Warning: Permanently added '[localhost]:20887' (ECDSA) to the list of known hosts. 2022/09/12 14:07:39 fuzzer started 2022/09/12 14:07:40 dialing manager at localhost:38027 syzkaller login: [ 44.160360] cgroup: Unknown subsys name 'net' [ 44.284926] cgroup: Unknown subsys name 'rlimit' 2022/09/12 14:07:54 syscalls: 2215 2022/09/12 14:07:54 code coverage: enabled 2022/09/12 14:07:54 comparison tracing: enabled 2022/09/12 14:07:54 extra coverage: enabled 2022/09/12 14:07:54 setuid sandbox: enabled 2022/09/12 14:07:54 namespace sandbox: enabled 2022/09/12 14:07:54 Android sandbox: enabled 2022/09/12 14:07:54 fault injection: enabled 2022/09/12 14:07:54 leak checking: enabled 2022/09/12 14:07:54 net packet injection: enabled 2022/09/12 14:07:54 net device setup: enabled 2022/09/12 14:07:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/12 14:07:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/12 14:07:54 USB emulation: enabled 2022/09/12 14:07:54 hci packet injection: enabled 2022/09/12 14:07:54 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220912) 2022/09/12 14:07:54 802.15.4 emulation: enabled 2022/09/12 14:07:54 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/12 14:07:54 fetching corpus: 50, signal 24757/28186 (executing program) 2022/09/12 14:07:54 fetching corpus: 100, signal 39056/43693 (executing program) 2022/09/12 14:07:55 fetching corpus: 150, signal 51129/56722 (executing program) 2022/09/12 14:07:55 fetching corpus: 200, signal 61208/67603 (executing program) 2022/09/12 14:07:55 fetching corpus: 250, signal 71991/78898 (executing program) 2022/09/12 14:07:55 fetching corpus: 300, signal 79651/87163 (executing program) 2022/09/12 14:07:55 fetching corpus: 350, signal 84814/92903 (executing program) 2022/09/12 14:07:56 fetching corpus: 400, signal 89746/98396 (executing program) 2022/09/12 14:07:56 fetching corpus: 450, signal 92617/101836 (executing program) 2022/09/12 14:07:56 fetching corpus: 500, signal 97628/107179 (executing program) 2022/09/12 14:07:56 fetching corpus: 550, signal 100536/110544 (executing program) 2022/09/12 14:07:56 fetching corpus: 600, signal 103612/114012 (executing program) 2022/09/12 14:07:56 fetching corpus: 650, signal 106528/117279 (executing program) 2022/09/12 14:07:57 fetching corpus: 700, signal 108800/119944 (executing program) 2022/09/12 14:07:57 fetching corpus: 750, signal 111857/123188 (executing program) 2022/09/12 14:07:57 fetching corpus: 800, signal 114567/126115 (executing program) 2022/09/12 14:07:57 fetching corpus: 850, signal 116685/128498 (executing program) 2022/09/12 14:07:57 fetching corpus: 900, signal 119030/131049 (executing program) 2022/09/12 14:07:57 fetching corpus: 950, signal 120424/132760 (executing program) 2022/09/12 14:07:58 fetching corpus: 1000, signal 122644/135089 (executing program) 2022/09/12 14:07:58 fetching corpus: 1050, signal 124753/137275 (executing program) 2022/09/12 14:07:58 fetching corpus: 1100, signal 126526/139159 (executing program) 2022/09/12 14:07:58 fetching corpus: 1150, signal 128043/140855 (executing program) 2022/09/12 14:07:58 fetching corpus: 1200, signal 129563/142440 (executing program) 2022/09/12 14:07:58 fetching corpus: 1250, signal 131141/144072 (executing program) 2022/09/12 14:07:59 fetching corpus: 1300, signal 133145/145978 (executing program) 2022/09/12 14:07:59 fetching corpus: 1350, signal 134265/147233 (executing program) 2022/09/12 14:07:59 fetching corpus: 1400, signal 135867/148799 (executing program) 2022/09/12 14:07:59 fetching corpus: 1450, signal 137818/150518 (executing program) 2022/09/12 14:07:59 fetching corpus: 1500, signal 139291/151979 (executing program) 2022/09/12 14:07:59 fetching corpus: 1550, signal 140844/153336 (executing program) 2022/09/12 14:07:59 fetching corpus: 1600, signal 142077/154519 (executing program) 2022/09/12 14:08:00 fetching corpus: 1650, signal 142969/155441 (executing program) 2022/09/12 14:08:00 fetching corpus: 1700, signal 144686/156805 (executing program) 2022/09/12 14:08:00 fetching corpus: 1750, signal 145766/157786 (executing program) 2022/09/12 14:08:00 fetching corpus: 1800, signal 148324/159600 (executing program) 2022/09/12 14:08:00 fetching corpus: 1850, signal 149763/160709 (executing program) 2022/09/12 14:08:01 fetching corpus: 1900, signal 151095/161702 (executing program) 2022/09/12 14:08:01 fetching corpus: 1950, signal 153015/162989 (executing program) 2022/09/12 14:08:01 fetching corpus: 2000, signal 154284/163910 (executing program) 2022/09/12 14:08:01 fetching corpus: 2050, signal 156006/165141 (executing program) 2022/09/12 14:08:01 fetching corpus: 2100, signal 157465/166136 (executing program) 2022/09/12 14:08:01 fetching corpus: 2150, signal 158716/166961 (executing program) 2022/09/12 14:08:02 fetching corpus: 2200, signal 160181/167863 (executing program) 2022/09/12 14:08:02 fetching corpus: 2250, signal 161429/168613 (executing program) 2022/09/12 14:08:02 fetching corpus: 2300, signal 162441/169289 (executing program) 2022/09/12 14:08:02 fetching corpus: 