cabe65bdd694a45646a0aec42debcdabecb67f32a942c"}, @generic={0x75, 0x22, "15f7e01d70e9304e521aad05c65d1696bca3df848300e46c3977ff2283cadde397ee24c3db9476bbbc022b03f10cd7d768ec7ff32b48929b0da2812972da0110facf51f2fb62c44f32a76cfe293bbb5dffddff06a539a1eb025a468212b12f2b6c85ef3222e4cc6cb8087123fb3c4dc36514e6"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0x0, 0x6, 0x4, [@generic={0x83, 0xa, "f1b61bde8e23aee691da6fddf1a662d4faf57b33c234367581d403eecb5c217b88667064f6b64062037ea2de5fae3317bdb91a39a260b52364723448a8219bb4955c8837a5f2271f2887964319736516de8b4f372b0746bd07c16ca3e9b001b93f0121980def306598d05f9b7b22acf4e16576d441e3c7b38ec5a19143ece84dbe"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x1, 0x38, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x1a, 0x58, 0x1f}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x0, 0x3f}}, {{0x9, 0x5, 0xb, 0x8, 0x600, 0x4, 0x60, 0x7f}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x6, 0x7, 0x3a, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5}]}}, {{0x9, 0x5, 0x82, 0xc, 0x400, 0x9, 0x6, 0x2c, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}, {{0x9, 0x5, 0x7, 0x3, 0x10, 0x6, 0x7, 0x80}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x201, 0x5, 0x5, 0x6, 0x40, 0x4}, 0xc, &(0x7f0000000e80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x1}]}, 0x1, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x1809}}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000f40)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000013c0)={&(0x7f0000001140)={0x258, 0x20, 0x400, 0x70bd29, 0x25dfdbfe, {0x1d}, [@generic="9f8bbef02fef0636bc0bca3fe397deea7e98e2ef45e28a785572016d7157d43f6ffe44c2b8bcf54865bd23bb8bf4184cf4aa7c8f553a9be09c64375e343dc61eff2a033b71e5d301ecc43412ec504af88c8da9e415dde95411a585ca2964b6748e78deb0bc", @typed={0x8, 0x2d, 0x0, 0x0, @fd}, @typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@empty}, @nested={0x160, 0xf4, 0x0, 0x1, [@typed={0x8, 0xfb, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x4, 0x83}, @generic="fdd6c776e1c72f6e6448c1e798db09c55bc6d84b72262a6bd84f3c456da8d7e52d677fde1cd52ce143cb371cc32a0f9a36d143107fdab7d9c9b9c065bd3c032dae6508b65d3586ab0d4945e8388973811d4af2ac5b84da383465a88e576cf7658c8fd3d9b85ceef613e4336b6e2e0858205e3ca10fa1344747c6c8cd926924b877db08ae772c8f19dc3c3ae7bbe3a31968af581f77b1724189fd391cfe6735d266baa8e001ea42c4e3052958dc2e1257611f4fc47eb4f087c0394cdd3f076fc78c8fb6f310a107d75f3c11bb506ece1ecd7510b1d0a53eeedbffb40c48f65cb1c47aa3dcd4279b900a599951d6c9a87959e9493a", @generic="f6cf8b03aaee437855a513f218b5bc8ee0659b72294dc1c7eacaf6dccf23a7029cf679426e059fcdb72e12bf5c4214ba", @typed={0x5, 0x56, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@empty}, @typed={0xc, 0xca, 0x0, 0x0, @u64=0x8}]}, @generic="9063408c9cc09dbe86e35cb3003e3280104de5550ed71de0af3d98364d9a9e7079bbd83c2b3fc25bcf3a0d644dc7c55d63f53fd225514c79e147df1e1667c69fa71c9650994705279f7a8103e7483a0ebc94fdbadf6f3a896fbf0911d5b9eca3baa7370c48c24d1367232ba455cacc"]}, 0x258}, 0x1, 0x0, 0x0, 0x4000}, 0x40c4) [ 226.129479][ T330] usb 3-1: Using ep0 maxpacket: 16 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0xfd, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x0) [ 226.229502][ T24] usb 2-1: device descriptor read/8, error -71 [ 226.249480][ T330] usb 3-1: config 0 has an invalid interface number: 176 but max is 1 [ 226.257534][ T330] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 226.266109][ T330] usb 3-1: config 0 has no interface number 1 [ 226.271978][ T330] usb 3-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 226.282536][ T330] usb 3-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 226.293039][ T330] usb 3-1: config 0 interface 176 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0 [ 226.302648][ T330] usb 3-1: config 0 interface 176 altsetting 7 endpoint 0x9 has invalid maxpacket 60950, setting to 64 [ 226.313653][ T330] usb 3-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x0, skipping executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@user_xattr}, {@nobarrier}, {@sysvgroups}, {@norecovery}, {@errors_continue}, {@nomblk_io_submit}, {@quota}, {@noauto_da_alloc}, {@lazytime}]}, 0x3, 0x56a, &(0x7f0000000ec0)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f00000003c0)=0xa, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x48, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8}]}]}]}, 0x48}}, 0x0) [ 226.324138][ T330] usb 3-1: config 0 interface 176 altsetting 7 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 226.334869][ T330] usb 3-1: config 0 interface 176 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 226.345705][ T1167] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 226.353212][ T330] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 226.353238][ T330] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 226.353261][ T330] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 226.384123][ T330] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 226.389646][ T974] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 226.393568][ T330] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 226.403315][ T974] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 226.413934][ T5486] loop1: detected capacity change from 0 to 1024 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000040)) [ 226.429219][ T330] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 226.429946][ T5486] EXT4-fs: Ignoring removed nomblk_io_submit option [ 226.439679][ T330] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 226.456310][ T330] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 226.460887][ T5486] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r4}, 0x10) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r5 = fsopen(&(0x7f0000000140)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'macvlan1\x00', 0x400}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) close(r1) [ 226.466650][ T330] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 226.485580][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 226.496218][ T330] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 226.506935][ T5138] EXT4-fs (loop1): unmounting filesystem. [ 226.512584][ T330] usb 3-1: config 0 interface 176 has no altsetting 0 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r4}, 0x10) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r5 = fsopen(&(0x7f0000000140)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='#@/#}+\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'macvlan1\x00', 0x400}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) close(r1) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000003a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) rt_sigaction(0xc, 0x0, 0x0, 0x8, &(0x7f0000000440)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) ioctl$PPPIOCGIDLE64(r2, 0x8010743f, &(0x7f0000000080)) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0x10, 0xfc}, 0x20) executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x704, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0x2c, 0x3e, 0x56, 0x10, 0x403, 0xfc0c, 0x680a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f2, 0x2, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0xb0, 0x7, 0xb, 0xee, 0xeb, 0x6, 0x3f, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1}, @as_header={0x7, 0x24, 0x1, 0x77, 0x0, 0x1001}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x4, 0x3, 0x6, "6650355d5981"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1f, "", 'Fn'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0x5, 0x1, "6642d4"}]}, @uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x1, 0x0, 0x0, "c22dfc71f9321778"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1, 0x0, 0x5, "9fd90b"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4a, 0x2, 0x1, 0x7f, "5712"}]}], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x1, 0xb5, 0x1, [@generic={0xe3, 0x1, "fbe3905347bd21fb3086a714d214129ad1cc38aadd1a455ffe29358cc11a52727290d4360b3de8678a9c5be1dd7b382f70b5d42dea722e4ccc729c5c206f5a124e9bc21839c21f4b5cfa8ebb1b2653fa1b1194d2b0b4cc3405dfdeeafe83516237319ba05c78fdf9ea9c701ea994050bc516cb23cc0b6b1e4dc5c18f21d1ecd0be8777ac07b5ad123a7e2c02a1bf2a69d86f4a2d7db8e70c44858bb0677dc7d55d769047676f67f930c8036641e1796f4d8e021ccc6f46cbf43e9806427a961172668c2eb400c6e4cd502825047d91b8fdf180a773a5828faa47e88b1a1998f5d8"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x1, 0x5, 0x0, [@generic={0x5c, 0x24, "d6eb75f38a1f4108c23d9cfafcd0d3730c8e2a22fc37858584e423c8a47e05b5a9e7383105bf1e1c4ee593ea651b612c3c242c3331d24e24e0a4d250f5de2e563246b53454d340f666e363b4a3ce1369b74c493ec726d82b728c"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x2, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x43, 0x6}]}}, {{0x9, 0x5, 0x9, 0x8, 0xc51b29c1bd4bee16, 0x4, 0x4, 0x47, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1d, 0x7ff}]}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x2, 0xc8}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x0, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0xc400}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x5, 0x1, 0xfe}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x4, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x81, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x100}, @generic={0xa7, 0x7, "00460d7e0a84d19f9a9dccb877f29496e55ccbf78281e0305ccd99793e1c064e606286e82ec5922b4b7aad0a387811c65ed15ce4a2834b00de91ae48f505682f7418261baccb186e1b328825671124f3b9a1f897a4f7dca94e0e5fd53d38ffee0c623d9cea619f14b0bda4da588fa133a13e616e13b7803693e188b41f089766adcbce9ad7bc1363432b11cc399a68ee8afc89dce49580e7a8ca7474f10b6db7aaecc73f6a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x81, 0x9, 0x92, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x6, 0x3, 0x1, [@generic={0x11, 0x8, "5857d316d88cefc48a04724882f6d9"}, @generic={0x37, 0x0, "5e2752f41f9c7cb5e90d4e89c9f1c197c801284239a8be78a364b46625b38cdb7d67c0906b5b4c05eba2fa9135ce6e312316936cb4"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0xe, 0xe, 0x1, 0x0, 0x5, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x0, 0x20, 0x3}, @as_header={0x7, 0x24, 0x1, 0x5, 0x4, 0x1002}]}], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x9, 0x9, 0x6}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x5, 0x4, 0xb5}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3f, 0xbd, 0x1, [@generic={0xcc, 0x35, "334cc78da2570b385a26078db10c4ab7e17dc9339f01d9b3764a3603fbf92ea2cb104a444dccd4ca3bf96d63be074e5cf3d44aa4f3f89f24778b1b79b52a8506a6a25601e86a6044049c367c0d879939b876c16bee954aac4a1f9e2b08ef37fd8b1e65d5a98bb7f6d8d0acd09aa37e1a3308ead30d9e28f8ca83a4e739fa931e8e87560da183fc30eb47d87ee28f30343aa40cbff4c7d753b827d92a1f3751133b42e65d8ab068fc448e198292141fd798bcbb87e04507d5167301dd87aed3834c82117a5d3231adde2c"}, @generic={0xcb, 0x24, "57d95e064d6c8da99b21715aff4fdff831ee9b50f3cd822dff34cef34ae70c417268e0ffca632f72630a6936df0489602a44ff3d5d6c15c187746e3a5841a8db163c01946379f00512cecc1ba4c741956dc5e4be6aeddd630792900eb75f8aed17ed03cafd392e483e02f81cdff80355244ff4bbbd2e0202ee86dcf5a0d0132e815fb478007c4d0ba48235afa9b0267cfe1d6f1418d457947ce5b5edba3ddd9573852933830f4dabe6845c8967081fa6516ccae675b6c343259445604d883e2b040bf6afd285f9dc08"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x80, 0x1, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x5}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x1, 0x240, 0x5, 0x2, 0xa6, [@generic={0x80, 0x2c, "6e3300b2d4da826b7ce6ec3b8b566528100cf6aeb1c3e725f6e465f06b19f6b0d093c2d26a179d24e942fcf737882812f8e1f5b9ee95444a9cb7d31cdbbb24b7c0b15ba35498568f80678b2defb09d1e49c78e1f8d9878dee38f864e28dac051fdfdbf08bb0fa58cabe65bdd694a45646a0aec42debcdabecb67f32a942c"}, @generic={0x75, 0x22, "15f7e01d70e9304e521aad05c65d1696bca3df848300e46c3977ff2283cadde397ee24c3db9476bbbc022b03f10cd7d768ec7ff32b48929b0da2812972da0110facf51f2fb62c44f32a76cfe293bbb5dffddff06a539a1eb025a468212b12f2b6c85ef3222e4cc6cb8087123fb3c4dc36514e6"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0x0, 0x6, 0x4, [@generic={0x83, 0xa, "f1b61bde8e23aee691da6fddf1a662d4faf57b33c234367581d403eecb5c217b88667064f6b64062037ea2de5fae3317bdb91a39a260b52364723448a8219bb4955c8837a5f2271f2887964319736516de8b4f372b0746bd07c16ca3e9b001b93f0121980def306598d05f9b7b22acf4e16576d441e3c7b38ec5a19143ece84dbe"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x1, 0x38, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x1a, 0x58, 0x1f}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x0, 0x3f}}, {{0x9, 0x5, 0xb, 0x8, 0x600, 0x4, 0x60, 0x7f}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x6, 0x7, 0x3a, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5}]}}, {{0x9, 0x5, 0x82, 0xc, 0x400, 0x9, 0x6, 0x2c, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}, {{0x9, 0x5, 0x7, 0x3, 0x10, 0x6, 0x7, 0x80}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x201, 0x5, 0x5, 0x6, 0x40, 0x4}, 0xc, &(0x7f0000000e80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x1}]}, 0x1, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x1809}}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000f40)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000013c0)={&(0x7f0000001140)={0x258, 0x20, 0x400, 0x70bd29, 0x25dfdbfe, {0x1d}, [@generic="9f8bbef02fef0636bc0bca3fe397deea7e98e2ef45e28a785572016d7157d43f6ffe44c2b8bcf54865bd23bb8bf4184cf4aa7c8f553a9be09c64375e343dc61eff2a033b71e5d301ecc43412ec504af88c8da9e415dde95411a585ca2964b6748e78deb0bc", @typed={0x8, 0x2d, 0x0, 0x0, @fd}, @typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@empty}, @nested={0x160, 