Warning: Permanently added '10.128.0.196' (ECDSA) to the list of known hosts. 2022/06/02 19:41:52 fuzzer started 2022/06/02 19:41:53 dialing manager at 10.128.0.169:36825 syzkaller login: [ 53.257666][ T3616] cgroup: Unknown subsys name 'net' [ 53.367624][ T3616] cgroup: Unknown subsys name 'rlimit' 2022/06/02 19:41:53 syscalls: 3656 2022/06/02 19:41:53 code coverage: enabled 2022/06/02 19:41:53 comparison tracing: enabled 2022/06/02 19:41:53 extra coverage: enabled 2022/06/02 19:41:53 delay kcov mmap: enabled 2022/06/02 19:41:53 setuid sandbox: enabled 2022/06/02 19:41:53 namespace sandbox: enabled 2022/06/02 19:41:53 Android sandbox: /sys/fs/selinux/policy does not exist 2022/06/02 19:41:53 fault injection: enabled 2022/06/02 19:41:53 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2022/06/02 19:41:53 net packet injection: enabled 2022/06/02 19:41:53 net device setup: enabled 2022/06/02 19:41:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/06/02 19:41:53 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/06/02 19:41:53 USB emulation: enabled 2022/06/02 19:41:53 hci packet injection: enabled 2022/06/02 19:41:53 wifi device emulation: enabled 2022/06/02 19:41:53 802.15.4 emulation: enabled 2022/06/02 19:41:53 fetching corpus: 0, signal 0/2000 (executing program) 2022/06/02 19:41:53 fetching corpus: 50, signal 37646/41477 (executing program) 2022/06/02 19:41:53 fetching corpus: 100, signal 58508/64084 (executing program) 2022/06/02 19:41:53 fetching corpus: 150, signal 73871/81148 (executing program) 2022/06/02 19:41:54 fetching corpus: 200, signal 81571/90584 (executing program) 2022/06/02 19:41:54 fetching corpus: 250, signal 90831/101510 (executing program) 2022/06/02 19:41:54 fetching corpus: 300, signal 98751/111105 (executing program) 2022/06/02 19:41:54 fetching corpus: 350, signal 108219/122132 (executing program) 2022/06/02 19:41:54 fetching corpus: 400, signal 117316/132779 (executing program) 2022/06/02 19:41:54 fetching corpus: 450, signal 126521/143489 (executing program) 2022/06/02 19:41:54 fetching corpus: 500, signal 131977/150509 (executing program) 2022/06/02 19:41:54 fetching corpus: 550, signal 136173/156275 (executing program) 2022/06/02 19:41:54 fetching corpus: 600, signal 140614/162290 (executing program) 2022/06/02 19:41:54 fetching corpus: 650, signal 143985/167228 (executing program) 2022/06/02 19:41:55 fetching corpus: 700, signal 149973/174666 (executing program) 2022/06/02 19:41:55 fetching corpus: 750, signal 154549/180724 (executing program) 2022/06/02 19:41:55 fetching corpus: 800, signal 159568/187174 (executing program) 2022/06/02 19:41:55 fetching corpus: 850, signal 163326/192405 (executing program) 2022/06/02 19:41:55 fetching corpus: 900, signal 167165/197678 (executing program) 2022/06/02 19:41:55 fetching corpus: 950, signal 169617/201673 (executing program) 2022/06/02 19:41:55 fetching corpus: 1000, signal 173633/207039 (executing program) 2022/06/02 19:41:55 fetching corpus: 1050, signal 177299/212134 (executing program) 2022/06/02 19:41:55 fetching corpus: 1100, signal 180526/216761 (executing program) 2022/06/02 19:41:55 fetching corpus: 1150, signal 183342/220963 (executing program) 2022/06/02 19:41:56 fetching corpus: 1200, signal 187876/226766 (executing program) 2022/06/02 19:41:56 fetching corpus: 1250, signal 191171/231418 (executing program) 2022/06/02 19:41:56 fetching corpus: 1300, signal 194543/236145 (executing program) 2022/06/02 19:41:56 fetching corpus: 1350, signal 197644/240595 (executing program) 2022/06/02 19:41:57 fetching corpus: 1400, signal 201779/246010 (executing program) 2022/06/02 19:41:57 fetching corpus: 1450, signal 204458/249998 (executing program) 2022/06/02 19:41:57 fetching corpus: 1500, signal 207322/254177 (executing program) 2022/06/02 19:41:57 fetching corpus: 1550, signal 210073/258222 (executing program) 2022/06/02 19:41:57 fetching corpus: 1600, signal 213251/262695 (executing program) 2022/06/02 19:41:57 fetching corpus: 1650, signal 216469/267161 (executing program) 2022/06/02 19:41:57 fetching corpus: 1700, signal 219927/271807 (executing program) 2022/06/02 19:41:57 fetching corpus: 1750, signal 222326/275494 (executing program) 2022/06/02 19:41:57 fetching corpus: 1800, signal 224617/279071 (executing program) 2022/06/02 19:41:57 fetching corpus: 1850, signal 227081/282782 (executing program) 2022/06/02 19:41:58 fetching corpus: 1900, signal 228974/285992 (executing program) 2022/06/02 19:41:58 fetching corpus: 1950, signal 232871/291001 (executing program) 2022/06/02 19:41:58 fetching corpus: 2000, signal 235707/295006 (executing program) 2022/06/02 19:41:58 fetching corpus: 2050, signal 238513/299005 (executing program) 2022/06/02 19:41:58 fetching corpus: 2100, signal 242214/303778 (executing program) 2022/06/02 19:41:58 fetching corpus: 2150, signal 244245/307043 (executing program) 2022/06/02 19:41:58 fetching corpus: 2200, signal 246229/310226 (executing program) 2022/06/02 19:41:58 fetching corpus: 2250, signal 248785/313925 (executing program) 2022/06/02 19:41:59 fetching corpus: 2300, signal 252347/318473 (executing program) 2022/06/02 19:41:59 fetching corpus: 2350, signal 255198/322407 (executing program) 2022/06/02 19:41:59 fetching corpus: 2400, signal 257758/326053 (executing program) 2022/06/02 19:41:59 fetching corpus: 2450, signal 260232/329614 (executing program) 2022/06/02 19:41:59 fetching corpus: 2500, signal 261998/332542 (executing program) 2022/06/02 19:41:59 fetching corpus: 2550, signal 265844/337307 (executing program) 2022/06/02 19:41:59 fetching corpus: 2600, signal 267434/340068 (executing program) 2022/06/02 19:41:59 fetching corpus: 2650, signal 269263/343049 (executing program) 2022/06/02 19:42:00 fetching corpus: 2700, signal 271783/346615 (executing program) 2022/06/02 19:42:00 fetching corpus: 2750, signal 273911/349785 (executing program) 2022/06/02 19:42:00 fetching corpus: 2800, signal 275543/352566 (executing program) 2022/06/02 19:42:00 fetching corpus: 2850, signal 277527/355630 (executing program) 2022/06/02 19:42:00 fetching corpus: 2900, signal 279905/358997 (executing program) 2022/06/02 19:42:00 fetching corpus: 2950, signal 282030/362184 (executing program) 2022/06/02 19:42:00 fetching corpus: 3000, signal 283500/364811 (executing program) 2022/06/02 19:42:00 fetching corpus: 3050, signal 293047/374245 (executing program) 2022/06/02 19:42:01 fetching corpus: 3100, signal 295319/377452 (executing program) 2022/06/02 19:42:01 fetching corpus: 3150, signal 296842/380035 (executing program) 2022/06/02 19:42:01 fetching corpus: 3200, signal 300121/384126 (executing program) 2022/06/02 19:42:01 fetching corpus: 3250, signal 301181/386345 (executing program) 2022/06/02 19:42:01 fetching corpus: 3300, signal 302794/388964 (executing program) 2022/06/02 19:42:01 fetching corpus: 3350, signal 304669/391821 (executing program) 2022/06/02 19:42:01 fetching corpus: 3400, signal 306324/394523 (executing program) 2022/06/02 19:42:01 fetching corpus: 3450, signal 307903/397093 (executing program) 2022/06/02 19:42:01 fetching corpus: 3500, signal 309674/399832 (executing program) 2022/06/02 19:42:01 fetching corpus: 3550, signal 311730/402756 (executing program) 2022/06/02 19:42:02 fetching corpus: 3600, signal 313331/405376 (executing program) 2022/06/02 19:42:02 fetching corpus: 3650, signal 314610/407707 (executing program) 2022/06/02 19:42:02 fetching corpus: 3700, signal 315941/410116 (executing program) 2022/06/02 19:42:02 fetching corpus: 3750, signal 317388/412558 (executing program) 2022/06/02 19:42:02 fetching corpus: 3800, signal 318457/414650 (executing program) 2022/06/02 19:42:02 fetching corpus: 3850, signal 320088/417240 (executing program) 2022/06/02 19:42:02 fetching corpus: 3900, signal 321464/419631 (executing program) 2022/06/02 19:42:02 fetching corpus: 3950, signal 322742/421925 (executing program) 2022/06/02 19:42:02 fetching corpus: 4000, signal 324329/424452 (executing program) 2022/06/02 19:42:03 fetching corpus: 4050, signal 325568/426677 (executing program) 2022/06/02 19:42:03 fetching corpus: 4100, signal 326629/428785 (executing program) 2022/06/02 19:42:03 fetching corpus: 4150, signal 328149/431220 (executing program) 2022/06/02 19:42:03 fetching corpus: 4200, signal 329624/433606 (executing program) 2022/06/02 19:42:03 fetching corpus: 4250, signal 330899/435867 (executing program) 2022/06/02 19:42:03 fetching corpus: 4300, signal 332633/438463 (executing program) 2022/06/02 19:42:03 fetching corpus: 4350, signal 334022/440757 (executing program) 2022/06/02 19:42:04 fetching corpus: 4400, signal 336123/443674 (executing program) 2022/06/02 19:42:04 fetching corpus: 4450, signal 339083/447200 (executing program) 2022/06/02 19:42:04 fetching corpus: 4500, signal 340286/449357 (executing program) 2022/06/02 19:42:04 fetching corpus: 4550, signal 342721/452408 (executing program) 2022/06/02 19:42:04 fetching corpus: 4600, signal 343975/454585 (executing program) 2022/06/02 19:42:04 fetching corpus: 4650, signal 345332/456857 (executing program) 2022/06/02 19:42:04 fetching corpus: 4700, signal 346765/459139 (executing program) 2022/06/02 19:42:04 fetching corpus: 4750, signal 348074/461366 (executing program) 2022/06/02 19:42:04 fetching corpus: 4800, signal 349496/463634 (executing program) 2022/06/02 19:42:04 fetching corpus: 4850, signal 350481/465566 (executing program) 2022/06/02 19:42:05 fetching corpus: 4900, signal 351600/467518 (executing program) 2022/06/02 19:42:05 fetching corpus: 4950, signal 352746/469587 (executing program) 2022/06/02 19:42:05 fetching corpus: 5000, signal 353926/471651 (executing program) 2022/06/02 19:42:05 fetching corpus: 5050, signal 356073/474412 (executing program) 2022/06/02 19:42:05 fetching corpus: 5100, signal 357192/476451 (executing program) 2022/06/02 19:42:05 fetching corpus: 5150, signal 359049/479029 (executing program) 2022/06/02 19:42:05 fetching corpus: 5200, signal 360150/480980 (executing program) 2022/06/02 19:42:05 fetching corpus: 5250, signal 361282/482976 (executing program) 2022/06/02 19:42:05 fetching corpus: 5300, signal 362527/485035 (executing program) 2022/06/02 19:42:05 fetching corpus: 5350, signal 363533/486923 (executing program) 2022/06/02 19:42:06 fetching corpus: 5400, signal 364198/488542 (executing program) 2022/06/02 19:42:06 fetching corpus: 5450, signal 365506/490666 (executing program) 2022/06/02 19:42:06 fetching corpus: 5500, signal 366765/492717 (executing program) 2022/06/02 19:42:06 fetching corpus: 5550, signal 368227/494960 (executing program) 2022/06/02 19:42:06 fetching corpus: 5600, signal 369155/496788 (executing program) 2022/06/02 19:42:06 fetching corpus: 5650, signal 370463/498806 (executing program) 2022/06/02 19:42:06 fetching corpus: 5700, signal 371914/501006 (executing program) 2022/06/02 19:42:06 fetching corpus: 5750, signal 372815/502788 (executing program) 2022/06/02 19:42:06 fetching corpus: 5800, signal 373948/504671 (executing program) 2022/06/02 19:42:07 fetching corpus: 5850, signal 375438/506839 (executing program) 2022/06/02 19:42:07 fetching corpus: 5900, signal 376621/508760 (executing program) 2022/06/02 19:42:07 fetching corpus: 5950, signal 377563/510605 (executing program) 2022/06/02 19:42:07 fetching corpus: 6000, signal 378912/512655 (executing program) 2022/06/02 19:42:07 fetching corpus: 6050, signal 380255/514733 (executing program) 2022/06/02 19:42:07 fetching corpus: 6100, signal 381643/516784 (executing program) 2022/06/02 19:42:07 fetching corpus: 6150, signal 382445/518458 (executing program) 2022/06/02 19:42:07 fetching corpus: 6200, signal 383111/519976 (executing program) 2022/06/02 19:42:08 fetching corpus: 6250, signal 384497/522023 (executing program) 2022/06/02 19:42:08 fetching corpus: 6300, signal 385733/523993 (executing program) 2022/06/02 19:42:08 fetching corpus: 6350, signal 386668/525756 (executing program) 2022/06/02 19:42:08 fetching corpus: 6400, signal 387533/527464 (executing program) 2022/06/02 19:42:08 fetching corpus: 6450, signal 388577/529261 (executing program) 2022/06/02 19:42:08 fetching corpus: 6500, signal 389481/530988 (executing program) 2022/06/02 19:42:08 fetching corpus: 6550, signal 390555/532838 (executing program) 2022/06/02 19:42:08 fetching corpus: 6600, signal 391504/534566 (executing program) 2022/06/02 19:42:08 fetching corpus: 6650, signal 392642/536439 (executing program) 2022/06/02 19:42:08 fetching corpus: 6700, signal 393925/538350 (executing program) 2022/06/02 19:42:09 fetching corpus: 6750, signal 395831/540720 (executing program) 2022/06/02 19:42:09 fetching corpus: 6800, signal 396871/542503 (executing program) 2022/06/02 19:42:09 fetching corpus: 6850, signal 397821/544237 (executing program) 2022/06/02 19:42:09 fetching corpus: 6900, signal 398918/546039 (executing program) 2022/06/02 19:42:09 fetching corpus: 6950, signal 399625/547559 (executing program) 2022/06/02 19:42:10 fetching corpus: 7000, signal 400278/549071 (executing program) 2022/06/02 19:42:10 fetching corpus: 7050, signal 401086/550652 (executing program) 2022/06/02 19:42:10 fetching corpus: 7100, signal 401966/552264 (executing program) 2022/06/02 19:42:10 fetching corpus: 7150, signal 402908/553950 (executing program) 2022/06/02 19:42:10 fetching corpus: 7200, signal 403476/555354 (executing program) 2022/06/02 19:42:10 fetching corpus: 7250, signal 404603/557131 (executing program) 2022/06/02 19:42:10 fetching corpus: 7300, signal 405499/558763 (executing program) 2022/06/02 19:42:10 fetching corpus: 7350, signal 406089/560249 (executing program) 2022/06/02 19:42:10 fetching corpus: 7400, signal 406929/561863 (executing program) 2022/06/02 19:42:10 fetching corpus: 7450, signal 407751/563495 (executing program) 2022/06/02 19:42:11 fetching corpus: 7500, signal 408743/565174 (executing program) [ 71.073379][ T1230] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.073470][ T1230] ieee802154 phy1 wpan1: encryption failed: -22 2022/06/02 19:42:11 fetching corpus: 7550, signal 409225/566521 (executing program) 2022/06/02 19:42:11 fetching corpus: 7600, signal 410096/568146 (executing program) 2022/06/02 19:42:11 fetching corpus: 7650, signal 411220/569898 (executing program) 2022/06/02 19:42:11 fetching corpus: 7700, signal 412167/571510 (executing program) 2022/06/02 19:42:11 fetching corpus: 7750, signal 413159/573186 (executing program) 2022/06/02 19:42:11 fetching corpus: 7800, signal 413949/574737 (executing program) 2022/06/02 19:42:11 fetching corpus: 7850, signal 414436/576102 (executing program) 2022/06/02 19:42:11 fetching corpus: 7900, signal 415513/577733 (executing program) 2022/06/02 19:42:12 fetching corpus: 7950, signal 416388/579298 (executing program) 2022/06/02 19:42:12 fetching corpus: 8000, signal 417112/580721 (executing program) 2022/06/02 19:42:12 fetching corpus: 8050, signal 418251/582444 (executing program) 2022/06/02 19:42:12 fetching corpus: 8100, signal 419090/583979 (executing program) 2022/06/02 19:42:12 fetching corpus: 8150, signal 420011/585538 (executing program) 2022/06/02 19:42:12 fetching corpus: 8200, signal 420912/587093 (executing program) 2022/06/02 19:42:12 fetching corpus: 8250, signal 421853/588675 (executing program) 2022/06/02 19:42:13 fetching corpus: 8300, signal 422580/590161 (executing program) 2022/06/02 19:42:13 fetching corpus: 8350, signal 423534/591733 (executing program) 2022/06/02 19:42:13 fetching corpus: 8400, signal 424638/593386 (executing program) 2022/06/02 19:42:13 fetching corpus: 8450, signal 426092/595258 (executing program) 2022/06/02 19:42:13 fetching corpus: 8500, signal 427141/596905 (executing program) 2022/06/02 19:42:13 fetching corpus: 8550, signal 427775/598265 (executing program) 2022/06/02 19:42:13 fetching corpus: 8600, signal 428706/599792 (executing program) 2022/06/02 19:42:13 fetching corpus: 8650, signal 429511/601284 (executing program) 2022/06/02 19:42:13 fetching corpus: 8700, signal 430215/602696 (executing program) 2022/06/02 19:42:14 fetching corpus: 8750, signal 431106/604196 (executing program) 2022/06/02 19:42:14 fetching corpus: 8800, signal 432087/605741 (executing program) 2022/06/02 19:42:14 fetching corpus: 8850, signal 432785/607130 (executing program) 2022/06/02 19:42:14 fetching corpus: 8900, signal 433660/608619 (executing program) 2022/06/02 19:42:14 fetching corpus: 8950, signal 434554/610153 (executing program) 2022/06/02 19:42:14 fetching corpus: 9000, signal 435193/611530 (executing program) 2022/06/02 19:42:14 fetching corpus: 9050, signal 435933/612906 (executing program) 2022/06/02 19:42:15 fetching corpus: 9100, signal 436973/614462 (executing program) 2022/06/02 19:42:15 fetching corpus: 9150, signal 437972/616018 (executing program) 2022/06/02 19:42:15 fetching corpus: 9200, signal 438541/617327 (executing program) 2022/06/02 19:42:15 fetching corpus: 9250, signal 439251/618675 (executing program) 2022/06/02 19:42:15 fetching corpus: 9300, signal 439963/620021 (executing program) 2022/06/02 19:42:15 fetching corpus: 9350, signal 440533/621343 (executing program) 2022/06/02 19:42:15 fetching corpus: 9400, signal 441108/622689 (executing program) 2022/06/02 19:42:15 fetching corpus: 9450, signal 441752/623976 (executing program) 2022/06/02 19:42:15 fetching corpus: 9500, signal 442382/625316 (executing program) 2022/06/02 19:42:15 fetching corpus: 9550, signal 443253/626771 (executing program) 2022/06/02 19:42:16 fetching corpus: 9600, signal 443812/628056 (executing program) 2022/06/02 19:42:16 fetching corpus: 9650, signal 444826/629507 (executing program) [ 76.193329][ T27] cfg80211: failed to load regulatory.db 2022/06/02 19:42:16 fetching corpus: 9700, signal 445767/630974 (executing program) 2022/06/02 19:42:16 fetching corpus: 9750, signal 446606/632406 (executing program) 2022/06/02 19:42:16 fetching corpus: 9800, signal 447339/633766 (executing program) 2022/06/02 19:42:16 fetching corpus: 9850, signal 448162/635198 (executing program) 2022/06/02 19:42:16 fetching corpus: 9900, signal 449103/636654 (executing program) 2022/06/02 19:42:17 fetching corpus: 9950, signal 450129/638083 (executing program) 2022/06/02 19:42:17 fetching corpus: 10000, signal 450649/639344 (executing program) 2022/06/02 19:42:17 fetching corpus: 10050, signal 451384/640674 (executing program) 2022/06/02 19:42:17 fetching corpus: 10100, signal 451944/641924 (executing program) 2022/06/02 19:42:17 fetching corpus: 10150, signal 452504/643195 (executing program) 2022/06/02 19:42:17 fetching corpus: 10200, signal 453195/644498 (executing program) 2022/06/02 19:42:17 fetching corpus: 10250, signal 454030/645859 (executing program) 2022/06/02 19:42:17 fetching corpus: 10300, signal 454958/647249 (executing program) 2022/06/02 19:42:17 fetching corpus: 10350, signal 455346/648380 (executing program) 2022/06/02 19:42:17 fetching corpus: 10400, signal 455934/649604 (executing program) 2022/06/02 19:42:18 fetching corpus: 10450, signal 456671/650915 (executing program) 2022/06/02 19:42:18 fetching corpus: 10500, signal 457130/652049 (executing program) 2022/06/02 19:42:18 fetching corpus: 10550, signal 458259/653547 (executing program) 2022/06/02 19:42:18 fetching corpus: 10600, signal 458828/654740 (executing program) 2022/06/02 19:42:18 fetching corpus: 10650, signal 459648/656084 (executing program) 2022/06/02 19:42:18 fetching corpus: 10700, signal 460220/657272 (executing program) 2022/06/02 19:42:18 fetching corpus: 10750, signal 460935/658553 (executing program) 2022/06/02 19:42:18 fetching corpus: 10800, signal 461926/659986 (executing program) 2022/06/02 19:42:18 fetching corpus: 10850, signal 462678/661277 (executing program) 2022/06/02 19:42:18 fetching corpus: 10900, signal 463345/662468 (executing program) 2022/06/02 19:42:19 fetching corpus: 10950, signal 463837/663605 (executing program) 2022/06/02 19:42:19 fetching corpus: 11000, signal 464897/665034 (executing program) 2022/06/02 19:42:19 fetching corpus: 11050, signal 465382/666179 (executing program) 2022/06/02 19:42:19 fetching corpus: 11100, signal 465871/667324 (executing program) 2022/06/02 19:42:19 fetching corpus: 11150, signal 466607/668572 (executing program) 2022/06/02 19:42:19 fetching corpus: 11200, signal 467153/669785 (executing program) 2022/06/02 19:42:19 fetching corpus: 11250, signal 467650/670865 (executing program) 2022/06/02 19:42:19 fetching corpus: 11300, signal 468218/672030 (executing program) 2022/06/02 19:42:19 fetching corpus: 11350, signal 468721/673213 (executing program) 2022/06/02 19:42:19 fetching corpus: 11400, signal 469862/674625 (executing program) 2022/06/02 19:42:20 fetching corpus: 11450, signal 470426/675742 (executing program) 2022/06/02 19:42:20 fetching corpus: 11500, signal 471067/676982 (executing program) 2022/06/02 19:42:20 fetching corpus: 11550, signal 471955/678279 (executing program) 2022/06/02 19:42:20 fetching corpus: 11600, signal 472422/679367 (executing program) 2022/06/02 19:42:20 fetching corpus: 11650, signal 473103/680561 (executing program) 2022/06/02 19:42:20 fetching corpus: 11700, signal 474051/681848 (executing program) 2022/06/02 19:42:20 fetching corpus: 11750, signal 474698/683070 (executing program) 2022/06/02 19:42:20 fetching corpus: 11800, signal 475175/684152 (executing program) 2022/06/02 19:42:21 fetching corpus: 11850, signal 475662/685284 (executing program) 2022/06/02 19:42:21 fetching corpus: 11900, signal 476161/686454 (executing program) 2022/06/02 19:42:21 fetching corpus: 11950, signal 476743/687585 (executing program) 2022/06/02 19:42:21 fetching corpus: 12000, signal 477482/688796 (executing program) 2022/06/02 19:42:21 fetching corpus: 12050, signal 478056/689914 (executing program) 2022/06/02 19:42:21 fetching corpus: 12100, signal 478620/691014 (executing program) 2022/06/02 19:42:22 fetching corpus: 12150, signal 479037/692097 (executing program) 2022/06/02 19:42:22 fetching corpus: 12200, signal 479441/693110 (executing program) 2022/06/02 19:42:22 fetching corpus: 12250, signal 479904/694221 (executing program) 2022/06/02 19:42:22 fetching corpus: 12300, signal 480332/695295 (executing program) 2022/06/02 19:42:22 fetching corpus: 12350, signal 481393/696648 (executing program) 2022/06/02 19:42:22 fetching corpus: 12400, signal 481931/697716 (executing program) 2022/06/02 19:42:22 fetching corpus: 12450, signal 482367/698789 (executing program) 2022/06/02 19:42:22 fetching corpus: 12500, signal 482827/699867 (executing program) 2022/06/02 19:42:22 fetching corpus: 12550, signal 483313/700970 (executing program) 2022/06/02 19:42:23 fetching corpus: 12600, signal 483709/701992 (executing program) 2022/06/02 19:42:23 fetching corpus: 12650, signal 484741/703312 (executing program) 2022/06/02 19:42:23 fetching corpus: 12700, signal 485380/704477 (executing program) 2022/06/02 19:42:23 fetching corpus: 12750, signal 486157/705640 (executing program) 2022/06/02 19:42:23 fetching corpus: 12800, signal 486729/706785 (executing program) 2022/06/02 19:42:23 fetching corpus: 12850, signal 487463/707901 (executing program) 2022/06/02 19:42:23 fetching corpus: 12900, signal 487854/708888 (executing program) 2022/06/02 19:42:23 fetching corpus: 12950, signal 488408/709978 (executing program) 2022/06/02 19:42:23 fetching corpus: 13000, signal 489102/711080 (executing program) 2022/06/02 19:42:24 fetching corpus: 13050, signal 489918/712233 (executing program) 2022/06/02 19:42:24 fetching corpus: 13100, signal 490624/713307 (executing program) 2022/06/02 19:42:24 fetching corpus: 13150, signal 491179/714370 (executing program) 2022/06/02 19:42:24 fetching corpus: 13200, signal 491899/715450 (executing program) 2022/06/02 19:42:24 fetching corpus: 13250, signal 492478/716503 (executing program) 2022/06/02 19:42:24 fetching corpus: 13300, signal 492977/717526 (executing program) 2022/06/02 19:42:24 fetching corpus: 13350, signal 494375/718895 (executing program) 2022/06/02 19:42:24 fetching corpus: 13400, signal 495065/719987 (executing program) 2022/06/02 19:42:25 fetching corpus: 13450, signal 495590/720998 (executing program) 2022/06/02 19:42:25 fetching corpus: 13500, signal 496153/722010 (executing program) 2022/06/02 19:42:25 fetching corpus: 13550, signal 496896/723088 (executing program) 2022/06/02 19:42:25 fetching corpus: 13600, signal 497579/724140 (executing program) 2022/06/02 19:42:25 fetching corpus: 13650, signal 498053/725174 (executing program) 2022/06/02 19:42:25 fetching corpus: 13700, signal 499090/726360 (executing program) 2022/06/02 19:42:25 fetching corpus: 13750, signal 499493/727322 (executing program) 2022/06/02 19:42:25 fetching corpus: 13800, signal 499948/728313 (executing program) 2022/06/02 19:42:25 fetching corpus: 13850, signal 500533/729368 (executing program) 2022/06/02 19:42:25 fetching corpus: 13900, signal 500921/730310 (executing program) 2022/06/02 19:42:26 fetching corpus: 13950, signal 501426/731297 (executing program) 2022/06/02 19:42:26 fetching corpus: 13999, signal 502010/732325 (executing program) 2022/06/02 19:42:26 fetching corpus: 14049, signal 502563/733341 (executing program) 2022/06/02 19:42:26 fetching corpus: 14099, signal 502999/734254 (executing program) 2022/06/02 19:42:26 fetching corpus: 14149, signal 503515/735270 (executing program) 2022/06/02 19:42:26 fetching corpus: 14199, signal 503973/736243 (executing program) 2022/06/02 19:42:26 fetching corpus: 14249, signal 504866/737292 (executing program) 2022/06/02 19:42:26 fetching corpus: 14299, signal 505253/738217 (executing program) 2022/06/02 19:42:26 fetching corpus: 14349, signal 505995/739301 (executing program) 2022/06/02 19:42:27 fetching corpus: 14399, signal 506585/740292 (executing program) 2022/06/02 19:42:27 fetching corpus: 14449, signal 507241/741268 (executing program) 2022/06/02 19:42:27 fetching corpus: 14499, signal 508516/742524 (executing program) 2022/06/02 19:42:27 fetching corpus: 14549, signal 509130/743493 (executing program) 2022/06/02 19:42:27 fetching corpus: 14599, signal 509522/744437 (executing program) 2022/06/02 19:42:27 fetching corpus: 14649, signal 509974/745396 (executing program) 2022/06/02 19:42:27 fetching corpus: 14699, signal 510550/746402 (executing program) 2022/06/02 19:42:27 fetching corpus: 14749, signal 511184/747392 (executing program) 2022/06/02 19:42:27 fetching corpus: 14799, signal 511511/748284 (executing program) 2022/06/02 19:42:27 fetching corpus: 14849, signal 512185/749286 (executing program) 2022/06/02 19:42:28 fetching corpus: 14899, signal 512916/750332 (executing program) 2022/06/02 19:42:28 fetching corpus: 14949, signal 513539/751323 (executing program) 2022/06/02 19:42:28 fetching corpus: 14999, signal 514178/752326 (executing program) 2022/06/02 19:42:28 fetching corpus: 15049, signal 514710/753296 (executing program) 2022/06/02 19:42:28 fetching corpus: 15099, signal 515318/754277 (executing program) 2022/06/02 19:42:28 fetching corpus: 15149, signal 515831/755195 (executing program) 2022/06/02 19:42:28 fetching corpus: 15199, signal 516430/756182 (executing program) 2022/06/02 19:42:28 fetching corpus: 15249, signal 516790/757049 (executing program) 2022/06/02 19:42:29 fetching corpus: 15299, signal 517208/757936 (executing program) 2022/06/02 19:42:29 fetching corpus: 15349, signal 517721/758890 (executing program) 2022/06/02 19:42:29 fetching corpus: 15399, signal 518224/759821 (executing program) 2022/06/02 19:42:29 fetching corpus: 15449, signal 519006/760850 (executing program) 2022/06/02 19:42:29 fetching corpus: 15499, signal 519662/761833 (executing program) 2022/06/02 19:42:29 fetching corpus: 15549, signal 519926/762683 (executing program) 2022/06/02 19:42:29 fetching corpus: 15599, signal 520705/763658 (executing program) 2022/06/02 19:42:29 fetching corpus: 15649, signal 521116/764567 (executing program) 2022/06/02 19:42:29 fetching corpus: 15699, signal 521741/765490 (executing program) 2022/06/02 19:42:30 fetching corpus: 15749, signal 522425/766421 (executing program) 2022/06/02 19:42:30 fetching corpus: 15799, signal 522899/767362 (executing program) 2022/06/02 19:42:30 fetching corpus: 15849, signal 523483/768307 (executing program) 2022/06/02 19:42:30 fetching corpus: 15899, signal 524085/769264 (executing program) 2022/06/02 19:42:30 fetching corpus: 15949, signal 524478/770156 (executing program) 2022/06/02 19:42:30 fetching corpus: 15999, signal 525128/771142 (executing program) 2022/06/02 19:42:30 fetching corpus: 16049, signal 525722/772080 (executing program) 2022/06/02 19:42:30 fetching corpus: 16099, signal 526209/772926 (executing program) 2022/06/02 19:42:30 fetching corpus: 16149, signal 526772/773796 (executing program) 2022/06/02 19:42:30 fetching corpus: 16199, signal 527152/774643 (executing program) 2022/06/02 19:42:31 fetching corpus: 16249, signal 527577/775465 (executing program) 2022/06/02 19:42:31 fetching corpus: 16299, signal 528105/776314 (executing program) 2022/06/02 19:42:31 fetching corpus: 16349, signal 529445/777400 (executing program) 2022/06/02 19:42:31 fetching corpus: 16399, signal 529972/778307 (executing program) 2022/06/02 19:42:31 fetching corpus: 16449, signal 530281/779106 (executing program) 2022/06/02 19:42:31 fetching corpus: 16499, signal 530866/779984 (executing program) 2022/06/02 19:42:31 fetching corpus: 16549, signal 531449/780878 (executing program) 2022/06/02 19:42:31 fetching corpus: 16599, signal 531967/781749 (executing program) 2022/06/02 19:42:31 fetching corpus: 16649, signal 532623/782629 (executing program) 2022/06/02 19:42:31 fetching corpus: 16699, signal 532943/783453 (executing program) 2022/06/02 19:42:31 fetching corpus: 16749, signal 533955/784459 (executing program) 2022/06/02 19:42:32 fetching corpus: 16799, signal 534465/785364 (executing program) 2022/06/02 19:42:32 fetching corpus: 16849, signal 534890/786171 (executing program) 2022/06/02 19:42:32 fetching corpus: 16899, signal 535651/787070 (executing program) 2022/06/02 19:42:32 fetching corpus: 16949, signal 536581/788012 (executing program) 2022/06/02 19:42:32 fetching corpus: 16999, signal 536998/788795 (executing program) 2022/06/02 19:42:32 fetching corpus: 17049, signal 537686/789699 (executing program) 2022/06/02 19:42:32 fetching corpus: 17099, signal 538128/790561 (executing program) 2022/06/02 19:42:32 fetching corpus: 17149, signal 538710/791385 (executing program) 2022/06/02 19:42:32 fetching corpus: 17199, signal 539231/792235 (executing program) 2022/06/02 19:42:33 fetching corpus: 17249, signal 539655/793022 (executing program) 2022/06/02 19:42:33 fetching corpus: 17299, signal 540029/793799 (executing program) 2022/06/02 19:42:33 fetching corpus: 17349, signal 540492/794608 (executing program) 2022/06/02 19:42:33 fetching corpus: 17399, signal 541070/795424 (executing program) 2022/06/02 19:42:33 fetching corpus: 17449, signal 541457/796241 (executing program) 2022/06/02 19:42:33 fetching corpus: 17499, signal 541861/797035 (executing program) 2022/06/02 19:42:33 fetching corpus: 17549, signal 542274/797799 (executing program) 2022/06/02 19:42:33 fetching corpus: 17599, signal 542711/798600 (executing program) 2022/06/02 19:42:33 fetching corpus: 17649, signal 543082/799388 (executing program) 2022/06/02 19:42:33 fetching corpus: 17699, signal 543740/800217 (executing program) 2022/06/02 19:42:33 fetching corpus: 17749, signal 544245/800993 (executing program) 2022/06/02 19:42:34 fetching corpus: 17799, signal 544515/801729 (executing program) 2022/06/02 19:42:34 fetching corpus: 17849, signal 544995/802525 (executing program) 2022/06/02 19:42:34 fetching corpus: 17899, signal 545316/803298 (executing program) 2022/06/02 19:42:34 fetching corpus: 17949, signal 545675/804040 (executing program) 2022/06/02 19:42:34 fetching corpus: 17999, signal 546421/804910 (executing program) 2022/06/02 19:42:34 fetching corpus: 18049, signal 546963/805706 (executing program) 2022/06/02 19:42:34 fetching corpus: 18099, signal 547194/806446 (executing program) 2022/06/02 19:42:34 fetching corpus: 18149, signal 547611/807239 (executing program) 2022/06/02 19:42:34 fetching corpus: 18199, signal 547954/808001 (executing program) 2022/06/02 19:42:35 fetching corpus: 18249, signal 548415/808800 (executing program) 2022/06/02 19:42:35 fetching corpus: 18299, signal 548765/809540 (executing program) 2022/06/02 19:42:35 fetching corpus: 18349, signal 549168/810338 (executing program) 2022/06/02 19:42:35 fetching corpus: 18399, signal 549600/811086 (executing program) 2022/06/02 19:42:35 fetching corpus: 18449, signal 550341/811909 (executing program) 2022/06/02 19:42:35 fetching corpus: 18499, signal 550889/812689 (executing program) 2022/06/02 19:42:35 fetching corpus: 18549, signal 551260/813470 (executing program) 2022/06/02 19:42:35 fetching corpus: 18599, signal 551598/814214 (executing program) 2022/06/02 19:42:35 fetching corpus: 18649, signal 551961/814957 (executing program) 2022/06/02 19:42:35 fetching corpus: 18699, signal 552408/815702 (executing program) 2022/06/02 19:42:36 fetching corpus: 18749, signal 552845/816478 (executing program) 2022/06/02 19:42:36 fetching corpus: 18799, signal 553329/817239 (executing program) 2022/06/02 19:42:36 fetching corpus: 18849, signal 553769/818003 (executing program) 2022/06/02 19:42:36 fetching corpus: 18899, signal 554202/818772 (executing program) 2022/06/02 19:42:36 fetching corpus: 18949, signal 554547/819521 (executing program) 2022/06/02 19:42:36 fetching corpus: 18999, signal 555018/820278 (executing program) 2022/06/02 19:42:36 fetching corpus: 19049, signal 555351/820990 (executing program) 2022/06/02 19:42:36 fetching corpus: 19099, signal 555605/821723 (executing program) 2022/06/02 19:42:36 fetching corpus: 19149, signal 556061/822518 (executing program) 2022/06/02 19:42:36 fetching corpus: 19199, signal 556462/823221 (executing program) 2022/06/02 19:42:37 fetching corpus: 19249, signal 556817/823961 (executing program) 2022/06/02 19:42:37 fetching corpus: 19299, signal 557281/824702 (executing program) 2022/06/02 19:42:37 fetching corpus: 19349, signal 557701/825392 (executing program) 2022/06/02 19:42:37 fetching corpus: 19399, signal 558265/826196 (executing program) 2022/06/02 19:42:37 fetching corpus: 19449, signal 558650/826949 (executing program) 2022/06/02 19:42:37 fetching corpus: 19499, signal 559050/827647 (executing program) 2022/06/02 19:42:37 fetching corpus: 19549, signal 559402/828371 (executing program) 2022/06/02 19:42:37 fetching corpus: 19599, signal 559672/829072 (executing program) 2022/06/02 19:42:37 fetching corpus: 19649, signal 560405/829855 (executing program) 2022/06/02 19:42:37 fetching corpus: 19699, signal 560827/830542 (executing program) 2022/06/02 19:42:38 fetching corpus: 19749, signal 561326/831201 (executing program) 2022/06/02 19:42:38 fetching corpus: 19799, signal 561715/831904 (executing program) 2022/06/02 19:42:38 fetching corpus: 19849, signal 562051/832618 (executing program) 2022/06/02 19:42:38 fetching corpus: 19899, signal 562412/833329 (executing program) 2022/06/02 19:42:38 fetching corpus: 19949, signal 562849/834039 (executing program) 2022/06/02 19:42:38 fetching corpus: 19999, signal 563313/834731 (executing program) 2022/06/02 19:42:38 fetching corpus: 20049, signal 563924/835429 (executing program) 2022/06/02 19:42:38 fetching corpus: 20099, signal 565874/836198 (executing program) 2022/06/02 19:42:39 fetching corpus: 20149, signal 566231/836920 (executing program) 2022/06/02 19:42:39 fetching corpus: 20199, signal 566510/837602 (executing program) 2022/06/02 19:42:39 fetching corpus: 20249, signal 566810/838286 (executing program) 2022/06/02 19:42:39 fetching corpus: 20299, signal 567181/838974 (executing program) 2022/06/02 19:42:39 fetching corpus: 20349, signal 567512/839630 (executing program) 2022/06/02 19:42:39 fetching corpus: 20399, signal 567932/840291 (executing program) 2022/06/02 19:42:39 fetching corpus: 20449, signal 568228/840942 (executing program) 2022/06/02 19:42:39 fetching corpus: 20499, signal 568713/841599 (executing program) 2022/06/02 19:42:39 fetching corpus: 20549, signal 569088/842270 (executing program) 2022/06/02 19:42:40 fetching corpus: 20599, signal 569557/842967 (executing program) 2022/06/02 19:42:40 fetching corpus: 20649, signal 569855/843617 (executing program) 2022/06/02 19:42:40 fetching corpus: 20699, signal 570226/844298 (executing program) 2022/06/02 19:42:40 fetching corpus: 20749, signal 570678/844959 (executing program) 2022/06/02 19:42:40 fetching corpus: 20799, signal 571012/845640 (executing program) 2022/06/02 19:42:40 fetching corpus: 20849, signal 571521/846332 (executing program) 2022/06/02 19:42:41 fetching corpus: 20899, signal 571747/847010 (executing program) 2022/06/02 19:42:41 fetching corpus: 20949, signal 572099/847696 (executing program) 2022/06/02 19:42:41 fetching corpus: 20999, signal 572439/848357 (executing program) 2022/06/02 19:42:41 fetching corpus: 21049, signal 572708/849002 (executing program) 2022/06/02 19:42:41 fetching corpus: 21099, signal 573012/849641 (executing program) 2022/06/02 19:42:41 fetching corpus: 21149, signal 573389/850286 (executing program) 2022/06/02 19:42:41 fetching corpus: 21199, signal 573830/850895 (executing program) 2022/06/02 19:42:41 fetching corpus: 21249, signal 574262/851323 (executing program) 2022/06/02 19:42:41 fetching corpus: 21299, signal 574714/851323 (executing program) 2022/06/02 19:42:42 fetching corpus: 21349, signal 575095/851353 (executing program) 2022/06/02 19:42:42 fetching corpus: 21399, signal 575530/851353 (executing program) 2022/06/02 19:42:42 fetching corpus: 21449, signal 576010/851353 (executing program) 2022/06/02 19:42:42 fetching corpus: 21499, signal 576579/851353 (executing program) 2022/06/02 19:42:42 fetching corpus: 21549, signal 577132/851353 (executing program) 2022/06/02 19:42:42 fetching corpus: 21599, signal 577811/851353 (executing program) 2022/06/02 19:42:42 fetching corpus: 21649, signal 578150/851353 (executing program) 2022/06/02 19:42:42 fetching corpus: 21699, signal 578435/851353 (executing program) 2022/06/02 19:42:42 fetching corpus: 21749, signal 578804/851353 (executing program) 2022/06/02 19:42:43 fetching corpus: 21799, signal 579171/851353 (executing program) 2022/06/02 19:42:43 fetching corpus: 21849, signal 579570/851360 (executing program) 2022/06/02 19:42:43 fetching corpus: 21899, signal 579837/851360 (executing program) 2022/06/02 19:42:43 fetching corpus: 21949, signal 580190/851360 (executing program) 2022/06/02 19:42:43 fetching corpus: 21999, signal 580633/851360 (executing program) 2022/06/02 19:42:43 fetching corpus: 22049, signal 580924/851360 (executing program) 2022/06/02 19:42:43 fetching corpus: 22099, signal 581341/851360 (executing program) 2022/06/02 19:42:43 fetching corpus: 22149, signal 581653/851360 (executing program) 2022/06/02 19:42:43 fetching corpus: 22199, signal 581998/851360 (executing program) 2022/06/02 19:42:43 fetching corpus: 22249, signal 582268/851360 (executing program) 2022/06/02 19:42:44 fetching corpus: 22299, signal 582748/851360 (executing program) 2022/06/02 19:42:44 fetching corpus: 22349, signal 583094/851360 (executing program) 2022/06/02 19:42:44 fetching corpus: 22399, signal 583524/851360 (executing program) 2022/06/02 19:42:44 fetching corpus: 22449, signal 583841/851360 (executing program) 2022/06/02 19:42:44 fetching corpus: 22499, signal 584140/851360 (executing program) 2022/06/02 19:42:44 fetching corpus: 22549, signal 584521/851368 (executing program) 2022/06/02 19:42:44 fetching corpus: 22599, signal 585518/851368 (executing program) 2022/06/02 19:42:44 fetching corpus: 22649, signal 585784/851368 (executing program) 2022/06/02 19:42:44 fetching corpus: 22699, signal 586020/851368 (executing program) 2022/06/02 19:42:44 fetching corpus: 22749, signal 586397/851368 (executing program) 2022/06/02 19:42:45 fetching corpus: 22799, signal 587005/851368 (executing program) 2022/06/02 19:42:45 fetching corpus: 22849, signal 587370/851368 (executing program) 2022/06/02 19:42:45 fetching corpus: 22899, signal 587777/851368 (executing program) 2022/06/02 19:42:45 fetching corpus: 22949, signal 588058/851368 (executing program) 2022/06/02 19:42:45 fetching corpus: 22999, signal 588480/851368 (executing program) 2022/06/02 19:42:45 fetching corpus: 23049, signal 588778/851368 (executing program) 2022/06/02 19:42:45 fetching corpus: 23099, signal 589149/851382 (executing program) 2022/06/02 19:42:45 fetching corpus: 23149, signal 589677/851382 (executing program) 2022/06/02 19:42:45 fetching corpus: 23199, signal 590063/851382 (executing program) 2022/06/02 19:42:45 fetching corpus: 23249, signal 590366/851382 (executing program) 2022/06/02 19:42:45 fetching corpus: 23299, signal 590952/851382 (executing program) 2022/06/02 19:42:46 fetching corpus: 23349, signal 591314/851382 (executing program) 2022/06/02 19:42:46 fetching corpus: 23399, signal 592008/851384 (executing program) 2022/06/02 19:42:46 fetching corpus: 23449, signal 592356/851384 (executing program) 2022/06/02 19:42:46 fetching corpus: 23499, signal 592713/851384 (executing program) 2022/06/02 19:42:46 fetching corpus: 23549, signal 593110/851384 (executing program) 2022/06/02 19:42:46 fetching corpus: 23599, signal 593797/851384 (executing program) 2022/06/02 19:42:46 fetching corpus: 23649, signal 594050/851384 (executing program) 2022/06/02 19:42:46 fetching corpus: 23699, signal 594608/851384 (executing program) 2022/06/02 19:42:46 fetching corpus: 23749, signal 594944/851384 (executing program) 2022/06/02 19:42:46 fetching corpus: 23799, signal 595273/851384 (executing program) 2022/06/02 19:42:47 fetching corpus: 23849, signal 595583/851384 (executing program) 2022/06/02 19:42:47 fetching corpus: 23899, signal 595867/851384 (executing program) 2022/06/02 19:42:47 fetching corpus: 23949, signal 596250/851384 (executing program) 2022/06/02 19:42:47 fetching corpus: 23999, signal 596698/851384 (executing program) 2022/06/02 19:42:47 fetching corpus: 24049, signal 597127/851394 (executing program) 2022/06/02 19:42:47 fetching corpus: 24099, signal 597465/851403 (executing program) 2022/06/02 19:42:47 fetching corpus: 24149, signal 597628/851403 (executing program) 2022/06/02 19:42:47 fetching corpus: 24199, signal 597874/851403 (executing program) 2022/06/02 19:42:47 fetching corpus: 24249, signal 598378/851403 (executing program) 2022/06/02 19:42:47 fetching corpus: 24299, signal 598693/851403 (executing program) 2022/06/02 19:42:48 fetching corpus: 24349, signal 599262/851403 (executing program) 2022/06/02 19:42:48 fetching corpus: 24399, signal 599577/851403 (executing program) 2022/06/02 19:42:48 fetching corpus: 24449, signal 600202/851412 (executing program) 2022/06/02 19:42:49 fetching corpus: 24499, signal 600571/851412 (executing program) 2022/06/02 19:42:49 fetching corpus: 24549, signal 601117/851412 (executing program) 2022/06/02 19:42:49 fetching corpus: 24599, signal 601476/851412 (executing program) 2022/06/02 19:42:49 fetching corpus: 24649, signal 601977/851412 (executing program) 2022/06/02 19:42:49 fetching corpus: 24699, signal 602382/851412 (executing program) 2022/06/02 19:42:49 fetching corpus: 24749, signal 602647/851412 (executing program) 2022/06/02 19:42:49 fetching corpus: 24799, signal 602996/851412 (executing program) 2022/06/02 19:42:49 fetching corpus: 24849, signal 603369/851412 (executing program) 2022/06/02 19:42:49 fetching corpus: 24899, signal 603823/851412 (executing program) 2022/06/02 19:42:49 fetching corpus: 24949, signal 604199/851412 (executing program) 2022/06/02 19:42:50 fetching corpus: 24999, signal 604598/851412 (executing program) 2022/06/02 19:42:50 fetching corpus: 25049, signal 604910/851412 (executing program) 2022/06/02 19:42:50 fetching corpus: 25099, signal 606288/851412 (executing program) 2022/06/02 19:42:50 fetching corpus: 25149, signal 606650/851412 (executing program) 2022/06/02 19:42:50 fetching corpus: 25199, signal 606998/851412 (executing program) 2022/06/02 19:42:50 fetching corpus: 25249, signal 607303/851412 (executing program) 2022/06/02 19:42:50 fetching corpus: 25299, signal 607688/851419 (executing program) 2022/06/02 19:42:50 fetching corpus: 25349, signal 608172/851419 (executing program) 2022/06/02 19:42:50 fetching corpus: 25399, signal 608443/851419 (executing program) 2022/06/02 19:42:51 fetching corpus: 25449, signal 608836/851419 (executing program) 2022/06/02 19:42:51 fetching corpus: 25499, signal 609176/851419 (executing program) 2022/06/02 19:42:51 fetching corpus: 25549, signal 609537/851419 (executing program) 2022/06/02 19:42:51 fetching corpus: 25599, signal 609892/851419 (executing program) 2022/06/02 19:42:51 fetching corpus: 25649, signal 610342/851419 (executing program) 2022/06/02 19:42:51 fetching corpus: 25699, signal 610702/851419 (executing program) 2022/06/02 19:42:51 fetching corpus: 25749, signal 611094/851419 (executing program) 2022/06/02 19:42:51 fetching corpus: 25799, signal 611318/851419 (executing program) 2022/06/02 19:42:51 fetching corpus: 25849, signal 611713/851419 (executing program) 2022/06/02 19:42:52 fetching corpus: 25899, signal 612122/851419 (executing program) 2022/06/02 19:42:52 fetching corpus: 25949, signal 612390/851419 (executing program) 2022/06/02 19:42:52 fetching corpus: 25999, signal 616661/851419 (executing program) 2022/06/02 19:42:52 fetching corpus: 26049, signal 617017/851419 (executing program) 2022/06/02 19:42:52 fetching corpus: 26099, signal 617429/851419 (executing program) 2022/06/02 19:42:52 fetching corpus: 26149, signal 617724/851419 (executing program) 2022/06/02 19:42:52 fetching corpus: 26199, signal 618269/851419 (executing program) 2022/06/02 19:42:52 fetching corpus: 26249, signal 618548/851419 (executing program) 2022/06/02 19:42:52 fetching corpus: 26299, signal 618840/851421 (executing program) 2022/06/02 19:42:53 fetching corpus: 26349, signal 619098/851421 (executing program) 2022/06/02 19:42:53 fetching corpus: 26399, signal 619524/851421 (executing program) 2022/06/02 19:42:53 fetching corpus: 26449, signal 619848/851421 (executing program) 2022/06/02 19:42:53 fetching corpus: 26499, signal 620255/851421 (executing program) 2022/06/02 19:42:53 fetching corpus: 26549, signal 620515/851421 (executing program) 2022/06/02 19:42:53 fetching corpus: 26599, signal 621695/851425 (executing program) 2022/06/02 19:42:53 fetching corpus: 26649, signal 621993/851425 (executing program) 2022/06/02 19:42:53 fetching corpus: 26699, signal 622412/851425 (executing program) 2022/06/02 19:42:53 fetching corpus: 26749, signal 622731/851425 (executing program) 2022/06/02 19:42:53 fetching corpus: 26799, signal 623046/851425 (executing program) 2022/06/02 19:42:54 fetching corpus: 26849, signal 623397/851425 (executing program) 2022/06/02 19:42:54 fetching corpus: 26899, signal 623744/851425 (executing program) 2022/06/02 19:42:54 fetching corpus: 26949, signal 623987/851425 (executing program) 2022/06/02 19:42:54 fetching corpus: 26999, signal 624326/851425 (executing program) 2022/06/02 19:42:54 fetching corpus: 27049, signal 624607/851425 (executing program) 2022/06/02 19:42:54 fetching corpus: 27099, signal 624836/851428 (executing program) 2022/06/02 19:42:54 fetching corpus: 27149, signal 625152/851428 (executing program) 2022/06/02 19:42:54 fetching corpus: 27199, signal 625365/851428 (executing program) 2022/06/02 19:42:54 fetching corpus: 27249, signal 625649/851428 (executing program) 2022/06/02 19:42:55 fetching corpus: 27299, signal 625967/851428 (executing program) 2022/06/02 19:42:55 fetching corpus: 27349, signal 626196/851428 (executing program) 2022/06/02 19:42:55 fetching corpus: 27399, signal 626637/851428 (executing program) 2022/06/02 19:42:55 fetching corpus: 27449, signal 627052/851428 (executing program) 2022/06/02 19:42:55 fetching corpus: 27499, signal 627410/851428 (executing program) 2022/06/02 19:42:55 fetching corpus: 27549, signal 627677/851428 (executing program) 2022/06/02 19:42:55 fetching corpus: 27599, signal 628059/851428 (executing program) 2022/06/02 19:42:55 fetching corpus: 27649, signal 628404/851430 (executing program) 2022/06/02 19:42:55 fetching corpus: 27699, signal 628689/851430 (executing program) 2022/06/02 19:42:55 fetching corpus: 27749, signal 629139/851430 (executing program) 2022/06/02 19:42:56 fetching corpus: 27799, signal 629456/851430 (executing program) 2022/06/02 19:42:56 fetching corpus: 27849, signal 629722/851430 (executing program) 2022/06/02 19:42:56 fetching corpus: 27899, signal 629900/851430 (executing program) 2022/06/02 19:42:56 fetching corpus: 27949, signal 630545/851430 (executing program) 2022/06/02 19:42:56 fetching corpus: 27999, signal 630854/851430 (executing program) 2022/06/02 19:42:56 fetching corpus: 28049, signal 631391/851430 (executing program) 2022/06/02 19:42:56 fetching corpus: 28099, signal 631646/851433 (executing program) 2022/06/02 19:42:56 fetching corpus: 28149, signal 631981/851437 (executing program) 2022/06/02 19:42:56 fetching corpus: 28199, signal 632338/851437 (executing program) 2022/06/02 19:42:56 fetching corpus: 28249, signal 632672/851437 (executing program) 2022/06/02 19:42:56 fetching corpus: 28299, signal 633086/851437 (executing program) 2022/06/02 19:42:56 fetching corpus: 28349, signal 633337/851437 (executing program) 2022/06/02 19:42:57 fetching corpus: 28399, signal 633533/851437 (executing program) 2022/06/02 19:42:57 fetching corpus: 28449, signal 633820/851437 (executing program) 2022/06/02 19:42:57 fetching corpus: 28499, signal 634162/851437 (executing program) 2022/06/02 19:42:57 fetching corpus: 28549, signal 634414/851438 (executing program) 2022/06/02 19:42:57 fetching corpus: 28599, signal 634707/851438 (executing program) 2022/06/02 19:42:57 fetching corpus: 28649, signal 635073/851441 (executing program) 2022/06/02 19:42:58 fetching corpus: 28699, signal 635386/851441 (executing program) 2022/06/02 19:42:58 fetching corpus: 28749, signal 635665/851442 (executing program) 2022/06/02 19:42:58 fetching corpus: 28799, signal 635950/851442 (executing program) 2022/06/02 19:42:58 fetching corpus: 28849, signal 636233/851442 (executing program) 2022/06/02 19:42:58 fetching corpus: 28899, signal 636579/851442 (executing program) 2022/06/02 19:42:58 fetching corpus: 28949, signal 636850/851442 (executing program) 2022/06/02 19:42:58 fetching corpus: 28999, signal 637328/851442 (executing program) 2022/06/02 19:42:58 fetching corpus: 29049, signal 637623/851442 (executing program) 2022/06/02 19:42:58 fetching corpus: 29099, signal 637972/851442 (executing program) 2022/06/02 19:42:58 fetching corpus: 29149, signal 638211/851442 (executing program) 2022/06/02 19:42:58 fetching corpus: 29199, signal 638528/851442 (executing program) 2022/06/02 19:42:58 fetching corpus: 29249, signal 638745/851442 (executing program) 2022/06/02 19:42:59 fetching corpus: 29299, signal 638961/851442 (executing program) 2022/06/02 19:42:59 fetching corpus: 29349, signal 639229/851445 (executing program) 2022/06/02 19:42:59 fetching corpus: 29399, signal 639572/851445 (executing program) 2022/06/02 19:42:59 fetching corpus: 29449, signal 642049/851445 (executing program) 2022/06/02 19:42:59 fetching corpus: 29499, signal 642295/851445 (executing program) 2022/06/02 19:42:59 fetching corpus: 29549, signal 642515/851458 (executing program) 2022/06/02 19:42:59 fetching corpus: 29599, signal 642828/851458 (executing program) 2022/06/02 19:42:59 fetching corpus: 29649, signal 643041/851458 (executing program) 2022/06/02 19:42:59 fetching corpus: 29699, signal 643408/851458 (executing program) 2022/06/02 19:43:00 fetching corpus: 29749, signal 644079/851458 (executing program) 2022/06/02 19:43:00 fetching corpus: 29799, signal 644380/851460 (executing program) 2022/06/02 19:43:00 fetching corpus: 29849, signal 644717/851460 (executing program) 2022/06/02 19:43:00 fetching corpus: 29899, signal 645194/851460 (executing program) 2022/06/02 19:43:00 fetching corpus: 29949, signal 645611/851460 (executing program) 2022/06/02 19:43:00 fetching corpus: 29999, signal 645989/851461 (executing program) 2022/06/02 19:43:00 fetching corpus: 30049, signal 646278/851461 (executing program) 2022/06/02 19:43:00 fetching corpus: 30099, signal 646536/851461 (executing program) 2022/06/02 19:43:01 fetching corpus: 30149, signal 646893/851461 (executing program) 2022/06/02 19:43:01 fetching corpus: 30199, signal 647129/851463 (executing program) 2022/06/02 19:43:01 fetching corpus: 30249, signal 647461/851463 (executing program) 2022/06/02 19:43:01 fetching corpus: 30299, signal 647749/851463 (executing program) 2022/06/02 19:43:01 fetching corpus: 30349, signal 648113/851463 (executing program) 2022/06/02 19:43:01 fetching corpus: 30399, signal 648469/851463 (executing program) 2022/06/02 19:43:01 fetching corpus: 30449, signal 648793/851463 (executing program) 2022/06/02 19:43:01 fetching corpus: 30499, signal 649250/851463 (executing program) 2022/06/02 19:43:01 fetching corpus: 30549, signal 649533/851463 (executing program) 2022/06/02 19:43:01 fetching corpus: 30599, signal 649808/851463 (executing program) 2022/06/02 19:43:02 fetching corpus: 30649, signal 650216/851463 (executing program) 2022/06/02 19:43:02 fetching corpus: 30699, signal 650564/851463 (executing program) 2022/06/02 19:43:02 fetching corpus: 30749, signal 650775/851463 (executing program) 2022/06/02 19:43:02 fetching corpus: 30799, signal 651128/851463 (executing program) 2022/06/02 19:43:02 fetching corpus: 30849, signal 651333/851465 (executing program) 2022/06/02 19:43:02 fetching corpus: 30899, signal 651734/851465 (executing program) 2022/06/02 19:43:02 fetching corpus: 30949, signal 651953/851465 (executing program) 2022/06/02 19:43:02 fetching corpus: 30999, signal 652130/851465 (executing program) 2022/06/02 19:43:03 fetching corpus: 31049, signal 652355/851465 (executing program) 2022/06/02 19:43:03 fetching corpus: 31099, signal 652633/851465 (executing program) 2022/06/02 19:43:03 fetching corpus: 31149, signal 652942/851465 (executing program) 2022/06/02 19:43:03 fetching corpus: 31199, signal 653455/851465 (executing program) 2022/06/02 19:43:03 fetching corpus: 31249, signal 653859/851465 (executing program) 2022/06/02 19:43:03 fetching corpus: 31299, signal 654204/851465 (executing program) 2022/06/02 19:43:03 fetching corpus: 31349, signal 654389/851465 (executing program) 2022/06/02 19:43:03 fetching corpus: 31399, signal 654761/851465 (executing program) 2022/06/02 19:43:03 fetching corpus: 31449, signal 655403/851465 (executing program) 2022/06/02 19:43:04 fetching corpus: 31499, signal 655792/851465 (executing program) 2022/06/02 19:43:04 fetching corpus: 31549, signal 656057/851465 (executing program) 2022/06/02 19:43:04 fetching corpus: 31599, signal 656401/851465 (executing program) 2022/06/02 19:43:04 fetching corpus: 31649, signal 656719/851465 (executing program) 2022/06/02 19:43:04 fetching corpus: 31699, signal 656980/851465 (executing program) 2022/06/02 19:43:04 fetching corpus: 31749, signal 657246/851465 (executing program) 2022/06/02 19:43:04 fetching corpus: 31799, signal 657458/851465 (executing program) 2022/06/02 19:43:04 