last executing test programs: 4.351348588s ago: executing program 0 (id=3355): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003020000082505a1a440000102034873025d00020106201b09040022b1020d0000052406000105240022000d240f0107000000fd3400000106241a0b00010905810300020399e00904010000020d0000090401010202000000090582020004090202090503020004000006"], 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e1e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba064dfa60bd7fafb3c22dc057e6f9e2a5eb144290afe5369110a71d4b7fc5937a32e213c443f3b9e506b25cf9e2520999b330fc9e86bde8c8ec78f67c0c7f24db0000000", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mq_open(0x0, 0x2, 0x1, &(0x7f00000006c0)={0x605, 0x7fffffff, 0x0, 0x7fff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0xd2, &(0x7f0000001280)=""/210, 0x0, 0x46, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getpid() recvmsg$qrtr(r2, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000100)=[{&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000001100)=""/140, 0x8c}], 0x3, &(0x7f0000000600)=[{0x90, 0x0, 0x0, ""/128}], 0x90, 0x2000}, 0x38, 0x40000040) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000480)=[{0x200000000006, 0x7, 0x0, 0x7ffc0006}]}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0xee00, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000580)={0x400, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) statfs(&(0x7f0000000200)='.\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.175139941s ago: executing program 1 (id=3358): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x74}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004004) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r6, 0x9c3fa077fa966179, 0xa, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r6, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9601, 0x20}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x0) 4.171975191s ago: executing program 1 (id=3359): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003020000082505a1a440000102034873025d00020106201b09040022b1020d0000052406000105240022000d240f0107000000fd3400000106241a0b00010905810300020399e00904010000020d0000090401010202000000090582020004090202090503020004000006"], 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mq_open(0x0, 0x2, 0x1, &(0x7f00000006c0)={0x605, 0x7fffffff, 0x0, 0x7fff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0xd2, &(0x7f0000001280)=""/210, 0x0, 0x46, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getpid() recvmsg$qrtr(r2, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000100)=[{&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000001100)=""/140, 0x8c}], 0x3, &(0x7f0000000600)=[{0x90, 0x0, 0x0, ""/128}], 0x90, 0x2000}, 0x38, 0x40000040) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000480)=[{0x200000000006, 0x7, 0x0, 0x7ffc0006}]}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0xee00, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000580)={0x400, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) statfs(0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.497448222s ago: executing program 0 (id=3364): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000300)={0xb4, 0xa, 0x0, 0x7, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x14}, @private2, @dev={0xfe, 0x80, '\x00', 0x22}]}, 0x58) 3.468737233s ago: executing program 0 (id=3365): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x7, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0xa}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x74}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004004) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r6, 0x9c3fa077fa966179, 0xa, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r6, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9601, 0x20}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x0) 3.422547224s ago: executing program 0 (id=3366): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003020000082505a1a440000102034873025d00020106201b09040022b1020d0000052406000105240022000d240f0107000000fd3400000106241a0b00010905810300020399e00904010000020d0000090401010202000000090582020004090202090503020004000006"], 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mq_open(0x0, 0x2, 0x1, &(0x7f00000006c0)={0x605, 0x7fffffff, 0x0, 0x7fff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0xd2, &(0x7f0000001280)=""/210, 0x0, 0x46, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getpid() recvmsg$qrtr(r1, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000100)=[{&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000001100)=""/140, 0x8c}], 0x3, &(0x7f0000000600)=[{0x90, 0x0, 0x0, ""/128}], 0x90, 0x2000}, 0x38, 0x40000040) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000480)=[{0x200000000006, 0x7, 0x0, 0x7ffc0006}]}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0xee00, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000580)={0x400, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) statfs(&(0x7f0000000200)='.\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.364061704s ago: executing program 1 (id=3368): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003020000082505a1a440000102034873025d00020106201b09040022b1020d0000052406000105240022000d240f0107000000fd3400000106241a0b00010905810300020399e00904010000020d0000090401010202000000090582020004090202090503020004000006"], 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mq_open(0x0, 0x2, 0x1, &(0x7f00000006c0)={0x605, 0x7fffffff, 0x0, 0x7fff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0xd2, &(0x7f0000001280)=""/210, 0x0, 0x46, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getpid() recvmsg$qrtr(r2, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000100)=[{&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000001100)=""/140, 0x8c}], 0x3, &(0x7f0000000600)=[{0x90, 0x0, 0x0, ""/128}], 0x90, 0x2000}, 0x38, 0x40000040) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000480)=[{0x200000000006, 0x7, 0x0, 0x7ffc0006}]}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0xee00, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000580)={0x400, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) statfs(&(0x7f0000000200)='.\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.907848662s ago: executing program 2 (id=3373): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003020000082505a1a440000102034873025d00020106201b09040022b1020d0000052406000105240022000d240f0107000000fd3400000106241a0b00010905810300020399e00904010000020d0000090401010202000000090582020004090202090503020004000006"], 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e1e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba064dfa60bd7fafb3c22dc057e6f9e2a5eb144290afe5369110a71d4b7fc5937a32e213c443f3b9e506b25cf9e2520999b330fc9e86bde8c8ec78f67c0c7f24db0000000", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mq_open(0x0, 0x2, 0x1, &(0x7f00000006c0)={0x605, 0x7fffffff, 0x0, 0x7fff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0xd2, &(0x7f0000001280)=""/210, 0x0, 0x46, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getpid() recvmsg$qrtr(r2, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000100)=[{&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000001100)=""/140, 0x8c}], 0x3, &(0x7f0000000600)=[{0x90, 0x0, 0x0, ""/128}], 0x90, 0x2000}, 0x38, 0x40000040) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000480)=[{0x200000000006, 0x7, 0x0, 0x7ffc0006}]}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0xee00, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000580)={0x400, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) statfs(&(0x7f0000000200)='.\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.593852297s ago: executing program 0 (id=3374): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003020000082505a1a440000102034873025d00020106201b09040022b1020d0000052406000105240022000d240f0107000000fd3400000106241a0b00010905810300020399e00904010000020d0000090401010202000000090582020004090202090503020004000006"], 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mq_open(0x0, 0x2, 0x1, &(0x7f00000006c0)={0x605, 0x7fffffff, 0x0, 0x7fff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0xd2, &(0x7f0000001280)=""/210, 0x0, 0x46, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getpid() recvmsg$qrtr(r2, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000100)=[{&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000001100)=""/140, 0x8c}], 0x3, &(0x7f0000000600)=[{0x90, 0x0, 0x0, ""/128}], 0x90, 0x2000}, 0x38, 0x40000040) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000480)=[{0x200000000006, 0x7, 0x0, 0x7ffc0006}]}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0xee00, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000580)={0x400, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) statfs(&(0x7f0000000200)='.\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.500411829s ago: executing program 1 (id=3375): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003020000082505a1a440000102034873025d00020106201b09040022b1020d0000052406000105240022000d240f0107000000fd3400000106241a0b00010905810300020399e00904010000020d0000090401010202000000090582020004090202090503020004000006"], 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mq_open(0x0, 0x2, 0x1, &(0x7f00000006c0)={0x605, 0x7fffffff, 0x0, 0x7fff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0xd2, &(0x7f0000001280)=""/210, 0x0, 0x46, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getpid() recvmsg$qrtr(r2, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000100)=[{&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000001100)=""/140, 0x8c}], 0x3, &(0x7f0000000600)=[{0x90, 0x0, 0x0, ""/128}], 0x90, 0x2000}, 0x38, 0x40000040) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000480)=[{0x200000000006, 0x7, 0x0, 0x7ffc0006}]}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0xee00, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000580)={0x400, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) statfs(&(0x7f0000000200)='.\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.071867876s ago: executing program 2 (id=3378): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003020000082505a1a440000102034873025d00020106201b09040022b1020d0000052406000105240022000d240f0107000000fd3400000106241a0b00010905810300020399e00904010000020d0000090401010202000000090582020004090202090503020004000006"], 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mq_open(0x0, 0x2, 0x1, &(0x7f00000006c0)={0x605, 0x7fffffff, 0x0, 0x7fff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0xd2, &(0x7f0000001280)=""/210, 0x0, 0x46, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getpid() recvmsg$qrtr(r2, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000100)=[{&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000001100)=""/140, 0x8c}], 0x3, &(0x7f0000000600)=[{0x90, 0x0, 0x0, ""/128}], 0x90, 0x2000}, 0x38, 0x40000040) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000480)=[{0x200000000006, 0x7, 0x0, 0x7ffc0006}]}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0xee00, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000580)={0x400, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) statfs(&(0x7f0000000200)='.\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.980433087s ago: executing program 3 (id=3380): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000300)={0xb4, 0xa, 0x0, 0x7, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x14}, @private2, @dev={0xfe, 0x80, '\x00', 0x22}]}, 0x58) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000580)={{0x2, 0xfb}, 'port1\x00', 0x100, 0x0, 0x400, 0x7, 0x8000, 0x6c, 0x8, 0x0, 0x0, 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) socket$can_raw(0x1d, 0x3, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x10) capset(&(0x7f0000000380)={0x20080522}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.946158158s ago: executing program 3 (id=3381): socket(0x18, 0x5, 0x86b0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsmount(r4, 0x0, 0x0) 1.770532351s ago: executing program 3 (id=3382): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x20, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa1c406, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESDEC], 0x1, 0x2a9, &(0x7f0000002a00)="$eJzs3M9r02AYwPGn6dZ00209CXrxQS96CbMe1UOVDcSC0q2iHoSMZVpa25EUbUUwZ0/7O4ZHb4L4D+y/8DYE2WknI22zNOu6H251nd33AyXv+z7v277JS8qTlmTz2dqb8opnrdh1MdIqhogv2yIZKcmORLhNtcupqF3uZcWXm7Nvtz4tPH/xKJfPzxVU53OLt7OqOn3127sPn699r194+mXaNGUj83LzV/bHxqWNy5u/F1+XPC2lpFqrq61LtVrdXqo4ulzyypbqk4pje46Wqp7j7oqvVGqrq021q8tTk6uu43lqV5tqSFPrNU2Hs6qqZVk6Ndkqp+UcSf31iOJ6oWDnuvW55GBnhLPAdXN2a2En9pwNxfXhzAgAAAzT/vm/EfXZyf+N3vxf5JD8/2PYa/pr3/zf0+Pn/0mJ8v+y087/625T7Vd2KZ7/40C9+f/RGP9mMjiJhB+r3N8Vct3cRP9B5P8AAAAAAAAAAAAAAAAAAAAAAPwPtoNgJgiCmdbWEJEgrJsikozV+ww9V/fWj6r4+gexlxku8AHrjxEQu3EvLfLTbxQbxUR724nPP8zPzWpb7Ma/rUajmIzitzpx3R0fl8kwnu0bT8mN6514K/bgcT4eX2sUJ2T5wJn7gzoEAAAAAACMPEsjmagxLdH1vWWpKb3x9vV7p+R3fx/Q7qOBWvExuTJ2mnsCAAAAAAD24zXfl+1KxXFPp5A8xc86dkHkeMPvBOZAppEUkagl07dPYUFk+AdqT8GUMzGNUS7cHdgbBgmRTst4+GXQcxYAAAAAGC3d64FDu17sbeDvfQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABuNETxEzjtZ52PsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnBV/AgAA//9sVrw0") lseek(r0, 0x10001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005"], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r1, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/35, 0x23, 0x0, 0x0, 0x0, 0x800}}, 0x120) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) lstat(&(0x7f0000000b00)='./cgroup/../file0\x00', &(0x7f0000000a80)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) open_tree(0xffffffffffffffff, &(0x7f0000000700)='./cgroup/../file0\x00', 0x89101) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000000), &(0x7f0000000500)}, 0x20) r3 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvtap0\x00'}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x658, 0x3d0, 0x0, 0x4a0, 0x2d8, 0x4a0, 0x588, 0x588, 0x588, 0x588, 0x588, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0xd0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b, 0x0, 0x1}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x6, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x41}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b8) sync() openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sync() 1.769282431s ago: executing program 0 (id=3383): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000) execve(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201010200000010f3044d0740000102"], 0x0) r4 = syz_open_dev$sg(&(0x7f0000000c40), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000003c0)=ANY=[], 0x118) socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000000a40)=[{{&(0x7f0000000080)=@phonet={0x23, 0xfd, 0x0, 0x5}, 0x80, 0x0}}, {{&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @random="ac6da4784393", 'veth0_macvtap\x00'}}, 0x80, 0x0}}], 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8, {}, {0x1}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 1.681127993s ago: executing program 1 (id=3384): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003020000082505a1a440000102034873025d00020106201b09040022b1020d0000052406000105240022000d240f0107000000fd3400000106241a0b00010905810300020399e00904010000020d0000090401010202000000090582020004090202090503020004000006"], 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mq_open(0x0, 0x2, 0x1, &(0x7f00000006c0)={0x605, 0x7fffffff, 0x0, 0x7fff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0xd2, &(0x7f0000001280)=""/210, 0x0, 0x46, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getpid() recvmsg$qrtr(r2, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000100)=[{&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000001100)=""/140, 0x8c}], 0x3, &(0x7f0000000600)=[{0x90, 0x0, 0x0, ""/128}], 0x90, 0x2000}, 0x38, 0x40000040) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000480)=[{0x200000000006, 0x7, 0x0, 0x7ffc0006}]}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0xee00, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000580)={0x400, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) statfs(&(0x7f0000000200)='.\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.615055194s ago: executing program 3 (id=3385): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003020000082505a1a440000102034873025d00020106201b09040022b1020d0000052406000105240022000d240f0107000000fd3400000106241a0b00010905810300020399e00904010000020d0000090401010202000000090582020004090202090503020004000006"], 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$eJzs3MGLG1UcB/Bf17Xdbt3NqrXagvjQi16GZg9e9BJkC9KA0jZCKwhTd6IhYxIyYSEiVk9e/TvEozdBvOllL/4N3vbisQdxxKS1jUSpSDdSPp9LfvDel997BAZmmDdHr3/5Ub9bZd18EmsnTsTaKCLdTpFiLe76LF557Ycfn796/cblVru9dyWlS61rzVdTStsvfPfuJ1+/+P3kzDvfbH97Kg533jv6Zffnw3OH549+u/Zhr0q9Kg2Gk5Snm8PhJL9ZFmm/V/WzlN4ui7wqUm9QFeOF8W45HI2mKR/sb22OxkVVpXwwTf1imibDNBlPU/5B3hukLMvS1mbwX3S+ul3XdURdPx4no67r+nRsxpl4IrZiOxqxE0/GU/F0nI1n4lw8G8/F+dmsVa8bAAAAAAAAAAAAAAAAAAAAHi3O/wMAAAAAAAAAAAAAAAAAAMDqXb1+43Kr3d67ktJGRPnFQeegM/+dj7e60YsyirgYjfg1Zqf/5+b1pTfbexfTzE58Xt66k7910HlsMd+cfU5gab45z6fF/KnYvD+/G404uzy/uzS/ES+/dF8+i0b89H4Mo4z9+CN7L/9pM6U33mr/JX9hNg8AAAAeBVn609L79yz7u/F5/kGeD6zdbbaQX48L6yvbNndU04/7eVkW44dWnIyH3uKfio2IWF33By/W43+xDIViXqz6ysRxuPenr3olAAAAAAAAAAAA/BvH8Trh0sanj32rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKgAA///20tEU") write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mq_open(0x0, 0x2, 0x1, &(0x7f00000006c0)={0x605, 0x7fffffff, 0x0, 0x7fff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0xd2, &(0x7f0000001280)=""/210, 0x0, 0x46, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getpid() recvmsg$qrtr(r2, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000100)=[{&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000001100)=""/140, 0x8c}], 0x3, &(0x7f0000000600)=[{0x90, 0x0, 0x0, ""/128}], 0x90, 0x2000}, 0x38, 0x40000040) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000480)=[{0x200000000006, 0x7, 0x0, 0x7ffc0006}]}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0xee00, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000580)={0x400, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) statfs(&(0x7f0000000200)='.