e45eb8b6eff4f25d37c41219946ea5b10edc55fde6597508b6a01721f3636389c938b4c0f999c2a98672b4d2dae5e185ccb4d90849ba6018caa9662e3e49c016b12c96fbf9464bb994a4c8870a32aa9ad8d"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0xff00]}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2c09}}, {0x56, &(0x7f0000000280)=@string={0x56, 0x3, "7a3aa275e56aa0766ac9ae97a1d602e357e0b85a0df1ad62c627cbf5909d01d734115f4353cbbf6a05383f1d20ab511a4f291437216472d78402701487b7992bc6cf15ae4d299ac258dc692cb8ffe8076eb8d512"}}, {0x4d, &(0x7f0000000300)=@string={0x4d, 0x3, "e7bb560561e59263c03f4e84bad0a182bbbbcee4a64f3264bc562a9d89da51c25c875e69e543e898e0b5848ea6f5a32e161d12740a8e78d1a96ede0c84e2474376366db3effe2d60dd151c"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4}}]}) 18:20:09 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x18d1, 0x5028, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x18, {0x18, 0xf, "a751a5cfb2dbe92a0a734031ff512017b0e5c35b8765"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 187.533125][ T3562] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 187.540388][ T3562] ath9k_htc: Failed to initialize the device [ 187.547287][ T5] usb 3-1: ath9k_htc: USB layer deinitialized [ 187.583583][ T3861] UDC core: couldn't find an available UDC or it's busy: -16 [ 187.591159][ T3861] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 18:20:09 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x50}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x23}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x6, 0x10, 0x0}, 0x15) 18:20:09 executing program 0: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f00000052c0)=[{{&(0x7f0000000540)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002040)=[{&(0x7f0000000580)='R', 0x1}], 0x1}}, {{&(0x7f0000000680)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000024c0)=[{&(0x7f00000020c0)="80", 0x1}], 0x1}}], 0x2, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f0000000080)="e9", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x76, &(0x7f0000000000)=@assoc_value={r4}, 0x8) [ 187.782845][ T3533] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 187.862043][ T117] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 187.897956][ T30] usb 5-1: USB disconnect, device number 2 [ 188.052670][ T3533] usb 4-1: Using ep0 maxpacket: 32 18:20:10 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x50}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x23}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x6, 0x10, 0x0}, 0x15) 18:20:10 executing program 0: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f00000052c0)=[{{&(0x7f0000000540)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002040)=[{&(0x7f0000000580)='R', 0x1}], 0x1}}, {{&(0x7f0000000680)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000024c0)=[{&(0x7f00000020c0)="80", 0x1}], 0x1}}], 0x2, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f0000000080)="e9", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x76, &(0x7f0000000000)=@assoc_value={r4}, 0x8) [ 188.152974][ T3562] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 188.153092][ T117] usb 6-1: Using ep0 maxpacket: 8 [ 188.173551][ T3533] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.184915][ T3533] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.194964][ T3533] usb 4-1: New USB device found, idVendor=18d1, idProduct=5028, bcdDevice= 0.00 [ 188.204371][ T3533] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.251658][ T3533] usb 4-1: config 0 descriptor?? [ 188.403176][ T117] usb 6-1: config 1 interface 0 has no altsetting 0 [ 188.413121][ T3555] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 188.420449][ T3555] ath9k_htc: Failed to initialize the device [ 188.456628][ T30] usb 5-1: ath9k_htc: USB layer deinitialized 18:20:10 executing program 4: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000008c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x74, &(0x7f0000003a40)=@generic={0x0, 0x2, 0x6c, "7187c71d", "e2bf4f0b2c5a1add5ffea1a77f1476a9cee723838c09a79f6e7bfce046722653edd4ccd39f727999801c28b9f597c159ba6a20c65029dd5bd082161837c7ebc81c3d82f327392cfd6d353f7fc7ceafdbff16ba1f90d65561582226af9e487d63e557764b460bf01d97f27769"}) read$hiddev(0xffffffffffffffff, &(0x7f0000003b40)=""/222, 0xde) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000003e00)=""/245) r1 = syz_open_dev$evdev(&(0x7f0000003f40), 0x5, 0x800) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000003f80)=0x1) 18:20:10 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x50}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x23}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x6, 0x10, 0x0}, 0x15) [ 188.587589][ T117] usb 6-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.40 [ 188.597008][ T117] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.605433][ T117] usb 6-1: Product: 믧Ֆ排㿀葎킺芡뮻侦搲嚼鴪쉑蝜楞䏥飨뗠躄⺣ᴖ琒踊텸溩ೞ䍇㙶덭ﻯ怭ᗝ [ 188.618900][ T117] usb 6-1: Manufacturer: 㩺疢櫥皠쥪鞮횡媸抭⟆鶐휁ᄴ䍟쭓檿㠅ᴿꬠᩑ⥏㜔搡흲ʄᑰ랇⮙쿆긕⥍슚Ⱪᄌߨ롮ዕ 18:20:10 executing program 0: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f00000052c0)=[{{&(0x7f0000000540)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002040)=[{&(0x7f0000000580)='R', 0x1}], 0x1}}, {{&(0x7f0000000680)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000024c0)=[{&(0x7f00000020c0)="80", 0x1}], 0x1}}], 0x2, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f0000000080)="e9", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x76, &(0x7f0000000000)=@assoc_value={r4}, 0x8) [ 188.682970][ T3562] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 188.692833][ T3562] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.700995][ T3562] usb 3-1: Product: syz [ 188.705558][ T3562] usb 3-1: Manufacturer: syz [ 188.710286][ T3562] usb 3-1: SerialNumber: syz [ 188.733802][ T3533] hid-multitouch 0003:18D1:5028.0003: hidraw0: USB HID v0.00 Device [HID 18d1:5028] on usb-dummy_hcd.3-1/input0 [ 188.924249][ T3562] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 188.965438][ T3555] usb 4-1: USB disconnect, device number 4 [ 188.987312][ T117] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input7 [ 189.024047][ T2832] bcm5974 6-1:1.0: could not read from device [ 189.062477][ T2832] bcm5974 6-1:1.0: could not read from device [ 189.096310][ T117] usb 6-1: USB disconnect, device number 4 18:20:11 executing program 1: ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000140)='veth1_to_batadv\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) rmdir(&(0x7f0000000380)='./file1\x00') r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x31400) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000340)='./file1\x00', 0x0, 0x47) truncate(&(0x7f0000000080)='./bus\x00', 0x101) sendfile(r0, r2, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) [ 189.242257][ T5] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 189.419864][ T3889] loop1: detected capacity change from 0 to 16 [ 189.563246][ T30] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 189.667449][ T24] audit: type=1804 audit(1640024411.711:2): pid=3889 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir404713731/syzkaller.vMPIP0/19/file0/bus" dev="loop1" ino=1048593 res=1 errno=0 [ 189.802808][ T5] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 189.812526][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.815882][ T3872] UDC core: couldn't find an available UDC or it's busy: -16 [ 189.820713][ T5] usb 5-1: Product: syz [ 189.828354][ T3872] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 189.832543][ T5] usb 5-1: Manufacturer: syz [ 189.844766][ T5] usb 5-1: SerialNumber: syz [ 189.907326][ T24] audit: type=1800 audit(1640024411.811:3): pid=3889 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="loop1" ino=1048593 res=0 errno=0 [ 190.014315][ T5] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 190.131429][ T8] kworker/u4:0: attempt to access beyond end of device [ 190.131429][ T8] loop1: rw=1, want=122, limit=16 [ 190.144402][ T8] Buffer I/O error on dev loop1, logical block 121, lost async page write [ 190.153336][ T8] kworker/u4:0: attempt to access beyond end of device [ 190.153336][ T8] loop1: rw=1, want=123, limit=16 [ 190.165390][ T8] Buffer I/O error on dev loop1, logical block 122, lost async page write [ 190.174352][ T8] kworker/u4:0: attempt to access beyond end of device [ 190.174352][ T8] loop1: rw=1, want=124, limit=16 [ 190.186483][ T8] Buffer I/O error on dev loop1, logical block 123, lost async page write [ 190.195552][ T8] kworker/u4:0: attempt to access beyond end of device [ 190.195552][ T8] loop1: rw=1, want=125, limit=16 [ 190.210538][ T8] Buffer I/O error on dev loop1, logical block 124, lost async page write [ 190.219789][ T8] kworker/u4:0: attempt to access beyond end of device [ 190.219789][ T8] loop1: rw=1, want=126, limit=16 [ 190.231850][ T8] Buffer I/O error on dev loop1, logical block 125, lost async page write [ 190.240744][ T8] kworker/u4:0: attempt to access beyond end of device [ 190.240744][ T8] loop1: rw=1, want=127, limit=16 [ 190.240801][ T3562] usb 3-1: USB disconnect, device number 4 [ 190.258620][ T8] Buffer I/O error on dev loop1, logical block 126, lost async page write [ 190.267457][ T8] kworker/u4:0: attempt to access beyond end of device [ 190.267457][ T8] loop1: rw=1, want=128, limit=16 [ 190.279483][ T8] Buffer I/O error on dev loop1, logical block 127, lost async page write [ 190.652204][ T30] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 190.659454][ T30] ath9k_htc: Failed to initialize the device [ 190.666920][ T3562] usb 3-1: ath9k_htc: USB layer deinitialized 18:20:12 executing program 2: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000008c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x74, &(0x7f0000003a40)=@generic={0x0, 0x2, 0x6c, "7187c71d", "e2bf4f0b2c5a1add5ffea1a77f1476a9cee723838c09a79f6e7bfce046722653edd4ccd39f727999801c28b9f597c159ba6a20c65029dd5bd082161837c7ebc81c3d82f327392cfd6d353f7fc7ceafdbff16ba1f90d65561582226af9e487d63e557764b460bf01d97f27769"}) read$hiddev(0xffffffffffffffff, &(0x7f0000003b40)=""/222, 0xde) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000003e00)=""/245) r1 = syz_open_dev$evdev(&(0x7f0000003f40), 0x5, 0x800) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000003f80)=0x1) 18:20:12 executing program 0: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f00000052c0)=[{{&(0x7f0000000540)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002040)=[{&(0x7f0000000580)='R', 0x1}], 0x1}}, {{&(0x7f0000000680)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000024c0)=[{&(0x7f00000020c0)="80", 0x1}], 0x1}}], 0x2, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f0000000080)="e9", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x76, &(0x7f0000000000)=@assoc_value={r4}, 0x8) 18:20:12 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x18d1, 0x5028, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x18, {0x18, 0xf, "a751a5cfb2dbe92a0a734031ff512017b0e5c35b8765"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 18:20:12 executing program 5: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x241, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x40, 0x7, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x3, 0x6}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x1}}]}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0xf9, &(0x7f00000000c0)={0x5, 0xf, 0xf9, 0x2, [@generic={0xe4, 0x10, 0xa, "4519eb3e22e7bbf64df50594b260821eea417fe45a501a72276ded318680aa2063ed34aace6cb8bc2c6fcb53972f3ab40b176e44d87954e6e82e8302571bdf2d5715fac68ecd0e5b0837bc6a7934cd08d9e5e2735401cc9413b8b056f1c90add77668ea194d8c3f89687065ec684014eb5e9eda125d97a63c8de145a9abe28b50bc16507fb8acee0141830a25e23e57e45eb8b6eff4f25d37c41219946ea5b10edc55fde6597508b6a01721f3636389c938b4c0f999c2a98672b4d2dae5e185ccb4d90849ba6018caa9662e3e49c016b12c96fbf9464bb994a4c8870a32aa9ad8d"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0xff00]}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2c09}}, {0x56, &(0x7f0000000280)=@string={0x56, 0x3, "7a3aa275e56aa0766ac9ae97a1d602e357e0b85a0df1ad62c627cbf5909d01d734115f4353cbbf6a05383f1d20ab511a4f291437216472d78402701487b7992bc6cf15ae4d299ac258dc692cb8ffe8076eb8d512"}}, {0x4d, &(0x7f0000000300)=@string={0x4d, 0x3, "e7bb560561e59263c03f4e84bad0a182bbbbcee4a64f3264bc562a9d89da51c25c875e69e543e898e0b5848ea6f5a32e161d12740a8e78d1a96ede0c84e2474376366db3effe2d60dd151c"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4}}]}) 18:20:12 executing program 1: ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000140)='veth1_to_batadv\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) rmdir(&(0x7f0000000380)='./file1\x00') r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x31400) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000340)='./file1\x00', 0x0, 0x47) truncate(&(0x7f0000000080)='./bus\x00', 0x101) sendfile(r0, r2, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) [ 190.832390][ T117] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 190.860479][ T3898] loop1: detected capacity change from 0 to 16 [ 191.009858][ T24] audit: type=1804 audit(1640024413.051:4): pid=3898 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir404713731/syzkaller.vMPIP0/20/file0/bus" dev="loop1" ino=1048595 res=1 errno=0 [ 191.112820][ T3552] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 191.120838][ T3564] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 191.204613][ T3885] UDC core: couldn't find an available UDC or it's busy: -16 [ 191.212598][ T3885] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 18:20:13 executing program 0: ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000140)='veth1_to_batadv\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) rmdir(&(0x7f0000000380)='./file1\x00') r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x31400) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000340)='./file1\x00', 0x0, 0x47) truncate(&(0x7f0000000080)='./bus\x00', 0x101) sendfile(r0, r2, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) [ 191.262318][ T24] audit: type=1800 audit(1640024413.141:5): pid=3898 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="loop1" ino=1048595 res=0 errno=0 [ 191.362322][ T3552] usb 6-1: Using ep0 maxpacket: 8 18:20:13 executing program 1: ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000140)='veth1_to_batadv\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) rmdir(&(0x7f0000000380)='./file1\x00') r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x31400) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000340)='./file1\x00', 0x0, 0x47) truncate(&(0x7f0000000080)='./bus\x00', 0x101) sendfile(r0, r2, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) [ 191.383238][ T3564] usb 4-1: Using ep0 maxpacket: 32 [ 191.440305][ T2430] kworker/u4:5: attempt to access beyond end of device [ 191.440305][ T2430] loop1: rw=1, want=122, limit=16 [ 191.453506][ T2430] Buffer I/O error on dev loop1, logical block 121, lost async page write [ 191.462318][ T2430] kworker/u4:5: attempt to access beyond end of device [ 191.462318][ T2430] loop1: rw=1, want=123, limit=16 [ 191.474267][ T2430] Buffer I/O error on dev loop1, logical block 122, lost async page write [ 191.483069][ T2430] kworker/u4:5: attempt to access beyond end of device [ 191.483069][ T2430] loop1: rw=1, want=124, limit=16 [ 191.495063][ T2430] Buffer I/O error on dev loop1, logical block 123, lost async page write [ 191.516151][ T5] usb 5-1: USB disconnect, device number 3 [ 191.566700][ T3904] loop0: detected capacity change from 0 to 16 [ 191.573274][ T3564] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.573409][ T3564] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.573545][ T3564] usb 4-1: New USB device found, idVendor=18d1, idProduct=5028, bcdDevice= 0.00 [ 191.573657][ T3564] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.615244][ T3564] usb 4-1: config 0 descriptor?? [ 191.628247][ T3555] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 191.662718][ T3552] usb 6-1: config 1 interface 0 has no altsetting 0 [ 191.798932][ T24] audit: type=1804 audit(1640024413.841:6): pid=3904 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir890143028/syzkaller.Gs1dFQ/24/file0/bus" dev="sda1" ino=1167 res=1 errno=0 [ 191.846406][ T3552] usb 6-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.40 [ 191.855930][ T3552] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.862528][ T117] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 191.864298][ T3552] usb 6-1: Product: 믧Ֆ排㿀葎킺芡뮻侦搲嚼鴪쉑蝜楞䏥飨뗠躄⺣ᴖ琒踊텸溩ೞ䍇㙶덭ﻯ怭ᗝ [ 191.871338][ T117] ath9k_htc: Failed to initialize the device [ 191.884609][ T3552] usb 6-1: Manufacturer: 㩺疢櫥皠쥪鞮횡媸抭⟆鶐휁ᄴ䍟쭓檿㠅ᴿꬠᩑ⥏㜔搡흲ʄᑰ랇⮙쿆긕⥍슚Ⱪᄌߨ롮ዕ [ 191.938928][ T3907] loop1: detected capacity change from 0 to 16 [ 191.940969][ T5] usb 5-1: ath9k_htc: USB layer deinitialized [ 191.987539][ T24] audit: type=1800 audit(1640024413.941:7): pid=3904 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=1167 res=0 errno=0 [ 192.008254][ T24] audit: type=1804 audit(1640024414.041:8): pid=3908 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir404713731/syzkaller.vMPIP0/21/bus" dev="sda1" ino=1184 res=1 errno=0 18:20:14 executing program 0: ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000140)='veth1_to_batadv\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) rmdir(&(0x7f0000000380)='./file1\x00') r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x31400) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000340)='./file1\x00', 0x0, 0x47) truncate(&(0x7f0000000080)='./bus\x00', 0x101) sendfile(r0, r2, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) 18:20:14 executing program 4: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000008c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x74, &(0x7f0000003a40)=@generic={0x0, 0x2, 0x6c, "7187c71d", "e2bf4f0b2c5a1add5ffea1a77f1476a9cee723838c09a79f6e7bfce046722653edd4ccd39f727999801c28b9f597c159ba6a20c65029dd5bd082161837c7ebc81c3d82f327392cfd6d353f7fc7ceafdbff16ba1f90d65561582226af9e487d63e557764b460bf01d97f27769"}) read$hiddev(0xffffffffffffffff, &(0x7f0000003b40)=""/222, 0xde) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000003e00)=""/245) r1 = syz_open_dev$evdev(&(0x7f0000003f40), 0x5, 0x800) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000003f80)=0x1) [ 192.176215][ T3564] hid-multitouch 0003:18D1:5028.0004: hidraw0: USB HID v0.00 Device [HID 18d1:5028] on usb-dummy_hcd.3-1/input0 [ 192.184768][ T24] audit: type=1800 audit(1640024414.161:9): pid=3908 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=1184 res=0 errno=0 [ 192.323449][ T3555] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 192.332896][ T3555] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.341032][ T3555] usb 3-1: Product: syz [ 192.345466][ T3555] usb 3-1: Manufacturer: syz [ 192.350194][ T3555] usb 3-1: SerialNumber: syz [ 192.380971][ T3564] usb 4-1: USB disconnect, device number 5 [ 192.410842][ T3552] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input8 18:20:14 executing program 1: ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000140)='veth1_to_batadv\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) rmdir(&(0x7f0000000380)='./file1\x00') r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x31400) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000340)='./file1\x00', 0x0, 0x47) truncate(&(0x7f0000000080)='./bus\x00', 0x101) sendfile(r0, r2, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) [ 192.443265][ T2832] bcm5974 6-1:1.0: could not read from device [ 192.502699][ T2832] bcm5974 6-1:1.0: could not read from device [ 192.539388][ T3552] usb 6-1: USB disconnect, device number 5 [ 192.574640][ T3555] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 192.701935][ T3914] loop0: detected capacity change from 0 to 16 [ 192.799836][ T3916] loop1: detected capacity change from 0 to 16 [ 192.899579][ T24] audit: type=1804 audit(1640024414.941:10): pid=3914 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir890143028/syzkaller.Gs1dFQ/25/file0/bus" dev="loop0" ino=1048597 res=1 errno=0 [ 192.926985][ T117] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 193.100500][ T24] audit: type=1800 audit(1640024415.061:11): pid=3914 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="loop0" ino=1048597 res=0 errno=0 [ 193.273260][ T5] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 193.493042][ T117] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 193.502413][ T117] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.510551][ T117] usb 5-1: Product: syz [ 193.514987][ T117] usb 5-1: Manufacturer: syz [ 193.519727][ T117] usb 5-1: SerialNumber: syz [ 193.613078][ T3902] UDC core: couldn't find an available UDC or it's busy: -16 [ 193.621727][ T3902] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 18:20:15 executing program 0: ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000140)='veth1_to_batadv\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) rmdir(&(0x7f0000000380)='./file1\x00') r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x31400) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000340)='./file1\x00', 0x0, 0x47) truncate(&(0x7f0000000080)='./bus\x00', 0x101) sendfile(r0, r2, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) [ 193.770729][ T117] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 193.971466][ T3552] usb 3-1: USB disconnect, device number 5 18:20:16 executing program 3: ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000140)='veth1_to_batadv\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) rmdir(&(0x7f0000000380)='./file1\x00') r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x31400) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000340)='./file1\x00', 0x0, 0x47) truncate(&(0x7f0000000080)='./bus\x00', 0x101) sendfile(r0, r2, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) [ 194.209925][ T3924] loop3: detected capacity change from 0 to 16 [ 194.250482][ T3925] loop0: detected capacity change from 0 to 16 [ 194.335836][ T5] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 194.343220][ T5] ath9k_htc: Failed to initialize the device [ 194.350802][ T3552] usb 3-1: ath9k_htc: USB layer deinitialized [ 194.457229][ T3555] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 18:20:16 executing program 5: ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000140)='veth1_to_batadv\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) rmdir(&(0x7f0000000380)='./file1\x00') r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x31400) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000340)='./file1\x00', 0x0, 0x47) truncate(&(0x7f0000000080)='./bus\x00', 0x101) sendfile(r0, r2, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) 18:20:16 executing program 1: ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000140)='veth1_to_batadv\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) rmdir(&(0x7f0000000380)='./file1\x00') r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x31400) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000340)='./file1\x00', 0x0, 0x47) truncate(&(0x7f0000000080)='./bus\x00', 0x101) sendfile(r0, r2, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) [ 194.743913][ T3931] loop5: detected capacity change from 0 to 16 [ 194.754626][ T3913] UDC core: couldn't find an available UDC or it's busy: -16 [ 194.762284][ T3913] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 18:20:16 executing program 3: ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000140)='veth1_to_batadv\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) rmdir(&(0x7f0000000380)='./file1\x00') r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x31400) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000340)='./file1\x00', 0x0, 0x47) truncate(&(0x7f0000000080)='./bus\x00', 0x101) sendfile(r0, r2, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) [ 194.794728][ T3932] loop1: detected capacity change from 0 to 16 18:20:16 executing program 2: ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000140)='veth1_to_batadv\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) rmdir(&(0x7f0000000380)='./file1\x00') r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x31400) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000340)='./file1\x00', 0x0, 0x47) truncate(&(0x7f0000000080)='./bus\x00', 0x101) sendfile(r0, r2, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) 18:20:16 executing program 0: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="cf", 0x1}], 0x1}}], 0x1, 0x0) r3 = dup3(r2, r0, 0x0) recvmmsg(r3, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}], 0x40000000000009d, 0x0, 0x0) [ 195.038932][ T24] kauditd_printk_skb: 6 callbacks suppressed [ 195.038985][ T24] audit: type=1804 audit(1640024417.081:19): pid=3932 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir404713731/syzkaller.vMPIP0/23/file0/bus" dev="sda1" ino=1166 res=1 errno=0 [ 195.071414][ T24] audit: type=1804 audit(1640024417.071:18): pid=3931 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir820551213/syzkaller.F1IjlW/12/file0/bus" dev="sda1" ino=1165 res=1 errno=0 [ 195.077682][ T3937] loop2: detected capacity change from 0 to 16 [ 195.128284][ T3552] usb 5-1: USB disconnect, device number 4 18:20:17 executing program 1: ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000140)='veth1_to_batadv\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) rmdir(&(0x7f0000000380)='./file1\x00') r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x31400) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000340)='./file1\x00', 0x0, 0x47) truncate(&(0x7f0000000080)='./bus\x00', 0x101) sendfile(r0, r2, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) 18:20:17 executing program 5: ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000140)='veth1_to_batadv\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) rmdir(&(0x7f0000000380)='./file1\x00') r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x31400) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000340)='./file1\x00', 0x0, 0x47) truncate(&(0x7f0000000080)='./bus\x00', 0x101) sendfile(r0, r2, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) [ 195.346717][ T24] audit: type=1800 audit(1640024417.211:20): pid=3932 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=1166 res=0 errno=0 [ 195.367758][ T24] audit: type=1800 audit(1640024417.261:21): pid=3931 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=1165 res=0 errno=0 [ 195.455053][ T3942] loop3: detected capacity change from 0 to 16 [ 195.542155][ T3555] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 195.549406][ T3555] ath9k_htc: Failed to initialize the device [ 195.682572][ T3552] usb 5-1: ath9k_htc: USB layer deinitialized 18:20:17 executing program 0: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="cf", 0x1}], 0x1}}], 0x1, 0x0) r3 = dup3(r2, r0, 0x0) recvmmsg(r3, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}], 0x40000000000009d, 0x0, 0x0) [ 195.710920][ T24] audit: type=1804 audit(1640024417.531:22): pid=3937 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir941054598/syzkaller.H2QCI5/12/bus" dev="sda1" ino=1179 res=1 errno=0 18:20:17 executing program 2: ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000140)='veth1_to_batadv\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) rmdir(&(0x7f0000000380)='./file1\x00') r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x31400) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000340)='./file1\x00', 0x0, 0x47) truncate(&(0x7f0000000080)='./bus\x00', 0x101) sendfile(r0, r2, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) 18:20:18 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000140)={0x13, 0x0, 0x7, 0x5, 0x9}) [ 196.000009][ T24] audit: type=1804 audit(1640024417.851:23): pid=3942 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir025825192/syzkaller.wCT6nf/14/file0/bus" dev="sda1" ino=1165 res=1 errno=0 [ 196.017627][ T3948] loop5: detected capacity change from 0 to 16 [ 196.026167][ T24] audit: type=1800 audit(1640024417.901:24): pid=3942 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=1165 res=0 errno=0 [ 196.061299][ T3949] loop1: detected capacity change from 0 to 16 18:20:18 executing program 3: ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000140)='veth1_to_batadv\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) rmdir(&(0x7f0000000380)='./file1\x00') r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x31400) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000340)='./file1\x00', 0x0, 0x47) truncate(&(0x7f0000000080)='./bus\x00', 0x101) sendfile(r0, r2, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) 18:20:18 executing program 0: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="cf", 0x1}], 0x1}}], 0x1, 0x0) r3 = dup3(r2, r0, 0x0) recvmmsg(r3, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}], 0x40000000000009d, 0x0, 0x0) [ 196.352286][ T24] audit: type=1804 audit(1640024418.311:25): pid=3951 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir820551213/syzkaller.F1IjlW/13/bus" dev="sda1" ino=1172 res=1 errno=0 18:20:18 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000140)={0x13, 0x0, 0x7, 0x5, 0x9}) [ 196.516828][ T3959] loop2: detected capacity change from 0 to 16 [ 196.594895][ T24] audit: type=1804 audit(1640024418.431:26): pid=3953 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir404713731/syzkaller.vMPIP0/24/file0/bus" dev="sda1" ino=1171 res=1 errno=0 [ 196.620875][ T24] audit: type=1800 audit(1640024418.451:27): pid=3951 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=1172 res=0 errno=0 18:20:18 executing program 1: ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000140)='veth1_to_batadv\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) rmdir(&(0x7f0000000380)='./file1\x00') r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x31400) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000340)='./file1\x00', 0x0, 0x47) truncate(&(0x7f0000000080)='./bus\x00', 0x101) sendfile(r0, r2, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) [ 196.713888][ T3963] loop3: detected capacity change from 0 to 16 18:20:19 executing program 5: ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000140)='veth1_to_batadv\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) rmdir(&(0x7f0000000380)='./file1\x00') r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x31400) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000340)='./file1\x00', 0x0, 0x47) truncate(&(0x7f0000000080)='./bus\x00', 0x101) sendfile(r0, r2, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) 18:20:19 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000140)={0x13, 0x0, 0x7, 0x5, 0x9}) 18:20:19 executing program 0: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="cf", 0x1}], 0x1}}], 0x1, 0x0) r3 = dup3(r2, r0, 0x0) recvmmsg(r3, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}], 0x40000000000009d, 0x0, 0x0) [ 197.134320][ T3971] loop1: detected capacity change from 0 to 16 18:20:19 executing program 2: ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000140)='veth1_to_batadv\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) rmdir(&(0x7f0000000380)='./file1\x00') r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x31400) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000340)='./file1\x00', 0x0, 0x47) truncate(&(0x7f0000000080)='./bus\x00', 0x101) sendfile(r0, r2, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) [ 197.302010][ T2430] handle_bad_sector: 11 callbacks suppressed [ 197.302072][ T2430] kworker/u4:5: attempt to access beyond end of device [ 197.302072][ T2430] loop2: rw=1, want=122, limit=16 [ 197.320259][ T2430] buffer_io_error: 11 callbacks suppressed [ 197.320315][ T2430] Buffer I/O error on dev loop2, logical block 121, lost async page write [ 197.335060][ T2430] kworker/u4:5: attempt to access beyond end of device [ 197.335060][ T2430] loop2: rw=1, want=123, limit=16 [ 197.347093][ T2430] Buffer I/O error on dev loop2, logical block 122, lost async page write [ 197.355872][ T2430] kworker/u4:5: attempt to access beyond end of device [ 197.355872][ T2430] loop2: rw=1, want=124, limit=16 [ 197.367850][ T2430] Buffer I/O error on dev loop2, logical block 123, lost async page write [ 197.381050][ T2430] kworker/u4:5: attempt to access beyond end of device [ 197.381050][ T2430] loop2: rw=1, want=125, limit=16 [ 197.393546][ T2430] Buffer I/O error on dev loop2, logical block 124, lost async page write [ 197.402331][ T2430] kworker/u4:5: attempt to access beyond end of device [ 197.402331][ T2430] loop2: rw=1, want=126, limit=16 [ 197.414369][ T2430] Buffer I/O error on dev loop2, logical block 125, lost async page write [ 197.423132][ T2430] kworker/u4:5: attempt to access beyond end of device [ 197.423132][ T2430] loop2: rw=1, want=127, limit=16 [ 197.435174][ T2430] Buffer I/O error on dev loop2, logical block 126, lost async page write [ 197.443960][ T2430] kworker/u4:5: attempt to access beyond end of device [ 197.443960][ T2430] loop2: rw=1, want=128, limit=16 [ 197.456074][ T2430] Buffer I/O error on dev loop2, logical block 127, lost async page write 18:20:19 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f00000017c0)={&(0x7f0000001140)={0xa, 0x0, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}}}], 0x28}, 0x0) [ 197.675755][ T3977] loop5: detected capacity change from 0 to 16 18:20:19 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) keyctl$revoke(0x3, 0x0) 18:20:19 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000140)={0x13, 0x0, 0x7, 0x5, 0x9}) 18:20:20 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x7, 0x1007, 0x9, 0x0, 0x1}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0xfff, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x40) 18:20:20 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f00000017c0)={&(0x7f0000001140)={0xa, 0x0, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}}}], 0x28}, 0x0) 18:20:20 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) keyctl$revoke(0x3, 0x0) 18:20:20 executing program 5: r0 = socket$inet(0x2b, 0x801, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000280)={'bond_slave_0\x00'}) 18:20:20 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) connect(r0, 0x0, 0x0) 18:20:20 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x7, 0x1007, 0x9, 0x0, 0x1}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0xfff, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x40) 18:20:20 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f00000017c0)={&(0x7f0000001140)={0xa, 0x0, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}}}], 0x28}, 0x0) [ 198.668006][ T3999] loop2: detected capacity change from 0 to 16 18:20:20 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) keyctl$revoke(0x3, 0x0) 18:20:21 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) connect(r0, 0x0, 0x0) 18:20:21 executing program 5: r0 = socket$inet(0x2b, 0x801, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000280)={'bond_slave_0\x00'}) 18:20:21 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x7, 0x1007, 0x9, 0x0, 0x1}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0xfff, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x40) 18:20:21 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f00000017c0)={&(0x7f0000001140)={0xa, 0x0, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}}}], 0x28}, 0x0) 18:20:21 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x7, 0x1007, 0x9, 0x0, 0x1}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0xfff, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x40) 18:20:21 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) connect(r0, 0x0, 0x0) 18:20:21 executing program 5: r0 = socket$inet(0x2b, 0x801, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000280)={'bond_slave_0\x00'}) 18:20:21 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) keyctl$revoke(0x3, 0x0) 18:20:21 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x7, 0x1007, 0x9, 0x0, 0x1}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0xfff, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x40) 18:20:21 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000a80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de", 0x23, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000580)={[{@fat=@time_offset}, {@uni_xlate}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 18:20:21 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x7, 0x1007, 0x9, 0x0, 0x1}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0xfff, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x40) 18:20:21 executing program 5: r0 = socket$inet(0x2b, 0x801, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000280)={'bond_slave_0\x00'}) 18:20:21 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) connect(r0, 0x0, 0x0) 18:20:22 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0x3b, &(0x7f0000000200)=""/59}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000380)=""/137, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af04, &(0x7f0000000100)={0x0, 0xfdfdffff, 0x0, 0x0, 0x0}) [ 199.991162][ T4026] loop3: detected capacity change from 0 to 270 18:20:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) setresgid(0xffffffffffffffff, r3, 0x0) 18:20:22 executing program 3: r0 = accept4(0xffffffffffffffff, &(0x7f0000000900)=@un=@abs, &(0x7f0000000980)=0x80, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000009c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r2, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) 18:20:22 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x7, 0x1007, 0x9, 0x0, 0x1}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0xfff, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x40) 18:20:22 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="769100001500010085be28ef000f00000a040000010000000003"], 0x1}}, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000600000000002c00028006000e000000000006000e000000000006000b000000000006000b000000000008000700000000001c000280190008000000000006000f0000000000080008000000000008000400000000002c00028008000600000000000800090200000000000000000000000006000b00000000000800030000000000140002"], 0xac}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 18:20:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0xe500, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 18:20:22 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0x3b, &(0x7f0000000200)=""/59}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000380)=""/137, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af04, &(0x7f0000000100)={0x0, 0xfdfdffff, 0x0, 0x0, 0x0}) 18:20:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) setresgid(0xffffffffffffffff, r3, 0x0) [ 200.697540][ T4048] netlink: 35865 bytes leftover after parsing attributes in process `syz-executor.4'. [ 200.925835][ T4047] loop0: detected capacity change from 0 to 3204 18:20:23 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0x3b, &(0x7f0000000200)=""/59}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000380)=""/137, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af04, &(0x7f0000000100)={0x0, 0xfdfdffff, 0x0, 0x0, 0x0}) 18:20:23 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="769100001500010085be28ef000f00000a040000010000000003"], 0x1}}, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000600000000002c00028006000e000000000006000e000000000006000b000000000006000b000000000008000700000000001c000280190008000000000006000f0000000000080008000000000008000400000000002c00028008000600000000000800090200000000000000000000000006000b00000000000800030000000000140002"], 0xac}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 18:20:23 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0x3b, &(0x7f0000000200)=""/59}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000380)=""/137, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af04, &(0x7f0000000100)={0x0, 0xfdfdffff, 0x0, 0x0, 0x0}) 18:20:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0xe500, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 18:20:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) setresgid(0xffffffffffffffff, r3, 0x0) [ 201.326942][ T4058] netlink: 35865 bytes leftover after parsing attributes in process `syz-executor.4'. 