fetching corpus: 31849, signal 657730/851465 (executing program) 2022/06/02 19:43:04 fetching corpus: 31899, signal 657987/851465 (executing program) 2022/06/02 19:43:04 fetching corpus: 31949, signal 659154/851465 (executing program) 2022/06/02 19:43:05 fetching corpus: 31999, signal 659696/851465 (executing program) 2022/06/02 19:43:05 fetching corpus: 32049, signal 659895/851465 (executing program) 2022/06/02 19:43:05 fetching corpus: 32099, signal 660290/851465 (executing program) 2022/06/02 19:43:05 fetching corpus: 32149, signal 660550/851465 (executing program) 2022/06/02 19:43:05 fetching corpus: 32199, signal 660836/851465 (executing program) 2022/06/02 19:43:05 fetching corpus: 32249, signal 661167/851465 (executing program) 2022/06/02 19:43:05 fetching corpus: 32299, signal 661438/851465 (executing program) 2022/06/02 19:43:05 fetching corpus: 32349, signal 661976/851466 (executing program) 2022/06/02 19:43:05 fetching corpus: 32399, signal 662265/851476 (executing program) 2022/06/02 19:43:05 fetching corpus: 32449, signal 662586/851485 (executing program) 2022/06/02 19:43:05 fetching corpus: 32499, signal 662873/851485 (executing program) 2022/06/02 19:43:06 fetching corpus: 32549, signal 663073/851485 (executing program) 2022/06/02 19:43:06 fetching corpus: 32599, signal 663329/851485 (executing program) 2022/06/02 19:43:06 fetching corpus: 32649, signal 663890/851485 (executing program) 2022/06/02 19:43:06 fetching corpus: 32699, signal 664204/851485 (executing program) 2022/06/02 19:43:06 fetching corpus: 32749, signal 664549/851485 (executing program) 2022/06/02 19:43:06 fetching corpus: 32799, signal 664769/851485 (executing program) 2022/06/02 19:43:06 fetching corpus: 32849, signal 665041/851486 (executing program) 2022/06/02 19:43:06 fetching corpus: 32899, signal 665311/851486 (executing program) 2022/06/02 19:43:07 fetching corpus: 32949, signal 665575/851486 (executing program) 2022/06/02 19:43:07 fetching corpus: 32999, signal 665843/851486 (executing program) 2022/06/02 19:43:07 fetching corpus: 33049, signal 666169/851486 (executing program) 2022/06/02 19:43:07 fetching corpus: 33099, signal 666399/851487 (executing program) 2022/06/02 19:43:07 fetching corpus: 33149, signal 666647/851487 (executing program) 2022/06/02 19:43:07 fetching corpus: 33199, signal 666932/851487 (executing program) 2022/06/02 19:43:07 fetching corpus: 33249, signal 667268/851487 (executing program) 2022/06/02 19:43:08 fetching corpus: 33299, signal 667508/851487 (executing program) 2022/06/02 19:43:08 fetching corpus: 33349, signal 667725/851489 (executing program) 2022/06/02 19:43:08 fetching corpus: 33399, signal 667975/851492 (executing program) 2022/06/02 19:43:08 fetching corpus: 33449, signal 668204/851492 (executing program) 2022/06/02 19:43:08 fetching corpus: 33499, signal 668895/851492 (executing program) 2022/06/02 19:43:08 fetching corpus: 33549, signal 669117/851492 (executing program) 2022/06/02 19:43:08 fetching corpus: 33599, signal 669297/851492 (executing program) 2022/06/02 19:43:09 fetching corpus: 33649, signal 669620/851492 (executing program) 2022/06/02 19:43:09 fetching corpus: 33699, signal 669800/851492 (executing program) 2022/06/02 19:43:09 fetching corpus: 33749, signal 669954/851492 (executing program) 2022/06/02 19:43:09 fetching corpus: 33799, signal 670231/851492 (executing program) 2022/06/02 19:43:09 fetching corpus: 33849, signal 670430/851495 (executing program) 2022/06/02 19:43:09 fetching corpus: 33899, signal 670710/851495 (executing program) 2022/06/02 19:43:09 fetching corpus: 33949, signal 671161/851495 (executing program) 2022/06/02 19:43:09 fetching corpus: 33999, signal 671401/851495 (executing program) 2022/06/02 19:43:09 fetching corpus: 34049, signal 671626/851495 (executing program) 2022/06/02 19:43:10 fetching corpus: 34099, signal 672147/851497 (executing program) 2022/06/02 19:43:10 fetching corpus: 34149, signal 672496/851497 (executing program) 2022/06/02 19:43:10 fetching corpus: 34199, signal 672651/851497 (executing program) 2022/06/02 19:43:10 fetching corpus: 34249, signal 672884/851497 (executing program) 2022/06/02 19:43:10 fetching corpus: 34299, signal 673124/851497 (executing program) 2022/06/02 19:43:10 fetching corpus: 34349, signal 673346/851497 (executing program) 2022/06/02 19:43:10 fetching corpus: 34399, signal 673674/851497 (executing program) 2022/06/02 19:43:10 fetching corpus: 34449, signal 673994/851497 (executing program) 2022/06/02 19:43:11 fetching corpus: 34499, signal 674467/851501 (executing program) 2022/06/02 19:43:11 fetching corpus: 34549, signal 674768/851501 (executing program) 2022/06/02 19:43:11 fetching corpus: 34599, signal 675102/851501 (executing program) 2022/06/02 19:43:11 fetching corpus: 34649, signal 675285/851501 (executing program) 2022/06/02 19:43:11 fetching corpus: 34699, signal 675720/851501 (executing program) 2022/06/02 19:43:11 fetching corpus: 34749, signal 676025/851501 (executing program) 2022/06/02 19:43:11 fetching corpus: 34799, signal 676300/851501 (executing program) 2022/06/02 19:43:11 fetching corpus: 34849, signal 676564/851501 (executing program) 2022/06/02 19:43:11 fetching corpus: 34899, signal 676782/851505 (executing program) 2022/06/02 19:43:11 fetching corpus: 34949, signal 676940/851505 (executing program) 2022/06/02 19:43:11 fetching corpus: 34999, signal 677169/851505 (executing program) 2022/06/02 19:43:12 fetching corpus: 35049, signal 677451/851505 (executing program) 2022/06/02 19:43:12 fetching corpus: 35099, signal 677635/851505 (executing program) 2022/06/02 19:43:12 fetching corpus: 35149, signal 677872/851505 (executing program) 2022/06/02 19:43:12 fetching corpus: 35199, signal 678065/851505 (executing program) 2022/06/02 19:43:12 fetching corpus: 35249, signal 678320/851505 (executing program) 2022/06/02 19:43:12 fetching corpus: 35299, signal 678532/851505 (executing program) 2022/06/02 19:43:12 fetching corpus: 35349, signal 678877/851505 (executing program) [ 132.511992][ T1230] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.512024][ T1230] ieee802154 phy1 wpan1: encryption failed: -22 2022/06/02 19:43:12 fetching corpus: 35399, signal 679116/851505 (executing program) 2022/06/02 19:43:12 fetching corpus: 35449, signal 679416/851507 (executing program) 2022/06/02 19:43:13 fetching corpus: 35499, signal 679664/851507 (executing program) 2022/06/02 19:43:13 fetching corpus: 35549, signal 679870/851507 (executing program) 2022/06/02 19:43:13 fetching corpus: 35599, signal 680141/851507 (executing program) 2022/06/02 19:43:13 fetching corpus: 35649, signal 680389/851507 (executing program) 2022/06/02 19:43:13 fetching corpus: 35699, signal 680728/851507 (executing program) 2022/06/02 19:43:13 fetching corpus: 35749, signal 680980/851507 (executing program) 2022/06/02 19:43:13 fetching corpus: 35799, signal 681193/851507 (executing program) 2022/06/02 19:43:13 fetching corpus: 35849, signal 681581/851507 (executing program) 2022/06/02 19:43:13 fetching corpus: 35899, signal 681853/851509 (executing program) 2022/06/02 19:43:13 fetching corpus: 35949, signal 682059/851509 (executing program) 2022/06/02 19:43:14 fetching corpus: 35999, signal 682326/851509 (executing program) 2022/06/02 19:43:14 fetching corpus: 36049, signal 682659/851509 (executing program) 2022/06/02 19:43:14 fetching corpus: 36099, signal 682918/851509 (executing program) 2022/06/02 19:43:14 fetching corpus: 36149, signal 683124/851509 (executing program) 2022/06/02 19:43:14 fetching corpus: 36199, signal 683341/851509 (executing program) 2022/06/02 19:43:14 fetching corpus: 36249, signal 683554/851511 (executing program) 2022/06/02 19:43:14 fetching corpus: 36299, signal 683908/851511 (executing program) 2022/06/02 19:43:15 fetching corpus: 36349, signal 684329/851511 (executing program) 2022/06/02 19:43:15 fetching corpus: 36399, signal 684510/851511 (executing program) 2022/06/02 19:43:15 fetching corpus: 36449, signal 684793/851511 (executing program) 2022/06/02 19:43:15 fetching corpus: 36499, signal 685072/851511 (executing program) 2022/06/02 19:43:15 fetching corpus: 36549, signal 685323/851514 (executing program) 2022/06/02 19:43:15 fetching corpus: 36599, signal 685622/851514 (executing program) 2022/06/02 19:43:15 fetching corpus: 36649, signal 685824/851514 (executing program) 2022/06/02 19:43:15 fetching corpus: 36699, signal 686102/851514 (executing program) 2022/06/02 19:43:15 fetching corpus: 36749, signal 686318/851521 (executing program) 2022/06/02 19:43:15 fetching corpus: 36799, signal 686523/851521 (executing program) 2022/06/02 19:43:16 fetching corpus: 36849, signal 686893/851521 (executing program) 2022/06/02 19:43:16 fetching corpus: 36899, signal 687087/851521 (executing program) 2022/06/02 19:43:16 fetching corpus: 36949, signal 687454/851521 (executing program) 2022/06/02 19:43:16 fetching corpus: 36999, signal 687711/851534 (executing program) 2022/06/02 19:43:16 fetching corpus: 37049, signal 689464/851534 (executing program) 2022/06/02 19:43:16 fetching corpus: 37099, signal 689820/851534 (executing program) 2022/06/02 19:43:16 fetching corpus: 37149, signal 690059/851534 (executing program) 2022/06/02 19:43:16 fetching corpus: 37199, signal 690242/851534 (executing program) 2022/06/02 19:43:16 fetching corpus: 37249, signal 690575/851535 (executing program) 2022/06/02 19:43:17 fetching corpus: 37299, signal 690756/851535 (executing program) 2022/06/02 19:43:17 fetching corpus: 37349, signal 690897/851535 (executing program) 2022/06/02 19:43:17 fetching corpus: 37399, signal 691188/851535 (executing program) 2022/06/02 19:43:17 fetching corpus: 37449, signal 691431/851535 (executing program) 2022/06/02 19:43:17 fetching corpus: 37499, signal 691619/851535 (executing program) 2022/06/02 19:43:17 fetching corpus: 37549, signal 691765/851535 (executing program) 2022/06/02 19:43:17 fetching corpus: 37599, signal 691981/851535 (executing program) 2022/06/02 19:43:17 fetching corpus: 37649, signal 692295/851535 (executing program) 2022/06/02 19:43:17 fetching corpus: 37699, signal 692549/851535 (executing program) 2022/06/02 19:43:17 fetching corpus: 37749, signal 692694/851535 (executing program) 2022/06/02 19:43:17 fetching corpus: 37799, signal 693066/851535 (executing program) 2022/06/02 19:43:18 fetching corpus: 37849, signal 693331/851535 (executing program) 2022/06/02 19:43:18 fetching corpus: 37899, signal 693590/851535 (executing program) 2022/06/02 19:43:18 fetching corpus: 37949, signal 693819/851535 (executing program) 2022/06/02 19:43:18 fetching corpus: 37999, signal 693999/851535 (executing program) 2022/06/02 19:43:18 fetching corpus: 38049, signal 694405/851535 (executing program) 2022/06/02 19:43:18 fetching corpus: 38099, signal 694654/851538 (executing program) 2022/06/02 19:43:19 fetching corpus: 38149, signal 695165/851538 (executing program) 2022/06/02 19:43:19 fetching corpus: 38199, signal 695501/851538 (executing program) 2022/06/02 19:43:19 fetching corpus: 38249, signal 695692/851538 (executing program) 2022/06/02 19:43:19 fetching corpus: 38299, signal 695899/851538 (executing program) 2022/06/02 19:43:19 fetching corpus: 38349, signal 696121/851538 (executing program) 2022/06/02 19:43:19 fetching corpus: 38399, signal 696358/851538 (executing program) 2022/06/02 19:43:19 fetching corpus: 38449, signal 696542/851538 (executing program) 2022/06/02 19:43:19 fetching corpus: 38499, signal 696803/851538 (executing program) 2022/06/02 19:43:19 fetching corpus: 38549, signal 697069/851538 (executing program) 2022/06/02 19:43:19 fetching corpus: 38599, signal 697406/851538 (executing program) 2022/06/02 19:43:19 fetching corpus: 38649, signal 697563/851542 (executing program) 2022/06/02 19:43:20 fetching corpus: 38699, signal 697823/851542 (executing program) 2022/06/02 19:43:20 fetching corpus: 38749, signal 698006/851542 (executing program) 2022/06/02 19:43:20 fetching corpus: 38799, signal 698196/851542 (executing program) 2022/06/02 19:43:20 fetching corpus: 38849, signal 698441/851542 (executing program) 2022/06/02 19:43:20 fetching corpus: 38899, signal 698769/851542 (executing program) 2022/06/02 19:43:20 fetching corpus: 38949, signal 699043/851542 (executing program) 2022/06/02 19:43:20 fetching corpus: 38999, signal 699285/851542 (executing program) 2022/06/02 19:43:20 fetching corpus: 39049, signal 699564/851542 (executing program) 2022/06/02 19:43:20 fetching corpus: 39099, signal 699778/851543 (executing program) 2022/06/02 19:43:20 fetching corpus: 39149, signal 699971/851543 (executing program) 2022/06/02 19:43:20 fetching corpus: 39199, signal 700110/851543 (executing program) 2022/06/02 19:43:21 fetching corpus: 39249, signal 700369/851543 (executing program) 2022/06/02 19:43:21 fetching corpus: 39299, signal 700726/851543 (executing program) 2022/06/02 19:43:21 fetching corpus: 39349, signal 700886/851543 (executing program) 2022/06/02 19:43:21 fetching corpus: 39399, signal 701122/851543 (executing program) 2022/06/02 19:43:21 fetching corpus: 39449, signal 701332/851543 (executing program) 2022/06/02 19:43:21 fetching corpus: 39499, signal 701508/851543 (executing program) 2022/06/02 19:43:21 fetching corpus: 39549, signal 701702/851543 (executing program) 2022/06/02 19:43:21 fetching corpus: 39599, signal 701911/851547 (executing program) 2022/06/02 19:43:21 fetching corpus: 39649, signal 702076/851547 (executing program) 2022/06/02 19:43:21 fetching corpus: 39699, signal 702344/851547 (executing program) 2022/06/02 19:43:21 fetching corpus: 39749, signal 702531/851547 (executing program) 2022/06/02 19:43:22 fetching corpus: 39799, signal 702744/851547 (executing program) 2022/06/02 19:43:22 fetching corpus: 39849, signal 702908/851552 (executing program) 2022/06/02 19:43:22 fetching corpus: 39899, signal 703175/851552 (executing program) 2022/06/02 19:43:22 fetching corpus: 39949, signal 703413/851552 (executing program) 2022/06/02 19:43:22 fetching corpus: 39999, signal 703772/851552 (executing program) 2022/06/02 19:43:22 fetching corpus: 40049, signal 704083/851552 (executing program) 2022/06/02 19:43:22 fetching corpus: 40099, signal 704360/851552 (executing program) 2022/06/02 19:43:23 fetching corpus: 40149, signal 704546/851552 (executing program) 2022/06/02 19:43:23 fetching corpus: 40199, signal 704937/851552 (executing program) 2022/06/02 19:43:23 fetching corpus: 40249, signal 705197/851552 (executing program) 2022/06/02 19:43:23 fetching corpus: 40299, signal 705598/851552 (executing program) 2022/06/02 19:43:23 fetching corpus: 40349, signal 705854/851552 (executing program) 2022/06/02 19:43:23 fetching corpus: 40399, signal 706144/851560 (executing program) 2022/06/02 19:43:23 fetching corpus: 40449, signal 706371/851560 (executing program) 2022/06/02 19:43:23 fetching corpus: 40499, signal 706629/851560 (executing program) 2022/06/02 19:43:23 fetching corpus: 40549, signal 706802/851560 (executing program) 2022/06/02 19:43:23 fetching corpus: 40599, signal 707188/851560 (executing program) 2022/06/02 19:43:24 fetching corpus: 40649, signal 707520/851560 (executing program) 2022/06/02 19:43:24 fetching corpus: 40699, signal 708557/851560 (executing program) 2022/06/02 19:43:24 fetching corpus: 40749, signal 708801/851560 (executing program) 2022/06/02 19:43:24 fetching corpus: 40799, signal 709007/851560 (executing program) 2022/06/02 19:43:24 fetching corpus: 40849, signal 709217/851560 (executing program) 2022/06/02 19:43:24 fetching corpus: 40899, signal 709600/851560 (executing program) 2022/06/02 19:43:24 fetching corpus: 40949, signal 709774/851560 (executing program) 2022/06/02 19:43:24 fetching corpus: 40999, signal 710018/851567 (executing program) 2022/06/02 19:43:24 fetching corpus: 41049, signal 710195/851567 (executing program) 2022/06/02 19:43:24 fetching corpus: 41099, signal 710371/851567 (executing program) 2022/06/02 19:43:25 fetching corpus: 41149, signal 710576/851567 (executing program) 2022/06/02 19:43:25 fetching corpus: 41199, signal 710757/851567 (executing program) 2022/06/02 19:43:25 fetching corpus: 41249, signal 710900/851567 (executing program) 2022/06/02 19:43:25 fetching corpus: 41299, signal 711091/851567 (executing program) 2022/06/02 19:43:25 fetching corpus: 41349, signal 711253/851567 (executing program) 2022/06/02 19:43:25 fetching corpus: 41399, signal 711404/851567 (executing program) 2022/06/02 19:43:25 fetching corpus: 41449, signal 711612/851567 (executing program) 2022/06/02 19:43:25 fetching corpus: 41499, signal 711742/851567 (executing program) 2022/06/02 19:43:25 fetching corpus: 41549, signal 711936/851567 (executing program) 2022/06/02 19:43:25 fetching corpus: 41599, signal 712106/851567 (executing program) 2022/06/02 19:43:25 fetching corpus: 41649, signal 712352/851567 (executing program) 2022/06/02 19:43:25 fetching corpus: 41699, signal 712567/851571 (executing program) 2022/06/02 19:43:26 fetching corpus: 41749, signal 712780/851571 (executing program) 2022/06/02 19:43:26 fetching corpus: 41799, signal 713055/851571 (executing program) 2022/06/02 19:43:26 fetching corpus: 41849, signal 713358/851571 (executing program) 2022/06/02 19:43:26 fetching corpus: 41899, signal 713632/851571 (executing program) 2022/06/02 19:43:26 fetching corpus: 41949, signal 713810/851571 (executing program) 2022/06/02 19:43:26 fetching corpus: 41999, signal 714089/851571 (executing program) 2022/06/02 19:43:26 fetching corpus: 42049, signal 714326/851571 (executing program) 2022/06/02 19:43:26 fetching corpus: 42099, signal 714471/851571 (executing program) 2022/06/02 19:43:27 fetching corpus: 42149, signal 714736/851571 (executing program) 2022/06/02 19:43:27 fetching corpus: 42199, signal 714933/851580 (executing program) 2022/06/02 19:43:27 fetching corpus: 42249, signal 715214/851580 (executing program) 2022/06/02 19:43:27 fetching corpus: 42299, signal 715454/851580 (executing program) 2022/06/02 19:43:27 fetching corpus: 42349, signal 715714/851580 (executing program) 2022/06/02 19:43:27 fetching corpus: 42399, signal 715929/851586 (executing program) 2022/06/02 19:43:27 fetching corpus: 42449, signal 716082/851586 (executing program) 2022/06/02 19:43:27 fetching corpus: 42499, signal 716415/851586 (executing program) 2022/06/02 19:43:27 fetching corpus: 42549, signal 716619/851586 (executing program) 2022/06/02 19:43:27 fetching corpus: 42599, signal 716884/851586 (executing program) 2022/06/02 19:43:27 fetching corpus: 42649, signal 717299/851586 (executing program) 2022/06/02 19:43:28 fetching corpus: 42699, signal 717546/851586 (executing program) 2022/06/02 19:43:28 fetching corpus: 42749, signal 717751/851586 (executing program) 2022/06/02 19:43:28 fetching corpus: 42799, signal 717943/851586 (executing program) 2022/06/02 19:43:28 fetching corpus: 42849, signal 718149/851586 (executing program) 2022/06/02 19:43:28 fetching corpus: 42899, signal 718389/851586 (executing program) 2022/06/02 19:43:28 fetching corpus: 42949, signal 718647/851586 (executing program) 2022/06/02 19:43:28 fetching corpus: 42999, signal 718832/851586 (executing program) 2022/06/02 19:43:28 fetching corpus: 43049, signal 719209/851586 (executing program) 2022/06/02 19:43:28 fetching corpus: 43099, signal 719394/851586 (executing program) 2022/06/02 19:43:28 fetching corpus: 43149, signal 719677/851586 (executing program) 2022/06/02 19:43:29 fetching corpus: 43199, signal 721195/851586 (executing program) 2022/06/02 19:43:29 fetching corpus: 43249, signal 721352/851586 (executing program) 2022/06/02 19:43:29 fetching corpus: 43299, signal 721587/851586 (executing program) 2022/06/02 19:43:29 fetching corpus: 43349, signal 721917/851586 (executing program) 2022/06/02 19:43:29 fetching corpus: 43399, signal 722097/851586 (executing program) 2022/06/02 19:43:29 fetching corpus: 43449, signal 722324/851586 (executing program) 2022/06/02 19:43:29 fetching corpus: 43499, signal 722563/851592 (executing program) 2022/06/02 19:43:29 fetching corpus: 43549, signal 722715/851592 (executing program) 2022/06/02 19:43:29 fetching corpus: 43599, signal 722955/851592 (executing program) 2022/06/02 19:43:29 fetching corpus: 43649, signal 723189/851592 (executing program) 2022/06/02 19:43:29 fetching corpus: 43699, signal 723475/851592 (executing program) 2022/06/02 19:43:30 fetching corpus: 43749, signal 723647/851592 (executing program) 2022/06/02 19:43:30 fetching corpus: 43799, signal 723810/851592 (executing program) 2022/06/02 19:43:30 fetching corpus: 43849, signal 724028/851592 (executing program) 2022/06/02 19:43:30 fetching corpus: 43899, signal 724199/851592 (executing program) 2022/06/02 19:43:30 fetching corpus: 43949, signal 724489/851592 (executing program) 2022/06/02 19:43:30 fetching corpus: 43999, signal 724709/851592 (executing program) 2022/06/02 19:43:30 fetching corpus: 44049, signal 724940/851596 (executing program) 2022/06/02 19:43:30 fetching corpus: 44099, signal 725182/851596 (executing program) 2022/06/02 19:43:30 fetching corpus: 44149, signal 725354/851596 (executing program) 2022/06/02 19:43:30 fetching corpus: 44199, signal 725551/851596 (executing program) 2022/06/02 19:43:30 fetching corpus: 44249, signal 725794/851596 (executing program) 2022/06/02 19:43:31 fetching corpus: 44299, signal 725978/851602 (executing program) 2022/06/02 19:43:31 fetching corpus: 44349, signal 726234/851602 (executing program) 2022/06/02 19:43:31 fetching corpus: 44399, signal 726458/851602 (executing program) 2022/06/02 19:43:31 fetching corpus: 44449, signal 726673/851616 (executing program) 2022/06/02 19:43:31 fetching corpus: 44499, signal 726846/851616 (executing program) 2022/06/02 19:43:31 fetching corpus: 44549, signal 726968/851616 (executing program) 2022/06/02 19:43:31 fetching corpus: 44599, signal 727431/851616 (executing program) 2022/06/02 19:43:32 fetching corpus: 44649, signal 727645/851616 (executing program) 2022/06/02 19:43:32 fetching corpus: 44699, signal 727932/851616 (executing program) 2022/06/02 19:43:32 fetching corpus: 44749, signal 728106/851616 (executing program) 2022/06/02 19:43:32 fetching corpus: 44799, signal 728432/851616 (executing program) 2022/06/02 19:43:32 fetching corpus: 44849, signal 728580/851616 (executing program) 2022/06/02 19:43:32 fetching corpus: 44899, signal 728752/851616 (executing program) 2022/06/02 19:43:32 fetching corpus: 44949, signal 728931/851616 (executing program) 2022/06/02 19:43:32 fetching corpus: 44999, signal 729139/851616 (executing program) 2022/06/02 19:43:32 fetching corpus: 45049, signal 729287/851616 (executing program) 2022/06/02 19:43:32 fetching corpus: 45099, signal 729537/851616 (executing program) 2022/06/02 19:43:32 fetching corpus: 45149, signal 729793/851616 (executing program) 2022/06/02 19:43:33 fetching corpus: 45199, signal 730018/851616 (executing program) 2022/06/02 19:43:33 fetching corpus: 45249, signal 730145/851621 (executing program) 2022/06/02 19:43:33 fetching corpus: 45299, signal 730366/851621 (executing program) 2022/06/02 19:43:33 fetching corpus: 45349, signal 730566/851621 (executing program) 2022/06/02 19:43:33 fetching corpus: 45399, signal 730734/851621 (executing program) 2022/06/02 19:43:33 fetching corpus: 45449, signal 730897/851621 (executing program) 2022/06/02 19:43:33 fetching corpus: 45499, signal 731101/851621 (executing program) 2022/06/02 19:43:33 fetching corpus: 45549, signal 731300/851621 (executing program) 2022/06/02 19:43:34 fetching corpus: 45599, signal 731466/851625 (executing program) 2022/06/02 19:43:34 fetching corpus: 45649, signal 731675/851625 (executing program) 2022/06/02 19:43:34 fetching corpus: 45699, signal 732128/851625 (executing program) 2022/06/02 19:43:34 fetching corpus: 45749, signal 732456/851625 (executing program) 2022/06/02 19:43:34 fetching corpus: 45799, signal 732651/851625 (executing program) 2022/06/02 19:43:34 fetching corpus: 45849, signal 732833/851625 (executing program) 2022/06/02 19:43:34 fetching corpus: 45899, signal 733218/851625 (executing program) 2022/06/02 19:43:34 fetching corpus: 45949, signal 733385/851625 (executing program) 2022/06/02 19:43:34 fetching corpus: 45999, signal 733664/851625 (executing program) 2022/06/02 19:43:35 fetching corpus: 46049, signal 733919/851627 (executing program) 2022/06/02 19:43:35 fetching corpus: 46099, signal 734204/851627 (executing program) 2022/06/02 19:43:35 fetching corpus: 46149, signal 734409/851627 (executing program) 2022/06/02 19:43:35 fetching corpus: 46199, signal 734726/851627 (executing program) 2022/06/02 19:43:35 fetching corpus: 46249, signal 734881/851627 (executing program) 2022/06/02 19:43:35 fetching corpus: 46299, signal 736483/851627 (executing program) 2022/06/02 19:43:35 fetching corpus: 46349, signal 736769/851627 (executing program) 2022/06/02 19:43:35 fetching corpus: 46399, signal 737017/851627 (executing program) 2022/06/02 19:43:35 fetching corpus: 46449, signal 737168/851627 (executing program) 2022/06/02 19:43:35 fetching corpus: 46499, signal 737306/851627 (executing program) 2022/06/02 19:43:36 fetching corpus: 46549, signal 737550/851627 (executing program) 2022/06/02 19:43:36 fetching corpus: 46599, signal 737744/851627 (executing program) 2022/06/02 19:43:36 fetching corpus: 46649, signal 737941/851627 (executing program) 2022/06/02 19:43:36 fetching corpus: 46699, signal 738115/851627 (executing program) 2022/06/02 19:43:36 fetching corpus: 46749, signal 738341/851627 (executing program) 2022/06/02 19:43:36 fetching corpus: 46799, signal 738459/851627 (executing program) 2022/06/02 19:43:36 fetching corpus: 46849, signal 738630/851627 (executing program) 2022/06/02 19:43:37 fetching corpus: 46899, signal 738824/851634 (executing program) 2022/06/02 19:43:37 fetching corpus: 46949, signal 738990/851634 (executing program) 2022/06/02 19:43:37 fetching corpus: 46999, signal 739178/851634 (executing program) 2022/06/02 19:43:37 fetching corpus: 47049, signal 739396/851634 (executing program) 2022/06/02 19:43:37 fetching corpus: 47099, signal 739603/851634 (executing program) 2022/06/02 19:43:37 fetching corpus: 47149, signal 739828/851634 (executing program) 2022/06/02 19:43:37 fetching corpus: 47199, signal 740023/851634 (executing program) 2022/06/02 19:43:37 fetching corpus: 47249, signal 740226/851634 (executing program) 2022/06/02 19:43:37 fetching corpus: 47299, signal 740380/851634 (executing program) 2022/06/02 19:43:37 fetching corpus: 47349, signal 740539/851634 (executing program) 2022/06/02 19:43:38 fetching corpus: 47399, signal 740782/851634 (executing program) 2022/06/02 19:43:38 fetching corpus: 47449, signal 741026/851634 (executing program) 2022/06/02 19:43:38 fetching corpus: 47499, signal 741227/851634 (executing program) 2022/06/02 19:43:38 fetching corpus: 47549, signal 741424/851634 (executing program) 2022/06/02 19:43:38 fetching corpus: 47599, signal 741631/851634 (executing program) 2022/06/02 19:43:38 fetching corpus: 47649, signal 741789/851634 (executing program) 2022/06/02 19:43:38 fetching corpus: 47699, signal 741995/851634 (executing program) 2022/06/02 19:43:38 fetching corpus: 47749, signal 742322/851634 (executing program) 2022/06/02 19:43:38 fetching corpus: 47799, signal 742522/851634 (executing program) 2022/06/02 19:43:38 fetching corpus: 47849, signal 742821/851634 (executing program) 2022/06/02 19:43:39 fetching corpus: 47899, signal 742963/851634 (executing program) 2022/06/02 19:43:39 fetching corpus: 47949, signal 743134/851634 (executing program) 2022/06/02 19:43:39 fetching corpus: 47999, signal 743344/851634 (executing program) 2022/06/02 19:43:39 fetching corpus: 48049, signal 744028/851634 (executing program) 2022/06/02 19:43:39 fetching corpus: 48099, signal 744215/851634 (executing program) 2022/06/02 19:43:39 fetching corpus: 48149, signal 744398/851634 (executing program) 2022/06/02 19:43:39 fetching corpus: 48199, signal 744571/851634 (executing program) 2022/06/02 19:43:39 fetching corpus: 48249, signal 744753/851634 (executing program) 2022/06/02 19:43:39 fetching corpus: 48299, signal 744950/851634 (executing program) 2022/06/02 19:43:39 fetching corpus: 48349, signal 745123/851634 (executing program) 2022/06/02 19:43:40 fetching corpus: 48399, signal 745446/851634 (executing program) 2022/06/02 19:43:40 fetching corpus: 48449, signal 745656/851637 (executing program) 2022/06/02 19:43:40 fetching corpus: 48499, signal 745827/851637 (executing program) 2022/06/02 19:43:40 fetching corpus: 48549, signal 746393/851637 (executing program) 2022/06/02 19:43:40 fetching corpus: 48599, signal 746561/851637 (executing program) 2022/06/02 19:43:40 fetching corpus: 48649, signal 746727/851637 (executing program) 2022/06/02 19:43:40 fetching corpus: 48699, signal 746913/851637 (executing program) 2022/06/02 19:43:40 fetching corpus: 48749, signal 747141/851637 (executing program) 2022/06/02 19:43:40 fetching corpus: 48799, signal 747289/851637 (executing program) 2022/06/02 19:43:40 fetching corpus: 48849, signal 747502/851637 (executing program) 2022/06/02 19:43:41 fetching corpus: 48899, signal 747740/851637 (executing program) 2022/06/02 19:43:41 fetching corpus: 48949, signal 747916/851637 (executing program) 2022/06/02 19:43:41 fetching corpus: 48999, signal 748049/851637 (executing program) 2022/06/02 19:43:41 fetching corpus: 49049, signal 748233/851637 (executing program) 2022/06/02 19:43:41 fetching corpus: 49099, signal 748477/851637 (executing program) 2022/06/02 19:43:41 fetching corpus: 49149, signal 748757/851637 (executing program) 2022/06/02 19:43:41 fetching corpus: 49199, signal 748929/851637 (executing program) 2022/06/02 19:43:41 fetching corpus: 49249, signal 749083/851637 (executing program) 2022/06/02 19:43:41 fetching corpus: 49299, signal 749267/851637 (executing program) 2022/06/02 19:43:42 fetching corpus: 49349, signal 749441/851659 (executing program) 2022/06/02 19:43:42 fetching corpus: 49399, signal 749633/851659 (executing program) 2022/06/02 19:43:42 fetching corpus: 49449, signal 749808/851659 (executing program) 2022/06/02 19:43:42 fetching corpus: 49499, signal 750024/851659 (executing program) 2022/06/02 19:43:42 fetching corpus: 49549, signal 750178/851659 (executing program) 2022/06/02 19:43:42 fetching corpus: 49599, signal 750412/851659 (executing program) 2022/06/02 19:43:42 fetching corpus: 49649, signal 750576/851659 (executing program) 2022/06/02 19:43:42 fetching corpus: 49699, signal 750862/851659 (executing program) 2022/06/02 19:43:42 fetching corpus: 49749, signal 751056/851659 (executing program) 2022/06/02 19:43:42 fetching corpus: 49799, signal 751359/851659 (executing program) 2022/06/02 19:43:42 fetching corpus: 49849, signal 751517/851659 (executing program) 2022/06/02 19:43:43 fetching corpus: 49899, signal 751644/851659 (executing program) 2022/06/02 19:43:43 fetching corpus: 49949, signal 751902/851659 (executing program) 2022/06/02 19:43:43 fetching corpus: 49999, signal 752092/851659 (executing program) 2022/06/02 19:43:43 fetching corpus: 50049, signal 752273/851659 (executing program) 2022/06/02 19:43:43 fetching corpus: 50099, signal 752477/851659 (executing program) 2022/06/02 19:43:43 fetching corpus: 50149, signal 752774/851659 (executing program) 2022/06/02 19:43:43 fetching corpus: 50199, signal 752923/851659 (executing program) 2022/06/02 19:43:43 fetching corpus: 50249, signal 753080/851659 (executing program) 2022/06/02 19:43:43 fetching corpus: 50299, signal 753265/851659 (executing program) 2022/06/02 19:43:43 fetching corpus: 50349, signal 753457/851659 (executing program) 2022/06/02 19:43:44 fetching corpus: 50399, signal 753715/851659 (executing program) 2022/06/02 19:43:44 fetching corpus: 50449, signal 753903/851659 (executing program) 2022/06/02 19:43:44 fetching corpus: 50499, signal 754026/851659 (executing program) 2022/06/02 19:43:44 fetching corpus: 50549, signal 754191/851659 (executing program) 2022/06/02 19:43:44 fetching corpus: 50599, signal 754359/851680 (executing program) 2022/06/02 19:43:44 fetching corpus: 50619, signal 754430/851680 (executing program) 2022/06/02 19:43:44 fetching corpus: 50619, signal 754430/851680 (executing program) 2022/06/02 19:43:46 starting 6 fuzzer processes 19:43:46 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@prinfo={0x14}], 0x14}, 0x0) 19:43:46 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@authinfo={0x10}], 0x10}, 0x0) 19:43:46 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7021c941"}, 0x0, 0x4, {}, 0x8001}) 19:43:46 executing program 1: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) 19:43:46 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004680)={0x2020}, 0x2020) 19:43:46 executing program 4: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x0) [ 167.961592][ T3650] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 167.962577][ T3650] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 167.963018][ T3650] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 167.963760][ T3650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 167.964230][ T3650] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 167.964472][ T3650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 168.074827][ T3658] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 168.075872][ T3658] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 168.076449][ T3658] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 168.077620][ T3658] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 168.077901][ T3660] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 168.078265][ T3660] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 168.078693][ T3660] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 168.078828][ T3660] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 168.080325][ T3660] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 168.080457][ T3660] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 168.088745][ T3662] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 168.096596][ T3661] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 168.097157][ T3658] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 168.098224][ T3658] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 168.098891][ T3658] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 168.099125][ T3658] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 168.103511][ T3661] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 168.103770][ T3661] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 168.134758][ T3642] chnl_net:caif_netlink_parms(): no params data found [ 168.354947][ T3642] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.355574][ T3642] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.356847][ T3642] device bridge_slave_0 entered promiscuous mode [ 168.405487][ T3642] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.405544][ T3642] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.406484][ T3642] device bridge_slave_1 entered promiscuous mode [ 168.440182][ T3643] chnl_net:caif_netlink_parms(): no params data found [ 168.456567][ T3646] chnl_net:caif_netlink_parms(): no params data found [ 168.461992][ T3642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.490211][ T3642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.558010][ T3642] team0: Port device team_slave_0 added [ 168.570016][ T3645] chnl_net:caif_netlink_parms(): no params data found [ 168.577130][ T3642] team0: Port device team_slave_1 added [ 168.620036][ T3642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.620050][ T3642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.620074][ T3642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.684237][ T3642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.684252][ T3642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.684277][ T3642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.685285][ T3643] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.685342][ T3643] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.686489][ T3643] device bridge_slave_0 entered promiscuous mode [ 168.688471][ T3643] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.688526][ T3643] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.689461][ T3643] device bridge_slave_1 entered promiscuous mode [ 168.736248][ T3646] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.736307][ T3646] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.737280][ T3646] device bridge_slave_0 entered promiscuous mode [ 168.809197][ T3646] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.809231][ T3646] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.809803][ T3646] device bridge_slave_1 entered promiscuous mode [ 168.840126][ T3642] device hsr_slave_0 entered promiscuous mode [ 168.840561][ T3642] device hsr_slave_1 entered promiscuous mode [ 168.843013][ T3643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.845484][ T3643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.907713][ T3646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.910432][ T3643] team0: Port device team_slave_0 added [ 168.926340][ T3645] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.926379][ T3645] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.926997][ T3645] device bridge_slave_0 entered promiscuous mode [ 168.929841][ T3645] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.929879][ T3645] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.930514][ T3645] device bridge_slave_1 entered promiscuous mode [ 168.953586][ T3646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.973993][ T3643] team0: Port device team_slave_1 added [ 169.023336][ T3645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.027380][ T3645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.034875][ T3646] team0: Port device team_slave_0 added [ 169.035418][ T3643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.035429][ T3643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.035453][ T3643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.037547][ T3643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.037558][ T3643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.037581][ T3643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.105408][ T3646] team0: Port device team_slave_1 added [ 169.186385][ T3643] device hsr_slave_0 entered promiscuous mode [ 169.186899][ T3643] device hsr_slave_1 entered promiscuous mode [ 169.187234][ T3643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.187303][ T3643] Cannot create hsr debugfs directory [ 169.189423][ T3645] team0: Port device team_slave_0 added [ 169.196255][ T3645] team0: Port device team_slave_1 added [ 169.201494][ T3646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.201507][ T3646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.201531][ T3646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.203680][ T3646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.203692][ T3646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.203717][ T3646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.337808][ T3645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.337823][ T3645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.337849][ T3645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.394729][ T3645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.394743][ T3645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.394766][ T3645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.399023][ T3646] device hsr_slave_0 entered promiscuous mode [ 169.399561][ T3646] device hsr_slave_1 entered promiscuous mode [ 169.399868][ T3646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.399882][ T3646] Cannot create hsr debugfs directory [ 169.497309][ T3645] device hsr_slave_0 entered promiscuous mode [ 169.497948][ T3645] device hsr_slave_1 entered promiscuous mode [ 169.498240][ T3645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.498253][ T3645] Cannot create hsr debugfs directory [ 169.675587][ T3642] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 169.698398][ T3642] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 169.700502][ T3642] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 169.721229][ T3642] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 169.726907][ T3643] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 169.766557][ T3643] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 169.769935][ T3643] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 169.792514][ T3645] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 169.797897][ T3643] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 169.816751][ T3645] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 169.834429][ T3645] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 169.847651][ T3645] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 169.904390][ T3646] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 169.907046][ T3646] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 169.910506][ T3646] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 169.940385][ T3646] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 170.019139][ T3645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.029929][ T3642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.037035][ T27] Bluetooth: hci0: command 0x0409 tx timeout [ 170.055985][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.058439][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.061320][ T3645] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.072719][ T3642] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.085453][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.086056][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.086580][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.087074][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.087946][ T3682] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.088177][ T3682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.089159][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.089653][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.090037][ T3682] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.090088][ T3682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.103990][ T3643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.111253][ T3648] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 170.112405][ T3682] Bluetooth: hci3: command 0x0409 tx timeout [ 170.115868][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.118098][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.118641][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.119060][ T3681] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.119291][ T3681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.119718][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.120268][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.120723][ T3681] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.120775][ T3681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.122421][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.122986][ T23] Bluetooth: hci5: command 0x0409 tx timeout [ 170.123037][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 170.123135][ T49] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 170.123313][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.130303][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.147533][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.149269][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.150059][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.151723][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.160059][ T3646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.169011][ T3643] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.187998][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.188723][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.189225][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.189716][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.190539][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.191761][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.192409][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.212136][ T3646] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.243958][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.244777][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.245472][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.246048][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.247196][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.247637][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.247690][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.248118][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.248608][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.248999][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.249047][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.249421][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.250306][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.253653][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.254323][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.254855][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.255413][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.256026][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.257947][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.258493][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.259050][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.274904][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.305748][ T3642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.306613][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.312682][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.313255][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.313690][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.313750][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.314174][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.314787][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.315240][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.315306][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.315744][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.316583][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.317440][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.318197][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.318871][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.319381][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.319850][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.329861][ T3645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.386953][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.387599][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.388279][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.388427][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.388527][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.388631][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.388736][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.389449][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.390085][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.390575][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.397131][ T3642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.415612][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.416646][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.420612][ T3643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.433204][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.440125][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.441114][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.441657][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.521410][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.522412][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.523124][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.523680][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.524290][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.524885][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.533238][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.585417][ T3643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.589142][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.589282][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.591860][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.591991][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.611756][ T3646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.986073][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.986668][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.030325][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.031398][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.032383][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.032889][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.054118][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.054692][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.055564][ T3645] device veth0_vlan entered promiscuous mode [ 171.095770][ T3645] device veth1_vlan entered promiscuous mode [ 171.132379][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 171.133013][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 171.134139][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.134868][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.135629][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.136114][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.143431][ T3642] device veth0_vlan entered promiscuous mode [ 171.165935][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 171.166569][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.184692][ T3642] device veth1_vlan entered promiscuous mode [ 171.189154][ T3645] device veth0_macvtap entered promiscuous mode [ 171.204764][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 171.205406][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 171.206007][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 171.207855][ T3645] device veth1_macvtap entered promiscuous mode [ 171.258741][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 171.259477][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.265056][ T3645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.268613][ T3645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.287439][ T3645] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.287479][ T3645] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.287512][ T3645] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.287542][ T3645] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.292941][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.293486][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.293987][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 171.294464][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.297017][ T3642] device veth0_macvtap entered promiscuous mode [ 171.300165][ T3642] device veth1_macvtap entered promiscuous mode [ 171.364454][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 171.364474][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.366351][ T3642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.367359][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 171.367966][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 171.368508][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.369070][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.388545][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 171.388565][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.412204][ T3642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.412676][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 171.413342][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.437780][ T3642] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.437814][ T3642] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.437841][ T3642] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.437870][ T3642] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.598710][ T1352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.598728][ T1352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.600673][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 171.700604][ T1352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.700622][ T1352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.707434][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 171.741528][ T1352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.741547][ T1352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.775815][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 171.812625][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.812644][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.816216][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 172.012111][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.012780][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.088527][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.089146][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.095045][ T3646] device veth0_vlan entered promiscuous mode [ 172.097552][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.098169][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.111268][ T3678] Bluetooth: hci0: command 0x041b tx timeout [ 172.111737][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.112434][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.119370][ T3643] device veth0_vlan entered promiscuous mode [ 172.120446][ T3646] device veth1_vlan entered promiscuous mode [ 172.129847][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 172.130445][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.131766][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.132776][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.133370][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.168373][ T3643] device veth1_vlan entered promiscuous mode [ 172.195651][ T3681] Bluetooth: hci4: command 0x041b tx timeout [ 172.195709][ T3681] Bluetooth: hci5: command 0x041b tx timeout [ 172.195793][ T3681] Bluetooth: hci3: command 0x041b tx timeout [ 172.226058][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 172.226783][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 172.227360][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 172.227901][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.228566][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.233917][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.234605][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.237341][ T3643] device veth0_macvtap entered promiscuous mode [ 172.260964][ T3646] device veth0_macvtap entered promiscuous mode [ 172.264308][ T3646] device veth1_macvtap entered promiscuous mode [ 172.267190][ T3643] device veth1_macvtap entered promiscuous mode [ 172.302075][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 