\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.101540932s ago: executing program 2 (id=3389): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x7, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0xa}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x74}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004004) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x74) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r7, 0x9c3fa077fa966179, 0xa, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r7, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9601, 0x20}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x0) 943.951785ms ago: executing program 2 (id=3390): rt_sigsuspend(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xa0142, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x3a) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES8=r1, @ANYRESHEX], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6}, 0x18) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000001c0018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32, @ANYRES8=r4, @ANYRES32, @ANYBLOB="a7180243e7425dad9cdb2303f451a3ac63a0f9829c0001bf533c2d0313729c6c79d392cfb05f5a6ec97793835565", @ANYRESOCT=r7], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 844.693616ms ago: executing program 2 (id=3391): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003020000082505a1a440000102034873025d00020106201b09040022b1020d0000052406000105240022000d240f0107000000fd3400000106241a0b00010905810300020399e00904010000020d0000090401010202000000090582020004090202090503020004000006"], 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mq_open(0x0, 0x2, 0x1, &(0x7f00000006c0)={0x605, 0x7fffffff, 0x0, 0x7fff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0xd2, &(0x7f0000001280)=""/210, 0x0, 0x46, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getpid() recvmsg$qrtr(r2, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000100)=[{&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000001100)=""/140, 0x8c}], 0x3, &(0x7f0000000600)=[{0x90, 0x0, 0x0, ""/128}], 0x90, 0x2000}, 0x38, 0x40000040) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000480)=[{0x200000000006, 0x7, 0x0, 0x7ffc0006}]}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0xee00, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000580)={0x400, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) statfs(&(0x7f0000000200)='.\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 697.092279ms ago: executing program 1 (id=3392): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003020000082505a1a440000102034873025d00020106201b09040022b1020d0000052406000105240022000d240f0107000000fd3400000106241a0b00010905810300020399e00904010000020d0000090401010202000000090582020004090202090503020004000006"], 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e1e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba064dfa60bd7fafb3c22dc057e6f9e2a5eb144290afe5369110a71d4b7fc5937a32e213c443f3b9e506b25cf9e2520999b330fc9e86bde8c8ec78f67c0c7f24db0000000", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mq_open(0x0, 0x2, 0x1, &(0x7f00000006c0)={0x605, 0x7fffffff, 0x0, 0x7fff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0xd2, &(0x7f0000001280)=""/210, 0x0, 0x46, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getpid() recvmsg$qrtr(r2, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000100)=[{&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000001100)=""/140, 0x8c}], 0x3, &(0x7f0000000600)=[{0x90, 0x0, 0x0, ""/128}], 0x90, 0x2000}, 0x38, 0x40000040) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000480)=[{0x200000000006, 0x7, 0x0, 0x7ffc0006}]}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0xee00, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000580)={0x400, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) statfs(&(0x7f0000000200)='.\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 501.512572ms ago: executing program 3 (id=3393): socket(0x18, 0x5, 0x86b0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsmount(r4, 0x0, 0x0) 311.867455ms ago: executing program 3 (id=3394): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003020000082505a1a440000102034873025d00020106201b09040022b1020d0000052406000105240022000d240f0107000000fd3400000106241a0b00010905810300020399e00904010000020d0000090401010202000000090582020004090202090503020004000006"], 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$eJzs3MGLG1UcB/Bf17Xdbt3NqrXagvjQi16GZg9e9BJkC9KA0jZCKwhTd6IhYxIyYSEiVk9e/TvEozdBvOllL/4N3vbisQdxxKS1jUSpSDdSPp9LfvDel997BAZmmDdHr3/5Ub9bZd18EmsnTsTaKCLdTpFiLe76LF557Ycfn796/cblVru9dyWlS61rzVdTStsvfPfuJ1+/+P3kzDvfbH97Kg533jv6Zffnw3OH549+u/Zhr0q9Kg2Gk5Snm8PhJL9ZFmm/V/WzlN4ui7wqUm9QFeOF8W45HI2mKR/sb22OxkVVpXwwTf1imibDNBlPU/5B3hukLMvS1mbwX3S+ul3XdURdPx4no67r+nRsxpl4IrZiOxqxE0/GU/F0nI1n4lw8G8/F+dmsVa8bAAAAAAAAAAAAAAAAAAAAHi3O/wMAAAAAAAAAAAAAAAAAAMDqXb1+43Kr3d67ktJGRPnFQeegM/+dj7e60YsyirgYjfg1Zqf/5+b1pTfbexfTzE58Xt66k7910HlsMd+cfU5gab45z6fF/KnYvD+/G404uzy/uzS/ES+/dF8+i0b89H4Mo4z9+CN7L/9pM6U33mr/JX9hNg8AAAAeBVn609L79yz7u/F5/kGeD6zdbbaQX48L6yvbNndU04/7eVkW44dWnIyH3uKfio2IWF33By/W43+xDIViXqz6ysRxuPenr3olAAAAAAAAAAAA/BvH8Trh0sanj32rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKgAA///20tEU") write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mq_open(0x0, 0x2, 0x1, &(0x7f00000006c0)={0x605, 0x7fffffff, 0x0, 0x7fff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0xd2, &(0x7f0000001280)=""/210, 0x0, 0x46, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000480)=[{0x200000000006, 0x7, 0x0, 0x7ffc0006}]}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0xee00, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) statfs(&(0x7f0000000200)='.\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 264.182376ms ago: executing program 4 (id=3396): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x20, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa1c406, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESDEC], 0x1, 0x2a9, &(0x7f0000002a00)="$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") lseek(r0, 0x10001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005"], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r1, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/35, 0x23, 0x0, 0x0, 0x0, 0x800}}, 0x120) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) lstat(&(0x7f0000000b00)='./cgroup/../file0\x00', &(0x7f0000000a80)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) open_tree(0xffffffffffffffff, &(0x7f0000000700)='./cgroup/../file0\x00', 0x89101) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvtap0\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x658, 0x3d0, 0x0, 0x4a0, 0x2d8, 0x4a0, 0x588, 0x588, 0x588, 0x588, 0x588, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0xd0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b, 0x0, 0x1}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x6, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x41}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b8) sync() openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sync() 182.975177ms ago: executing program 4 (id=3397): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000300)={0xb4, 0xa, 0x0, 0x7, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x14}, @private2, @dev={0xfe, 0x80, '\x00', 0x22}]}, 0x58) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000580)={{0x2, 0xfb}, 'port1\x00', 0x100, 0x0, 0x400, 0x7, 0x8000, 0x6c, 0x8, 0x0, 0x0, 0x1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) socket$can_raw(0x1d, 0x3, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) 137.995878ms ago: executing program 4 (id=3398): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000300)={0xb4, 0x8, 0x0, 0x7, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x14}, @private2]}, 0x48) 122.714289ms ago: executing program 4 (id=3399): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000300)={0xb4, 0xa, 0x0, 0x7, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x14}, @private2, @dev={0xfe, 0x80, '\x00', 0x22}]}, 0x58) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000580)={{0x2, 0xfb}, 'port1\x00', 0x100, 0x0, 0x400, 0x7, 0x8000, 0x6c, 0x8, 0x0, 0x0, 0x1}) socket$can_raw(0x1d, 0x3, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x10) capset(&(0x7f0000000380)={0x20080522}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 69.75004ms ago: executing program 4 (id=3400): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x7, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0xa}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x74}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004004) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x74) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r7, 0x9c3fa077fa966179, 0xa, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r7, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9601, 0x20}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x0) 7.702641ms ago: executing program 2 (id=3401): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003020000082505a1a440000102034873025d00020106201b09040022b1020d0000052406000105240022000d240f0107000000fd3400000106241a0b00010905810300020399e00904010000020d0000090401010202000000090582020004090202090503020004000006"], 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$eJzs3MGLG1UcB/Bf17Xdbt3NqrXagvjQi16GZg9e9BJkC9KA0jZCKwhTd6IhYxIyYSEiVk9e/TvEozdBvOllL/4N3vbisQdxxKS1jUSpSDdSPp9LfvDel997BAZmmDdHr3/5Ub9bZd18EmsnTsTaKCLdTpFiLe76LF557Ycfn796/cblVru9dyWlS61rzVdTStsvfPfuJ1+/+P3kzDvfbH97Kg533jv6Zffnw3OH549+u/Zhr0q9Kg2Gk5Snm8PhJL9ZFmm/V/WzlN4ui7wqUm9QFeOF8W45HI2mKR/sb22OxkVVpXwwTf1imibDNBlPU/5B3hukLMvS1mbwX3S+ul3XdURdPx4no67r+nRsxpl4IrZiOxqxE0/GU/F0nI1n4lw8G8/F+dmsVa8bAAAAAAAAAAAAAAAAAAAAHi3O/wMAAAAAAAAAAAAAAAAAAMDqXb1+43Kr3d67ktJGRPnFQeegM/+dj7e60YsyirgYjfg1Zqf/5+b1pTfbexfTzE58Xt66k7910HlsMd+cfU5gab45z6fF/KnYvD+/G404uzy/uzS/ES+/dF8+i0b89H4Mo4z9+CN7L/9pM6U33mr/JX9hNg8AAAAeBVn609L79yz7u/F5/kGeD6zdbbaQX48L6yvbNndU04/7eVkW44dWnIyH3uKfio2IWF33By/W43+xDIViXqz6ysRxuPenr3olAAAAAAAAAAAA/BvH8Trh0sanj32rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKgAA///20tEU") write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mq_open(0x0, 0x2, 0x1, &(0x7f00000006c0)={0x605, 0x7fffffff, 0x0, 0x7fff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0xd2, &(0x7f0000001280)=""/210, 0x0, 0x46, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getpid() recvmsg$qrtr(r2, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000100)=[{&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000001100)=""/140, 0x8c}], 0x3, &(0x7f0000000600)=[{0x90, 0x0, 0x0, ""/128}], 0x90, 0x2000}, 0x38, 0x40000040) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000480)=[{0x200000000006, 0x7, 0x0, 0x7ffc0006}]}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0xee00, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000580)={0x400, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) statfs(&(0x7f0000000200)='.\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 4 (id=3402): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b2"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) dup2(r1, r1) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000008c0)={'\x00', 0x7, 0x2000008, 0x1, 0x0, 0x80000000000000, 0xffffffffffffffff}) kernel console output (not intermixed with test programs): 192 [ 224.882228][T27624] loop3: detected capacity change from 0 to 128 [ 224.914753][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 224.922198][ T36] hid-generic 0000:0000:0000.0009: item fetching failed at offset 4/35 [ 224.930592][ T36] hid-generic 0000:0000:0000.0009: probe with driver hid-generic failed with error -22 [ 225.198517][T27728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.207569][T27728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.236631][T27731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.246711][T27731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.246963][T27728] loop4: detected capacity change from 0 to 8192 [ 225.262444][T27733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.271019][T27733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.298603][T27731] loop3: detected capacity change from 0 to 8192 [ 225.359212][T27733] loop1: detected capacity change from 0 to 8192 [ 225.412152][T27735] loop2: detected capacity change from 0 to 128 [ 225.431403][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 225.438068][T27735] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 225.438938][ T9] hid-generic 0000:0000:0000.000A: item fetching failed at offset 4/35 [ 225.453807][ T9] hid-generic 0000:0000:0000.000A: probe with driver hid-generic failed with error -22 [ 225.490904][T27737] loop2: detected capacity change from 0 to 128 [ 225.507469][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 225.514924][ T9] hid-generic 0000:0000:0000.000B: item fetching failed at offset 4/35 [ 225.517161][T27737] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 225.525606][ T9] hid-generic 0000:0000:0000.000B: probe with driver hid-generic failed with error -22 [ 225.569664][T27739] loop2: detected capacity change from 0 to 128 [ 225.585364][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 225.592849][ T9] hid-generic 0000:0000:0000.000C: item fetching failed at offset 4/35 [ 225.602833][ T9] hid-generic 0000:0000:0000.000C: probe with driver hid-generic failed with error -22 [ 225.862017][T27845] loop4: detected capacity change from 0 to 1764 [ 225.874897][T27845] siw: device registration error -23 [ 225.915511][T27843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.937546][T27843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.985400][T27843] loop2: detected capacity change from 0 to 8192 [ 226.077418][T27958] loop3: detected capacity change from 0 to 128 [ 226.086715][T27958] FAT-fs (loop3): Directory bread(block 32) failed [ 226.093788][T27958] FAT-fs (loop3): Directory bread(block 33) failed [ 226.100402][T27958] FAT-fs (loop3): Directory bread(block 34) failed [ 226.107102][T27958] FAT-fs (loop3): Directory bread(block 35) failed [ 226.114382][T27958] FAT-fs (loop3): Directory bread(block 36) failed [ 226.120972][T27958] FAT-fs (loop3): Directory bread(block 37) failed [ 226.127807][T27958] FAT-fs (loop3): Directory bread(block 38) failed [ 226.134481][T27958] FAT-fs (loop3): Directory bread(block 39) failed [ 226.141112][T27958] FAT-fs (loop3): Directory bread(block 40) failed [ 226.142094][T27849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.148694][T27958] FAT-fs (loop3): Directory bread(block 41) failed [ 226.157821][T27849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.202620][T27849] loop1: detected capacity change from 0 to 8192 [ 226.274516][T27956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.282988][T27956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.317805][T27956] loop4: detected capacity change from 0 to 8192 [ 226.697188][T28162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.705739][T28162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.737541][T28162] loop3: detected capacity change from 0 to 8192 [ 226.809921][T28164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.818530][T28164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.852923][T28164] loop2: detected capacity change from 0 to 8192 [ 226.991542][T28166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.000320][T28166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.039045][T28166] loop1: detected capacity change from 0 to 8192 [ 227.228264][T28274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.236816][T28274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.269220][T28274] loop4: detected capacity change from 0 to 8192 [ 227.280751][ T29] kauditd_printk_skb: 1614 callbacks suppressed [ 227.280767][ T29] audit: type=1326 audit(1753657431.135:15992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28273 comm="syz.4.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 227.316047][ T29] audit: type=1326 audit(1753657431.135:15993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28273 comm="syz.4.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 227.339928][ T29] audit: type=1326 audit(1753657431.135:15994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28273 comm="syz.4.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 227.363588][ T29] audit: type=1326 audit(1753657431.135:15995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28273 comm="syz.4.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 227.387504][ T29] audit: type=1326 audit(1753657431.145:15996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28273 comm="syz.4.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 227.411196][ T29] audit: type=1326 audit(1753657431.145:15997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28273 comm="syz.4.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 227.434806][ T29] audit: type=1326 audit(1753657431.145:15998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28273 comm="syz.4.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 227.458417][ T29] audit: type=1326 audit(1753657431.145:15999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28273 comm="syz.4.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 227.481997][ T29] audit: type=1326 audit(1753657431.145:16000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28273 comm="syz.4.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 227.505678][ T29] audit: type=1326 audit(1753657431.145:16001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28273 comm="syz.4.