0xf4, 0x0, 0x1, [@typed={0x8, 0xfb, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x4, 0x83}, @generic="fdd6c776e1c72f6e6448c1e798db09c55bc6d84b72262a6bd84f3c456da8d7e52d677fde1cd52ce143cb371cc32a0f9a36d143107fdab7d9c9b9c065bd3c032dae6508b65d3586ab0d4945e8388973811d4af2ac5b84da383465a88e576cf7658c8fd3d9b85ceef613e4336b6e2e0858205e3ca10fa1344747c6c8cd926924b877db08ae772c8f19dc3c3ae7bbe3a31968af581f77b1724189fd391cfe6735d266baa8e001ea42c4e3052958dc2e1257611f4fc47eb4f087c0394cdd3f076fc78c8fb6f310a107d75f3c11bb506ece1ecd7510b1d0a53eeedbffb40c48f65cb1c47aa3dcd4279b900a599951d6c9a87959e9493a", @generic="f6cf8b03aaee437855a513f218b5bc8ee0659b72294dc1c7eacaf6dccf23a7029cf679426e059fcdb72e12bf5c4214ba", @typed={0x5, 0x56, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@empty}, @typed={0xc, 0xca, 0x0, 0x0, @u64=0x8}]}, @generic="9063408c9cc09dbe86e35cb3003e3280104de5550ed71de0af3d98364d9a9e7079bbd83c2b3fc25bcf3a0d644dc7c55d63f53fd225514c79e147df1e1667c69fa71c9650994705279f7a8103e7483a0ebc94fdbadf6f3a896fbf0911d5b9eca3baa7370c48c24d1367232ba455cacc"]}, 0x258}, 0x1, 0x0, 0x0, 0x4000}, 0x40c4) [ 226.609483][ T974] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 226.618422][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.626263][ T1167] usb 1-1: Using ep0 maxpacket: 16 [ 226.631178][ T974] usb 4-1: Product: syz [ 226.635091][ T974] usb 4-1: Manufacturer: syz [ 226.639565][ T974] usb 4-1: SerialNumber: syz [ 226.644600][ T974] usb 4-1: config 0 descriptor?? [ 226.669522][ T5480] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 226.676498][ T5480] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 226.683509][ T330] usb 3-1: New USB device found, idVendor=0403, idProduct=fc0c, bcdDevice=68.0a [ 226.692478][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.700295][ T330] usb 3-1: Product: syz [ 226.704251][ T330] usb 3-1: Manufacturer: syz [ 226.708682][ T330] usb 3-1: SerialNumber: syz [ 226.713683][ T330] usb 3-1: config 0 descriptor?? [ 226.759520][ T1167] usb 1-1: config 0 has an invalid interface number: 176 but max is 1 [ 226.767583][ T1167] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 226.776232][ T1167] usb 1-1: config 0 has no interface number 1 [ 226.782095][ T1167] usb 1-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 226.792560][ T1167] usb 1-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 226.803072][ T1167] usb 1-1: config 0 interface 176 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0 [ 226.812717][ T1167] usb 1-1: config 0 interface 176 altsetting 7 endpoint 0x9 has invalid maxpacket 60950, setting to 64 [ 226.823575][ T1167] usb 1-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 226.833989][ T1167] usb 1-1: config 0 interface 176 altsetting 7 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 226.844743][ T1167] usb 1-1: config 0 interface 176 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 226.855530][ T1167] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 226.865876][ T1167] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 226.876229][ T1167] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 226.886573][ T1167] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 226.896024][ T1167] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x0, 0x9, 0x1}, 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b40)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='track_foreign_dirty\x00'}, 0x10) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="060005"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) [ 226.906361][ T1167] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 226.907135][ T5480] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 226.916691][ T1167] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 226.923899][ T5480] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 226.934124][ T1167] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 226.943878][ T337] usb 5-1: USB disconnect, device number 72 [ 226.959573][ T1167] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 226.970207][ T1167] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 226.979760][ T330] ftdi_sio 3-1:0.176: FTDI USB Serial Device converter detected [ 226.980972][ T1167] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 226.988579][ T330] ftdi_sio ttyUSB0: unknown device type: 0x680a [ 226.998741][ T1167] usb 1-1: config 0 interface 176 has no altsetting 0 [ 227.006497][ T330] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 227.018940][ T330] ftdi_sio ttyUSB1: unknown device type: 0x680a [ 227.026312][ T330] usb 3-1: USB disconnect, device number 75 [ 227.032959][ T330] ftdi_sio 3-1:0.176: device disconnected [ 227.038997][ T330] ftdi_sio 3-1:0.0: device disconnected [ 227.039482][ T24] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 227.149489][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 227.169615][ T1167] usb 1-1: New USB device found, idVendor=0403, idProduct=fc0c, bcdDevice=68.0a [ 227.178534][ T1167] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.186344][ T1167] usb 1-1: Product: syz [ 227.190383][ T1167] usb 1-1: Manufacturer: syz [ 227.194690][ T1167] usb 1-1: SerialNumber: syz [ 227.199743][ T1167] usb 1-1: config 0 descriptor?? [ 227.279465][ T24] usb 2-1: config 0 has an invalid interface number: 176 but max is 1 [ 227.287497][ T24] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 227.295998][ T24] usb 2-1: config 0 has no interface number 1 [ 227.301877][ T24] usb 2-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 227.312363][ T24] usb 2-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 227.319435][ T337] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 227.322880][ T24] usb 2-1: config 0 interface 176 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0 [ 227.339894][ T24] usb 2-1: config 0 interface 176 altsetting 7 endpoint 0x9 has invalid maxpacket 60950, setting to 64 [ 227.350733][ T24] usb 2-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 227.361166][ T24] usb 2-1: config 0 interface 176 altsetting 7 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 227.372056][ T24] usb 2-1: config 0 interface 176 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 227.382899][ T974] Error reading MAC address [ 227.387993][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 227.398229][ T24] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 227.408662][ T24] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 227.418970][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x43, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x6}]}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000200)='memory.stat\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)={0x20, r6, 0x1, 0x0, 0x0, {0x18}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) [ 227.428434][ T24] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 227.438756][ T24] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 227.449096][ T24] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 227.459445][ T24] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 227.470093][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 227.480459][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 227.491149][ T24] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 227.501748][ T1167] ftdi_sio 1-1:0.176: FTDI USB Serial Device converter detected [ 227.509430][ T24] usb 2-1: config 0 interface 176 has no altsetting 0 [ 227.516154][ T1167] ftdi_sio ttyUSB0: unknown device type: 0x680a [ 227.523197][ T1167] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 227.530852][ T1167] ftdi_sio ttyUSB1: unknown device type: 0x680a [ 227.538041][ T1167] usb 1-1: USB disconnect, device number 67 [ 227.544723][ T1167] ftdi_sio 1-1:0.176: device disconnected [ 227.552204][ T1167] ftdi_sio 1-1:0.0: device disconnected [ 227.590857][ T5480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.599151][ T5480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.679515][ T24] usb 2-1: New USB device found, idVendor=0403, idProduct=fc0c, bcdDevice=68.0a [ 227.688421][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.689489][ T337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.696233][ T24] usb 2-1: Product: syz [ 227.706975][ T337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.710953][ T24] usb 2-1: Manufacturer: syz [ 227.720597][ T337] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 227.724842][ T24] usb 2-1: SerialNumber: syz [ 227.733758][ T337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.738967][ T24] usb 2-1: config 0 descriptor?? [ 227.746669][ T337] usb 5-1: config 0 descriptor?? [ 227.789516][ T330] usb 3-1: new high-speed USB device number 76 using dummy_hcd executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220b000000ceba"], 0x0}, 0x0) [ 228.019700][ T24] ftdi_sio 2-1:0.176: FTDI USB Serial Device converter detected [ 228.027367][ T24] ftdi_sio ttyUSB0: unknown device type: 0x680a [ 228.079670][ T24] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 228.087188][ T24] ftdi_sio ttyUSB1: unknown device type: 0x680a [ 228.094499][ T24] usb 2-1: USB disconnect, device number 70 [ 228.100828][ T24] ftdi_sio 2-1:0.176: device disconnected [ 228.107190][ T24] ftdi_sio 2-1:0.0: device disconnected [ 228.149571][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.160323][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.169914][ T330] usb 3-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 228.178655][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.186904][ T330] usb 3-1: config 0 descriptor?? [ 228.239463][ T19] usb 1-1: new high-speed USB device number 68 using dummy_hcd executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x0, 0x9, 0x1}, 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b40)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='track_foreign_dirty\x00'}, 0x10) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="060005"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) [ 228.469536][ T337] usb 5-1: string descriptor 0 read error: -71 [ 228.489465][ T337] uclogic 0003:256C:006D.004E: failed retrieving string descriptor #200: -71 [ 228.498127][ T337] uclogic 0003:256C:006D.004E: failed retrieving pen parameters: -71 [ 228.507316][ T337] uclogic 0003:256C:006D.004E: failed probing pen v2 parameters: -71 [ 228.515422][ T19] usb 1-1: device descriptor read/64, error -71 [ 228.521525][ T337] uclogic 0003:256C:006D.004E: failed probing parameters: -71 [ 228.528769][ T337] uclogic: probe of 0003:256C:006D.004E failed with error -71 [ 228.537019][ T337] usb 5-1: USB disconnect, device number 73 [ 228.650467][ T28] audit: type=1326 audit(1716396154.976:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5503 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2bcec7cee9 code=0x0 [ 228.769440][ T60] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 228.909463][ T19] usb 1-1: device descriptor read/64, error -71 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) unshare(0x64000300) [ 229.159702][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.170935][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.181189][ T60] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 229.190613][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.211596][ T60] usb 2-1: config 0 descriptor?? executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@user_xattr}, {@nobarrier}, {@sysvgroups}, {@norecovery}, {@errors_continue}, {@nomblk_io_submit}, {@quota}, {@noauto_da_alloc}, {@lazytime}]}, 0x3, 0x56a, &(0x7f0000000ec0)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f00000003c0)=0xa, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x48, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8}]}]}]}, 0x48}}, 0x0) executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000040)) [ 229.312920][ T1167] usb 4-1: USB disconnect, device number 63 [ 229.324997][ T5518] loop3: detected capacity change from 0 to 1024 [ 229.331564][ T5518] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.339443][ T19] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 229.341047][ T5518] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r4}, 0x10) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r5 = fsopen(&(0x7f0000000140)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'macvlan1\x00', 0x400}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) close(r1) [ 229.361606][ T5069] EXT4-fs (loop3): unmounting filesystem. executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@user_xattr}, {@nobarrier}, {@sysvgroups}, {@norecovery}, {@errors_continue}, {@nomblk_io_submit}, {@quota}, {@noauto_da_alloc}, {@lazytime}]}, 0x3, 0x56a, &(0x7f0000000ec0)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f00000003c0)=0xa, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x48, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8}]}]}]}, 0x48}}, 0x0) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000003a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) rt_sigaction(0xc, 0x0, 0x0, 0x8, &(0x7f0000000440)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0x10, 0xfc}, 0x20) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r4}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'macvlan1\x00', 0x400}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) close(r1) executing program 3: arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x40000000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) [ 229.421462][ T5527] loop3: detected capacity change from 0 to 1024 [ 229.427982][ T5527] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.440788][ T5527] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 229.456659][ T5069] EXT4-fs (loop3): unmounting filesystem. [ 229.609451][ T19] usb 1-1: device descriptor read/64, error -71 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r4}, 0x10) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r5 = fsopen(&(0x7f0000000140)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='#@/#}+\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) close(r1) executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xb}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x20, r4, 0x921, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r7}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r8, &(0x7f00000000c0)='./bus\x00', 0x0) executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x0, 0x9, 0x1}, 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b40)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="060005"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) [ 229.889540][ T1167] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 229.919529][ T60] usb 2-1: string descriptor 0 read error: -71 [ 229.940326][ T60] uclogic 0003:256C:006D.004F: failed retrieving string descriptor #200: -71 [ 229.948997][ T60] uclogic 0003:256C:006D.004F: failed retrieving pen parameters: -71 [ 229.956897][ T60] uclogic 0003:256C:006D.004F: failed probing pen v2 parameters: -71 [ 229.964742][ T60] uclogic 0003:256C:006D.004F: failed probing parameters: -71 [ 229.972073][ T60] uclogic: probe of 0003:256C:006D.004F failed with error -71 [ 229.980273][ T60] usb 2-1: USB disconnect, device number 71 [ 229.999467][ T19] usb 1-1: device descriptor read/64, error -71 [ 230.119540][ T19] usb usb1-port1: attempt power cycle [ 230.149441][ T1167] usb 4-1: Using ep0 maxpacket: 16 [ 230.259451][ T337] usb 5-1: new high-speed USB device number 74 using dummy_hcd executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff7fd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r5, r6) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r2, 0x20, &(0x7f0000000400)={&(0x7f0000000300)=""/108, 0x6c, 0x0, &(0x7f0000000380)=""/80, 0x50}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x160, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint\x00', r9}, 0x10) ioctl$TUNSETOFFLOAD(r2, 0x40086607, 0x20001412) r10 = socket(0x2, 0x3, 0x1) getsockopt(r10, 0xff, 0x100000000000001, 0x0, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) socket$netlink(0x10, 0x3, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r11}, 0x10) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r12, 0x0) executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@user_xattr}, {@nobarrier}, {@sysvgroups}, {@norecovery}, {@errors_continue}, {@nomblk_io_submit}, {@quota}, {@noauto_da_alloc}, {@lazytime}]}, 0x3, 0x56a, &(0x7f0000000ec0)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f00000003c0)=0xa, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x48, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8}]}]}]}, 0x48}}, 0x0) [ 230.459547][ T1167] usb 4-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 230.468522][ T1167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.476379][ T1167] usb 4-1: Product: syz [ 230.480464][ T1167] usb 4-1: Manufacturer: syz [ 230.485002][ T1167] usb 4-1: SerialNumber: syz [ 230.490049][ T1167] usb 4-1: config 0 descriptor?? [ 230.508150][ T28] audit: type=1400 audit(1716396156.826:432): avc: denied { create } for pid=5543 comm="syz-executor.1" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 230.529436][ T19] usb 1-1: new high-speed USB device number 70 using dummy_hcd executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000040)) [ 230.559524][ T330] usbhid 3-1:0.0: can't add hid device: -71 [ 230.560544][ T28] audit: type=1400 audit(1716396156.886:433): avc: denied { shutdown } for pid=5543 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 230.565480][ T330] usbhid: probe of 3-1:0.0 failed with error -71 [ 230.592548][ T330] usb 3-1: USB disconnect, device number 76 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000007a0000007a0a00ff000000005500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000061000500000000e8a5230000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x90) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000340)={0xffffffff, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r2, 0x2, 0x0, 0x0, @link_id=r4}, 0x20) (async, rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r1, @ANYRESOCT=r2, @ANYBLOB="e4b738ce08da88e13de1bd67a6ac784e65e3f0ae3d7fb526016f8a0161b1d78a638d0b45c85fbf61690056bad479c842bdf49e589090a6f6e91f6664e40df92b2341af3efaa60486269f39f2444806b14efc6d8319ed49baa62f01026d96de5d8aa42b877956fd80d01c43d38ad561d146d4772b8d12f0e0", @ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) getegid() (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x48) (async, rerun: 32) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) (async, rerun: 32) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) (async) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r9, 0x4, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x2, 0x1, 0x0, r8, 0x0, 0x9000000}]) (async) getsockname$packet(r8, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r7, 0x8040942d, &(0x7f0000000040)) (async, rerun: 32) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000000f8ff00000526f4430000bfa200000000000007020000f831f5267854aeb08dffffffb703000008000000b7040000000000008550141fdefc25902801f93c1dc515ac006cbf53"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) (async) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="12010003000000406b1d010140000102030109025f0003010000000904000000011200000a24010000000201020904010000010200000904010101010200000905010900000000000725010000000009040200000102000009040201010102000009058209000000000007250100000000"], &(0x7f0000000480)={0x0, 0x0, 0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="050f"]}) [ 230.612191][ T28] audit: type=1400 audit(1716396156.936:434): avc: denied { unlink } for pid=5138 comm="syz-executor.1" name="file0" dev="sda1" ino=1965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 230.620454][ T5548] loop2: detected capacity change from 0 to 1024 [ 230.641366][ T337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.649731][ T5548] EXT4-fs: Ignoring removed nomblk_io_submit option executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x7, 0x10001, 0x9, 0x1409}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x101, 0x6, 0x48, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800003000bfa200000000000007020000f8ffffffb70300950008000000b704000000000000859c1ac2bef30e9bc1000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r4, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0xffffffff}}}, 0x24}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f000023c000/0x4000)=nil, 0x4000}}) readv(r7, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0xc9}], 0x1) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000003980), 0x0, 0x0, 0x0, 0x20000000}, 0xa}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x2, @local, 0x6}, 0x1c, &(0x7f00000008c0)=[{&(0x7f00000006c0)="08bff341e9721928f1546839e03d55e4207eebe48ca228456f30981c760cd6c14669bcc66038e844d1021f52ceb70c3e188d6c4e32371b90beb1f7fab31633683b57d25e79a2f48e79b0274b904118e104e2c8836ac476b6c830a2102a87d0ac126e8aa89ded3412c5c9dad3ce12df8e4a5c2de878ea14eba6f00e2606429bfda19278f5c513a4b4a2a205a4f01616cfd1e35cf08fa2a6d09677a4be00dfdc5cebcc1664b746935217457d5b9e209b569353f1570f787c64b5ccefb483c6eb3398ced5cd4bfd4e7034effbb21259221d27e7293a67b2781c69083e79ef761fcccd01ce05a905c63fc7c46e0f64af261aed24", 0xf2}, {&(0x7f0000000380)="077a11953bfaf185803f30804b6853d1c851bc4a53e4125379d159638358f7a1304cb998a52cde7a8c4f7c76b483756295ffe54457900edd12b4fddcf9e9769c61c5cefa1ba4bd", 0x47}, {&(0x7f00000007c0)="a25b06a4e46a9179201e0632fb6549f2250dbd9a147a76125f3a4add97283eed47e2a9c260c5b2b628f2f4196b86e549f0f1ab7654f27ad79998261fdde8b3a1e62884b693def65da22a7cbf8219b210d47dba3dd793c23c43b4ab7f1f465ec19fc34a83255c62a9dbc1530cc5c9888dfcd461a4bfc8679c74f344d3f4ea4844174e38ddda889e8b44151ba9e8ef8c987dd9362c0a687a37cef97a8aa3302ec4c24a52a0df7e259a23dcb68e343c8b522ba380bafea28091da56ebe634b7305ffa6e6138b3e0971ee40353375b7077f838d637905b022e6e89ffa771d348fadd6cb82a4159", 0xe5}, {&(0x7f00000004c0)="2a92a39bbd25154e1f9fa859025d90a70b99e4ff87133bd665db1cce45e57dbdaaa14dda3dea030b763b1409b275e78cbd06b92bdf23f23bfbe400ff8386939e03b3a283bed47e230ec6ce8d4f03eef825598a118f775ca7905aad71d68cdbbea89bb879ee94f5f2ba7495d3e9caf9861c54227773984c1b4c2c5019b77a8750b5f4dbf610605e3fc6828bcdeeead318710b6463364d99359f6b5f0a41adfd7a623dcd18a106cad78e737b2055c49d8931352342af2a8b8a", 0xb8}, {&(0x7f00000005c0)="2cf11d0d2eda70fe1f7ab946fd96a5a743308224f5319b81758f1419e73df8bae4714436d2a820d34785545286f24d5fb9472c5dfbd4b0f307ba225cab9106ac04db58509ea278fb59832c6b180454e265", 0x51}, {&(0x7f0000000400)="a42233d01c8a3445e21c206eae030724d06ecf07f363363956c48989d1154d5f8e53e69c3e5fbe2a348cc2a368", 0x2d}, {&(0x7f0000000b00)="a4d611eacb7f58f54b9f7f3cf8a0b3d34c37a8df81fd4a23fa99c34943f0e403d33c7cea99eea22b5a838944240e3852aab9c33f7616607a974dc119793d7a4319a522861ddcbd8b712809c665932d8de68bffd2731e4f4ea5226f45ec93a0a0fc0a6625cfea1c968a264be2b3fcbb849613885caa0155a8b100132a0ffe4c2140b3aef5a55b623b5f08f44d29bfb45a50e285f01d65d97be6c0e029cd9f922b00b684a7473f18a215bc9f9c79add9e1aac5ecf3c731cd986ad42b2a3a42e6b7a111f059dbf647", 0xc7}, {&(0x7f0000000c00)="c733b66d55901f981d039e8ab2f02d6257f5c1e3cea75080d9c20559168670859dda6c508398ff265ab63bab949634c525c23db2ad6c4392a61df7aed7b7620bc352fe6a09e950a37e82bd147a356204cac096ad276cfedfdb439da71399439a411d4ca1818c0e6c207c71ac2a789135a0578a0a8bf5fc4c079e7d601a6bf0d361cbcbee", 0x84}], 0x8}}, {{&(0x7f0000000cc0)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}, 0xd6f}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000d00)="559577b44647c426e4d4bdb940d87a2d31cb014b3ff647622595e613d9f7d33d94d526683ea77d878b580d05a446041045be7c017ec31841684bae17b873ab9d0c1ae8de94d84d42811ba9de26aa5343e7930495cefba527dd504b80ffdf6fe8d63432090681d1f5ead6f425d47a846a8f963d7e58d0af86d30a9b264308c4d8eb024e511a72fdc4693f814cb187564120f9a13b90fd1a898125df09690fa841f485aed81a0b824969b7c82e57baa88cc99fd706ea7f923ab6e62f6aa3dacb8f31aff8ced1", 0xc5}], 0x1, &(0x7f0000001240)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000000400000000140000000000000029000000340000000100007f0000000000"], 0x30}}, {{&(0x7f0000000e80)={0xa, 0x4e23, 0x6, @empty, 0x5}, 0x1c, &(0x7f00000011c0)=[{&(0x7f0000000ec0)="0a2acebd361b98069321a9febf7304397aaf", 0x12}, {&(0x7f0000000f00)="970c20b633ed78f354d5423f2e665772a148b028f9cbf1928234f1714218abb98e94243e0e248e1d1178601af30225ca19a69152bda033312c8f1017319b50cc693ab1ad3841b8596fb60331ead3fb2b63748d63cea69aab4166cc443e06eb76ada53a085f4acc20202396", 0x6b}, {&(0x7f0000000f80)="6c41e1dae938ffb3d92fcb66ef80b4a257d4b77067fdd73bb96f087a5d93498d6abc88b96405b92f2592311c2e13c1d3092967efb4ab5f21f020b1ba324e60a41fd5e507119c6e3583e7d940a9cd3e61b8dbadf592aca812384a2b4c68f4b551e4585d7b533e7540a3ecc4775594b0c0743e1a4562ddfd241a44adacf000e0f4d6f4ed59bb057433b02f076d5b95", 0x8e}, {&(0x7f0000001040)="f3981f62c729ced16bbd52df7d17579474ae324e3d02d56e0501c1f6beb1da90cf03d7e807b20357e78ece3b8fefa33216aa61f6ef09fd49951f30d7af8034d21e516fcf9a9ca9c7", 0x48}, {&(0x7f00000010c0)="be93a87938c329d52bae4128c2511ec54b7be6311abf5247494b1c0e7e15d87232ce907dfc33d9d23b211c39429f5eb5f9bc341936eac96c32f63da4fadd4010256c8233666f151fbc15158fae640c14954672de66b7fe09d40ee4e0d979d619af33a98fcfaf504540002c5e005f0988ef64576626f1cacfdd05c143b0075169d7e74b9632686181ff2dd2ec1afc23174eb745cfc4e21cc6bad58b26c8f92ee571f7cf41be8ec79b6a41e76634c386a1319ed8faff583d57108433cbee58bcd10c339cb2bfdb", 0xc6}], 0x5, &(0x7f0000001480)=ANY=[@ANYBLOB="14000000000000002900000008000000000001000000000048000000000000002900000039000000ff06014700000000fe80000000000000000000000000000dfc010000000000000000000000000001fe880000000000000000000000000101140000000000000029000000430000000400000000000000300000000000000029000000370000002902000000000000c910fe8000000000000000000000000000bb00000000000014000000000000002900000043000000d20000000000000070000000000000002900000037000000730a0000000000000107000000000000000401800728000000030803010000100000000000000000000000000000ff7f0000000000000700000000000000040105050200080718000000000402020009000000000000003e0d00000000000000b99b727b6e41ea8c8aa26ae9d9c97ed7688b5b237780ab9845b08c4d9b81cc7404b1b8f9165cf832cad96a267e7b47ca63d787e67e42f8cfe5604ef37fbab7b3c798669e4a94558d6cd0c0fcaea46917d4e963e3b7293141a1057e51af7f01425f375674e7cb1297db566ffc947e90cf1a1d2072967664"], 0x130}}], 0x4, 0x0) shutdown(r8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000180), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@user_xattr}, {@nobarrier}, {@sysvgroups}, {@norecovery}, {@errors_continue}, {@nomblk_io_submit}, {@quota}, {@noauto_da_alloc}, {@lazytime}]}, 0x3, 0x56a, &(0x7f0000000ec0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f00000003c0)=0xa, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x48, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8}]}]}]}, 0x48}}, 0x0) [ 230.659458][ T337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.669036][ T337] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 230.678186][ T337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.679146][ T5548] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 230.695315][ T337] usb 5-1: config 0 descriptor?? [ 230.700850][ T5560] tipc: Started in network mode [ 230.705597][ T5560] tipc: Node identity ffffffff, cluster identity 4711 [ 230.705976][ T5117] EXT4-fs (loop2): unmounting filesystem. [ 230.712306][ T5560] tipc: Node number set to 4294967295 [ 230.725245][ T28] audit: type=1400 audit(1716396157.056:435): avc: denied { ioctl } for pid=5559 comm="syz-executor.1" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=36920 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 230.729620][ T19] usb 1-1: device descriptor read/8, error -71 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000003a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) rt_sigaction(0xc, 0x0, 0x0, 0x8, &(0x7f0000000440)) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0x10, 0xfc}, 0x20) [ 230.752828][ T28] audit: type=1400 audit(1716396157.086:436): avc: denied { read } for pid=5559 comm="syz-executor.1" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=36920 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 230.764004][ T5562] loop2: detected capacity change from 0 to 1024 [ 230.788730][ T5562] EXT4-fs: Ignoring removed nomblk_io_submit option [ 230.800705][ T5562] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200f1ff8500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint_stats\x00', r5}, 0x10) ioctl$TUNSETOFFLOAD(r4, 0x4004662b, 0x20001412) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r6 = syz_open_pts(r2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000280)='\x00', 0x0}, 0x30) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0xb, 0x1, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@ifindex=r7, r1, 0x36, 0x2020, 0x0, @prog_id=r8, r9}, 0x20) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2) read(r6, 0x0, 0x2006) timer_create(0x0, &(0x7f00000012c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r10 = gettid() tkill(r10, 0x0) [ 230.816916][ T5117] EXT4-fs (loop2): unmounting filesystem. [ 230.852606][ T5569] serio: Serial port pts0 [ 230.879956][ T1167] usb 4-1: MIDIStreaming interface descriptor not found [ 230.888016][ T1167] usb 4-1: USB disconnect, device number 64 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) unshare(0x64000300) [ 231.009465][ T19] usb 1-1: device descriptor read/8, error -71 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r4}, 0x10) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r5 = fsopen(&(0x7f0000000140)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) close(r1) executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xb}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x20, r4, 0x921, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r7}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r8, &(0x7f00000000c0)='./bus\x00', 0x0) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r4}, 0x10) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r5 = fsopen(&(0x7f0000000140)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='#@/#}+\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) close(r1) [ 231.429479][ T337] usb 5-1: string descriptor 0 read error: -71 [ 231.449520][ T337] uclogic 0003:256C:006D.0050: failed retrieving string descriptor #200: -71 [ 231.458211][ T337] uclogic 0003:256C:006D.0050: failed retrieving pen parameters: -71 [ 231.466111][ T337] uclogic 0003:256C:006D.0050: failed probing pen v2 parameters: -71 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x1110c1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0x4b47, 0x0) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000040)) executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x43, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x6}]}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000200)='memory.stat\x00', 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x8, {0x8, 0xa, "47f882f4d105"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 231.473998][ T337] uclogic 0003:256C:006D.0050: failed probing parameters: -71 [ 231.481285][ T337] uclogic: probe of 0003:256C:006D.0050 failed with error -71 [ 231.489356][ T337] usb 5-1: USB disconnect, device number 74 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x64000500) executing program 0: arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x40000000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) [ 232.047622][ T1167] usb 2-1: new high-speed USB device number 72 using dummy_hcd executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="af00000000000000eaffffffffffffff9500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000e000010100002800400040008000200000000000c00018008000100", @ANYRES32], 0x30}}, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x400145042, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r3, 0x8) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000001140)=""/4086, &(0x7f0000000180)=0xff6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000100)={'syz1\x00', {}, 0x7, [0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffff8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}, 0x45c) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000003a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0x10, 0xfc}, 0x20) executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220b000000ceba"], 0x0}, 0x0) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r4}, 0x10) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r5 = fsopen(&(0x7f0000000140)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) close(r1) executing program 3: arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x40000000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) [ 232.429549][ T330] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 232.429544][ T1167] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.429577][ T1167] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.457339][ T1167] usb 2-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 232.466221][ T1167] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.474480][ T1167] usb 2-1: config 0 descriptor?? executing program 2: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xb}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x20, r4, 0x921, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r7}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r8, &(0x7f00000000c0)='./bus\x00', 0x0) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r4}, 0x10) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r5 = fsopen(&(0x7f0000000140)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='#@/#}+\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) close(r1) [ 232.539474][ T19] usb 1-1: new high-speed USB device number 71 using dummy_hcd executing program 2: arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x40000000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) [ 232.629494][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 232.669458][ T60] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 232.699664][ T330] usb 5-1: device descriptor read/64, error -71 [ 232.899453][ T974] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 232.909491][ T19] usb 1-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 232.918405][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.926291][ T19] usb 1-1: Product: syz [ 232.927165][ T28] audit: type=1326 audit(1716396159.256:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5586 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0f907cee9 code=0x0 [ 232.930310][ T19] usb 1-1: Manufacturer: syz [ 232.930343][ T19] usb 1-1: SerialNumber: syz [ 232.953557][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 232.958515][ T19] usb 1-1: config 0 descriptor?? [ 233.030457][ T1167] wacom 0003:056A:0043.0051: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 233.040140][ T1167] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0043.0051/input/input136 [ 233.052911][ T1167] wacom 0003:056A:0043.0051: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.1-1/input0 [ 233.099435][ T330] usb 5-1: device descriptor read/64, error -71 [ 233.169435][ T974] usb 3-1: Using ep0 maxpacket: 16 [ 233.269482][ T60] usb 4-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 233.278504][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.286315][ T60] usb 4-1: Product: syz [ 233.289550][ T19] usb 1-1: MIDIStreaming interface descriptor not found [ 233.290365][ T60] usb 4-1: Manufacturer: syz [ 233.299047][ T19] usb 1-1: USB disconnect, device number 71 [ 233.301489][ T60] usb 4-1: SerialNumber: syz [ 233.313941][ T60] usb 4-1: config 0 descriptor?? [ 233.369441][ T330] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 233.469512][ T974] usb 3-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 233.478384][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.486199][ T974] usb 3-1: Product: syz [ 233.490189][ T974] usb 3-1: Manufacturer: syz [ 233.494612][ T974] usb 3-1: SerialNumber: syz [ 233.499662][ T974] usb 3-1: config 0 descriptor?? [ 233.629583][ T60] usb 4-1: MIDIStreaming interface descriptor not found [ 233.638146][ T60] usb 4-1: USB disconnect, device number 65 [ 233.639431][ T330] usb 5-1: device descriptor read/64, error -71 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) mremap(&(0x7f0000097000/0x2000)=nil, 0x2, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@user_xattr}, {@nobarrier}, {@sysvgroups}, {@norecovery}, {@errors_continue}, {@nomblk_io_submit}, {@quota}, {@noauto_da_alloc}, {@lazytime}]}, 0x3, 0x56a, &(0x7f0000000ec0)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f00000003c0)=0xa, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x48, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8}]}]}]}, 0x48}}, 0x0) executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x0, 0x9, 0x1}, 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b40)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="060005"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) [ 233.733099][ T5615] loop0: detected capacity change from 0 to 1024 [ 233.739941][ T5615] EXT4-fs: Ignoring removed nomblk_io_submit option [ 233.751448][ T5615] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 233.764819][ T5129] EXT4-fs (loop0): unmounting filesystem. [ 233.829562][ T974] usb 3-1: MIDIStreaming interface descriptor not found [ 233.839026][ T974] usb 3-1: USB disconnect, device number 77 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@user_xattr}, {@nobarrier}, {@sysvgroups}, {@norecovery}, {@errors_continue}, {@nomblk_io_submit}, {@quota}, {@noauto_da_alloc}, {@lazytime}]}, 0x3, 0x56a, &(0x7f0000000ec0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f00000003c0)=0xa, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x48, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8}]}]}]}, 0x48}}, 0x0) [ 234.039450][ T19] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 234.046918][ T330] usb 5-1: device descriptor read/64, error -71 [ 234.072698][ T5621] loop3: detected capacity change from 0 to 1024 [ 234.079235][ T5621] EXT4-fs: Ignoring removed nomblk_io_submit option executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="af00000000000000eaffffffffffffff9500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000e000010100002800400040008000200000000000c00018008000100", @ANYRES32], 0x30}}, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x400145042, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r3, 0x8) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000001140)=""/4086, &(0x7f0000000180)=0xff6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000100)={'syz1\x00', {}, 0x7, [0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffff8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}, 0x45c) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000003a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0x10, 0xfc}, 0x20) executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000340)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000001100)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) unshare(0x1100000) [ 234.090978][ T5621] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 234.104663][ T5069] EXT4-fs (loop3): unmounting filesystem. [ 234.169564][ T330] usb usb5-port1: attempt power cycle executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'macvlan1\x00', 0x400}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) close(r1) executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x64000500) [ 234.409562][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.420314][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.430176][ T19] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = gettid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x63b3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000003918110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0xfdef) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000084000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) [ 234.568439][ T974] usb 2-1: USB disconnect, device number 72 [ 234.685637][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.694328][ T19] usb 1-1: config 0 descriptor?? [ 234.749520][ T330] usb 5-1: new high-speed USB device number 77 using dummy_hcd executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0xfd, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x0) [ 234.919561][ T330] usb 5-1: device descriptor read/8, error -71 