172.302094][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.302105][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 172.302118][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 19:43:54 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x5451, 0x0) 19:43:54 executing program 5: openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) 19:43:54 executing program 4: r0 = socket(0x1c, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup2(r1, r0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x21, &(0x7f0000000180), 0x10) 19:43:54 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000003c0), 0x98) [ 172.303467][ T3643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.306044][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 19:43:54 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 19:43:54 executing program 5: syz_io_uring_setup(0x4c0b, &(0x7f0000000080)={0x0, 0xd711, 0x1, 0x3, 0x389}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 19:43:54 executing program 0: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$read(0xf, r0, &(0x7f0000000000)=""/232, 0xe8) [ 172.306701][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.307287][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 19:43:54 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/custom1\x00', 0x0, 0x0) [ 172.307811][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.308394][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 19:43:54 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0x5452, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c77fe5d2"}}) [ 172.309804][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 172.309820][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.309829][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 172.309842][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.314009][ T3643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.323917][ T3646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 172.323936][ T3646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.323945][ T3646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 172.323958][ T3646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.323967][ T3646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 172.323978][ T3646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.325529][ T3646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.326517][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.327180][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.327699][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.328236][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.354251][ T3643] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.354288][ T3643] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.354318][ T3643] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.354347][ T3643] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.356691][ T3646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 172.356709][ T3646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.356717][ T3646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 172.356730][ T3646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.356738][ T3646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 172.356751][ T3646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.357879][ T3646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.372493][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.373136][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.382293][ T3646] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.382596][ T3646] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.382629][ T3646] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.382661][ T3646] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.492047][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.492066][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.499820][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 172.615268][ T1352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.615286][ T1352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.617057][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 172.649490][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.649507][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.673246][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 172.722458][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.722477][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.724561][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 174.209021][ T27] Bluetooth: hci0: command 0x040f tx timeout [ 174.271561][ T3683] Bluetooth: hci3: command 0x040f tx timeout [ 174.271665][ T3683] Bluetooth: hci5: command 0x040f tx timeout [ 174.272127][ T27] Bluetooth: hci4: command 0x040f tx timeout [ 176.271350][ T3683] Bluetooth: hci0: command 0x0419 tx timeout [ 176.362133][ T3683] Bluetooth: hci4: command 0x0419 tx timeout [ 176.362195][ T3683] Bluetooth: hci5: command 0x0419 tx timeout [ 176.362236][ T3683] Bluetooth: hci3: command 0x0419 tx timeout [ 176.679366][ T3648] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 176.680606][ T3648] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 176.681380][ T3648] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 176.682025][ T3648] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 176.682456][ T3648] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 176.682675][ T3648] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 176.782942][ T3754] chnl_net:caif_netlink_parms(): no params data found [ 176.820792][ T3754] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.820867][ T3754] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.822458][ T3754] device bridge_slave_0 entered promiscuous mode [ 176.824957][ T3754] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.825063][ T3754] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.826057][ T3754] device bridge_slave_1 entered promiscuous mode [ 176.863146][ T3754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.865738][ T3754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.890850][ T3754] team0: Port device team_slave_0 added [ 176.893708][ T3754] team0: Port device team_slave_1 added [ 176.918551][ T3754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.918565][ T3754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.918593][ T3754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.919900][ T3754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.919912][ T3754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.919935][ T3754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.016095][ T3754] device hsr_slave_0 entered promiscuous mode [ 177.016657][ T3754] device hsr_slave_1 entered promiscuous mode [ 177.016926][ T3754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.016940][ T3754] Cannot create hsr debugfs directory [ 177.118303][ T3754] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 177.136645][ T3754] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 177.139338][ T3754] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 177.141600][ T3754] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 177.169040][ T3754] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.169239][ T3754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.169863][ T3754] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.169937][ T3754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.225522][ T3754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.230239][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.238262][ T27] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.253155][ T27] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.254405][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 177.259123][ T3754] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.266518][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.266940][ T3680] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.266995][ T3680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.271720][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.272125][ T3680] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.272177][ T3680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.285649][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.286358][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.296047][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.312622][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.318765][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.322513][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.336432][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.336551][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.345299][ T3754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.513109][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.517529][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.518075][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.519989][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.528916][ T3754] device veth0_vlan entered promiscuous mode [ 177.536142][ T3754] device veth1_vlan entered promiscuous mode [ 177.575829][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 177.576200][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 177.576621][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.579793][ T3754] device veth0_macvtap entered promiscuous mode [ 177.588687][ T3754] device veth1_macvtap entered promiscuous mode [ 177.599556][ T3754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 177.599576][ T3754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.599585][ T3754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 177.599596][ T3754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.599604][ T3754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 177.599617][ T3754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.599624][ T3754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 177.599637][ T3754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.608337][ T3754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.608448][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.613671][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 177.616626][ T3754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 177.616642][ T3754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.616650][ T3754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 177.616663][ T3754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.616671][ T3754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 177.616683][ T3754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.616691][ T3754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 19:43:57 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) close$fd_v4l2_buffer(r0) [ 177.616703][ T3754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.618320][ T3754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.618639][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.630428][ T3754] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.630463][ T3754] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.630500][ T3754] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.630530][ T3754] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.734606][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.734623][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.742866][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 177.766757][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.766775][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.768503][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 178.431705][ T3658] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 178.752142][ T3761] Bluetooth: hci2: command 0x0409 tx timeout [ 180.831241][ T27] Bluetooth: hci2: command 0x041b tx timeout [ 181.250786][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 181.252753][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 181.253226][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 181.253889][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 181.254318][ T49] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 181.254533][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 181.350399][ T3773] chnl_net:caif_netlink_parms(): no params data found [ 181.390656][ T3773] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.390731][ T3773] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.392383][ T3773] device bridge_slave_0 entered promiscuous mode [ 181.395702][ T3773] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.395818][ T3773] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.396788][ T3773] device bridge_slave_1 entered promiscuous mode [ 181.437527][ T3773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.440091][ T3773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.474257][ T3773] team0: Port device team_slave_0 added [ 181.475628][ T3773] team0: Port device team_slave_1 added [ 181.494889][ T3773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.494899][ T3773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.494913][ T3773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.496571][ T3773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.496578][ T3773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.496592][ T3773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.594076][ T3773] device hsr_slave_0 entered promiscuous mode [ 181.594495][ T3773] device hsr_slave_1 entered promiscuous mode [ 181.595275][ T3773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.595288][ T3773] Cannot create hsr debugfs directory [ 181.690443][ T3773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 181.694388][ T3773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 181.700418][ T3773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 181.709849][ T3773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 181.730495][ T3773] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.730533][ T3773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.730623][ T3773] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.730662][ T3773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.780356][ T3773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.795710][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.810019][ T3761] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.810663][ T3761] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.820113][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 181.838076][ T3773] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.849125][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.849388][ T3679] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.849424][ T3679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.864523][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.865691][ T3683] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.865743][ T3683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.867096][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.868048][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.887297][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.893075][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.899393][ T3773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.900169][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.909533][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.927957][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.928083][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.936694][ T3773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.083019][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 182.100351][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.100803][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.101400][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.104937][ T3773] device veth0_vlan entered promiscuous mode [ 182.123817][ T3773] device veth1_vlan entered promiscuous mode [ 182.142878][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 182.143420][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 182.144103][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 182.149437][ T3773] device veth0_macvtap entered promiscuous mode [ 182.182731][ T3773] device veth1_macvtap entered promiscuous mode [ 182.199492][ T3773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 182.199512][ T3773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.199521][ T3773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 182.199534][ T3773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.199542][ T3773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 182.199555][ T3773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.199563][ T3773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 182.199575][ T3773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.199586][ T3773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 182.199598][ T3773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.202685][ T3773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.202789][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 182.212271][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 182.214934][ T3773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 182.214950][ T3773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.214959][ T3773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 182.214971][ T3773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.214979][ T3773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 182.214991][ T3773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.214998][ T3773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 182.215010][ T3773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.215027][ T3773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 182.215040][ T3773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.216442][ T3773] batman_adv: batadv0: Interface activated: batadv_slave_1 19:44:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x13) 19:44:02 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x43, 0x0, &(0x7f0000000040)) 19:44:02 executing program 2: bpf$PROG_LOAD_XDP(0x1d, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:44:02 executing program 4: request_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0) 19:44:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x1cb) sendmmsg$inet(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000540)='7', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="c14a89aba3fb25a3f7e4f8c5802acff98ae03ae8364a8f8a681ded08380cbc128afd920a0b6c22f6ca8ea7193c1e6c122bbf9e1f98707dce75460c04a80367090f03e8c1b1a560cb67", 0x49}, {&(0x7f0000000240)="88c41b8bcc55c010ef76ddb44013d527df2df055e58f1501326efbd7821d7d1c659322568931ef02a4d35c01c9e73e46d23f911b57b11b35ce882951db6ddc859d7aa10919a25b7202adbe967101fbb644ff595d8c157c465fbac1f5b9bd10f10b399daf7de28e0021e40f6a8e7e4452daf2be2582d9e943565e039160ba2e32d72a465884cb4d08ff8619f9f4eae209cd", 0x91}, {&(0x7f0000000040)="6cac8935bd8ee28cd0dd579506b096b95c1998b77498da1d4acacd6d4946d6841670cfcf9b0b597a3251e656e85735cedf2ca6a55efffff492d808292b5b", 0x3e}, {&(0x7f0000001ac0)="9e51bf4a57c8e1610329dd0d8bd5bde22382ae870ff5b479bc048157dfe2b2756d690ce974ca6f87de4f38bacbb454f7a80bbfaec4e7189a501f6f2605aaa71e12c4f6928bb5c638312068c83b41b95c1058a433bdc0928fbf3cb2767058e65a9036ec8b7ebc9058396e2a4d6992156c5fd4cdbdc7f10afa916b7310174f7582b38b40c42c20e51a095192767e187b55f4b52209e2ad71be8d3c5f5e62d7db246b18da962e2547f1e23e809ebcff1ffc7fd0c8c151f66fbb4d71444de1e863ca4f5652aa72cbea9f5598ef9c0643c2bc69", 0xd1}, {&(0x7f0000000a00)="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", 0x940}], 0x5}}], 0x2, 0x4040940) 19:44:02 executing program 1: request_key(&(0x7f0000000100)='rxrpc\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0) [ 182.218793][ T3773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.218828][ T3773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 19:44:02 executing program 4: syz_open_dev$sg(&(0x7f0000000640), 0x0, 0x0) 19:44:02 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x21, 0x0, &(0x7f00000000c0)) [ 182.218857][ T3773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.218887][ T3773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.222718][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 182.347269][ T1352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 19:44:02 executing program 5: pselect6(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x1]}, 0x8}) 19:44:02 executing program 1: add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 19:44:02 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x15}, {}]}) 19:44:02 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7a9, 0x0) [ 182.347285][ T1352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.359251][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 182.375947][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.375964][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 19:44:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000300)=ANY=[@ANYRES32=r1], &(0x7f0000000040)=0xf4) [ 182.377806][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 182.549250][ T3791] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 19:44:02 executing program 5: io_uring_setup(0x109e, &(0x7f0000000000)) syz_io_uring_setup(0x4c0b, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 19:44:02 executing program 0: syz_io_uring_setup(0x4c0b, &(0x7f0000000080)={0x0, 0xd711, 0x1, 0x3, 0x389}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x8000) 19:44:02 executing program 3: socket$inet(0x2, 0x806, 0x6) 19:44:02 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) read$FUSE(r0, &(0x7f0000001800)={0x2020}, 0x2020) 19:44:02 executing program 4: add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) [ 182.658724][ T3791] syz-executor.0 (3791) used greatest stack depth: 21232 bytes left 19:44:02 executing program 5: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) 19:44:03 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0285629, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c77fe5d2"}}) 19:44:03 executing program 0: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f0000000400), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='J', 0x1, r0) keyctl$search(0xa, r1, &(0x7f0000000380)='cifs.spnego\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0) 19:44:03 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x5452, 0x0) 19:44:03 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0xb, 0x0, &(0x7f00000000c0)) [ 182.911784][ T145] Bluetooth: hci2: command 0x040f tx timeout 19:44:03 executing program 1: timer_create(0x0, &(0x7f00000010c0)={0x0, 0x0, 0x4, @thr={&(0x7f0000000000), 0x0}}, 0x0) 19:44:03 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x25}, {}]}) 19:44:03 executing program 0: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, r0) 19:44:03 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000400), &(0x7f0000000440)=0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="020000000104000009000000ff0300000b59a8a0d80cc2c18e9996858718", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0100004001000000020000a026020000a6e1a44511e33381bad7644962adb8bfab85107f6cc705a007ff30c6d48be72bbdef7d82370588c6f91728918d48667f35c04b8aa2f826f37e4eeeb012d6dd56"], 0x80}, 0x1, 0x0, 0x0, 0x44004}, 0xf3252ff4a6476d8d) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="ca", 0x7ffff000, 0x8628, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 19:44:03 executing program 3: add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="d1", 0x1, 0xfffffffffffffffe) 19:44:03 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000300)={0x0, 0x0}) 19:44:03 executing program 4: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f00000009c0)}}], 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000140)={r2, 0x0, r1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180)={0x40000001}) pipe2$9p(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={0x0, 0x2, 0xffffffffffffffff, 0x7, 0x80000}) 19:44:03 executing program 0: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, r0) 19:44:03 executing program 1: syz_open_dev$dmmidi(&(0x7f00000000c0), 0x2, 0x20600) 19:44:03 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0xfffffffffffffd54) [ 183.210830][ T3850] trusted_key: encrypted_key: insufficient parameters specified 19:44:03 executing program 0: io_uring_setup(0x109e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x188}) open(0x0, 0x20100, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 19:44:03 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x80086601, 0x0) 19:44:03 executing program 1: pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0x7fff}]}) 19:44:03 executing program 2: r0 = add_key(&(0x7f0000000340)='asymmetric\x00', 0x0, &(0x7f00000003c0)="eb65", 0x2, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='asymmetric\x00', r0) [ 183.322309][ T3679] Bluetooth: hci1: command 0x0409 tx timeout 19:44:03 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0}) pselect6(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100)={r0}, &(0x7f0000000180)={&(0x7f0000000140)={[0x1]}, 0x8}) [ 184.111071][ T28] audit: type=1326 audit(1654199044.172:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3851 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6bc89109 code=0x7fc00000 [ 184.111117][ T28] audit: type=1326 audit(1654199044.172:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3851 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3d6bc89109 code=0x7fc00000 [ 184.111155][ T28] audit: type=1326 audit(1654199044.172:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3851 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6bc89109 code=0x7fc00000 [ 184.111192][ T28] audit: type=1326 audit(1654199044.172:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3851 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6bc89109 code=0x7fc00000 [ 184.111229][ T28] audit: type=1326 audit(1654199044.172:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3851 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6bc89109 code=0x7fc00000 [ 184.111266][ T28] audit: type=1326 audit(1654199044.172:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3851 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6bc89109 code=0x7fc00000 [ 184.111302][ T28] audit: type=1326 audit(1654199044.172:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3851 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6bc89109 code=0x7fc00000 [ 184.111345][ T28] audit: type=1326 audit(1654199044.172:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3851 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6bc89109 code=0x7fc00000 [ 184.111382][ T28] audit: type=1326 audit(1654199044.172:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3851 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6bc89109 code=0x7fc00000 [ 184.111418][ T28] audit: type=1326 audit(1654199044.172:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3851 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6bc89109 code=0x7fc00000 19:44:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="000000000000000020001280080001006774700014000280080001"], 0x40}}, 0x0) 19:44:04 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0x2, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c77fe5d2"}}) 19:44:04 executing program 2: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, 0x0) 19:44:04 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0xc, 0x0, &(0x7f00000000c0)) 19:44:04 executing program 5: pipe2$watch_queue(&(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close$fd_v4l2_buffer(r0) 19:44:04 executing program 3: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, 0x0, 0x0, r1) 19:44:04 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) read$midi(r0, &(0x7f0000000300)=""/16, 0x10) 19:44:04 executing program 5: setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000000), 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000003c0)) 19:44:04 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000cc0)={0x0}, 0x10) [ 184.690365][ T3873] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 19:44:04 executing program 3: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) 19:44:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @local, 0x5}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000000c0)={r1}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x82, &(0x7f0000000140)={r3}, 0x8) 19:44:04 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x15, 0x0, &(0x7f00000000c0)) 19:44:04 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) 19:44:04 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0x40049409, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c77fe5d2"}}) 19:44:04 executing program 4: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='(\xea\x05', r0) 19:44:04 executing program 0: pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)) 19:44:04 executing program 3: keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080), 0x0, 0x0, 0x0) 19:44:05 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000007440)='/proc/zoneinfo\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000094c0)=ANY=[@ANYBLOB='\x00']) read$FUSE(r0, &(0x7f0000009600)={0x2020}, 0x2020) [ 184.862781][ T3892] device ipvlan2 entered promiscuous mode 19:44:05 executing program 1: add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="d1b4de9f58fb18e3f2d6c460d1893681f1c738086f6b9c4af3636f10ff559a7a9f7dc35de78816292cc8413a23e2b2b925bed764109fba628bffe2ec09", 0x3d, 0xfffffffffffffffe) 19:44:05 executing program 5: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) 19:44:05 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000400), &(0x7f0000000440)=0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="020000000104000009000000ff0300000b59a8a0d80cc2c18e9996858718", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0100004001000000020000a026020000a6e1a44511e33381bad7644962adb8bfab85107f6cc705a007ff30c6d48be72bbdef7d82370588c6f91728918d48667f35c04b8aa2f826f37e4eeeb012d6dd56"], 0x80}, 0x1, 0x0, 0x0, 0x44004}, 0xf3252ff4a6476d8d) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc8) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) sendto$inet6(r0, &(0x7f00000001c0)="ca", 0x7ffff000, 0x8628, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:05 executing program 4: pselect6(0x40, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) 19:44:05 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_WRITE(r0, 0x0, 0x0) 19:44:05 executing program 2: keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000001100)=' hash=', 0x0) [ 184.994438][ T6] Bluetooth: hci2: command 0x0419 tx timeout 19:44:05 executing program 5: ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)) sched_rr_get_interval(0x0, &(0x7f00000001c0)) 19:44:05 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000940)={0x0, 0x0}) [ 185.041282][ T3910] trusted_key: encrypted_key: master key parameter '' is invalid 19:44:05 executing program 2: keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080), &(0x7f00000000c0)={'enc=', 'pkcs1', ' hash=', {'sha1-ce\x00'}}, 0x0, 0x0) 19:44:05 executing program 1: syz_open_dev$loop(&(0x7f0000001540), 0x80, 0x0) 19:44:05 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0xa, 0x0) 19:44:05 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) landlock_restrict_self(r0, 0x0) 19:44:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000540)='7', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="c14a89aba3fb25a3f7e4f8c5802acff98ae03ae8364a8f8a681ded08380cbc128afd920a0b6c22f6ca8ea7193c1e6c122bbf9e1f98707dce75460c04a80367090f03e8c1b1a560cb67", 0x7ffff000}, {&(0x7f0000000240)="88c41b8bcc55c010ef76ddb44013d527df2df055e58f1501326efbd7821d7d1c659322568931ef02a4d35c01c9e73e46d23f911b57b11b35ce882951db6ddc859d7aa10919a25b7202adbe967101fbb644ff595d8c157c465fbac1f5b9bd10f10b399daf7de28e0021e40f6a8e7e4452daf2be2582d9e943565e039160ba2e32d72a465884cb4d08ff8619f9f4eae209cd", 0x91}, {&(0x7f0000000040)="6cac8935bd8ee28cd0dd579506b096b95c1998b77498da1d4acacd6d4946d6841670cfcf9b0b597a3251e656e85735cedf2ca6a55efffff492d808292b5b", 0x3e}, {&(0x7f0000001ac0)="9e51bf4a57c8e1610329dd0d8bd5bde22382ae870ff5b479bc048157dfe2b2756d690ce974ca6f87de4f38bacbb454f7a80bbfaec4e7189a501f6f2605aaa71e12c4f6928bb5c638312068c83b41b95c1058a433bdc0928fbf3cb2767058e65a9036ec8b7ebc9058396e2a4d6992156c5fd4cdbdc7f10afa916b7310174f7582b38b40c42c20e51a095192767e187b55f4b52209e2ad71be8d3c5f5e62d7db246b18da962e2547f1e23e809ebcff1ffc7fd0c8c151f66fbb4d71444de1e863ca4f5652aa72cbea9f5598ef9c0643c2bc69", 0xd1}, {&(0x7f0000000a00)="264d108d7c384f6e03640b6870b77e62e5eade584d9c03cb97d11b8faf933111731616d206ad3ee4150b8dac2dcfa75b8df45dc3a965e73755d5869fbb13b06abe8a4fb86d5123bcb3e0d658ebb502955e34ee2ed94d4e4c28f61863c707fc2c9089e3f66944e65c567ec1c6eda43349f49168a1df4db6d3ef050162a96289c53e353291420a3d4f4f368758577be21835a5b11dcf63b5828054df4a5d86354e6c79fa30f115b08c35d99cc4e5b5de7967ea4251e792ec49235470cbf7ef69f55e6b2c6fc3449b7c321dd0b84aa0016d340598b4bdafc004a2029826b72599d4a1ac45f65af565e47759fdd30f9fef7e2e8d40a1e763bf8000b4cd67bd7620d9e164ad6872680b07b64fdc9ea8cabac1ee3bca56ec36f94528c174fd73aa552ee0c878df7931ac6e5a15166e69a25156934dff5a2864b1d045d039bf84571500df594166c22f7fe12b3fb78f6c451eefd66b138575fc34af8d91386b5f9b4bbbf178cca6a371286c97f2c385ac0edd81430059b291749e618ea86518ae44da012921380effdf4cab65c80e2b8e05b56590dd87f1dc99d21fb053416565e351a0fb582860a5de586afb3c5860a53c68e8c3dae3071a65dfdf131328a13de4e825595d2694e2178a0d53c17da886c2a3bdec0776ec1d872bb316823c3fdf504ba88b46c98e474964863cd32300eef2675230b205e92a18b5f8743795af4a80f7d6d8bec32c2d65204fd93a23f8b52608354540387b263a5a160247ba50afbf193043a1c60a1b1956df6032130774f1c2d083d47e9be85bdf1e2ce85275cdcc792d7aff66d9f05689f8c127ef353e541fd751d6c8fdb33374cdc213a282f0d0a7443de7f990bec56a381499f9a823ddfe31a5cfd01a42a73dbf3db3817319dd1f519759d2605fcf59b36c1c5492e856a067f586e4e173e716a281ec67ca3e3f7074efe095f443ff5686ff87ac2c1a6878afd5e98701aef32b8060139f2068a269f972a6d04c4c00c1365ed5d91545702ddcb7c2ff05e299ea7a135424270b1088e2f31e98b8f65bd67bea9eda94bbc168804e3d6498f2fccbe5db1c1e80862440d4cc2be2f6fedaa4ebd110fb7b6428f95fc01a10aabf19ae44a34a051ae71e1c67a072affbbfc1b68c34d20004f1b02d4d35dc5684b9db1ef9e2f858ca2d0dc6647dc8cbd8904e3f567729bb6215bc4aa8babba14d3dafd78aac8e8facac5e2d013bff3f3b66bf3b2a1c9fb24a4caa919580073ee6c7b80b92fa88966d53790bdefa1eae494bee1597d55321eb156a33b39e96b3fac4109f9e83a6dbd9e9fe5680c137eca611f2c842e1387bd4105d2f46df03660bf077aee41737f30bc866236a27a28f2b72d65fc27324994c2e4523adf9cc5961c1ea6250dec3ee885a1f7256feefd0ffe52f455042227fb32dc07519c07a107552c87a87ce2c0340780c6263d9769d09774b66c621347dc3bdef0c04aeaf32fd5cdeb9b8fefab1395f4c4e53bde6aff2c14927010521f28cdd8adc086f165ecd82eb75cd0e7112df543d59b994fe6b9dcd1e615acc06f847bd9460f71683b2f5f14646b48e0dd805e20c9322667de8ceb25dfeb0c5d08644d3b5947341737a6675c0d63d72d6ef610a65dbd536471259ff1d986bc50d900a5e154a8eb278b997a42b0d417f28c8eeb88f98aeb20570a3514e0960c672dc1a2d09d5a8568935a0da85bf8a5584bb6ca5b7a16c2dd89425d15bafc27d11e016e8c797c93af8bcd2d2af969c75f597b22a4e96ba06cc2cb9301b9dce6c3255d6defa8768dce2d043e6fcd1c63ca9edbef29d3465fa556e5374a94e790e7a581da8f0bb374c60774bfca2ccc7dac154e56527e87fab7efc7ffe1d14178ed80ff7aa8c290515bdec928cacc43b562949fe9c656dcf2708cf54285966606be806cda1bcbda7f6f8975d9a99033c77ea877f6bfe682c23f979b0cf963218c48a883d2edc6c533d7728a7e861a1a1facaea6d63ef1d34e5f16f39282b4c0b1073dbe11137b310b28dcbcc341e177b631dd8bd182579c7577e514ae5e482846b3b8addab0238526a5452ad5229d8b5ee551f88795b0b11a796c49b6016b0dc2908cf0717374d22746bbf5bdedceea94b147e338ff4a591e7e94108c1e7476cf096e1ad1d5e013551bac7f0cacfba2174480c3fd4357b48a0c989e136af3eb3ffb87efe1b21e4146860615fcb238d66b101862183cb5be3d9dc8bea225c643feb740e832a88d4e24b04e0bd69606df2da7c606a161ce327f4e5bdd2c1d1fc065dd6dd77be117f2d49377d221ca2e0358c6f297eda0420971e93020ea801602570f4ae446e780317dc55f6d58e884e311275c3e78a7c2f2a3aed69eaf11063a6c3ed56c8f840f78c4b43bef2259df85a7c2352301e6af0480f1d2b99ea9578e3815b649652781c904a097342912c98109144416cea3e259fd05223050b51d99d85759af23e0dcf4c8521fc395b365323b21969d96df20d846987c5bf797647b3b7dc1fdd48d9835809a180e633ce29c794b985993db50db43ac15e193ed330809351633949aaddd2d2d5696467f63a9438ba2423b5bd8e12edfc8632bb7be50b7791186fe81b9595db96ae5d9ab8f9d935832738d2c143dbaf77bd10d9072eda2530533f649e84c00ac429a4ce939839b04b95cf14f3767982b88bf1cb6b1ceeb0e58dd16f953b6cf895dffeb074c93be7c5da136c57f7ae96d8d5f4f3a3a0dd09226d6d74b38145e8277ff697b54bbad00cebf32e650f1f941a98e74b8cfe644383f1f4eddb12e741a67ac533eed2f0ce09dacf95bba43f89c4ba42d8c3445c9b19816f4957926316f9f90b66acf3d46870e3fde15c42b43ef45b2465a84264968dfa7b112003bf113553f9dd90f1abd190993703c2a1dad65beb66cab55294031e97309c750877088d6fb14217881fd6b3d9dc9554bc85689770ca7a17d2649c07c23c5a03df037eac57640faa25311ff6c4a7638dad7c7e1d9e7045e224e97017314496d3f69495766887e09328a322316f2874dfe7248993a65f530c4697f12e49b0f1f908dfdae418571458d1cdf03606119dca7915498380025b15b4b5aff548059c403942b276963e5461957b596a8c848a58db762aa5f941c893bba990ad83aa04ad925956123db4892bc28bd36d01cbf80d73307b43b523c7931442e57c4d494798d280957f9a49cb27f456d25f010cec7882cc5180e3ea1bca53b6c1bf38db3dd9e98df8fde781c25e03be87e9bd18e5026912dc3ccf3e8f567473063526ecb01f52ebe44a9d7c9263c6e4d8448b826fc114d8c92c927a021cb50e9470a518ea64a041a764d1cc00ce3b847d06e12f2f678749", 0x940}], 0x5}}], 0x2, 0x4040940) 19:44:05 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 185.264048][ T3933] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 185.329870][ T3935] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 185.330708][ T3935] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 185.337413][ T3935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.402170][ T3683] Bluetooth: hci1: command 0x041b tx timeout 19:44:06 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000400), &(0x7f0000000440)=0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="020000000104000009000000ff0300000b59a8a0d80cc2c18e9996858718", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0100004001000000020000a026020000a6e1a44511e33381bad7644962adb8bfab85107f6cc705a007ff30c6d48be72bbdef7d82370588c6f91728918d48667f35c04b8aa2f826f37e4eeeb012d6dd56"], 0x80}, 0x1, 0x0, 0x0, 0x44004}, 0xf3252ff4a6476d8d) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc8) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) sendto$inet6(r0, &(0x7f00000001c0)="ca", 0x7ffff000, 0x8628, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:06 executing program 3: open(&(0x7f0000000640)='./file0\x00', 0x44e00, 0x0) 19:44:06 executing program 4: socketpair(0xa, 0x0, 0x0, &(0x7f00000001c0)) 19:44:06 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x0, 0x0, 0x0, 0x0, 0x4}, 0x48) 19:44:06 executing program 1: clock_getres(0x2, &(0x7f0000000600)) 19:44:06 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pselect6(0x40, &(0x7f0000002f40), &(0x7f0000002f80)={0x8}, 0x0, &(0x7f0000003000)={0x0, 0x989680}, 0x0) 19:44:06 executing program 1: bpf$PROG_LOAD_XDP(0x16, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:44:06 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{}]}) 19:44:06 executing program 5: add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x0, "fd5c3cb6e60b3e3c987d7fbe996dec2da692a7218b968eb03e7c3a03266d240000003dea000000000000000000000000030000000000000006000000000400"}, 0x48, 0xfffffffffffffffc) 19:44:06 executing program 3: openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000380), 0x80) 19:44:06 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000580)={0x2020}, 0x2020) 19:44:06 executing program 1: keyctl$read(0x1a, 0x0, 0x0, 0x0) [ 187.472160][ T3683] Bluetooth: hci1: command 0x040f tx timeout 19:44:08 executing program 0: openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 19:44:08 executing program 5: bpf$PROG_LOAD_XDP(0x2, 0x0, 0xf7) 19:44:08 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{}, {0x3d}]}) 19:44:08 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x3, 0x0, &(0x7f00000000c0)) 19:44:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x1cb) sendmmsg$inet(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000540)='7', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="c14a89aba3fb25a3f7e4f8c5802acff98ae03ae8364a8f8a681ded08380cbc128afd920a0b6c22f6ca8ea7193c1e6c122bbf9e1f98707dce75460c04a80367090f03e8c1b1a560cb67", 0x49}, {&(0x7f0000000240)="88c41b8bcc55c010ef76ddb44013d527df2df055e58f1501326efbd7821d7d1c659322568931ef02a4d35c01c9e73e46d23f911b57b11b35ce882951db6ddc859d7aa10919a25b7202adbe967101fbb644ff595d8c157c465fbac1f5b9bd10f10b399daf7de28e0021e40f6a8e7e4452daf2be2582d9e943565e039160ba2e32d72a465884cb4d08ff8619f9f4eae209cd", 0x91}, {&(0x7f0000000040)="6cac8935bd8ee28cd0dd579506b096b95c1998b77498da1d4acacd6d4946d6841670cfcf9b0b597a3251e656e85735cedf2ca6a55efffff492d808292b5b", 0x3e}, {&(0x7f0000001ac0)="9e51bf4a57c8e1610329dd0d8bd5bde22382ae870ff5b479bc048157dfe2b2756d690ce974ca6f87de4f38bacbb454f7a80bbfaec4e7189a501f6f2605aaa71e12c4f6928bb5c638312068c83b41b95c1058a433bdc0928fbf3cb2767058e65a9036ec8b7ebc9058396e2a4d6992156c5fd4cdbdc7f10afa916b7310174f7582b38b40c42c20e51a09", 0x89}, {&(0x7f0000000a00)="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", 0x3f4}], 0x5}}], 0x2, 0x4040940) sendmmsg$inet(r0, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000300)="e7d6cf55a28bdad5fa4fd1e72492ee224a549bbac9d8f4091990", 0x1a}, {&(0x7f0000000340)='e\n=', 0x3}, {&(0x7f0000000380)="4a8a8b7fa606f013d1a095ff36d9f06a67279bdab1cbc6c991e6635fb58dbc158e8eaba2e9e7320d5604309fb6e92658de02e558d7ff90cc1a33b7e12f863197d7a74506b85db744b87a3adf90bbbe5dccef3454fe4c57906a3ef200f86f34870f3a08d8b01d857b8367389536c14a0beedaf785c2a0da520fa549242dba7b6b89fcbb8d7d68b75465b1a423b69212b95ed5da1748130a7d378efec75e2bfe98d84407f81578c2121562428f0d564a3bda6f31cde6abf0833243dc07667ee2a96bf2e9e06da13bbda0ac9803a28a4da274cc76e5a2aae4f826a2b15a2a5d9e5572e865", 0xe3}, {0x0}], 0x4, &(0x7f0000000840)=[@ip_tos_u8={{0x11}}], 0x18}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 19:44:08 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x341000, 0x0) close$fd_v4l2_buffer(r0) 19:44:08 executing program 1: add_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000240)='k', 0x1, 0xfffffffffffffffd) 19:44:08 executing program 2: io_uring_setup(0x0, 0x0) syz_io_uring_setup(0x4c0b, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 19:44:08 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x0, "fd5c3cb6e60b3e3c987d7fbe996dec2da692a7218b968eb03e7c3a03266d240000003dea000000000000000000000000030000000000000006000000000400"}, 0x48, 0xfffffffffffffffc) keyctl$assume_authority(0x10, r0) [ 188.062997][ T3969] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 19:44:08 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000007440)='/proc/zoneinfo\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000094c0)=ANY=[]) read$FUSE(r0, &(0x7f0000009600)={0x2020}, 0x2020) 19:44:08 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{}]}) 19:44:08 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101880) read$FUSE(r0, 0x0, 0x0) 19:44:08 executing program 5: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r0, 0x0) 19:44:08 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0xe, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c77fe5d2"}}) 19:44:08 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 19:44:08 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000001140), r0) 19:44:08 executing program 0: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000200)) 19:44:08 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x48, 0x0) 19:44:08 executing program 1: add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @auto=[0x0, 0x0, 0x64]}, &(0x7f0000000140)={0x0, "fd5c3cb6e60b3e3c987d7fbe996dec2da692a7218b968eb03e7c3a03266d240000003dea000000000000000000000000030000000000000006000000000400"}, 0x48, 0xfffffffffffffffc) 19:44:08 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7b2, 0x0) 19:44:08 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee00) 19:44:08 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/cpuinfo\x00', 0x0, 0x0) 19:44:08 executing program 5: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) 19:44:08 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 19:44:08 executing program 3: bpf$PROG_LOAD_XDP(0x4, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:44:08 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 19:44:08 executing program 2: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 19:44:08 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) 19:44:08 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x40086602, 0x0) 19:44:08 executing program 4: syz_io_uring_setup(0xef3, &(0x7f0000000280), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000000)) 19:44:08 executing program 3: keyctl$read(0x15, 0x0, 0x0, 0x0) 19:44:08 executing program 2: socket$inet_dccp(0x2, 0x6, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x0) 19:44:08 executing program 0: request_key(&(0x7f0000000300)='cifs.spnego\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0xffffffffffffffff) 19:44:08 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000540)={0x60, 0x0, 0x0, {{0x0, 0x5, 0x0, 0x6, 0x3, 0x6, 0x9, 0x1}}}, 0x60) 19:44:08 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x3, 0x0, &(0x7f0000000300)={0x0, 0x0}) 19:44:08 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 19:44:08 executing program 4: getrandom(&(0x7f0000000240)=""/1, 0x1, 0x0) 19:44:08 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 19:44:08 executing program 0: mknod$loop(&(0x7f0000001440)='./file0\x00', 0x0, 0x0) 19:44:08 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000004ac0)={0x0, 0x0, &(0x7f0000004840)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 19:44:08 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000540)={0x60, 0x0, 0x0, {{0x0, 0x5, 0x0, 0x6, 0x3, 0x6, 0x9, 0x1}}}, 0x60) 19:44:08 executing program 4: pselect6(0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0)={0x77359400}, &(0x7f0000000840)={&(0x7f0000000800)={[0x5]}, 0x8}) 19:44:08 executing program 0: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$read(0x1d, r0, 0x0, 0x0) 19:44:08 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc058565d, &(0x7f0000000180)={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c77fe5d2"}}) 19:44:08 executing program 1: fchmodat(0xffffffffffffffff, 0x0, 0x0) 19:44:08 executing program 2: socketpair(0x1, 0x2, 0x1, &(0x7f0000000240)) 19:44:09 executing program 0: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$read(0x1d, r0, 0x0, 0x0) 19:44:09 executing program 3: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/4096) 19:44:09 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000540)={0x60, 0x0, 0x0, {{0x0, 0x5, 0x0, 0x6, 0x3, 0x6, 0x9, 0x1}}}, 0x60) 19:44:09 executing program 1: pipe2(&(0x7f0000001080)={0xffffffffffffffff}, 0x0) recvmsg(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001280)=[{0x0}], 0x1}, 0x0) 19:44:09 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r0, 0x0, 0x0) 19:44:09 executing program 2: pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:09 executing program 3: select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x8}) [ 189.551326][ T3683] Bluetooth: hci1: command 0x0419 tx timeout 19:44:09 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff}) listen(r0, 0x0) 19:44:09 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000540)={0x60, 0x0, 0x0, {{0x0, 0x5, 0x0, 0x6, 0x3, 0x6, 0x9, 0x1}}}, 0x60) 19:44:09 executing program 1: semctl$SETVAL(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000004c0)) 19:44:09 executing program 2: fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) 19:44:09 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(r0, 0x80087467, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}) 19:44:09 executing program 3: mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) 19:44:09 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(r0, 0x80087467, &(0x7f0000000080)) 19:44:09 executing program 1: mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x0) 19:44:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x1) 19:44:09 executing program 0: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000600)={{0x0, 0xffffffffffffffff}}) 19:44:10 executing program 5: write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000540)={0x60, 0x0, 0x0, {{0x0, 0x5, 0x0, 0x6, 0x3, 0x6, 0x9, 0x1}}}, 0x60) 19:44:10 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$lock(r0, 0x9, 0x0) 19:44:10 executing program 3: munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 19:44:10 executing program 2: request_key(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='}$\x00', 0x0) 19:44:10 executing program 0: semget(0x2, 0x4, 0x7a0) 19:44:10 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000080)=@abs, 0x8) 19:44:10 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$lock(r0, 0x7, 0x0) 19:44:10 executing program 4: pipe(&(0x7f0000000900)={0xffffffffffffffff}) mknodat(r0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0) 19:44:10 executing program 5: write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000540)={0x60, 0x0, 0x0, {{0x0, 0x5, 0x0, 0x6, 0x3, 0x6, 0x9, 0x1}}}, 0x60) 19:44:10 executing program 3: accept$inet(0xffffffffffffff9c, 0x0, 0x0) 19:44:10 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 19:44:10 executing program 1: fchmodat(0xffffffffffffffff, 0x0, 0x694385c265de1bba) 19:44:10 executing program 0: listen(0xffffffffffffff9c, 0x0) 19:44:10 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getpeername(r0, 0x0, 0x0) 19:44:10 executing program 5: write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000540)={0x60, 0x0, 0x0, {{0x0, 0x5, 0x0, 0x6, 0x3, 0x6, 0x9, 0x1}}}, 0x60) 19:44:10 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x100) 19:44:10 executing program 1: pipe(&(0x7f0000000100)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) 19:44:10 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x5) 19:44:10 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000540)={0x60, 0x0, 0x0, {{0x0, 0x5, 0x0, 0x6, 0x3, 0x6, 0x9, 0x1}}}, 0x60) 19:44:10 executing program 0: open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) 19:44:10 executing program 4: getgroups(0x1, &(0x7f0000000440)=[0xffffffffffffffff]) 19:44:10 executing program 1: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140)) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 19:44:10 executing program 3: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) 19:44:10 executing program 2: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}}) 19:44:10 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000540)={0x60, 0x0, 0x0, {{0x0, 0x5, 0x0, 0x6, 0x3, 0x6, 0x9, 0x1}}}, 0x60) 19:44:10 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) fchown(r0, 0x0, 0xffffffffffffffff) 19:44:10 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000000), 0xc) 19:44:10 executing program 1: recvfrom$inet(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f0000001140)={0x2, 0x2}, 0xc) 19:44:10 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000001400)={&(0x7f0000001080)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000001380)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f00000013c0)=[@rights], 0x10}, 0xb) 19:44:10 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, 0x0, &(0x7f00000016c0)) 19:44:10 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000540)={0x60, 0x0, 0x0, {{0x0, 0x5, 0x0, 0x6, 0x3, 0x6, 0x9, 0x1}}}, 0x60) 19:44:10 executing program 0: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x200, &(0x7f0000000080)=0x100a3, 0x4) 19:44:10 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chown(&(0x7f0000000ec0)='./file0\x00', 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x2000) 19:44:10 executing program 2: shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0xffffffffffffffff}}) 19:44:10 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffa9baaa5f4f22c70b86dd6092ce4000008900fe4200000000000000000000000000bbfe"], 0x0) 19:44:10 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) 19:44:10 executing program 5: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000540)={0x60, 0x0, 0x0, {{0x0, 0x5, 0x0, 0x6, 0x3, 0x6, 0x9, 0x1}}}, 0x60) 19:44:10 executing program 2: socket$inet(0x2, 0x4003, 0x2) 19:44:10 executing program 3: shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/147) shmget$private(0x0, 0x3000, 0x380, &(0x7f0000ffd000/0x3000)=nil) socket$unix(0x1, 0x1, 0x0) 19:44:10 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000080), 0x88) 19:44:10 executing program 4: r0 = socket(0x1c, 0x5, 0x0) setsockopt$sock_int(r0, 0xffff, 0x4000, &(0x7f0000000440), 0x4) 19:44:10 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 19:44:10 executing program 5: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000540)={0x60, 0x0, 0x0, {{0x0, 0x5, 0x0, 0x6, 0x3, 0x6, 0x9, 0x1}}}, 0x60) 19:44:10 executing program 0: sendmsg$unix(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000002140)=@abs={0x8}, 0x8, 0x0, 0x0, &(0x7f0000002680)=[@rights], 0x10}, 0x0) 19:44:10 executing program 2: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) fcntl$lock(r0, 0x0, 0x0) 19:44:10 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[], 0x308}, 0x0) 19:44:10 executing program 5: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000540)={0x60, 0x0, 0x0, {{0x0, 0x5, 0x0, 0x6, 0x3, 0x6, 0x9, 0x1}}}, 0x60) 19:44:10 executing program 4: open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f00000015c0)='./file1\x00', 0x0, 0x0) 19:44:10 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open$dir(&(0x7f0000000c80)='./file0\x00', 0x0, 0x0) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)) 19:44:10 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) link(&(0x7f00000001c0)='./file0\x00', 0x0) 19:44:10 executing program 0: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) fcntl$lock(r0, 0xd, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 19:44:11 executing program 2: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x7, 0x410, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000200), 0x98) 19:44:11 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 19:44:11 executing program 4: execve(0x0, &(0x7f0000000c00)=[&(0x7f0000000b00)='^-^+\x00'], 0x0) 19:44:11 executing program 3: setpriority(0x2, 0x2030, 0x0) 19:44:11 executing program 1: bind$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs={0x8}, 0x8) 19:44:11 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) execve(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000c00)=[&(0x7f0000000ac0)='-.