18:20:23 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="769100001500010085be28ef000f00000a040000010000000003"], 0x1}}, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000600000000002c00028006000e000000000006000e000000000006000b000000000006000b000000000008000700000000001c000280190008000000000006000f0000000000080008000000000008000400000000002c00028008000600000000000800090200000000000000000000000006000b00000000000800030000000000140002"], 0xac}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 18:20:23 executing program 3: r0 = accept4(0xffffffffffffffff, &(0x7f0000000900)=@un=@abs, &(0x7f0000000980)=0x80, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000009c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000013c01e0bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff000000003f040000000000002d400500000000004704000001ed00007b130000000000001d440000000000007a0a00fe00ffffffdb03000000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d2f5869074d6ebdfd1f5e69048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e529151537afe58fea62f8a80deb69b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a106f6443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc022928eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384b6239def11732e5c08f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fea6e37037f27feeb7409000000f9a6a8346962a350845ffa0d829e4f79ad906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd394a7ddd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819da8aa7749f3187e9efb00000000e0884160b765b07ec9ba0203627f0223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c7a90f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e6468f412f2b5ae14340824e72a78fb078c6aa4726c769c9e36128b32484babacda2b09e0e9347168c2db0e964a46dc3d504aef0000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r2, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) 18:20:23 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0x3b, &(0x7f0000000200)=""/59}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000380)=""/137, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af04, &(0x7f0000000100)={0x0, 0xfdfdffff, 0x0, 0x0, 0x0}) 18:20:23 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0x3b, &(0x7f0000000200)=""/59}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000380)=""/137, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af04, &(0x7f0000000100)={0x0, 0xfdfdffff, 0x0, 0x0, 0x0}) 18:20:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0xe500, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 18:20:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) setresgid(0xffffffffffffffff, r3, 0x0) [ 201.955343][ T4072] netlink: 35865 bytes leftover after parsing attributes in process `syz-executor.4'. 18:20:24 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0x3b, &(0x7f0000000200)=""/59}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000380)=""/137, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af04, &(0x7f0000000100)={0x0, 0xfdfdffff, 0x0, 0x0, 0x0}) [ 202.200938][ T4080] loop0: detected capacity change from 0 to 3204 18:20:24 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="769100001500010085be28ef000f00000a040000010000000003"], 0x1}}, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000600000000002c00028006000e000000000006000e000000000006000b000000000006000b000000000008000700000000001c000280190008000000000006000f0000000000080008000000000008000400000000002c00028008000600000000000800090200000000000000000000000006000b00000000000800030000000000140002"], 0xac}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 18:20:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0xe500, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 18:20:24 executing program 1: r0 = accept4(0xffffffffffffffff, &(0x7f0000000900)=@un=@abs, &(0x7f0000000980)=0x80, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000009c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r2, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) 18:20:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0xe500, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 202.653598][ T4089] netlink: 35865 bytes leftover after parsing attributes in process `syz-executor.4'. 18:20:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0xe500, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 18:20:25 executing program 3: r0 = accept4(0xffffffffffffffff, &(0x7f0000000900)=@un=@abs, &(0x7f0000000980)=0x80, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000009c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r2, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) [ 203.043773][ T4094] loop0: detected capacity change from 0 to 3204 18:20:25 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r1, r0, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) copy_file_range(r2, 0x0, r1, 0x0, 0x0, 0x0) 18:20:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0xe500, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 18:20:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0xe500, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 18:20:25 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000040)={{@host, 0xffffffff}, 0x1}) 18:20:25 executing program 1: r0 = accept4(0xffffffffffffffff, &(0x7f0000000900)=@un=@abs, &(0x7f0000000980)=0x80, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000009c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r2, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) [ 203.744534][ T4109] Failed to get privilege flags for destination (handle=0x2:0xffffffff) 18:20:25 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r1, r0, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) copy_file_range(r2, 0x0, r1, 0x0, 0x0, 0x0) 18:20:25 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000040)={{@host, 0xffffffff}, 0x1}) [ 203.948199][ T4110] loop0: detected capacity change from 0 to 3204 18:20:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0xe500, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 18:20:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0xe500, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 204.196846][ T4119] Failed to get privilege flags for destination (handle=0x2:0xffffffff) 18:20:26 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000040)={{@host, 0xffffffff}, 0x1}) 18:20:26 executing program 3: r0 = accept4(0xffffffffffffffff, &(0x7f0000000900)=@un=@abs, &(0x7f0000000980)=0x80, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000009c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000013c01e0bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff000000003f040000000000002d400500000000004704000001ed00007b130000000000001d440000000000007a0a00fe00ffffffdb03000000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d2f5869074d6ebdfd1f5e69048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e529151537afe58fea62f8a80deb69b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a106f6443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc022928eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384b6239def11732e5c08f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fea6e37037f27feeb7409000000f9a6a8346962a350845ffa0d829e4f79ad906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd394a7ddd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819da8aa7749f3187e9efb00000000e0884160b765b07ec9ba0203627f0223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c7a90f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e6468f412f2b5ae14340824e72a78fb078c6aa4726c769c9e36128b32484babacda2b09e0e9347168c2db0e964a46dc3d504aef0000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r2, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) 18:20:26 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r1, r0, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) copy_file_range(r2, 0x0, r1, 0x0, 0x0, 0x0) [ 204.637729][ T4127] Failed to get privilege flags for destination (handle=0x2:0xffffffff) [ 204.743716][ T4125] loop0: detected capacity change from 0 to 3204 18:20:26 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000040)={{@host, 0xffffffff}, 0x1}) 18:20:27 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r1, r0, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) copy_file_range(r2, 0x0, r1, 0x0, 0x0, 0x0) 18:20:27 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000015c0), 0x0, 0x0) lseek(r0, 0x0, 0x0) 18:20:27 executing program 1: r0 = accept4(0xffffffffffffffff, &(0x7f0000000900)=@un=@abs, &(0x7f0000000980)=0x80, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000009c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r2, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) [ 205.273346][ T4138] Failed to get privilege flags for destination (handle=0x2:0xffffffff) 18:20:27 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r1, r0, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) copy_file_range(r2, 0x0, r1, 0x0, 0x0, 0x0) 18:20:27 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r1, r0, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) copy_file_range(r2, 0x0, r1, 0x0, 0x0, 0x0) 18:20:27 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = socket(0x200040000000015, 0x5, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b80ffe976a6634ab9bdae0f5fbbc48cd02704b201f2dad4487f8d300bc1efaa2e902bbef66b3e4367ea3b104ee2ccef8117c9045a2696973025586a5e73f7c"}, 0x58) 18:20:27 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000015c0), 0x0, 0x0) lseek(r0, 0x0, 0x0) 18:20:27 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r1, r0, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) copy_file_range(r2, 0x0, r1, 0x0, 0x0, 0x0) 18:20:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') r1 = memfd_create(&(0x7f0000000300)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) readv(r0, &(0x7f00000025c0)=[{&(0x7f0000000400)=""/195, 0xc3}], 0x1) 18:20:28 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000015c0), 0x0, 0x0) lseek(r0, 0x0, 0x0) 18:20:28 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = socket(0x200040000000015, 0x5, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b80ffe976a6634ab9bdae0f5fbbc48cd02704b201f2dad4487f8d300bc1efaa2e902bbef66b3e4367ea3b104ee2ccef8117c9045a2696973025586a5e73f7c"}, 0x58) 18:20:28 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() getpgid(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="2fbf658c2f737230008918c69e0931f7ccd381f308e69fe7064f86be5973f6fa"], &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write(r1, &(0x7f0000000000)="05", 0xe7b78) 18:20:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') r1 = memfd_create(&(0x7f0000000300)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) readv(r0, &(0x7f00000025c0)=[{&(0x7f0000000400)=""/195, 0xc3}], 0x1) 18:20:28 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x24}, @exit={0x95, 0x6}], &(0x7f0000000180)='GPL\x00', 0x2, 0xe5, &(0x7f0000000240)=""/229, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:20:28 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000015c0), 0x0, 0x0) lseek(r0, 0x0, 0x0) 18:20:28 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = socket(0x200040000000015, 0x5, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b80ffe976a6634ab9bdae0f5fbbc48cd02704b201f2dad4487f8d300bc1efaa2e902bbef66b3e4367ea3b104ee2ccef8117c9045a2696973025586a5e73f7c"}, 0x58) 18:20:28 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x24}, @exit={0x95, 0x6}], &(0x7f0000000180)='GPL\x00', 0x2, 0xe5, &(0x7f0000000240)=""/229, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:20:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') r1 = memfd_create(&(0x7f0000000300)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) readv(r0, &(0x7f00000025c0)=[{&(0x7f0000000400)=""/195, 0xc3}], 0x1) 18:20:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) 18:20:29 executing program 2: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x0, 0x2, 0x5, 0x800, 0x2, @usage=0x2, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x666, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x80008}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage, 0x5, 0x3, [0x0, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x435, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x0, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getpgid(0x0) process_vm_readv(r1, &(0x7f0000001d80)=[{&(0x7f0000001340)=""/203, 0xcb}, {&(0x7f0000001600)=""/106, 0x6a}, {&(0x7f0000001680)=""/82, 0x52}, {&(0x7f0000001700)=""/136, 0x88}, {&(0x7f00000017c0)=""/239, 0xef}], 0x5, &(0x7f00000021c0)=[{&(0x7f0000001e00)=""/109, 0x6d}, {&(0x7f0000001e80)=""/221, 0xdd}, {&(0x7f0000002040)=""/87, 0x57}, {&(0x7f00000020c0)=""/123, 0x7b}, {&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f0000002140)=""/100, 0x64}], 0x6, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 18:20:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) [ 206.704792][ T4165] syz-executor.0[4165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! 