2350, signal 163405/169873 (executing program) 2022/09/12 14:08:02 fetching corpus: 2400, signal 164750/170570 (executing program) 2022/09/12 14:08:02 fetching corpus: 2450, signal 166215/171359 (executing program) 2022/09/12 14:08:02 fetching corpus: 2500, signal 167087/171990 (executing program) 2022/09/12 14:08:03 fetching corpus: 2550, signal 167868/172406 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/172684 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/172756 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/172826 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/172904 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/172994 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/173077 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/173143 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/173222 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/173301 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/173386 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/173476 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/173552 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/173627 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/173712 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/173793 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/173878 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/173958 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/174037 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/174104 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/174181 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/174250 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/174334 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/174414 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/174486 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/174574 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/174637 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/174708 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/174776 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/174862 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/174937 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/175020 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/175105 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/175184 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/175201 (executing program) 2022/09/12 14:08:03 fetching corpus: 2570, signal 168348/175201 (executing program) 2022/09/12 14:08:06 starting 8 fuzzer processes 14:08:06 executing program 0: r0 = syz_io_uring_setup(0x7969, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/162, 0xa2}], 0x4) fork() 14:08:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f73665df41100080120000200004000f80000200040000000000000000000010000000000000002", 0x2d}, {&(0x7f0000010100)='RRaA\x00\x00\x00', 0x7, 0x800}, {0x0}], 0x0, &(0x7f0000011000)) 14:08:06 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_IO(r0, 0x127c, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:08:06 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000014c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2}, {0x6}}}}}}]}}, 0x0) 14:08:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x2011, r1, 0x0) fadvise64(r1, 0x0, 0x0, 0x4) [ 70.165865] audit: type=1400 audit(1662991686.355:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:08:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc000) r2 = signalfd4(r1, &(0x7f00000001c0)={[0xaf]}, 0x8, 0x800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = getpgid(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x1, 0x3, 0xf8, 0xe0, 0x0, 0x400000000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000200), 0x8}, 0x84, 0x80, 0x0, 0x4, 0x1000, 0x3ff00, 0x100, 0x0, 0x800, 0x0, 0x62e7}, r5, 0x7, r6, 0x10) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x51, 0x1, 0xd2, 0x1, 0x0, 0x3, 0x800, 0xa, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x800, 0x2, @perf_config_ext={0x2}, 0x4000, 0x1, 0x16, 0x5, 0x40a8, 0xda6, 0x7, 0x0, 0x4, 0x0, 0xdd70}, r4, 0x6, 0xffffffffffffffff, 0xa) setsockopt$inet_opts(r3, 0x0, 0x14, &(0x7f0000000000)='2', 0x1) pidfd_open(0x0, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000500)) 14:08:06 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000003fc0)={0x28, 0x25, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xb4a5, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890b, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) 14:08:06 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 