%}\\@\x00'], 0x0) 19:44:11 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open$dir(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 19:44:11 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 19:44:11 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) geteuid() 19:44:11 executing program 0: execve(0x0, &(0x7f0000000c00), 0x0) 19:44:11 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) execve(0x0, &(0x7f0000000c00), &(0x7f0000000d00)=[&(0x7f0000000c40)=',[%\x00']) geteuid() 19:44:11 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 19:44:11 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) 19:44:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f0000000240)) 19:44:11 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x80, 0x0) 19:44:11 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) dup2(r0, r1) recvmsg(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x2) 19:44:11 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x1, &(0x7f0000000180)={0x1c, 0x1c, 0x3}, 0x1c) close(r0) 19:44:11 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000540)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x6, 0x3, 0x6, 0x9, 0x1}}}, 0x60) 19:44:11 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0xffffffffffffffff}}, 0x0) 19:44:11 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x900, &(0x7f0000000740), 0x8) 19:44:11 executing program 2: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="c89805607372728c", 0x8, 0x0, &(0x7f0000000140)={0x1c, 0x1c}, 0x1c) 19:44:11 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000001180)={@local, @empty, @val, {@ipv4}}, 0x0) 19:44:11 executing program 1: r0 = socket(0x1c, 0x5, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x1203, &(0x7f0000000580)=ANY=[], 0x3ef) 19:44:11 executing program 0: setpriority(0x0, 0x2030, 0x0) 19:44:11 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f00000001c0), 0x90) 19:44:11 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000540)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x9, 0x1}}}, 0x60) 19:44:11 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x105) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) execve(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000c00)=[&(0x7f0000000ac0)='-.%}\\@\x00', &(0x7f0000000b00)='^-^+\x00', &(0x7f0000000b40)=']}:\x00', 0x0], &(0x7f0000000d00)=[&(0x7f0000000c40)=',[%\x00', &(0x7f0000000cc0)='[\x00']) r0 = accept4$unix(0xffffffffffffff9c, &(0x7f0000000d80), &(0x7f0000000e00)=0x6e, 0x40000000) getsockname(r0, &(0x7f0000000e40)=@in, &(0x7f0000000e80)=0x10) r1 = geteuid() chown(&(0x7f0000000ec0)='./file0\x00', r1, 0x0) linkat(r0, &(0x7f0000001040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001080)='./file0\x00', 0x0) accept$unix(r0, &(0x7f00000010c0), &(0x7f0000002100)=0x1002) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000025c0), 0x38000000) socket$inet6_sctp(0x1c, 0x5, 0x84) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x48, &(0x7f0000002740), &(0x7f0000002780)=0x4) 19:44:11 executing program 2: getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000002740), 0x0) 19:44:11 executing program 0: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@cred, @cred, @cred], 0x138}, 0x0) 19:44:11 executing program 1: faccessat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 19:44:11 executing program 3: execve(0x0, &(0x7f0000000c00), &(0x7f0000000d00)) 19:44:11 executing program 0: linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8400) 19:44:11 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000180)={0x0, @in, 0x0, 0x0, 0x310}, 0x98) 19:44:11 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000540)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x1}}}, 0x60) 19:44:11 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000d40)='./file0\x00', 0x0) chown(&(0x7f0000000ec0)='./file0\x00', 0x0, 0x0) 19:44:11 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') 19:44:11 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f00000001c0), &(0x7f00000000c0)=0xb0) 19:44:11 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x104, &(0x7f0000000200), &(0x7f0000000340)=0x4) 19:44:11 executing program 0: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000002100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002600)) 19:44:11 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r0, &(0x7f0000000000)=@un=@abs={0x8}, 0x8) 19:44:11 executing program 3: r0 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7fffffff}, 0x14) 19:44:11 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x1}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000080), &(0x7f0000000000)=0x98) 19:44:11 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000540)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1}}}, 0x60) 19:44:11 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x23, &(0x7f00000000c0), 0x90) 19:44:11 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) statfs(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002600)) 19:44:12 executing program 1: sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)}], 0x1}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x28, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) 19:44:12 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x74) 19:44:12 executing program 0: open$dir(&(0x7f0000001800)='.\x00', 0x0, 0x0) 19:44:12 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000540)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x60) 19:44:12 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x18, &(0x7f0000000540), 0x4) 19:44:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)) 19:44:12 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000400)={0x1c, 0x1c, 0x1}, 0x1c) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r3}, 0x10) 19:44:12 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140)={0x0, @in, 0x0, 0x0, 0x388}, 0x98) 19:44:12 executing program 2: accept$unix(0xffffffffffffffff, &(0x7f00000010c0), &(0x7f0000002100)=0x1002) 19:44:12 executing program 0: execve(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000c00)=[&(0x7f0000000ac0)='-.%}\\@\x00'], 0x0) 19:44:12 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000400)={0x1c, 0x1c, 0x1}, 0x1c) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f0000000080)={r3}, &(0x7f00000000c0)=0x8) 19:44:12 executing program 4: execve(0x0, &(0x7f0000000c00), &(0x7f0000000d00)=[&(0x7f0000000c40)=',[%\x00']) 19:44:12 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000540)={0x60}, 0x60) 19:44:12 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00') chown(&(0x7f0000000ec0)='./file0\x00', 0x0, 0x0) 19:44:12 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) execve(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000c00)=[&(0x7f0000000ac0)='-.%}\\@\x00'], 0x0) chown(&(0x7f0000000ec0)='./file0\x00', 0x0, 0x0) 19:44:12 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x1}, 0x1c) r1 = dup2(r0, r0) connect$inet(r1, &(0x7f0000000240)={0x10, 0x2}, 0x10) 19:44:12 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) recvmsg(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x3) 19:44:12 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000000c0)={0x0, @in, 0x0, 0x0, 0x385}, 0x98) 19:44:12 executing program 2: utimensat(0xffffffffffffffff, 0x0, &(0x7f0000001740)={{0x0, 0xfffffffffffffffc}}, 0x0) 19:44:12 executing program 3: faccessat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) 19:44:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002600)) 19:44:12 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x105) execve(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000c00)=[&(0x7f0000000ac0)='-.%}\\@\x00', &(0x7f0000000b00)='^-^+\x00', &(0x7f0000000b40)=']}:\x00', 0x0], &(0x7f0000000d00)=[&(0x7f0000000c40)=',[%\x00', &(0x7f0000000cc0)='[\x00']) accept4$unix(0xffffffffffffff9c, 0x0, 0x0, 0x0) geteuid() linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000001080)='./file0\x00', 0x0) 19:44:12 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 19:44:12 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100)={0x0, @in, 0x0, 0x0, 0x6}, 0x98) 19:44:12 executing program 5: openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x0) 19:44:12 executing program 3: execve(0x0, &(0x7f0000000c00), &(0x7f0000000d00)=[0x0]) 19:44:12 executing program 0: symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00') 19:44:12 executing program 4: open$dir(&(0x7f0000001240)='./file0\x00', 0x40000000ac5, 0x0) rename(&(0x7f00000000c0)='./file0\x00', 0x0) 19:44:12 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000001080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002600)) 19:44:12 executing program 2: open$dir(&(0x7f0000001240)='./file0\x00', 0x40000000ac5, 0x0) chdir(&(0x7f0000000000)='./file0\x00') 19:44:12 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 19:44:12 executing program 5: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000002740), &(0x7f0000002780)=0x4) 19:44:12 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4) 19:44:12 executing program 4: chown(&(0x7f0000000ec0)='./file0\x00', 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x2000) 19:44:12 executing program 1: faccessat(0xffffffffffffffff, 0x0, 0x0) 19:44:12 executing program 2: chown(&(0x7f0000001380)='./file0\x00', 0x0, 0x0) 19:44:12 executing program 0: accept$unix(0xffffffffffffffff, &(0x7f00000010c0), 0x0) 19:44:12 executing program 3: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="c89805607372728ce80faca7b93c825645e0f5aebe19a76217bddbb064300dcf39197a5c72c06b90e7dc5c5966e212c35cdf162b4ad85676b4d3a3f470e980fde3af4bee3e6420bf3b68e7097225b53483ecafdaf77449527e07a9f0c85fd88c26f0d3b1d596908a4483648fa245cb1acb01d55c35ff01406fed77f26e56e1d60def091943da7ead80e2f1c4e2a689d9942d7ae245b7476964", 0x99, 0x0, &(0x7f0000000140)={0x1c, 0x1c}, 0x1c) 19:44:12 executing program 4: open$dir(&(0x7f0000001800)='.\x00', 0x400000, 0x0) 19:44:12 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) fchown(r0, 0x0, 0x0) 19:44:12 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 19:44:12 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chown(&(0x7f0000000240)='./file0\x00', 0x0, 0xffffffffffffffff) 19:44:12 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x800, 0x8001}, 0x10) 19:44:13 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) dup2(r1, r0) connect$inet6(r1, &(0x7f0000000400)={0x1c, 0x1c, 0x1}, 0x1c) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x902, &(0x7f0000000000)=r3, 0x4) 19:44:13 executing program 0: utimensat(0xffffffffffffffff, 0x0, &(0x7f0000001740), 0x0) 19:44:13 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, @in, 0x334049c1, 0x0, 0x0, 0x0, 0x4}, 0x98) 19:44:13 executing program 5: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@cred, @cred], 0xd0}, 0x0) 19:44:13 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 19:44:13 executing program 4: setpriority(0x0, 0x8, 0x0) 19:44:13 executing program 0: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x1c, 0x1c}, 0x1c) 19:44:13 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x10, 0x2}, 0x10) 19:44:13 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x105) execve(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000c00)=[&(0x7f0000000ac0)='-.%}\\@\x00', &(0x7f0000000b00)='^-^+\x00', &(0x7f0000000b40)=']}:\x00', &(0x7f0000000b80)='\'\x10){}.\x00', &(0x7f0000000bc0)='[\x00'], &(0x7f0000000d00)=[&(0x7f0000000c40)=',[%\x00', &(0x7f0000000c80)='[\x00', &(0x7f0000000cc0)='[\x00']) r0 = accept4$unix(0xffffffffffffff9c, &(0x7f0000000d80), &(0x7f0000000e00)=0x6e, 0x40000000) getsockname(r0, &(0x7f0000000e40)=@in, &(0x7f0000000e80)=0x10) r1 = geteuid() chown(&(0x7f0000000ec0)='./file0\x00', r1, 0x0) linkat(r0, &(0x7f0000001040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001080)='./file0\x00', 0x0) accept$unix(r0, &(0x7f00000010c0), &(0x7f0000002100)=0x1002) accept4$unix(r0, 0x0, &(0x7f00000025c0), 0x38000000) socket$inet6_sctp(0x1c, 0x5, 0x84) 19:44:13 executing program 5: fcntl$lock(0xffffffffffffffff, 0xd, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 19:44:13 executing program 4: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') 19:44:13 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000380), &(0x7f00000003c0)=0x8) 19:44:13 executing program 4: execve(0x0, &(0x7f0000000c00)=[0x0], 0x0) 19:44:13 executing program 0: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x12, &(0x7f00000001c0), 0x1) 19:44:13 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000001240)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000001300)='./file0\x00', 0x0, 0x0) 19:44:13 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chown(&(0x7f0000000ec0)='./file0\x00', 0x0, 0x0) 19:44:13 executing program 5: sendmsg$unix(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000002140)=@abs={0x8}, 0x8, 0x0, 0x0, &(0x7f0000002680)}, 0x0) 19:44:13 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, 0x0, 0x0) 19:44:13 executing program 4: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="c89805607372728c", 0x8, 0x0, &(0x7f0000000140)={0x1c, 0x1c}, 0x1c) 19:44:13 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000180), 0x98) 19:44:13 executing program 2: openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200, 0x0) 19:44:13 executing program 0: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:13 executing program 3: open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 19:44:13 executing program 5: getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000001680)) 19:44:13 executing program 2: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) fcntl$lock(r0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 19:44:13 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x1}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) 19:44:13 executing program 3: getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000e80)) 19:44:13 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002600)) 19:44:13 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100)={0x0, @in, 0x10001, 0x0, 0x6}, 0x98) 19:44:13 executing program 3: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000040), 0x4) 19:44:13 executing program 5: chown(&(0x7f0000000ec0)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000ec0)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000ec0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 19:44:13 executing program 4: open$dir(&(0x7f0000001240)='./file0\x00', 0x40000000ac5, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 19:44:13 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000001bc0), &(0x7f0000001c00)=0x8) 19:44:13 executing program 1: mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) 19:44:13 executing program 0: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x38000000) 19:44:13 executing program 2: recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa) 19:44:13 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) rename(&(0x7f0000000340)='./file0/../file0\x00', 0x0) 19:44:13 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg(r0, &(0x7f0000003500)={&(0x7f00000011c0)=@un=@file={0x0, './file0/file0\x00'}, 0x10, &(0x7f0000002380)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f00000023c0)}, 0x0) 19:44:13 executing program 3: linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000001080)='./file0\x00', 0x0) r0 = socket$unix(0x1, 0x5, 0x0) geteuid() chown(&(0x7f0000000ec0)='./file0\x00', 0x0, 0x0) fchownat(0xffffffffffffffff, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@in6={0x1c, 0x1c}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002600)) 19:44:13 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00') 19:44:13 executing program 2: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, 0x0, 0x0) 19:44:13 executing program 0: fchownat(0xffffffffffffffff, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0) 19:44:13 executing program 3: execve(0x0, &(0x7f0000000c00)=[&(0x7f0000000ac0)='-.%}\\@\x00'], &(0x7f0000000d00)) 19:44:13 executing program 5: open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 19:44:14 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) dup2(r0, r1) 19:44:14 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockname(r0, &(0x7f0000000040)=@in6, &(0x7f0000000080)=0x1c) 19:44:14 executing program 0: socket$inet6_sctp(0x1c, 0x0, 0x84) 19:44:14 executing program 3: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) fchown(r0, 0x0, 0xffffffffffffffff) 19:44:14 executing program 5: open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 193.952969][ T1230] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.953015][ T1230] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.975971][ T4513] process 'syz-executor.5' launched './file0' with NULL argv: empty string added 19:44:14 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) dup2(r0, r1) 19:44:14 executing program 4: shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}) 19:44:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000dc0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {0xb}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 19:44:14 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r1, &(0x7f0000000080), 0x10) dup2(r0, r1) 19:44:14 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x8983, &(0x7f0000001200)={'syztnl0\x00', 0x0}) 19:44:14 executing program 4: mlock(&(0x7f0000ff4000/0xc000)=nil, 0xc000) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 19:44:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000dc0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {0x12}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 19:44:14 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x5c, 0x41c, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 19:44:14 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x22040, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000540), 0x0, 0x0, 0x0) 19:44:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6}, 0x10) 19:44:14 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:14 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f780010203010902"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f00000002c0)="9e", 0x1) syz_usb_disconnect(r0) 19:44:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ip={@empty, @remote, 0x0, 0x0, 'erspan0\x00', 'syz_tun\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "af0e9774fd0afd26a7a9d8d4945d98475e11f45151d1fae8563d877c1cb7"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 19:44:14 executing program 0: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00'}, 0x10) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) 19:44:14 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) 19:44:14 executing program 1: syz_mount_image$vxfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x865}], 0x0, &(0x7f0000000280)) 19:44:14 executing program 2: ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) [ 194.397655][ T4552] device batadv0 entered promiscuous mode [ 194.398076][ T4550] device batadv0 left promiscuous mode [ 194.407594][ T4554] Error: Driver 'raw-gadget' is already registered, aborting... 19:44:14 executing program 0: r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r1, 0x2905, 0x0, 0x0, 0x0, 0x200000007000000) [ 194.407607][ T4554] UDC core: USB Raw Gadget: driver registration failed: -16 [ 194.407624][ T4554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:44:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {0x0, 0x0, 0x6700000}, {&(0x7f0000000580)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}], 0x0, &(0x7f0000003780)=ANY=[]) [ 194.507305][ T4561] af_packet: tpacket_rcv: packet too big, clamped from 32840 to 32624. macoff=96 [ 194.544903][ T4564] loop1: detected capacity change from 0 to 8 [ 194.554277][ T4564] Dev loop1: unable to read RDB block 8 [ 194.554316][ T4564] loop1: unable to read partition table [ 194.554481][ T4564] loop1: partition table beyond EOD, truncated [ 194.574770][ T4564] vxfs: WRONG superblock magic 00000000 at 1 19:44:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa}, 0x48) [ 194.575049][ T4564] vxfs: unable to read disk superblock at 8 [ 194.575059][ T4564] vxfs: can't find superblock. 19:44:14 executing program 1: syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) syz_read_part_table(0x5, 0x6, &(0x7f0000000480)=[{&(0x7f0000000500)="e0e772a413085e83f7c47361582336f031f81ca197a84b1a23761b53404fd446eb218ff3a1ceaa14c780289287958c8f27c299420d03234c5df933c4bba2c591fa816f7c79673148f25a6ca089d765e5d3de31b68a4cf18d49736f92a058aebcb2be2596479f3005562739562521e36283908a7be02f4ffff37b4e9a7ba28f5433d428fbc08867ceb414573b03c9c7ea3a1deaf5a92043ac2e3278b08ebe160d9e1ec4f1324053d9ae7953fc0ff54c9ca0e556002993e1e8cc1897ade78ca84f78a043d063018d263c76eb2d86faf42c80a40000000000", 0xd7, 0x3}, {&(0x7f0000000100)="2344ad2bab263cea5a8c3ec1295f6aa35198a883e0aeb961a6821753b076d15507a987591441fbcdd03167636669dee50c8fc9814748ce0ae977931bcbe193e4ed1d34c0009234dad671e79fd3def81a0b9fe9fd5a8476c210f7e8f7744259b4e997f32067e2680e5f0420d39345989c4790660264", 0x75}, {&(0x7f0000000180)="10b8858fc1646f4241010f2a0244ae5f804c2518e0d2d4332baaa377122667bf9452c44e43aaa07c44af7f647bb0af190b111bd2c02f45018045d768643f6279f5f223cfb656fd194f0e6abba231598f07bb7231471ca084e8b8ba638eedf8e60dfc3cf74a4abeee21609ea124d7131338779a103b888575185493b24e8071b5381f592236f46196e33fe42986ac65db942209352f6484c32f67395c7b79f3cc5aba17cb0183", 0xa6, 0x6}, {&(0x7f0000000240)="82aa9accebe5c9e58c215beb4951c16d0c754ac3fc2a9bf616bd1fc9293af2e6c0ee95a5cbf8822ca473eaef55921dcf153f2b0ce04a7d1c970f8d43abaece40f63fae6018f42c2bf7bd1afe262067efeb332c5acd84aa742777d8a6776a84d637c0190868dbbb7ff25d8ce4d9a95b4526bbc9b3c09bf95eccf46327cc784e8bdaa78f511be851de6b6c3abe52b2a2b1d9aae2ddc7b4e163bbb1b47ef9ad08b0579acf1a7ec989b589352ecfda5a5b49eba5957c582963a1dabcf832a56a788924", 0xc1, 0x2}, {&(0x7f0000000340)="a06fe0d10328046c8867da4a40fa1d07d46e7972f82a5dce7902137b56851f405061dc", 0x23, 0x6}, {&(0x7f00000003c0)="3ee5fe9ba9d37a7ad739bccd6c1038bc6dc1ab3e7cb5b7fe609373ae043bc2f2053d6f76d8ea38a187239cb814f6aadedcfca411c85c401cc7d9cf1e112b40eca90dd6688a76839b15c41aef3cfd0c55505749ef25316dfcd6b350d25bf9f3f099564e999638b3903a3da8bf21758253fc69528cfa9c4cc9d9b3b35d1e18b37fcd2dc58ea8abdba79848c94ee89d8f894574d11bd2abd0d1e8", 0x99, 0x3}]) r0 = epoll_create(0x6) r1 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="02000000000000002e2f66696c653000da0bfb5388f80f3c1cadbb61fc0ea11295c1d4a9a7f85d71e95b676813eafff857f31e786d4c9ea2b2b03665950c58d16ef328f83ea8d60df9976ccf7f84223134c7d7fcc8a6ec8afb3d8e50fcdbfe060aad21d822e8a213635b8dc1fee77e9acf"]) [ 194.623266][ T4569] loop2: detected capacity change from 0 to 264192 [ 194.718725][ T4569] EXT4-fs error (device loop2): ext4_quota_enable:6753: comm syz-executor.2: Bad quota inode # 4 19:44:14 executing program 0: r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r1, 0x2905, 0x0, 0x0, 0x0, 0x200000007000000) [ 194.728918][ T4569] EXT4-fs warning (device loop2): ext4_enable_quotas:6790: Failed to enable quota tracking (type=1, err=-116). Please run e2fsck to fix. [ 194.744840][ T143] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 194.784586][ T4569] EXT4-fs (loop2): mount failed [ 195.121614][ T143] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 195.121642][ T143] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 195.121680][ T143] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.291401][ T143] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 195.291431][ T143] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 195.291454][ T143] usb 6-1: Product: syz [ 195.291471][ T143] usb 6-1: Manufacturer: syz [ 195.291485][ T143] usb 6-1: SerialNumber: syz [ 195.376415][ T143] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 195.376434][ T143] cdc_wdm 6-1:21.0: Unknown control protocol [ 195.660577][ T145] usb 6-1: USB disconnect, device number 2 [ 195.661139][ C0] cdc_wdm 6-1:21.0: nonzero urb status received: -71 [ 195.661160][ C0] cdc_wdm 6-1:21.0: wdm_int_callback - 0 bytes [ 195.661177][ C0] cdc_wdm 6-1:21.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 195.676022][ T4551] cdc_wdm 6-1:21.0: Tx URB error: -19 [ 195.676118][ T4587] cdc_wdm 6-1:21.0: Tx URB error: -19 19:44:16 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 19:44:16 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000080)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000ffc, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000002240)="9fb4fae0166c98b22ee87c40aec619430d71409f2686ac9d24345f778fcbb494f2c0cd8804fa13bd0a23a73fe79674a16740f452b92622fc1f348b8005cba0dafbd2dc1340eccea91c69bd7dd0c2b7dfa7a725baf6a52e25e67a0f31c24e1417bac897084da7df3794c49e0e748c2e8a2c2b5340b9208bd640d56d91d021956eb3c686f5ad6cd1b9fc81d52f0b94a9648c218e459cf3b69186f94ce34eaf6240ecd9f9b6c834ebdbf2d07e0752488b21b2419c91367d49bd9ddba91c4fdf406f8305da599f7a8fec1f8e83fc6cc5e1d648cbc6a487be876f92d377c98169d34007742b602aa0d87713f55fb47a73a3bc6dcc7ae02a133f03135537f01d375772188ca15faccf63a33116bc526c5ba553499dda15a765d2eaa6be8daa92b50473b3948c3e5c934965ebf2dc28668b5a9b3b332957b8bc116238b039337499a1849d72b3e43cad2730606527bb4b776eb1c75dbebd9eacee2ef83f6c46fdc61f337ccc1c7080e417f9ec574e4be053f197300295596abe14b3e940edddabc80d3bc16c2318f4490b8ab86422e7c736e4a740c9a00b723902306848680c54c45c2801792bb6a174a859de95bd7c683041ba5edcb1e5ac9cc64ee3567335e4aae209186e3162729bfa5c6c118e871fdca48cc490feec36193f723e3ca2a00eca7d86b4d048940bbbd3461c2a1347c948bdf2cfd5d59b873d945fcd60639c82c17ae5bf9f7643a95e563bb707f339703ab23271d19923577bc4c0f0ef408746eef80ba7fc1b4e444a89ab28233b2bb385c83ae375ab59c2f4e0a849c1023a0a18e0513ce7f0785fd86d198410bcbfc3435702415f2357f486d46a5d22590dc4c1d60e65c23dd529365e1d1774801a0d16092da4bc6b43f72c813b2e4ccfdd1794e7e357fd8b99537e7c1ed6907fd5741f6a757cb5bedd3e16462bbf43e528b36711e0791cdde1f741e31f9a26c538ce0ca403d02633225ccf998ed4edc780cb7c48fb82f5e5fe8d8bd35b128164e8c112340e356cafeb82fd723b32d9a25ea8b54a57524b86ac5907d33cf3146cae34b72f0aa84315e588c24d5a3f690e62f62c89aacbc98b9dcf7319872f4b68b6e40de32d265b31adc1f21bf41760244318b0a936374b2a389ee767e44e73ecad4d28c440d66ea0a20ccbb91b7ea0ecbc9487c5d0af0ed6d6fa9b6bf49ea9757cadadd54e1db7c71b8b9edc816ebc01daf71ab6708fe3bed027572906801a75c5686a151fab3fd7e43afc2104dba41f12cf118abdc231fbc8d641926d2e0a743669713022178154435665e1b5ce10c4f36e16a407e7309afb8b6546a690e6fe319f2118d93d38da7b8de670db5e066cc2ffee3f20cfed97b40773c886e62339a7d4bc1378fe174e50bca13fbd9b005f0fb0ce4ef57a5984a3348e882aa055c169958d5c8b20f356f9e55b383c845c20c17290df3083d4fab659301c2beffde6769238e6e7877cae383a96c2fddda3804c60c716fc9c57bda348bc4f8805a5e8431fbc3d6ec736376152de59a621f114fa77cbaf79101f02ac5de012d64692e7b505527994a585aa5e148ffa38550146f73e289294ee94fa7079e2da938862f57115aa4d27412806164cec171af5c1a2bcb36075bd1bc68d1b2fc3a74a2817d0d297984c6d336d8bbebcb7e9dc2e30457e4e4ac36d0a07f9b41cc37e65c58bd08837c518e5670b888e815fd0a4c9e9f3c3f2752f7e9b7b0e04b2ec048750de2079d9091be4dd3b308ee088aff7d2b601513bbba06b7689b1a2ce39bf164e1bd6d32f1a43caab3936c2ba7bb9476e857d74d1a66dd6a8fed44e3ac97ad2624a95efcd1694b056b7f75685f3bff019b67eb1f3da3469dc6c7a3cc30ef1d57f428b425e95d54b684b4340a1bbf88162a80490f86a1390ba4de29169251a4dba8d9f49b1a7d558bc25058a6faa3a513f55f4dee28efc445e312279d22d162a83bdb82a042155b9ef2041bc6395d6f1f4aca50e22bee185726b61a5fdb4d1668ee16fefe578a04c2bbc689ae7e8df26ea14d465595c68fb7c0a44855927ab8886a3acf32c2498e024d1238553f845ed22c666c8a3ed36a7c826dcafe6aa6650be3faf5c2d0895dabd72604900d3f1df2b6ff0ef8b64c6dd16d80307cf73f6dd0247ec6ac36cdeb8eccacd0707afee8e26130f45e9d4222bfa4634c1280022492e6db61d96ea7fab0f83796135aaa4d9d9cf0c94dd0d37639dee6bfec94e79a614525d526e065332812abd37de03cb8dd5de523c10ac8b50a4ecef77ce29e698d62412991e55f634831046c8eca1619faadb4f12da91d7582db6dc5ebb8bd5294f25cc8617c97584c10c695d10942af4ce040919f11b1df211adc38a78b21ddc97dcf0c5ca5f2da8bbaacdb383575af257a2dce7ba94f2b06c2d68c67af9bf26b8d2cad9b7d2f10e8026695814545f008acc9bea1bbeb887751e419d672d8ccd5018387b72f01577cfcf3d289cfec45b1260fc63bda3c5b1a14b8e8f0da81d19f6fb428888d8d2fa4ba197c0beb94f240d47c53bb486d9e8bfe67feacb8615b41af79b470b02b98a3782d4b521f8a4ec332230a992c6681b271d872b4d3932f5b8f949e69ef9f2149fcd7d4c8778454c5c15a4990e0e72c9bc32cc8b709e191aa8acb282575477378adbafa9f38770541d5498e4408b2b9e32575f81916774c3e93fca1d296e422e10240c62527b7cefe0cdd6bf614b3251f03b492d6b0169a9375a4667aec767863d54ed654670347f849b6de82fdef0e7f69e3c36d89da51580f7ec8d8e90edaed671b8d770b54bfe7bacb1ac67b4174f3fa3a03c852b7ee3bd42f79f0c7178a8a7b7dba4323d1f807af6265a39537588e330743bdc6d64523d8150e1dc5ef0f06d09e57578ecce082dcb609be4f0d34e048f27f1e76a42d6c8b93af25f4c67fdb9e36bd2e21074377b80bf3e3541a982b11332bb608749632be37f5eb128a1268d876687ff3f185d65a8e9d44b64d608eda3d54cbf7d564793487f6705edc65e94893ad43b5f2d402db8f19c567a7f727dbf9dd7aa15d19fc2d4712fcec0373b21acb9942b36404d93f5d4a72a60d2df1c7b23d6b0cb2190423e2044c6b47db37cae732730378e3f888996571439180c722dccbb8e2c090ba397348b3d251373f83d6628d73a3c4ff0cf09c61f66e81a65b2d0746346df9a244733c875dc38d85ca900b0d1b0204ce8c75ce9bb2a6389556b4253575019b65c6abbf1ba67fb3133b0e4f792375fbcf519680b76ce0f5c1ed6cf606f371386daf8a4186ed6ff54756ee73c45476acca263a456b118d3dd1cfb80d2006edec44fb3fb312e4ab87952ee3cceb925e35bc327463c0177d942721c1774301d580f59a73071ad1d5f21aa856393060fa2638f598333eeded586451374065a50134737c8fffc9f1004b6f55275bfd04e0105c2f27d04f537db5e58a9d807ce5e2cf846dcdc72a01d7571ad99c7aa4ff6187da5e6d72e53387e3ae64839e4c54a5137eb3b0ceeab8b70a3e722d6bf43ff81265f3c7b751669c446cb58bef88f4bfd258ebaec32356194f83f721422efdf35bf67fb079513a82e2914a5d66cb23a5957a62f2e0ab022b0a1dd43d088c48bd09e52c952ebd0aa4ff2cf6fe6bc95374ce0b3e1a7f79b637ce5cdd7ae4015ba358e338ba40bcc85253ef816aa6d68c32a280e9903b0c729c07b94f7a0b3101fef58bb760d3585a4d29baac629193b1e7820dd1309229bf167474c57918f61fe2586dbba431562816c64b1d2764afd48e56b1dc94be28055db8f6ab0e55617cf888ec8f707353d4993b5ca270dd54719b22de841512f2c975d68e5bf31d846e7bb91a130b127d77726631582e68628a53eabc5244edc1b1a9712c3201c7443f28b7ff0ddd762682bfeee6285fa80d4159e43fbd16c4a354ea4e6f385edea2fd099911b636217930841b1746248c5ee107078fd8740cd49915baad787cd07a3407ae2e13d864344c92f23cea9ff5eb4ce96733586559010e41e482f3697bef6d1863dafbca8c65d847de1989e4c1187f4545ad666531ae8055e82e7f8c77b1d881013ef6b82bfdb2bb216e6d64bf70329d64cc37767c79d81d5064c8ebebc509bda6d3a451f7ff0aa4e861d1cb800c77485ff7e7fd2b2ec62d5e1d2980ebb91681587cfc11ffcfb5432f88beb82e6c5f594d842c328367ff5c2e5a407f6c7fb2a7575552e7e52a606d9cf84fd3361f59ff71539d2a25e443699d0e87816ed95cb09cd0449583cbbf1a0dc25372677c5573ac348efd977736de2f340d744cbcfd61a603678d5628110acfd8fcb8cbb485bc8df6df8d50334097aee4b3b0d98bc068e155ed4b69306c8cb42f3116b9352f578661ded2b32ceb56c1645a568435d35f5f6b0b1fc6bfad42aeaa0ed2f270af4f715f89cefde28f27dbc54adc03bf1bdb4bc55defc67c2", 0xc3d, 0x20040084, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xad000000, 0xfffffffb}, 0x100) 19:44:16 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) 19:44:16 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f0000000140), &(0x7f0000000180)=0x8) 19:44:16 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:16 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000001a00)={&(0x7f0000000300)=@file={0x1062e23df5249309, './file0\x00'}, 0xa, &(0x7f0000001900)=[{&(0x7f0000000340)="8c", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f00000019c0)=[@rights], 0x10}, 0x0) 19:44:16 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001900)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 19:44:16 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001900)=[{0x0}], 0x1, &(0x7f00000019c0)=[@rights], 0x10}, 0xa) 19:44:16 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) shutdown(r0, 0x2) recvfrom(r0, 0x0, 0x0, 0x87dd7cf5b15cbc99, 0x0, 0x0) 19:44:16 executing program 1: syz_open_dev$usbfs(&(0x7f0000000100), 0x200, 0x0) [ 196.551155][ T4602] Error: Driver 'raw-gadget' is already registered, aborting... [ 196.551169][ T4602] UDC core: USB Raw Gadget: driver registration failed: -16 [ 196.551187][ T4602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.761221][ T3761] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 197.121203][ T3761] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 197.121231][ T3761] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 197.121268][ T3761] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.291325][ T3761] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 197.291356][ T3761] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 197.291379][ T3761] usb 6-1: Product: syz [ 197.291394][ T3761] usb 6-1: Manufacturer: syz [ 197.291410][ T3761] usb 6-1: SerialNumber: syz [ 197.339255][ T3761] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 197.339276][ T3761] cdc_wdm 6-1:21.0: Unknown control protocol [ 197.658758][ T3683] usb 6-1: USB disconnect, device number 3 [ 197.662344][ T4600] cdc_wdm 6-1:21.0: Tx URB error: -19 [ 197.662421][ T4613] cdc_wdm 6-1:21.0: Tx URB error: -19 19:44:18 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:18 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000080)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000ffc, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000002240)="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", 0xc3b, 0x20040084, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xad000000, 0xfffffffb}, 0x100) 19:44:18 executing program 0: r0 = shmget(0x1, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f00000001c0)=""/228) 19:44:18 executing program 1: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 19:44:18 executing program 4: r0 = shmget(0x1, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_STAT(r0, 0x2, 0x0) 19:44:18 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:18 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000001a00)={&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000001900)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f00000019c0)}, 0x0) 19:44:18 executing program 1: r0 = shmget(0x1, 0x3000, 0x208, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) 19:44:18 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001900)=[{0x0}], 0x1, &(0x7f00000019c0)=[@rights], 0x10}, 0x0) 19:44:18 executing program 2: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000200)=""/219, 0xdb, 0x0, 0x0}}, 0x5d) [ 198.482632][ T4627] Error: Driver 'raw-gadget' is already registered, aborting... [ 198.482646][ T4627] UDC core: USB Raw Gadget: driver registration failed: -16 19:44:18 executing program 1: r0 = shmget(0x1, 0x3000, 0x208, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) 19:44:18 executing program 0: syz_clone(0x2004000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 198.482664][ T4627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.661389][ T3683] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 199.041198][ T3683] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 199.041228][ T3683] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 199.041263][ T3683] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 19:44:19 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:19 executing program 4: pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0xffffffffffffffff) 19:44:19 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1901, 0x0) 19:44:19 executing program 1: r0 = shmget(0x1, 0x3000, 0x208, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) 19:44:19 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x542e, 0x0) [ 199.251277][ T3683] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 199.251312][ T3683] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 199.251336][ T3683] usb 4-1: Product: syz [ 199.251350][ T3683] usb 4-1: Manufacturer: syz [ 199.251365][ T3683] usb 4-1: SerialNumber: syz [ 199.289440][ T4649] Error: Driver 'raw-gadget' is already registered, aborting... [ 199.289454][ T4649] UDC core: USB Raw Gadget: driver registration failed: -16 [ 199.289472][ T4649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.304916][ T3683] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 199.304947][ T3683] cdc_wdm 4-1:21.0: Unknown control protocol [ 199.634033][ T145] usb 4-1: USB disconnect, device number 2 19:44:20 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:20 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x3}]}]}, {0x0, [0x0, 0x0]}}, &(0x7f00000000c0)=""/221, 0x34, 0xdd, 0x1}, 0x20) 19:44:20 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) rename(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000380)='./file0\x00') 19:44:20 executing program 1: r0 = shmget(0x1, 0x3000, 0x208, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) 19:44:20 executing program 4: openat$procfs(0xffffffffffffff9c, 0xfffffffffffffffc, 0x4002, 0x0) 19:44:20 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) 19:44:20 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{}]}]}}, &(0x7f00000000c0)=""/221, 0x32, 0xdd, 0x1}, 0x20) 19:44:20 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$rfkill(r0, 0x0, 0x0) 19:44:20 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)=""/221, 0x1a, 0xdd, 0x1}, 0x20) 19:44:20 executing program 2: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) [ 200.435515][ T4663] Error: Driver 'raw-gadget' is already registered, aborting... [ 200.435529][ T4663] UDC core: USB Raw Gadget: driver registration failed: -16 19:44:20 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$rfkill(r0, 0x0, 0x0) 19:44:20 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f00000000c0)=""/221, 0x26, 0xdd, 0x1}, 0x20) [ 200.435546][ T4663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.691340][ T3761] usb 6-1: new high-speed USB device number 4 using dummy_hcd 19:44:21 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) 19:44:21 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/block/loop0', 0x0, 0x0) 19:44:21 executing program 4: futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000840), 0x0) 19:44:21 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$rfkill(r0, 0x0, 0x0) 19:44:21 executing program 2: syz_clone(0x13a01100, 0x0, 0x0, 0x0, 0x0, 0x0) [ 201.071379][ T3761] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 201.071407][ T3761] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 201.071443][ T3761] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.243604][ T4686] Error: Driver 'raw-gadget' is already registered, aborting... [ 201.243618][ T4686] UDC core: USB Raw Gadget: driver registration failed: -16 [ 201.243636][ T4686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.266566][ T3761] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 201.266597][ T3761] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 201.266620][ T3761] usb 6-1: Product: syz [ 201.266636][ T3761] usb 6-1: Manufacturer: syz [ 201.266652][ T3761] usb 6-1: SerialNumber: syz [ 201.305188][ T3761] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 201.305207][ T3761] cdc_wdm 6-1:21.0: Unknown control protocol 19:44:23 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:44:23 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$rfkill(r0, 0x0, 0x0) 19:44:23 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @loopback, @private2}}) 19:44:23 executing program 4: futex(&(0x7f0000000100)=0x2, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:23 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) 19:44:23 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) 19:44:23 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x3, 0x0) 19:44:23 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r0, 0x20, &(0x7f00000003c0)={&(0x7f0000000200)=""/219, 0xdb, 0x0, 0x0}}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/tty/drivers\x00', 0x0, 0x0) syz_clone(0x8000, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0) clock_gettime(0x1, &(0x7f0000002640)) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x30, 0x0, 0x2, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000001, 0x0, 0x200}}}, ["", "", "", "", ""]}, 0x30}}, 0x10) [ 203.421222][ T143] usb 6-1: USB disconnect, device number 4 19:44:23 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x5416, 0x0) 19:44:23 executing program 1: getrusage(0xffffffffffffffff, &(0x7f0000001180)) [ 203.539922][ T4699] Error: Driver 'raw-gadget' is already registered, aborting... [ 203.539936][ T4699] UDC core: USB Raw Gadget: driver registration failed: -16 19:44:23 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000200)={'sit0\x00', @ifru_settings={0x0, 0x0, @raw_hdlc=0x0}}) 19:44:23 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20) [ 203.539953][ T4699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:44:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 19:44:23 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter, 0x48) 19:44:23 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x540b, 0x0) 19:44:23 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x6, &(0x7f0000000480)=@framed={{}, [@generic, @map_val]}, &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 203.721192][ T3761] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 203.729223][ T4715] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 204.091231][ T3761] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 204.091258][ T3761] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 204.092091][ T3761] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.251340][ T3761] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 204.251360][ T3761] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 204.251373][ T3761] usb 4-1: Product: syz [ 204.251382][ T3761] usb 4-1: Manufacturer: syz [ 204.251390][ T3761] usb 4-1: SerialNumber: syz [ 204.297203][ T3761] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 204.297224][ T3761] cdc_wdm 4-1:21.0: Unknown control protocol 19:44:26 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) 19:44:26 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, 0x0, 0x0) 19:44:26 executing program 4: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 19:44:26 executing program 1: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0xf20001ef) 19:44:26 executing program 0: openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f000000da80)={&(0x7f000000d5c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f000000da40)={&(0x7f000000d800)={0x14}, 0x14}}, 0x0) 19:44:26 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) 19:44:26 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) [ 206.497133][ T145] usb 4-1: USB disconnect, device number 3 19:44:26 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) 19:44:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x7f}) 19:44:26 executing program 2: connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_clone(0xc0000000, &(0x7f0000000080), 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)) syz_open_procfs$userns(0x0, &(0x7f00000001c0)) [ 206.577381][ T4735] Error: Driver 'raw-gadget' is already registered, aborting... [ 206.577394][ T4735] UDC core: USB Raw Gadget: driver registration failed: -16 19:44:26 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x40049409, 0x0) 19:44:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x1) [ 206.577411][ T4735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.811251][ T3761] usb 6-1: new high-speed USB device number 5 using dummy_hcd 19:44:27 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:27 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 19:44:27 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, &(0x7f0000000100)) 19:44:27 executing program 1: getresuid(&(0x7f0000002100), &(0x7f0000002140), 0x0) 19:44:27 executing program 2: connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_clone(0xc0000000, &(0x7f0000000080), 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)) syz_open_procfs$userns(0x0, &(0x7f00000001c0)) [ 207.171544][ T3761] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 207.171572][ T3761] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 207.171607][ T3761] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.227177][ T4760] Error: Driver 'raw-gadget' is already registered, aborting... [ 207.227190][ T4760] UDC core: USB Raw Gadget: driver registration failed: -16 [ 207.227209][ T4760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.331706][ T3761] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 207.331739][ T3761] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 207.331761][ T3761] usb 6-1: Product: syz [ 207.331777][ T3761] usb 6-1: Manufacturer: syz [ 207.331793][ T3761] usb 6-1: SerialNumber: syz [ 207.377481][ T3761] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 207.377502][ T3761] cdc_wdm 6-1:21.0: Unknown control protocol 19:44:29 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 19:44:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000f1a73"], 0x14}}, 0x0) 19:44:29 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x7, &(0x7f0000000040)=@framed={{}, [@btf_id, @cb_func]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:44:29 executing program 2: connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_clone(0xc0000000, &(0x7f0000000080), 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)) syz_open_procfs$userns(0x0, &(0x7f00000001c0)) 19:44:29 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:29 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) [ 209.580800][ T3761] usb 6-1: USB disconnect, device number 5 19:44:29 executing program 4: ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001600)) r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000002600)) 19:44:29 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x5429, 0x0) 19:44:29 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0xc020660b, 0x0) [ 209.679016][ T4774] Error: Driver 'raw-gadget' is already registered, aborting... [ 209.679029][ T4774] UDC core: USB Raw Gadget: driver registration failed: -16 [ 209.679047][ T4774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:44:29 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) 19:44:29 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000940), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) 19:44:29 executing program 0: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xffffffffffffff2d) 19:44:29 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/vmstat\x00', 0x300, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) 19:44:29 executing program 1: futex(0x0, 0x6, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) futex(&(0x7f00000002c0)=0x1, 0x8, 0x0, 0x0, 0x0, 0x0) [ 209.881151][ T145] usb 4-1: new high-speed USB device number 4 using dummy_hcd 19:44:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x0, 0x6}, 0x48) 19:44:30 executing program 2: connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_clone(0xc0000000, &(0x7f0000000080), 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)) syz_open_procfs$userns(0x0, &(0x7f00000001c0)) [ 210.241266][ T145] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 210.241294][ T145] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 210.241331][ T145] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 19:44:30 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) [ 210.411181][ T145] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 210.411213][ T145] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 210.411236][ T145] usb 4-1: Product: syz [ 210.411253][ T145] usb 4-1: Manufacturer: syz [ 210.411269][ T145] usb 4-1: SerialNumber: syz [ 210.453152][ T145] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 210.453174][ T145] cdc_wdm 4-1:21.0: Unknown control protocol [ 210.457084][ T4800] Error: Driver 'raw-gadget' is already registered, aborting... [ 210.457095][ T4800] UDC core: USB Raw Gadget: driver registration failed: -16 [ 210.458357][ T4800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.716859][ T145] usb 4-1: USB disconnect, device number 4 [ 210.729443][ T4768] cdc_wdm 4-1:21.0: Tx URB error: -19 19:44:31 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:31 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x2, 0x0) write$cgroup_int(r0, 0x0, 0x0) 19:44:31 executing program 0: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000080)=0x1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x300, 0x0, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x80) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r0, 0x20, &(0x7f00000003c0)={&(0x7f0000000200)=""/219, 0xdb, 0x0, &(0x7f0000000300)=""/130, 0x82}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x490800, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/tty/drivers\x00', 0x0, 0x0) syz_clone(0x8000, &(0x7f00000004c0), 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000600)) tgkill(0x0, 0x0, 0x31) sched_rr_get_interval(0x0, &(0x7f0000002600)) 19:44:31 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x341a02, 0x0) 19:44:31 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10000000) 19:44:31 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:31 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) r0 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)) getpgid(r0) 19:44:31 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, &(0x7f00000001c0), 0x10) 19:44:31 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCEXCL(r0, 0x540c) 19:44:31 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000010c0)) [ 211.484912][ T4813] Error: Driver 'raw-gadget' is already registered, aborting... [ 211.484925][ T4813] UDC core: USB Raw Gadget: driver registration failed: -16 [ 211.484942][ T4813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:44:31 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, 0x0) 19:44:31 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10040, 0x0) [ 211.741252][ T3680] usb 6-1: new high-speed USB device number 6 using dummy_hcd 19:44:32 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:32 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/vmstat\x00', 0x2, 0x0) r1 = epoll_create(0xc72) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 19:44:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) 19:44:32 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x5452, 0x0) 19:44:32 executing program 1: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x80000000) [ 212.151227][ T3680] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 212.151254][ T3680] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 212.151291][ T3680] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.257157][ T4837] Error: Driver 'raw-gadget' is already registered, aborting... [ 212.257171][ T4837] UDC core: USB Raw Gadget: driver registration failed: -16 [ 212.257189][ T4837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.333214][ T3680] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 212.333254][ T3680] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 212.333278][ T3680] usb 6-1: Product: syz [ 212.333294][ T3680] usb 6-1: Manufacturer: syz [ 212.333310][ T3680] usb 6-1: SerialNumber: syz [ 212.373344][ T3680] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 212.373364][ T3680] cdc_wdm 6-1:21.0: Unknown control protocol [ 212.628428][ T3680] usb 6-1: USB disconnect, device number 6 [ 212.631052][ C1] cdc_wdm 6-1:21.0: nonzero urb status received: -71 [ 212.631072][ C1] cdc_wdm 6-1:21.0: wdm_int_callback - 0 bytes [ 212.631090][ C1] cdc_wdm 6-1:21.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 212.632777][ T4808] cdc_wdm 6-1:21.0: Tx URB error: -19 19:44:33 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:33 executing program 2: syz_open_dev$MSR(&(0x7f0000000140), 0x2, 0x0) 19:44:33 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x516}, 0x48) 19:44:33 executing program 4: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0xfffff801}, 0x8) 19:44:33 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0xc0285443, 0x0) 19:44:33 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:33 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/cpuinfo\x00', 0x0, 0x0) 19:44:33 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x80045440, 0x0) 19:44:33 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f00000001c0)=@framed={{}, [@call]}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0xb5, &(0x7f0000000240)=""/181, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:44:33 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/vmstat\x00', 0x0, 0x0) inotify_rm_watch(r0, 0x0) [ 213.403937][ T4852] Error: Driver 'raw-gadget' is already registered, aborting... [ 213.403951][ T4852] UDC core: USB Raw Gadget: driver registration failed: -16 [ 213.403970][ T4852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:44:33 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) read$msr(r0, 0x0, 0x0) 19:44:33 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/vmstat\x00', 0x6000, 0x0) [ 213.661185][ T145] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 214.021369][ T145] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 214.021386][ T145] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 214.021409][ T145] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 19:44:34 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x80045440, 0x0) 19:44:34 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f00000001c0)=@framed={{}, [@call]}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0xb5, &(0x7f0000000240)=""/181, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:44:34 executing program 0: epoll_create(0x8000) 19:44:34 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:34 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=@framed, &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 214.181337][ T145] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 214.181370][ T145] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 214.181393][ T145] usb 4-1: Product: syz [ 214.181410][ T145] usb 4-1: Manufacturer: syz [ 214.181426][ T145] usb 4-1: SerialNumber: syz [ 214.182669][ T4874] Error: Driver 'raw-gadget' is already registered, aborting... [ 214.182681][ T4874] UDC core: USB Raw Gadget: driver registration failed: -16 [ 214.182698][ T4874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.224674][ T145] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 214.224695][ T145] cdc_wdm 4-1:21.0: Unknown control protocol [ 214.480903][ T3680] usb 4-1: USB disconnect, device number 5 [ 214.481045][ C1] cdc_wdm 4-1:21.0: nonzero urb status received: -71 [ 214.481064][ C1] cdc_wdm 4-1:21.0: wdm_int_callback - 0 bytes [ 214.481080][ C1] cdc_wdm 4-1:21.