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ext4_sync_file_exit\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='ext4_sync_file_exit\x00', r4}, 0x10) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) executing program 3: arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x40000000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@user_xattr}, {@nobarrier}, {@sysvgroups}, {@norecovery}, {@errors_continue}, {@nomblk_io_submit}, {@quota}, {@noauto_da_alloc}, {@lazytime}]}, 0x3, 0x56a, &(0x7f0000000ec0)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f00000003c0)=0xa, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x48, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8}]}]}]}, 0x48}}, 0x0) executing program 2: arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x40000000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@user_xattr}, {@nobarrier}, {@sysvgroups}, {@norecovery}, {@errors_continue}, {@nomblk_io_submit}, {@quota}, {@noauto_da_alloc}, {@lazytime}]}, 0x3, 0x56a, &(0x7f0000000ec0)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f00000003c0)=0xa, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x48, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8}]}]}]}, 0x48}}, 0x0) [ 235.185120][ T5650] loop4: detected capacity change from 0 to 1024 [ 235.191992][ T5650] EXT4-fs: Ignoring removed nomblk_io_submit option [ 235.197983][ T330] usb 5-1: device descriptor read/8, error -71 [ 235.211423][ T5650] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 235.225326][ T309] EXT4-fs (loop4): unmounting filesystem. executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="af00000000000000eaffffffffffffff9500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000e000010100002800400040008000200000000000c00018008000100", @ANYRES32], 0x30}}, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x400145042, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r4, 0x8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000001140)=""/4086, &(0x7f0000000180)=0xff6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000100)={'syz1\x00', {}, 0x7, [0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffff8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}, 0x45c) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff7fd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r3, r4) executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x0, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000040)) executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x43, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x6}]}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000200)='memory.stat\x00', 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x8, {0x8, 0xa, "47f882f4d105"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 235.240755][ T5656] loop4: detected capacity change from 0 to 1024 [ 235.247345][ T5656] EXT4-fs: Ignoring removed nomblk_io_submit option [ 235.260708][ T5656] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 235.274972][ T309] EXT4-fs (loop4): unmounting filesystem. [ 235.329538][ T974] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 235.409504][ T19] usb 1-1: string descriptor 0 read error: -71 [ 235.429480][ T19] uclogic 0003:256C:006D.0052: failed retrieving string descriptor #200: -71 [ 235.438165][ T19] uclogic 0003:256C:006D.0052: failed retrieving pen parameters: -71 [ 235.446052][ T19] uclogic 0003:256C:006D.0052: failed probing pen v2 parameters: -71 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000003a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0x10, 0xfc}, 0x20) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000008c0)={[{@numtail}, {@rodir}, {@fat=@check_strict}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@uni_xlate}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@shortname_winnt}, {@fat=@flush}, {@uni_xlateno}, {@numtail}]}, 0x6, 0x2a6, &(0x7f0000000440)="$eJzs3T9rW1cUAPDzbFlS20EaOpVCH7RDJ2N77SJTbDDV1KKh7dCa2oZiiYINhv6hqqeuXTr2ExQC2fIlsmTIHsgayBYPhhee9F4kO7JsBcvOn99v8fV999x77vXFxoPO+/Hj3v5OGnvHfzyKej2JhVa04iSJZixE6a84o/VPAABvspMsi6fZ0CxxSUTU55cWADBHM//9vzv3lACAOfvm2+++Wm+3N75O03ps9v4+6uT/2edfh8/X9+Ln6MZurEQjTiOyF4btzSzL+pU014zPev2jTh7Z++F+Mf/6k4hB/Go0ojnoOhu/1d5YTYfG4vt5Hu8X67fy+LVoxIcT1t9qb6xNiI9ONT7/dCz/5WjEg5/il+jGziCJUfyfq2n6Zfbvs9+/z9PL45P+Uac2GDeSLd7wjwYAAAAAAAAAAAAAAAAAAAAAgLfYclE7pxaD+j15V1F/Z/E0/2Yp0lLzbH2eYXxSTnSuPlA/i//K+joraZpmxcBRfCU+qkTldnYNAAAAAAAAAAAAAAAAAAAAr5fDX3/b3+52dw+upVFWAyg/1v+q87TGej6J6YNro7UWiuaUmWOxHJNETE0j38Q1Hctljfcuyvn/O7NOWL98zNK087meRnm79reTyWdYi7KnXl6Se+NjqnHFtaoXPcpmun7ViY8aM++9+sGg0Z8yJpJpiX3xeHhyRU9yfhfVwalODF8qGmPh5+7GTPf55d8ViWodAAAAAAAAAAAAAAAAAAAwV6MP/U54eHxB0MOt4Uv+a3NODgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABuyOj9/zM0+kXwFQZX4+DwlrcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAO+B5AAAA///S9mga") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x47) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x821cd0, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x112dd10, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r1, &(0x7f0000003800)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x4, 0xffff, 0x2, 0x100, 0x1, 0x6, '\x00', 0x0, r1, 0x1, 0x803, 0x5, 0xd}, 0x48) fcntl$lock(r0, 0x735dfada4a726514, &(0x7f0000000380)={0x2, 0x0, 0x81, 0x9, r2}) write$P9_RVERSION(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018001000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f00000001c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) chdir(&(0x7f0000000040)='./file0\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) [ 235.453933][ T19] uclogic 0003:256C:006D.0052: failed probing parameters: -71 [ 235.461202][ T19] uclogic: probe of 0003:256C:006D.0052 failed with error -71 [ 235.469093][ T19] usb 1-1: USB disconnect, device number 72 [ 235.499459][ T1168] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 235.517930][ T5670] loop1: detected capacity change from 0 to 256 [ 235.524781][ T28] audit: type=1400 audit(1716396161.846:438): avc: denied { mounton } for pid=5669 comm="syz-executor.1" path="/root/syzkaller-testdir1337155165/syzkaller.ioezRS/54/file0/file1" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0xfd, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x0) executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ext4_sync_file_exit\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='ext4_sync_file_exit\x00', r4}, 0x10) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) [ 235.561232][ T28] audit: type=1400 audit(1716396161.886:439): avc: denied { mounton } for pid=5669 comm="syz-executor.1" path="/root/syzkaller-testdir1337155165/syzkaller.ioezRS/54/file0/file1/file0" dev="loop1" ino=1048634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 235.589572][ T974] usb 4-1: Using ep0 maxpacket: 16 [ 235.592156][ T5138] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 235.601927][ T5138] FAT-fs (loop1): Filesystem has been set read-only [ 235.608557][ T5138] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 235.650530][ T4652] tipc: Left network mode [ 235.689473][ T330] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 235.751063][ T5672] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.757936][ T5672] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.765237][ T5672] device bridge_slave_0 entered promiscuous mode [ 235.771752][ T1168] usb 3-1: Using ep0 maxpacket: 16 [ 235.772238][ T5672] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.783666][ T5672] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.790907][ T5672] device bridge_slave_1 entered promiscuous mode [ 235.833665][ T5672] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.840621][ T5672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.847696][ T5672] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.854507][ T5672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.872956][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.881141][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.888240][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.898670][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.906783][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.913633][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.919579][ T330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220b000000ceba"], 0x0}, 0x0) [ 235.924207][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.931372][ T330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.939549][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.949453][ T330] usb 5-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 235.955547][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.964402][ T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.974017][ T974] usb 4-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 235.988296][ T330] usb 5-1: config 0 descriptor?? [ 235.988958][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.001113][ T974] usb 4-1: Product: syz [ 236.005085][ T974] usb 4-1: Manufacturer: syz [ 236.009662][ T974] usb 4-1: SerialNumber: syz [ 236.015240][ T974] usb 4-1: config 0 descriptor?? [ 236.022494][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 236.039681][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 236.047801][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 236.055691][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 236.063228][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 236.070967][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 236.079171][ T5672] device veth0_vlan entered promiscuous mode [ 236.091199][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 236.100203][ T5672] device veth1_macvtap entered promiscuous mode [ 236.109597][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 236.120057][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 236.130071][ T1168] usb 3-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ext4_sync_file_exit\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='ext4_sync_file_exit\x00', r4}, 0x10) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) [ 236.139003][ T1168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.146788][ T1168] usb 3-1: Product: syz [ 236.151021][ T1168] usb 3-1: Manufacturer: syz [ 236.155505][ T1168] usb 3-1: SerialNumber: syz [ 236.161429][ T1168] usb 3-1: config 0 descriptor?? executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x64000500) [ 236.271944][ T5647] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 236.319984][ T4652] device bridge_slave_1 left promiscuous mode [ 236.325927][ T4652] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.333332][ T4652] device bridge_slave_0 left promiscuous mode [ 236.339315][ T4652] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.348161][ T60] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 236.359850][ T974] usb 4-1: MIDIStreaming interface descriptor not found [ 236.367102][ T4652] device veth1_macvtap left promiscuous mode [ 236.375891][ T4652] device veth0_vlan left promiscuous mode [ 236.403336][ T974] usb 4-1: USB disconnect, device number 66 [ 236.585465][ T28] audit: type=1326 audit(1716396162.886:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f155c87cee9 code=0x0 [ 236.640802][ T330] wacom 0003:056A:0043.0053: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 236.651185][ T330] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0043.0053/input/input141 [ 236.665371][ T330] wacom 0003:056A:0043.0053: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.4-1/input0 [ 236.679472][ T60] usb 1-1: device descriptor read/64, error -71 [ 236.699533][ T1168] usb 3-1: MIDIStreaming interface descriptor not found [ 236.708755][ T1168] usb 3-1: USB disconnect, device number 78 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@user_xattr}, {@nobarrier}, {@sysvgroups}, {@norecovery}, {@errors_continue}, {@nomblk_io_submit}, {@quota}, {@noauto_da_alloc}, {@lazytime}]}, 0x3, 0x56a, &(0x7f0000000ec0)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f00000003c0)=0xa, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x48, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8}]}]}]}, 0x48}}, 0x0) executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@user_xattr}, {@nobarrier}, {@sysvgroups}, {@norecovery}, {@errors_continue}, {@nomblk_io_submit}, {@quota}, {@noauto_da_alloc}, {@lazytime}]}, 0x3, 0x56a, &(0x7f0000000ec0)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f00000003c0)=0xa, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x48, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8}]}]}]}, 0x48}}, 0x0) [ 236.830047][ T5686] loop3: detected capacity change from 0 to 1024 [ 236.836587][ T5686] EXT4-fs: Ignoring removed nomblk_io_submit option [ 236.851362][ T5686] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 236.866360][ T5069] EXT4-fs (loop3): unmounting filesystem. executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="af00000000000000eaffffffffffffff9500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000e000010100002800400040008000200000000000c00018008000100", @ANYRES32], 0x30}}, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x400145042, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r4, 0x8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000001140)=""/4086, &(0x7f0000000180)=0xff6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000100)={'syz1\x00', {}, 0x7, [0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffff8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}, 