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 227.550138][T28276] loop3: detected capacity change from 0 to 128 [ 227.579844][ T3400] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 227.587426][ T3400] hid-generic 0000:0000:0000.000D: item fetching failed at offset 4/35 [ 227.612403][ T3400] hid-generic 0000:0000:0000.000D: probe with driver hid-generic failed with error -22 [ 227.627043][T28282] loop1: detected capacity change from 0 to 128 [ 227.636663][T28282] FAT-fs (loop1): Directory bread(block 32) failed [ 227.644705][T28282] FAT-fs (loop1): Directory bread(block 33) failed [ 227.651324][T28282] FAT-fs (loop1): Directory bread(block 34) failed [ 227.657894][T28282] FAT-fs (loop1): Directory bread(block 35) failed [ 227.664610][T28282] FAT-fs (loop1): Directory bread(block 36) failed [ 227.671783][T28282] FAT-fs (loop1): Directory bread(block 37) failed [ 227.678403][T28282] FAT-fs (loop1): Directory bread(block 38) failed [ 227.685187][T28282] FAT-fs (loop1): Directory bread(block 39) failed [ 227.691798][T28282] FAT-fs (loop1): Directory bread(block 40) failed [ 227.698386][T28282] FAT-fs (loop1): Directory bread(block 41) failed [ 227.765521][T28278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.774103][T28278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.776036][T28280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.794297][T28280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.816887][T28278] loop2: detected capacity change from 0 to 8192 [ 227.877474][T28280] loop0: detected capacity change from 0 to 8192 [ 227.996716][T28590] loop4: detected capacity change from 0 to 128 [ 228.015764][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 228.023219][ T9] hid-generic 0000:0000:0000.000E: item fetching failed at offset 4/35 [ 228.034180][ T9] hid-generic 0000:0000:0000.000E: probe with driver hid-generic failed with error -22 [ 228.036171][T28590] checksum_tg_check: 1 callbacks suppressed [ 228.036200][T28590] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 228.117755][T28694] loop3: detected capacity change from 0 to 1764 [ 228.129063][T28694] siw: device registration error -23 [ 228.164212][T28588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.173068][T28588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.214219][T28696] loop3: detected capacity change from 0 to 128 [ 228.220641][T28588] loop1: detected capacity change from 0 to 8192 [ 228.236535][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 228.243983][ T9] hid-generic 0000:0000:0000.000F: item fetching failed at offset 4/35 [ 228.257568][T28696] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 228.264251][ T9] hid-generic 0000:0000:0000.000F: probe with driver hid-generic failed with error -22 [ 228.312506][T28693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.329749][T28693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.370499][T28693] loop4: detected capacity change from 0 to 8192 [ 228.387410][T28698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2985'. [ 228.414864][T28701] loop3: detected capacity change from 0 to 128 [ 228.451572][T28703] loop2: detected capacity change from 0 to 1764 [ 228.458432][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 228.465908][ T9] hid-generic 0000:0000:0000.0010: item fetching failed at offset 4/35 [ 228.482624][T28703] siw: device registration error -23 [ 228.485274][ T9] hid-generic 0000:0000:0000.0010: probe with driver hid-generic failed with error -22 [ 228.509141][T28701] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 228.540486][T28705] loop0: detected capacity change from 0 to 1764 [ 228.553305][T28705] siw: device registration error -23 [ 228.628846][T28708] loop3: detected capacity change from 0 to 128 [ 228.640465][T28708] FAT-fs (loop3): Directory bread(block 32) failed [ 228.647353][T28708] FAT-fs (loop3): Directory bread(block 33) failed [ 228.655361][T28708] FAT-fs (loop3): Directory bread(block 34) failed [ 228.662101][T28708] FAT-fs (loop3): Directory bread(block 35) failed [ 228.668705][T28708] FAT-fs (loop3): Directory bread(block 36) failed [ 228.676609][T28708] FAT-fs (loop3): Directory bread(block 37) failed [ 228.683233][T28708] FAT-fs (loop3): Directory bread(block 38) failed [ 228.689872][T28708] FAT-fs (loop3): Directory bread(block 39) failed [ 228.696544][T28708] FAT-fs (loop3): Directory bread(block 40) failed [ 228.703124][T28708] FAT-fs (loop3): Directory bread(block 41) failed [ 228.820924][T28815] loop1: detected capacity change from 0 to 128 [ 228.837024][ T3400] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 228.844253][T28709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.844497][ T3400] hid-generic 0000:0000:0000.0011: item fetching failed at offset 4/35 [ 228.854491][T28709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.863491][ T3400] hid-generic 0000:0000:0000.0011: probe with driver hid-generic failed with error -22 [ 228.883760][T28815] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 228.909693][T28709] loop2: detected capacity change from 0 to 8192 [ 228.922454][T28817] loop3: detected capacity change from 0 to 128 [ 228.949453][ T3400] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 228.956946][ T3400] hid-generic 0000:0000:0000.0012: item fetching failed at offset 4/35 [ 228.986213][T28817] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 228.996919][ T3400] hid-generic 0000:0000:0000.0012: probe with driver hid-generic failed with error -22 [ 229.053962][T28821] loop3: detected capacity change from 0 to 128 [ 229.080019][ T3400] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 229.087482][ T3400] hid-generic 0000:0000:0000.0013: item fetching failed at offset 4/35 [ 229.097621][ T3400] hid-generic 0000:0000:0000.0013: probe with driver hid-generic failed with error -22 [ 229.103090][T28821] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 229.133173][T28827] loop4: detected capacity change from 0 to 128 [ 229.154103][ T3400] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 229.161715][ T3400] hid-generic 0000:0000:0000.0014: item fetching failed at offset 4/35 [ 229.170155][ T3400] hid-generic 0000:0000:0000.0014: probe with driver hid-generic failed with error -22 [ 229.181062][T28827] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 229.215273][T28831] loop3: detected capacity change from 0 to 128 [ 229.222345][T28819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.236242][ T3400] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 229.241933][T28819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.243754][ T3400] hid-generic 0000:0000:0000.0015: item fetching failed at offset 4/35 [ 229.270709][T28831] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 229.281066][ T3400] hid-generic 0000:0000:0000.0015: probe with driver hid-generic failed with error -22 [ 229.297307][T28833] loop4: detected capacity change from 0 to 1764 [ 229.312387][T28833] siw: device registration error -23 [ 229.338303][T28819] loop1: detected capacity change from 0 to 8192 [ 229.366407][T28835] loop3: detected capacity change from 0 to 128 [ 229.417064][ T8610] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 229.424550][ T8610] hid-generic 0000:0000:0000.0016: item fetching failed at offset 4/35 [ 229.436763][T28835] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 229.451363][ T8610] hid-generic 0000:0000:0000.0016: probe with driver hid-generic failed with error -22 [ 229.491664][T28839] loop0: detected capacity change from 0 to 128 [ 229.533637][ T3400] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 229.541172][ T3400] hid-generic 0000:0000:0000.0017: item fetching failed at offset 4/35 [ 229.568674][T28839] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 229.579661][ T3400] hid-generic 0000:0000:0000.0017: probe with driver hid-generic failed with error -22 [ 229.610167][T28943] loop2: detected capacity change from 0 to 128 [ 229.632517][ T3400] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 229.640025][ T3400] hid-generic 0000:0000:0000.0018: item fetching failed at offset 4/35 [ 229.659632][T28945] loop4: detected capacity change from 0 to 128 [ 229.662469][ T3400] hid-generic 0000:0000:0000.0018: probe with driver hid-generic failed with error -22 [ 229.688769][ T8610] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 229.696302][ T8610] hid-generic 0000:0000:0000.0019: item fetching failed at offset 4/35 [ 229.706708][ T8610] hid-generic 0000:0000:0000.0019: probe with driver hid-generic failed with error -22 [ 229.720618][T28841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.730691][T28841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.789294][T28841] loop3: detected capacity change from 0 to 8192 [ 229.796009][T29051] loop4: detected capacity change from 0 to 128 [ 229.817076][ T8610] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 229.824642][ T8610] hid-generic 0000:0000:0000.001A: item fetching failed at offset 4/35 [ 229.839281][ T8610] hid-generic 0000:0000:0000.001A: probe with driver hid-generic failed with error -22 [ 229.897165][T29055] loop4: detected capacity change from 0 to 128 [ 229.917316][T28947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.921609][ T8610] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 229.933176][ T8610] hid-generic 0000:0000:0000.001B: item fetching failed at offset 4/35 [ 229.943783][T28947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.951975][ T8610] hid-generic 0000:0000:0000.001B: probe with driver hid-generic failed with error -22 [ 229.967449][T29049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.977493][T29049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.011203][T28947] loop0: detected capacity change from 0 to 8192 [ 230.053563][T29059] loop4: detected capacity change from 0 to 1764 [ 230.062598][T29059] siw: device registration error -23 [ 230.093392][T29049] loop2: detected capacity change from 0 to 8192 [ 230.189568][T29164] loop4: detected capacity change from 0 to 128 [ 230.210798][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.218235][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.225734][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.233236][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.240629][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.248137][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.255556][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.262971][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.270356][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.277820][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.285270][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.292702][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.300140][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.307594][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.315056][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.322470][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.329862][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.337270][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.344750][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.352282][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.359664][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.367108][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.374516][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.381939][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.389530][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.396942][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.404334][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.411780][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.419159][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.426550][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.434075][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.441486][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.448921][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.456452][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.463867][ T3400] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 230.472760][ T3400] hid-generic 0000:0000:0000.001C: hidraw0: HID v8.00 Device [syz1] on syz0 [ 230.555351][T29269] fido_id[29269]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 230.575468][T29271] loop4: detected capacity change from 0 to 1764 [ 230.593323][T29271] siw: device registration error -23 [ 230.643576][T29375] loop1: detected capacity change from 0 to 128 [ 230.658529][ T9] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 230.665999][ T9] hid-generic 0000:0000:0000.001D: item fetching failed at offset 4/35 [ 230.723525][ T9] hid-generic 0000:0000:0000.001D: probe with driver hid-generic failed with error -22 [ 230.754147][T29431] loop4: detected capacity change from 0 to 1764 [ 230.766135][T29431] siw: device registration error -23 [ 230.817945][T29483] loop2: detected capacity change from 0 to 128 [ 230.837145][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 230.844655][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 230.847646][T29487] loop1: detected capacity change from 0 to 1764 [ 230.852061][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 230.865821][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 230.873310][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 230.880700][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 230.888102][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 230.895589][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 230.903090][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 230.910557][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 230.917991][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 230.925443][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 230.932882][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 230.940290][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 230.940883][T29439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.947725][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 230.963507][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 230.969480][T29439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.970954][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 230.986129][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 230.993616][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 231.001052][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 231.008511][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 231.015902][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 231.023338][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 231.030787][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 231.038273][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 231.045692][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 231.053092][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 231.060556][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 231.068015][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 231.075510][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 231.082922][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 231.085387][T29439] loop0: detected capacity change from 0 to 8192 [ 231.090331][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 231.104123][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 231.111614][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 231.119005][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 231.132427][ T9] hid-generic 0000:0000:0000.001E: hidraw0: HID v8.00 Device [syz1] on syz0 [ 231.191061][T29750] loop4: detected capacity change from 0 to 128 [ 231.216419][T29738] fido_id[29738]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 231.240470][T29814] loop1: detected capacity change from 0 to 128 [ 231.258093][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 231.265638][ T9] hid-generic 0000:0000:0000.001F: item fetching failed at offset 4/35 [ 231.265957][ T8610] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 231.281375][ T8610] hid-generic 0000:0000:0000.0020: item fetching failed at offset 4/35 [ 231.284641][ T9] hid-generic 0000:0000:0000.001F: probe with driver hid-generic failed with error -22 [ 231.310658][ T8610] hid-generic 0000:0000:0000.0020: probe with driver hid-generic failed with error -22 [ 231.364897][T29903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3033'. [ 231.378038][T29740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.392896][T29740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.393347][T29905] loop1: detected capacity change from 0 to 128 [ 231.420436][ T9] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 231.427900][ T9] hid-generic 0000:0000:0000.0021: item fetching failed at offset 4/35 [ 231.445282][T29740] loop3: detected capacity change from 0 to 8192 [ 231.452370][ T9] hid-generic 0000:0000:0000.0021: probe with driver hid-generic failed with error -22 [ 231.528730][T29899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.537289][T29899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.550877][T29901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.567350][T29901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.582757][T29907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3035'. [ 231.618615][T29899] loop2: detected capacity change from 0 to 8192 [ 231.632402][T29901] loop4: detected capacity change from 0 to 8192 [ 231.772644][T30012] loop1: detected capacity change from 0 to 128 [ 231.791262][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 231.798788][ T9] hid-generic 0000:0000:0000.0022: item fetching failed at offset 4/35 [ 231.822948][ T9] hid-generic 0000:0000:0000.0022: probe with driver hid-generic failed with error -22 [ 231.836709][T30014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.846641][T30014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.871368][T30014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3038'. [ 231.890682][T30018] loop1: detected capacity change from 0 to 128 [ 231.905889][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 231.913505][ T9] hid-generic 0000:0000:0000.0023: item fetching failed at offset 4/35 [ 231.923237][ T9] hid-generic 0000:0000:0000.0023: probe with driver hid-generic failed with error -22 [ 232.049391][T30022] loop3: detected capacity change from 0 to 128 [ 232.065484][ T9] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 232.073050][ T9] hid-generic 0000:0000:0000.0024: item fetching failed at offset 4/35 [ 232.081723][ T9] hid-generic 0000:0000:0000.0024: probe with driver hid-generic failed with error -22 [ 232.153317][T30020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.161786][T30020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.196982][T30020] loop1: detected capacity change from 0 to 8192 [ 232.361845][ T29] kauditd_printk_skb: 2055 callbacks suppressed [ 232.361862][ T29] audit: type=1326 audit(1753657436.225:18057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30235 comm="syz.3.