18:20:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') r1 = memfd_create(&(0x7f0000000300)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) readv(r0, &(0x7f00000025c0)=[{&(0x7f0000000400)=""/195, 0xc3}], 0x1) [ 207.167305][ T4172] syz-executor.0[4172] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.456018][ C0] sd 0:0:1:0: tag#8065 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 207.477968][ C0] sd 0:0:1:0: tag#8065 CDB: opcode=0xe5 (vendor) [ 207.484666][ C0] sd 0:0:1:0: tag#8065 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 207.494009][ C0] sd 0:0:1:0: tag#8065 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 18:20:29 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() getpgid(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="2fbf658c2f737230008918c69e0931f7ccd381f308e69fe7064f86be5973f6fa"], &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write(r1, &(0x7f0000000000)="05", 0xe7b78) 18:20:29 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x24}, @exit={0x95, 0x6}], &(0x7f0000000180)='GPL\x00', 0x2, 0xe5, &(0x7f0000000240)=""/229, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 207.503392][ C0] sd 0:0:1:0: tag#8065 CDB[20]: ba 18:20:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) 18:20:29 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = socket(0x200040000000015, 0x5, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b80ffe976a6634ab9bdae0f5fbbc48cd02704b201f2dad4487f8d300bc1efaa2e902bbef66b3e4367ea3b104ee2ccef8117c9045a2696973025586a5e73f7c"}, 0x58) [ 207.822512][ T1199] ieee802154 phy0 wpan0: encryption failed: -22 [ 207.829013][ T1199] ieee802154 phy1 wpan1: encryption failed: -22 18:20:30 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() getpgid(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="2fbf658c2f737230008918c69e0931f7ccd381f308e69fe7064f86be5973f6fa"], &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write(r1, &(0x7f0000000000)="05", 0xe7b78) 18:20:30 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x24}, @exit={0x95, 0x6}], &(0x7f0000000180)='GPL\x00', 0x2, 0xe5, &(0x7f0000000240)=""/229, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:20:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) 18:20:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xf, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x8}, @timestamp={0x8, 0xa}, @generic={0x0, 0x7, "fc85a161d9"}, @md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) [ 207.893003][ T4186] syz-executor.0[4186] is installing a program with bpf_probe_write_user helper that may corrupt user memory! 18:20:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "4b1b8d892e42f5a2"}, 0x1}}, @CGW_CS_CRC8={0x11e, 0x6, {0x5d, 0x0, 0x0, 0x0, 0x0, "3c49f88b6b2b3c6b30092dba16701bcd1d25318070b406d94e0d9dcf33d52bfced9ea59e3e2f20f57012fdef9ad8366c36e78c1746242f1abab746dd014d3ec5876eacccb21a99b9c9f7d8d45ae98735707743d3c68942093fc76d9f30f9b31e78b44c503cc4d8916ab36e6ab971570640f7032a545b8fe421a2475633bc7f37c22f2220f59f2afb89698ce8d84cdc87d8da87596d5e6b595229ec4f9c667503214a0099eab01590a181d7a38b766a48037a0e6e461fc78b9fca8e22b8fed9380d9d87a466f1d65fd63810f4f0c1119b4b8bd986389f4c46d748046fbde58af5f1beb956d0558ebe74363ff4003305beed3e166a0b209a2f8ebf9245a47886cb", 0x0, "6cc19c843825f37857cf1dba4abe26aac7703e85"}}]}, 0x14c}}, 0x0) [ 208.595141][ T4197] syz-executor.0[4197] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.034200][ T4200] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:20:31 executing program 2: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x0, 0x2, 0x5, 0x800, 0x2, @usage=0x2, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x666, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x80008}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage, 0x5, 0x3, [0x0, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x435, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x0, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getpgid(0x0) process_vm_readv(r1, &(0x7f0000001d80)=[{&(0x7f0000001340)=""/203, 0xcb}, {&(0x7f0000001600)=""/106, 0x6a}, {&(0x7f0000001680)=""/82, 0x52}, {&(0x7f0000001700)=""/136, 0x88}, {&(0x7f00000017c0)=""/239, 0xef}], 0x5, &(0x7f00000021c0)=[{&(0x7f0000001e00)=""/109, 0x6d}, {&(0x7f0000001e80)=""/221, 0xdd}, {&(0x7f0000002040)=""/87, 0x57}, {&(0x7f00000020c0)=""/123, 0x7b}, {&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f0000002140)=""/100, 0x64}], 0x6, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 18:20:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0xfc}}, 0x1c}}, 0x0) 18:20:31 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() getpgid(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="2fbf658c2f737230008918c69e0931f7ccd381f308e69fe7064f86be5973f6fa"], &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write(r1, &(0x7f0000000000)="05", 0xe7b78) 18:20:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xf, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x8}, @timestamp={0x8, 0xa}, @generic={0x0, 0x7, "fc85a161d9"}, @md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) 18:20:31 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() getpgid(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="2fbf658c2f737230008918c69e0931f7ccd381f308e69fe7064f86be5973f6fa"], &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write(r1, &(0x7f0000000000)="05", 0xe7b78) 18:20:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "4b1b8d892e42f5a2"}, 0x1}}, @CGW_CS_CRC8={0x11e, 0x6, {0x5d, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "6cc19c843825f37857cf1dba4abe26aac7703e85"}}]}, 0x14c}}, 0x0) 18:20:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0xfc}}, 0x1c}}, 0x0) [ 209.549969][ C1] sd 0:0:1:0: tag#8070 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 209.560367][ C1] sd 0:0:1:0: tag#8070 CDB: opcode=0xe5 (vendor) [ 209.567180][ C1] sd 0:0:1:0: tag#8070 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 209.576555][ C1] sd 0:0:1:0: tag#8070 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 209.585946][ C1] sd 0:0:1:0: tag#8070 CDB[20]: ba [ 209.636691][ T4209] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:20:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xf, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x8}, @timestamp={0x8, 0xa}, @generic={0x0, 0x7, "fc85a161d9"}, @md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) 18:20:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0xfc}}, 0x1c}}, 0x0) 18:20:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "4b1b8d892e42f5a2"}, 0x1}}, @CGW_CS_CRC8={0x11e, 0x6, {0x5d, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "6cc19c843825f37857cf1dba4abe26aac7703e85"}}]}, 0x14c}}, 0x0) 18:20:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0xfc}}, 0x1c}}, 0x0) [ 210.745440][ T4224] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:20:32 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() getpgid(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="2fbf658c2f737230008918c69e0931f7ccd381f308e69fe7064f86be5973f6fa"], &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write(r1, &(0x7f0000000000)="05", 0xe7b78) 18:20:33 executing program 2: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x0, 0x2, 0x5, 0x800, 0x2, @usage=0x2, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x666, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x80008}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage, 0x5, 0x3, [0x0, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x435, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x0, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getpgid(0x0) process_vm_readv(r1, &(0x7f0000001d80)=[{&(0x7f0000001340)=""/203, 0xcb}, {&(0x7f0000001600)=""/106, 0x6a}, {&(0x7f0000001680)=""/82, 0x52}, {&(0x7f0000001700)=""/136, 0x88}, {&(0x7f00000017c0)=""/239, 0xef}], 0x5, &(0x7f00000021c0)=[{&(0x7f0000001e00)=""/109, 0x6d}, {&(0x7f0000001e80)=""/221, 0xdd}, {&(0x7f0000002040)=""/87, 0x57}, {&(0x7f00000020c0)=""/123, 0x7b}, {&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f0000002140)=""/100, 0x64}], 0x6, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 18:20:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "4b1b8d892e42f5a2"}, 0x1}}, @CGW_CS_CRC8={0x11e, 0x6, {0x5d, 0x0, 0x0, 0x0, 0x0, "3c49f88b6b2b3c6b30092dba16701bcd1d25318070b406d94e0d9dcf33d52bfced9ea59e3e2f20f57012fdef9ad8366c36e78c1746242f1abab746dd014d3ec5876eacccb21a99b9c9f7d8d45ae98735707743d3c68942093fc76d9f30f9b31e78b44c503cc4d8916ab36e6ab971570640f7032a545b8fe421a2475633bc7f37c22f2220f59f2afb89698ce8d84cdc87d8da87596d5e6b595229ec4f9c667503214a0099eab01590a181d7a38b766a48037a0e6e461fc78b9fca8e22b8fed9380d9d87a466f1d65fd63810f4f0c1119b4b8bd986389f4c46d748046fbde58af5f1beb956d0558ebe74363ff4003305beed3e166a0b209a2f8ebf9245a47886cb", 0x0, "6cc19c843825f37857cf1dba4abe26aac7703e85"}}]}, 0x14c}}, 0x0) 18:20:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xf, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x8}, @timestamp={0x8, 0xa}, @generic={0x0, 0x7, "fc85a161d9"}, @md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) 18:20:33 executing program 0: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x0, 0x2, 0x5, 0x800, 0x2, @usage=0x2, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x666, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x80008}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage, 0x5, 0x3, [0x0, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x435, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x0, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getpgid(0x0) process_vm_readv(r1, &(0x7f0000001d80)=[{&(0x7f0000001340)=""/203, 0xcb}, {&(0x7f0000001600)=""/106, 0x6a}, {&(0x7f0000001680)=""/82, 0x52}, {&(0x7f0000001700)=""/136, 0x88}, {&(0x7f00000017c0)=""/239, 0xef}], 0x5, &(0x7f00000021c0)=[{&(0x7f0000001e00)=""/109, 0x6d}, {&(0x7f0000001e80)=""/221, 0xdd}, {&(0x7f0000002040)=""/87, 0x57}, {&(0x7f00000020c0)=""/123, 0x7b}, {&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f0000002140)=""/100, 0x64}], 0x6, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 18:20:33 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() getpgid(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="2fbf658c2f737230008918c69e0931f7ccd381f308e69fe7064f86be5973f6fa"], &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write(r1, &(0x7f0000000000)="05", 0xe7b78) [ 211.344620][ C1] sd 0:0:1:0: tag#8071 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 211.354864][ C1] sd 0:0:1:0: tag#8071 CDB: opcode=0xe5 (vendor) [ 211.361462][ C1] sd 0:0:1:0: tag#8071 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 211.371013][ C1] sd 0:0:1:0: tag#8071 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 211.380395][ C1] sd 0:0:1:0: tag#8071 CDB[20]: ba [ 211.475110][ T4232] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:20:33 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x4058534c, &(0x7f0000000400)={{0x80}, {}, 0x0, 0x2}) [ 211.754499][ C1] sd 0:0:1:0: tag#8072 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 211.764753][ C1] sd 0:0:1:0: tag#8072 CDB: opcode=0xe5 (vendor) [ 211.771331][ C1] sd 0:0:1:0: tag#8072 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 211.780776][ C1] sd 0:0:1:0: tag#8072 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 211.790147][ C1] sd 0:0:1:0: tag#8072 CDB[20]: ba 18:20:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) pidfd_send_signal(r2, 0x0, &(0x7f0000000040)={0x0, 0x0, 0xfffffffa}, 0x0) 18:20:34 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090002105e04da050000000000010902240001000000000904000009030000000921000000012202f709058103"], 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x76, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "f6cda846", "37cb0199"}}, 0x0}, 0x0) 18:20:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) pidfd_send_signal(r2, 0x0, &(0x7f0000000040)={0x0, 0x0, 0xfffffffa}, 0x0) [ 213.002173][ T3555] usb 2-1: new high-speed USB device number 2 using dummy_hcd 18:20:35 executing program 2: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x0, 0x2, 0x5, 0x800, 0x2, @usage=0x2, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x666, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x80008}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage, 0x5, 0x3, [0x0, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x435, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x0, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getpgid(0x0) process_vm_readv(r1, &(0x7f0000001d80)=[{&(0x7f0000001340)=""/203, 0xcb}, {&(0x7f0000001600)=""/106, 0x6a}, {&(0x7f0000001680)=""/82, 0x52}, {&(0x7f0000001700)=""/136, 0x88}, {&(0x7f00000017c0)=""/239, 0xef}], 0x5, &(0x7f00000021c0)=[{&(0x7f0000001e00)=""/109, 0x6d}, {&(0x7f0000001e80)=""/221, 0xdd}, {&(0x7f0000002040)=""/87, 0x57}, {&(0x7f00000020c0)=""/123, 0x7b}, {&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f0000002140)=""/100, 0x64}], 0x6, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) [ 213.291661][ T3555] usb 2-1: Using ep0 maxpacket: 16 [ 213.432280][ T3555] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.443538][ T3555] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.456490][ T3555] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 213.470355][ T3555] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 213.479926][ T3555] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:20:35 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/89, 0x59}], 0x1, 0x12e, 0x0) [ 213.858421][ C1] sd 0:0:1:0: tag#8073 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 213.861330][ T3555] usb 2-1: config 0 descriptor?? [ 213.868634][ C1] sd 0:0:1:0: tag#8073 CDB: opcode=0xe5 (vendor) [ 213.868732][ C1] sd 0:0:1:0: tag#8073 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 213.868832][ C1] sd 0:0:1:0: tag#8073 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 213.868925][ C1] sd 0:0:1:0: tag#8073 CDB[20]: ba 18:20:36 executing program 0: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x0, 0x2, 0x5, 0x800, 0x2, @usage=0x2, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x666, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x80008}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage, 