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 214.482619][ T4850] cdc_wdm 4-1:21.0: Tx URB error: -19 19:44:35 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:35 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/vmstat\x00', 0x4000, 0x0) 19:44:35 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x300, 0x0) 19:44:35 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x80045440, 0x0) 19:44:35 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f00000001c0)=@framed={{}, [@call]}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0xb5, &(0x7f0000000240)=""/181, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:44:35 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:35 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x80045440, 0x0) 19:44:35 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f00000001c0)=@framed={{}, [@call]}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0xb5, &(0x7f0000000240)=""/181, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:44:35 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) [ 215.236372][ T4886] Error: Driver 'raw-gadget' is already registered, aborting... [ 215.236387][ T4886] UDC core: USB Raw Gadget: driver registration failed: -16 19:44:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) [ 215.236404][ T4886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:44:35 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:44:35 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x230201, 0x0) [ 215.481282][ T3680] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 215.841195][ T3680] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 215.841221][ T3680] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 215.841256][ T3680] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 19:44:36 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:36 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x5460, 0x0) 19:44:36 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x40087602, 0x0) 19:44:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 19:44:36 executing program 4: r0 = epoll_create(0x1) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) [ 216.000215][ T4909] Error: Driver 'raw-gadget' is already registered, aborting... [ 216.000230][ T4909] UDC core: USB Raw Gadget: driver registration failed: -16 [ 216.000248][ T4909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.001715][ T3680] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 216.001743][ T3680] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 216.001765][ T3680] usb 6-1: Product: syz [ 216.001781][ T3680] usb 6-1: Manufacturer: syz [ 216.001795][ T3680] usb 6-1: SerialNumber: syz [ 216.053001][ T3680] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 216.053019][ T3680] cdc_wdm 6-1:21.0: Unknown control protocol [ 216.305272][ T145] usb 6-1: USB disconnect, device number 7 [ 216.321164][ T4883] cdc_wdm 6-1:21.0: Tx URB error: -19 19:44:37 executing program 0: pipe(&(0x7f000000d000)) 19:44:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f00000000c0)={0xfffffffffffffffc, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 19:44:37 executing program 2: r0 = epoll_create(0x2) r1 = inotify_init1(0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) 19:44:37 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000002680), 0x141000, 0x0) 19:44:37 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:37 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:37 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 19:44:37 executing program 0: r0 = getpgid(0x0) get_robust_list(r0, 0x0, &(0x7f00000003c0)) 19:44:37 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/cpuinfo\x00', 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 19:44:37 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x4000, 0x0) [ 217.066875][ T4922] Error: Driver 'raw-gadget' is already registered, aborting... 19:44:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x2c, 0x3, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x8, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}]}]}, 0x2c}}, 0x0) 19:44:37 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x3f, 0xc3, &(0x7f0000000240)=""/195, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 217.066889][ T4922] UDC core: USB Raw Gadget: driver registration failed: -16 [ 217.066907][ T4922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:44:37 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/cpuinfo\x00', 0x0, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, 0x0) 19:44:37 executing program 2: sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, 0x0, 0xccfa0dca80c4884f) 19:44:37 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x5, &(0x7f0000000480)=@framed={{}, [@map_val]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:44:37 executing program 0: futex(0x0, 0xa, 0x0, &(0x7f0000000800)={0x77359400}, 0x0, 0x0) [ 217.237209][ T4934] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 217.237230][ T4934] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 217.237243][ T4934] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 217.331199][ T3680] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 217.711496][ T3680] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 217.711523][ T3680] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 217.711560][ T3680] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.872247][ T3680] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 217.872287][ T3680] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 217.872311][ T3680] usb 4-1: Product: syz [ 217.872327][ T3680] usb 4-1: Manufacturer: syz [ 217.872342][ T3680] usb 4-1: SerialNumber: syz [ 217.916120][ T3680] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 217.916141][ T3680] cdc_wdm 4-1:21.0: Unknown control protocol [ 218.116691][ T3761] usb 4-1: USB disconnect, device number 6 19:44:38 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:38 executing program 1: sched_rr_get_interval(0x0, &(0x7f0000002600)) 19:44:38 executing program 0: setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) 19:44:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000040)=@delpolicy={0xb4, 0x14, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, 0x0, 0xde7d4a74027c0e7b}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}}}, @algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0xb4}}, 0x0) 19:44:38 executing program 4: unshare(0x800) 19:44:38 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:38 executing program 4: mknodat$loop(0xffffffffffffff9c, &(0x7f0000004cc0)='./file0\x00', 0x0, 0x0) 19:44:38 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@union={0x9}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00000000c0)=""/221, 0x2e, 0xdd, 0x1}, 0x20) 19:44:38 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/vmstat\x00', 0x0, 0x0) r1 = epoll_create(0x471ff30b) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x10000001}) 19:44:38 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 218.912417][ T4954] Error: Driver 'raw-gadget' is already registered, aborting... [ 218.912431][ T4954] UDC core: USB Raw Gadget: driver registration failed: -16 19:44:39 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f00000001c0)) 19:44:39 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0) [ 218.912449][ T4954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.124186][ T3683] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 219.481272][ T3683] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 219.481289][ T3683] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 219.481313][ T3683] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 19:44:39 executing program 3: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 19:44:39 executing program 4: r0 = request_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='@\x00', 0xffffffffffffffff) request_key(&(0x7f0000000300)='pkcs7_test\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='blacklist\x00', r0) 19:44:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x14}, 0x14}}, 0x0) 19:44:39 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x4000, 0x0) 19:44:39 executing program 2: r0 = eventfd(0x0) write$eventfd(r0, &(0x7f0000001100), 0x8) [ 219.641213][ T3683] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 219.641245][ T3683] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 219.641266][ T3683] usb 6-1: Product: syz [ 219.641282][ T3683] usb 6-1: Manufacturer: syz [ 219.641297][ T3683] usb 6-1: SerialNumber: syz [ 219.683650][ T3683] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 219.683671][ T3683] cdc_wdm 6-1:21.0: Unknown control protocol [ 219.885987][ T3683] usb 6-1: USB disconnect, device number 8 19:44:40 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:40 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)) 19:44:40 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) 19:44:40 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/vmstat\x00', 0x0, 0x0) 19:44:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) 19:44:40 executing program 3: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 19:44:40 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/vmstat\x00', 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x80) 19:44:40 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x541b, 0x0) 19:44:40 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 19:44:40 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) read$msr(r0, 0x0, 0x0) 19:44:40 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 19:44:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x260001, 0x0) ioctl$KDGKBENT(r0, 0x4b46, 0x0) [ 220.921208][ T3761] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 221.291317][ T3761] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 221.291335][ T3761] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 221.291360][ T3761] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.461273][ T3761] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 221.461306][ T3761] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 221.461328][ T3761] usb 6-1: Product: syz [ 221.461343][ T3761] usb 6-1: Manufacturer: syz [ 221.461357][ T3761] usb 6-1: SerialNumber: syz [ 221.506061][ T3761] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 221.506079][ T3761] cdc_wdm 6-1:21.0: Unknown control protocol [ 221.709664][ T3761] usb 6-1: USB disconnect, device number 9 19:44:42 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0x20000000}) 19:44:42 executing program 2: syz_clone(0x4001000, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 19:44:42 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/vmstat\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 19:44:42 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'l'}]}}, &(0x7f0000000440)=""/211, 0x2a, 0xd3, 0x1}, 0x20) 19:44:42 executing program 3: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 19:44:42 executing program 5: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 19:44:42 executing program 4: pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0xffffffffffffffff) 19:44:42 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x540e, 0x0) 19:44:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 19:44:42 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/vmstat\x00', 0x0, 0x0) read$msr(r0, 0x0, 0x0) 19:44:42 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x300, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, &(0x7f0000000080), 0x8) 19:44:42 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, &(0x7f0000000440)=""/211, 0x0, 0xd3, 0x1}, 0x20) 19:44:42 executing program 0: r0 = epoll_create(0x1490) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 19:44:42 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x5, &(0x7f0000000000)=[{0x7}, {0x4}, {0x6}, {}, {0x6}]}) 19:44:42 executing program 4: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000000c0)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000140)) 19:44:42 executing program 1: futex(&(0x7f0000000040), 0x80, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) [ 222.715013][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 222.715040][ T28] audit: type=1326 audit(1654199082.782:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5031 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa206089109 code=0x0 19:44:43 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:43 executing program 5: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 19:44:43 executing program 0: syz_clone(0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) 19:44:43 executing program 4: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/tty/drivers\x00', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000600)) tgkill(0x0, 0x0, 0x0) 19:44:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xc07c, 0x0, 0x0, 0x0, 0x0, "69b27939a626caad7500f3719c690bcf4c0048"}) 19:44:43 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x5459, 0x0) 19:44:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xc07c, 0x0, 0x0, 0x0, 0x0, "69b27939a626caad7500f3719c690bcf4c0048"}) 19:44:43 executing program 2: syz_clone(0x912000, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xc07c, 0x0, 0x0, 0x0, 0x0, "69b27939a626caad7500f3719c690bcf4c0048"}) 19:44:43 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000002600)) 19:44:43 executing program 2: clock_gettime(0x0, &(0x7f0000002640)) 19:44:43 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=@framed, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580), 0x10}, 0x80) 19:44:44 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:44 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xc07c, 0x0, 0x0, 0x0, 0x0, "69b27939a626caad7500f3719c690bcf4c0048"}) 19:44:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan3\x00'}) 19:44:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@setneightbl={0x34, 0x43, 0x6962735e8885e219, 0x0, 0x0, {}, [@NDTA_NAME={0x10, 0x1, 'cgroup.type\x00'}, @NDTA_THRESH2={0x8}, @NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x34}}, 0x0) 19:44:44 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) clock_gettime(0x1, &(0x7f0000002640)) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x141000, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f00000026c0)={0x802b}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) 19:44:44 executing program 5: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 19:44:44 executing program 0: futex(&(0x7f0000000040), 0x80, 0x1, 0x0, 0x0, 0x0) 19:44:44 executing program 1: getresuid(&(0x7f0000002100), 0x0, 0x0) 19:44:44 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/vmstat\x00', 0x3, 0x0) read$rfkill(r0, 0x0, 0x0) 19:44:44 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], &(0x7f0000000440)=""/190, 0x2a, 0xbe, 0x1}, 0x20) 19:44:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb}, 0x48) 19:44:44 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x4020940d, 0x0) 19:44:44 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:44 executing program 0: futex(0x0, 0x0, 0x0, &(0x7f0000000800)={0x77359400}, 0x0, 0x0) 19:44:44 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f00000001c0)=@framed={{}, [@call, @ldst={0x0, 0x0, 0x6}]}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0xb5, &(0x7f0000000240)=""/181, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:44:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x0, 0x0, 0x0, 0x10c}, 0x48) 19:44:44 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) 19:44:44 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:44 executing program 1: io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) 19:44:44 executing program 2: r0 = epoll_create(0x8000) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) 19:44:44 executing program 4: syz_clone(0x13a01100, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 19:44:44 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4002, 0x0) 19:44:45 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/vmstat\x00', 0x3e0, 0x0) 19:44:45 executing program 2: syz_clone(0x108000, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:45 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:45 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0xffffffffffffffff) 19:44:45 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/vmstat\x00', 0x0, 0x0) read$msr(r0, &(0x7f0000000000)=""/165, 0xa5) 19:44:45 executing program 4: syz_clone(0x13a01100, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 19:44:45 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x40086602, 0x0) 19:44:45 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:45 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=@framed, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540), 0x8, 0x10, 0x0}, 0x80) 19:44:45 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/vmstat\x00', 0x3, 0x0) 19:44:45 executing program 0: syz_mount_image$f2fs(&(0x7f000000b6c0), 0x0, 0x0, 0x0, &(0x7f000000ce00), 0x0, 0x0) pipe(&(0x7f000000d000)) 19:44:45 executing program 4: syz_clone(0x13a01100, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 19:44:45 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) bind$vsock_stream(r0, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 19:44:45 executing program 0: getgroups(0x1, &(0x7f0000000340)=[0x0]) [ 225.914913][ T6] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 226.111282][ T6] usb 4-1: device descriptor read/64, error 18 [ 226.381435][ T6] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 226.571208][ T6] usb 4-1: device descriptor read/64, error 18 [ 226.702304][ T6] usb usb4-port1: attempt power cycle [ 227.143200][ T6] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 227.331152][ T6] usb 4-1: device descriptor read/8, error -61 [ 227.621139][ T6] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 227.831464][ T6] usb 4-1: device descriptor read/8, error -61 [ 227.952674][ T6] usb usb4-port1: unable to enumerate USB device 19:44:48 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:48 executing program 1: inotify_add_watch(0xffffffffffffffff, 0x0, 0x220) 19:44:48 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0xa, 0x0, &(0x7f0000000040)) 19:44:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@getspdinfo={0x14, 0x25, 0x0, 0x0, 0x25dfdbfd}, 0x14}}, 0x0) 19:44:48 executing program 4: syz_clone(0x13a01100, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 19:44:48 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:48 executing program 0: syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="bf") 19:44:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 19:44:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x0, 0x0, 0x7, 0x10c}, 0x48) 19:44:48 executing program 1: mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x0) syz_mount_image$f2fs(&(0x7f000000b6c0), &(0x7f000000b700)='./file0\x00', 0x0, 0x8, &(0x7f000000ce00)=[{&(0x7f000000b740)="0406e32ea2ae514ab6b306c1524c38a046def9f9dba9fe59cdb1d2dfa76bf251c07cbe70f0a246e7450b26ec80b93db25e3ed4bee36b5495a77620bd41f11ed5b2cd23edaaee6f935ee9", 0x4a, 0x1}, {0x0}, {0x0, 0x0, 0x4}, {&(0x7f000000bac0)}, {&(0x7f000000bb80), 0x0, 0x100000000}, {&(0x7f000000cb80), 0x0, 0x401}, {0x0}, {0x0, 0x0, 0x8000000000000001}], 0x8401, &(0x7f000000cf00)={[{@nouser_xattr}], [{@subj_role={'subj_role', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@seclabel}, {@dont_appraise}, {@fowner_gt}]}) bind$packet(0xffffffffffffffff, &(0x7f000000cfc0)={0x11, 0x4, 0x0, 0x1, 0x2, 0x6, @random="2d7f0d438687"}, 0x14) pipe(&(0x7f000000d000)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f000000d0c0)) 19:44:48 executing program 2: mknodat$loop(0xffffffffffffff9c, &(0x7f0000004cc0)='./file0\x00', 0x6000, 0x0) 19:44:48 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/vmstat\x00', 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) [ 228.828237][ T5166] loop1: detected capacity change from 0 to 264192 [ 228.870615][ T5166] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 228.870641][ T5166] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 228.870664][ T5166] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 228.870682][ T5166] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 229.101274][ T3761] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 229.291083][ T3761] usb 4-1: device descriptor read/64, error 18 [ 229.571121][ T3761] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 229.781100][ T3761] usb 4-1: device descriptor read/64, error 18 [ 229.912765][ T3761] usb usb4-port1: attempt power cycle [ 230.321138][ T3761] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 230.491238][ T3761] usb 4-1: device descriptor read/8, error -61 [ 230.761093][ T3761] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 230.941204][ T3761] usb 4-1: device descriptor read/8, error -61 [ 231.075190][ T3761] usb usb4-port1: unable to enumerate USB device 19:44:51 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:51 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0xc0189436, 0x0) 19:44:51 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=@framed, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:44:51 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=@framed, &(0x7f00000004c0)='GPL\x00', 0x0, 0xd, &(0x7f0000000500)=""/13, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:44:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:44:51 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:51 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/vmstat\x00', 0x300, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x28040, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 19:44:51 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x3, 0xb5, &(0x7f0000000240)=""/181, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:44:51 executing program 1: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) 19:44:51 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x5428, 0x0) [ 231.766468][ T5183] Error: Driver 'raw-gadget' is already registered, aborting... [ 231.766482][ T5183] UDC core: USB Raw Gadget: driver registration failed: -16 [ 231.766499][ T5183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:44:51 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x5450, 0x0) 19:44:51 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x39, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x270, 0xd0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x1a0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_to_bridge\x00', 'syz_tun\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private1, @mcast2, [], [], 'netpci0\x00', 'veth0_to_team\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) [ 231.991223][ T3680] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 232.191121][ T3680] usb 6-1: device descriptor read/64, error 18 19:44:52 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:52 executing program 2: syz_genetlink_get_family_id$ethtool(&(0x7f000000d080), 0xffffffffffffffff) 19:44:52 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x5417, 0x0) 19:44:52 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) 19:44:52 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f00000020c0), 0x80000, 0x0) [ 232.461121][ T3680] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 232.587387][ T5207] Error: Driver 'raw-gadget' is already registered, aborting... [ 232.587400][ T5207] UDC core: USB Raw Gadget: driver registration failed: -16 [ 232.587419][ T5207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.651261][ T3680] usb 6-1: device descriptor read/64, error 18 [ 232.771899][ T3680] usb usb6-port1: attempt power cycle [ 233.181131][ T3680] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 233.351357][ T3680] usb 6-1: device descriptor read/8, error -61 [ 233.621220][ T3680] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 233.791383][ T3680] usb 6-1: device descriptor read/8, error -61 [ 233.913961][ T3680] usb usb6-port1: unable to enumerate USB device 19:44:54 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:54 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:44:54 executing program 0: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x1, &(0x7f0000002640)) 19:44:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) 19:44:54 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x5424, 0x0) 19:44:54 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:54 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4901, 0x0) 19:44:54 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x3f) 19:44:54 executing program 0: r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000080)=""/112, 0x70) 19:44:54 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x5425, 0x0) [ 234.752348][ T5219] Error: Driver 'raw-gadget' is already registered, aborting... 19:44:54 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 19:44:54 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f00000000c0), 0x8) [ 234.752363][ T5219] UDC core: USB Raw Gadget: driver registration failed: -16 [ 234.752383][ T5219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.981537][ T3680] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 235.171235][ T3680] usb 4-1: device descriptor read/64, error 18 19:44:55 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:55 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x3}]}]}, {0x0, [0x0, 0x0, 0x61, 0x30, 0xe]}}, &(0x7f00000000c0)=""/221, 0x37, 0xdd, 0x1}, 0x20) 19:44:55 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x8, &(0x7f0000000a80)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0x3}]}, 0x1, [{0x0, 0x0}]}) 19:44:55 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x0, 0x0, 0x7}, 0x48) 19:44:55 executing program 1: futex(&(0x7f0000000100), 0x6, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) [ 235.441121][ T3680] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 235.513508][ T5237] Error: Driver 'raw-gadget' is already registered, aborting... [ 235.513523][ T5237] UDC core: USB Raw Gadget: driver registration failed: -16 [ 235.513542][ T5237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.542711][ T5241] Error: Driver 'raw-gadget' is already registered, aborting... [ 235.542808][ T5241] UDC core: USB Raw Gadget: driver registration failed: -16 [ 235.542827][ T5241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.641184][ T3680] usb 4-1: device descriptor read/64, error 18 [ 235.761352][ T3680] usb usb4-port1: attempt power cycle [ 236.171157][ T3680] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 236.343028][ T3680] usb 4-1: device descriptor read/8, error -61 [ 236.621091][ T3680] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 236.811225][ T3680] usb 4-1: device descriptor read/8, error -61 [ 236.931261][ T3680] usb usb4-port1: unable to enumerate USB device 19:44:57 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:57 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x545c, 0x0) 19:44:57 executing program 1: capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x1e4}) 19:44:57 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x3}]}]}}, &(0x7f00000000c0)=""/221, 0x32, 0xdd, 0x1}, 0x20) 19:44:57 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805513, &(0x7f00000000c0)}) 19:44:57 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:44:57 executing program 4: clock_gettime(0x3, &(0x7f0000000140)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, r0+10000000}, 0x8) 19:44:57 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) [ 237.737864][ T5247] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) 19:44:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x14}}, 0x0) 19:44:57 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/vmstat\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000006, 0x4300010, r0, 0x10000000) 19:44:57 executing program 4: mknodat(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', 0x0, 0x0) 19:44:57 executing program 1: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x3011, 0xffffffffffffffff, 0x0) [ 237.805535][ T5253] Error: Driver 'raw-gadget' is already registered, aborting... [ 237.805550][ T5253] UDC core: USB Raw Gadget: driver registration failed: -16 [ 237.805568][ T5253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.031355][ T6] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 238.221216][ T6] usb 6-1: device descriptor read/64, error 18 19:44:58 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) [ 238.491089][ T6] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 238.530269][ T5267] Error: Driver 'raw-gadget' is already registered, aborting... 19:44:58 executing program 2: pipe2(0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) socket$inet6(0x18, 0x0, 0x0) 19:44:58 executing program 4: pipe2(0x0, 0x0) socket$inet6(0x18, 0x0, 0x0) 19:44:58 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000940), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) 19:44:58 executing program 1: socket(0x0, 0x8080d, 0x0) [ 238.530283][ T5267] UDC core: USB Raw Gadget: driver registration failed: -16 [ 238.530301][ T5267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.619199][ T5270] Error: Driver 'raw-gadget' is already registered, aborting... [ 238.619213][ T5270] UDC core: USB Raw Gadget: driver registration failed: -16 [ 238.619232][ T5270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.691259][ T6] usb 6-1: device descriptor read/64, error 18 [ 238.811248][ T6] usb usb6-port1: attempt power cycle [ 239.221109][ T6] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 239.391603][ T6] usb 6-1: device descriptor read/8, error -61 [ 239.671406][ T6] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 239.851308][ T6] usb 6-1: device descriptor read/8, error -61 [ 239.972023][ T6] usb usb6-port1: unable to enumerate USB device 19:45:00 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:00 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) write$nbd(r0, 0x0, 0x0) 19:45:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 19:45:00 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) 19:45:00 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 19:45:00 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:00 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x240082, 0x0) 19:45:00 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) bind$bt_sco(r0, 0x0, 0x0) 19:45:00 executing program 4: futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) 19:45:00 executing program 2: add_key$fscrypt_provisioning(&(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[], 0x29, 0xfffffffffffffffd) 19:45:00 executing program 1: r0 = gettid() ptrace$getsig(0x10, r0, 0x0, 0x0) 19:45:00 executing program 0: r0 = getpgrp(0x0) sched_setparam(r0, &(0x7f0000000180)) [ 240.851750][ T5287] Error: Driver 'raw-gadget' is already registered, aborting... [ 240.851765][ T5287] UDC core: USB Raw Gadget: driver registration failed: -16 [ 240.851782][ T5287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.071235][ T3680] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 241.441355][ T3680] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 241.441382][ T3680] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 241.441416][ T3680] usb 4-1: config 21 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 19:45:01 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:01 executing program 4: openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 19:45:01 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 19:45:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x20044040) 19:45:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000340)={@private2, @private0, @dev, 0x0, 0x1000}) [ 241.606208][ T3680] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 241.606242][ T3680] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 241.606266][ T3680] usb 4-1: Product: syz [ 241.606282][ T3680] usb 4-1: Manufacturer: syz [ 241.606299][ T3680] usb 4-1: SerialNumber: syz [ 241.630422][ T5309] Error: Driver 'raw-gadget' is already registered, aborting... [ 241.630437][ T5309] UDC core: USB Raw Gadget: driver registration failed: -16 [ 241.630455][ T5309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.652121][ T3680] cdc_wdm: probe of 4-1:21.0 failed with error -22 [ 241.857507][ T145] usb 4-1: USB disconnect, device number 19 19:45:02 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:02 executing program 2: shmctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0xee01, 0xee00}}) 19:45:02 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:02 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:45:02 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}) 19:45:02 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000140)=""/72, 0x48}}, 0x120) 19:45:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x0, {0x0, 0x0, 0x1, 0x0, 0x10000}}) [ 242.619387][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.619417][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 19:45:02 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd}, 0x48) 19:45:02 executing program 2: r0 = socket$inet(0x2, 0x3, 0x5) accept$inet(r0, 0x0, 0x0) 19:45:02 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='uid=']) [ 242.619438][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.619459][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 19:45:02 executing program 0: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x8}, 0x0, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 19:45:02 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) [ 242.619480][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.619502][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.619523][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.619544][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.619565][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.619587][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.619608][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.619629][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.619650][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.619672][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.619693][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.619714][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.619735][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.619756][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.619777][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.619799][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.619820][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.619841][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.619862][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.619884][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.619905][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.619932][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.619953][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.619971][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.619990][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620010][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620030][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620050][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620071][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620090][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620117][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620137][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620156][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620176][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620196][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620217][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620238][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620259][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620280][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620300][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620322][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620343][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620364][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620385][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620405][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620426][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620446][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620466][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620486][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620506][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620525][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620545][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620564][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620584][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620605][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620627][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620648][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620669][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620690][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620711][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620731][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620750][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 19:45:03 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) [ 242.620770][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620791][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620812][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620834][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620855][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.620876][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 242.644414][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 242.669138][ T5321] Error: Driver 'raw-gadget' is already registered, aborting... [ 242.669153][ T5321] UDC core: USB Raw Gadget: driver registration failed: -16 [ 242.669171][ T5321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.791081][ T5329] hfsplus: unable to parse mount options [ 242.901567][ T3680] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 243.261306][ T3680] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 243.261334][ T3680] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 243.261369][ T3680] usb 6-1: config 21 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 243.420359][ T5335] Error: Driver 'raw-gadget' is already registered, aborting... [ 243.420373][ T5335] UDC core: USB Raw Gadget: driver registration failed: -16 [ 243.420398][ T5335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.440339][ T3680] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 243.440358][ T3680] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 243.440372][ T3680] usb 6-1: Product: syz [ 243.440381][ T3680] usb 6-1: Manufacturer: syz [ 243.440398][ T3680] usb 6-1: SerialNumber: syz [ 243.482173][ T3680] cdc_wdm: probe of 6-1:21.0 failed with error -22 [ 243.692607][ T23] usb 6-1: USB disconnect, device number 18 19:45:04 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:04 executing program 1: syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="7d263a283a2c8c212c2e297b282c26232b265e2d2c2c2c2a2c736d61636b66736861743d2c726f6f74636f6e746578743d"]) 19:45:04 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x405c5503, 0x0) 19:45:04 executing program 0: pselect6(0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x8fb]}, 0x8}) 19:45:04 executing program 4: sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0, 0xffffff7f00000000}}, 0x0) io_setup(0xffff, &(0x7f0000000140)) 19:45:04 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:04 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x0, {0x0, 0x8}}) 19:45:04 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) connect$bt_sco(r0, 0x0, 0x0) [ 244.445580][ T5344] nfs4: Unknown parameter '}&:(:' 19:45:04 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x8fb]}, 0x8}) [ 244.503843][ T5348] Error: Driver 'raw-gadget' is already registered, aborting... [ 244.503858][ T5348] UDC core: USB Raw Gadget: driver registration failed: -16 19:45:04 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xc000, 0x103) [ 244.503876][ T5348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:45:04 executing program 1: shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000002c0)=""/4096) 19:45:04 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x801c581f, 0x0) [ 244.691231][ T3680] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 245.051161][ T3680] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 245.051180][ T3680] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 245.051954][ T3680] usb 4-1: config 21 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 19:45:05 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:05 executing program 1: syz_mount_image$hfsplus(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) 19:45:05 executing program 4: syz_open_dev$mouse(&(0x7f0000000040), 0xffffffffffffffff, 0x0) 19:45:05 executing program 0: syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB=',fscontext=']) 19:45:05 executing program 1: futex(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0) [ 245.216931][ T3680] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 245.216963][ T3680] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 245.216985][ T3680] usb 4-1: Product: syz [ 245.217002][ T3680] usb 4-1: Manufacturer: syz [ 245.217017][ T3680] usb 4-1: SerialNumber: syz [ 245.272966][ T3680] cdc_wdm: probe of 4-1:21.0 failed with error -22 [ 245.308772][ T5365] Error: Driver 'raw-gadget' is already registered, aborting... [ 245.308786][ T5365] UDC core: USB Raw Gadget: driver registration failed: -16 [ 245.308804][ T5365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.354670][ T5369] nfs4: Unknown parameter 'fscontext' [ 245.476679][ T3761] usb 4-1: USB disconnect, device number 20 19:45:06 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:06 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x4004556b, 0x0) 19:45:06 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000200)={0x3}, 0x2) ppoll(&(0x7f0000001540)=[{r0}], 0x1, &(0x7f00000015c0)={0x0, 0x3938700}, 0x0, 0x0) 19:45:06 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000080)=[@decrefs], 0x0, 0x0, 0x0}) 19:45:06 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:06 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0xff87) 19:45:06 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) 19:45:06 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0}}, 0x120) 19:45:06 executing program 1: syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x307600) [ 246.241886][ T5381] Error: Driver 'raw-gadget' is already registered, aborting... [ 246.241900][ T5381] UDC core: USB Raw Gadget: driver registration failed: -16 19:45:06 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000200)={0x3}, 0x2) ppoll(&(0x7f0000001540)=[{r0}], 0x1, &(0x7f00000015c0)={0x0, 0x3938700}, 0x0, 0x0) [ 246.241919][ T5381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:45:06 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0xc376, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, 0x0, 0x0) 19:45:06 executing program 1: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x240082, 0x0) [ 246.521245][ T145] usb 6-1: new high-speed USB device number 19 using dummy_hcd 19:45:07 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a00"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:07 executing program 2: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x8}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x8fb]}, 0x8}) 19:45:07 executing program 4: r0 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) 19:45:07 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) [ 246.881172][ T145] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 246.881191][ T145] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 246.881215][ T145] usb 6-1: config 21 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 247.028971][ T5401] Error: Driver 'raw-gadget' is already registered, aborting... [ 247.028985][ T5401] UDC core: USB Raw Gadget: driver registration failed: -16 [ 247.029004][ T5401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.041347][ T145] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 247.041378][ T145] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 247.041400][ T145] usb 6-1: Product: syz [ 247.041415][ T145] usb 6-1: Manufacturer: syz [ 247.041431][ T145] usb 6-1: SerialNumber: syz [ 247.086468][ T145] cdc_wdm: probe of 6-1:21.0 failed with error -22 [ 247.289987][ T3680] usb 6-1: USB disconnect, device number 19 19:45:08 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:08 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000200)={0x3}, 0x2) ppoll(&(0x7f0000001540)=[{r0}], 0x1, &(0x7f00000015c0)={0x0, 0x3938700}, 0x0, 0x0) 19:45:08 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) 19:45:08 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)='\"', 0x1, 0xfffffffffffff801}], 0x5, &(0x7f0000000340)={[{@force}], [{@fowner_eq}, {@seclabel}]}) 19:45:08 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f00000001c0)=@abs, 0x6e) 19:45:08 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a00"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:08 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000480)={[{@type={'type', 0x3d, "7cb3c62b"}}]}) 19:45:08 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/vmstat\x00', 0x300, 0x0) 19:45:08 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000200)={0x3}, 0x2) ppoll(&(0x7f0000001540)=[{r0}], 0x1, &(0x7f00000015c0)={0x0, 0x3938700}, 0x0, 0x0) [ 248.052702][ T5412] loop4: detected capacity change from 0 to 16376 [ 248.058664][ T5412] hfsplus: unable to parse mount options 19:45:08 executing program 4: getresgid(&(0x7f0000000000), 0x0, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) [ 248.069320][ T5413] Error: Driver 'raw-gadget' is already registered, aborting... 19:45:08 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x5451, 0x0) 19:45:08 executing program 2: sched_setparam(0x0, &(0x7f0000000000)=0x1) [ 248.069334][ T5413] UDC core: USB Raw Gadget: driver registration failed: -16 [ 248.069353][ T5413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.108271][ T5415] hfsplus: unable to find HFS+ superblock [ 248.271314][ T3680] Bluetooth: hci1: command 0x0411 tx timeout [ 248.301114][ T3683] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 248.661315][ T3683] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 248.661332][ T3683] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 248.661353][ T3683] usb 4-1: config 21 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 19:45:08 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:08 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000780)={[{@session}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) 19:45:08 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000080)=[@decrefs], 0x1, 0x0, &(0x7f0000000140)='o'}) 19:45:08 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 19:45:08 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x1, &(0x7f0000001080)=[{&(0x7f0000000080)="74be4e15a6bbad82e19a04ba0e0301c38e754fd830e33ad08263f3196186ef295d06e45b033715861c37edc8351376a08dd1b3281d10f532ebe364707c431a178c948f961915e2aa0751491ed4046d9122540f0a1b5f09dfe0682a5bebc0f58f595f28c2ceb09fc6c8402bdd2bce19485d0d46ec194a3da41fe8c8728eea89f1fadd2f4fc7c83399317d0a3b6290185872f91d6ddb4db13ae3164b3debece9ea9fae9a0fadd20c4d08ee78eb10734508933429e8ca920dd77e488c70d6fbb4797da878f39649109c53579b665958d858f34f35c84c29145d19b515fe7e55b44846375eb0d7c89ef7213b3c512bf837c8307e22de659b7006a0b963412716b887e815e6e98e5e5e44927f85fdc32025c6cafad8d7e23446bbe5089d3a3e7056c544d31781b566a585a5308cbf77d6b42ef28e0aedd47a0e7fe30b8ecb0a8e2a43da06c893000f82221a83fc52a2040155f3bb32f218d014027319a182c0bfeaa598686f50982241c59dfca83203234afb385f38a74c4bfd576599f9a7bb797c75bbd8a48873c6e53fe88848ac65407bc74ebed00da9be6003e5852561bf3a81b5036a3b5b66b1267180d0b7d1413ed0ab3e244e0600ca1d8cf1cbc9ad726721dcecea3d0107b44bc96e7472334c33204277d602c9b7b94cdeec0cd4f7f4bdd061736512d2ab07695e1f19ea5d5d07367dc42fbe1f5a0d17d3bfba1f881e92bfce7bf9400565501605e42afa1767d95a0e2cce1ae0d7b6221863d1d7ce6a51c1ba1a2585c17439367f2ee2581e157b9a99742f74fa40d9b45a4b9dd26e27f36654209f83190abdfd3a9956613ac4b178d627143b4adfb1f51fb65c6d16f7469b761342d1d9adc653f59d78d4af86c283781be8419f34d2f2c428911609b8f34ca8021cba3bde62d21a8e52612fba311a09466f01c19968f9d0234cf8c5f07f58085bde55e9228b6967552fa3f9662ccca40a127457ba709107d9ab2ca39137ce2a0a67e71db69f91e6cd1ca8f47c8bb07fea32d7564c44586ab237e7001ed6251a20a625c992ea527e5cf74837870c16425b90d2ee205d414c746b56d64a47f2d52c5f3f6cf1665a1fc138a62ffb639a5202a4e20a987328944e719ad1131b52d7b7a5c1b12ae753756fff37312742a9b50950edd2eb89974f3444e1d773c9c3e0d1d2e04cc3dfd1d69588effd665fbb97d2437ee8b57bc39ef3fc9889507c3861ec0efdc9a93df5879f3b5930361c0c6671ec19b30df38239fe3bb2121fdd87c84c3369f606d95798f5b5508ddf6d223f360c0a8fb5ede1b6261d1d6bbde575f40f0e0302d01b8b13541f9e9bc9f1d44cc38ed06dba378edc81f6b264b850d2650c79630c79fc352f0381dd30c6dc320689420e3369b4f6f67fc7c3646ef8016b588ebb4a1d318341f3fae34c41999d74d9f0b3cf88f2ee38038158087109c219ac96eb399f47cec21d2c3d98151af330fa7a653f360ff34ceb8ae518961d40873d3fa6e9bfe43c9609c0a5e705335ec9adba6f796a76c63f8243f62ceef7a31d1a1c2399d955e7b7691fa23edeaa46881090f23a5adab39190b4100d8f262d37901349e439cc80a8c8ee14ff63aa8b653006efd47fcb555958770ac382f8d6278bf6ae8eed4473b11b5759c78dba76fcf7c02daacfba33a335c723788046c142dfba26154cb3277b0c8757e21c36bb9c084b59e2b3c53b4170c23696e16568e88e94677e340e2c2b5455a538273cc9ee4d4d1998de6cc15ec11a8b962313853523437eed963bce8548e0f67d96880147db595055b31602a78eecc0d3cb9aa1f9522edad65af25a4367a77abf353eadcc2c21eda6a9304ea86d49cfcfcfe344fd97e2971cdfc7f5c068947f62a4469d2ab91496f22e184feecdf0c0c3bd2a4e7e70d3840263bdf42237ca7b7e39053afeaded0a43f61ba25b22bff6ec86d08073e74ffce4a1b4fa74c937e40b712a782fdb721ee1576161ce1963bf271bb681420af1b819bcd340c5588fa931052cade07879c89a178493a8f5fc2ecd91519a48ced70df18aa191c92c24c48ad73cdd94855da3dc900f511a77a411a75e5598a7ab05150220a94ddb7cc9f36db3eecbd9d5a8487572b6472b660767c415af041521b7431f723604b61312a76b034552bb412dd233da77f1f4a3664cb3630b7c1156de5b21703e2a57c62d8789c5a0e66587239c950de8cfdc39190c331008a3ba46902d67a3de60522a4b7996ab01e9ce40a61600d1d6be74882bf8ee5aa5b2f5b8755fb324b25942e9b13c025d5b9f276f24a20df452f5f8a490d3ed87fb1ee7959926a98ac5ddbf8760570b0779017bed4d8e33f39400e6ffaf4f7b29b1b1b66f825cddc594f76a8fbe4bc55a797f2ffd796a228f8212c2094fbc9729a949c7fd9b12a1effe3bfdc7983b0d77d8d9abd8c11267cc3d32227d3c3254b004736ea7ce41dca810b81a088ca37452e9bac8ae9ada95cd7502a553878d7565891557cf833736b9e6676382bfcff57f8cabfcd64f6213d9a6da3a7d378a28b2c588327668421fe601f2fe7cfa4868ea1ea8855cb0c10ee7ac7f9a1afcc368ef2d8975faefa2d0a33a142431de513470d9f6f1075f290cd4643c216cb5e19da931370d12be93ac3ca05b06557ea98f775cec8e4f09ca12ca2759e72faa84089cfe55f2564afbfdff4f955d9f1f4f082b35c84b088340cfdad96e4b09572f27ee4c77985d856a6dfbe955697a7f11f3c2c6db6bcb05748af51583c55a508209f0a9f8f002817bcee083a54a8d84cdf59c64a8f6b507de09bc915a5ebcbd85c1def84bc0fad5a5b31cc6b2fc596248a37f29344fe1c6b0983d0adfd17ec8b4be2ad42cc4b967b496680e3b5b35fcb893a1126a8dd0981d4eba4c8e5d5fb18d604619d47ad4e340edb46b6f065f42c16164905a0e8f1945d22f381c6aa38ea2a7bd82c6548a71b2e1b83487fb640d6a7656ba065e1d43641587eb657a2b99a367e374ef17a94b7e9b43d91b50331421e5e3fcec783ae5f26e232e95fe6da1320c9bf46d436caa2a3b51f47e1f15b6334aa98263dd15f2df08e5ce2bce77ac525f10cff00edc36eae3ae3a2b989682eddb28d81bb83e73863b44b95edd95736d6c9974bc94e12ab9983c4f586c779752df648fd06814a58e7020d67b4ada607155f1bb4b3d90dbb169ce9a51e1be14c88c3bdf73390d890899471dadb1aba8dd715531dfa3d13da3762c35746e90c98d0f38aa03293e248943197bd144abf193e23cebda6729e2390d4df64a56f59bbe05391fc4ac3ce64b0c2ae78ded4292977166d7ff02ddd1f5eee3e75225f74603f590774a75ee65068057bbd9db83f183cf006c12d6e254791dfbef4ee83afb8e22f38f70c5670c5e58411d139987bd3cd4aa6c2e62e17d04d870162c12f9b60a1c2b4379caf32eb911e8d08e991cd81f237732f85eccb8c38343f9f35dadc9e1c23806c1f76e0542be48eb5c984e7720960c5fe52d77d21fc2dc9fc0b35b3e02e5c886020b9dac3d83bf96368716fca0eeddba8127b20fa28dc0b6331b6929699c8bb90753c1d0ab8c423ce55a39ed3bb7d9b278d1be77f704829c862731bd9c9f38309daaa945c8998bb0fbcfbe12d27eb8319b06aab9f36ac7bfc55ec879e73046e5e28f6f07ebf69ea75406137a5c9cfd84dfbf82e19967d3dce4e64f8b35179b9a26e0c88e6a33f8c2b9d0edab052ec9bc3c04dca3fb6f8f92170ed73b8425e26bfae26e00a3336a894cae99c75cd43cc70945a9a7f913c3b02473dc491fa064047abd7c264f33108c81cfa09c5dc79ef297043ca610714570ccf2a6864f76de7e9016a131cd4b6ea9741ff65030c437281e6a42eda08597633b8fad6f5c0392f9d82012694143f1719e2e548d4b9dd936c96fb5c7e78e773eb54c3e4a464a714197971a9118885cec85aac8bc89796c7bc8e389abb459c76ed57bdd26c86490f46ab74544b33bbee17a1b9a9f293514f4c47ed562dd04e8e31c726711f1370d8899afac392a144043099fbf3acfd8ec9123726b2071ba90f089121bdc07977c71bded498b7be184808e908f2cfc8b487a3ef81e6b0597696c3149997bba3ed8cce67a2966e615ea60d7c2006b1ec110bcd323c5a70df02ab4df414958cc95f30174452bf4b423fb519d670573ba85786306588e7214331a63b17916a491ed3fe96886694326672d1e4b4fe42a564fe3f054726b1a4ec93abd91ae1a85732453a8ed8577a146e2a3abfcc34ce9440770c05bba9d1642b15a1d8398e45faa77e15301bd9e6fd8d05e06d7d2245e6ebe7c6aa0644fdd155c824f493273a97fc2802d7336e9cc6afd44230623f3fdbdd4c47621e28965078fdb7e94d55a9d84f2bb17ff622a12e69d9a1f6b336f0800cff18fb04cbf4ec6eacb745f73c828d75b92f3e5e44316acb3f7764ac2005794e04af4437c65408ffe7e0aa8c04d2bcc34bbe625e73de6059047643cf05c6cf9727074d390341dd0aed5afbf9f3ce79b64a6f24c422bb19eac977ebbf3bca6f5ca1ad3c1f627c55c8800df37edf23b8b55209f44cfe6f9a50df6d3339e241cd25aaa7bed452965b2b5fa442d228b694f39bbddd3c2720e4eb852876b2b757759b0ec5ded972d70b50a92c81ed80c6b8aa80ceb7ed8e0ed49533ddced24344126486a79583e63aee11e402af87e5974d44c3c0d8041951d298305f76e4083a46eb6ea9f98b624895202607fb2b39350014fcd9d97334bcaa8f80179ade963a53b5e298587b42912a05ddb506ba97eb55272118926caddd8d723d7501f272f52a243d65ad76f90f86f7321ccf228e8c8bc25d5b5ab88c0187b4edff825435f7761e0288064fa4a1bebed7464d7a3024da307fb09247fca5e3111f1df4e7eda0bc088f6c965b7639c6b2f9c2091d6d0c33e713bd7c10a81a3a6e0088f6fc61aefc6d3d05e97623aeb900e79271dcd1adf5bab2791f517ab107b9c16d1062d8da92a60f58e01986980fe786d32c9b483420d4db160a3198ce194b15b302f244cc7f1020c12430d4af52064b6ee5504c8c62f6632d2ffc1818a150e3d8b7adda9b0c4b83c907feb5ce4e6634096a589c5f7c8c25fd7250f586a6bf6ad5d42ff9dd75772102957344a8d7b0316851291480d1d1db12a42252402e2ff63b3238f07ec73cedcb1ee76a7f2345a73208293d1af1423704a91c03cfaf5b39728f0e526a59d809bf79735edc8a856cd74ce80e1e46a1df728e28f0c31b8860ce09746ab021d9596ab55e3ce9049fc85505217a7b166527cdcaea8cd0f4f63a5e7e2912e65a488657f53264a11a124ebb150bdf1e62482baf546d5493f7cd773b518793a1452cb1ffb222a347cbe504cd5714215290ed15342d12c49082c96f72826855b780d27217257cbdee8699590921e215fd71d11a250e12a06ef021637ea8d7a209b21dae120172927344010526aae0546f8e97f950f52f2f9aa9c39ebacc21b011fa7b4204d6f527f0d74febecc364f6a2780635d8f01382293e0b9df03aa46d26f5687960969a5d30521232a5c317c03dc38afdb5df38493d1763951e26106373f66fec20900b54a8efd553349db843528f56b1e332be3ff96c0aad07a5d31261d4293a27edc0ca2", 0xf81, 0x80}], 0x0, 0x0) [ 248.800163][ T5431] loop2: detected capacity change from 0 to 8 [ 248.807028][ T5433] hfsplus: unable to parse mount options [ 248.821361][ T3683] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 248.821393][ T3683] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 248.821415][ T3683] usb 4-1: Product: syz [ 248.821430][ T3683] usb 4-1: Manufacturer: syz [ 248.821446][ T3683] usb 4-1: SerialNumber: syz [ 248.823777][ T5435] Error: Driver 'raw-gadget' is already registered, aborting... [ 248.823789][ T5435] UDC core: USB Raw