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317861e9a9 code=0x7ffc0000 [ 232.392324][T30236] loop3: detected capacity change from 0 to 128 [ 232.398641][ T29] audit: type=1326 audit(1753657436.225:18058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30235 comm="syz.3.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f317861d310 code=0x7ffc0000 [ 232.422506][ T29] audit: type=1326 audit(1753657436.225:18059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30235 comm="syz.3.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317861e9a9 code=0x7ffc0000 [ 232.446222][ T29] audit: type=1326 audit(1753657436.225:18060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30235 comm="syz.3.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317861e9a9 code=0x7ffc0000 [ 232.469798][ T29] audit: type=1326 audit(1753657436.225:18061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30235 comm="syz.3.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f317861e9a9 code=0x7ffc0000 [ 232.493468][ T29] audit: type=1326 audit(1753657436.225:18062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30235 comm="syz.3.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f317861e9e3 code=0x7ffc0000 [ 232.516877][ T29] audit: type=1326 audit(1753657436.225:18063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30235 comm="syz.3.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f317861d45f code=0x7ffc0000 [ 232.540283][ T29] audit: type=1326 audit(1753657436.225:18064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30235 comm="syz.3.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f317861ea37 code=0x7ffc0000 [ 232.544343][ T9] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 232.563872][ T29] audit: type=1326 audit(1753657436.255:18065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30235 comm="syz.3.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f317861d310 code=0x7ffc0000 [ 232.563898][ T29] audit: type=1326 audit(1753657436.255:18066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30235 comm="syz.3.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f317861e5ab code=0x7ffc0000 [ 232.571345][ T9] hid-generic 0000:0000:0000.0025: item fetching failed at offset 4/35 [ 232.619479][T30130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.635346][T30338] loop0: detected capacity change from 0 to 128 [ 232.647512][T30130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.660603][ T9] hid-generic 0000:0000:0000.0025: probe with driver hid-generic failed with error -22 [ 232.724680][T30442] loop3: detected capacity change from 0 to 128 [ 232.734441][T30130] loop2: detected capacity change from 0 to 8192 [ 232.776920][T30444] loop0: detected capacity change from 0 to 128 [ 232.819196][ T3401] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 232.826753][ T3401] hid-generic 0000:0000:0000.0026: item fetching failed at offset 4/35 [ 232.840575][ T3401] hid-generic 0000:0000:0000.0026: probe with driver hid-generic failed with error -22 [ 232.891347][T30359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.907032][T30546] loop0: detected capacity change from 0 to 128 [ 232.913343][T30548] loop3: detected capacity change from 0 to 128 [ 232.916077][T30359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.949353][ T3401] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 232.956915][ T3401] hid-generic 0000:0000:0000.0027: item fetching failed at offset 4/35 [ 232.994618][ T3401] hid-generic 0000:0000:0000.0027: probe with driver hid-generic failed with error -22 [ 233.021031][T30359] loop4: detected capacity change from 0 to 8192 [ 233.039122][T30550] loop1: detected capacity change from 0 to 128 [ 233.068929][T30553] loop0: detected capacity change from 0 to 128 [ 233.098328][T30553] FAT-fs (loop0): Directory bread(block 32) failed [ 233.106811][T30554] loop3: detected capacity change from 0 to 128 [ 233.116476][T30550] checksum_tg_check: 18 callbacks suppressed [ 233.116490][T30550] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 233.117846][T30553] FAT-fs (loop0): Directory bread(block 33) failed [ 233.140623][T30553] FAT-fs (loop0): Directory bread(block 34) failed [ 233.148359][T30553] FAT-fs (loop0): Directory bread(block 35) failed [ 233.154980][T30553] FAT-fs (loop0): Directory bread(block 36) failed [ 233.160466][T30554] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 233.162077][T30553] FAT-fs (loop0): Directory bread(block 37) failed [ 233.174789][T30553] FAT-fs (loop0): Directory bread(block 38) failed [ 233.181349][T30553] FAT-fs (loop0): Directory bread(block 39) failed [ 233.188066][T30553] FAT-fs (loop0): Directory bread(block 40) failed [ 233.194830][T30553] FAT-fs (loop0): Directory bread(block 41) failed [ 233.256610][T30659] loop3: detected capacity change from 0 to 1764 [ 233.267728][T30659] siw: device registration error -23 [ 233.324063][T30553] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 233.331837][T30553] FAT-fs (loop0): Filesystem has been set read-only [ 233.386928][T30766] loop2: detected capacity change from 0 to 128 [ 233.430800][T30752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3059'. [ 233.452163][T30766] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 233.470620][T30771] loop3: detected capacity change from 0 to 128 [ 233.488156][ T3401] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 233.495666][ T3401] hid-generic 0000:0000:0000.0028: item fetching failed at offset 4/35 [ 233.502472][T30771] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 233.504688][ T3401] hid-generic 0000:0000:0000.0028: probe with driver hid-generic failed with error -22 [ 233.556687][T30773] loop2: detected capacity change from 0 to 128 [ 233.572132][T30775] loop3: detected capacity change from 0 to 128 [ 233.574659][ T9] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 233.586012][ T9] hid-generic 0000:0000:0000.0029: item fetching failed at offset 4/35 [ 233.596706][T30764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.602361][T30773] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 233.614450][T30764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.625507][ T10] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 233.633204][ T10] hid-generic 0000:0000:0000.002A: item fetching failed at offset 4/35 [ 233.645161][T30769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.647195][ T9] hid-generic 0000:0000:0000.0029: probe with driver hid-generic failed with error -22 [ 233.664972][T30769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.666022][T30775] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 233.679432][ T10] hid-generic 0000:0000:0000.002A: probe with driver hid-generic failed with error -22 [ 233.708631][T30764] loop1: detected capacity change from 0 to 8192 [ 233.764472][T30769] loop0: detected capacity change from 0 to 8192 [ 233.775917][T30779] loop3: detected capacity change from 0 to 128 [ 233.812517][ T10] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 233.820013][ T10] hid-generic 0000:0000:0000.002B: item fetching failed at offset 4/35 [ 233.854362][T30779] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 233.868480][ T10] hid-generic 0000:0000:0000.002B: probe with driver hid-generic failed with error -22 [ 233.916148][T30783] loop3: detected capacity change from 0 to 1764 [ 233.927206][T30783] siw: device registration error -23 [ 233.960042][T30777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.968754][T30777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.977569][T30781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.997608][T30781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.018771][T30777] loop4: detected capacity change from 0 to 8192 [ 234.065193][T30781] loop2: detected capacity change from 0 to 8192 [ 234.227612][T30785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.236133][T30785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.268484][T30785] loop3: detected capacity change from 0 to 8192 [ 234.522216][T30892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3073'. [ 234.622418][T30790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.636455][T30790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.639538][T30899] loop2: detected capacity change from 0 to 128 [ 234.670795][ T9] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 234.678318][ T9] hid-generic 0000:0000:0000.002C: item fetching failed at offset 4/35 [ 234.691426][ T9] hid-generic 0000:0000:0000.002C: probe with driver hid-generic failed with error -22 [ 234.701407][T30790] loop0: detected capacity change from 0 to 8192 [ 234.703786][T30899] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 234.749121][T30895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.764237][T30895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.784453][T30901] loop2: detected capacity change from 0 to 128 [ 234.791626][T30897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.800057][T30897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.810245][T30895] loop1: detected capacity change from 0 to 8192 [ 234.835217][ T10] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 234.842673][ T10] hid-generic 0000:0000:0000.002D: item fetching failed at offset 4/35 [ 234.862659][ T10] hid-generic 0000:0000:0000.002D: probe with driver hid-generic failed with error -22 [ 234.878475][T30901] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 234.926132][T30897] loop4: detected capacity change from 0 to 8192 [ 234.958677][T30905] loop3: detected capacity change from 0 to 1764 [ 234.983365][T30905] siw: device registration error -23 [ 235.045980][T30909] loop3: detected capacity change from 0 to 128 [ 235.058022][T30909] FAT-fs (loop3): Directory bread(block 32) failed [ 235.065753][T30909] FAT-fs (loop3): Directory bread(block 33) failed [ 235.072395][T30909] FAT-fs (loop3): Directory bread(block 34) failed [ 235.079004][T30909] FAT-fs (loop3): Directory bread(block 35) failed [ 235.086311][T30909] FAT-fs (loop3): Directory bread(block 36) failed [ 235.092932][T30909] FAT-fs (loop3): Directory bread(block 37) failed [ 235.099481][T30909] FAT-fs (loop3): Directory bread(block 38) failed [ 235.106029][T30909] FAT-fs (loop3): Directory bread(block 39) failed [ 235.112642][T30909] FAT-fs (loop3): Directory bread(block 40) failed [ 235.119191][T30909] FAT-fs (loop3): Directory bread(block 41) failed [ 235.180971][T30907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.189575][T30907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.226474][T30907] loop2: detected capacity change from 0 to 8192 [ 235.426644][T31115] loop1: detected capacity change from 0 to 128 [ 235.452140][ T10] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 235.459631][ T10] hid-generic 0000:0000:0000.002E: item fetching failed at offset 4/35 [ 235.473257][T31115] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 235.480475][ T10] hid-generic 0000:0000:0000.002E: probe with driver hid-generic failed with error -22 [ 235.502911][T31011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.512997][T31011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.592726][T31011] loop0: detected capacity change from 0 to 8192 [ 235.602457][T31319] loop4: detected capacity change from 0 to 128 [ 235.639265][ T10] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 235.646765][ T10] hid-generic 0000:0000:0000.002F: item fetching failed at offset 4/35 [ 235.681159][ T10] hid-generic 0000:0000:0000.002F: probe with driver hid-generic failed with error -22 [ 235.717116][T31327] loop3: detected capacity change from 0 to 128 [ 235.737063][ T10] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 235.744533][ T10] hid-generic 0000:0000:0000.0030: item fetching failed at offset 4/35 [ 235.761005][ T10] hid-generic 0000:0000:0000.0030: probe with driver hid-generic failed with error -22 [ 235.806431][T31331] loop2: detected capacity change from 0 to 128 [ 235.837116][ T1061] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 235.844692][ T1061] hid-generic 0000:0000:0000.0031: item fetching failed at offset 4/35 [ 235.854755][T31323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.856780][ T1061] hid-generic 0000:0000:0000.0031: probe with driver hid-generic failed with error -22 [ 235.865474][T31323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.920542][T31323] loop1: detected capacity change from 0 to 8192 [ 235.920729][T31480] loop3: detected capacity change from 0 to 128 [ 235.988850][ T1061] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 235.996324][ T1061] hid-generic 0000:0000:0000.0032: item fetching failed at offset 4/35 [ 236.035512][ T1061] hid-generic 0000:0000:0000.0032: probe with driver hid-generic failed with error -22 [ 236.055249][T31535] loop2: detected capacity change from 0 to 1764 [ 236.068571][T31535] siw: device registration error -23 [ 236.093877][T31539] loop3: detected capacity change from 0 to 128 [ 236.164002][T31541] loop2: detected capacity change from 0 to 128 [ 236.199952][ T1061] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 236.207420][ T1061] hid-generic 0000:0000:0000.0033: item fetching failed at offset 4/35 [ 236.228108][ T1061] hid-generic 0000:0000:0000.0033: probe with driver hid-generic failed with error -22 [ 236.239803][T31546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.249789][T31546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.269442][T31537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.283293][T31537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.288260][T31546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3099'. [ 236.322665][T31537] loop4: detected capacity change from 0 to 8192 [ 236.605765][T31752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.614658][T31752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.614759][T31754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.631439][T31754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.660602][T31752] loop3: detected capacity change from 0 to 8192 [ 236.673144][T31754] loop2: detected capacity change from 0 to 8192 [ 236.789172][T31756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.797706][T31756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.830333][T31756] loop1: detected capacity change from 0 to 8192 [ 236.992732][T31861] loop4: detected capacity change from 0 to 128 [ 237.008534][ T10] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 237.016064][ T10] hid-generic 0000:0000:0000.0034: item fetching failed at offset 4/35 [ 237.025330][ T10] hid-generic 0000:0000:0000.0034: probe with driver hid-generic failed with error -22 [ 237.269328][T32065] loop4: detected capacity change from 0 to 128 [ 237.282627][T32069] loop3: detected capacity change from 0 to 128 [ 237.296506][ T10] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 237.304005][ T10] hid-generic 0000:0000:0000.0035: item fetching failed at offset 4/35 [ 237.311653][ T8610] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 237.319650][ T8610] hid-generic 0000:0000:0000.0036: item fetching failed at offset 4/35 [ 237.324674][ T10] hid-generic 0000:0000:0000.0035: probe with driver hid-generic failed with error -22 [ 237.335834][ T8610] hid-generic 0000:0000:0000.0036: probe with driver hid-generic failed with error -22 [ 237.381241][ T29] kauditd_printk_skb: 2355 callbacks suppressed [ 237.381281][ T29] audit: type=1326 audit(1753657441.235:20422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32064 comm="syz.4.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 237.406400][T32071] loop1: detected capacity change from 0 to 1764 [ 237.411255][ T29] audit: type=1326 audit(1753657441.235:20423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32064 comm="syz.4.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 237.441191][ T29] audit: type=1326 audit(1753657441.235:20424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32064 comm="syz.4.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 237.465131][ T29] audit: type=1326 audit(1753657441.235:20425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32064 comm="syz.4.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 237.488974][ T29] audit: type=1326 audit(1753657441.235:20426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32064 comm="syz.4.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 237.512614][ T29] audit: type=1326 audit(1753657441.235:20427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32064 comm="syz.4.