0x5, 0x3, [0x0, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x435, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x0, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getpgid(0x0) process_vm_readv(r1, &(0x7f0000001d80)=[{&(0x7f0000001340)=""/203, 0xcb}, {&(0x7f0000001600)=""/106, 0x6a}, {&(0x7f0000001680)=""/82, 0x52}, {&(0x7f0000001700)=""/136, 0x88}, {&(0x7f00000017c0)=""/239, 0xef}], 0x5, &(0x7f00000021c0)=[{&(0x7f0000001e00)=""/109, 0x6d}, {&(0x7f0000001e80)=""/221, 0xdd}, {&(0x7f0000002040)=""/87, 0x57}, {&(0x7f00000020c0)=""/123, 0x7b}, {&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f0000002140)=""/100, 0x64}], 0x6, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 18:20:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) pidfd_send_signal(r2, 0x0, &(0x7f0000000040)={0x0, 0x0, 0xfffffffa}, 0x0) 18:20:36 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/89, 0x59}], 0x1, 0x12e, 0x0) 18:20:36 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @fixed, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) [ 214.350987][ T3555] hub 2-1:0.0: USB hub found [ 214.369932][ C0] sd 0:0:1:0: tag#8075 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 214.380188][ C0] sd 0:0:1:0: tag#8075 CDB: opcode=0xe5 (vendor) [ 214.386865][ C0] sd 0:0:1:0: tag#8075 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 214.396190][ C0] sd 0:0:1:0: tag#8075 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 214.405486][ C0] sd 0:0:1:0: tag#8075 CDB[20]: ba [ 214.573281][ T3555] hub 2-1:0.0: 1 port detected [ 214.578362][ T3555] usb 2-1: selecting invalid altsetting 1 [ 214.584304][ T3555] hub 2-1:0.0: Using single TT (err -22) [ 214.783402][ T3555] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 214.789915][ T3555] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 214.805599][ T3555] usbhid 2-1:0.0: can't add hid device: -22 [ 214.812848][ T3555] usbhid: probe of 2-1:0.0 failed with error -22 18:20:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) pidfd_send_signal(r2, 0x0, &(0x7f0000000040)={0x0, 0x0, 0xfffffffa}, 0x0) [ 215.123431][ T3555] usb 2-1: USB disconnect, device number 2 18:20:37 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/89, 0x59}], 0x1, 0x12e, 0x0) 18:20:37 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @fixed, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 18:20:37 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090002105e04da050000000000010902240001000000000904000009030000000921000000012202f709058103"], 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x76, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "f6cda846", "37cb0199"}}, 0x0}, 0x0) 18:20:38 executing program 0: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x0, {0x0, @struct, 0x0, 0x7, 0x0, 0x2, 0x5, 0x800, 0x2, @usage=0x2, 0xffff, 0x0, [0x0, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x666, 0x1f, 0x100000001, 0x3, 0x0, @struct={0x40, 0x80008}, 0x7fb4, 0xc1e, [0x0, 0x0, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x11, @usage=0xb43d, 0x0, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x0, 0x3f]}, {0x1f, 0xffffffffffffffff}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage, 0x5, 0x3, [0x0, 0x0, 0x8, 0x2, 0x9, 0x5]}, {0x1f, @struct={0x435, 0x7}, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x2, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x8]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @struct={0xdf4, 0x4d}, 0x0, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001440)=ANY=[@ANYBLOB="01f400"/12, @ANYBLOB="ffffffff000000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000001480)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x61, 0x3, 0x6, 0x6], @devid}) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getpgid(0x0) process_vm_readv(r1, &(0x7f0000001d80)=[{&(0x7f0000001340)=""/203, 0xcb}, {&(0x7f0000001600)=""/106, 0x6a}, {&(0x7f0000001680)=""/82, 0x52}, {&(0x7f0000001700)=""/136, 0x88}, {&(0x7f00000017c0)=""/239, 0xef}], 0x5, &(0x7f00000021c0)=[{&(0x7f0000001e00)=""/109, 0x6d}, {&(0x7f0000001e80)=""/221, 0xdd}, {&(0x7f0000002040)=""/87, 0x57}, {&(0x7f00000020c0)=""/123, 0x7b}, {&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f0000002140)=""/100, 0x64}], 0x6, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 18:20:38 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/89, 0x59}], 0x1, 0x12e, 0x0) 18:20:38 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @fixed, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 18:20:38 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x94, 0xeb, 0xf3, 0x20, 0x17cc, 0x1010, 0x2dc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0xb, 0x14}}]}}]}}, 0x0) 18:20:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x19, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000e1f4655fe1f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e38373635383433343000"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000a4d0099b099d46eeb5a6d2ef5e9d5ded010040000c00000000000000e0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500400000000000000000000000000000004700000000000000", 0x20, 0x560}, {&(0x7f0000010300)="02000000030000000400000015000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="ff070000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000e0f4655fe0f4655fe0f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011500)="ed41000000080000e0f4655fe1f4655fe1f4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2080}, {&(0x7f0000011600)="8081000000601020e0f4655fe0f4655fe0f4655f00000000000001004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000", 0x60, 0x2300}, {&(0x7f0000011700)="c041000000400000e0f4655fe0f4655fe0f4655f00000000000002004000000000000800000000000af301000400000000000000000000000800000020000000", 0x40, 0x2500}, {&(0x7f0000011800)="ed41000000080000e1f4655fe1f4655fe1f4655f00000000000002004000000000000800030000000af301000400000000000000000000000100000050000000000000000000000000000000000000000000000000000000000000000000000000000000ba56a6e5000000000000000000000000000000000000000000000000ed8100001a040000e1f4655fe1f4655fe1f4655f00000000000001004000000000000800010000000af30100040000000000000000000000010000006000000000000000000000000000000000000000000000000000000000000000000000000000000078ce27cf000000000000000000000000000000000000000000000000ffa1000026000000e1f4655fe1f4655fe1f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3837363538343334302f66696c65302f66696c653000000000000000000000000000000000000000000000ee3520d6000000000000000000000000000000000000000000000000ed8100000a000000e1f4655fe1f4655fe1f4655f00000000000001008000000000000800010000000af301000400000000000000000000000100000070000000000000000000000000000000000000000000000000000000000000000000000000000000070f9333800000000000000000000000000000000000000000000000ed81000028230000e1f4655fe1f4655fe1f4655f00000000000002004000000000000800010000000af301000400000000000000000000000500000090000000000000000000000000000000000000000000000000000000000000000000000000000000a9530bd8000000000000000000000000000000000000000000000000ed81000064000000e1f4655fe1f4655fe1f4655f00000000000001004000000000000800010000000af3010004000000000000000000000001000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000a1aee7ad00"/768, 0x300, 0x2580}, {&(0x7f0000011b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000011c00)="0b0000000c0001022e00000002000000f40702022e2e00"/32, 0x20, 0x10000}, {&(0x7f0000011d00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000011e00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11000}, {&(0x7f0000011f00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11800}, {&(0x7f0000012000)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12000}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13000}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13800}, {&(0x7f0000012400)="504d4d00504d4dffe1f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7032390075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x20000}, {&(0x7f0000012500)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d807050766696c653100"/64, 0x40, 0x28000}, {&(0x7f0000012600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}, {&(0x7f0000012b00)='syzkallers\x00'/32, 0x20, 0x38000}, {&(0x7f0000012c00)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8070000000006000000779b539778617474723100000601f00700000000060000007498539778617474723200"/96, 0x60, 0x40000}, {&(0x7f0000012d00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x407e0}, {&(0x7f0000012e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x50000}], 0x0, &(0x7f0000012f00)) [ 216.412274][ T3564] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 216.463512][ T4279] loop2: detected capacity change from 0 to 2048 [ 216.672182][ T3564] usb 2-1: Using ep0 maxpacket: 16 [ 216.710363][ T4279] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 216.721625][ T4279] ext4 filesystem being mounted at /root/syzkaller-testdir941054598/syzkaller.H2QCI5/32/file0 supports timestamps until 2038 (0x7fffffff) [ 216.772891][ T3552] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 216.793953][ T3564] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.805084][ T3564] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 18:20:38 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @fixed, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) [ 216.815116][ T3564] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 216.828236][ T3564] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 216.837531][ T3564] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:20:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x1c, 0x70, [@NL80211_MESH_SETUP_IE={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}}, 0x0) [ 217.012767][ C1] sd 0:0:1:0: tag#8079 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 217.023002][ C1] sd 0:0:1:0: tag#8079 CDB: opcode=0xe5 (vendor) [ 217.029579][ C1] sd 0:0:1:0: tag#8079 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 217.038977][ C1] sd 0:0:1:0: tag#8079 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 217.048332][ C1] sd 0:0:1:0: tag#8079 CDB[20]: ba 18:20:39 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x40247007, 0x0) [ 217.159261][ T3564] usb 2-1: config 0 descriptor?? [ 217.214311][ T3564] hub 2-1:0.0: USB hub found [ 217.223284][ T3552] usb 6-1: Using ep0 maxpacket: 32 18:20:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 217.432793][ T3564] hub 2-1:0.0: 1 port detected [ 217.437728][ T3564] usb 2-1: selecting invalid altsetting 1 [ 217.448741][ T3564] hub 2-1:0.0: Using single TT (err -22) [ 217.504065][ T3552] usb 6-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=2d.c6 [ 217.513782][ T3552] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.522150][ T3552] usb 6-1: Product: syz [ 217.526422][ T3552] usb 6-1: Manufacturer: syz [ 217.531146][ T3552] usb 6-1: SerialNumber: syz [ 217.672331][ T3564] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 217.678971][ T3564] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 217.695100][ T3564] usbhid 2-1:0.0: can't add hid device: -22 [ 217.701431][ T3564] usbhid: probe of 2-1:0.0 failed with error -22 [ 217.713103][ T3552] usb 6-1: config 0 descriptor?? 18:20:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x1c, 0x70, [@NL80211_MESH_SETUP_IE={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}}, 0x0) 18:20:39 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x40247007, 0x0) [ 218.016108][ T3552] snd-usb-audio: probe of 6-1:0.0 failed with error -71 [ 218.025849][ T3564] usb 2-1: USB disconnect, device number 3 [ 218.044622][ T3552] usb 6-1: USB disconnect, device number 6 18:20:40 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090002105e04da050000000000010902240001000000000904000009030000000921000000012202f709058103"], 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x76, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "f6cda846", "37cb0199"}}, 0x0}, 0x0) [ 219.072197][ T5] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 219.352481][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 219.495487][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.506888][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.516986][ T5] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 219.530197][ T5] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 219.539558][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.682585][ T5] usb 2-1: config 0 descriptor?? [ 219.724095][ T5] hub 2-1:0.0: USB hub found [ 219.935912][ T5] hub 2-1:0.0: 1 port detected [ 219.940980][ T5] usb 2-1: selecting invalid altsetting 1 [ 219.947236][ T5] hub 2-1:0.0: Using single TT (err -22) [ 220.192816][ T5] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 220.199541][ T5] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 220.215017][ T5] usbhid 2-1:0.0: can't add hid device: -22 [ 220.221361][ T5] usbhid: probe of 2-1:0.0 failed with error -22 [ 220.415284][ T5] usb 2-1: USB disconnect, device number 4 18:20:48 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3000000000240007800c00028008000140000000020c000180080001400000000008000640003d003f05000500020000000500010006"], 0x70}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) preadv(r3, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:20:48 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x40247007, 0x0) 18:20:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x1c, 