71.450870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.453065] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.454509] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.457589] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.458610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.460248] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.461707] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.464383] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.465795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.468946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.470322] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.473660] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.475026] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.476873] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.482589] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.483764] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.485127] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.487288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.496207] Bluetooth: hci2: HCI_REQ-0x0c1a [ 71.497467] Bluetooth: hci1: HCI_REQ-0x0c1a [ 71.501045] Bluetooth: hci0: HCI_REQ-0x0c1a [ 71.562371] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 71.564829] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 71.566485] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 71.568218] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 71.571681] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 71.572786] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 71.574973] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 71.576798] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 71.578374] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 71.580655] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 71.581861] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 71.582979] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 71.584419] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 71.585640] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 71.588792] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 71.591230] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 71.594844] Bluetooth: hci6: HCI_REQ-0x0c1a [ 71.598625] Bluetooth: hci7: HCI_REQ-0x0c1a [ 71.613521] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 71.614921] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 71.620428] Bluetooth: hci5: HCI_REQ-0x0c1a [ 73.526119] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 73.526758] Bluetooth: hci0: command 0x0409 tx timeout [ 73.528088] Bluetooth: hci1: command 0x0409 tx timeout [ 73.528582] Bluetooth: hci2: command 0x0409 tx timeout [ 73.529073] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 73.655132] Bluetooth: hci5: command 0x0409 tx timeout [ 73.655946] Bluetooth: hci7: command 0x0409 tx timeout [ 73.657260] Bluetooth: hci6: command 0x0409 tx timeout [ 75.574112] Bluetooth: hci2: command 0x041b tx timeout [ 75.574954] Bluetooth: hci1: command 0x041b tx timeout [ 75.576210] Bluetooth: hci0: command 0x041b tx timeout [ 75.703397] Bluetooth: hci6: command 0x041b tx timeout [ 75.706009] Bluetooth: hci7: command 0x041b tx timeout [ 75.707382] Bluetooth: hci5: command 0x041b tx timeout [ 76.717170] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.718815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.720056] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.730633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.734711] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.740705] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.747736] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.748672] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.751602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.767252] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.781190] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.782646] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.795769] Bluetooth: hci3: HCI_REQ-0x0c1a [ 76.796271] Bluetooth: hci4: HCI_REQ-0x0c1a [ 77.622061] Bluetooth: hci0: command 0x040f tx timeout [ 77.622495] Bluetooth: hci1: command 0x040f tx timeout [ 77.622862] Bluetooth: hci2: command 0x040f tx timeout [ 77.750056] Bluetooth: hci5: command 0x040f tx timeout [ 77.750482] Bluetooth: hci7: command 0x040f tx timeout [ 77.750854] Bluetooth: hci6: command 0x040f tx timeout [ 78.838130] Bluetooth: hci3: command 0x0409 tx timeout [ 78.902038] Bluetooth: hci4: command 0x0409 tx timeout [ 79.681309] Bluetooth: hci2: command 0x0419 tx timeout [ 79.687071] Bluetooth: hci1: command 0x0419 tx timeout [ 79.687826] Bluetooth: hci0: command 0x0419 tx timeout [ 79.801093] Bluetooth: hci6: command 0x0419 tx timeout [ 79.806086] Bluetooth: hci7: command 0x0419 tx timeout [ 79.814090] Bluetooth: hci5: command 0x0419 tx timeout [ 80.886065] Bluetooth: hci3: command 0x041b tx timeout [ 80.950034] Bluetooth: hci4: command 0x041b tx timeout [ 82.934493] Bluetooth: hci3: command 0x040f tx timeout [ 82.998035] Bluetooth: hci4: command 0x040f tx timeout [ 84.982119] Bluetooth: hci3: command 0x0419 tx timeout [ 85.046621] Bluetooth: hci4: command 0x0419 tx timeout 14:09:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x2011, r1, 0x0) fadvise64(r1, 0x0, 0x0, 0x4) 14:09:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x2011, r1, 0x0) fadvise64(r1, 0x0, 0x0, 0x4) [ 126.849825] audit: type=1400 