Gadget: driver registration failed: -16 [ 248.823805][ T5435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.847612][ T2979] Dev loop2: unable to read RDB block 8 [ 248.847647][ T2979] loop2: unable to read partition table [ 248.847800][ T2979] loop2: partition table beyond EOD, truncated [ 248.862422][ T3683] cdc_wdm: probe of 4-1:21.0 failed with error -22 [ 249.073255][ T3683] usb 4-1: USB disconnect, device number 21 19:45:09 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a00"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:09 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x4c}, 0x4c}}, 0x0) 19:45:09 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@generic], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:45:09 executing program 1: futex(0x0, 0x4, 0x0, 0x0, &(0x7f0000000100), 0x0) 19:45:09 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 19:45:09 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a00"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:09 executing program 1: syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x441) 19:45:09 executing program 2: capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x2e}) 19:45:09 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0xfffffffffffff801}], 0x0, &(0x7f0000000340)) 19:45:09 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000140)) [ 249.849234][ T5447] Error: Driver 'raw-gadget' is already registered, aborting... [ 249.849249][ T5447] UDC core: USB Raw Gadget: driver registration failed: -16 19:45:10 executing program 2: syz_mount_image$hfsplus(0x0, 0x0, 0x0, 0x6, &(0x7f0000001640)=[{&(0x7f0000000080)="a3", 0x1}, {&(0x7f0000000180)="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", 0xe81}, {&(0x7f0000001180)='e', 0x1}, {&(0x7f0000001280)='t', 0x1}, {&(0x7f0000001380)="0e", 0x1, 0x100000001}, {&(0x7f0000001540)="91", 0x1, 0x10001}], 0x0, 0x0) 19:45:10 executing program 1: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0xee01, 0xffffffffffffffff, 0xee00}}) [ 249.849268][ T5447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.920005][ T5454] loop0: detected capacity change from 0 to 16376 [ 249.937369][ T5454] hfsplus: unable to find HFS+ superblock [ 250.004795][ T5458] loop2: detected capacity change from 0 to 264192 [ 250.101260][ T145] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 250.461181][ T145] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 250.461207][ T145] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 250.461268][ T145] usb 6-1: config 21 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 19:45:10 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a0000000905"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:10 executing program 4: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 19:45:10 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380), 0x10}, 0x80) 19:45:10 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x3ff, 0x0, 0x0, 0x0, 0x0, "cc052d237138fbef"}) ioctl$TCSETSW(r0, 0x5412, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x0, 0x0, "ffbc08ff68837704f8b123bb036ee0e8f7e9e9"}) 19:45:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x64, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x45, 0x33, @probe_response={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @random, 0x82, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1, 0x6}, @val={0x4, 0x6}, @void, @void, @val={0x72, 0x6}, @void}}]}, 0x64}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a006) [ 250.621336][ T145] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 250.621367][ T145] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 250.621391][ T145] usb 6-1: Product: syz [ 250.621407][ T145] usb 6-1: Manufacturer: syz [ 250.621419][ T145] usb 6-1: SerialNumber: syz [ 250.662258][ T145] cdc_wdm: probe of 6-1:21.0 failed with error -22 [ 250.692033][ T5470] Error: Driver 'raw-gadget' is already registered, aborting... [ 250.692047][ T5470] UDC core: USB Raw Gadget: driver registration failed: -16 [ 250.692065][ T5470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.699634][ T28] audit: type=1804 audit(1654199110.762:27): pid=5465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1588845347/syzkaller.Ej7Krg/147/cgroup.controllers" dev="sda1" ino=1171 res=1 errno=0 [ 250.864515][ T145] usb 6-1: USB disconnect, device number 20 19:45:11 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a00"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:11 executing program 4: getresuid(&(0x7f0000000280), &(0x7f00000002c0), 0x0) 19:45:11 executing program 0: syz_mount_image$nfs4(&(0x7f0000002400), &(0x7f0000002440)='./file0\x00', 0x0, 0x0, 0x0, 0x1000010, &(0x7f0000002880)={[{'rootcontext'}]}) 19:45:11 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) 19:45:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x64, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x45, 0x33, @probe_response={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @random, 0x82, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1, 0x6}, @val={0x4, 0x6}, @void, @void, @val={0x72, 0x6}, @void}}]}, 0x64}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a006) 19:45:11 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a0000000905"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x64, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x45, 0x33, @probe_response={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @random, 0x82, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1, 0x6}, @val={0x4, 0x6}, @void, @void, @val={0x72, 0x6}, @void}}]}, 0x64}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a006) 19:45:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x64, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x45, 0x33, @probe_response={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @random, 0x82, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1, 0x6}, @val={0x4, 0x6}, @void, @void, @val={0x72, 0x6}, @void}}]}, 0x64}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a006) [ 251.588827][ T5474] nfs4: Unknown parameter 'rootcontext' 19:45:11 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0) [ 251.645363][ T5482] Error: Driver 'raw-gadget' is already registered, aborting... [ 251.645376][ T5482] UDC core: USB Raw Gadget: driver registration failed: -16 [ 251.645393][ T5482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.690756][ T28] audit: type=1804 audit(1654199111.752:28): pid=5483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1588845347/syzkaller.Ej7Krg/148/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0 19:45:11 executing program 1: pipe2$9p(&(0x7f0000002f80), 0x80000) [ 251.766925][ T28] audit: type=1804 audit(1654199111.832:29): pid=5489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1766174141/syzkaller.JaUgG9/147/cgroup.controllers" dev="sda1" ino=1170 res=1 errno=0 19:45:11 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, 0x0) 19:45:12 executing program 1: signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) [ 251.845526][ T28] audit: type=1804 audit(1654199111.912:30): pid=5491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1956438334/syzkaller.EztSYv/143/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 [ 251.919957][ T23] usb 4-1: new high-speed USB device number 22 using dummy_hcd 19:45:12 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a00"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x64, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x45, 0x33, @probe_response={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @random, 0x82, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1, 0x6}, @val={0x4, 0x6}, @void, @void, @val={0x72, 0x6}, @void}}]}, 0x64}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a006) 19:45:12 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x64, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x45, 0x33, @probe_response={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @random, 0x82, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1, 0x6}, @val={0x4, 0x6}, @void, @void, @val={0x72, 0x6}, @void}}]}, 0x64}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a006) 19:45:12 executing program 1: r0 = semget$private(0x0, 0x4, 0x0) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000018c0)=""/255) 19:45:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x64, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x45, 0x33, @probe_response={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @random, 0x82, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1, 0x6}, @val={0x4, 0x6}, @void, @void, @val={0x72, 0x6}, @void}}]}, 0x64}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a006) [ 252.301226][ T23] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 252.301245][ T23] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 252.301267][ T23] usb 4-1: config 21 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 252.419886][ T5507] Error: Driver 'raw-gadget' is already registered, aborting... [ 252.419901][ T5507] UDC core: USB Raw Gadget: driver registration failed: -16 [ 252.419918][ T5507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.473215][ T23] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 252.473247][ T23] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 252.473270][ T23] usb 4-1: Product: syz [ 252.473286][ T23] usb 4-1: Manufacturer: syz [ 252.473303][ T23] usb 4-1: SerialNumber: syz [ 252.480792][ T28] audit: type=1804 audit(1654199112.542:31): pid=5509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1766174141/syzkaller.JaUgG9/148/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 [ 252.490612][ T28] audit: type=1804 audit(1654199112.552:32): pid=5508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1588845347/syzkaller.Ej7Krg/149/cgroup.controllers" dev="sda1" ino=1183 res=1 errno=0 [ 252.493806][ T28] audit: type=1804 audit(1654199112.562:33): pid=5510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1956438334/syzkaller.EztSYv/144/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0 [ 252.512200][ T23] cdc_wdm: probe of 4-1:21.0 failed with error -22 [ 252.726337][ T145] usb 4-1: USB disconnect, device number 22 19:45:13 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a0000000905"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x64, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x45, 0x33, @probe_response={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @random, 0x82, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1, 0x6}, @val={0x4, 0x6}, @void, @void, @val={0x72, 0x6}, @void}}]}, 0x64}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a006) 19:45:13 executing program 1: pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$sock(r0, 0x0, 0x0) 19:45:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x64, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x45, 0x33, @probe_response={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @random, 0x82, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1, 0x6}, @val={0x4, 0x6}, @void, @void, @val={0x72, 0x6}, @void}}]}, 0x64}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a006) 19:45:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x64, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x45, 0x33, @probe_response={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @random, 0x82, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1, 0x6}, @val={0x4, 0x6}, @void, @void, @val={0x72, 0x6}, @void}}]}, 0x64}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a006) 19:45:13 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a0000000905"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:13 executing program 1: r0 = semget$private(0x0, 0x4, 0x0) semctl$IPC_INFO(r0, 0x3, 0x3, &(0x7f0000001740)=""/52) [ 253.519685][ T5522] Error: Driver 'raw-gadget' is already registered, aborting... [ 253.519699][ T5522] UDC core: USB Raw Gadget: driver registration failed: -16 19:45:13 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getpeername(r0, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000240)=0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) [ 253.519718][ T5522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.554662][ T28] audit: type=1804 audit(1654199113.622:34): pid=5523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1766174141/syzkaller.JaUgG9/149/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0 19:45:13 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) write$P9_RSTATu(r0, 0x0, 0x0) [ 253.579170][ T28] audit: type=1804 audit(1654199113.642:35): pid=5526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1588845347/syzkaller.Ej7Krg/150/cgroup.controllers" dev="sda1" ino=1179 res=1 errno=0 19:45:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000340)) [ 253.739578][ T145] usb 6-1: new high-speed USB device number 21 using dummy_hcd 19:45:13 executing program 1: r0 = epoll_create(0x20) dup(r0) 19:45:13 executing program 4: lsetxattr(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=@known='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) [ 254.091583][ T145] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 254.091612][ T145] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 254.091649][ T145] usb 6-1: config 21 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 19:45:14 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a00000009058103"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:14 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 19:45:14 executing program 4: pipe2(&(0x7f0000000280), 0x80800) 19:45:14 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) 19:45:14 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0x0) [ 254.251359][ T145] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 254.251392][ T145] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 254.251416][ T145] usb 6-1: Product: syz [ 254.251431][ T145] usb 6-1: Manufacturer: syz [ 254.251447][ T145] usb 6-1: SerialNumber: syz [ 254.292124][ T145] cdc_wdm: probe of 6-1:21.0 failed with error -22 [ 254.385710][ T5548] Error: Driver 'raw-gadget' is already registered, aborting... [ 254.385724][ T5548] UDC core: USB Raw Gadget: driver registration failed: -16 [ 254.385743][ T5548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.495854][ T6] usb 6-1: USB disconnect, device number 21 19:45:15 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a0000000905"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:15 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a00000009058103"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:15 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 19:45:15 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) 19:45:15 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) write$FUSE_IOCTL(r0, 0x0, 0x0) 19:45:15 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) 19:45:15 executing program 1: io_submit(0x0, 0x0, &(0x7f0000000980)) 19:45:15 executing program 2: open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x0) 19:45:15 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000340)) 19:45:15 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x80, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x5, 0x2c}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x1, 0x8}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x0, 0x3f, 0x8e, 0x0, 0x80}, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x2, &(0x7f0000000140)=@string={0x2}}, {0x0, 0x0}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000380)={0x14, &(0x7f0000000300)={0x0, 0x21, 0x1e, {0x1e, 0x21, "a70b388d298bde61250d8f3585144c3a18c8a2e25d85a67204aecd22"}}, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x44, &(0x7f00000003c0)={0x20, 0x31, 0x4c, "22f911c4011681553ef70e4d1fcc03b5e8c13ab31033f79007e39ee88204635610169eb71796c36599ac9de99022c8d8a47f8ff27bebea201384103d7fa5ee7bb3bf9f4cdf0b99d1e86ed3fc"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000004c0)={0x20, 0x80, 0x1c, {0xd623, 0x4, 0x0, 0x4, 0x0, 0xc0, 0x0, 0x6, 0x5, 0x5, 0x6, 0x4}}, &(0x7f0000000500)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000000540)={0x20, 0x83, 0x2}, &(0x7f0000000580)={0x20, 0x87, 0x2, 0xff7f}, &(0x7f00000005c0)={0x20, 0x89, 0x2}}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000740)={0x17, 0x88, &(0x7f0000000680)="fcf910421527293b3a4ed4d50c758ea52d3eec678bbae6ce3963d2df2b5e5f43a8197aa39ad5fa18b686504980e6956d2b523a0f0884fba53ae50006a18559dda01371709829d7560e1c0000fb95b18a8db21462823972b17107c9ea34c2094962cb594a1169f3cc767c5a756a72678c4950d3cc358be404e342f3e4dad904ae5ad57d0f7f29490a"}) syz_usb_connect$uac1(0x0, 0xde, &(0x7f0000001a80)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x3, 0x1, 0x81, 0x50, 0x1f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xff}, [@selector_unit={0xa, 0x24, 0x5, 0x2, 0x40, "95b6941b8c"}, @selector_unit={0x8, 0x24, 0x5, 0x4, 0x4, "585f01"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x20, 0x2, 0x5, 0x8, "bacea9bd51fe8624"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x7, 0x2}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8, 0x67, 0xee, "b9ff12e1a4"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x5, 0x2, 0x9, 0xe3, "4b945c9bc5406ad2ab"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x2, 0x6, 0xc0, "7f7ae2", "cb"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x20, 0x4, 0x2, 0xeb, "3eaf", "af78"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x0, 0x4, {0x7, 0x25, 0x1, 0x82, 0x3f, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x6, 0x1, 0x3, 0x20, "399f39a746"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x8, 0x6, {0x7, 0x25, 0x1, 0x3, 0x86, 0x3}}}}}}}]}}, &(0x7f0000001d00)={0xa, &(0x7f0000001b80)={0xa, 0x6, 0x110, 0x8f, 0x0, 0xca, 0x8, 0x1}, 0x5, &(0x7f0000001bc0)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000001c00)=@lang_id={0x4, 0x3, 0x843}}, {0xa0, &(0x7f0000001c40)=@string={0xa0, 0x3, "0112bc87d20ddef5bf83c65bbf10f601f67507e9f70823e9cad09658fe9e63fa6dda72b2835d55653797cf593654d0ad3b6241f866e15adb96502098e630ab6113ba4c00c8607fabe5a68285d2dc93c34cb5b55c4546d869d8f447b8a6c7cbd7cecdabeddf82421a494521c93f41dbccb6dd0a2374348e4e5638a7359723325dcabd3ecdf45f014a872a528857003870ccfce74a0c0da59fcfdddc6c8f9c"}}]}) [ 255.284517][ T5560] Error: Driver 'raw-gadget' is already registered, aborting... [ 255.284531][ T5560] UDC core: USB Raw Gadget: driver registration failed: -16 19:45:15 executing program 1: syz_usb_connect$uac1(0x0, 0x9a, &(0x7f0000001a80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x0, 0x50, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x20, 0x0, 0x5, 0x8, "bacea9bd"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x7, 0x2}, @format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x0, 0x0, 0x4, {0x7, 0x25, 0x1, 0x82, 0x3f, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x6, 0x1, 0x3, 0x20, "399f39a746"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x0, 0x6, {0x7}}}}}}}]}}, 0x0) 19:45:15 executing program 2: syz_open_dev$hiddev(&(0x7f0000000f80), 0x0, 0x101000) [ 255.284549][ T5560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.358297][ T5568] Error: Driver 'raw-gadget' is already registered, aborting... [ 255.358310][ T5568] UDC core: USB Raw Gadget: driver registration failed: -16 [ 255.358335][ T5568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.392367][ T1230] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.392411][ T1230] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.418341][ T5571] Error: Driver 'raw-gadget' is already registered, aborting... [ 255.418355][ T5571] UDC core: USB Raw Gadget: driver registration failed: -16 [ 255.418372][ T5571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.511174][ T3761] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 255.901419][ T3761] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 255.901447][ T3761] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 255.901484][ T3761] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.901514][ T3761] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 19:45:16 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a0000000905"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) [ 256.020777][ T5574] Error: Driver 'raw-gadget' is already registered, aborting... [ 256.020792][ T5574] UDC core: USB Raw Gadget: driver registration failed: -16 [ 256.020810][ T5574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.092581][ T3761] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 256.092614][ T3761] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 256.092638][ T3761] usb 4-1: Product: syz [ 256.092654][ T3761] usb 4-1: Manufacturer: syz [ 256.092669][ T3761] usb 4-1: SerialNumber: syz [ 256.144358][ T3761] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 256.144379][ T3761] cdc_wdm 4-1:21.0: Unknown control protocol [ 256.344738][ T5556] cdc_wdm 4-1:21.0: Error submitting int urb - -90 [ 256.345671][ T6] usb 4-1: USB disconnect, device number 23 19:45:17 executing program 2: syz_usb_connect$uac1(0x0, 0x79, &(0x7f0000001a80)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x3}}}}}}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) 19:45:17 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x4, 0x76, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x5f, 0xa0, 0x3f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "fb7f33"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xda, 0xf214, 0x4}, {0x6, 0x24, 0x1a, 0x800, 0x1d}, [@obex={0x5, 0x24, 0x15, 0x81}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0xec}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x7, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x3, 0x1f, 0x8a}}}}}}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0xe0, 0x6, 0x80, 0x10, 0x1}, 0x8, &(0x7f00000000c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1001}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000280)={0x14, &(0x7f0000000180)={0x20, 0x9, 0xa2, {0xa2, 0x22, "8ce25c0dbaf41799316437732384eee2a2e6fa63d0bb8366807d0f5f16ad09fd19c59068ceb98008e465aeaab235015da5289417b37a46e4903ae325c38be79e8db156af3da9637ed1236f87919554474a62a0e7f2d49d2477fd7c782a8229985be76f7fea0fe21ea996c56132d92c9a866762f8c51c372bb3630389c8fc3c62e3651a915d636165f8478638376a2929f9949b2cd5ee0f4ca30748a66bda99cd"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000300)={0x40, 0x12, 0x30, "4541d88a7aab349e5f220699689b29ef54b0fabcf022bfcc3b7e837ef907b4619459cce27a803fd3305be8465d5c1d78"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000380)={0x0, 0x8, 0x1}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x7f, 0x9, 0x7, 0x4, 0x2, 0x3, 0x4e, 0x0, 0xf5d5, 0x8001, 0xb86, 0x4}}, &(0x7f0000000400)={0x20, 0x85, 0x4, 0xff}, &(0x7f0000000440)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0x1}, &(0x7f00000004c0)={0x20, 0x89, 0x2}}) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x101142) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_connect$cdc_ncm(0x6, 0x81, &(0x7f0000000a00)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x2, 0x1, 0x0, 0xc0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "a2c062"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xfffff800, 0x28a, 0xf22d, 0x3f}, {0x6, 0x24, 0x1a, 0xfffd, 0x20}, [@country_functional={0x10, 0x24, 0x7, 0x81, 0x7, [0xd04, 0x3, 0x3ff, 0x400, 0x2]}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xe4, 0x51}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0x40, 0x5}}}}}}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x300, 0x22, 0x1, 0x7, 0x40}, 0x19, &(0x7f0000000b00)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xf9, "8808c85e9715be5219df038b3fc41625"}]}, 0x5, [{0xfa, &(0x7f0000000b40)=@string={0xfa, 0x3, "777178b6bd188ec61794431c56cea5756a0276e710172548fc3bc54a0984bee8cc87ef1c8b115abb7798022b78ded7892d6c71b51a1e05e952e64ce273ae0fbee000d4db5d5beca6ef4519ca0f873667f236c36dec9e8c8986912467aacf4464bce01b604432545822e284e63652f1e10ed320277737289d2ad7ead9f1a6d83f530ea368b83a4c5a14acd12d8faaab7de6b5addc9932235d79616f8b0fa0c8212dd930fc13e84efddccf175db88d5b22701bcdacfedfd769f3da44e7994245141b3a6849b4705a55180049d9fdd826bf8d1bba15d9d097e73f04ce04fa0f243290132c16350dfb14681a7443f6d18db42cd38a07efbc6e98"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x410}}, {0xfb, &(0x7f0000000c80)=@string={0xfb, 0x3, "658e21d1a7566d07c4bc9f771b9040e541defaafff881accb4b04ef08dfd4c5afebf50ed35731e50ecb67936a9d7ab96502c27b9dda0247e631e60c3d8484fdc2bb719ff36e7894cf0eb975ac72b7e40f8bd4cf615920b35e2481422458c219486f3858c56ada8bb779c2b73be20a74241cad2597efeba9a0f68ebfe45e83b62d7d6658b5998808f2ac5ff591e0a513d12ab2f4c7b0dc88d59dbe3b301be5feebd28e438b5edd04072b0fa6e5e2d91c3d49122704819ccb30876751a1cd7cc9788f03e7193c135649691b3849aa85aef34860400814a1023eeb3aa3bb8686b973e786a7d7f6c9a271d08255deecacd2e465329e6bd1290c343"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x457}}, {0xf9, &(0x7f0000000dc0)=@string={0xf9, 0x3, "a6beeb1177c912c92882bcaf92aa7408fdca3618cc45a58010b177080b6d53cb2a40c6513176534870589225356102f46f53702ed13d7ae27fcdee7bc4ecb430823b383a3db53840c6648714f350d8df5b0ebe0ac362644d18e0b944578c00694de33780a0e4bffb335db26a91c1b8d095db6c9087ff8b48fecf7a62bad9cdfed25dd543c87cdaa11964ee24b4bd2247fe08a83f6f2a9adab679f6f72c58c5f95b03442f7f909e51a0a04be8754f4c4be3843134fd52cc5bb29181e9e6b71609a69a0baec2db969d9253ff69c260da1863399975b8a5351b3dd5f5b504e05832902bf58e09a36087d5eb8bc9109fe8f58d2034bb55f639"}}]}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f00000006c0)={0x14, &(0x7f0000000580)={0x40, 0x22, 0xf2, {0xf2, 0x21, "b71d660129b0490eb7b3d2c8b5b4eb2f8a1b572027e121cc869927b40667df4cfc4fb4a5da39e8684c9c0580a0adf620e4a5347dfca0c5133ac8c4259a8ea48fb29a0fd7778415e13a9c57415b9218be318d37cf48a246f01ae455c1a8314928dd93aa821a55fe47d9506788ae7647201bdd819c4f9a9493abb892f10c4459795dee6085d27367b3661491b27e9c978acb4fcfaed5fab523f6bb9a6a5dafa8a61758a78322691ec784acac25ac8f59ff53ff42edd269d9914bff63253ea431872dbfa6d2dd7abc5794c52395071406415b4a0f5278eadf54b7adf86e995866ab907b01e4c005e54eead8eef944252737"}}, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000980)={0x44, &(0x7f0000000700)={0x40, 0x0, 0x96, "ec7fc9af70de562f0e886670ee4aabc4c9f759fcd389e2a31c358c93af0423da475df0a0952134cde825cb2277e8fecf7327638e5a56fea331bd25d06d08edb395d3a14290723a6b9aecb9bf7a34d0cbb2badf6096ef618115e05b67c8269a65bb84d99cec448b877e652675c750d13a4e479a34c1e868154bae2cde06d1e20f075903f316ab03e0e257392df838020078dea18f2894"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000840)={0x20, 0x80, 0x1c, {0x400, 0x6, 0x1, 0x1, 0x7391, 0x772, 0xffff, 0x5, 0x6, 0xb9, 0x8, 0xffe1}}, &(0x7f0000000880)={0x20, 0x85, 0x4, 0x800}, &(0x7f00000008c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000900)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000000940)={0x20, 0x89, 0x2}}) ioctl$HIDIOCGRAWNAME(r1, 0x40086607, &(0x7f00000002c0)) 19:45:17 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000002540)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) 19:45:17 executing program 1: bpf$MAP_CREATE(0x3, &(0x7f0000001380)=@bloom_filter, 0x48) 19:45:17 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a00000009058103"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:17 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a00000009058103"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) [ 257.083772][ T5581] Error: Driver 'raw-gadget' is already registered, aborting... [ 257.083786][ T5581] UDC core: USB Raw Gadget: driver registration failed: -16 19:45:17 executing program 1: pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x4044110, r0, 0x8000000) 19:45:17 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) [ 257.083804][ T5581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.088941][ T5582] Error: Driver 'raw-gadget' is already registered, aborting... [ 257.088953][ T5582] UDC core: USB Raw Gadget: driver registration failed: -16 [ 257.088970][ T5582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.090519][ T5583] Error: Driver 'raw-gadget' is already registered, aborting... [ 257.090530][ T5583] UDC core: USB Raw Gadget: driver registration failed: -16 [ 257.090546][ T5583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.131768][ T5586] Error: Driver 'raw-gadget' is already registered, aborting... 19:45:17 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) 19:45:17 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) [ 257.131782][ T5586] UDC core: USB Raw Gadget: driver registration failed: -16 [ 257.131801][ T5586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:45:17 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) 19:45:17 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$vsock_stream(r0, &(0x7f0000000000)={0x2, 0x0, 0x2, @hyper}, 0x10) [ 257.341436][ T6] usb 6-1: new high-speed USB device number 22 using dummy_hcd 19:45:17 executing program 2: syz_mount_image$sysv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:17 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000040)={0x0, [[0x9], [0x5], [0x3ff]], '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) 19:45:17 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0x40049409, 0x0) 19:45:17 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0x541b, 0x0) [ 257.761418][ T6] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 257.761445][ T6] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 257.761491][ T6] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.761519][ T6] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.951464][ T6] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 257.951496][ T6] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 257.951519][ T6] usb 6-1: Product: syz [ 257.951535][ T6] usb 6-1: Manufacturer: syz [ 257.951548][ T6] usb 6-1: SerialNumber: syz [ 257.996898][ T6] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 257.996918][ T6] cdc_wdm 6-1:21.0: Unknown control protocol [ 258.196186][ T5580] cdc_wdm 6-1:21.0: Error submitting int urb - -90 [ 258.198495][ T6] usb 6-1: USB disconnect, device number 22 19:45:19 executing program 0: r0 = socket(0x2c, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00c7b8"]}) 19:45:19 executing program 1: syz_mount_image$zonefs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x184001, &(0x7f00000016c0)) 19:45:19 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:45:19 executing program 2: getrusage(0x1, &(0x7f0000000680)) 19:45:19 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a0000000905810300"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:19 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a00000009058103"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={0x0}) 19:45:19 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0x401c5820, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) 19:45:19 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x81204101, &(0x7f0000000040)) 19:45:19 executing program 2: r0 = epoll_create(0x2) epoll_wait(r0, &(0x7f00000001c0)=[{}], 0x1, 0x0) 19:45:19 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) syz_io_uring_setup(0x421c, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 258.998172][ T5620] Error: Driver 'raw-gadget' is already registered, aborting... [ 258.998186][ T5620] UDC core: USB Raw Gadget: driver registration failed: -16 19:45:19 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x24) 19:45:19 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000000000000000000000000001e000000000000ff"]) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:45:19 executing program 0: r0 = epoll_create(0x2) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) [ 258.998204][ T5620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:45:19 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x40187014, &(0x7f00000000c0)) 19:45:19 executing program 4: r0 = socket(0x2c, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) [ 259.222411][ T143] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 259.621188][ T143] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 259.621244][ T143] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 259.621284][ T143] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.621314][ T143] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.801211][ T143] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 259.801242][ T143] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 259.801264][ T143] usb 4-1: Product: syz [ 259.801279][ T143] usb 4-1: Manufacturer: syz [ 259.801295][ T143] usb 4-1: SerialNumber: syz [ 259.844936][ T143] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 259.844957][ T143] cdc_wdm 4-1:21.0: Unknown control protocol [ 260.045681][ T5613] cdc_wdm 4-1:21.0: Error submitting int urb - -90 [ 260.046579][ T143] usb 4-1: USB disconnect, device number 24 19:45:20 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a0000000905810300"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:20 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a00000009058103"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:20 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x42) write$FUSE_ATTR(r0, &(0x7f00000000c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0xee01}}}, 0x78) 19:45:20 executing program 1: sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB], 0x208e24b) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) 19:45:20 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 19:45:20 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000000000000000000000000001e000000000000ff"]) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:45:20 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000000000000000000000000001e000000000000ff"]) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:45:20 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2020) 19:45:20 executing program 4: syz_io_uring_setup(0xe5e, &(0x7f00000009c0)={0x0, 0x0, 0xf01}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000a40), &(0x7f0000000a80)) [ 260.844097][ T5656] Error: Driver 'raw-gadget' is already registered, aborting... [ 260.844111][ T5656] UDC core: USB Raw Gadget: driver registration failed: -16 19:45:21 executing program 0: r0 = socket(0x2c, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) [ 260.844128][ T5656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:45:21 executing program 0: r0 = socket(0x2c, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 19:45:21 executing program 4: r0 = socket(0x29, 0x5, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x20000010}) [ 261.101148][ T3761] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 261.461216][ T3761] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 261.461243][ T3761] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 261.462228][ T3761] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.462260][ T3761] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 19:45:21 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a0000000905810300"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) [ 261.578298][ T5672] Error: Driver 'raw-gadget' is already registered, aborting... [ 261.578318][ T5672] UDC core: USB Raw Gadget: driver registration failed: -16 [ 261.578335][ T5672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.621226][ T3761] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 261.621261][ T3761] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 261.621285][ T3761] usb 6-1: Product: syz [ 261.621301][ T3761] usb 6-1: Manufacturer: syz [ 261.621332][ T3761] usb 6-1: SerialNumber: syz [ 261.664930][ T3761] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 261.664950][ T3761] cdc_wdm 6-1:21.0: Unknown control protocol [ 261.866044][ T5651] cdc_wdm 6-1:21.0: Error submitting int urb - -90 [ 261.867788][ T3683] usb 6-1: USB disconnect, device number 23 19:45:22 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a0000000905810300"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:22 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x19, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:45:22 executing program 4: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000140)='1\x00', 0x2) 19:45:22 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000000000000000000000000001e000000000000ff"]) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:45:22 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000000000000000000000000001e000000000000ff"]) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:45:22 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:22 executing program 0: bpf$MAP_CREATE(0x21, &(0x7f0000001380)=@bloom_filter, 0x48) 19:45:22 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030040000b05d25a80648c6394f90324fc60100002400a000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 19:45:22 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f00000005c0)) 19:45:22 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) [ 262.669104][ T5691] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 262.669135][ T5691] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 19:45:22 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x43, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0/file0\x00'}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) [ 262.669151][ T5691] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.4'. [ 262.688675][ T5693] Error: Driver 'raw-gadget' is already registered, aborting... [ 262.688690][ T5693] UDC core: USB Raw Gadget: driver registration failed: -16 19:45:22 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) [ 262.688707][ T5693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.861969][ T145] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 263.221267][ T145] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 263.221295][ T145] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 263.221333][ T145] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 19:45:23 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a0000000905810300"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:23 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000000000000000000000000001e000000000000ff"]) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:45:23 executing program 0: setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000)='I', 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000001100)) 19:45:23 executing program 4: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'permhat '}, 0x1b) 19:45:23 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000000000000000000000000001e000000000000ff"]) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 263.381984][ T145] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 263.382015][ T145] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 263.382038][ T145] usb 4-1: Product: syz [ 263.382053][ T145] usb 4-1: Manufacturer: syz [ 263.382068][ T145] usb 4-1: SerialNumber: syz [ 263.426575][ T145] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 263.426597][ T145] cdc_wdm 4-1:21.0: Unknown control protocol [ 263.467791][ T5710] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 263.522591][ T5717] Error: Driver 'raw-gadget' is already registered, aborting... [ 263.522605][ T5717] UDC core: USB Raw Gadget: driver registration failed: -16 [ 263.522630][ T5717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.685311][ T3680] usb 4-1: USB disconnect, device number 25 [ 263.701496][ T5717] cdc_wdm 4-1:21.0: Tx URB error: -19 [ 263.701575][ T5718] cdc_wdm 4-1:21.0: Tx URB error: -19 19:45:24 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:24 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1010000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}, {}, {}, {}]}}) 19:45:24 executing program 0: pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff}, 0x80) fcntl$lock(r0, 0x24, &(0x7f0000000180)) 19:45:24 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCINITREPORT(r0, 0x4004480f, 0x0) 19:45:24 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c800280080001000800000008000500", @ANYRES32=r1], 0x4c}}, 0x0) 19:45:24 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a00000009058103"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:24 executing program 0: socketpair(0x25, 0x80805, 0x0, &(0x7f0000000100)) 19:45:24 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), 0x4) [ 264.432607][ T5725] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 264.432629][ T5725] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 264.477099][ T5732] Error: Driver 'raw-gadget' is already registered, aborting... [ 264.477113][ T5732] UDC core: USB Raw Gadget: driver registration failed: -16 19:45:24 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000200)=""/53) 19:45:24 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0xc0884113, &(0x7f0000000040)) 19:45:24 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @local}}) [ 264.477135][ T5732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:45:24 executing program 4: bpf$MAP_CREATE(0x9, &(0x7f0000001380)=@bloom_filter, 0x48) [ 264.731268][ T6] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 265.091351][ T6] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 265.091379][ T6] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 265.091585][ T6] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.091622][ T6] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 19:45:25 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={0x0}, 0x1, 0x0, 0xf00}, 0x0) 19:45:25 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xe77d}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x2}, [@network_terminal={0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x28, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xfe, 0x1f, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1a, 0x2, 0x20}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x6, 0x5, 0xff, 0x10, 0x7}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x3, [{0x27, &(0x7f0000000180)=@string={0x27, 0x3, "306a398227d2c67f01033468c92cd6434d6b2bbb62d312200282cdf8ac0d9ed94298d422e1"}}, {0x3b, &(0x7f0000000280)=@string={0x3b, 0x3, "715e89a1ec0afc85831b8a216fa19ce551af9b7bc68f654b7f3abec200509b737f75c281c56850cb5cf9c2b93968c235aabdd614a7b4b4634e"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x422}}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x12c580, 0x0) 19:45:25 executing program 2: socketpair(0x10, 0x2, 0x1000, &(0x7f0000000000)) 19:45:25 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, 0x0, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @default, @bcast]}) [ 265.207425][ T5752] Error: Driver 'raw-gadget' is already registered, aborting... [ 265.207439][ T5752] UDC core: USB Raw Gadget: driver registration failed: -16 [ 265.207457][ T5752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.251558][ T6] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 265.251591][ T6] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 265.251615][ T6] usb 6-1: Product: syz [ 265.251631][ T6] usb 6-1: Manufacturer: syz [ 265.251647][ T6] usb 6-1: SerialNumber: syz [ 265.282371][ T5756] Error: Driver 'raw-gadget' is already registered, aborting... [ 265.282384][ T5756] UDC core: USB Raw Gadget: driver registration failed: -16 [ 265.282402][ T5756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.300581][ T6] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 265.300602][ T6] cdc_wdm 6-1:21.0: Unknown control protocol [ 265.496318][ T5731] cdc_wdm 6-1:21.0: Error submitting int urb - -90 [ 265.500747][ T6] usb 6-1: USB disconnect, device number 24 19:45:26 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a00000009058103"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:26 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0x40045010, &(0x7f0000000140)) 19:45:26 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 19:45:26 executing program 0: syz_io_uring_setup(0xa, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 19:45:26 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}]}}) 19:45:26 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:26 executing program 4: io_setup(0x8000, &(0x7f0000000040)=0x0) io_cancel(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 19:45:26 executing program 0: r0 = socket(0x2, 0xa, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0) [ 266.233845][ T5764] fuse: blksize only supported for fuseblk [ 266.276005][ T5766] Error: Driver 'raw-gadget' is already registered, aborting... [ 266.276018][ T5766] UDC core: USB Raw Gadget: driver registration failed: -16 19:45:26 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x7fff) [ 266.276036][ T5766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.286335][ T5769] Error: Driver 'raw-gadget' is already registered, aborting... 19:45:26 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40084149, &(0x7f0000000040)) 19:45:26 executing program 2: pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x8000000) 19:45:26 executing program 0: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001500)={0xffffff9d}, 0x8) [ 266.286350][ T5769] UDC core: USB Raw Gadget: driver registration failed: -16 [ 266.286432][ T5769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.350045][ T5774] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 266.541114][ T143] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 266.901202][ T143] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 266.901230][ T143] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 266.901264][ T143] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 19:45:27 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a00000009058103"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:27 executing program 4: io_setup(0x8000, &(0x7f0000000040)=0x0) io_cancel(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 19:45:27 executing program 2: pipe2$watch_queue(&(0x7f00000000c0), 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 19:45:27 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r0, 0x6, 0x3, 0x0, &(0x7f0000000040)) 19:45:27 executing program 1: socketpair(0xa, 0x3, 0xfa, &(0x7f00000000c0)) [ 267.051288][ T5791] Error: Driver 'raw-gadget' is already registered, aborting... [ 267.051302][ T5791] UDC core: USB Raw Gadget: driver registration failed: -16 [ 267.051320][ T5791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.081238][ T143] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 267.081269][ T143] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 267.081291][ T143] usb 4-1: Product: syz [ 267.081307][ T143] usb 4-1: Manufacturer: syz [ 267.081322][ T143] usb 4-1: SerialNumber: syz [ 267.130555][ T143] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 267.130576][ T143] cdc_wdm 4-1:21.0: Unknown control protocol [ 267.378151][ T145] usb 4-1: USB disconnect, device number 26 [ 267.383687][ T5763] cdc_wdm 4-1:21.0: Tx URB error: -19 19:45:28 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:28 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000240)) 19:45:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x20}}, 0x0) 19:45:28 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x1c, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:45:28 executing program 4: io_setup(0x8000, &(0x7f0000000040)=0x0) io_cancel(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 19:45:28 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a0000000905810300"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:28 executing program 0: r0 = socket(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001440)={'wg0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x2, &(0x7f0000000380)=@raw=[@map_fd], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:45:28 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x5, 0x40, 0x4, 0x7, 0x1, 0x1}, 0x48) 19:45:28 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0xc, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) [ 268.181787][ T5805] Error: Driver 'raw-gadget' is already registered, aborting... [ 268.181801][ T5805] UDC core: USB Raw Gadget: driver registration failed: -16 19:45:28 executing program 0: syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x60004, &(0x7f0000001200)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee00}}) 19:45:28 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x80184132, &(0x7f0000000040)) [ 268.181818][ T5805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:45:28 executing program 0: ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000001640)) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x2, 0xffff, 0xfff}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xa, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0xffff, 0x40) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000001c0)=""/108) socket$packet(0x11, 0x3, 0x300) [ 268.401282][ T6] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 268.781325][ T6] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 268.781353][ T6] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 268.781392][ T6] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 19:45:28 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:28 executing program 1: bpf$PROG_LOAD_XDP(0x22, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:45:28 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 19:45:28 executing program 4: io_setup(0x8000, &(0x7f0000000040)=0x0) io_cancel(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 268.781422][ T6] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 19:45:29 executing program 2: r0 = socket(0x1e, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x300}, 0x0) [ 268.959018][ T6] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 268.959050][ T6] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 268.959073][ T6] usb 6-1: Product: syz [ 268.959090][ T6] usb 6-1: Manufacturer: syz [ 268.959105][ T6] usb 6-1: SerialNumber: syz [ 268.960882][ T5827] Error: Driver 'raw-gadget' is already registered, aborting... [ 268.960893][ T5827] UDC core: USB Raw Gadget: driver registration failed: -16 [ 268.960909][ T5827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.022065][ T6] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 269.022087][ T6] cdc_wdm 6-1:21.0: Unknown control protocol [ 269.214526][ T5802] cdc_wdm 6-1:21.0: Error submitting int urb - -90 [ 269.219015][ T6] usb 6-1: USB disconnect, device number 25 19:45:30 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0x5452, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) 19:45:30 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x4008700c, &(0x7f00000000c0)) 19:45:30 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, 0x0) 19:45:30 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x200d}, 0x4) 19:45:30 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:30 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a0000000905810300"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:30 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x201, 0x80041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000001c0)={0x0, 0x1, "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"}) 19:45:30 executing program 2: r0 = socket(0x29, 0x5, 0x0) accept$alg(r0, 0x0, 0x0) 19:45:30 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, 0x0) 19:45:30 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x4112, 0x0) [ 269.999344][ T5842] Error: Driver 'raw-gadget' is already registered, aborting... [ 269.999358][ T5842] UDC core: USB Raw Gadget: driver registration failed: -16 19:45:30 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) [ 269.999377][ T5842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:45:30 executing program 1: pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, r1}) 19:45:30 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) 19:45:30 executing program 2: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x3, 0x0, 0xffffffffffffffff, 0xee00}}) 19:45:30 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d0f, &(0x7f00000005c0)) 19:45:30 executing program 2: bpf$MAP_CREATE(0x15, &(0x7f0000001380)=@bloom_filter, 0x48) [ 270.261246][ T145] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 270.621272][ T145] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 270.621295][ T145] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 270.621316][ T145] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.781192][ T145] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 270.781212][ T145] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 270.781225][ T145] usb 4-1: Product: syz [ 270.781234][ T145] usb 4-1: Manufacturer: syz [ 270.781243][ T145] usb 4-1: SerialNumber: syz [ 270.825413][ T145] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 270.825435][ T145] cdc_wdm 4-1:21.0: Unknown control protocol [ 271.078379][ T143] usb 4-1: USB disconnect, device number 27 19:45:31 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:31 executing program 1: r0 = socket(0xa, 0x6, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:31 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 19:45:31 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0x80045002, &(0x7f0000000140)) 19:45:31 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0x5015, 0x0) 19:45:31 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a0000000905810300"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:31 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 19:45:31 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private1}}}, 0x30) 19:45:31 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f0000000100)) 19:45:31 executing program 1: r0 = socket(0x2c, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x500, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) [ 271.844448][ T5876] Error: Driver 'raw-gadget' is already registered, aborting... [ 271.844462][ T5876] UDC core: USB Raw Gadget: driver registration failed: -16 19:45:31 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 19:45:32 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x5452, &(0x7f0000000040)) [ 271.844479][ T5876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.071168][ T143] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 272.451077][ T143] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 272.451094][ T143] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 272.451119][ T143] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.451136][ T143] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 19:45:32 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:32 executing program 1: syz_io_uring_setup(0x50f6, &(0x7f0000000000)={0x0, 0x0, 0x16, 0x3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:45:32 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 19:45:32 executing program 4: socketpair(0x1f, 0x0, 0x0, &(0x7f0000000300)) 19:45:32 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x4142, 0x0) [ 272.615516][ T5898] Error: Driver 'raw-gadget' is already registered, aborting... [ 272.615529][ T5898] UDC core: USB Raw Gadget: driver registration failed: -16 [ 272.615547][ T5898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.629395][ T143] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 272.629428][ T143] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 272.629451][ T143] usb 6-1: Product: syz [ 272.629467][ T143] usb 6-1: Manufacturer: syz [ 272.629483][ T143] usb 6-1: SerialNumber: syz [ 272.692624][ T143] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 272.692652][ T143] cdc_wdm 6-1:21.0: Unknown control protocol [ 272.895318][ T5870] cdc_wdm 6-1:21.0: Error submitting int urb - -90 [ 272.896738][ T3761] usb 6-1: USB disconnect, device number 26 19:45:33 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x4148, 0x0) 19:45:33 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0x4020940d, 0x0) 19:45:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r2, 0x311}, 0x14}}, 0x0) 19:45:33 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@hash}]}}) 19:45:33 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 19:45:33 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a0000000905810300"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:33 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x7e, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x3}, {0x6}, [@acm={0x4}, @call_mgmt={0x5}, @network_terminal={0x7, 0x24, 0xa, 0x43, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x28, 0x1, 0xf8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xfe, 0x1f, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1a, 0x2, 0x20}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x6, 0x5, 0xff, 0x10, 0x7}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x3, [{0x27, &(0x7f0000000180)=@string={0x27, 0x3, "306a398227d2c67f01033468c92cd6434d6b2bbb62d312200282cdf8ac0d9ed94298d422e1"}}, {0x3b, &(0x7f0000000280)=@string={0x3b, 0x3, "715e89a1ec0afc85831b8a216fa19ce551af9b7bc68f654b7f3abec200509b737f75c281c56850cb5cf9c2b93968c235aabdd614a7b4b4634e"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x422}}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x12c580, 0x0) 19:45:33 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000200)) [ 273.660778][ T5906] fuse: Unknown parameter 'hash' 19:45:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x4, 0x0], 0x2, 0x80000}) 19:45:33 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000000)={0x13}) 19:45:33 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000004000)={0x0, 0x0, 0x0}, 0x840) [ 273.745927][ T5914] Error: Driver 'raw-gadget' is already registered, aborting... [ 273.745939][ T5914] UDC core: USB Raw Gadget: driver registration failed: -16 19:45:33 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) syz_io_uring_setup(0xe5e, &(0x7f00000009c0)={0x0, 0xb9b4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 19:45:33 executing program 4: openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) [ 273.745957][ T5914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.747606][ T5912] Error: Driver 'raw-gadget' is already registered, aborting... 