0x70, [@NL80211_MESH_SETUP_IE={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}}, 0x0) 18:20:48 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x94, 0xeb, 0xf3, 0x20, 0x17cc, 0x1010, 0x2dc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0xb, 0x14}}]}}]}}, 0x0) 18:20:48 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090002105e04da050000000000010902240001000000000904000009030000000921000000012202f709058103"], 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x76, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "f6cda846", "37cb0199"}}, 0x0}, 0x0) 18:20:48 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 18:20:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x1c, 0x70, [@NL80211_MESH_SETUP_IE={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}}, 0x0) 18:20:48 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x40247007, 0x0) [ 226.472685][ T5] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 226.502447][ T3555] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 226.712465][ T5] usb 6-1: Using ep0 maxpacket: 32 [ 226.743172][ T3555] usb 2-1: Using ep0 maxpacket: 16 18:20:48 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 226.782254][ T3562] usb 1-1: new high-speed USB device number 2 using dummy_hcd 18:20:48 executing program 2: unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4010ae68, &(0x7f00000000c0)) [ 226.866139][ T3555] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.877516][ T3555] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.877632][ T3555] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 226.877799][ T3555] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 226.910211][ T3555] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.033309][ T5] usb 6-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=2d.c6 [ 227.043229][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.051432][ T5] usb 6-1: Product: syz [ 227.056049][ T5] usb 6-1: Manufacturer: syz [ 227.060833][ T5] usb 6-1: SerialNumber: syz 18:20:49 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 227.083669][ T3555] usb 2-1: config 0 descriptor?? [ 227.101070][ T5] usb 6-1: config 0 descriptor?? [ 227.118184][ T4325] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 18:20:49 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3000000000240007800c00028008000140000000020c000180080001400000000008000640003d003f05000500020000000500010006"], 0x70}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) preadv(r3, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 227.137975][ T3555] hub 2-1:0.0: USB hub found [ 227.202881][ T3562] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 18:20:49 executing program 2: unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4010ae68, &(0x7f00000000c0)) [ 227.362894][ T3555] hub 2-1:0.0: 1 port detected [ 227.367958][ T3555] usb 2-1: selecting invalid altsetting 1 [ 227.373972][ T3555] hub 2-1:0.0: Using single TT (err -22) [ 227.380249][ T5] snd-usb-audio: probe of 6-1:0.0 failed with error -71 [ 227.393778][ T3562] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 227.403277][ T3562] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.411422][ T3562] usb 1-1: Product: syz [ 227.415972][ T3562] usb 1-1: Manufacturer: syz [ 227.420794][ T3562] usb 1-1: SerialNumber: syz [ 227.425476][ T5] usb 6-1: USB disconnect, device number 7 18:20:49 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 227.583469][ T3555] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 227.589967][ T3555] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 227.605132][ T3555] usbhid 2-1:0.0: can't add hid device: -22 [ 227.611385][ T3555] usbhid: probe of 2-1:0.0 failed with error -22 18:20:49 executing program 2: unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4010ae68, &(0x7f00000000c0)) [ 227.893268][ T3555] usb 2-1: USB disconnect, device number 5 18:20:50 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x94, 0xeb, 0xf3, 0x20, 0x17cc, 0x1010, 0x2dc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0xb, 0x14}}]}}]}}, 0x0) 18:20:50 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 228.493142][ T3552] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 228.672368][ T3562] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 228.678958][ T3562] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 228.686652][ T3562] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 228.752335][ T3552] usb 6-1: Using ep0 maxpacket: 32 [ 228.904370][ T3562] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 228.958295][ T3562] usb 1-1: USB disconnect, device number 2 [ 228.966818][ T3562] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 229.082879][ T3552] usb 6-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=2d.c6 [ 229.092312][ T3552] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.100543][ T3552] usb 6-1: Product: syz [ 229.105050][ T3552] usb 6-1: Manufacturer: syz [ 229.111593][ T3552] usb 6-1: SerialNumber: syz [ 229.123977][ T3552] usb 6-1: config 0 descriptor?? [ 229.382273][ T3552] snd-usb-audio: probe of 6-1:0.0 failed with error -71 [ 229.396520][ T3552] usb 6-1: USB disconnect, device number 8 18:20:51 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 18:20:51 executing program 2: unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4010ae68, &(0x7f00000000c0)) 18:20:51 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3000000000240007800c00028008000140000000020c000180080001400000000008000640003d003f05000500020000000500010006"], 0x70}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) preadv(r3, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:20:51 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8}]}}]}, 0x40}}, 0x0) 18:20:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x50, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x50}}, 0x0) 18:20:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x50, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x50}}, 0x0) 18:20:51 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) 18:20:51 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8}]}}]}, 0x40}}, 0x0) 18:20:52 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x94, 0xeb, 0xf3, 0x20, 0x17cc, 0x1010, 0x2dc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0xb, 0x14}}]}}]}}, 0x0) [ 230.072465][ T3555] usb 1-1: new high-speed USB device number 3 using dummy_hcd 18:20:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x50, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x50}}, 0x0) 18:20:52 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8}]}}]}, 0x40}}, 0x0) 18:20:52 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) [ 230.442828][ T3555] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.613126][ T3555] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 230.623222][ T3555] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.631364][ T3555] usb 1-1: Product: syz [ 230.635797][ T3555] usb 1-1: Manufacturer: syz [ 230.640509][ T3555] usb 1-1: SerialNumber: syz [ 230.646710][ T5] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 230.892212][ T5] usb 6-1: Using ep0 maxpacket: 32 [ 231.182342][ T5] usb 6-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=2d.c6 [ 231.191735][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.200166][ T5] usb 6-1: Product: syz [ 231.204645][ T5] usb 6-1: Manufacturer: syz [ 231.209504][ T5] usb 6-1: SerialNumber: syz [ 231.223812][ T5] usb 6-1: config 0 descriptor?? [ 231.474787][ T5] snd-usb-audio: probe of 6-1:0.0 failed with error -71 [ 231.485763][ T5] usb 6-1: USB disconnect, device number 9 [ 231.498288][ T4337] udevd[4337]: setting owner of /dev/bus/usb/006/009 to uid=0, gid=0 failed: No such file or directory [ 231.884029][ T3555] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 231.890627][ T3555] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 231.898347][ T3555] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 232.112920][ T3555] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 232.195969][ T3555] usb 1-1: USB disconnect, device number 3 [ 232.204003][ T3555] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 18:20:54 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 18:20:54 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3000000000240007800c00028008000140000000020c000180080001400000000008000640003d003f05000500020000000500010006"], 0x70}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) preadv(r3, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:20:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x50, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x50}}, 0x0) 18:20:54 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8}]}}]}, 0x40}}, 0x0) 18:20:54 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)={0x0, 0x0, 0xfdfdffff}) 18:20:54 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) 18:20:54 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0xfc94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff7009e000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000bf1ffffff000000000800010063627100a408020004040600030000000500000000700300fdffffffffff00001f0000000500000000020000010000000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000200003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000400ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff04000800000004040600d90b0000ff00000005000000040000001ba2cc3b00000080010000003f000000ff0f0000bd52c97303000000be060000fffffffffffeffff7f000000ff0000008100000000c8954b8db160fea10000000300000000000000060000008f5e0040010000000002000006000000010100000200000007000000000000e0318900000104000000efff000600000004000000080000000400000002000000c00000000810000008000000f7ffffff05000000810000004d00000001000080eb0700001f000000090000000800000001000000000000000000000002000000ffff00000100000002000000000000e0a000000040000000ff000000f7ffffff0500000009000000070000000600000028080000030000000600000004000000be00000003000000070000000500000038080000faffffffffffffff47b5554d001000008100000007000000ffffffff040000000100000002000000566b00002000000004000000020000008b01000001000000ffff000004000000ff0f0000050000002000000003000000e40d000007000000f8ffffff200000003f000000387f00000700000007000000c10a000009000000040000000400000000000000008000000100008009000000370b000000000000ff07000006000000bb7900000400000002000000ffffff7f0300000000000000090000000700000005000000000000807f0000000900000008000000fad4ffffff01000001010000010000003f0000000400000020f2ffff01000100ffff0000010000000200000008000000fbfffffff9ffffff040000004d000000060000000200000002000000070000004e0d0000000200000800000035000000300e00000700000000040000020000000180000020000000f2ffffff070000000500000000010000fffffeff0900000000080000070000000800000009000000ff7f00000900000004000000040000000000000006000000050000000100000009000000080000007e0700000300000000800000bf16000002000006000000ffee00000001000000000000000010f7006305000000000000000000007f00000010080000000000000100008002000000080000000101000003000000ffffff7ffffffffff7ffffff0600000003000000a6060000ff030000070000000180000009000000020000000000000004000000e37fffff00020000070000000500000001000100000000800000af06060000002b0a000005000000010000000500000009000000040000000500000002000000ffffff7ff30000000800000002000000ffff0000ff070000810000004000000075fc000009000000fbffffff0500000000000000810000000100000080000000d05e0000020000001f00000000000000ff010000451e00002d00000000000000ff00000010006a1f31001000ff070000010000001800010039031c020101000001000000000000060500000010000200e002807104000000ff03000018000100080d1e02800000000600000024709a02ff7f000010000500010000000000000007000000100003001f0003000700000001010000180001005349"], 0x8d0}}, 0x0) r2 = socket(0x1000000010, 0x2, 0x0) sendmmsg$alg(r2, &(0x7f0000000100), 0x492492492492711, 0x0) 18:20:54 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) 18:20:55 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)={0x0, 0x0, 0xfdfdffff}) 18:20:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001b80), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x44, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x44}}, 0x0) [ 233.217683][ T4390] Zero length message leads to an empty skb [ 233.234207][ T5] usb 1-1: new high-speed USB device number 4 using dummy_hcd 18:20:55 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0xfc94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff7009e000000000000000000", @ANYRES32=r1, @ANYBLOB="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"], 0x8d0}}, 0x0) r2 = socket(0x1000000010, 0x2, 0x0) sendmmsg$alg(r2, &(0x7f0000000100), 0x492492492492711, 0x0) [ 233.309761][ T4393] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 18:20:55 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)={0x0, 0x0, 0xfdfdffff}) [ 233.632921][ T5] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.823073][ T5] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.834647][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.843366][ T5] usb 1-1: Product: syz [ 233.847720][ T5] usb 1-1: Manufacturer: syz [ 233.852573][ T5] usb 1-1: SerialNumber: syz [ 235.082317][ T5] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 235.089119][ T5] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 235.096947][ T5] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 235.311524][ T5] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 235.329183][ T5] usb 1-1: USB disconnect, device number 4 [ 235.337483][ T5] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 