audit(1662991743.038:7): avc: denied { open } for pid=3730 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 126.852334] audit: type=1400 audit(1662991743.039:8): avc: denied { kernel } for pid=3730 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 126.882866] ------------[ cut here ]------------ [ 126.882893] [ 126.882897] ====================================================== [ 126.882902] WARNING: possible circular locking dependency detected [ 126.882907] 6.0.0-rc5-next-20220912 #1 Not tainted [ 126.882917] ------------------------------------------------------ [ 126.882921] syz-executor.5/3732 is trying to acquire lock: [ 126.882930] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 126.882981] [ 126.882981] but task is already holding lock: [ 126.882985] ffff8880101c7820 (&ctx->lock){-.-.}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 126.883023] [ 126.883023] which lock already depends on the new lock. [ 126.883023] [ 126.883028] [ 126.883028] the existing dependency chain (in reverse order) is: [ 126.883032] [ 126.883032] -> #3 (&ctx->lock){-.-.}-{2:2}: [ 126.883052] _raw_spin_lock+0x2a/0x40 [ 126.883075] __perf_event_task_sched_out+0x53b/0x18d0 [ 126.883092] __schedule+0xedd/0x2470 [ 126.883106] schedule+0xda/0x1b0 [ 126.883118] exit_to_user_mode_prepare+0x114/0x1a0 [ 126.883147] syscall_exit_to_user_mode+0x19/0x40 [ 126.883172] do_syscall_64+0x48/0x90 [ 126.883190] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.883214] [ 126.883214] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 126.883234] _raw_spin_lock_nested+0x30/0x40 [ 126.883254] raw_spin_rq_lock_nested+0x1e/0x30 [ 126.883273] task_fork_fair+0x63/0x4d0 [ 126.883297] sched_cgroup_fork+0x3d0/0x540 [ 126.883317] copy_process+0x3f9e/0x6df0 [ 126.883331] kernel_clone+0xe7/0x890 [ 126.883344] user_mode_thread+0xad/0xf0 [ 126.883359] rest_init+0x24/0x250 [ 126.883388] arch_call_rest_init+0xf/0x14 [ 126.883413] start_kernel+0x4c1/0x4e6 [ 126.883436] secondary_startup_64_no_verify+0xe0/0xeb [ 126.883455] [ 126.883455] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 126.883474] _raw_spin_lock_irqsave+0x39/0x60 [ 126.883495] try_to_wake_up+0xab/0x1920 [ 126.883513] up+0x75/0xb0 [ 126.883529] __up_console_sem+0x6e/0x80 [ 126.883550] console_unlock+0x46a/0x590 [ 126.883572] vprintk_emit+0x1bd/0x560 [ 126.883595] vprintk+0x84/0xa0 [ 126.883617] _printk+0xba/0xf1 [ 126.883640] kauditd_hold_skb.cold+0x3f/0x4e [ 126.883659] kauditd_send_queue+0x233/0x290 [ 126.883679] kauditd_thread+0x5da/0x9a0 [ 126.883698] kthread+0x2ed/0x3a0 [ 126.883717] ret_from_fork+0x22/0x30 [ 126.883734] [ 126.883734] -> #0 ((console_sem).lock){....}-{2:2}: [ 126.883754] __lock_acquire+0x2a02/0x5e70 [ 126.883776] lock_acquire+0x1a2/0x530 [ 126.883798] _raw_spin_lock_irqsave+0x39/0x60 [ 126.883819] down_trylock+0xe/0x70 [ 126.883836] __down_trylock_console_sem+0x3b/0xd0 [ 126.883858] vprintk_emit+0x16b/0x560 [ 126.883880] vprintk+0x84/0xa0 [ 126.883902] _printk+0xba/0xf1 [ 126.883924] report_bug.cold+0x72/0xab [ 126.883941] handle_bug+0x3c/0x70 [ 126.883958] exc_invalid_op+0x14/0x50 [ 126.883976] asm_exc_invalid_op+0x16/0x20 [ 126.883998] group_sched_out.part.0+0x2c7/0x460 [ 126.884012] ctx_sched_out+0x8f1/0xc10 [ 126.884026] __perf_event_task_sched_out+0x6d0/0x18d0 [ 126.884043] __schedule+0xedd/0x2470 [ 126.884056] preempt_schedule_common+0x45/0xc0 [ 126.884071] __cond_resched+0x17/0x30 [ 126.884085] __mutex_lock+0xa3/0x14d0 [ 126.884099] __do_sys_perf_event_open+0x1eec/0x32c0 [ 126.884117] do_syscall_64+0x3b/0x90 [ 126.884135] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.884157] [ 126.884157] other info that might help us debug this: [ 126.884157] [ 126.884161] Chain exists of: [ 126.884161] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 126.884161] [ 126.884182] Possible unsafe locking scenario: [ 126.884182] [ 126.884185] CPU0 CPU1 [ 126.884189] ---- ---- [ 126.884192] lock(&ctx->lock); [ 126.884199] lock(&rq->__lock); [ 126.884208] lock(&ctx->lock); [ 126.884217] lock((console_sem).lock); [ 126.884225] [ 126.884225] *** DEADLOCK *** [ 126.884225] [ 126.884228] 2 locks held by syz-executor.5/3732: [ 126.884238] #0: ffff88806cf37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 126.884273] #1: ffff8880101c7820 (&ctx->lock){-.-.}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 126.884313] [ 126.884313] stack backtrace: [ 126.884316] CPU: 1 PID: 3732 Comm: syz-executor.5 Not tainted 6.0.0-rc5-next-20220912 #1 [ 126.884334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 126.884345] Call Trace: [ 126.884349] [ 126.884355] dump_stack_lvl+0x8b/0xb3 [ 126.884374] check_noncircular+0x263/0x2e0 [ 126.884397] ? format_decode+0x26c/0xb50 [ 126.884417] ? print_circular_bug+0x450/0x450 [ 126.884441] ? enable_ptr_key_workfn+0x20/0x20 [ 126.884460] ? __lockdep_reset_lock+0x180/0x180 [ 126.884483] ? format_decode+0x26c/0xb50 [ 126.884504] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 126.884529] __lock_acquire+0x2a02/0x5e70 [ 126.884560] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 