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 237.538044][T32067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.562959][ T29] audit: type=1326 audit(1753657441.425:20428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32072 comm="syz.4.3112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 237.573117][T32067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.597547][ T29] audit: type=1326 audit(1753657441.425:20429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32072 comm="syz.4.3112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 237.621281][ T29] audit: type=1326 audit(1753657441.425:20430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32072 comm="syz.4.3112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 237.645006][ T29] audit: type=1326 audit(1753657441.425:20431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32072 comm="syz.4.3112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 237.674141][T32067] loop2: detected capacity change from 0 to 8192 [ 237.685221][T32075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3111'. [ 237.942076][T32280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.950576][T32280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.958985][T32279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.967649][T32279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.976084][T32282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.991440][T32282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.001908][T32280] loop3: detected capacity change from 0 to 8192 [ 238.039560][T32279] loop4: detected capacity change from 0 to 8192 [ 238.084783][T32282] loop1: detected capacity change from 0 to 8192 [ 238.303860][T32284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3116'. [ 238.329499][T32286] loop2: detected capacity change from 0 to 128 [ 238.349558][ T8610] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 238.354213][T32286] checksum_tg_check: 9 callbacks suppressed [ 238.354229][T32286] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 238.357054][ T8610] hid-generic 0000:0000:0000.0037: item fetching failed at offset 4/35 [ 238.378107][ T8610] hid-generic 0000:0000:0000.0037: probe with driver hid-generic failed with error -22 [ 238.432517][T32288] loop2: detected capacity change from 0 to 128 [ 238.447917][ T10] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 238.454820][T32288] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 238.455456][ T10] hid-generic 0000:0000:0000.0038: item fetching failed at offset 4/35 [ 238.470147][ T10] hid-generic 0000:0000:0000.0038: probe with driver hid-generic failed with error -22 [ 238.647583][T32393] loop3: detected capacity change from 0 to 128 [ 238.660563][T32394] loop2: detected capacity change from 0 to 1764 [ 238.669731][T32394] siw: device registration error -23 [ 238.713865][ T8610] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 238.721418][ T8610] hid-generic 0000:0000:0000.0039: item fetching failed at offset 4/35 [ 238.737147][T32393] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 238.744478][ T8610] hid-generic 0000:0000:0000.0039: probe with driver hid-generic failed with error -22 [ 238.816183][T32402] loop3: detected capacity change from 0 to 1764 [ 238.826716][T32404] loop2: detected capacity change from 0 to 128 [ 238.839075][T32402] siw: device registration error -23 [ 238.846173][ T8610] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 238.853715][ T8610] hid-generic 0000:0000:0000.003A: item fetching failed at offset 4/35 [ 238.866821][T32404] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 238.873849][ T8610] hid-generic 0000:0000:0000.003A: probe with driver hid-generic failed with error -22 [ 238.905567][T32396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.923740][T32396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.937770][T32398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.962437][T32398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.972627][T32396] loop4: detected capacity change from 0 to 8192 [ 238.988645][T32408] loop3: detected capacity change from 0 to 128 [ 239.020940][ T10] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 239.028394][ T10] hid-generic 0000:0000:0000.003B: item fetching failed at offset 4/35 [ 239.044179][T32408] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 239.050829][ T10] hid-generic 0000:0000:0000.003B: probe with driver hid-generic failed with error -22 [ 239.069560][T32398] loop1: detected capacity change from 0 to 8192 [ 239.173021][T32406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.183681][T32406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.234657][T32406] loop2: detected capacity change from 0 to 8192 [ 239.267754][T32512] loop0: detected capacity change from 0 to 128 [ 239.283383][ T10] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 239.287750][T32514] loop3: detected capacity change from 0 to 128 [ 239.290867][ T10] hid-generic 0000:0000:0000.003C: item fetching failed at offset 4/35 [ 239.310014][T32512] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 239.316552][ T10] hid-generic 0000:0000:0000.003C: probe with driver hid-generic failed with error -22 [ 239.341719][ T3401] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 239.349140][ T3401] hid-generic 0000:0000:0000.003D: item fetching failed at offset 4/35 [ 239.351911][T32514] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 239.357982][ T3401] hid-generic 0000:0000:0000.003D: probe with driver hid-generic failed with error -22 [ 239.412497][T32518] loop3: detected capacity change from 0 to 128 [ 239.428336][ T10] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 239.435850][ T10] hid-generic 0000:0000:0000.003E: item fetching failed at offset 4/35 [ 239.445006][T32518] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 239.446036][ T10] hid-generic 0000:0000:0000.003E: probe with driver hid-generic failed with error -22 [ 239.488877][T32520] loop3: detected capacity change from 0 to 128 [ 239.504471][ T3401] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 239.512094][ T3401] hid-generic 0000:0000:0000.003F: item fetching failed at offset 4/35 [ 239.513555][T32520] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 239.520866][ T3401] hid-generic 0000:0000:0000.003F: probe with driver hid-generic failed with error -22 [ 239.574019][T32522] loop3: detected capacity change from 0 to 1764 [ 239.598765][T32522] siw: device registration error -23 [ 239.609662][T32516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.626100][T32516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.704248][T32516] loop0: detected capacity change from 0 to 8192 [ 239.743442][T32530] loop3: detected capacity change from 0 to 128 [ 239.761327][ T3401] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 239.768752][ T3401] hid-generic 0000:0000:0000.0040: item fetching failed at offset 4/35 [ 239.777393][ T3401] hid-generic 0000:0000:0000.0040: probe with driver hid-generic failed with error -22 [ 239.780525][T32530] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 239.883314][T32526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.895958][T32526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.938599][T32526] loop4: detected capacity change from 0 to 8192 [ 239.979315][T32528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.994579][T32528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.035471][T32532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.060441][T32532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.075570][T32528] loop1: detected capacity change from 0 to 8192 [ 240.086796][T32636] loop2: detected capacity change from 0 to 128 [ 240.111420][ T10] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 240.118921][ T10] hid-generic 0000:0000:0000.0041: item fetching failed at offset 4/35 [ 240.119064][T32532] loop3: detected capacity change from 0 to 8192 [ 240.175452][ T10] hid-generic 0000:0000:0000.0041: probe with driver hid-generic failed with error -22 [ 240.212914][T32638] loop2: detected capacity change from 0 to 128 [ 240.230877][ T10] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 240.238405][ T10] hid-generic 0000:0000:0000.0042: item fetching failed at offset 4/35 [ 240.247400][ T10] hid-generic 0000:0000:0000.0042: probe with driver hid-generic failed with error -22 [ 240.279911][T32640] loop2: detected capacity change from 0 to 128 [ 240.296156][ T8610] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 240.303614][ T8610] hid-generic 0000:0000:0000.0043: item fetching failed at offset 4/35 [ 240.313809][ T8610] hid-generic 0000:0000:0000.0043: probe with driver hid-generic failed with error -22 [ 240.364476][T32644] loop2: detected capacity change from 0 to 128 [ 240.381391][ T8610] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 240.388819][ T8610] hid-generic 0000:0000:0000.0044: item fetching failed at offset 4/35 [ 240.397540][ T8610] hid-generic 0000:0000:0000.0044: probe with driver hid-generic failed with error -22 [ 240.438351][T32646] loop2: detected capacity change from 0 to 128 [ 240.450146][T32646] FAT-fs (loop2): Directory bread(block 32) failed [ 240.457748][T32646] FAT-fs (loop2): Directory bread(block 33) failed [ 240.464973][T32646] FAT-fs (loop2): Directory bread(block 34) failed [ 240.472137][T32646] FAT-fs (loop2): Directory bread(block 35) failed [ 240.478658][T32646] FAT-fs (loop2): Directory bread(block 36) failed [ 240.485253][T32646] FAT-fs (loop2): Directory bread(block 37) failed [ 240.491810][T32646] FAT-fs (loop2): Directory bread(block 38) failed [ 240.498369][T32646] FAT-fs (loop2): Directory bread(block 39) failed [ 240.505110][T32646] FAT-fs (loop2): Directory bread(block 40) failed [ 240.511769][T32646] FAT-fs (loop2): Directory bread(block 41) failed [ 240.545370][T32642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.553981][T32642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.586426][T32642] loop0: detected capacity change from 0 to 8192 [ 240.737564][T32648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.749523][T32648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.803936][T32648] loop4: detected capacity change from 0 to 8192 [ 241.045992][T32753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.054568][T32753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.055022][T32763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.072669][T32763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.095013][T32753] loop1: detected capacity change from 0 to 8192 [ 241.102326][ T393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.119675][ T393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.127705][T32763] loop3: detected capacity change from 0 to 8192 [ 241.203841][ T393] loop2: detected capacity change from 0 to 8192 [ 241.423850][ T395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.432509][ T395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.465425][ T395] loop0: detected capacity change from 0 to 8192 [ 241.594591][ T397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.603088][ T397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.635325][ T397] loop4: detected capacity change from 0 to 8192 [ 241.753009][ T401] loop3: detected capacity change from 0 to 128 [ 241.780691][ T8610] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 241.788212][ T8610] hid-generic 0000:0000:0000.0045: item fetching failed at offset 4/35 [ 241.798379][ T8610] hid-generic 0000:0000:0000.0045: probe with driver hid-generic failed with error -22 [ 241.808456][ T403] loop2: detected capacity change from 0 to 128 [ 241.829504][ T8610] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 241.837024][ T8610] hid-generic 0000:0000:0000.0046: item fetching failed at offset 4/35 [ 241.845710][ T8610] hid-generic 0000:0000:0000.0046: probe with driver hid-generic failed with error -22 [ 241.886733][ T399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.902309][ T399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.939875][ T399] loop1: detected capacity change from 0 to 8192 [ 242.039368][ T517] loop0: detected capacity change from 0 to 128 [ 242.056068][ T10] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 242.063570][ T10] hid-generic 0000:0000:0000.0047: item fetching failed at offset 4/35 [ 242.073087][ T10] hid-generic 0000:0000:0000.0047: probe with driver hid-generic failed with error -22 [ 242.111094][ T513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.122706][ T513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.123771][ T515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.149235][ T515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.166165][ T513] loop2: detected capacity change from 0 to 8192 [ 242.197613][ T515] loop3: detected capacity change from 0 to 8192 [ 242.206999][ T520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.266965][ T520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.290998][ T520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3161'. [ 242.478827][ T522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.487481][ T522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.534730][ T522] loop4: detected capacity change from 0 to 8192 [ 242.546886][ T29] kauditd_printk_skb: 1881 callbacks suppressed [ 242.546904][ T29] audit: type=1326 audit(1753657446.405:22313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=521 comm="syz.4.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 242.577081][ T29] audit: type=1326 audit(1753657446.415:22314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=521 comm="syz.4.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 242.600640][ T29] audit: type=1326 audit(1753657446.415:22315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=521 comm="syz.4.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 242.624066][ T29] audit: type=1326 audit(1753657446.415:22316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=521 comm="syz.4.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 242.647503][ T29] audit: type=1326 audit(1753657446.415:22317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=521 comm="syz.4.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 242.670919][ T29] audit: type=1326 audit(1753657446.415:22318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=521 comm="syz.4.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 242.694407][ T29] audit: type=1326 audit(1753657446.415:22319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=521 comm="syz.4.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 242.717966][ T29] audit: type=1326 audit(1753657446.415:22320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=521 comm="syz.4.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 242.719195][ T526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.741354][ T29] audit: type=1326 audit(1753657446.415:22321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=521 comm="syz.4.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 242.741384][ T29] audit: type=1326 audit(1753657446.415:22322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=521 comm="syz.4.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 242.754130][ T526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.852178][ T526] loop1: detected capacity change from 0 to 8192 [ 242.890927][ T530] loop3: detected capacity change from 0 to 128 [ 242.922383][ T10] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 242.929810][ T10] hid-generic 0000:0000:0000.0048: item fetching failed at offset 4/35 [ 242.944871][ T10] hid-generic 0000:0000:0000.0048: probe with driver hid-generic failed with error -22 [ 242.992282][ T532] loop3: detected capacity change from 0 to 128 [ 243.010366][ T8610] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 243.017938][ T8610] hid-generic 0000:0000:0000.0049: item fetching failed at offset 4/35 [ 243.027657][ T8610] hid-generic 0000:0000:0000.0049: probe with driver hid-generic failed with error -22 [ 243.045624][ T528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.054303][ T528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.096417][ T528] loop2: detected capacity change from 0 to 8192 [ 243.284299][ T534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.293104][ T534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.334381][ T534] loop3: detected capacity change from 0 to 8192 [ 243.434082][ T538] loop1: detected capacity change from 0 to 128 [ 243.449986][ T10] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 243.455131][ T538] checksum_tg_check: 8 callbacks suppressed [ 243.455148][ T538] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 243.457550][ T10] hid-generic 0000:0000:0000.004A: item fetching failed at offset 4/35 [ 243.478137][ T10] hid-generic 0000:0000:0000.004A: probe with driver hid-generic failed with error -22 [ 243.545894][ T536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.554486][ T536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.585725][ T536] loop4: detected capacity change from 0 to 8192 [ 243.708255][ T540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.716824][ T540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.748388][ T540] loop1: detected capacity change from 0 to 8192 [ 243.851626][ T542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.860233][ T542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.898286][ T542] loop2: detected capacity change from 0 to 8192 [ 243.909606][ T544] loop3: detected capacity change from 0 to 128 [ 243.931609][ T10] hid-generic 0000:0000:0000.004B: unknown main item tag 0x0 [ 243.939077][ T10] hid-generic 0000:0000:0000.004B: item fetching failed at offset 4/35 [ 243.956375][ T544] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 243.967061][ T10] hid-generic 0000:0000:0000.004B: probe with driver hid-generic failed with error -22 [ 244.010841][ T546] loop3: detected capacity change from 0 to 128 [ 244.026443][ T10] hid-generic 0000:0000:0000.004C: unknown main item tag 0x0 [ 244.033932][ T10] hid-generic 0000:0000:0000.004C: item fetching failed at offset 4/35 [ 244.035238][ T546] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 244.043938][ T10] hid-generic 0000:0000:0000.004C: probe with driver hid-generic failed with error -22 [ 244.088955][ T548] loop3: detected capacity change from 0 to 128 [ 244.103992][ T3401] hid-generic 0000:0000:0000.004D: unknown main item tag 0x0 [ 244.111488][ T3401] hid-generic 0000:0000:0000.004D: item fetching failed at offset 4/35 [ 244.120275][ T3401] hid-generic 0000:0000:0000.004D: probe with driver hid-generic failed with error -22 [ 244.167062][ T550] loop3: detected capacity change from 0 to 128 [ 244.188611][ T8610] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 244.196135][ T8610] hid-generic 0000:0000:0000.004E: item fetching failed at offset 4/35 [ 244.205658][ T8610] hid-generic 0000:0000:0000.004E: probe with driver hid-generic failed with error -22 [ 244.268869][ T657] loop4: detected capacity change from 0 to 128 [ 244.286288][ T10] hid-generic 0000:0000:0000.004F: unknown main item tag 0x0 [ 244.293904][ T10] hid-generic 0000:0000:0000.004F: item fetching failed at offset 4/35 [ 244.307377][ T657] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 244.315119][ T10] hid-generic 0000:0000:0000.004F: probe with driver hid-generic failed with error -22 [ 244.335360][ T743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3179'. [ 244.369012][ T761] loop3: detected capacity change from 0 to 128 [ 244.394489][ T765] loop4: detected capacity change from 0 to 128 [ 244.399072][ T10] hid-generic 0000:0000:0000.0050: unknown main item tag 0x0 [ 244.408308][ T10] hid-generic 0000:0000:0000.0050: item fetching failed at offset 4/35 [ 244.421121][ T8610] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 244.422926][ T761] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 244.428563][ T8610] hid-generic 0000:0000:0000.0051: item fetching failed at offset 4/35 [ 244.438379][ T765] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 244.447961][ T10] hid-generic 0000:0000:0000.0050: probe with driver hid-generic failed with error -22 [ 244.455053][ T8610] hid-generic 0000:0000:0000.0051: probe with driver hid-generic failed with error -22 [ 244.507190][ T767] loop2: detected capacity change from 0 to 128 [ 244.524846][ T10] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 244.532341][ T10] hid-generic 0000:0000:0000.0052: item fetching failed at offset 4/35 [ 244.534785][ T767] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 244.543565][ T10] hid-generic 0000:0000:0000.0052: probe with driver hid-generic failed with error -22 [ 244.568106][ T763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.583671][ T763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.617853][ T769] loop4: detected capacity change from 0 to 128 [ 244.618838][ T771] loop3: detected capacity change from 0 to 128 [ 244.651403][ T773] loop2: detected capacity change from 0 to 128 [ 244.652681][ T10] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0 [ 244.665201][ T10] hid-generic 0000:0000:0000.0053: item fetching failed at offset 4/35 [ 244.678838][ T8610] hid-generic 0000:0000:0000.0054: unknown main item tag 0x0 [ 244.686405][ T8610] hid-generic 0000:0000:0000.0054: item fetching failed at offset 4/35 [ 244.692454][ T771] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 244.711129][ T763] loop1: detected capacity change from 0 to 8192 [ 244.717873][ T773] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 244.731464][ T3401] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0 [ 244.738887][ T3401] hid-generic 0000:0000:0000.0055: item fetching failed at offset 4/35 [ 244.740600][ T10] hid-generic 0000:0000:0000.0053: probe with driver hid-generic failed with error -22 [ 244.748904][ T8610] hid-generic 0000:0000:0000.0054: probe with driver hid-generic failed with error -22 [ 244.767613][ T3401] hid-generic 0000:0000:0000.0055: probe with driver hid-generic failed with error -22 [ 244.777809][ T769] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 244.874670][ T878] loop2: detected capacity change from 0 to 128 [ 244.894026][ T3401] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 244.901456][ T3401] hid-generic 0000:0000:0000.0056: item fetching failed at offset 4/35 [ 244.910209][ T3401] hid-generic 0000:0000:0000.0056: probe with driver hid-generic failed with error -22 [ 244.943240][ T883] loop3: detected capacity change from 0 to 1764 [ 244.953941][ T883] siw: device registration error -23 [ 244.964283][ T885] loop2: detected capacity change from 0 to 128 [ 244.994182][ T10] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 245.001656][ T10] hid-generic 0000:0000:0000.0057: item fetching failed at offset 4/35 [ 245.027039][ T10] hid-generic 0000:0000:0000.0057: probe with driver hid-generic failed with error -22 [ 245.056352][ T887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3192'. [ 245.075728][ T880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.091741][ T880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.099771][ T891] loop3: detected capacity change from 0 to 128 [ 245.122647][ T3401] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0 [ 245.130107][ T3401] hid-generic 0000:0000:0000.0058: item fetching failed at offset 4/35 [ 245.148833][ T880] loop4: detected capacity change from 0 to 8192 [ 245.155353][ T3401] hid-generic 0000:0000:0000.0058: probe with driver hid-generic failed with error -22 [ 245.201054][ T993] loop0: detected capacity change from 0 to 128 [ 245.227923][ T10] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 245.235350][ T10] hid-generic 0000:0000:0000.0059: item fetching failed at offset 4/35 [ 245.251150][ T10] hid-generic 0000:0000:0000.0059: probe with driver hid-generic failed with error -22 [ 245.268646][ T997] loop3: detected capacity change from 0 to 128 [ 245.284692][ T10] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 245.292153][ T10] hid-generic 0000:0000:0000.005A: item fetching failed at offset 4/35 [ 245.305999][ T10] hid-generic 0000:0000:0000.005A: probe with driver hid-generic failed with error -22 [ 245.332196][ T999] loop0: detected capacity change from 0 to 128 [ 245.359064][ T10] hid-generic 0000:0000:0000.005B: unknown main item tag 0x0 [ 245.366581][ T10] hid-generic 0000:0000:0000.005B: item fetching failed at offset 4/35 [ 245.398647][ T10] hid-generic 0000:0000:0000.005B: probe with driver hid-generic failed with error -22 [ 245.413141][ T1003] loop1: detected capacity change from 0 to 128 [ 245.429427][ T8610] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 245.436914][ T8610] hid-generic 0000:0000:0000.005C: item fetching failed at offset 4/35 [ 245.454231][ T1005] loop0: detected capacity change from 0 to 128 [ 245.460858][ T8610] hid-generic 0000:0000:0000.005C: probe with driver hid-generic failed with error -22 [ 245.463554][ T995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.480191][ T995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.502921][ T8610] hid-generic 0000:0000:0000.005D: unknown main item tag 0x0 [ 245.510467][ T8610] hid-generic 0000:0000:0000.005D: item fetching failed at offset 4/35 [ 245.534041][ T8610] hid-generic 0000:0000:0000.005D: probe with driver hid-generic failed with error -22 [ 245.544442][ T995] loop2: detected capacity change from 0 to 8192 [ 245.606713][ T1007] loop1: detected capacity change from 0 to 128 [ 245.617766][ T1002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.637725][ T1009] loop0: detected capacity change from 0 to 1764 [ 245.639779][ T10] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 245.644294][ T1002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.651566][ T10] hid-generic 0000:0000:0000.005E: item fetching failed at offset 4/35 [ 245.672508][ T1009] siw: device registration error -23 [ 245.713116][ T10] hid-generic 0000:0000:0000.005E: probe with driver hid-generic failed with error -22 [ 245.754635][ T1002] loop3: detected capacity change from 0 to 8192 [ 245.815522][ T1017] loop0: detected capacity change from 0 to 128 [ 245.831086][ T10] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 245.838633][ T10] hid-generic 0000:0000:0000.005F: item fetching failed at offset 4/35 [ 245.847915][ T10] hid-generic 0000:0000:0000.005F: probe with driver hid-generic failed with error -22 [ 245.897906][ T1122] loop4: detected capacity change from 0 to 128 [ 245.905492][ T1120] loop0: detected capacity change from 0 to 128 [ 245.920741][ T8610] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 245.928177][ T8610] hid-generic 0000:0000:0000.0060: item fetching failed at offset 4/35 [ 245.943258][ T36] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 245.950854][ T36] hid-generic 0000:0000:0000.0061: item fetching failed at offset 4/35 [ 245.959610][ T8610] hid-generic 0000:0000:0000.0060: probe with driver hid-generic failed with error -22 [ 245.965976][ T1014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.969528][ T36] hid-generic 0000:0000:0000.0061: probe with driver hid-generic failed with error -22 [ 245.978127][ T1014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.032325][ T1124] loop4: detected capacity change from 0 to 128 [ 246.056295][ T10] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 246.063745][ T10] hid-generic 0000:0000:0000.0062: item fetching failed at offset 4/35 [ 246.074682][ T1014] loop1: detected capacity change from 0 to 8192 [ 246.085583][ T10] hid-generic 0000:0000:0000.0062: probe with driver hid-generic failed with error -22 [ 246.254054][ T1126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.262687][ T1126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.295763][ T1126] loop0: detected capacity change from 0 to 8192 [ 246.341259][ T1128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.351069][ T1128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.390001][ T1134] loop3: detected capacity change from 0 to 128 [ 246.398000][ T1128] loop4: detected capacity change from 0 to 8192 [ 246.405918][ T1130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.413226][ T3401] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 246.421670][ T3401] hid-generic 0000:0000:0000.0063: item fetching failed at offset 4/35 [ 246.425867][ T1130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.436817][ T3401] hid-generic 0000:0000:0000.0063: probe with driver hid-generic failed with error -22 [ 246.490309][ T1130] loop2: detected capacity change from 0 to 8192 [ 246.552438][ T1237] loop3: detected capacity change from 0 to 128 [ 246.568163][ T3400] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 246.575639][ T3400] hid-generic 0000:0000:0000.0064: item fetching failed at offset 4/35 [ 246.584185][ T3400] hid-generic 0000:0000:0000.0064: probe with driver hid-generic failed with error -22 [ 246.617003][ T1239] loop3: detected capacity change from 0 to 128 [ 246.631597][ T3400] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 246.639015][ T3400] hid-generic 0000:0000:0000.0065: item fetching failed at offset 4/35 [ 246.647631][ T3400] hid-generic 0000:0000:0000.0065: probe with driver hid-generic failed with error -22 [ 246.690885][ T1241] loop1: detected capacity change from 0 to 128 [ 246.709710][ T1243] loop3: detected capacity change from 0 to 128 [ 246.717366][ T36] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 246.724939][ T36] hid-generic 0000:0000:0000.0066: item fetching failed at offset 4/35 [ 246.733788][ T36] hid-generic 0000:0000:0000.0066: probe with driver hid-generic failed with error -22 [ 246.739001][ T3400] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 246.750887][ T3400] hid-generic 0000:0000:0000.0067: item fetching failed at offset 4/35 [ 246.766446][ T3400] hid-generic 0000:0000:0000.0067: probe with driver hid-generic failed with error -22 [ 246.818545][ T1248] loop3: detected capacity change from 0 to 128 [ 246.834286][ T3400] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 246.841756][ T3400] hid-generic 0000:0000:0000.0068: item fetching failed at offset 4/35 [ 246.850165][ T3400] hid-generic 0000:0000:0000.0068: probe with driver hid-generic failed with error -22 [ 246.903981][ T1348] loop0: detected capacity change from 0 to 128 [ 246.925497][ T3400] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 246.932968][ T3400] hid-generic 0000:0000:0000.0069: item fetching failed at offset 4/35 [ 246.945774][ T1366] loop1: detected capacity change from 0 to 128 [ 246.953192][ T3400] hid-generic 0000:0000:0000.0069: probe with driver hid-generic failed with error -22 [ 246.976066][ T10] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 246.983618][ T10] hid-generic 0000:0000:0000.006A: item fetching failed at offset 4/35 [ 246.993858][ T10] hid-generic 0000:0000:0000.006A: probe with driver hid-generic failed with error -22 [ 247.078326][ T1374] loop2: detected capacity change from 0 to 128 [ 247.094226][ T1291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.095036][ T36] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 247.110097][ T1291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.110152][ T36] hid-generic 0000:0000:0000.006B: item fetching failed at offset 4/35 [ 247.136469][ T36] hid-generic 0000:0000:0000.006B: probe with driver hid-generic failed with error -22 [ 247.154040][ T1291] loop3: detected capacity change from 0 to 8192 [ 247.190214][ T1376] loop2: detected capacity change from 0 to 128 [ 247.214901][ T36] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 247.220902][ T1368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.222358][ T36] hid-generic 0000:0000:0000.006C: item fetching failed at offset 4/35 [ 247.233077][ T1368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.247138][ T36] hid-generic 0000:0000:0000.006C: probe with driver hid-generic failed with error -22 [ 247.247988][ T1370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.266373][ T1372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.275635][ T1370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.283904][ T1372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.334916][ T1378] loop2: detected capacity change from 0 to 128 [ 247.341902][ T1368] loop4: detected capacity change from 0 to 8192 [ 247.362196][ T3401] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 247.369808][ T3401] hid-generic 0000:0000:0000.006D: item fetching failed at offset 4/35 [ 247.399015][ T1370] loop0: detected capacity change from 0 to 8192 [ 247.405469][ T1372] loop1: detected capacity change from 0 to 8192 [ 247.405685][ T3401] hid-generic 0000:0000:0000.006D: probe with driver hid-generic failed with error -22 [ 247.503697][ T1480] loop2: detected capacity change from 0 to 128 [ 247.531034][ T3401] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 247.538503][ T3401] hid-generic 0000:0000:0000.006E: item fetching failed at offset 4/35 [ 247.547326][ T3401] hid-generic 0000:0000:0000.006E: probe with driver hid-generic failed with error -22 [ 247.560636][ T29] kauditd_printk_skb: 3451 callbacks suppressed [ 247.560646][ T29] audit: type=1326 audit(1753657451.415:25774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1479 comm="syz.2.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a364e9a9 code=0x7ffc0000 [ 247.592878][ T29] audit: type=1326 audit(1753657451.415:25775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1479 comm="syz.2.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f19a364e9a9 code=0x7ffc0000 [ 247.616424][ T29] audit: type=1326 audit(1753657451.415:25776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1479 comm="syz.2.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a364e9a9 code=0x7ffc0000 [ 247.639940][ T29] audit: type=1326 audit(1753657451.415:25777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1479 comm="syz.2.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f19a364e9a9 code=0x7ffc0000 [ 247.663441][ T29] audit: type=1326 audit(1753657451.425:25778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1479 comm="syz.2.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a364e9a9 code=0x7ffc0000 [ 247.687059][ T29] audit: type=1326 audit(1753657451.425:25779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1479 comm="syz.2.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19a364e9a9 code=0x7ffc0000 [ 247.710615][ T29] audit: type=1326 audit(1753657451.425:25780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1479 comm="syz.2.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a364e9a9 code=0x7ffc0000 [ 247.734112][ T29] audit: type=1326 audit(1753657451.425:25781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1479 comm="syz.2.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19a364e9a9 code=0x7ffc0000 [ 247.757782][ T29] audit: type=1326 audit(1753657451.425:25782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1479 comm="syz.2.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a364e9a9 code=0x7ffc0000 [ 247.792908][ T29] audit: type=1326 audit(1753657451.655:25783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1481 comm="syz.2.