18:20:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001b80), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x44, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x44}}, 0x0) 18:20:57 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) io_setup(0x85a9, &(0x7f0000000040)) 18:20:57 executing program 3: sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000900), 0x0, &(0x7f00000c3000)}], 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205) splice(r0, 0x0, r2, 0x0, 0x4ff9c, 0x0) 18:20:57 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0xfc94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff7009e000000000000000000", @ANYRES32=r1, @ANYBLOB="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"], 0x8d0}}, 0x0) r2 = socket(0x1000000010, 0x2, 0x0) sendmmsg$alg(r2, &(0x7f0000000100), 0x492492492492711, 0x0) 18:20:57 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)={0x0, 0x0, 0xfdfdffff}) 18:20:57 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 235.949255][ T4405] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 18:20:58 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000002340), 0x0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000180), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f00000003c0)={0x0, "ee8087446df711e19b6716ea872ed6c156048da2313f7e3d12879d0e4a1bb0d116537db77462d7f2b49f51b1c03aab879d17355c9afa64e70bc7f3cf3e623af3"}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$HIDIOCGRDESC(r3, 0x90044802, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r4, 0x8979) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800005, 0x12, r4, 0x0) 18:20:58 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0xfc94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff7009e000000000000000000", @ANYRES32=r1, @ANYBLOB="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"], 0x8d0}}, 0x0) r2 = socket(0x1000000010, 0x2, 0x0) sendmmsg$alg(r2, &(0x7f0000000100), 0x492492492492711, 0x0) 18:20:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001b80), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x44, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x44}}, 0x0) 18:20:58 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) io_setup(0x85a9, &(0x7f0000000040)) [ 236.442515][ T5] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 236.453392][ T4417] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 18:20:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001b80), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x44, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x44}}, 0x0) [ 236.703136][ T3552] usb 6-1: new high-speed USB device number 10 using dummy_hcd 18:20:58 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0180000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="9b42072ebb"], 0x20000600}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x26, &(0x7f00000004c0), 0x4) 18:20:58 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) io_setup(0x85a9, &(0x7f0000000040)) [ 236.803631][ T5] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 18:20:58 executing program 3: sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000900), 0x0, &(0x7f00000c3000)}], 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205) splice(r0, 0x0, r2, 0x0, 0x4ff9c, 0x0) [ 236.983213][ T5] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 236.993005][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.003806][ T5] usb 1-1: Product: syz [ 237.008687][ T5] usb 1-1: Manufacturer: syz [ 237.013557][ T5] usb 1-1: SerialNumber: syz [ 237.092898][ T3552] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.106965][ T3552] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.117631][ T3552] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 237.126934][ T3552] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.152895][ T4424] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 18:20:59 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0180000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="9b42072ebb"], 0x20000600}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x26, &(0x7f00000004c0), 0x4) 18:20:59 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) io_setup(0x85a9, &(0x7f0000000040)) 18:20:59 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x7, {0x0, 0x0, 0x0, 0x4}}, 0x9) [ 237.778129][ T3552] wacom 0003:056A:0331.0005: unknown main item tag 0x0 [ 237.830978][ T3552] wacom 0003:056A:0331.0005: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 238.422539][ T5] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 238.429266][ T5] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 238.440315][ T5] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 238.652168][ T5] ===================================================== [ 238.659234][ T5] BUG: KMSAN: uninit-value in mac_address_string+0x430/0x1170 [ 238.666746][ T5] mac_address_string+0x430/0x1170 [ 238.671894][ T5] pointer+0x1029/0x2060 [ 238.676176][ T5] vsnprintf+0x1a9b/0x3650 [ 238.680615][ T5] pointer+0x1844/0x2060 [ 238.684912][ T5] vsnprintf+0x1a9b/0x3650 [ 238.689370][ T5] vprintk_store+0x537/0x2150 [ 238.694075][ T5] vprintk_emit+0x25c/0x950 [ 238.698603][ T5] dev_vprintk_emit+0x5ef/0x6d0 [ 238.703482][ T5] dev_printk_emit+0x1dd/0x21f [ 238.708272][ T5] __netdev_printk+0x7e9/0xae0 [ 238.713063][ T5] netdev_info+0x1ea/0x22f [ 238.717591][ T5] usbnet_probe+0x3f71/0x4140 [ 238.722296][ T5] usb_probe_interface+0xf19/0x1600 [ 238.727666][ T5] really_probe+0x67d/0x1510 [ 238.732312][ T5] __driver_probe_device+0x3e9/0x530 [ 238.737660][ T5] __device_attach_driver+0x79f/0x1120 [ 238.743164][ T5] bus_for_each_drv+0x2d6/0x3f0 [ 238.748064][ T5] __device_attach+0x593/0x8e0 [ 238.752872][ T5] device_initial_probe+0x4a/0x60 [ 238.757961][ T5] bus_probe_device+0x17b/0x3e0 [ 238.762869][ T5] device_add+0x1d3e/0x2400 [ 238.767416][ T5] usb_set_configuration+0x37e9/0x3ed0 [ 238.773067][ T5] usb_generic_driver_probe+0x13c/0x300 [ 238.778681][ T5] usb_probe_device+0x309/0x570 [ 238.783591][ T5] really_probe+0x67d/0x1510 [ 238.788237][ T5] __driver_probe_device+0x3e9/0x530 [ 238.793565][ T5] __device_attach_driver+0x79f/0x1120 [ 238.799088][ T5] bus_for_each_drv+0x2d6/0x3f0 [ 238.803998][ T5] __device_attach+0x593/0x8e0 [ 238.808868][ T5] device_initial_probe+0x4a/0x60 [ 238.813953][ T5] bus_probe_device+0x17b/0x3e0 [ 238.818834][ T5] device_add+0x1d3e/0x2400 [ 238.823379][ T5] usb_new_device+0x1b8e/0x2950 [ 238.828273][ T5] hub_event+0x5ad2/0x8910 [ 238.832731][ T5] process_one_work+0xdb9/0x1820 [ 238.837705][ T5] worker_thread+0x10bc/0x21f0 [ 238.842528][ T5] kthread+0x721/0x850 [ 238.846621][ T5] ret_from_fork+0x1f/0x30 [ 238.851081][ T5] [ 238.853419][ T5] Local variable tmp created at: [ 238.858378][ T5] number+0xad/0x23d0 [ 238.862378][ T5] vsnprintf+0x1f0d/0x3650 [ 238.866812][ T5] [ 238.869137][ T5] CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 5.16.0-rc5-syzkaller #0 [ 238.877309][ T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.887392][ T5] Workqueue: usb_hub_wq hub_event [ 238.892446][ T5] ===================================================== [ 238.899392][ T5] Disabling lock debugging due to kernel taint [ 238.905552][ T5] Kernel panic - not syncing: kmsan.panic set ... [ 238.911966][ T5] CPU: 0 PID: 5 Comm: kworker/0:0 Tainted: G B 5.16.0-rc5-syzkaller #0 [ 238.921550][ T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.931635][ T5] Workqueue: usb_hub_wq hub_event [ 238.936704][ T5] Call Trace: [ 238.940089][ T5] [ 238.943040][ T5] dump_stack_lvl+0x1ff/0x28e [ 238.947773][ T5] dump_stack+0x25/0x28 [ 238.951998][ T5] panic+0x487/0xe1f [ 238.955956][ T5] ? add_taint+0x181/0x210 [ 238.960391][ T5] ? _raw_spin_unlock_irqrestore+0x78/0xb0 [ 238.966247][ T5] kmsan_report+0x2e6/0x2f0 [ 238.970808][ T5] ? __msan_warning+0xb8/0x130 [ 238.975682][ T5] ? mac_address_string+0x430/0x1170 [ 238.980992][ T5] ? pointer+0x1029/0x2060 [ 238.985453][ T5] ? vsnprintf+0x1a9b/0x3650 [ 238.990066][ T5] ? pointer+0x1844/0x2060 [ 238.994509][ T5] ? vsnprintf+0x1a9b/0x3650 [ 238.999121][ T5] ? vprintk_store+0x537/0x2150 [ 239.004019][ T5] ? vprintk_emit+0x25c/0x950 [ 239.008756][ T5] ? dev_vprintk_emit+0x5ef/0x6d0 [ 239.013828][ T5] ? dev_printk_emit+0x1dd/0x21f [ 239.018876][ T5] ? __netdev_printk+0x7e9/0xae0 [ 239.023831][ T5] ? netdev_info+0x1ea/0x22f [ 239.028444][ T5] ? usbnet_probe+0x3f71/0x4140 [ 239.033341][ T5] ? usb_probe_interface+0xf19/0x1600 [ 239.038769][ T5] ? really_probe+0x67d/0x1510 [ 239.043581][ T5] ? __driver_probe_device+0x3e9/0x530 [ 239.049098][ T5] ? __device_attach_driver+0x79f/0x1120 [ 239.054784][ T5] ? bus_for_each_drv+0x2d6/0x3f0 [ 239.059868][ T5] ? __device_attach+0x593/0x8e0 [ 239.064859][ T5] ? device_initial_probe+0x4a/0x60 [ 239.070088][ T5] ? bus_probe_device+0x17b/0x3e0 [ 239.075142][ T5] ? device_add+0x1d3e/0x2400 [ 239.079842][ T5] ? usb_set_configuration+0x37e9/0x3ed0 [ 239.085531][ T5] ? usb_generic_driver_probe+0x13c/0x300 [ 239.091279][ T5] ? usb_probe_device+0x309/0x570 [ 239.096336][ T5] ? really_probe+0x67d/0x1510 [ 239.101148][ T5] ? __driver_probe_device+0x3e9/0x530 [ 239.106666][ T5] ? __device_attach_driver+0x79f/0x1120 [ 239.112357][ T5] ? bus_for_each_drv+0x2d6/0x3f0 [ 239.117415][ T5] ? __device_attach+0x593/0x8e0 [ 239.122406][ T5] ? device_initial_probe+0x4a/0x60 [ 239.127663][ T5] ? bus_probe_device+0x17b/0x3e0 [ 239.132745][ T5] ? device_add+0x1d3e/0x2400 [ 239.137472][ T5] ? usb_new_device+0x1b8e/0x2950 [ 239.142531][ T5] ? hub_event+0x5ad2/0x8910 [ 239.147166][ T5] ? process_one_work+0xdb9/0x1820 [ 239.152383][ T5] ? worker_thread+0x10bc/0x21f0 [ 239.157374][ T5] ? kthread+0x721/0x850 [ 239.161661][ T5] ? ret_from_fork+0x1f/0x30 [ 239.166301][ T5] ? kmsan_metadata_is_contiguous+0x62/0x1e0 [ 239.172334][ T5] ? update_stack_state+0x883/0xa60 [ 239.177589][ T5] ? kmsan_get_metadata+0x33/0x220 [ 239.182751][ T5] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 239.189078][ T5] __msan_warning+0xb8/0x130 [ 239.193717][ T5] mac_address_string+0x430/0x1170 [ 239.198889][ T5] ? kmsan_get_metadata+0x33/0x220 [ 239.204137][ T5] ? kmsan_get_metadata+0x33/0x220 [ 239.209419][ T5] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 239.215307][ T5] pointer+0x1029/0x2060 [ 239.219591][ T5] ? kmsan_get_metadata+0x33/0x220 [ 239.224742][ T5] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 239.230608][ T5] vsnprintf+0x1a9b/0x3650 [ 239.235077][ T5] pointer+0x1844/0x2060 [ 239.239360][ T5] ? kmsan_get_metadata+0x33/0x220 [ 239.244517][ T5] vsnprintf+0x1a9b/0x3650 [ 239.248986][ T5] vprintk_store+0x537/0x2150 [ 239.253705][ T5] ? vsnprintf+0x355b/0x3650 [ 239.258438][ T5] ? snprintf+0x24a/0x290 [ 239.262817][ T5] vprintk_emit+0x25c/0x950 [ 239.267412][ T5] dev_vprintk_emit+0x5ef/0x6d0 [ 239.272315][ T5] dev_printk_emit+0x1dd/0x21f [ 239.277141][ T5] __netdev_printk+0x7e9/0xae0 [ 239.281959][ T5] netdev_info+0x1ea/0x22f [ 239.286413][ T5] ? __this_cpu_preempt_check+0x13/0x20 [ 239.292105][ T5] usbnet_probe+0x3f71/0x4140 [ 239.296873][ T5] ? usbnet_disconnect+0x6c0/0x6c0 [ 239.302077][ T5] usb_probe_interface+0xf19/0x1600 [ 239.307440][ T5] ? usb_register_driver+0x900/0x900 [ 239.312788][ T5] really_probe+0x67d/0x1510 [ 239.317514][ T5] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 239.323726][ T5] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 239.329627][ T5] __driver_probe_device+0x3e9/0x530 [ 239.334993][ T5] __device_attach_driver+0x79f/0x1120 [ 239.340550][ T5] bus_for_each_drv+0x2d6/0x3f0 [ 239.345446][ T5] ? deferred_probe_work_func+0x4c0/0x4c0 [ 239.351227][ T5] __device_attach+0x593/0x8e0 [ 239.356047][ T5] ? cgroup_bpf_attach+0xe1/0x2640 [ 239.361210][ T5] device_initial_probe+0x4a/0x60 [ 239.366292][ T5] bus_probe_device+0x17b/0x3e0 [ 239.371204][ T5] device_add+0x1d3e/0x2400 [ 239.375758][ T5] usb_set_configuration+0x37e9/0x3ed0 [ 239.381279][ T5] ? usb_set_configuration+0xb51/0x3ed0 [ 239.386880][ T5] ? usb_choose_configuration+0xca0/0xf90 [ 239.392858][ T5] usb_generic_driver_probe+0x13c/0x300 [ 239.398535][ T5] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 239.404394][ T5] ? usb_choose_configuration+0xf90/0xf90 [ 239.410158][ T5] usb_probe_device+0x309/0x570 [ 239.415062][ T5] ? kmsan_get_metadata+0x33/0x220 [ 239.420219][ T5] ? usb_register_device_driver+0x580/0x580 [ 239.426168][ T5] really_probe+0x67d/0x1510 [ 239.430815][ T5] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 239.436946][ T5] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 239.442813][ T5] __driver_probe_device+0x3e9/0x530 [ 239.448173][ T5] __device_attach_driver+0x79f/0x1120 [ 239.453729][ T5] bus_for_each_drv+0x2d6/0x3f0 [ 239.458637][ T5] ? deferred_probe_work_func+0x4c0/0x4c0 [ 239.464442][ T5] __device_attach+0x593/0x8e0 [ 239.469262][ T5] ? cgroup_bpf_attach+0xe1/0x2640 [ 239.474423][ T5] device_initial_probe+0x4a/0x60 [ 239.479519][ T5] bus_probe_device+0x17b/0x3e0 [ 239.484441][ T5] device_add+0x1d3e/0x2400 [ 239.489005][ T5] usb_new_device+0x1b8e/0x2950 [ 239.493908][ T5] hub_event+0x5ad2/0x8910 [ 239.498415][ T5] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 239.504279][ T5] ? led_work+0x7b0/0x7b0 [ 239.508646][ T5] ? led_work+0x7b0/0x7b0 [ 239.513004][ T5] process_one_work+0xdb9/0x1820 [ 239.518013][ T5] worker_thread+0x10bc/0x21f0 [ 239.522857][ T5] kthread+0x721/0x850 [ 239.526977][ T5] ? worker_clr_flags+0x370/0x370 [ 239.532066][ T5] ? kthread_blkcg+0x120/0x120 [ 239.536884][ T5] ret_from_fork+0x1f/0x30 [ 239.541364][ T5] [ 239.544638][ T5] Kernel Offset: disabled [ 239.548972][ T5] Rebooting in 86400 seconds..