0x45c) executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x0, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000040)) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff7fd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r3, r4) executing program 3: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x1001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = gettid() r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x63b3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000003918110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000340), 0xfdef) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000084000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) [ 236.880882][ T5690] loop3: detected capacity change from 0 to 1024 [ 236.887506][ T5690] EXT4-fs: Ignoring removed nomblk_io_submit option [ 236.900699][ T5690] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 236.917508][ T5069] EXT4-fs (loop3): unmounting filesystem. executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000003a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0x10, 0xfc}, 0x20) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000008c0)={[{@numtail}, {@rodir}, {@fat=@check_strict}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@uni_xlate}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@shortname_winnt}, {@fat=@flush}, {@uni_xlateno}, {@numtail}]}, 0x6, 0x2a6, &(0x7f0000000440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x47) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x821cd0, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x112dd10, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r1, &(0x7f0000003800)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x4, 0xffff, 0x2, 0x100, 0x1, 0x6, '\x00', 0x0, r1, 0x1, 0x803, 0x5, 0xd}, 0x48) fcntl$lock(r0, 0x735dfada4a726514, &(0x7f0000000380)={0x2, 0x0, 0x81, 0x9, r2}) write$P9_RVERSION(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018001000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f00000001c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) chdir(&(0x7f0000000040)='./file0\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x43, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x6}]}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000200)='memory.stat\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x8, {0x8, 0xa, "47f882f4d105"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x0, 0x9, 0x1}, 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b40)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='track_foreign_dirty\x00'}, 0x10) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="060005"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) [ 237.109432][ T60] usb 1-1: device descriptor read/64, error -71 [ 237.113676][ T5705] loop1: detected capacity change from 0 to 256 [ 237.136013][ T5672] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 237.144050][ T5672] FAT-fs (loop1): Filesystem has been set read-only [ 237.151301][ T5672] FAT-fs (loop1): error, corrupted directory (invalid entries) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r4}, 0x10) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r5 = fsopen(&(0x7f0000000140)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='#@/#}+\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) close(r1) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000008c0)={[{@numtail}, {@rodir}, {@fat=@check_strict}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@uni_xlate}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@shortname_winnt}, {@fat=@flush}, {@uni_xlateno}, {@numtail}]}, 0x6, 0x2a6, &(0x7f0000000440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x47) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x821cd0, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x112dd10, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r1, &(0x7f0000003800)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x4, 0xffff, 0x2, 0x100, 0x1, 0x6, '\x00', 0x0, r1, 0x1, 0x803, 0x5, 0xd}, 0x48) fcntl$lock(r0, 0x735dfada4a726514, &(0x7f0000000380)={0x2, 0x0, 0x81, 0x9, r2}) write$P9_RVERSION(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018001000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f00000001c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) chdir(&(0x7f0000000040)='./file0\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) [ 237.298155][ T5709] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.305060][ T5709] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.312161][ T5709] device bridge_slave_0 entered promiscuous mode [ 237.320246][ T5709] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.327188][ T5709] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.334400][ T5709] device bridge_slave_1 entered promiscuous mode [ 237.375050][ T5709] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.382003][ T5709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.389095][ T5709] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.395890][ T5709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.399432][ T60] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 237.419471][ T330] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 237.424975][ T974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.434365][ T974] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.441924][ T974] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.452932][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.461013][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.467842][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.480470][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.488436][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.495283][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.502828][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.513556][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.528818][ T5709] device veth0_vlan entered promiscuous mode [ 237.535315][ T974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 237.543575][ T974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 237.551561][ T974] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 237.558741][ T974] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 237.571691][ T5709] device veth1_macvtap entered promiscuous mode executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000008c0)={[{@numtail}, {@rodir}, {@fat=@check_strict}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@uni_xlate}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@shortname_winnt}, {@fat=@flush}, {@uni_xlateno}, {@numtail}]}, 0x6, 0x2a6, &(0x7f0000000440)="$eJzs3T9rW1cUAPDzbFlS20EaOpVCH7RDJ2N77SJTbDDV1KKh7dCa2oZiiYINhv6hqqeuXTr2ExQC2fIlsmTIHsgayBYPhhee9F4kO7JsBcvOn99v8fV999x77vXFxoPO+/Hj3v5OGnvHfzyKej2JhVa04iSJZixE6a84o/VPAABvspMsi6fZ0CxxSUTU55cWADBHM//9vzv3lACAOfvm2+++Wm+3N75O03ps9v4+6uT/2edfh8/X9+Ln6MZurEQjTiOyF4btzSzL+pU014zPev2jTh7Z++F+Mf/6k4hB/Go0ojnoOhu/1d5YTYfG4vt5Hu8X67fy+LVoxIcT1t9qb6xNiI9ONT7/dCz/5WjEg5/il+jGziCJUfyfq2n6Zfbvs9+/z9PL45P+Uac2GDeSLd7wjwYAAAAAAAAAAAAAAAAAAAAAgLfYclE7pxaD+j15V1F/Z/E0/2Yp0lLzbH2eYXxSTnSuPlA/i//K+joraZpmxcBRfCU+qkTldnYNAAAAAAAAAAAAAAAAAAAAr5fDX3/b3+52dw+upVFWAyg/1v+q87TGej6J6YNro7UWiuaUmWOxHJNETE0j38Q1Hctljfcuyvn/O7NOWL98zNK087meRnm79reTyWdYi7KnXl6Se+NjqnHFtaoXPcpmun7ViY8aM++9+sGg0Z8yJpJpiX3xeHhyRU9yfhfVwalODF8qGmPh5+7GTPf55d8ViWodAAAAAAAAAAAAAAAAAAAwV6MP/U54eHxB0MOt4Uv+a3NODgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABuyOj9/zM0+kXwFQZX4+DwlrcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAO+B5AAAA///S9mga") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x47) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x821cd0, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x112dd10, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r1, &(0x7f0000003800)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x4, 0xffff, 0x2, 0x100, 0x1, 0x6, '\x00', 0x0, r1, 0x1, 0x803, 0x5, 0xd}, 0x48) fcntl$lock(r0, 0x735dfada4a726514, &(0x7f0000000380)={0x2, 0x0, 0x81, 0x9, r2}) write$P9_RVERSION(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018001000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f00000001c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) chdir(&(0x7f0000000040)='./file0\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000008c0)={[{@numtail}, {@rodir}, {@fat=@check_strict}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@uni_xlate}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@shortname_winnt}, {@fat=@flush}, {@uni_xlateno}, {@numtail}]}, 0x6, 0x2a6, &(0x7f0000000440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x47) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x821cd0, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x112dd10, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r1, &(0x7f0000003800)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x4, 0xffff, 0x2, 0x100, 0x1, 0x6, '\x00', 0x0, r1, 0x1, 0x803, 0x5, 0xd}, 0x48) fcntl$lock(r0, 0x735dfada4a726514, &(0x7f0000000380)={0x2, 0x0, 0x81, 0x9, r2}) write$P9_RVERSION(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018001000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f00000001c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) chdir(&(0x7f0000000040)='./file0\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) [ 237.581459][ T974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 237.591555][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 237.600950][ T974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 237.622950][ T5714] loop1: detected capacity change from 0 to 256 [ 237.638204][ T5709] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 237.645759][ T5709] FAT-fs (loop1): Filesystem has been set read-only [ 237.653231][ T5709] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 237.689471][ T60] usb 1-1: device descriptor read/64, error -71 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="af00000000000000eaffffffffffffff9500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000e000010100002800400040008000200000000000c00018008000100", @ANYRES32], 0x30}}, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x400145042, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r4, 0x8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000001140)=""/4086, &(0x7f0000000180)=0xff6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000100)={'syz1\x00', {}, 0x7, [0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffff8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}, 0x45c) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x0, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000040)) executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x43, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x6}]}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000200)='memory.stat\x00', 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x8, {0x8, 0xa, "47f882f4d105"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 237.779539][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.792759][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.804697][ T330] usb 3-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 237.815702][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.824876][ T330] usb 3-1: config 0 descriptor?? [ 237.830611][ T4652] device bridge_slave_1 left promiscuous mode [ 237.837240][ T4652] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.845042][ T4652] device bridge_slave_0 left promiscuous mode [ 237.851272][ T4652] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.859234][ T4652] device veth1_macvtap left promiscuous mode [ 237.865384][ T4652] device veth0_vlan left promiscuous mode [ 237.949683][ T5718] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.956526][ T5718] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.965931][ T5718] device bridge_slave_0 entered promiscuous mode [ 237.972947][ T5718] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.979838][ T5718] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.986926][ T5718] device bridge_slave_1 entered promiscuous mode [ 238.030517][ T5718] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.037387][ T5718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.044454][ T5718] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.051262][ T5718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.070636][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.078189][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.085530][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.092478][ T60] usb 1-1: device descriptor read/64, error -71 [ 238.109442][ T974] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 238.115019][ T5718] device veth0_vlan entered promiscuous mode [ 238.123746][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 238.132004][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 238.139861][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 238.147066][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 238.154375][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.162356][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.169188][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.177311][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.185347][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.192186][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.199330][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.207002][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.214610][ T60] usb usb1-port1: attempt power cycle executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x0, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000040)) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200f1ff8500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint_stats\x00', r5}, 0x10) ioctl$TUNSETOFFLOAD(r4, 0x4004662b, 0x20001412) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r6 = syz_open_pts(r2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000280)='\x00', 0x0}, 0x30) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0xb, 0x1, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@ifindex=r7, r1, 0x36, 0x2020, 0x0, @prog_id=r8, r9}, 0x20) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2) read(r6, 0x0, 0x2006) timer_create(0x0, &(0x7f00000012c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r10 = gettid() tkill(r10, 0x0) [ 238.225905][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 238.235283][ T5718] device veth1_macvtap entered promiscuous mode [ 238.246815][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 238.255405][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000003a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0x10, 0xfc}, 0x20) [ 238.292188][ T28] audit: type=1326 audit(1716396164.616:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2bcec7cee9 code=0x0 [ 238.310458][ T24] usb 5-1: USB disconnect, device number 78 [ 238.333157][ T5726] serio: Serial port pts0 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x64000500) [ 238.410986][ T330] wacom 0003:056A:0043.0054: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 238.420974][ T330] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0043.0054/input/input145 [ 238.434320][ T330] wacom 0003:056A:0043.0054: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.2-1/input0 [ 238.509484][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.520623][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.531114][ T974] usb 4-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 238.540118][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.553790][ T974] usb 4-1: config 0 descriptor?? [ 238.679582][ T60] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 238.909567][ T60] usb 1-1: device descriptor read/8, error -71 [ 238.940025][ T4652] device bridge_slave_1 left promiscuous mode [ 238.946027][ T4652] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.953252][ T4652] device bridge_slave_0 left promiscuous mode executing program 0: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = gettid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x63b3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000003918110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0xfdef) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000084000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) [ 238.959211][ T4652] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.966985][ T4652] device veth1_macvtap left promiscuous mode [ 238.972915][ T4652] device veth0_vlan left promiscuous mode executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000008c0)={[{@numtail}, {@rodir}, {@fat=@check_strict}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@uni_xlate}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@shortname_winnt}, {@fat=@flush}, {@uni_xlateno}, {@numtail}]}, 0x6, 0x2a6, &(0x7f0000000440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x47) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x821cd0, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x112dd10, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r1, &(0x7f0000003800)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x4, 0xffff, 0x2, 0x100, 0x1, 0x6, '\x00', 0x0, r1, 0x1, 0x803, 0x5, 0xd}, 0x48) fcntl$lock(r0, 0x735dfada4a726514, &(0x7f0000000380)={0x2, 0x0, 0x81, 0x9, r2}) write$P9_RVERSION(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018001000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f00000001c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) chdir(&(0x7f0000000040)='./file0\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r4}, 0x10) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r5 = fsopen(&(0x7f0000000140)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='#@/#}+\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) close(r1) [ 239.110518][ T28] audit: type=1326 audit(1716396165.436:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5716 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fefc327cee9 code=0x0 [ 239.134785][ T60] usb 1-1: device descriptor read/8, error -71 [ 239.149101][ T5738] loop1: detected capacity change from 0 to 256 [ 239.165799][ T5718] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 239.173310][ T5718] FAT-fs (loop1): Filesystem has been set read-only [ 239.180511][ T5718] FAT-fs (loop1): error, corrupted directory (invalid entries) executing program 4: arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x40000000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) readv(r3, &(0x7f0000001900)=[{0x0, 0x18}, {&(0x7f0000000040)=""/65, 0x41}], 0x2) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000008c0)={[{@numtail}, {@rodir}, {@fat=@check_strict}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@uni_xlate}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@shortname_winnt}, {@fat=@flush}, {@uni_xlateno}, {@numtail}]}, 0x6, 0x2a6, &(0x7f0000000440)="$eJzs3T9rW1cUAPDzbFlS20EaOpVCH7RDJ2N77SJTbDDV1KKh7dCa2oZiiYINhv6hqqeuXTr2ExQC2fIlsmTIHsgayBYPhhee9F4kO7JsBcvOn99v8fV999x77vXFxoPO+/Hj3v5OGnvHfzyKej2JhVa04iSJZixE6a84o/VPAABvspMsi6fZ0CxxSUTU55cWADBHM//9vzv3lACAOfvm2+++Wm+3N75O03ps9v4+6uT/2edfh8/X9+Ln6MZurEQjTiOyF4btzSzL+pU014zPev2jTh7Z++F+Mf/6k4hB/Go0ojnoOhu/1d5YTYfG4vt5Hu8X67fy+LVoxIcT1t9qb6xNiI9ONT7/dCz/5WjEg5/il+jGziCJUfyfq2n6Zfbvs9+/z9PL45P+Uac2GDeSLd7wjwYAAAAAAAAAAAAAAAAAAAAAgLfYclE7pxaD+j15V1F/Z/E0/2Yp0lLzbH2eYXxSTnSuPlA/i//K+joraZpmxcBRfCU+qkTldnYNAAAAAAAAAAAAAAAAAAAAr5fDX3/b3+52dw+upVFWAyg/1v+q87TGej6J6YNro7UWiuaUmWOxHJNETE0j38Q1Hctljfcuyvn/O7NOWL98zNK087meRnm79reTyWdYi7KnXl6Se+NjqnHFtaoXPcpmun7ViY8aM++9+sGg0Z8yJpJpiX3xeHhyRU9yfhfVwalODF8qGmPh5+7GTPf55d8ViWodAAAAAAAAAAAAAAAAAAAwV6MP/U54eHxB0MOt4Uv+a3NODgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABuyOj9/zM0+kXwFQZX4+DwlrcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAO+B5AAAA///S9mga") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x47) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x821cd0, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x112dd10, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r1, &(0x7f0000003800)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x4, 0xffff, 0x2, 0x100, 0x1, 0x6, '\x00', 0x0, r1, 0x1, 0x803, 0x5, 0xd}, 0x48) fcntl$lock(r0, 0x735dfada4a726514, &(0x7f0000000380)={0x2, 0x0, 0x81, 0x9, r2}) write$P9_RVERSION(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018001000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f00000001c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) chdir(&(0x7f0000000040)='./file0\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) [ 239.257448][ T974] wacom 0003:056A:0043.0055: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 239.267578][ T974] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0043.0055/input/input148 [ 239.280612][ T974] wacom 0003:056A:0043.0055: hidraw1: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.3-1/input0 [ 239.390829][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.397686][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.404975][ T5743] device bridge_slave_0 entered promiscuous mode [ 239.413683][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.420638][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.427705][ T5743] device bridge_slave_1 entered promiscuous mode [ 239.473208][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.480066][ T5743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.487158][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.493956][ T5743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.512436][ T974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.519860][ T974] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.526968][ T974] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.529542][ T19] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 239.550598][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.558556][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.565412][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.572605][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.580543][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.587366][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.594637][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.602385][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.616429][ T974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 239.627772][ T5743] device veth0_vlan entered promiscuous mode [ 239.634054][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 239.641913][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 239.649094][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 239.662440][ T974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000008c0)={[{@numtail}, {@rodir}, {@fat=@check_strict}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@uni_xlate}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@shortname_winnt}, {@fat=@flush}, {@uni_xlateno}, {@numtail}]}, 0x6, 0x2a6, &(0x7f0000000440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x47) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x821cd0, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x112dd10, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r1, &(0x7f0000003800)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x4, 0xffff, 0x2, 0x100, 0x1, 0x6, '\x00', 0x0, r1, 0x1, 0x803, 0x5, 0xd}, 0x48) fcntl$lock(r0, 0x735dfada4a726514, &(0x7f0000000380)={0x2, 0x0, 0x81, 0x9, r2}) write$P9_RVERSION(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018001000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f00000001c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) chdir(&(0x7f0000000040)='./file0\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="af00000000000000eaffffffffffffff9500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000e000010100002800400040008000200000000000c00018008000100", @ANYRES32], 0x30}}, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x400145042, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r4, 0x8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000001140)=""/4086, &(0x7f0000000180)=0xff6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000100)={'syz1\x00', {}, 0x7, [0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffff8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}, 0x45c) [ 239.671501][ T5743] device veth1_macvtap entered promiscuous mode [ 239.682412][ T974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 239.692874][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 239.715184][ T5748] loop1: detected capacity change from 0 to 256 [ 239.734461][ T5743] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 239.742012][ T5743] FAT-fs (loop1): Filesystem has been set read-only [ 239.748773][ T5743] FAT-fs (loop1): error, corrupted directory (invalid entries) executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000040)) [ 239.789478][ T19] usb 5-1: Using ep0 maxpacket: 16 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r4}, 0x10) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='#@/#}+\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) close(r1) executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x43, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x6}]}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000200)='memory.stat\x00', 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x8, {0x8, 0xa, "47f882f4d105"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220b000000ceba"], 0x0}, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200f1ff8500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint_stats\x00', r5}, 0x10) ioctl$TUNSETOFFLOAD(r4, 0x4004662b, 0x20001412) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r6 = syz_open_pts(r2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000280)='\x00', 0x0}, 0x30) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0xb, 0x1, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@ifindex=r7, r1, 0x36, 0x2020, 0x0, @prog_id=r8, r9}, 0x20) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2) read(r6, 0x0, 0x2006) timer_create(0x0, &(0x7f00000012c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r10 = gettid() tkill(r10, 0x0) [ 239.873663][ T4652] device bridge_slave_1 left promiscuous mode [ 239.880774][ T4652] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.889745][ T4652] device bridge_slave_0 left promiscuous mode [ 239.895908][ T4652] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.904140][ T4652] device veth1_macvtap left promiscuous mode [ 239.910588][ T4652] device veth0_vlan left promiscuous mode [ 240.026743][ T5756] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.033759][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.041319][ T5756] device bridge_slave_0 entered promiscuous mode [ 240.048368][ T5756] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.055507][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.062868][ T5756] device bridge_slave_1 