19:45:33 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x12}, 0x48) 19:45:33 executing program 0: pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$snapshot(r0, 0x0, 0x0) 19:45:34 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8906, 0x0) [ 273.747618][ T5912] UDC core: USB Raw Gadget: driver registration failed: -16 [ 273.747636][ T5912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.938640][ T3680] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 274.299101][ T3680] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 274.299130][ T3680] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 274.299166][ T3680] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.451285][ T3680] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 274.451317][ T3680] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 274.451338][ T3680] usb 4-1: Product: syz [ 274.451352][ T3680] usb 4-1: Manufacturer: syz [ 274.451368][ T3680] usb 4-1: SerialNumber: syz [ 274.501315][ T3680] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 274.501335][ T3680] cdc_wdm 4-1:21.0: Unknown control protocol 19:45:36 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 19:45:36 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x20}]}) 19:45:36 executing program 1: clock_gettime(0xc442cb2eef842775, 0x0) 19:45:36 executing program 4: request_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='{{]\\\x00', 0xfffffffffffffffc) 19:45:36 executing program 2: syz_io_uring_setup(0xe5e, &(0x7f0000000040)={0x0, 0xb9b4, 0x8}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000a40), 0x0) syz_io_uring_setup(0x7394, &(0x7f0000000680), &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) 19:45:36 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a0000000905810300"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) [ 276.679016][ T143] usb 4-1: USB disconnect, device number 28 19:45:36 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8910, &(0x7f0000000000)={'vxcan1\x00'}) 19:45:36 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 19:45:36 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000080)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) [ 276.757750][ T5944] Error: Driver 'raw-gadget' is already registered, aborting... [ 276.757764][ T5944] UDC core: USB Raw Gadget: driver registration failed: -16 19:45:36 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0x800c5011, 0x0) 19:45:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 276.757782][ T5944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:45:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x0, 0x20, 0x1}, 0x48) [ 276.991322][ T3761] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 277.351255][ T3761] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 277.351273][ T3761] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 277.351308][ T3761] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.351325][ T3761] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 19:45:37 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a000000090581030002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 19:45:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'erspan0\x00', 0x0}) 19:45:37 executing program 1: r0 = socket(0xa, 0x5, 0x0) accept$alg(r0, 0x0, 0x0) 19:45:37 executing program 4: syz_io_uring_setup(0x1339, &(0x7f0000000000), &(0x7f0000003000/0x2000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:45:37 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xf4240, &(0x7f0000000400)=@framed={{}, [@func, @func, @cb_func]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0xb4, &(0x7f00000004c0)=""/180, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 277.511207][ T3761] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 277.511237][ T3761] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 277.511260][ T3761] usb 6-1: Product: syz [ 277.511275][ T3761] usb 6-1: Manufacturer: syz [ 277.511290][ T3761] usb 6-1: SerialNumber: syz [ 277.561229][ T3761] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 277.561249][ T3761] cdc_wdm 6-1:21.0: Unknown control protocol [ 277.582517][ T5966] Error: Driver 'raw-gadget' is already registered, aborting... [ 277.582531][ T5966] UDC core: USB Raw Gadget: driver registration failed: -16 [ 277.582550][ T5966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.757146][ T5939] cdc_wdm 6-1:21.0: Error submitting int urb - -90 [ 277.761635][ T3761] usb 6-1: USB disconnect, device number 27 19:45:38 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x7ffffffff000) 19:45:38 executing program 1: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 19:45:38 executing program 2: bpf$PROG_LOAD_XDP(0xf, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:45:38 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000240)={0x1, 0x0, {0x0, 0x0, 0x0, 0x16, 0x0, 0xbb}}) 19:45:38 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a0000000905810300"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:38 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 19:45:38 executing program 4: r0 = socket(0x2c, 0x3, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) 19:45:38 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}, {}, {}, {}]}}) [ 278.499259][ T5974] rtc_cmos 00:00: Alarms can be up to one day in the future 19:45:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYBLOB="9141c541bd6495b810fe48baccfd28020000000000f3a8384c0095ba76161e9c3b72e1142901"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0_to_bridge\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}}) 19:45:38 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x2}}, 0x18) 19:45:38 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x6, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x48}, [@func, @cb_func]}, &(0x7f0000000480)='syzkaller\x00', 0x3, 0xb4, &(0x7f00000004c0)=""/180, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:45:38 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x1) 19:45:38 executing program 3: syz_mount_image$zonefs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000001580), 0x3, &(0x7f0000001640)) 19:45:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa52526141", 0x24, 0x1e0}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000011300)) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 19:45:38 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x24) 19:45:38 executing program 4: socketpair(0x18, 0x0, 0x1, &(0x7f0000001bc0)) [ 278.761752][ T5996] loop1: detected capacity change from 0 to 3 [ 278.776878][ T5997] zonefs (loop3) ERROR: Not a zoned block device [ 278.787885][ T5996] loop1: [ 278.787909][ T5996] loop1: partition table partially beyond EOD, truncated [ 278.797598][ T5996] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 278.871158][ T6] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 279.251186][ T6] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 279.251214][ T6] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 279.251250][ T6] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.251278][ T6] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.411176][ T6] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 279.411239][ T6] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 279.411262][ T6] usb 6-1: Product: syz [ 279.411277][ T6] usb 6-1: Manufacturer: syz [ 279.411293][ T6] usb 6-1: SerialNumber: syz [ 279.456088][ T6] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 279.456101][ T6] cdc_wdm 6-1:21.0: Unknown control protocol [ 279.655242][ T5978] cdc_wdm 6-1:21.0: Error submitting int urb - -90 [ 279.656267][ T3761] usb 6-1: USB disconnect, device number 28 19:45:40 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a0000000905810300"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:40 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "48b0a09ddfa7c07499b6d590283055c676fa00694ef60b72eece6c1d308068bc20c6de911d7afe56a4ea9cb9d9065277a977232ca2f76a31c88f8ced8fc766"}, 0x60) 19:45:40 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 19:45:40 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0) 19:45:40 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480), 0x8301, 0x0) 19:45:40 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x2, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) 19:45:40 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 19:45:40 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) 19:45:40 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCINITREPORT(r0, 0x4810, 0x0) [ 280.406113][ T6010] random: crng reseeded on system resumption 19:45:40 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) 19:45:40 executing program 2: syz_io_uring_setup(0xe5e, &(0x7f00000009c0)={0x0, 0x0, 0x5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000a40), &(0x7f0000000a80)) 19:45:40 executing program 1: r0 = socket(0x2c, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x3}]}}}}}) [ 280.536983][ T6017] Error: Driver 'raw-gadget' is already registered, aborting... [ 280.536997][ T6017] UDC core: USB Raw Gadget: driver registration failed: -16 [ 280.537013][ T6017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.791109][ T3761] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 281.151615][ T3761] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 281.151642][ T3761] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 281.151681][ T3761] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.151710][ T3761] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.311290][ T3761] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 281.311321][ T3761] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 281.311342][ T3761] usb 6-1: Product: syz [ 281.311357][ T3761] usb 6-1: Manufacturer: syz [ 281.311397][ T3761] usb 6-1: SerialNumber: syz [ 281.355368][ T3761] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 281.355387][ T3761] cdc_wdm 6-1:21.0: Unknown control protocol [ 281.557818][ T6011] cdc_wdm 6-1:21.0: Error submitting int urb - -90 [ 281.559679][ T3761] usb 6-1: USB disconnect, device number 29 19:45:42 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a0000000905810300"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:42 executing program 0: r0 = syz_io_uring_setup(0x3edd, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x18}, 0x0) syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000103000/0x1000)=nil, &(0x7f000035d000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000180)) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 19:45:42 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480), 0x8301, 0x0) 19:45:42 executing program 2: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x0) 19:45:42 executing program 1: bpf$MAP_CREATE(0x5, &(0x7f0000001380)=@bloom_filter, 0x48) 19:45:42 executing program 4: r0 = fsopen(&(0x7f0000000000)='cramfs\x00', 0x0) pipe2$watch_queue(&(0x7f0000002800)={0xffffffffffffffff}, 0x80) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)='+]^\x00', 0x0, r1) 19:45:42 executing program 1: fsopen(&(0x7f0000000040)='cifs\x00', 0x0) 19:45:42 executing program 4: syz_clone(0x40000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) 19:45:42 executing program 0: r0 = syz_io_uring_setup(0x3edd, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x18}, 0x0) syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000103000/0x1000)=nil, &(0x7f000035d000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000180)) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 282.305430][ T6033] random: crng reseeded on system resumption 19:45:42 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x806c4120, &(0x7f0000000040)) 19:45:42 executing program 1: sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0xa90b44a0ae04f5be) 19:45:42 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) [ 282.671297][ T3761] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 283.051332][ T3761] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 283.051359][ T3761] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 283.051396][ T3761] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.051425][ T3761] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.241511][ T3761] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 283.241544][ T3761] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 283.241566][ T3761] usb 6-1: Product: syz [ 283.241575][ T3761] usb 6-1: Manufacturer: syz [ 283.241583][ T3761] usb 6-1: SerialNumber: syz [ 283.283363][ T3761] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 283.283383][ T3761] cdc_wdm 6-1:21.0: Unknown control protocol [ 283.495478][ T6035] cdc_wdm 6-1:21.0: Error submitting int urb - -90 [ 283.499409][ T3761] usb 6-1: USB disconnect, device number 30 19:45:44 executing program 0: r0 = syz_io_uring_setup(0x3edd, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x18}, 0x0) syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000103000/0x1000)=nil, &(0x7f000035d000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000180)) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 19:45:44 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480), 0x8301, 0x0) 19:45:44 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, 0x0) 19:45:44 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x2, 0x18}, './file0\x00'}) 19:45:44 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a0000000905810300"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) 19:45:44 executing program 4: modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) 19:45:44 executing program 1: setregid(0x0, 0xee01) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) setregid(r0, 0xee01) 19:45:44 executing program 4: syz_io_uring_setup(0xe5e, &(0x7f00000009c0)={0x0, 0xb9b4, 0x8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000a40), 0x0) syz_io_uring_setup(0x7394, &(0x7f0000000680), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000700), &(0x7f0000000740)) [ 284.250940][ T6053] random: crng reseeded on system resumption 19:45:44 executing program 2: bpf$PROG_LOAD_XDP(0x11, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:45:44 executing program 0: r0 = syz_io_uring_setup(0x3edd, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x18}, 0x0) syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000103000/0x1000)=nil, &(0x7f000035d000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000180)) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 19:45:44 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0xc06c4124, &(0x7f0000000040)) 19:45:44 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0xc, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) 19:45:44 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) write$cgroup_pressure(r0, 0x0, 0x0) 19:45:44 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480), 0x8301, 0x0) 19:45:44 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={0x0, 0x0, 0x93522b251c74cbca}, 0x10) 19:45:44 executing program 4: syz_clone(0x1a140000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 284.516896][ T6074] overlayfs: failed to resolve './file1': -2 [ 284.596764][ T6079] random: crng reseeded on system resumption [ 284.641305][ T3761] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 285.031200][ T3761] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 285.031226][ T3761] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 285.031260][ T3761] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.031287][ T3761] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.201176][ T3761] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 285.201195][ T3761] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 285.201208][ T3761] usb 6-1: Product: syz [ 285.201217][ T3761] usb 6-1: Manufacturer: syz [ 285.201226][ T3761] usb 6-1: SerialNumber: syz [ 285.245790][ T3761] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 285.245811][ T3761] cdc_wdm 6-1:21.0: Unknown control protocol [ 285.443902][ T6064] cdc_wdm 6-1:21.0: Error submitting int urb - -90 [ 285.444851][ T145] usb 6-1: USB disconnect, device number 31 19:45:46 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a0000000905810300"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 19:45:46 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x1a, 0x0, 0x6, 0xff, 0x3, 0xe0, @broadcast}, 0x10) 19:45:46 executing program 1: syz_clone(0xaf085700, 0x0, 0x0, 0x0, 0x0, 0x0) 19:45:46 executing program 2: socketpair(0x2, 0x801, 0x106, &(0x7f00000000c0)) 19:45:46 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x4147, 0x0) 19:45:46 executing program 3: r0 = socket(0x25, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @multicast1, {[@cipso={0x86, 0x6}]}}}}}) 19:45:46 executing program 3: syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x0, 0x24, 0x1f, {0x1f, 0xc, "b26e8694a699d4fc290b5b233cfe128af73738cc16f20a50d356341239"}}, 0x0}, 0x0) syz_usb_connect$uac1(0x2, 0x71, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x10, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 19:45:46 executing program 2: socketpair(0x2, 0x801, 0x106, &(0x7f00000000c0)) 19:45:46 executing program 0: r0 = socket(0x1e, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={0x0, 0xf0ffffff7f0000}}, 0x0) 19:45:46 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="5eb69cfa7fe941386c56225e76ba", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r1}, 0x14) 19:45:46 executing program 0: pipe2$watch_queue(0x0, 0x80) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x4006, 0x0) 19:45:46 executing program 1: socketpair(0xa, 0x3, 0x105, &(0x7f00000000c0)) [ 286.328518][ T6101] Error: Driver 'raw-gadget' is already registered, aborting... [ 286.328532][ T6101] UDC core: USB Raw Gadget: driver registration failed: -16 [ 286.328549][ T6101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.340830][ T6101] Error: Driver 'raw-gadget' is already registered, aborting... [ 286.340845][ T6101] UDC core: USB Raw Gadget: driver registration failed: -16 [ 286.340863][ T6101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.501412][ T3683] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 286.871237][ T3683] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 286.871263][ T3683] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 286.871299][ T3683] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.871328][ T3683] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.031127][ T3683] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 287.031151][ T3683] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 287.031164][ T3683] usb 6-1: Product: syz [ 287.031173][ T3683] usb 6-1: Manufacturer: syz [ 287.031183][ T3683] usb 6-1: SerialNumber: syz [ 287.075297][ T3683] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 287.075316][ T3683] cdc_wdm 6-1:21.0: Unknown control protocol [ 287.278701][ T6094] cdc_wdm 6-1:21.0: Error submitting int urb - -90 [ 287.484218][ T3683] usb 6-1: USB disconnect, device number 32 19:45:48 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a0000000905810300"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 19:45:48 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:45:48 executing program 2: socketpair(0x2, 0x801, 0x106, &(0x7f00000000c0)) 19:45:48 executing program 1: bpf$MAP_CREATE(0xb, &(0x7f0000001380)=@bloom_filter, 0x48) 19:45:48 executing program 0: pipe2$watch_queue(0x0, 0x80) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x4006, 0x0) 19:45:48 executing program 3: syz_clone(0x40100200, 0x0, 0x0, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) 19:45:48 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x891c, 0x0) 19:45:48 executing program 4: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) syz_io_uring_setup(0x19ee, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000001380)) syz_io_uring_setup(0x54d4, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) 19:45:48 executing program 2: socketpair(0x2, 0x801, 0x106, &(0x7f00000000c0)) 19:45:48 executing program 0: pipe2$watch_queue(0x0, 0x80) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x4006, 0x0) 19:45:48 executing program 1: select(0x40, &(0x7f0000000000)={0x7}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2710}) 19:45:48 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) [ 288.351237][ T145] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 288.761311][ T145] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 288.761341][ T145] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 288.761379][ T145] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.761408][ T145] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.941277][ T145] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 288.941308][ T145] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 288.941328][ T145] usb 6-1: Product: syz [ 288.941343][ T145] usb 6-1: Manufacturer: syz [ 288.941357][ T145] usb 6-1: SerialNumber: syz [ 288.992283][ T145] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 288.992304][ T145] cdc_wdm 6-1:21.0: Unknown control protocol [ 289.188945][ T6118] cdc_wdm 6-1:21.0: Error submitting int urb - -90 [ 289.397749][ T145] usb 6-1: USB disconnect, device number 33 19:45:50 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080000000000006241a0000000905810300"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 19:45:50 executing program 0: pipe2$watch_queue(0x0, 0x80) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x4006, 0x0) 19:45:50 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0x8004500b, &(0x7f0000000140)) 19:45:50 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x24) 19:45:50 executing program 2: syz_mount_image$sysv(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0xf95be5f03bb699b6, &(0x7f00000002c0)) 19:45:50 executing program 3: bpf$PROG_LOAD_XDP(0x14, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:45:50 executing program 3: bpf$MAP_CREATE(0x13, &(0x7f0000001380)=@bloom_filter, 0x48) 19:45:50 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x0, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) 19:45:50 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x7005, 0x0) 19:45:50 executing program 4: shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ff8000/0x3000)=nil) 19:45:50 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0xc, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) 19:45:50 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044145, 0x0) [ 290.291124][ T6] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 290.665738][ T6] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 290.665755][ T6] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 290.665778][ T6] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.665795][ T6] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.821383][ T6] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 290.821403][ T6] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 290.821415][ T6] usb 6-1: Product: syz [ 290.821424][ T6] usb 6-1: Manufacturer: syz [ 290.821433][ T6] usb 6-1: SerialNumber: syz [ 290.864854][ T6] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 290.864876][ T6] cdc_wdm 6-1:21.0: Unknown control protocol [ 291.065579][ T6143] cdc_wdm 6-1:21.0: Error submitting int urb - -90 [ 291.281224][ T921] usb 6-1: USB disconnect, device number 34 19:45:51 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20002008}) 19:45:51 executing program 4: socket(0xa, 0x0, 0xc3a4) 19:45:51 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x7005, 0x0) 19:45:51 executing program 3: bpf$PROG_LOAD_XDP(0x16, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:45:51 executing program 1: r0 = socket(0x2b, 0x1, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) 19:45:51 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x0, 0x0, @mcast2}], 0x2c) 19:45:51 executing program 3: r0 = socket(0x2c, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02797a746e6c310000000000000f0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f"]}) 19:45:51 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x40, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@default_permissions}, {@allow_other}, {@default_permissions}, {}, {}]}}) 19:45:51 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x7005, 0x0) 19:45:51 executing program 5: r0 = epoll_create(0x6) epoll_pwait2(r0, &(0x7f0000000140)=[{}], 0x1, &(0x7f0000000200), 0x0, 0x0) 19:45:51 executing program 1: r0 = socket(0x2b, 0x1, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) 19:45:52 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x0, 0x0, 0x0, 0x1}, 0x48) 19:45:52 executing program 0: r0 = syz_io_uring_setup(0x48d9, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x300, r0, &(0x7f0000000100)) 19:45:52 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x7005, 0x0) 19:45:52 executing program 4: r0 = syz_io_uring_setup(0x48d9, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) [ 291.939816][ T6173] ======================================================= [ 291.939816][ T6173] WARNING: The mand mount option has been deprecated and [ 291.939816][ T6173] and is ignored by this kernel. Remove the mand [ 291.939816][ T6173] option from the mount to silence this warning. [ 291.939816][ T6173] ======================================================= 19:45:52 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000940)) 19:45:52 executing program 2: syz_io_uring_setup(0x54d2, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x19ee, &(0x7f0000001300), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000001380)) 19:45:52 executing program 5: r0 = syz_io_uring_setup(0x48d9, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) 19:45:52 executing program 1: r0 = socket(0x2b, 0x1, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) 19:45:52 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="8e668794f77caf4545b2506714abb9d8b4b03270272096a88379d5224d02184112f47a0d09ae4b8213e5adea7960113f2e32cd1a26c484d0f878c98c2c85b90258e525e0bf32abb523cec6a53d0e39474262746a046947d62aa98add9196576612e30208ecaa4ae4ba3a8c0f70718b3b3af059d4b82ee674affc11", 0x7b}, {&(0x7f00000000c0)="8e6a06638b786d0da432b092d51e7e60d897125579c7a50e33283c012d597e24dd811ba5db73c9c8f8b121c95a900a36399259240dbd645ee2be7fa95e2b62b5c5ed15b0638f73ae32365b07c3f89c5c990000b0248e348e918664f9b16a42937b851967a0e25cf24d5c43331f7f5245582a929cb291cddd41741eda5e277fd85340638b7e72a0b894bf640a90028ec2314bc0b51a308f147e70a9c6a138d1b9b255059671f2d3f882345cb60febe4424d574be959f25f3877329d583516442ed2112a1824012e0688cae12bf09d1c5a88c8b6e9b1674705eb2d64822aa316598ba25fbb1ffe59cccf0a50ef8ec1855c47", 0xf1}, {&(0x7f00000001c0)="8f868967d1cde0b24c3fa39dc9c397cc44a4811ca06d6fe9041a615006638c2ef780146abd70a396694e", 0x2a}, {&(0x7f0000000200)="1dfdfb65d76c8e2888b30b7aabeccba776b28d7379eb5ee1701623d4a43af5a1f3ff92ddf9157f8648b0a343c649b02e0ca755a90b0f31dbd95d73b949ce78ee7ffa69df896599f7ff3117ff767087f1d6340b0ef74519e7a3dd38029d18834b7d1104f8f476130bb3d67b2fce75bb392cd13d5e2b2a56c1f9a1b63454b0908f6c07dabfde1ed144ae7ca40ccaad05d36f92a7da2062fc3de6a8719ec90fada459ff71b95703a3ab8eda186d52359389a0b906102d449db407d8a7da0f6d38d5162e3e7da8e4f74b30e0b4e93f4ecf314052922c471fef7553832612dbc49d9d5a0cdc389835d5e9e5b28e9cc6a0b5ddf8", 0xf1}, {&(0x7f00000007c0)="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", 0xd7a}], 0x5}, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000500)=""/68, 0x44}], 0x1}, 0x0) 19:45:52 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000080)={0x1a, 0x30a, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) 19:45:52 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0x0, 0x0, &(0x7f0000001280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 19:45:52 executing program 1: r0 = socket(0x2b, 0x1, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) 19:45:52 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 19:45:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="a7"], 0x14}}, 0x0) 19:45:52 executing program 4: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000300)="f2", 0x1}], 0x1) 19:45:52 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0xb69, 0x4, {0x2, @win={{}, 0x0, 0x3f, 0x0, 0x0, 0x0}}}) 19:45:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x304, 0x37}, "0100", "000000008b5e00", '\x00', "9d330300110550d7"}, 0x28) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="f5", 0xfffffdef}], 0x1b) 19:45:52 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x2000000000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 19:45:52 executing program 5: rseq(&(0x7f0000000180), 0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mbind(&(0x7f00000a2000/0x2000)=nil, 0x2000, 0x4002, &(0x7f0000000140)=0x9, 0x5, 0x0) 19:45:52 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x400000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xa4}}, 0x0) [ 292.279381][ T6207] nvme_fabrics: unknown parameter or missing value 'ò' in ctrl creation request 19:45:52 executing program 4: setresuid(0x0, 0x0, 0xee00) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) setresuid(0x0, r0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) 19:45:52 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000500)={0x190, 0x30, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}) 19:45:52 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000500)={0x190, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}) 19:45:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f00000001c0)={0x1c, r1, 0x601, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 19:45:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f00000001c0)={0x24, r1, 0x601, 0x0, 0x0, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x24}}, 0x0) 19:45:52 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x2000000000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 19:45:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000300), 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x304, 0x37}, "0100", "000000008b5e00", '\x00', "9d330300110550d7"}, 0x28) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="f5", 0x6000}], 0x300) 19:45:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="a7"], 0x14}}, 0x0) 19:45:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x304, 0x37}, "0100", "000000008b5e00", '\x00', "9d330300110550d7"}, 0x28) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="f5", 0xfffffdef}], 0x1b) 19:45:52 executing program 5: rseq(&(0x7f0000000180), 0x20, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) rseq(0x0, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mbind(&(0x7f00000a2000/0x2000)=nil, 0x2000, 0x4002, &(0x7f0000000140)=0x9, 0x5, 0x0) 19:45:52 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000500)={0x190, 0x30, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}) 19:45:52 executing program 4: r0 = syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c0024", 0xf, 0x400}, {&(0x7f0000000080)="060045319544423f62", 0x9, 0x480}], 0x0, &(0x7f00000002c0)=ANY=[]) openat$incfs(r0, &(0x7f0000000180)='.pending_reads\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) 19:45:52 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000500)={0x190, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 19:45:52 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x2000000000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 19:45:52 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x1, 0x0, {}, 0x101}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r1, 0x2905, 0x0, 0x0, 0x0, 0x200000007000000) 19:45:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000dc0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x3, r3}]}]}, 0x20}}, 0x0) 19:45:53 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000300)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) dup(0xffffffffffffffff) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 19:45:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00') [ 292.889175][ T6257] loop4: detected capacity change from 0 to 4 [ 292.906851][ T6257] Dev loop4: unable to read RDB block 4 [ 292.906889][ T6257] loop4: unable to read partition table [ 292.907059][ T6257] loop4: partition table beyond EOD, truncated [ 292.924840][ T6257] erofs: (device loop4): mounted with root inode @ nid 36. [ 292.951725][ T6257] syz-executor.4: attempt to access beyond end of device [ 292.951725][ T6257] loop4: rw=0, sector=8, nr_sectors = 8 limit=4 [ 292.979653][ T6257] syz-executor.4: attempt to access beyond end of device [ 292.979653][ T6257] loop4: rw=0, sector=8, nr_sectors = 8 limit=4 19:45:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00') 19:45:54 executing program 4: r0 = syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c0024", 0xf, 0x400}, {&(0x7f0000000080)="060045319544423f62", 0x9, 0x480}], 0x0, &(0x7f00000002c0)=ANY=[]) openat$incfs(r0, &(0x7f0000000180)='.pending_reads\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) 19:45:54 executing program 5: r0 = syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c0024", 0xf, 0x400}, {&(0x7f0000000080)="060045319544423f62", 0x9, 0x480}], 0x0, &(0x7f00000002c0)=ANY=[]) openat$incfs(r0, &(0x7f0000000180)='.pending_reads\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) 19:45:54 executing program 3: r0 = syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c0024", 0xf, 0x400}, {&(0x7f0000000080)="060045319544423f62", 0x9, 0x480}], 0x0, &(0x7f00000002c0)=ANY=[]) openat$incfs(r0, &(0x7f0000000180)='.pending_reads\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) [ 293.311513][ T921] Bluetooth: hci0: command 0x0406 tx timeout [ 293.313025][ T921] Bluetooth: hci3: command 0x0406 tx timeout [ 293.313136][ T921] Bluetooth: hci5: command 0x0406 tx timeout [ 293.313287][ T921] Bluetooth: hci4: command 0x0406 tx timeout [ 294.159472][ T6279] loop4: detected capacity change from 0 to 4 [ 294.172799][ T6283] loop5: detected capacity change from 0 to 4 [ 294.176377][ T6283] Dev loop5: unable to read RDB block 4 [ 294.176411][ T6283] loop5: unable to read partition table 19:45:55 executing program 2: syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b01100000ff7f", 0xa}, {&(0x7f0000010100)="0200000007000000080000001f1e000002", 0x11, 0x200}], 0x0, &(0x7f0000000140)=ANY=[]) 19:45:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000080)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xe6c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xcd, 0x5, "665a6c9ef85061548248d9ad0283748f75903223db15fff1e2a673d1b2359ebedfeaade8bbe9c1e5fbf6e7d59a705d5bae14ad154b9aca1dd6d0ca9acbf5a8f41cee391f25d663e1fb45a87b7b147557de0d5515f5030988d9ab57564e72b28348c10da33273cf3c1d9e1e8fad41096a492f66a23cd74afe81a974b256513e854c4aef07fb8605b6621d20311ba7a6e754761a64d9a823abf2e0b785e9e7b1aaa3e0975ccbff9e924af2bfb79e1ac37e84fb8b695aa3a5e7f4c4a9dee67e934bfe153102c9a2a9a17f"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0xd85, 0x5, "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"}]}]}, 0xec4}}, 0x0) 19:45:55 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="8199ee7e19ff010000003f2000002300000000a440f03562e3493c00065536b560000001040000000000604d6c0000010000005c4d8810a49792055f000855aa", 0x40, 0x1c0}]) 19:45:55 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/ip_tables_names\x00') fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 19:45:55 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000500)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80410007}) 19:45:55 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x601, 0x0) [ 294.176587][ T6283] loop5: partition table beyond EOD, truncated [ 294.177419][ T6283] erofs: (device loop5): mounted with root inode @ nid 36. 19:45:55 executing program 1: setresuid(0x0, 0x0, 0xee00) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) setreuid(0x0, r0) shmget(0x3, 0x2000, 0x8, &(0x7f0000ffe000/0x2000)=nil) 19:45:55 executing program 2: r0 = getpid() r1 = syz_clone3(&(0x7f0000000280)={0x22800200, 0x0, &(0x7f0000000080)=0x0, 0x0, {0x3c}, &(0x7f0000000100)=""/44, 0x2c, 0x0, &(0x7f0000000240)}, 0x58) r3 = syz_clone3(&(0x7f0000000500)={0x40000000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x22}, &(0x7f00000003c0)=""/155, 0x9b, &(0x7f0000000480)=""/23, &(0x7f00000004c0)=[0x0, r2, 0x0, 0x0, r0, r1], 0x6}, 0x58) r4 = getpid() r5 = getpgid(r4) r6 = getpid() getpgid(r6) syz_clone3(&(0x7f0000001700)={0x5000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r0, r1, r3, r4, r6, r5], 0x6}, 0x58) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) [ 294.395713][ T6282] loop3: detected capacity change from 0 to 4 [ 294.633036][ T6283] syz-executor.5: attempt to access beyond end of device [ 294.633036][ T6283] loop5: rw=0, sector=8, nr_sectors = 8 limit=4 19:45:55 executing program 4: r0 = getpid() process_vm_writev(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/209, 0xd1}, {&(0x7f0000000100)=""/123, 0x7b}, {&(0x7f00000002c0)=""/52, 0x34}], 0x3, &(0x7f0000000880)=[{&(0x7f00000004c0)=""/187, 0xbb}, {0x0}], 0x2, 0x0) 19:45:55 executing program 0: r0 = getpid() process_vm_writev(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/209, 0xd1}], 0x1, &(0x7f0000000880)=[{&(0x7f0000000400)=""/192, 0xc0}, {0x0}], 0x2, 0x0) 19:45:55 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/ip_tables_names\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) [ 294.655900][ T6282] Dev loop3: unable to read RDB block 4 [ 294.659040][ T6282] loop3: unable to read partition table 19:45:55 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cpuset\x00') write$P9_RXATTRCREATE(r0, 0x0, 0x0) 19:45:55 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) prctl$PR_GET_DUMPABLE(0x3) 19:45:55 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x7, &(0x7f00000008c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @exit, @btf_id]}, &(0x7f0000000940)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x2, 0x5}, 0x8, 0x10, 0x0}, 0x80) [ 294.666579][ T6282] loop3: partition table beyond EOD, truncated 19:45:55 executing program 0: socketpair(0x1, 0x0, 0x0, &(0x7f00000000c0)) [ 294.686168][ T6283] syz-executor.5: attempt to access beyond end of device [ 294.686168][ T6283] loop5: rw=0, sector=8, nr_sectors = 8 limit=4 19:45:55 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/ip_tables_names\x00') fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000200)='net/ip_tables_names\x00', 0x0, 0xffffffffffffffff) 19:45:55 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/ip_tables_names\x00') fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) 19:45:55 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f00000001c0)=""/225, 0x26, 0xe1, 0x1}, 0x20) [ 294.698035][ T6282] erofs: (device loop3): mounted with root inode @ nid 36. 19:45:55 executing program 0: futex(0x0, 0xe, 0x0, &(0x7f0000000140), 0x0, 0x0) [ 295.114266][ T6279] Dev loop4: unable to read RDB block 4 [ 295.114295][ T6279] loop4: unable to read partition table [ 295.114396][ T6279] loop4: partition table beyond EOD, truncated [ 295.114779][ T6279] erofs: (device loop4): mounted with root inode @ nid 36. [ 295.175870][ T3936] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 295.235009][ T6292] loop2: detected capacity change from 0 to 64 [ 295.253199][ T6297] loop5: detected capacity change from 0 to 1 [ 295.273896][ T6292] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 295.304360][ T3870] Dev loop5: unable to read RDB block 1 [ 295.304398][ T3870] loop5: unable to read partition table [ 295.304545][ T3870] loop5: partition table beyond EOD, truncated [ 295.371203][ T6297] Dev loop5: unable to read RDB block 1 [ 295.371246][ T6297] loop5: unable to read partition table [ 295.371406][ T6297] loop5: partition table beyond EOD, truncated [ 295.375983][ T6297] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 19:45:55 executing program 2: setrlimit(0x4, &(0x7f0000000000)={0x0, 0xff}) 19:45:55 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/19) 19:45:55 executing program 5: syz_clone3(&(0x7f0000000280)={0x22800200, &(0x7f0000000040), &(0x7f0000000080), 0x0, {}, &(0x7f0000000100)=""/44, 0x2c, &(0x7f0000000140)=""/205, &(0x7f0000000240)}, 0x58) syz_clone3(&(0x7f0000000500)={0x40000000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x22}, &(0x7f00000003c0)=""/155, 0x9b, &(0x7f0000000480)=""/23, 0x0}, 0x58) getpid() syz_clone3(0x0, 0x0) 19:45:55 executing program 4: get_robust_list(0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) 19:45:55 executing program 0: syz_clone3(&(0x7f0000001700)={0x34160a00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 295.530706][ T28] audit: type=1326 audit(1654199155.592:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6313 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f41a89109 code=0x0 [ 295.840176][ C1] vkms_vblank_simulate: vblank timer overrun 19:45:56 executing program 3: sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x3}, 0x0) 19:45:56 executing program 4: r0 = getpid() process_vm_writev(r0, &(0x7f0000000380)=[{0x0}, {&(0x7f00000001c0)=""/209, 0xd1}], 0x2, &(0x7f0000000880)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/187, 0xbb}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 19:45:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000005200)={0x0, 0x0, &(0x7f00000051c0)={0x0, 0x38}}, 0x0) 19:45:56 executing program 0: process_vm_writev(0x0, &(0x7f00000007c0)=[{&(0x7f0000000200)=""/114, 0x72}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000940)=[{0x0}], 0x1, 0x0) 19:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000005200)={0x0, 0x0, 0x0}, 0x0) 19:45:56 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') 19:45:56 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000240)) 19:45:56 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000005200)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="19050000000000000000370000000800", @ANYRES32], 0x38}}, 0x0) 19:45:56 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) 19:45:56 executing program 2: mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) 19:45:56 executing program 1: syz_clone3(&(0x7f0000000500)={0x40000000, 0x0, &(0x7f0000000340), &(0x7f0000000380), {0x22}, &(0x7f00000003c0)=""/155, 0x9b, &(0x7f0000000480)=""/23, 0x0}, 0x58) getpid() 19:45:56 executing program 3: syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000000)=[{&(0x7f0000000300)="6873717307090000001d675f001000000000000001000c00d0000200040000004001000000000000000000ee", 0x2c}], 0x0, &(0x7f00000000c0)=ANY=[]) 19:45:56 executing program 0: sched_setattr(0x0, &(0x7f0000000180)={0x38}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f00000000c0)=0xff4) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0xffffffffffffffff) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00') 19:45:56 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000005200)={&(0x7f00000050c0), 0xc, &(0x7f00000051c0)={&(0x7f0000005100)={0x30, r0, 0x519, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]]}, 0x30}}, 0x0) 19:45:56 executing program 4: prctl$PR_GET_DUMPABLE(0x3e) [ 296.530568][ T6358] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 19:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, 0x0, 0x0) [ 296.599814][ T6367] loop3: detected capacity change from 0 to 264192 19:45:56 executing program 4: prctl$PR_GET_DUMPABLE(0x8) 19:45:56 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/netstat\x00') 19:45:56 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x8936, 0x0) 19:45:56 executing program 5: prctl$PR_GET_DUMPABLE(0x1e) 19:45:56 executing program 3: r0 = fsopen(&(0x7f0000000140)='securityfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000180)='\xb6$%\x10$--,,&\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c) 19:45:56 executing program 4: syz_clone3(&(0x7f0000000500)={0x40000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19:45:56 executing program 1: prctl$PR_GET_DUMPABLE(0x7) 19:45:56 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x8, 0x8202) 19:45:56 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x0, 0x0, 0x0, 0x0, 0x1004, 0xffffffffffffffff, 0x80000001}, 0x48) 19:45:56 executing program 2: prctl$PR_GET_DUMPABLE(0x22) 19:45:56 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000500)={@mcast2, @mcast1, @dev}) 19:45:57 executing program 5: prctl$PR_GET_DUMPABLE(0x18) 19:45:57 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001780), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40044583, 0x0) 19:45:57 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/156, 0x26, 0x9c, 0x1}, 0xf9) 19:45:57 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/ip_tables_names\x00') fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='nl80211\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) 19:45:57 executing program 0: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202c00, 0x0) 19:45:57 executing program 1: fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) 19:45:57 executing program 4: futex(&(0x7f0000000000), 0x0, 0x1, 0x0, 0x0, 0x0) 19:45:57 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)}, 0x80) 19:45:57 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0xc0045878) 19:45:57 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x181802) ioctl$BLKALIGNOFF(r0, 0x127a, 0x0) 19:45:57 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000080)=""/245) 19:45:57 executing program 0: syz_clone3(&(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0x0], 0x1}, 0x57) 19:45:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x18, 0xa01, 0x0, 0x82ca0200, {0x4}}, 0x14}}, 0x0) 19:45:57 executing program 5: r0 = getpid() r1 = syz_clone3(&(0x7f0000000280)={0x22800200, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x3c}, 0x0, 0x0, &(0x7f0000000140)=""/205, &(0x7f0000000240)}, 0x58) r2 = syz_clone3(&(0x7f0000000500)={0x40000000, &(0x7f0000000300), &(0x7f0000000340), 0x0, {0x22}, &(0x7f00000003c0)=""/155, 0x9b, &(0x7f0000000480)=""/23, 0x0}, 0x58) getpid() syz_clone3(&(0x7f0000001700)={0x5000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r0, r1, r2], 0x3}, 0x58) 19:45:57 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:45:57 executing program 2: syz_open_dev$evdev(&(0x7f0000001640), 0x0, 0x0) 19:45:57 executing program 4: r0 = getpid() r1 = syz_clone3(&(0x7f0000000280)={0x22800200, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x3c}, 0x0, 0x0, &(0x7f0000000140)=""/205, &(0x7f0000000240)}, 0x58) r2 = syz_clone3(&(0x7f0000000500)={0x40000000, &(0x7f0000000300), &(0x7f0000000340), 0x0, {0x22}, &(0x7f00000003c0)=""/155, 0x9b, &(0x7f0000000480)=""/23, 0x0}, 0x58) r3 = getpid() syz_clone3(&(0x7f0000001700)={0x5000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r0, r1, r2, r3], 0x4}, 0x58) 19:45:57 executing program 0: ptrace$setopts(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 19:45:57 executing program 1: uname(&(0x7f0000000b00)=""/138) 19:45:57 executing program 2: syz_open_dev$usbmon(&(0x7f0000000480), 0x0, 0x400800) 19:45:57 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x8}]}) 19:45:57 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000940)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:45:57 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0x80045017, 0x0) 19:45:57 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000005200)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000005100)={0x1c, r0, 0x519, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 19:45:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000005200)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000005100)=ANY=[], 0x38}}, 0x0) 19:45:57 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00), 0x10}, 0x80) 19:45:57 executing program 0: mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x20c0008, &(0x7f0000000280)=ANY=[]) 19:45:57 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000001780), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/32) 19:45:57 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 19:45:57 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@remote, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x20) 19:45:57 executing program 2: syz_open_dev$evdev(&(0x7f0000001780), 0xffffffffffffffff, 0x200001) 19:45:57 executing program 0: syz_clone3(&(0x7f0000000500)={0x40000000, 0x0, &(0x7f0000000340), 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19:45:57 executing program 1: syz_clone3(&(0x7f0000000200)={0x20002200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19:45:57 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f00000004c0)=""/134, 0x26, 0x86, 0x1}, 0x20) 19:45:58 executing program 3: r0 = getpid() r1 = syz_clone3(&(0x7f0000000280)={0x22800200, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x3c}, 0x0, 0x0, &(0x7f0000000140)=""/205, &(0x7f0000000240)}, 0x58) syz_clone3(&(0x7f0000000500)={0x40000000, &(0x7f0000000300), &(0x7f0000000340), 0x0, {0x22}, &(0x7f00000003c0)=""/155, 0x9b, &(0x7f0000000480)=""/23, 0x0}, 0x58) syz_clone3(&(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r0, r1, 0x0, 0x0], 0x4}, 0x58) 19:45:58 executing program 5: syz_open_dev$usbmon(&(0x7f0000000040), 0x3db, 0x6001) 19:45:58 executing program 1: r0 = getpid() ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) 19:45:58 executing program 4: sched_setparam(0x0, &(0x7f0000000080)) 19:45:58 executing program 2: r0 = getpid() ptrace$setopts(0x4206, r0, 0x3, 0x0) 19:45:58 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x0, 0x0, 0x0, 0x101}, 0x48) 19:45:58 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001780), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x24e0, "e685e1e96f088c63193fe56d57fd0637ad91d5776bdcd0ae0592108bcc67d5a3"}) 19:45:58 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000500)={@mcast2, @mcast1, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 19:45:58 executing program 1: ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000000)={0xdb}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x77) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x6, &(0x7f00000008c0)=@framed={{}, [@call, @btf_id]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00), 0x10}, 0x80) 19:45:58 executing program 4: clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) nanosleep(&(0x7f0000000340)={0x0, r0+60000000}, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000001540), 0xffffffffffffffff) 19:45:58 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)=""/193, 0x1a, 0xc1, 0x1}, 0x20) 19:45:58 executing program 0: syz_clone3(&(0x7f0000000500)={0x40000000, 0x0, &(0x7f0000000340), 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19:45:58 executing program 3: prctl$PR_GET_DUMPABLE(0x23) 19:45:58 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000240)={0x0, 0x0}) 19:45:58 executing program 2: syz_open_dev$loop(&(0x7f0000003140), 0x0, 0x0) 19:45:58 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0xb840) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000240)={0x0, 0x0}) 19:45:58 executing program 2: syz_clone3(&(0x7f0000001700)={0x5000900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19:45:58 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x8940, 0x0) 19:45:58 executing program 5: r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x10000}) 19:45:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x40045567) 19:45:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, 0x48) 19:45:58 executing program 4: syz_clone3(&(0x7f0000001700)={0x110000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19:45:58 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000e80)={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x0, 0x0, 0x1}) 19:45:58 executing program 0: syz_clone3(&(0x7f0000000500)={0x40000000, 0x0, &(0x7f0000000340), 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19:45:58 executing program 3: syz_clone3(&(0x7f0000000280)={0x22800200, 0x0, &(0x7f0000000080), &(0x7f00000000c0), {0x3c}, &(0x7f0000000100)=""/44, 0x2c, 0x0, &(0x7f0000000240)}, 0x58) syz_clone3(&(0x7f0000000500)={0x40000000, &(0x7f0000000300), 0x0, &(0x7f0000000380), {0x22}, &(0x7f00000003c0)=""/155, 0x9b, &(0x7f0000000480)=""/23, 0x0}, 0x58) getpid() getpgid(0x0) syz_clone3(0x0, 0x0) 19:45:58 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001040)={0x0, &(0x7f0000000040)=""/4096, 0x0, 0x1000}, 0x20) 19:45:58 executing program 2: fsopen(&(0x7f0000000180)='ufs\x00', 0x0) 19:45:58 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) 19:45:58 executing program 2: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x5e7a0a17fbabe09e) 19:45:58 executing program 1: prctl$PR_GET_DUMPABLE(0x53564d41) 19:45:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x200000c1) 19:45:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000005200)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000005100)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000005280), r0) 19:45:59 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x8982, 0x0) 19:45:59 executing program 2: r0 = socket$inet6(0x11, 0x3, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0) 19:45:59 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202c00, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, 0x0, 0x0) 19:45:59 executing program 0: syz_clone3(&(0x7f0000000500)={0x40000000, 0x0, &(0x7f0000000340), 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19:45:59 executing program 5: r0 = syz_clone3(&(0x7f0000000280)={0x22800200, 0x0, &(0x7f0000000080), &(0x7f00000000c0), {}, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x58) syz_clone3(&(0x7f0000000500)={0x40000000, &(0x7f0000000300), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpgid(0x0) syz_clone3(&(0x7f0000001700)={0x5000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x0, r0, 0x0, 0x0], 0x4}, 0x58) 19:45:59 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x8982, 0x0) 19:45:59 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x40049409) 19:45:59 executing program 2: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x6001) 19:45:59 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000001780), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80044584, 0x0) 19:45:59 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x8982, 0x0) 19:45:59 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000500)={@mcast2, @mcast1, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}) 19:45:59 executing program 2: syz_clone3(&(0x7f0000000500)={0x40000000, 0x0, &(0x7f0000000340), &(0x7f0000000380), {0x22}, &(0x7f00000003c0)=""/155, 0x9b, &(0x7f0000000480)=""/23, 0x0}, 0x58) getpgid(0x0) syz_clone3(0x0, 0x0) 19:45:59 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/52) 19:45:59 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x8982, 0x0) 19:45:59 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$P9_RREAD(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 19:46:00 executing program 2: mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[]) 19:46:00 executing program 3: rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x6}) 19:46:00 executing program 1: fsmount(0xffffffffffffffff, 0x0, 0x1) 19:46:00 executing program 4: sched_setattr(0x0, &(0x7f0000000480)={0x38}, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000440)) 19:46:00 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='smaps\x00') 19:46:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x40005504) 19:46:00 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2bc0, 0x0) 19:46:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f0000000180)=""/34, 0x0, 0x22}, 0x20) 19:46:00 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/ip_tables_names\x00') write$P9_RCREATE(r0, 0x0, 0x0) 19:46:00 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/ip_tables_names\x00') fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, 0x0, 0xffffffffffffff9c) 19:46:00 executing program 4: sysfs$2(0x2, 0x3, &(0x7f0000000080)=""/253) 19:46:00 executing program 1: r0 = socket$inet6(0x11, 0x3, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) 19:46:00 executing program 2: r0 = getpid() r1 = syz_clone3(&(0x7f0000000280)={0x22800200, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x3c}, 0x0, 0x0, &(0x7f0000000140)=""/205, &(0x7f0000000240)}, 0x58) r2 = syz_clone3(&(0x7f0000000500)={0x40000000, &(0x7f0000000300), &(0x7f0000000340), 0x0, {0x22}, &(0x7f00000003c0)=""/155, 0x9b, &(0x7f0000000480)=""/23, 0x0}, 0x58) syz_clone3(&(0x7f0000001700)={0x5000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r0, r1, r2, 0x0], 0x4}, 0x58) 19:46:00 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000e80)={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0xffffffff}) 19:46:00 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x541b, 0x0) 19:46:00 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x0, 0x0}) 19:46:00 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @private2}, 0x1c, 0x0}}], 0x1, 0x0) 19:46:00 executing program 0: getcwd(&(0x7f0000000000)=""/104, 0x68) 19:46:00 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x14, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 19:46:00 executing program 4: r0 = syz_clone3(&(0x7f0000000280)={0x22800200, 0x0, 0x0, &(0x7f00000000c0), {0x3c}, &(0x7f0000000100)=""/44, 0x2c, 0x0, &(0x7f0000000240)}, 0x58) syz_clone3(&(0x7f0000000500)={0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380), {0x22}, 0x0, 0x0, &(0x7f0000000480)=""/23, 0x0}, 0x58) getpid() r1 = getpgid(0x0) syz_clone3(&(0x7f0000001700)={0x5000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x0, r0, 0x0, r1], 0x4}, 0x58) 19:46:00 executing program 3: bpf$PROG_LOAD_XDP(0x3, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:46:00 executing program 1: r0 = getpid() rt_tgsigqueueinfo(0xffffffffffffffff, r0, 0x0, &(0x7f0000000100)) 19:46:00 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @private2, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffffb}}], 0x18}}], 0x1, 0x0) 19:46:00 executing program 3: sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) 19:46:01 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/19) 19:46:01 executing program 1: clock_adjtime(0x0, &(0x7f0000000040)={0x935f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 19:46:01 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000001780), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000000)=""/77) 19:46:01 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/ip_tables_names\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/ip_tables_names\x00') 19:46:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="500a00002d0001002bbd7000fcdbdf2500000000", @ANYRES32], 0xa50}}, 0x0) 19:46:01 executing program 4: r0 = syz_clone3(&(0x7f0000000280)={0x22800200, 0x0, 0x0, &(0x7f00000000c0), {0x3c}, &(0x7f0000000100)=""/44, 0x2c, 0x0, &(0x7f0000000240)}, 0x58) syz_clone3(&(0x7f0000000500)={0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380), {0x22}, 0x0, 0x0, &(0x7f0000000480)=""/23, 0x0}, 0x58) getpid() r1 = getpgid(0x0) syz_clone3(&(0x7f0000001700)={0x5000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x0, r0, 0x0, r1], 0x4}, 0x58) 19:46:01 executing program 1: read$usbmon(0xffffffffffffffff, 0x0, 0x0) 19:46:01 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 19:46:01 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x4b47, 0x0) [ 301.038931][ T6644] netlink: 2604 bytes leftover after parsing attributes in process `syz-executor.0'. 