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a364e9a9 code=0x7ffc0000 [ 247.819785][ T1482] loop2: detected capacity change from 0 to 128 [ 247.849918][ T3401] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 247.857393][ T3401] hid-generic 0000:0000:0000.006F: item fetching failed at offset 4/35 [ 247.866306][ T3401] hid-generic 0000:0000:0000.006F: probe with driver hid-generic failed with error -22 [ 247.969596][ T1488] loop4: detected capacity change from 0 to 128 [ 247.986476][ T10] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 247.994088][ T10] hid-generic 0000:0000:0000.0070: item fetching failed at offset 4/35 [ 248.002884][ T10] hid-generic 0000:0000:0000.0070: probe with driver hid-generic failed with error -22 [ 248.039808][ T1490] loop4: detected capacity change from 0 to 1764 [ 248.049218][ T1484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.052438][ T1490] siw: device registration error -23 [ 248.081583][ T1484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.103302][ T1493] loop0: detected capacity change from 0 to 128 [ 248.110399][ T1486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.129890][ T1486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.180269][ T3401] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 248.187708][ T3401] hid-generic 0000:0000:0000.0071: item fetching failed at offset 4/35 [ 248.199124][ T1486] loop2: detected capacity change from 0 to 8192 [ 248.206134][ T1484] loop3: detected capacity change from 0 to 8192 [ 248.213113][ T3401] hid-generic 0000:0000:0000.0071: probe with driver hid-generic failed with error -22 [ 248.245987][ T1496] loop4: detected capacity change from 0 to 128 [ 248.305758][ T3401] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 248.313286][ T3401] hid-generic 0000:0000:0000.0072: item fetching failed at offset 4/35 [ 248.313653][ T1494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.343787][ T3401] hid-generic 0000:0000:0000.0072: probe with driver hid-generic failed with error -22 [ 248.352604][ T1494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.354593][ T1529] loop0: detected capacity change from 0 to 128 [ 248.385236][ T1061] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 248.392680][ T1061] hid-generic 0000:0000:0000.0073: item fetching failed at offset 4/35 [ 248.406014][ T1061] hid-generic 0000:0000:0000.0073: probe with driver hid-generic failed with error -22 [ 248.470192][ T1494] loop1: detected capacity change from 0 to 8192 [ 248.514128][ T1715] loop4: detected capacity change from 0 to 128 [ 248.537938][ T1061] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 248.545417][ T1061] hid-generic 0000:0000:0000.0074: item fetching failed at offset 4/35 [ 248.560146][ T1715] checksum_tg_check: 30 callbacks suppressed [ 248.560161][ T1715] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 248.574095][ T1061] hid-generic 0000:0000:0000.0074: probe with driver hid-generic failed with error -22 [ 248.628950][ T1718] loop4: detected capacity change from 0 to 128 [ 248.649742][ T3401] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 248.657227][ T3401] hid-generic 0000:0000:0000.0075: item fetching failed at offset 4/35 [ 248.674661][ T1718] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 248.683057][ T3401] hid-generic 0000:0000:0000.0075: probe with driver hid-generic failed with error -22 [ 248.698680][ T1652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.718549][ T1652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.852640][ T1652] loop2: detected capacity change from 0 to 8192 [ 249.017297][ T1821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.026747][ T1821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.063728][ T1821] loop4: detected capacity change from 0 to 8192 [ 249.167574][ T1823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.176686][ T1823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.211015][ T1823] loop3: detected capacity change from 0 to 8192 [ 249.275777][ T1825] loop1: detected capacity change from 0 to 128 [ 249.292112][ T1061] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 249.299644][ T1061] hid-generic 0000:0000:0000.0076: item fetching failed at offset 4/35 [ 249.309983][ T1825] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 249.350026][ T1061] hid-generic 0000:0000:0000.0076: probe with driver hid-generic failed with error -22 [ 249.381092][ T1829] loop1: detected capacity change from 0 to 128 [ 249.395900][ T3401] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 249.403355][ T3401] hid-generic 0000:0000:0000.0077: item fetching failed at offset 4/35 [ 249.406201][ T1829] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 249.412432][ T3401] hid-generic 0000:0000:0000.0077: probe with driver hid-generic failed with error -22 [ 249.565919][ T1827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.574430][ T1827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.607636][ T1827] loop0: detected capacity change from 0 to 8192 [ 249.645591][ T1837] loop4: detected capacity change from 0 to 128 [ 249.670949][ T3401] hid-generic 0000:0000:0000.0078: unknown main item tag 0x0 [ 249.673298][ T1833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.678405][ T3401] hid-generic 0000:0000:0000.0078: item fetching failed at offset 4/35 [ 249.687283][ T1833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.701735][ T1837] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 249.710635][ T3401] hid-generic 0000:0000:0000.0078: probe with driver hid-generic failed with error -22 [ 249.742775][ T1835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.751739][ T1835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.769956][ T1833] loop1: detected capacity change from 0 to 8192 [ 249.811155][ T1835] loop2: detected capacity change from 0 to 8192 [ 249.893483][ T1944] loop4: detected capacity change from 0 to 128 [ 249.914147][ T3401] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 249.918690][ T1944] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 249.921635][ T3401] hid-generic 0000:0000:0000.0079: item fetching failed at offset 4/35 [ 249.924472][ T3401] hid-generic 0000:0000:0000.0079: probe with driver hid-generic failed with error -22 [ 250.014195][ T1948] loop4: detected capacity change from 0 to 128 [ 250.032264][ T3401] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 250.039683][ T3401] hid-generic 0000:0000:0000.007A: item fetching failed at offset 4/35 [ 250.044734][ T1948] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 250.062132][ T3401] hid-generic 0000:0000:0000.007A: probe with driver hid-generic failed with error -22 [ 250.281935][ T2050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.290431][ T2050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.303793][ T2052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.312239][ T2052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.332771][ T2050] loop3: detected capacity change from 0 to 8192 [ 250.374361][ T2052] loop4: detected capacity change from 0 to 8192 [ 250.428056][ T2058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.437949][ T2058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.458592][ T2062] loop2: detected capacity change from 0 to 128 [ 250.478453][ T3400] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 250.485935][ T3400] hid-generic 0000:0000:0000.007B: item fetching failed at offset 4/35 [ 250.496765][ T2058] loop0: detected capacity change from 0 to 8192 [ 250.502323][ T2062] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 250.510671][ T3400] hid-generic 0000:0000:0000.007B: probe with driver hid-generic failed with error -22 [ 250.565773][ T2064] loop2: detected capacity change from 0 to 128 [ 250.582399][ T3400] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 250.589850][ T3400] hid-generic 0000:0000:0000.007C: item fetching failed at offset 4/35 [ 250.590065][ T2064] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 250.599048][ T3400] hid-generic 0000:0000:0000.007C: probe with driver hid-generic failed with error -22 [ 250.614752][ T2060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.623531][ T2060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.665754][ T2060] loop1: detected capacity change from 0 to 8192 [ 250.672498][ T2066] loop2: detected capacity change from 0 to 128 [ 250.693067][ T8610] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 250.700541][ T8610] hid-generic 0000:0000:0000.007D: item fetching failed at offset 4/35 [ 250.716591][ T2066] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 250.723228][ T8610] hid-generic 0000:0000:0000.007D: probe with driver hid-generic failed with error -22 [ 250.968325][ T2068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.977268][ T2068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.004222][ T2075] loop3: detected capacity change from 0 to 1764 [ 251.016538][ T2075] siw: device registration error -23 [ 251.029565][ T2068] loop2: detected capacity change from 0 to 8192 [ 251.130333][ T2079] loop3: detected capacity change from 0 to 128 [ 251.149337][ T8610] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 251.156790][ T8610] hid-generic 0000:0000:0000.007E: item fetching failed at offset 4/35 [ 251.166578][ T2077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3270'. [ 251.174255][ T8610] hid-generic 0000:0000:0000.007E: probe with driver hid-generic failed with error -22 [ 251.186627][ T2073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.197195][ T2073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.258439][ T2073] loop4: detected capacity change from 0 to 8192 [ 251.262898][ T2172] loop1: detected capacity change from 0 to 128 [ 251.285557][ T8610] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 251.293010][ T8610] hid-generic 0000:0000:0000.007F: item fetching failed at offset 4/35 [ 251.315180][ T8610] hid-generic 0000:0000:0000.007F: probe with driver hid-generic failed with error -22 [ 251.438693][ T2089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.447453][ T2089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.480094][ T2089] loop0: detected capacity change from 0 to 8192 [ 251.532890][ T2186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.541467][ T2186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.564174][ T2188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.575065][ T2188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.583014][ T2186] loop3: detected capacity change from 0 to 8192 [ 251.635369][ T2188] loop1: detected capacity change from 0 to 8192 [ 251.875942][ T2190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.884906][ T2190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.916576][ T2190] loop2: detected capacity change from 0 to 8192 [ 252.060316][ T2192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.068868][ T2192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.101786][ T2192] loop4: detected capacity change from 0 to 8192 [ 252.239797][ T2200] loop1: detected capacity change from 0 to 1764 [ 252.251020][ T2194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.261335][ T2194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.303692][ T2194] loop0: detected capacity change from 0 to 8192 [ 252.383818][ T2196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.394722][ T2196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.406278][ T2202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3282'. [ 252.439095][ T2205] loop1: detected capacity change from 0 to 128 [ 252.448106][ T2196] loop3: detected capacity change from 0 to 8192 [ 252.535824][ T2205] syz.1.3283 (2205) used greatest stack depth: 10192 bytes left [ 252.551811][ T2209] loop1: detected capacity change from 0 to 128 [ 252.600985][ T29] kauditd_printk_skb: 1833 callbacks suppressed [ 252.600997][ T29] audit: type=1326 audit(1753657456.455:27617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2210 comm="syz.1.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc064e2e9a9 code=0x7ffc0000 [ 252.630912][ T29] audit: type=1326 audit(1753657456.465:27618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2210 comm="syz.1.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc064e2d310 code=0x7ffc0000 [ 252.635054][ T2211] loop1: detected capacity change from 0 to 128 [ 252.654444][ T29] audit: type=1326 audit(1753657456.465:27619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2210 comm="syz.1.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc064e2e9a9 code=0x7ffc0000 [ 252.654469][ T29] audit: type=1326 audit(1753657456.465:27620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2210 comm="syz.1.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc064e2e9a9 code=0x7ffc0000 [ 252.654491][ T29] audit: type=1326 audit(1753657456.465:27621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2210 comm="syz.1.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc064e2e9a9 code=0x7ffc0000 [ 252.714883][ T1061] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 252.731837][ T29] audit: type=1326 audit(1753657456.465:27622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2210 comm="syz.1.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc064e2e9e3 code=0x7ffc0000 [ 252.738823][ T1061] hid-generic 0000:0000:0000.0080: item fetching failed at offset 4/35 [ 252.745639][ T1061] hid-generic 0000:0000:0000.0080: probe with driver hid-generic failed with error -22 [ 252.762147][ T29] audit: type=1326 audit(1753657456.465:27623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2210 comm="syz.1.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc064e2d45f code=0x7ffc0000 [ 252.772170][ T2207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.779998][ T29] audit: type=1326 audit(1753657456.465:27624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2210 comm="syz.1.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc064e2ea37 code=0x7ffc0000 [ 252.807996][ T2207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.812252][ T29] audit: type=1326 audit(1753657456.495:27625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2210 comm="syz.1.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc064e2d310 code=0x7ffc0000 [ 252.866445][ T29] audit: type=1326 audit(1753657456.495:27626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2210 comm="syz.1.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc064e2e5ab code=0x7ffc0000 [ 252.974750][ T2207] loop2: detected capacity change from 0 to 8192 [ 253.023899][ T2319] loop1: detected capacity change from 0 to 128 [ 253.040750][ T3400] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 253.048352][ T3400] hid-generic 0000:0000:0000.0081: item fetching failed at offset 4/35 [ 253.057357][ T3400] hid-generic 0000:0000:0000.0081: probe with driver hid-generic failed with error -22 [ 253.159428][ T2215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.167914][ T2262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.167954][ T2215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.178213][ T2262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.224289][ T2215] loop0: detected capacity change from 0 to 8192 [ 253.230713][ T2262] loop4: detected capacity change from 0 to 8192 [ 253.300598][ T2321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.309330][ T2321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.312934][ T2323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.327045][ T2323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.352206][ T2321] loop1: detected capacity change from 0 to 8192 [ 253.374899][ T2323] loop3: detected capacity change from 0 to 8192 [ 253.558756][ T2326] loop2: detected capacity change from 0 to 128 [ 253.574444][ T8610] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 253.581911][ T8610] hid-generic 0000:0000:0000.0082: item fetching failed at offset 4/35 [ 253.585598][ T2326] checksum_tg_check: 4 callbacks suppressed [ 253.585613][ T2326] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 253.590324][ T8610] hid-generic 0000:0000:0000.0082: probe with driver hid-generic failed with error -22 [ 253.847339][ T2328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.855912][ T2328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.888079][ T2328] loop2: detected capacity change from 0 to 8192 [ 253.951721][ T2338] loop1: detected capacity change from 0 to 128 [ 253.974872][ T2338] FAT-fs (loop1): Directory bread(block 32) failed [ 253.984738][ T2338] FAT-fs (loop1): Directory bread(block 33) failed [ 253.991469][ T2338] FAT-fs (loop1): Directory bread(block 34) failed [ 253.998029][ T2338] FAT-fs (loop1): Directory bread(block 35) failed [ 254.004750][ T2338] FAT-fs (loop1): Directory bread(block 36) failed [ 254.011364][ T2338] FAT-fs (loop1): Directory bread(block 37) failed [ 254.017912][ T2338] FAT-fs (loop1): Directory bread(block 38) failed [ 254.018461][ T2334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.025446][ T2338] FAT-fs (loop1): Directory bread(block 39) failed [ 254.034353][ T2334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.040252][ T2336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.056057][ T2338] FAT-fs (loop1): Directory bread(block 40) failed [ 254.063116][ T2338] FAT-fs (loop1): Directory bread(block 41) failed [ 254.071318][ T2336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.090567][ T2334] loop4: detected capacity change from 0 to 8192 [ 254.149217][ T2336] loop0: detected capacity change from 0 to 8192 [ 254.185395][ T2340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.193900][ T2340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.228732][ T2340] loop3: detected capacity change from 0 to 8192 [ 254.438669][ T2342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.447229][ T2342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.484684][ T2342] loop1: detected capacity change from 0 to 8192 [ 254.703872][ T2344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.714402][ T2344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.737970][ T2348] loop0: detected capacity change from 0 to 128 [ 254.757029][ T2344] loop2: detected capacity change from 0 to 8192 [ 254.759168][ T8610] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 254.770854][ T8610] hid-generic 0000:0000:0000.0083: item fetching failed at offset 4/35 [ 254.784021][ T2348] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 254.791235][ T8610] hid-generic 0000:0000:0000.0083: probe with driver hid-generic failed with error -22 [ 254.868169][ T2346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.876773][ T2346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.908878][ T2346] loop4: detected capacity change from 0 to 8192 [ 255.044516][ T2354] loop1: detected capacity change from 0 to 1764 [ 255.052696][ T2350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.063164][ T2352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.063323][ T2352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.080521][ T2350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.125878][ T2350] loop3: detected capacity change from 0 to 8192 [ 255.150248][ T2352] loop0: detected capacity change from 0 to 8192 [ 255.439464][ T2458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.448066][ T2458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.485728][ T2458] loop1: detected capacity change from 0 to 8192 [ 255.543055][ T2460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.551674][ T2460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.586315][ T2460] loop2: detected capacity change from 0 to 8192 [ 255.674791][ T2465] loop3: detected capacity change from 0 to 128 [ 255.700533][ T2462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.709935][ T2462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.763658][ T2462] loop4: detected capacity change from 0 to 8192 [ 255.770881][ T2469] loop0: detected capacity change from 0 to 128 [ 255.786391][ T1061] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 255.793850][ T1061] hid-generic 0000:0000:0000.0084: item fetching failed at offset 4/35 [ 255.807016][ T2469] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 255.813667][ T1061] hid-generic 0000:0000:0000.0084: probe with driver hid-generic failed with error -22 [ 255.962007][ T2467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.970884][ T2467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.012657][ T2467] loop3: detected capacity change from 0 to 8192 [ 256.079623][ T2473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.088686][ T2473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.114994][ T2476] loop1: detected capacity change from 0 to 1764 [ 256.162144][ T2478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3314'. [ 256.195742][ T2480] loop2: detected capacity change from 0 to 128 [ 256.226586][ T8610] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 256.234110][ T8610] hid-generic 0000:0000:0000.0085: item fetching failed at offset 4/35 [ 256.252707][ T8610] hid-generic 0000:0000:0000.0085: probe with driver hid-generic failed with error -22 [ 256.268115][ T2480] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 256.393462][ T2588] loop2: detected capacity change from 0 to 128 [ 256.493324][ T2592] loop2: detected capacity change from 0 to 1764 [ 256.505255][ T2592] siw: device registration error -23 [ 256.587792][ T2586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.598527][ T2586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.607419][ T2590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.622333][ T2590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.660173][ T2586] loop1: detected capacity change from 0 to 8192 [ 256.667785][ T2590] loop4: detected capacity change from 0 to 8192 [ 256.774353][ T2594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.782821][ T2594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.816633][ T2594] loop2: detected capacity change from 0 to 8192 [ 256.919664][ T2599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.928271][ T2599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.961137][ T2599] loop3: detected capacity change from 0 to 8192 [ 257.266363][ T2603] loop4: detected capacity change from 0 to 128 [ 257.297496][ T2605] loop4: detected capacity change from 0 to 128 [ 257.419415][ T2601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.428448][ T2609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3330'. [ 257.436136][ T2601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.462048][ T2612] loop2: detected capacity change from 0 to 128 [ 257.495809][ T2601] loop1: detected capacity change from 0 to 8192 [ 257.553236][ T2607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.571625][ T2607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.617285][ T2607] loop4: detected capacity change from 0 to 8192 [ 257.629202][ T29] kauditd_printk_skb: 1013 callbacks suppressed [ 257.629216][ T29] audit: type=1326 audit(1753657461.485:28640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2606 comm="syz.4.