126.884591] lock_acquire+0x1a2/0x530 [ 126.884614] ? down_trylock+0xe/0x70 [ 126.884635] ? rcu_read_unlock+0x40/0x40 [ 126.884658] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 126.884688] ? vprintk+0x84/0xa0 [ 126.884713] _raw_spin_lock_irqsave+0x39/0x60 [ 126.884734] ? down_trylock+0xe/0x70 [ 126.884753] down_trylock+0xe/0x70 [ 126.884772] ? vprintk+0x84/0xa0 [ 126.884795] __down_trylock_console_sem+0x3b/0xd0 [ 126.884820] vprintk_emit+0x16b/0x560 [ 126.884843] ? lock_downgrade+0x6d0/0x6d0 [ 126.884869] vprintk+0x84/0xa0 [ 126.884893] _printk+0xba/0xf1 [ 126.884917] ? record_print_text.cold+0x16/0x16 [ 126.884944] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 126.884963] ? lock_downgrade+0x6d0/0x6d0 [ 126.884988] ? report_bug.cold+0x66/0xab [ 126.885007] ? group_sched_out.part.0+0x2c7/0x460 [ 126.885023] report_bug.cold+0x72/0xab [ 126.885044] handle_bug+0x3c/0x70 [ 126.885063] exc_invalid_op+0x14/0x50 [ 126.885083] asm_exc_invalid_op+0x16/0x20 [ 126.885106] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 126.885124] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 126.885141] RSP: 0018:ffff88803e417978 EFLAGS: 00010006 [ 126.885153] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 126.885164] RDX: ffff88800d6c3580 RSI: ffffffff81566027 RDI: 0000000000000005 [ 126.885175] RBP: ffff88803e4185c8 R08: 0000000000000005 R09: 0000000000000001 [ 126.885186] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880101c7800 [ 126.885196] R13: ffff88806cf3d100 R14: ffffffff8547c7c0 R15: 0000000000000002 [ 126.885212] ? group_sched_out.part.0+0x2c7/0x460 [ 126.885231] ? group_sched_out.part.0+0x2c7/0x460 [ 126.885249] ctx_sched_out+0x8f1/0xc10 [ 126.885267] __perf_event_task_sched_out+0x6d0/0x18d0 [ 126.885288] ? lock_is_held_type+0xd7/0x130 [ 126.885313] ? __perf_cgroup_move+0x160/0x160 [ 126.885330] ? set_next_entity+0x304/0x550 [ 126.885355] ? update_curr+0x267/0x740 [ 126.885380] ? lock_is_held_type+0xd7/0x130 [ 126.885405] __schedule+0xedd/0x2470 [ 126.885423] ? io_schedule_timeout+0x150/0x150 [ 126.885439] ? find_held_lock+0x2c/0x110 [ 126.885461] ? lock_is_held_type+0xd7/0x130 [ 126.885485] ? __cond_resched+0x17/0x30 [ 126.885501] preempt_schedule_common+0x45/0xc0 [ 126.885518] __cond_resched+0x17/0x30 [ 126.885533] __mutex_lock+0xa3/0x14d0 [ 126.885551] ? lock_is_held_type+0xd7/0x130 [ 126.885574] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 126.885595] ? mutex_lock_io_nested+0x1310/0x1310 [ 126.885612] ? lock_release+0x3b2/0x750 [ 126.885636] ? __up_read+0x192/0x730 [ 126.885657] ? up_write+0x480/0x480 [ 126.885680] __do_sys_perf_event_open+0x1eec/0x32c0 [ 126.885704] ? perf_compat_ioctl+0x130/0x130 [ 126.885722] ? syscall_enter_from_user_mode+0x18/0x50 [ 126.885747] ? perf_trace_preemptirq_template+0xa2/0x420 [ 126.885778] ? syscall_enter_from_user_mode+0x1d/0x50 [ 126.885803] ? syscall_enter_from_user_mode+0x1d/0x50 [ 126.885831] do_syscall_64+0x3b/0x90 [ 126.885850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.885874] RIP: 0033:0x7fcd6a664b19 [ 126.885886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 126.885901] RSP: 002b:00007fcd67bda188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 126.885917] RAX: ffffffffffffffda RBX: 00007fcd6a777f60 RCX: 00007fcd6a664b19 [ 126.885928] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 126.885939] RBP: 00007fcd6a6bef6d R08: 0000000000000000 R09: 0000000000000000 [ 126.885949] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 126.885959] R13: 00007fff2f2ab1cf R14: 00007fcd67bda300 R15: 0000000000022000 [ 126.885978] [ 126.969604] WARNING: CPU: 1 PID: 3732 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 126.970480] Modules linked in: [ 126.970790] CPU: 1 PID: 3732 Comm: syz-executor.5 Not tainted 6.0.0-rc5-next-20220912 #1 [ 126.971560] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 126.972650] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 126.973172] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 126.974874] RSP: 0018:ffff88803e417978 EFLAGS: 00010006 [ 126.975382] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 126.976067] RDX: ffff88800d6c3580 RSI: ffffffff81566027 RDI: 0000000000000005 [ 126.976738] RBP: ffff88803e4185c8 R08: 0000000000000005 R09: 0000000000000001 [ 126.977414] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880101c7800 [ 126.978083] R13: ffff88806cf3d100 R14: ffffffff8547c7c0 R15: 0000000000000002 [ 126.978769] FS: 00007fcd67bda700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 126.979545] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.980096] CR2: 00007fcd6a774000 CR3: 0000000030e90000 CR4: 0000000000350ee0 [ 126.980769] Call Trace: [ 126.981017] [ 126.981246] ctx_sched_out+0x8f1/0xc10 [ 126.981626] __perf_event_task_sched_out+0x6d0/0x18d0 [ 126.982125] ? lock_is_held_type+0xd7/0x130 [ 126.982541] ? __perf_cgroup_move+0x160/0x160 [ 126.982969] ? set_next_entity+0x304/0x550 [ 126.983385] ? update_curr+0x267/0x740 [ 126.983768] ? lock_is_held_type+0xd7/0x130 [ 126.984187] __schedule+0xedd/0x2470 [ 126.984549] ? io_schedule_timeout+0x150/0x150 [ 126.984985] ? find_held_lock+0x2c/0x110 [ 126.985382] ? lock_is_held_type+0xd7/0x130 [ 126.985802] ? __cond_resched+0x17/0x30 [ 126.986181] preempt_schedule_common+0x45/0xc0 [ 126.986625] __cond_resched+0x17/0x30 [ 126.986990] __mutex_lock+0xa3/0x14d0 [ 126.987359] ? lock_is_held_type+0xd7/0x130 [ 126.987797] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 126.988287] ? mutex_lock_io_nested+0x1310/0x1310 [ 126.988752] ? lock_release+0x3b2/0x750 [ 126.989145] ? __up_read+0x192/0x730 [ 126.989509] ? up_write+0x480/0x480 [ 126.989870] __do_sys_perf_event_open+0x1eec/0x32c0 [ 126.990356] ? perf_compat_ioctl+0x130/0x130 [ 126.990781] ? syscall_enter_from_user_mode+0x18/0x50 [ 126.991280] ? perf_trace_preemptirq_template+0xa2/0x420 [ 126.991814] ? syscall_enter_from_user_mode+0x1d/0x50 [ 126.992315] ? syscall_enter_from_user_mode+0x1d/0x50 [ 126.992824] do_syscall_64+0x3b/0x90 [ 126.993188] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.993686] RIP: 0033:0x7fcd6a664b19 [ 126.994043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 126.995762] RSP: 002b:00007fcd67bda188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 126.996471] RAX: ffffffffffffffda RBX: 00007fcd6a777f60 RCX: 00007fcd6a664b19 [ 126.997133] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 126.997800] RBP: 00007fcd6a6bef6d R08: 0000000000000000 R09: 0000000000000000 [ 126.998473] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 126.999139] R13: 00007fff2f2ab1cf R14: 00007fcd67bda300 R15: 0000000000022000 [ 126.999819] [ 127.000043] irq event stamp: 2738 [ 127.000362] hardirqs last enabled at (2737): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 127.001281] hardirqs last disabled at (2738): [] __schedule+0x1225/0x2470 [ 127.002051] softirqs last enabled at (2722): [] __irq_exit_rcu+0x11b/0x180 [ 127.002849] softirqs last disabled at (1153): [] __irq_exit_rcu+0x11b/0x180 [ 127.003666] ---[ end trace 0000000000000000 ]--- [ 127.093004] hrtimer: interrupt took 18385 ns [ 128.175519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.176685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.367709] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 128.378618] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 128.681586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.682493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.712061] loop1: detected capacity change from 0 to 8 [ 130.717400] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 130.718303] FAT-fs (loop1): FAT read failed (blocknr 32) [ 130.724732] loop1: detected capacity change from 0 to 8 [ 130.726699] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 130.727546] FAT-fs (loop1): FAT read failed (blocknr 32) 14:09:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000003fc0)={0x28, 0x25, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xb4a5, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890b, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) 14:09:06 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000003fc0)={0x28, 0x25, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xb4a5, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890b, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) 14:09:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x2011, r1, 0x0) fadvise64(r1, 0x0, 0x0, 0x4) 14:09:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc000) r2 = signalfd4(r1, &(0x7f00000001c0)={[0xaf]}, 0x8, 0x800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = getpgid(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x1, 0x3, 0xf8, 0xe0, 0x0, 0x400000000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000200), 0x8}, 0x84, 0x80, 0x0, 0x4, 0x1000, 0x3ff00, 0x100, 0x0, 0x800, 0x0, 0x62e7}, r5, 0x7, r6, 0x10) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x51, 0x1, 0xd2, 0x1, 0x0, 0x3, 0x800, 0xa, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x800, 0x2, @perf_config_ext={0x2}, 0x4000, 0x1, 0x16, 0x5, 0x40a8, 0xda6, 0x7, 0x0, 0x4, 0x0, 0xdd70}, r4, 0x6, 0xffffffffffffffff, 0xa) setsockopt$inet_opts(r3, 0x0, 0x14, &(0x7f0000000000)='2', 0x1) pidfd_open(0x0, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000500)) 14:09:06 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:09:06 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000014c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2}, {0x6}}}}}}]}}, 0x0) 14:09:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f73665df41100080120000200004000f80000200040000000000000000000010000000000000002", 0x2d}, {&(0x7f0000010100)='RRaA\x00\x00\x00', 0x7, 0x800}, {0x0}], 0x0, &(0x7f0000011000)) 14:09:06 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_IO(r0, 0x127c, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 130.797498] loop1: detected capacity change from 0 to 8 [ 130.816301] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 130.816374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.817722] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 