19:46:01 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='attr/prev\x00') 19:46:01 executing program 3: r0 = getpid() r1 = syz_clone3(&(0x7f0000000280)={0x22800200, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {}, &(0x7f0000000100)=""/44, 0x2c, &(0x7f0000000140)=""/205, &(0x7f0000000240)}, 0x58) r2 = syz_clone3(&(0x7f0000000500)={0x40000000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x22}, 0x0, 0x0, &(0x7f0000000480)=""/23, 0x0}, 0x58) r3 = getpid() r4 = getpgid(r3) syz_clone3(&(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r0, r1, r2, r3, 0x0, r4], 0x6}, 0x58) 19:46:01 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000940)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:46:01 executing program 0: syz_clone3(&(0x7f0000000500)={0x40000000, &(0x7f0000000300), 0x0, 0x0, {0x22}, &(0x7f00000003c0)=""/155, 0x9b, &(0x7f0000000480)=""/23, 0x0}, 0x58) syz_clone3(&(0x7f0000001700)={0x5000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19:46:01 executing program 5: r0 = getpid() r1 = getpid() syz_open_procfs(r1, 0x0) syz_open_procfs(r0, 0x0) 19:46:01 executing program 4: r0 = syz_clone3(&(0x7f0000000280)={0x22800200, 0x0, 0x0, &(0x7f00000000c0), {0x3c}, &(0x7f0000000100)=""/44, 0x2c, 0x0, &(0x7f0000000240)}, 0x58) syz_clone3(&(0x7f0000000500)={0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380), {0x22}, 0x0, 0x0, &(0x7f0000000480)=""/23, 0x0}, 0x58) getpid() r1 = getpgid(0x0) syz_clone3(&(0x7f0000001700)={0x5000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x0, r0, 0x0, r1], 0x4}, 0x58) 19:46:01 executing program 2: syz_clone3(&(0x7f0000001700)={0x1f000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19:46:01 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x6, &(0x7f00000008c0)=@framed={{}, [@call, @btf_id]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:46:01 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001780), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40044581, 0x0) 19:46:01 executing program 2: sched_setattr(0x0, &(0x7f0000000480)={0x38, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00') arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000440)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/ip_tables_names\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000080)='syzkaller\x00', 0x40, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0x9, 0x1, 0x7}, 0x10, 0x178aa, 0xffffffffffffffff, 0x0, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, r0]}, 0x80) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/ip_tables_names\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = fsmount(r0, 0x1, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/ip_tables_names\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x9, 0x8000, 0x2, 0x1120, r0, 0x2, '\x00', 0x0, r0, 0x3, 0x3, 0x5, 0x8}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0xb, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc46d, 0x0, 0x0, 0x0, 0xefa}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x271}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x8}, @ldst={0x3, 0x3, 0x6, 0x2, 0x1, 0x30, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x9, 0x6, 0x8000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r1, r2, r0, r3, r0, r0, r4]}, 0x80) syz_open_procfs(0x0, &(0x7f00000003c0)='autogroup\x00') r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/ip_tables_names\x00') ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) getitimer(0x0, &(0x7f0000000400)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="0f0400f8", @ANYRES16=r6, @ANYBLOB="130129bd7000fcdbdf256300000008000300", @ANYRES32=r7, @ANYBLOB="ecaa6205b97ee12f7f59f6036c1ae7c8987e64"], 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000800) 19:46:01 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000005200)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="1905000000000000000037"], 0x38}}, 0x0) 19:46:01 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2, 0x80000000}]}]}}, &(0x7f00000004c0)=""/134, 0x32, 0x86, 0x1}, 0x20) 19:46:01 executing program 4: r0 = syz_clone3(&(0x7f0000000280)={0x22800200, 0x0, 0x0, &(0x7f00000000c0), {0x3c}, &(0x7f0000000100)=""/44, 0x2c, 0x0, &(0x7f0000000240)}, 0x58) syz_clone3(&(0x7f0000000500)={0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380), {0x22}, 0x0, 0x0, &(0x7f0000000480)=""/23, 0x0}, 0x58) getpid() r1 = getpgid(0x0) syz_clone3(&(0x7f0000001700)={0x5000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x0, r0, 0x0, r1], 0x4}, 0x58) [ 301.508489][ T6677] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 19:46:01 executing program 3: waitid(0x0, 0x0, &(0x7f0000000000), 0x2, 0x0) 19:46:01 executing program 1: process_vm_writev(0x0, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) 19:46:01 executing program 0: syz_clone3(&(0x7f0000000500)={0x40000000, &(0x7f0000000300), 0x0, 0x0, {0x22}, &(0x7f00000003c0)=""/155, 0x9b, &(0x7f0000000480)=""/23, 0x0}, 0x58) syz_clone3(&(0x7f0000001700)={0x5000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19:46:01 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000001780), 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000000)=""/184) 19:46:01 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000001680), 0x0, 0x0) 19:46:01 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0x220000400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 19:46:01 executing program 5: syz_open_dev$usbmon(&(0x7f0000000240), 0xfffffffffffffffe, 0x220000) 19:46:01 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x1, &(0x7f0000000080)=@raw=[@call], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:46:01 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000005200)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="1905000000000000000037", @ANYRES32, @ANYBLOB="a8"], 0x38}}, 0x0) 19:46:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_matches\x00') read$usbmon(r0, 0x0, 0x0) 19:46:01 executing program 1: sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) 19:46:01 executing program 2: r0 = syz_clone3(&(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() r1 = getpgid(0x0) syz_clone3(&(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x0, r0, 0x0, 0x0, 0x0, r1], 0x6}, 0x58) 19:46:01 executing program 5: prctl$PR_GET_DUMPABLE(0x43724f53) 19:46:02 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x0, 0x0, 0x40}, 0x48) [ 301.941694][ T6706] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 19:46:02 executing program 0: syz_clone3(&(0x7f0000000500)={0x40000000, &(0x7f0000000300), 0x0, 0x0, {0x22}, &(0x7f00000003c0)=""/155, 0x9b, &(0x7f0000000480)=""/23, 0x0}, 0x58) syz_clone3(&(0x7f0000001700)={0x5000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19:46:02 executing program 3: getpid() syz_clone3(&(0x7f0000000500)={0x40000000, 0x0, &(0x7f0000000340), &(0x7f0000000380), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpgid(0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) 19:46:02 executing program 5: syz_clone3(&(0x7f0000001700)={0x5001100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19:46:02 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/dev_snmp6\x00') 19:46:02 executing program 1: getpid() syz_clone3(0x0, 0x0) syz_clone3(&(0x7f0000000500)={0x40000000, 0x0, 0x0, 0x0, {0x22}, &(0x7f00000003c0)=""/155, 0x9b, &(0x7f0000000480)=""/23, 0x0}, 0x58) r0 = getpid() getpgid(r0) syz_clone3(&(0x7f0000001700)={0x5000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19:46:02 executing program 2: r0 = syz_clone3(&(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() r1 = getpgid(0x0) syz_clone3(&(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x0, r0, 0x0, 0x0, 0x0, r1], 0x6}, 0x58) 19:46:02 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$P9_RREAD(r0, 0x0, 0x0) 19:46:02 executing program 5: syz_open_dev$usbmon(&(0x7f0000000000), 0x100000001, 0x0) 19:46:02 executing program 4: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x21c1090, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x1988826, &(0x7f0000000080)=ANY=[@ANYBLOB='journal_async_commit']) 19:46:02 executing program 2: r0 = syz_clone3(&(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() r1 = getpgid(0x0) syz_clone3(&(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x0, r0, 0x0, 0x0, 0x0, r1], 0x6}, 0x58) 19:46:02 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x80108906, 0x0) 19:46:02 executing program 5: mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 302.716965][ T6745] EXT4-fs (sda1): can't mount with journal_async_commit in data=ordered mode 19:46:02 executing program 0: syz_clone3(&(0x7f0000000500)={0x40000000, &(0x7f0000000300), 0x0, 0x0, {0x22}, &(0x7f00000003c0)=""/155, 0x9b, &(0x7f0000000480)=""/23, 0x0}, 0x58) syz_clone3(&(0x7f0000001700)={0x5000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19:46:02 executing program 3: getpid() syz_clone3(&(0x7f0000000500)={0x40000000, 0x0, &(0x7f0000000340), &(0x7f0000000380), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpgid(0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) 19:46:02 executing program 1: getcwd(&(0x7f0000000000)=""/4096, 0x1000) 19:46:02 executing program 5: r0 = getpid() process_vm_writev(r0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/19, 0x13}, {&(0x7f0000000100)=""/123, 0x7b}, {&(0x7f00000002c0)=""/52, 0x34}], 0x3, &(0x7f0000000880)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/187, 0xbb}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 19:46:02 executing program 2: r0 = syz_clone3(&(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() r1 = getpgid(0x0) syz_clone3(&(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x0, r0, 0x0, 0x0, 0x0, r1], 0x6}, 0x58) 19:46:03 executing program 1: r0 = getpid() syz_clone3(&(0x7f0000000500)={0x40000000, 0x0, 0x0, 0x0, {0x22}, &(0x7f00000003c0)=""/155, 0x9b, 0x0, 0x0}, 0x58) getpid() syz_clone3(&(0x7f0000001700)={0x5000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r0, 0x0], 0x2}, 0x58) 19:46:03 executing program 5: prctl$PR_GET_DUMPABLE(0x17) 19:46:03 executing program 5: bpf$MAP_CREATE(0x2, &(0x7f0000000000), 0x95) 19:46:03 executing program 4: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x21c1090, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x1988826, &(0x7f0000000080)=ANY=[@ANYBLOB='journal_async_commit']) 19:46:03 executing program 5: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xc0640, 0x0) 19:46:03 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f0000000000)="e24b775e926717195ae3eec8a85118a64ffe00fd", 0x14) [ 303.157758][ T6799] EXT4-fs (sda1): can't mount with journal_async_commit in data=ordered mode 19:46:03 executing program 4: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x21c1090, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x1988826, &(0x7f0000000080)=ANY=[@ANYBLOB='journal_async_commit']) 19:46:03 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/time_for_children\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/time_for_children\x00') [ 303.364286][ T6807] EXT4-fs (sda1): can't mount with journal_async_commit in data=ordered mode 19:46:03 executing program 4: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x21c1090, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x1988826, &(0x7f0000000080)=ANY=[@ANYBLOB='journal_async_commit']) 19:46:03 executing program 5: syz_open_dev$evdev(0xfffffffffffffffe, 0x0, 0x0) 19:46:03 executing program 2: syz_clone3(&(0x7f0000000040)={0x1d0042000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19:46:03 executing program 1: r0 = getpid() syz_clone3(&(0x7f0000000500)={0x40000000, 0x0, 0x0, 0x0, {0x22}, &(0x7f00000003c0)=""/155, 0x9b, 0x0, 0x0}, 0x58) getpid() syz_clone3(&(0x7f0000001700)={0x5000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r0, 0x0], 0x2}, 0x58) 19:46:03 executing program 3: getpid() syz_clone3(&(0x7f0000000500)={0x40000000, 0x0, &(0x7f0000000340), &(0x7f0000000380), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpgid(0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) 19:46:03 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000140)=[{0x200}]}) [ 303.568031][ T6782] Bluetooth: hci2: command 0x0406 tx timeout [ 303.604581][ T6816] EXT4-fs (sda1): can't mount with journal_async_commit in data=ordered mode 19:46:03 executing program 5: r0 = getpid() process_vm_writev(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/209, 0xd1}, {&(0x7f0000000100)=""/123, 0x7b}, {&(0x7f00000002c0)=""/52, 0x34}], 0x3, &(0x7f0000000880)=[{&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/187, 0xbb}, {&(0x7f0000000580)=""/154, 0x9a}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 19:46:03 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f00000036c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) 19:46:03 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001780), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x80084502, &(0x7f0000000000)) 19:46:03 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/ip_tables_names\x00') fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='nl80211\x00', 0x0, 0xffffffffffffff9c) 19:46:03 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000005200)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000005100)={0x28, r0, 0x519, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 19:46:03 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000180)={0x38}, 0x0) 19:46:03 executing program 5: syz_clone3(0x0, 0x0) syz_clone3(&(0x7f0000000500)={0x40000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() 19:46:04 executing program 4: get_robust_list(0x0, 0x0, &(0x7f0000000100)) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 19:46:04 executing program 2: r0 = getpid() tkill(r0, 0x20) 19:46:04 executing program 1: r0 = getpid() syz_clone3(&(0x7f0000000500)={0x40000000, 0x0, 0x0, 0x0, {0x22}, &(0x7f00000003c0)=""/155, 0x9b, 0x0, 0x0}, 0x58) getpid() syz_clone3(&(0x7f0000001700)={0x5000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r0, 0x0], 0x2}, 0x58) 19:46:04 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r0, &(0x7f0000000040)={0xb}, 0xb) 19:46:04 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000001780), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x4) 19:46:04 executing program 3: getpid() syz_clone3(&(0x7f0000000500)={0x40000000, 0x0, &(0x7f0000000340), &(0x7f0000000380), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpgid(0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) 19:46:04 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000001780), 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, 0x0) 19:46:04 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) prctl$PR_GET_DUMPABLE(0x3) 19:46:04 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x0, 0x0, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:46:04 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000001780), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80084502, 0x0) 19:46:04 executing program 0: syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') [ 304.205793][ T28] audit: type=1326 audit(1654199164.266:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa206089109 code=0x0 19:46:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x2}]}]}, {0x0, [0x0, 0x5f, 0x61, 0x2e]}}, &(0x7f00000004c0)=""/134, 0x36, 0x86, 0x1}, 0x20) 19:46:04 executing program 0: prctl$PR_GET_DUMPABLE(0x1a) 19:46:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000005200)={&(0x7f00000050c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000051c0)={&(0x7f0000005100)={0x28, 0x0, 0x519, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 19:46:04 executing program 1: r0 = getpid() syz_clone3(&(0x7f0000000500)={0x40000000, 0x0, 0x0, 0x0, {0x22}, &(0x7f00000003c0)=""/155, 0x9b, 0x0, 0x0}, 0x58) getpid() syz_clone3(&(0x7f0000001700)={0x5000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r0, 0x0], 0x2}, 0x58) 19:46:04 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/ip_tables_names\x00') fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='-,\'\'*^@)!\xe9-*\x00', 0x0, 0x0) 19:46:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x2}]}]}, {0x0, [0x0, 0x5f, 0x61]}}, &(0x7f00000004c0)=""/134, 0x35, 0x86, 0x1}, 0x20) 19:46:04 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x40086602) 19:46:04 executing program 0: ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, 0x0) 19:46:05 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000005200)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000005100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="19"], 0x38}}, 0x0) 19:46:05 executing program 5: sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x7c}, 0x0) 19:46:05 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x4, &(0x7f00000008c0)=@framed={{}, [@func]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:46:05 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000024000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fefdff0000850000000d000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7ef8c9ac1465c3a1f59916ffc9bf0bd09f07fb2ea80e5cf8df265e1b40e4c8ae7a89cf8cf819b5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce94284641b4e8d54688357754508535766c80114604eab9b290a24825060000e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6b1acbef92b2704550a4d1dd5c50b7420b48a93fe94c756108afcd0b2eb785632e0a85f02a5a6474ae549070000000000001294fba0ed5020e6474ac921fee1f6d8ad6a80d0947cd6d4a561ced23b0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed95157abb19700f0077e9d13d8b93eb0f2c6f8941e35e1577c10e509c9b134225d3d2369f516a49eeeb1a662c849eb709df5c6ba73cccdfa3c58bc5204339b0b487f0eeed5813ef73c7dd9ea85285bcc08a109377bcb202994c407322717c338033213c18a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333aab1aa736369392b9067665239820f5f1557b0bf7ccb0a5a13c714e0b1a1bc3f9caff3283076cda3d0b1a2905cf7bd04f1db530abcbad99f93093ced7dd51995edcf53b907228fa9e83433eedb4ac88d0285594ffb0d14e71d5c57f33702f22b22417bf5d8cac1d6bca4318bcaffbe800a041307bd8325a442095bc9a8b0c9d905979f34adddb521914f92eed3d3e9de82942a952e86bd67aff5bc2e3c1fcc00f610d1835e8f4b8fd356cb365adc037e443820c05c5db160087a9cf471e0eff227f25b2c5cabfcd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c14227500769e940481b2310e19ac58bb29d7f178d09a3a082c5242c8fa7f01e0873c9c5c6041c0ad85950d8e08465fa1067ea8f383b3e7a7ddf542b7e33c6575b8ff7b05ca026da0977d46f7ebb10612777bb907331a8ef4bc38f914bca496426d8468f9bae3ba799cf70de7e14bfc6ae54e9261639d6478bcb80803efad62e67a0338c756c544189e4519a029674e2a2bbbc70a61d43dce519bfad93be5e30b70b198246d3a62660600000030a0af132e6805101ad5d98e2deb6870232d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea74b447f2d970d991bc7fc8612a8131771b881afb45126fc83a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c594d2015f414546e87835ba18e9101734a9a4c6955fc6b9a2fd97693f2cf8454fbeccba5493a164c663eceed4a9737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000b8f38ab69eca4562000000d23dd63b7761d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d608ae44a38e7868dc32e1321234541dcbb9fa898b5e2d0c57bc4f7f024ecf52327631b718b6cf865216f72cacffa7b3e16e6d237ca297c884b62f2955468ab5e918e3e2abfeffcde2245300cba2ed9b7a680533cb5a687495cc2349d17f09acd061d0926e52a50ab426287151acd4cb48e37b13dff9ea69a3639a45cad828b2bbd528678f29117c7a7bceca6cbc4b2e252d41dd604c124d52b893e67b7603f753fc10cf8807d637b09c6daf02c54160393ce3f7f91"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x303, 0x303, &(0x7f0000000040)="b9070360f000f007049e0ff008002affffe10e600401633a77fbac141441e0002001be3e7d2a182fff", 0x0, 0x2a, 0x18000000, 0x0, 0xfeb9, &(0x7f0000000640)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7", &(0x7f0000000100)}, 0x28) 19:46:05 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/ip_tables_names\x00') accept4$alg(r0, 0x0, 0x0, 0x0) 19:46:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001780), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, 0x0) 19:46:05 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0}}], 0x1, 0x0) 19:46:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x20, 0x18, 0xa01, 0x0, 0x2ca7d, {0x4}, [@typed={0xc, 0x9, 0x0, 0x0, @u64=0x7}]}, 0x20}}, 0x0) 19:46:05 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x0, 0x0, 0x0, 0x20d0}, 0x48) 19:46:05 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x8940, &(0x7f0000000500)={@mcast2, @mcast1, @dev}) 19:46:05 executing program 5: sched_setparam(0x0, &(0x7f0000000080)=0x96c2) 19:46:05 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000001700), 0xffffffffffffffff) 19:46:05 executing program 1: fspick(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 19:46:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef]}}, &(0x7f0000000080)=""/193, 0x26, 0xc1, 0x1}, 0x20) 19:46:05 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x181802) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000040)) 19:46:05 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0), 0x8, 0x10, 0x0}, 0x80) 19:46:05 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x18f403) 19:46:05 executing program 1: setrlimit(0x4, &(0x7f0000000000)) 19:46:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef]}}, &(0x7f0000000080)=""/193, 0x26, 0xc1, 0x1}, 0x20) 19:46:05 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) 19:46:05 executing program 4: r0 = syz_clone3(&(0x7f0000000280)={0x22800200, 0x0, &(0x7f0000000080), &(0x7f00000000c0), {0x3c}, &(0x7f0000000100)=""/44, 0x2c, 0x0, &(0x7f0000000240)}, 0x58) syz_clone3(&(0x7f0000000500)={0x40000000, &(0x7f0000000300), 0x0, &(0x7f0000000380), {0x22}, &(0x7f00000003c0)=""/155, 0x9b, &(0x7f0000000480)=""/23, 0x0}, 0x58) getpid() r1 = getpgid(0x0) syz_clone3(&(0x7f0000001700)={0x5000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x0, r0, 0x0, 0x0, 0x0, r1], 0x6}, 0x58) 19:46:05 executing program 3: syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000140)=""/205, 0x0}, 0x58) syz_clone3(&(0x7f0000000500)={0x40000000, &(0x7f0000000300), &(0x7f0000000340), 0x0, {0x22}, 0x0, 0x0, &(0x7f0000000480)=""/23, 0x0}, 0x58) syz_clone3(0x0, 0x0) 19:46:05 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x593102, 0x0) 19:46:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xc}, 0x48) 19:46:05 executing program 0: r0 = getpid() process_vm_writev(r0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000100)=""/123, 0x7b}], 0x2, &(0x7f0000000880)=[{&(0x7f0000000400)=""/192, 0xc0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 19:46:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef]}}, &(0x7f0000000080)=""/193, 0x26, 0xc1, 0x1}, 0x20) 19:46:05 executing program 0: prctl$PR_GET_DUMPABLE(0x3a) 19:46:05 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f00000036c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@rthdrdstopts={{0x18}}, @hoplimit_2292={{0x14}}, @rthdr_2292={{0x18}}], 0x48}}], 0x1, 0x0) 19:46:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef]}}, &(0x7f0000000080)=""/193, 0x26, 0xc1, 0x1}, 0x20) 19:46:05 executing program 1: clock_adjtime(0x5, &(0x7f0000000040)) 19:46:05 executing program 0: sysfs$1(0x1, &(0x7f0000000000)=')+\x00') 19:46:05 executing program 2: syz_open_dev$evdev(&(0x7f0000001640), 0x10000, 0x171041) 19:46:06 executing program 4: mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x100010, 0xffffffffffffffff, 0x0) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/144) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x480}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004014}, 0x24000000) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1a52) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000240)) write$evdev(0xffffffffffffffff, &(0x7f0000000280)=[{{r0, r1/1000+10000}, 0x14, 0x4, 0x3}, {{}, 0x2, 0x2, 0x6}, {{r2, r3/1000+10000}, 0x11, 0x20}], 0x48) nanosleep(&(0x7f0000000340), &(0x7f0000000380)) 19:46:06 executing program 3: syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000140)=""/205, 0x0}, 0x58) syz_clone3(&(0x7f0000000500)={0x40000000, &(0x7f0000000300), &(0x7f0000000340), 0x0, {0x22}, 0x0, 0x0, &(0x7f0000000480)=""/23, 0x0}, 0x58) syz_clone3(0x0, 0x0) 19:46:06 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/ip_tables_names\x00') syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 19:46:06 executing program 0: clock_settime(0x0, &(0x7f0000000c00)={0x77359400}) 19:46:06 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000500)={@mcast2, @mcast1, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60008}) 19:46:06 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x894c, 0x0) 19:46:06 executing program 4: futex(&(0x7f0000000000), 0x5, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0x0) [ 411.321026][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 411.321044][ C1] rcu: 0-...!: (1 GPs behind) idle=8e1/1/0x4000000000000000 softirq=18893/18898 fqs=2 [ 411.321078][ C1] (detected by 1, t=10502 jiffies, g=24257, q=130 ncpus=2) [ 411.321123][ C1] Sending NMI from CPU 1 to CPUs 0: [ 411.321149][ C0] NMI backtrace for cpu 0 [ 411.321157][ C0] CPU: 0 PID: 6966 Comm: syz-executor.0 Not tainted 5.18.0-next-20220601-syzkaller #0 [ 411.321177][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.321187][ C0] RIP: 0010:lock_release+0x3c8/0x780 [ 411.321345][ C0] Code: 2b 44 24 40 45 39 87 58 0a 00 00 0f 85 67 02 00 00 48 c7 c7 c0 7e cc 89 e8 55 b6 18 08 b8 ff ff ff ff 65 0f c1 05 80 fe a3 7e <83> f8 01 0f 85 cb 01 00 00 9c 58 f6 c4 02 0f 85 b6 01 00 00 48 f7 [ 411.321363][ C0] RSP: 0018:ffffc90000007d08 EFLAGS: 00000057 [ 411.321378][ C0] RAX: 0000000000000001 RBX: 6d20947d28ef4cb3 RCX: ffffc90000007d58 [ 411.321391][ C0] RDX: 1ffff1100f2c214a RSI: 0000000000010001 RDI: 0000000000000000 [ 411.321402][ C0] RBP: 1ffff92000000fa3 R08: 0000000000000000 R09: 0000000000000000 [ 411.321414][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000002 [ 411.321424][ C0] R13: 0000000000000003 R14: ffff888079610a58 R15: ffff888079610000 [ 411.321437][ C0] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 411.321455][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.321468][ C0] CR2: 00007f7a9519d090 CR3: 000000000ba8e000 CR4: 00000000003506f0 [ 411.321480][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 411.321491][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 411.321502][ C0] Call Trace: [ 411.321509][ C0] [ 411.321516][ C0] ? advance_sched+0x4e5/0x9a0 [ 411.321618][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 411.321645][ C0] ? do_raw_spin_lock+0x120/0x2a0 [ 411.321664][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 411.321686][ C0] advance_sched+0x507/0x9a0 [ 411.321715][ C0] ? taprio_dequeue_soft+0xa20/0xa20 [ 411.321740][ C0] __hrtimer_run_queues+0x609/0xe50 [ 411.321785][ C0] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 411.321807][ C0] ? ktime_get_update_offsets_now+0x3eb/0x5c0 [ 411.321836][ C0] hrtimer_interrupt+0x31c/0x790 [ 411.321864][ C0] __sysvec_apic_timer_interrupt+0x146/0x530 [ 411.321913][ C0] sysvec_apic_timer_interrupt+0x8e/0xc0 [ 411.322017][ C0] [ 411.322021][ C0] [ 411.322027][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 411.322066][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x1c/0x60 [ 411.322107][ C0] Code: be a8 01 00 00 e8 b4 ff ff ff 31 c0 c3 90 65 8b 05 19 da 87 7e 89 c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b 14 25 80 6f 02 00 00 01 ff 00 74 0e 85 c9 74 35 8b 82 a4 15 00 00 85 c0 74 2b 8b [ 411.322124][ C0] RSP: 0018:ffffc900131ef738 EFLAGS: 00000246 [ 411.322138][ C0] RAX: 0000000080000001 RBX: ffffc900131efa40 RCX: 0000000000000000 [ 411.322150][ C0] RDX: ffff888079610000 RSI: ffffffff81b6fbe0 RDI: 0000000000000007 [ 411.322162][ C0] RBP: ffffffffffffffff R08: 0000000000000007 R09: 0000000000000000 [ 411.322174][ C0] R10: ffffffffffffffff R11: 0000000000000001 R12: 8000000076ffc007 [ 411.322185][ C0] R13: 00007f7a94edf000 R14: ffffea0001dbff00 R15: ffffea0001dbff00 [ 411.322202][ C0] ? __tlb_remove_page_size+0x50/0x420 [ 411.322269][ C0] ? __get_free_pages+0x8/0x40 [ 411.322286][ C0] __tlb_remove_page_size+0x50/0x420 [ 411.322309][ C0] unmap_page_range+0x108a/0x3710 [ 411.322341][ C0] ? vm_normal_page_pmd+0x550/0x550 [ 411.322366][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 411.322393][ C0] ? uprobe_munmap+0x1c/0x560 [ 411.322449][ C0] unmap_single_vma+0x196/0x360 [ 411.322475][ C0] unmap_vmas+0x18c/0x310 [ 411.322499][ C0] ? unmap_mapping_range+0x280/0x280 [ 411.322524][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 411.322554][ C0] ? lru_add_drain_cpu+0x4e2/0x900 [ 411.322597][ C0] exit_mmap+0x1c4/0x4a0 [ 411.322617][ C0] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 411.322647][ C0] __mmput+0x122/0x4b0 [ 411.322682][ C0] mmput+0x56/0x60 [ 411.322701][ C0] do_exit+0xa12/0x2a00 [ 411.322728][ C0] ? find_held_lock+0x2d/0x110 [ 411.322757][ C0] ? mm_update_next_owner+0x7a0/0x7a0 [ 411.322783][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 411.322815][ C0] do_group_exit+0xd2/0x2f0 [ 411.322843][ C0] get_signal+0x2542/0x2600 [ 411.322883][ C0] ? exit_signals+0x8b0/0x8b0 [ 411.322902][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 411.322934][ C0] arch_do_signal_or_restart+0x82/0x20f0 [ 411.323002][ C0] ? do_futex+0x12e/0x300 [ 411.323050][ C0] ? __ia32_sys_get_robust_list+0x3b0/0x3b0 [ 411.323072][ C0] ? get_sigframe_size+0x10/0x10 [ 411.323100][ C0] ? __x64_sys_futex+0x1b0/0x4a0 [ 411.323121][ C0] ? do_futex+0x300/0x300 [ 411.323139][ C0] ? exit_to_user_mode_prepare+0x137/0x250 [ 411.323177][ C0] exit_to_user_mode_prepare+0x15f/0x250 [ 411.323196][ C0] syscall_exit_to_user_mode+0x19/0x50 [ 411.323214][ C0] do_syscall_64+0x42/0xb0 [ 411.323238][ C0] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 411.323260][ C0] RIP: 0033:0x7f7a95089109 [ 411.323273][ C0] Code: Unable to access opcode bytes at RIP 0x7f7a950890df. [ 411.323281][ C0] RSP: 002b:00007f7a96261218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 411.323298][ C0] RAX: fffffffffffffe00 RBX: 00007f7a9519bf68 RCX: 00007f7a95089109 [ 411.323311][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7a9519bf68 [ 411.323322][ C0] RBP: 00007f7a9519bf60 R08: 0000000000000000 R09: 0000000000000000 [ 411.323334][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7a9519bf6c [ 411.323345][ C0] R13: 00007fffe69ff71f R14: 00007f7a96261300 R15: 0000000000022000 [ 411.323364][ C0] [ 411.324144][ C1] rcu: rcu_preempt kthread starved for 10498 jiffies! g24257 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 411.324169][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 411.324178][ C1] rcu: RCU grace-period kthread stack dump: [ 411.324184][ C1] task:rcu_preempt state:R running task stack:28672 pid: 17 ppid: 2 flags:0x00004000 [ 411.324221][ C1] Call Trace: [ 411.324226][ C1] [ 411.324238][ C1] __schedule+0xa00/0x4b30 [ 411.324269][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 411.324318][ C1] ? io_schedule_timeout+0x140/0x140 [ 411.324351][ C1] ? debug_object_free+0x350/0x350 [ 411.324467][ C1] schedule+0xd2/0x1f0 [ 411.324498][ C1] schedule_timeout+0x14a/0x2a0 [ 411.324532][ C1] ? usleep_range_state+0x1b0/0x1b0 [ 411.324568][ C1] ? destroy_timer_on_stack+0x20/0x20 [ 411.324594][ C1] ? mac802154_add_key+0x10/0xa0 [ 411.324661][ C1] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 411.324685][ C1] ? prepare_to_swait_event+0xee/0x470 [ 411.324714][ C1] rcu_gp_fqs_loop+0x186/0x810 [ 411.324759][ C1] ? force_qs_rnp+0x800/0x800 [ 411.324786][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 411.324810][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 411.324841][ C1] rcu_gp_kthread+0x1de/0x320 [ 411.324867][ C1] ? rcu_gp_init+0x1420/0x1420 [ 411.324898][ C1] ? __kthread_parkme+0x15f/0x220 [ 411.324968][ C1] ? rcu_gp_init+0x1420/0x1420 [ 411.324996][ C1] kthread+0x2e9/0x3a0 [ 411.325015][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 411.325041][ C1] ret_from_fork+0x1f/0x30 [ 411.325097][ C1] [ 411.325104][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 411.325110][ C1] NMI backtrace for cpu 1 [ 411.325117][ C1] CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted 5.18.0-next-20220601-syzkaller #0 [ 411.325138][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.325151][ C1] Workqueue: events_unbound toggle_allocation_gate [ 411.325207][ C1] Call Trace: [ 411.325212][ C1] [ 411.325219][ C1] dump_stack_lvl+0xcd/0x134 [ 411.325280][ C1] nmi_cpu_backtrace.cold+0x47/0x144 [ 411.325311][ C1] ? lapic_can_unplug_cpu+0x80/0x80 [ 411.325338][ C1] nmi_trigger_cpumask_backtrace+0x1e6/0x230 [ 411.325386][ C1] rcu_check_gp_kthread_starvation.cold+0x1fb/0x200 [ 411.325431][ C1] ? do_raw_spin_unlock+0x171/0x230 [ 411.325464][ C1] rcu_sched_clock_irq+0x2316/0x2370 [ 411.325507][ C1] ? rcutree_dead_cpu+0x30/0x30 [ 411.325556][ C1] ? tick_sched_do_timer+0x470/0x470 [ 411.325589][ C1] update_process_times+0x11a/0x1a0 [ 411.325616][ C1] tick_sched_handle+0x9b/0x180 [ 411.325651][ C1] tick_sched_timer+0xee/0x120 [ 411.325687][ C1] __hrtimer_run_queues+0x1c0/0xe50 [ 411.325725][ C1] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 411.325751][ C1] ? ktime_get_update_offsets_now+0x3eb/0x5c0 [ 411.325793][ C1] hrtimer_interrupt+0x31c/0x790 [ 411.325837][ C1] __sysvec_apic_timer_interrupt+0x146/0x530 [ 411.325861][ C1] sysvec_apic_timer_interrupt+0x8e/0xc0 [ 411.325896][ C1] [ 411.325901][ C1] [ 411.325909][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 411.325935][ C1] RIP: 0010:smp_call_function_many_cond+0x499/0x1110 [ 411.325964][ C1] Code: 01 89 ee e8 c9 91 0a 00 85 ed 74 47 48 8b 04 24 49 89 c4 83 e0 07 49 c1 ec 03 48 89 c5 4d 01 fc 83 c5 03 e8 69 95 0a 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 21 0a 00 00 8b 43 08 31 [ 411.325983][ C1] RSP: 0018:ffffc90000107950 EFLAGS: 00000293 [ 411.326000][ C1] RAX: 0000000000000000 RBX: ffff8880b9c42500 RCX: 0000000000000000 [ 411.326014][ C1] RDX: ffff888010e43b00 RSI: ffffffff816fffb7 RDI: 0000000000000005 [ 411.326028][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 411.326041][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffffed10173884a1 [ 411.326055][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 411.326082][ C1] ? smp_call_function_many_cond+0x497/0x1110 [ 411.326122][ C1] ? optimize_nops+0x2d0/0x2d0 [ 411.326182][ C1] ? smp_call_on_cpu+0x270/0x270 [ 411.326215][ C1] ? text_poke_memset+0x60/0x60 [ 411.326251][ C1] ? optimize_nops+0x2d0/0x2d0 [ 411.326284][ C1] on_each_cpu_cond_mask+0x56/0xa0 [ 411.326315][ C1] text_poke_bp_batch+0x233/0x6c0 [ 411.326347][ C1] ? kmem_cache_alloc+0xae/0x3b0 [ 411.326402][ C1] ? do_sync_core+0x20/0x20 [ 411.326441][ C1] ? arch_jump_label_transform_queue+0xa0/0x100 [ 411.326480][ C1] ? __jump_label_update+0x351/0x400 [ 411.326508][ C1] text_poke_finish+0x16/0x30 [ 411.326527][ C1] arch_jump_label_transform_apply+0x13/0x20 [ 411.326557][ C1] jump_label_update+0x32f/0x410 [ 411.326584][ C1] static_key_enable_cpuslocked+0x1b1/0x260 [ 411.326608][ C1] static_key_enable+0x16/0x20 [ 411.326628][ C1] toggle_allocation_gate+0x100/0x390 [ 411.326655][ C1] ? lock_release+0x780/0x780 [ 411.326688][ C1] ? wake_up_kfence_timer+0x20/0x20 [ 411.326715][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 411.326765][ C1] process_one_work+0x996/0x1610 [ 411.326804][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 411.326837][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 411.326857][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 411.326890][ C1] worker_thread+0x665/0x1080 [ 411.326932][ C1] ? process_one_work+0x1610/0x1610 [ 411.326961][ C1] kthread+0x2e9/0x3a0 [ 411.326981][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 411.327008][ C1] ret_from_fork+0x1f/0x30 [ 411.327054][ C1] [ 551.771025][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 245s! [kworker/u4:1:11] [ 552.862187][ C1] Modules linked in: [ 552.866089][ C1] irq event stamp: 6594076 [ 552.870561][ C1] hardirqs last enabled at (6594075): [] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 552.882040][ C1] hardirqs last disabled at (6594076): [] sysvec_apic_timer_interrupt+0xb/0xc0 [ 552.893172][ C1] softirqs last enabled at (6544990): [] __irq_exit_rcu+0x123/0x180 [ 552.902816][ C1] softirqs last disabled at (6544883): [] __irq_exit_rcu+0x123/0x180 [ 552.912462][ C1] CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted 5.18.0-next-20220601-syzkaller #0 [ 552.921696][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 552.931789][ C1] Workqueue: events_unbound toggle_allocation_gate [ 552.938319][ C1] RIP: 0010:smp_call_function_many_cond+0x499/0x1110 [ 552.945022][ C1] Code: 01 89 ee e8 c9 91 0a 00 85 ed 74 47 48 8b 04 24 49 89 c4 83 e0 07 49 c1 ec 03 48 89 c5 4d 01 fc 83 c5 03 e8 69 95 0a 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 21 0a 00 00 8b 43 08 31 [ 552.964664][ C1] RSP: 0018:ffffc90000107950 EFLAGS: 00000293 [ 552.970743][ C1] RAX: 0000000000000000 RBX: ffff8880b9c42500 RCX: 0000000000000000 [ 552.978722][ C1] RDX: ffff888010e43b00 RSI: ffffffff816fffb7 RDI: 0000000000000005 [ 552.986705][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 552.994682][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffffed10173884a1 [ 553.002663][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 553.010641][ C1] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 553.019582][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 553.026177][ C1] CR2: 00007ffe2576bc28 CR3: 000000000ba8e000 CR4: 00000000003506e0 [ 553.034163][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 553.042146][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 553.050126][ C1] Call Trace: [ 553.053411][ C1] [ 553.056356][ C1] ? optimize_nops+0x2d0/0x2d0 [ 553.061153][ C1] ? smp_call_on_cpu+0x270/0x270 [ 553.066116][ C1] ? text_poke_memset+0x60/0x60 [ 553.070992][ C1] ? optimize_nops+0x2d0/0x2d0 [ 553.075784][ C1] on_each_cpu_cond_mask+0x56/0xa0 [ 553.080921][ C1] text_poke_bp_batch+0x233/0x6c0 [ 553.085968][ C1] ? kmem_cache_alloc+0xae/0x3b0 [ 553.090933][ C1] ? do_sync_core+0x20/0x20 [ 553.095464][ C1] ? arch_jump_label_transform_queue+0xa0/0x100 [ 553.101728][ C1] ? __jump_label_update+0x351/0x400 [ 553.107031][ C1] text_poke_finish+0x16/0x30 [ 553.111721][ C1] arch_jump_label_transform_apply+0x13/0x20 [ 553.117720][ C1] jump_label_update+0x32f/0x410 [ 553.122675][ C1] static_key_enable_cpuslocked+0x1b1/0x260 [ 553.128582][ C1] static_key_enable+0x16/0x20 [ 553.133359][ C1] toggle_allocation_gate+0x100/0x390 [ 553.138748][ C1] ? lock_release+0x780/0x780 [ 553.143452][ C1] ? wake_up_kfence_timer+0x20/0x20 [ 553.148755][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 553.153998][ C1] process_one_work+0x996/0x1610 [ 553.158967][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 553.164372][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 553.169321][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 553.174389][ C1] worker_thread+0x665/0x1080 [ 553.179097][ C1] ? process_one_work+0x1610/0x1610 [ 553.184318][ C1] kthread+0x2e9/0x3a0 [ 553.188397][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 553.194045][ C1] ret_from_fork+0x1f/0x30 [ 553.198497][ C1] [ 553.201525][ C1] Sending NMI from CPU 1 to CPUs 0: [ 553.206743][ C0] NMI backtrace for cpu 0 [ 553.206752][ C0] CPU: 0 PID: 6966 Comm: syz-executor.0 Not tainted 5.18.0-next-20220601-syzkaller #0 [ 553.206772][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 553.206782][ C0] RIP: 0010:kasan_check_range+0xde/0x180 [ 553.206805][ C0] Code: 74 f2 48 89 c2 b8 01 00 00 00 48 85 d2 75 56 5b 5d 41 5c c3 48 85 d2 74 5e 48 01 ea eb 09 48 83 c0 01 48 39 d0 74 50 80 38 00 <74> f2 eb d4 41 bc 08 00 00 00 48 89 ea 45 29 dc 4d 8d 1c 2c eb 0c [ 553.206823][ C0] RSP: 0018:ffffc90000007d88 EFLAGS: 00000002 [ 553.206838][ C0] RAX: fffff52000000fba RBX: fffff52000000fbb RCX: ffffffff815ef4d0 [ 553.206851][ C0] RDX: fffff52000000fbb RSI: 0000000000000004 RDI: ffffc90000007dd0 [ 553.206864][ C0] RBP: fffff52000000fba R08: 0000000000000001 R09: ffffc90000007dd3 [ 553.206876][ C0] R10: fffff52000000fba R11: 0000000000000001 R12: ffff8880b9c2a508 [ 553.206888][ C0] R13: ffff8880b9c2a510 R14: ffff8880b9c2a500 R15: 0000000000000001 [ 553.206901][ C0] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 553.206917][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 553.206930][ C0] CR2: 00007f7a9519d090 CR3: 000000000ba8e000 CR4: 00000000003506f0 [ 553.206943][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 553.206954][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 553.206965][ C0] Call Trace: [ 553.206970][ C0] [ 553.206977][ C0] do_raw_spin_lock+0x120/0x2a0 [ 553.206996][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 553.207019][ C0] __hrtimer_run_queues+0x243/0xe50 [ 553.207045][ C0] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 553.207068][ C0] ? ktime_get_update_offsets_now+0x3eb/0x5c0 [ 553.207098][ C0] hrtimer_interrupt+0x31c/0x790 [ 553.207126][ C0] __sysvec_apic_timer_interrupt+0x146/0x530 [ 553.207147][ C0] sysvec_apic_timer_interrupt+0x8e/0xc0 [ 553.207176][ C0] [ 553.207181][ C0] [ 553.207187][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 553.207210][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x1c/0x60 [ 553.207236][ C0] Code: be a8 01 00 00 e8 b4 ff ff ff 31 c0 c3 90 65 8b 05 19 da 87 7e 89 c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b 14 25 80 6f 02 00 00 01 ff 00 74 0e 85 c9 74 35 8b 82 a4 15 00 00 85 c0 74 2b 8b [ 553.207254][ C0] RSP: 0018:ffffc900131ef738 EFLAGS: 00000246 [ 553.207268][ C0] RAX: 0000000080000001 RBX: ffffc900131efa40 RCX: 0000000000000000 [ 553.207280][ C0] RDX: ffff888079610000 RSI: ffffffff81b6fbe0 RDI: 0000000000000007 [ 553.207293][ C0] RBP: ffffffffffffffff R08: 0000000000000007 R09: 0000000000000000 [ 553.207304][ C0] R10: ffffffffffffffff R11: 0000000000000001 R12: 8000000076ffc007 [ 553.207317][ C0] R13: 00007f7a94edf000 R14: ffffea0001dbff00 R15: ffffea0001dbff00 [ 553.207340][ C0] ? __tlb_remove_page_size+0x50/0x420 [ 553.207365][ C0] ? __get_free_pages+0x8/0x40 [ 553.207382][ C0] __tlb_remove_page_size+0x50/0x420 [ 553.207405][ C0] unmap_page_range+0x108a/0x3710 [ 553.207437][ C0] ? vm_normal_page_pmd+0x550/0x550 [ 553.207462][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 553.207490][ C0] ? uprobe_munmap+0x1c/0x560 [ 553.207519][ C0] unmap_single_vma+0x196/0x360 [ 553.207545][ C0] unmap_vmas+0x18c/0x310 [ 553.207569][ C0] ? unmap_mapping_range+0x280/0x280 [ 553.207593][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 553.207624][ C0] ? lru_add_drain_cpu+0x4e2/0x900 [ 553.207652][ C0] exit_mmap+0x1c4/0x4a0 [ 553.207671][ C0] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 553.207702][ C0] __mmput+0x122/0x4b0 [ 553.207723][ C0] mmput+0x56/0x60 [ 553.207742][ C0] do_exit+0xa12/0x2a00 [ 553.207768][ C0] ? find_held_lock+0x2d/0x110 [ 553.207796][ C0] ? mm_update_next_owner+0x7a0/0x7a0 [ 553.207824][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 553.207855][ C0] do_group_exit+0xd2/0x2f0 [ 553.207883][ C0] get_signal+0x2542/0x2600 [ 553.207906][ C0] ? exit_signals+0x8b0/0x8b0 [ 553.207924][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 553.207956][ C0] arch_do_signal_or_restart+0x82/0x20f0 [ 553.207984][ C0] ? do_futex+0x12e/0x300 [ 553.208003][ C0] ? __ia32_sys_get_robust_list+0x3b0/0x3b0 [ 553.208026][ C0] ? get_sigframe_size+0x10/0x10 [ 553.208053][ C0] ? __x64_sys_futex+0x1b0/0x4a0 [ 553.208074][ C0] ? do_futex+0x300/0x300 [ 553.208092][ C0] ? exit_to_user_mode_prepare+0x137/0x250 [ 553.208114][ C0] exit_to_user_mode_prepare+0x15f/0x250 [ 553.208132][ C0] syscall_exit_to_user_mode+0x19/0x50 [ 553.208150][ C0] do_syscall_64+0x42/0xb0 [ 553.208173][ C0] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 553.208195][ C0] RIP: 0033:0x7f7a95089109 [ 553.208208][ C0] Code: Unable to access opcode bytes at RIP 0x7f7a950890df. [ 553.208216][ C0] RSP: 002b:00007f7a96261218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 553.208233][ C0] RAX: fffffffffffffe00 RBX: 00007f7a9519bf68 RCX: 00007f7a95089109 [ 553.208246][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7a9519bf68 [ 553.208258][ C0] RBP: 00007f7a9519bf60 R08: 0000000000000000 R09: 0000000000000000 [ 553.208269][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7a9519bf6c [ 553.208281][ C0] R13: 00007fffe69ff71f R14: 00007f7a96261300 R15: 0000000000022000 [ 553.208300][ C0] [ 553.208737][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 553.719439][ C1] CPU: 1 PID: 11 Comm: kworker/u4:1 Tainted: G L 5.18.0-next-20220601-syzkaller #0 [ 553.730049][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 553.740132][ C1] Workqueue: events_unbound toggle_allocation_gate [ 553.746684][ C1] Call Trace: [ 553.749989][ C1] [ 553.752860][ C1] dump_stack_lvl+0xcd/0x134 [ 553.758625][ C1] panic+0x2d7/0x636 [ 553.762580][ C1] ? panic_print_sys_info.part.0+0x10b/0x10b [ 553.768589][ C1] ? __irq_work_queue_local+0xd8/0x1b0 [ 553.774126][ C1] ? irq_work_queue+0x29/0x80 [ 553.778831][ C1] ? __wake_up_klogd.part.0+0x99/0xf0 [ 553.784255][ C1] ? watchdog_timer_fn.cold+0x5/0x25 [ 553.789599][ C1] watchdog_timer_fn.cold+0x16/0x25 [ 553.794844][ C1] ? softlockup_fn+0xa0/0xa0 [ 553.799463][ C1] __hrtimer_run_queues+0x1c0/0xe50 [ 553.804706][ C1] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 553.810718][ C1] ? ktime_get_update_offsets_now+0x3eb/0x5c0 [ 553.816849][ C1] hrtimer_interrupt+0x31c/0x790 [ 553.821840][ C1] __sysvec_apic_timer_interrupt+0x146/0x530 [ 553.827852][ C1] sysvec_apic_timer_interrupt+0x8e/0xc0 [ 553.833520][ C1] [ 553.836473][ C1] [ 553.839421][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 553.845428][ C1] RIP: 0010:smp_call_function_many_cond+0x499/0x1110 [ 553.852130][ C1] Code: 01 89 ee e8 c9 91 0a 00 85 ed 74 47 48 8b 04 24 49 89 c4 83 e0 07 49 c1 ec 03 48 89 c5 4d 01 fc 83 c5 03 e8 69 95 0a 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 21 0a 00 00 8b 43 08 31 [ 553.871759][ C1] RSP: 0018:ffffc90000107950 EFLAGS: 00000293 [ 553.877850][ C1] RAX: 0000000000000000 RBX: ffff8880b9c42500 RCX: 0000000000000000 [ 553.885849][ C1] RDX: ffff888010e43b00 RSI: ffffffff816fffb7 RDI: 0000000000000005 [ 553.893838][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 553.901822][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffffed10173884a1 [ 553.909821][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 553.917829][ C1] ? smp_call_function_many_cond+0x497/0x1110 [ 553.923939][ C1] ? optimize_nops+0x2d0/0x2d0 [ 553.928738][ C1] ? smp_call_on_cpu+0x270/0x270 [ 553.933702][ C1] ? text_poke_memset+0x60/0x60 [ 553.938619][ C1] ? optimize_nops+0x2d0/0x2d0 [ 553.943463][ C1] on_each_cpu_cond_mask+0x56/0xa0 [ 553.948603][ C1] text_poke_bp_batch+0x233/0x6c0 [ 553.953652][ C1] ? kmem_cache_alloc+0xae/0x3b0 [ 553.958627][ C1] ? do_sync_core+0x20/0x20 [ 553.963161][ C1] ? arch_jump_label_transform_queue+0xa0/0x100 [ 553.969432][ C1] ? __jump_label_update+0x351/0x400 [ 553.974736][ C1] text_poke_finish+0x16/0x30 [ 553.979430][ C1] arch_jump_label_transform_apply+0x13/0x20 [ 553.985432][ C1] jump_label_update+0x32f/0x410 [ 553.990389][ C1] static_key_enable_cpuslocked+0x1b1/0x260 [ 553.996299][ C1] static_key_enable+0x16/0x20 [ 554.001079][ C1] toggle_allocation_gate+0x100/0x390 [ 554.006476][ C1] ? lock_release+0x780/0x780 [ 554.011181][ C1] ? wake_up_kfence_timer+0x20/0x20 [ 554.016399][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 554.021641][ C1] process_one_work+0x996/0x1610 [ 554.026614][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 554.032011][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 554.036961][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 554.042009][ C1] worker_thread+0x665/0x1080 [ 554.046721][ C1] ? process_one_work+0x1610/0x1610 [ 554.051944][ C1] kthread+0x2e9/0x3a0 [ 554.056029][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 554.061695][ C1] ret_from_fork+0x1f/0x30 [ 554.066159][ C1] [ 555.164864][ C1] Shutting down cpus with NMI [ 555.169782][ C1] Kernel Offset: disabled [ 555.174151][ C1] Rebooting in 86400 seconds..