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 257.667948][ T29] audit: type=1326 audit(1753657461.485:28641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2606 comm="syz.4.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 257.691649][ T29] audit: type=1326 audit(1753657461.485:28642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2606 comm="syz.4.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 257.715266][ T29] audit: type=1326 audit(1753657461.485:28643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2606 comm="syz.4.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 257.738802][ T29] audit: type=1326 audit(1753657461.485:28644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2606 comm="syz.4.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 257.762360][ T29] audit: type=1326 audit(1753657461.485:28645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2606 comm="syz.4.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 257.766077][ T2614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.785876][ T29] audit: type=1326 audit(1753657461.485:28646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2606 comm="syz.4.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 257.796377][ T2614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.817812][ T29] audit: type=1326 audit(1753657461.485:28647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2606 comm="syz.4.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 257.827438][ T2619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.848905][ T29] audit: type=1326 audit(1753657461.485:28648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2606 comm="syz.4.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 257.880814][ T29] audit: type=1326 audit(1753657461.485:28649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2606 comm="syz.4.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27d72e9a9 code=0x7ffc0000 [ 257.890679][ T2619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.932742][ T2614] loop2: detected capacity change from 0 to 8192 [ 257.975619][ T2619] loop3: detected capacity change from 0 to 8192 [ 258.101586][ T2622] loop1: detected capacity change from 0 to 1764 [ 258.170919][ T2624] tipc: Started in network mode [ 258.175852][ T2624] tipc: Node identity ac14140f, cluster identity 4711 [ 258.182972][ T2624] tipc: New replicast peer: 255.255.255.255 [ 258.189060][ T2624] tipc: Enabled bearer , priority 10 [ 258.412447][ T2626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.421070][ T2626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.460963][ T2626] loop1: detected capacity change from 0 to 8192 [ 258.469874][ T2628] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3338'. [ 258.485813][ T2628] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3338'. [ 258.552360][ T2636] tipc: Started in network mode [ 258.557284][ T2636] tipc: Node identity ac14140f, cluster identity 4711 [ 258.564294][ T2636] tipc: New replicast peer: 255.255.255.255 [ 258.570340][ T2636] tipc: Enabled bearer , priority 10 [ 258.640774][ T2737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3341'. [ 258.667229][ T2740] hub 9-0:1.0: USB hub found [ 258.672457][ T2740] hub 9-0:1.0: 8 ports detected [ 258.697596][ T2742] loop4: detected capacity change from 0 to 128 [ 258.712149][ T3401] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 258.719684][ T3401] hid-generic 0000:0000:0000.0086: item fetching failed at offset 4/35 [ 258.721124][ T2631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.732294][ T2742] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 258.741935][ T2631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.743073][ T3401] hid-generic 0000:0000:0000.0086: probe with driver hid-generic failed with error -22 [ 258.792505][ T2631] loop2: detected capacity change from 0 to 8192 [ 258.801359][ T2736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.810937][ T2736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.875896][ T2736] loop3: detected capacity change from 0 to 8192 [ 258.905714][ T2846] loop4: detected capacity change from 0 to 128 [ 259.158983][ T2848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.167442][ T2848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.181277][ T2852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.189729][ T3401] tipc: Node number set to 2886997007 [ 259.195776][ T2852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.208908][ T2848] loop4: detected capacity change from 0 to 8192 [ 259.227989][ T2854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.237369][ T2854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.245281][ T2852] loop0: detected capacity change from 0 to 8192 [ 259.302878][ T2854] loop1: detected capacity change from 0 to 8192 [ 259.388004][ T2856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3351'. [ 259.397204][ T2856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3351'. [ 259.561287][ T3401] tipc: Node number set to 2886997007 [ 259.692670][ T2961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.701353][ T2961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.707928][ T2963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.720073][ T2963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.742816][ T2961] loop2: detected capacity change from 0 to 8192 [ 259.768614][ T2963] loop3: detected capacity change from 0 to 8192 [ 259.970963][ T3085] loop1: detected capacity change from 0 to 128 [ 260.030699][ T2965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.039415][ T2965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.052458][ T2967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.061031][ T2967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.079505][ T2965] loop4: detected capacity change from 0 to 8192 [ 260.102754][ T2967] loop0: detected capacity change from 0 to 8192 [ 260.220000][ T3087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.228653][ T3087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.261444][ T3087] loop1: detected capacity change from 0 to 8192 [ 260.346134][ T3091] loop3: detected capacity change from 0 to 128 [ 260.524485][ T3089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.532986][ T3089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.564665][ T3089] loop2: detected capacity change from 0 to 8192 [ 260.599496][ T3093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.608412][ T3093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.641221][ T3093] loop3: detected capacity change from 0 to 8192 [ 260.720407][ T3101] loop0: detected capacity change from 0 to 128 [ 260.820810][ T3214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3367'. [ 260.974545][ T3212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.983126][ T3212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.014187][ T3212] loop0: detected capacity change from 0 to 8192 [ 261.049835][ T3217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.058218][ T3219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.058355][ T3217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.068354][ T3219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.111756][ T3217] loop1: detected capacity change from 0 to 8192 [ 261.122236][ T3219] loop4: detected capacity change from 0 to 8192 [ 261.197818][ T3221] loop2: detected capacity change from 0 to 128 [ 261.463916][ T3225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.472729][ T3225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.484066][ T3227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.492952][ T3227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.516587][ T3225] loop3: detected capacity change from 0 to 8192 [ 261.532998][ T3227] loop2: detected capacity change from 0 to 8192 [ 261.809431][ T3229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.818016][ T3229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.850114][ T3229] loop0: detected capacity change from 0 to 8192 [ 261.900898][ T3231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.909812][ T3231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.942580][ T3231] loop1: detected capacity change from 0 to 8192 [ 261.980319][ T3234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.988954][ T3234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.022738][ T3234] loop4: detected capacity change from 0 to 8192 [ 262.086409][ T3238] loop3: detected capacity change from 0 to 128 [ 262.185913][ T3242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3379'. [ 262.214793][ T3245] hub 9-0:1.0: USB hub found [ 262.219477][ T3245] hub 9-0:1.0: 8 ports detected [ 262.345045][ T3240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.354493][ T3240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.397090][ T3421] loop3: detected capacity change from 0 to 128 [ 262.403899][ T3240] loop2: detected capacity change from 0 to 8192 [ 262.440116][ T3401] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 262.447606][ T3401] hid-generic 0000:0000:0000.0087: item fetching failed at offset 4/35 [ 262.458096][ T3401] hid-generic 0000:0000:0000.0087: probe with driver hid-generic failed with error -22 [ 262.583524][ T3427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.636033][ T3427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.672213][ T3435] loop4: detected capacity change from 0 to 128 [ 262.692949][ T3427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3383'. [ 262.722740][ T3426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.747594][ T3426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.803035][ T3429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.821372][ T3429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.842790][ T3426] loop1: detected capacity change from 0 to 8192 [ 262.854947][ T29] kauditd_printk_skb: 744 callbacks suppressed [ 262.854962][ T29] audit: type=1326 audit(1753657466.715:29394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3424 comm="syz.1.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc064e2e9a9 code=0x7ffc0000 [ 262.908496][ T29] audit: type=1326 audit(1753657466.715:29395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3424 comm="syz.1.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc064e2e9a9 code=0x7ffc0000 [ 262.917547][ T3429] loop3: detected capacity change from 0 to 8192 [ 262.932078][ T29] audit: type=1326 audit(1753657466.715:29396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3424 comm="syz.1.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc064e2e9a9 code=0x7ffc0000 [ 262.961879][ T29] audit: type=1326 audit(1753657466.715:29397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3424 comm="syz.1.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc064e2e9a9 code=0x7ffc0000 [ 262.985433][ T29] audit: type=1326 audit(1753657466.715:29398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3424 comm="syz.1.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc064e2e9a9 code=0x7ffc0000 [ 262.993330][ T3439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.008994][ T29] audit: type=1326 audit(1753657466.715:29399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3424 comm="syz.1.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fc064e2e9a9 code=0x7ffc0000 [ 263.040915][ T29] audit: type=1326 audit(1753657466.715:29400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3424 comm="syz.1.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc064e2e9a9 code=0x7ffc0000 [ 263.064456][ T29] audit: type=1326 audit(1753657466.715:29401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3424 comm="syz.1.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc064e2e9a9 code=0x7ffc0000 [ 263.082667][ T3439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.088047][ T29] audit: type=1326 audit(1753657466.715:29402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3424 comm="syz.1.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fc064e2e9a9 code=0x7ffc0000 [ 263.119246][ T29] audit: type=1326 audit(1753657466.715:29403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3424 comm="syz.1.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc064e2e9a9 code=0x7ffc0000 [ 263.178391][ T3441] loop2: detected capacity change from 0 to 128 [ 263.266537][ T3439] loop4: detected capacity change from 0 to 8192 [ 263.548549][ T3548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.557169][ T3548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.589718][ T3548] loop2: detected capacity change from 0 to 8192 [ 263.703744][ T3550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.712551][ T3550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.754582][ T3550] loop1: detected capacity change from 0 to 8192 [ 263.927709][ T3658] loop4: detected capacity change from 0 to 128 [ 263.942837][ T10] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 263.950304][ T10] hid-generic 0000:0000:0000.0088: item fetching failed at offset 4/35 [ 263.954158][ T3658] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 263.959074][ T10] hid-generic 0000:0000:0000.0088: probe with driver hid-generic failed with error -22 [ 264.012267][ T3660] tipc: Started in network mode [ 264.017269][ T3660] tipc: Node identity ac14140f, cluster identity 4711 [ 264.024352][ T3660] tipc: New replicast peer: 255.255.255.255 [ 264.030405][ T3660] tipc: Enabled bearer , priority 10 [ 264.050312][ T3654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.067455][ T3654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.071039][ T3664] tipc: Enabling of bearer rejected, already enabled [ 264.089006][ T3664] hub 9-0:1.0: USB hub found [ 264.093962][ T3664] hub 9-0:1.0: 8 ports detected [ 264.110837][ T3654] loop3: detected capacity change from 0 to 8192 [ 264.127076][ T3666] loop4: detected capacity change from 0 to 128 [ 264.196115][ T2994] ================================================================== [ 264.204220][ T2994] BUG: KCSAN: data-race in dentry_unlink_inode / step_into [ 264.211435][ T2994] [ 264.213779][ T2994] write to 0xffff8881073ccc30 of 8 bytes by task 3672 on cpu 0: [ 264.221410][ T2994] dentry_unlink_inode+0x65/0x260 [ 264.226453][ T2994] d_delete+0x164/0x180 [ 264.230627][ T2994] d_delete_notify+0x32/0x100 [ 264.235339][ T2994] vfs_unlink+0x30b/0x420 [ 264.239707][ T2994] do_unlinkat+0x28e/0x4c0 [ 264.244161][ T2994] __x64_sys_unlink+0x2e/0x40 [ 264.248876][ T2994] x64_sys_call+0x22a6/0x2fb0 [ 264.253589][ T2994] do_syscall_64+0xd2/0x200 [ 264.258109][ T2994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.264021][ T2994] [ 264.266347][ T2994] read to 0xffff8881073ccc30 of 8 bytes by task 2994 on cpu 1: [ 264.273891][ T2994] step_into+0x122/0x820 [ 264.278162][ T2994] walk_component+0x162/0x220 [ 264.282853][ T2994] path_lookupat+0xfe/0x2a0 [ 264.287395][ T2994] filename_lookup+0x147/0x340 [ 264.292167][ T2994] do_readlinkat+0x7d/0x320 [ 264.296681][ T2994] __x64_sys_readlink+0x47/0x60 [ 264.301548][ T2994] x64_sys_call+0x2cf3/0x2fb0 [ 264.306233][ T2994] do_syscall_64+0xd2/0x200 [ 264.310739][ T2994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.316640][ T2994] [ 264.318966][ T2994] value changed: 0xffff88811c558650 -> 0x0000000000000000 [ 264.326071][ T2994] [ 264.328397][ T2994] Reported by Kernel Concurrency Sanitizer on: [ 264.334566][ T2994] CPU: 1 UID: 0 PID: 2994 Comm: udevd Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 264.346558][ T2994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 264.356626][ T2994] ================================================================== [ 264.402719][ T3668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.412860][ T3668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.447196][ T3668] loop2: detected capacity change from 0 to 8192 [ 265.141262][ T9] tipc: Node number set to 2886997007