130.819217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.821515] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 130.826712] FAT-fs (loop1): FAT read failed (blocknr 32) 14:09:07 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_IO(r0, 0x127c, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:09:07 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:09:07 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000003fc0)={0x28, 0x25, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xb4a5, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890b, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) 14:09:07 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc000) r2 = signalfd4(r1, &(0x7f00000001c0)={[0xaf]}, 0x8, 0x800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = getpgid(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x1, 0x3, 0xf8, 0xe0, 0x0, 0x400000000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000200), 0x8}, 0x84, 0x80, 0x0, 0x4, 0x1000, 0x3ff00, 0x100, 0x0, 0x800, 0x0, 0x62e7}, r5, 0x7, r6, 0x10) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x51, 0x1, 0xd2, 0x1, 0x0, 0x3, 0x800, 0xa, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x800, 0x2, @perf_config_ext={0x2}, 0x4000, 0x1, 0x16, 0x5, 0x40a8, 0xda6, 0x7, 0x0, 0x4, 0x0, 0xdd70}, r4, 0x6, 0xffffffffffffffff, 0xa) setsockopt$inet_opts(r3, 0x0, 0x14, &(0x7f0000000000)='2', 0x1) pidfd_open(0x0, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000500)) [ 130.962624] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 14:09:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f73665df41100080120000200004000f80000200040000000000000000000010000000000000002", 0x2d}, {&(0x7f0000010100)='RRaA\x00\x00\x00', 0x7, 0x800}, {0x0}], 0x0, &(0x7f0000011000)) 14:09:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000003fc0)={0x28, 0x25, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xb4a5, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890b, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) 14:09:07 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_IO(r0, 0x127c, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:09:07 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:09:07 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000003fc0)={0x28, 0x25, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xb4a5, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890b, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) 14:09:07 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc000) r2 = signalfd4(r1, &(0x7f00000001c0)={[0xaf]}, 0x8, 0x800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = getpgid(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x1, 0x3, 0xf8, 0xe0, 0x0, 0x400000000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000200), 0x8}, 0x84, 0x80, 0x0, 0x4, 0x1000, 0x3ff00, 0x100, 0x0, 0x800, 0x0, 0x62e7}, r5, 0x7, r6, 0x10) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x51, 0x1, 0xd2, 0x1, 0x0, 0x3, 0x800, 0xa, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x800, 0x2, @perf_config_ext={0x2}, 0x4000, 0x1, 0x16, 0x5, 0x40a8, 0xda6, 0x7, 0x0, 0x4, 0x0, 0xdd70}, r4, 0x6, 0xffffffffffffffff, 0xa) setsockopt$inet_opts(r3, 0x0, 0x14, &(0x7f0000000000)='2', 0x1) pidfd_open(0x0, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000500)) 14:09:07 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc000) r2 = signalfd4(r1, &(0x7f00000001c0)={[0xaf]}, 0x8, 0x800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = getpgid(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x1, 0x3, 0xf8, 0xe0, 0x0, 0x400000000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000200), 0x8}, 0x84, 0x80, 0x0, 0x4, 0x1000, 0x3ff00, 0x100, 0x0, 0x800, 0x0, 0x62e7}, r5, 0x7, r6, 0x10) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x51, 0x1, 0xd2, 0x1, 0x0, 0x3, 0x800, 0xa, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x800, 0x2, @perf_config_ext={0x2}, 0x4000, 0x1, 0x16, 0x5, 0x40a8, 0xda6, 0x7, 0x0, 0x4, 0x0, 0xdd70}, r4, 0x6, 0xffffffffffffffff, 0xa) setsockopt$inet_opts(r3, 0x0, 0x14, &(0x7f0000000000)='2', 0x1) pidfd_open(0x0, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000500)) 14:09:07 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000014c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2}, {0x6}}}}}}]}}, 0x0) [ 131.478887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.487367] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 131.492331] loop1: detected capacity change from 0 to 8 [ 131.497367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.506934] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 131.513298] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 131.514782] FAT-fs (loop1): FAT read failed (blocknr 32) 14:09:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000003fc0)={0x28, 0x25, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xb4a5, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890b, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) 14:09:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f73665df41100080120000200004000f80000200040000000000000000000010000000000000002", 0x2d}, {&(0x7f0000010100)='RRaA\x00\x00\x00', 0x7, 0x800}, {0x0}], 0x0, &(0x7f0000011000)) [ 131.626676] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 14:09:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x2011, r1, 0x0) fadvise64(r1, 0x0, 0x0, 0x4) 14:09:07 executing program 7: r0 = memfd_create(&(0x7f0000000240)='Z@Z\x80\xb5G\xf3\x93)m@D%\x86Q\x11\x1f\xb9\xa9ur1;\x8b1D\x1139\xaaR\xed\x00g+\x8a\x8b\xc2\x12\xb8\xa2+E/\xb2\xaaw\xf1\xb3\x18\n\x1e$\xdeZ\x8as\x15\x1fh\xe4\xda\xd2\xafC2#\b{\xa4\xd7G\x9eB\xd7\x15\xd5\f\xcaZ\xb9\xa2\x14\x10\xc4\xf0\xdb\xc1\a\xb1\xd1\x7f\xd8\x7fD\xbf2\x13<\x8b\xd0\x9d6\xdf&E\xaf)\x1f\xec\xfaW0xffffffffffffffff}, 0xc000) r2 = signalfd4(r1, &(0x7f00000001c0)={[0xaf]}, 0x8, 0x800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = getpgid(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x1, 0x3, 0xf8, 0xe0, 0x0, 0x400000000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000200), 0x8}, 0x84, 0x80, 0x0, 0x4, 0x1000, 0x3ff00, 0x100, 0x0, 0x800, 0x0, 0x62e7}, r5, 0x7, r6, 0x10) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x51, 0x1, 0xd2, 0x1, 0x0, 0x3, 0x800, 0xa, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x800, 0x2, @perf_config_ext={0x2}, 0x4000, 0x1, 0x16, 0x5, 0x40a8, 0xda6, 0x7, 0x0, 0x4, 0x0, 0xdd70}, r4, 0x6, 0xffffffffffffffff, 0xa) setsockopt$inet_opts(r3, 0x0, 0x14, &(0x7f0000000000)='2', 0x1) pidfd_open(0x0, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000500)) [ 131.725277] loop1: detected capacity change from 0 to 8 [ 131.741414] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 131.744888] FAT-fs (loop1): FAT read failed (blocknr 32) [ 131.813129] loop0: detected capacity change from 0 to 352 14:09:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736698fa1b00080801000240004000f801002000400000000000000000008000"/64, 0x40}, {&(0x7f0000010100)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x800}, {&(0x7f0000010200)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x1000}, {&(0x7f0000010300)="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", 0x120, 0x1800}, {&(0x7f0000010500)="2e20202020202020202020100010e770325132510000e77032510300000000002e2e202020202020202020100010e770325132510000e770325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200010e770325132510000e770325104001a040000", 0x80, 0x6000}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xa000}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0xe000}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x16000}], 0x0, &(0x7f0000010d00)) 14:09:08 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x2011, r1, 0x0) fadvise64(r1, 0x0, 0x0, 0x4) 14:09:08 executing program 1: r0 = memfd_create(&(0x7f0000000240)='Z@Z\x80\xb5G\xf3\x93)m@D%\x86Q\x11\x1f\xb9\xa9ur1;\x8b1D\x1139\xaaR\xed\x00g+\x8a\x8b\xc2\x12\xb8\xa2+E/\xb2\xaaw\xf1\xb3\x18\n\x1e$\xdeZ\x8as\x15\x1fh\xe4\xda\xd2\xafC2#\b{\xa4\xd7G\x9eB\xd7\x15\xd5\f\xcaZ\xb9\xa2\x14\x10\xc4\xf0\xdb\xc1\a\xb1\xd1\x7f\xd8\x7fD\xbf2\x13<\x8b\xd0\x9d6\xdf&E\xaf)\x1f\xec\xfaW0xffffffffffffffff}, 0xc000) r2 = signalfd4(r1, &(0x7f00000001c0)={[0xaf]}, 0x8, 0x800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = getpgid(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x1, 0x3, 0xf8, 0xe0, 0x0, 0x400000000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000200), 0x8}, 0x84, 0x80, 0x0, 0x4, 0x1000, 0x3ff00, 0x100, 0x0, 0x800, 0x0, 0x62e7}, r5, 0x7, r6, 0x10) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x51, 0x1, 0xd2, 0x1, 0x0, 0x3, 0x800, 0xa, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x800, 0x2, @perf_config_ext={0x2}, 0x4000, 0x1, 0x16, 0x5, 0x40a8, 0xda6, 0x7, 0x0, 0x4, 0x0, 0xdd70}, r4, 0x6, 0xffffffffffffffff, 0xa) setsockopt$inet_opts(r3, 0x0, 0x14, &(0x7f0000000000)='2', 0x1) pidfd_open(0x0, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000500)) 14:09:08 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000014c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2}, {0x6}}}}}}]}}, 0x0) 14:09:08 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x1, 0x3f, 0x20, 0x7f, 0x0, 0x2, 0x88540, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x1}, 0x44000, 0x9, 0xdf, 0x8, 0x9, 0x32, 0x9f91, 0x0, 0xffffff00, 0x0, 0x2}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xb) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x22000850}, 0x4040) [ 132.188908] loop0: detected capacity change from 0 to 352 [ 132.192385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.198470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 14:09:08 executing program 7: r0 = memfd_create(&(0x7f0000000240)='Z@Z\x80\xb5G\xf3\x93)m@D%\x86Q\x11\x1f\xb9\xa9ur1;\x8b1D\x1139\xaaR\xed\x00g+\x8a\x8b\xc2\x12\xb8\xa2+E/\xb2\xaaw\xf1\xb3\x18\n\x1e$\xdeZ\x8as\x15\x1fh\xe4\xda\xd2\xafC2#\b{\xa4\xd7G\x9eB\xd7\x15\xd5\f\xcaZ\xb9\xa2\x14\x10\xc4\xf0\xdb\xc1\a\xb1\xd1\x7f\xd8\x7fD\xbf2\x13<\x8b\xd0\x9d6\xdf&E\xaf)\x1f\xec\xfaW