entered promiscuous mode [ 240.069536][ T19] usb 5-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 240.078514][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.086502][ T19] usb 5-1: Product: syz [ 240.090537][ T19] usb 5-1: Manufacturer: syz [ 240.094930][ T19] usb 5-1: SerialNumber: syz [ 240.100676][ T19] usb 5-1: config 0 descriptor?? [ 240.133965][ T5756] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.136361][ T330] usb 3-1: USB disconnect, device number 79 [ 240.140962][ T5756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.141061][ T5756] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.141077][ T5756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.158339][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.176126][ T1168] bridge0: port 1(bridge_slave_0) entered disabled state executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff7fd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r3, 0xffffffffffffffff) executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000008c0)={[{@numtail}, {@rodir}, {@fat=@check_strict}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@uni_xlate}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@shortname_winnt}, {@fat=@flush}, {@uni_xlateno}, {@numtail}]}, 0x6, 0x2a6, &(0x7f0000000440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x47) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x821cd0, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x112dd10, 0x0) [ 240.183611][ T1168] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.196648][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.205854][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.212728][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.220733][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.225115][ T5763] loop2: detected capacity change from 0 to 256 executing program 2: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = gettid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x63b3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000003918110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0xfdef) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000084000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) [ 240.228789][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.241487][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.250275][ T5117] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 240.257634][ T5117] FAT-fs (loop2): Filesystem has been set read-only [ 240.265353][ T5117] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 240.276982][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) readv(r3, &(0x7f0000001900)=[{0x0, 0x18}, {&(0x7f0000000040)=""/65, 0x41}], 0x2) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 240.284771][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 240.299612][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 240.311589][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.319344][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 240.326686][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0x10, 0xfc}, 0x20) [ 240.335394][ T5756] device veth0_vlan entered promiscuous mode [ 240.352347][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 240.361863][ T5756] device veth1_macvtap entered promiscuous mode [ 240.374775][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200f1ff8500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint_stats\x00', r5}, 0x10) ioctl$TUNSETOFFLOAD(r4, 0x4004662b, 0x20001412) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r6 = syz_open_pts(r2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000280)='\x00', 0x0}, 0x30) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0xb, 0x1, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@ifindex=r7, r1, 0x36, 0x2020, 0x0, @prog_id=r8, r9}, 0x20) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2) read(r6, 0x0, 0x2006) timer_create(0x0, &(0x7f00000012c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r10 = gettid() tkill(r10, 0x0) [ 240.389920][ T60] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 240.400261][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 240.420424][ T19] usb 5-1: MIDIStreaming interface descriptor not found [ 240.434356][ T19] usb 5-1: USB disconnect, device number 79 [ 240.456014][ T5766] serio: Serial port pts0 [ 240.485022][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.491962][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.499055][ T5767] device bridge_slave_0 entered promiscuous mode [ 240.505879][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.512928][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.520553][ T5767] device bridge_slave_1 entered promiscuous mode [ 240.562034][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.568886][ T5767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.576015][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.582794][ T5767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.599515][ T60] usb 1-1: device descriptor read/8, error -71 [ 240.605815][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.613255][ T337] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.620331][ T337] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.641440][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 240.649609][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.657520][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.664272][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.672559][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.680516][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.687340][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.694499][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 240.702145][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 240.714827][ T5767] device veth0_vlan entered promiscuous mode [ 240.721285][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.729034][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 240.736370][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 240.748888][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 240.756831][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 240.767826][ T5767] device veth1_macvtap entered promiscuous mode [ 240.780397][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 240.787813][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 240.795860][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 240.804208][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 240.812201][ T1167] usb 4-1: USB disconnect, device number 67 executing program 3: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = gettid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x63b3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000003918110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0xfdef) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000084000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0x10, 0xfc}, 0x20) executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000040)) executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="af00000000000000eaffffffffffffff9500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000e000010100002800400040008000200000000000c00018008000100", @ANYRES32], 0x30}}, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x400145042, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r4, 0x8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000001140)=""/4086, &(0x7f0000000180)=0xff6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000100)={'syz1\x00', {}, 0x7, [0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffff8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}, 0x45c) executing program 2: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = gettid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x63b3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000003918110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0xfdef) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000084000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x43, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x6}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x8, {0x8, 0xa, "47f882f4d105"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 240.812628][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 240.889518][ T60] usb 1-1: device descriptor read/8, error -71 [ 240.970096][ T4652] device bridge_slave_1 left promiscuous mode [ 240.976126][ T4652] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.983420][ T4652] device bridge_slave_0 left promiscuous mode [ 240.989342][ T4652] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.997197][ T4652] device veth1_macvtap left promiscuous mode [ 241.003188][ T4652] device veth0_vlan left promiscuous mode [ 241.019498][ T60] usb usb1-port1: unable to enumerate USB device [ 241.139453][ T337] usb 5-1: new high-speed USB device number 80 using dummy_hcd executing program 1: arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x40000000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) [ 241.499494][ T337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.510285][ T337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.519928][ T337] usb 5-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 241.528702][ T337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.537290][ T337] usb 5-1: config 0 descriptor?? [ 241.542150][ T19] usb 2-1: new high-speed USB device number 73 using dummy_hcd executing program 3: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = gettid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x63b3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000003918110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0xfdef) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000084000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff7fd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r3, 0xffffffffffffffff) executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@user_xattr}, {@nobarrier}, {@sysvgroups}, {@norecovery}, {@errors_continue}, {@nomblk_io_submit}, {@quota}, {@noauto_da_alloc}, {@lazytime}]}, 0x3, 0x56a, &(0x7f0000000ec0)="$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") socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x48, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8}]}]}]}, 0x48}}, 0x0) executing program 2: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = gettid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x63b3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000003918110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0xfdef) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000084000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) [ 241.727617][ T5793] loop2: detected capacity change from 0 to 1024 [ 241.734553][ T5793] EXT4-fs: Ignoring removed nomblk_io_submit option [ 241.750869][ T5793] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 241.766800][ T5767] EXT4-fs (loop2): unmounting filesystem. [ 241.789450][ T19] usb 2-1: Using ep0 maxpacket: 16 [ 241.810371][ T4652] device bridge_slave_1 left promiscuous mode [ 241.816317][ T4652] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.823517][ T4652] device bridge_slave_0 left promiscuous mode [ 241.829693][ T4652] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.837460][ T4652] device veth1_macvtap left promiscuous mode [ 241.843578][ T4652] device veth0_vlan left promiscuous mode [ 242.010676][ T28] audit: type=1326 audit(1716396168.336:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5781 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f155c87cee9 code=0x0 [ 242.069493][ T19] usb 2-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 242.078442][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.086275][ T19] usb 2-1: Product: syz [ 242.090278][ T19] usb 2-1: Manufacturer: syz [ 242.094713][ T19] usb 2-1: SerialNumber: syz [ 242.099917][ T19] usb 2-1: config 0 descriptor?? [ 242.130564][ T337] wacom 0003:056A:0043.0056: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 242.140549][ T337] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0043.0056/input/input152 [ 242.153418][ T337] wacom 0003:056A:0043.0056: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.4-1/input0 [ 242.341399][ T5787] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 242.419523][ T19] usb 2-1: MIDIStreaming interface descriptor not found [ 242.427471][ T19] usb 2-1: USB disconnect, device number 73 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) readv(r3, &(0x7f0000001900)=[{0x0, 0x18}, {&(0x7f0000000040)=""/65, 0x41}], 0x2) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x43, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x6}]}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000200)='memory.stat\x00', 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x8, {0x8, 0xa, "47f882f4d105"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0x10, 0xfc}, 0x20) executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000040)) executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="af00000000000000eaffffffffffffff9500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000e000010100002800400040008000200000000000c00018008000100", @ANYRES32], 0x30}}, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x400145042, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r4, 0x8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000001140)=""/4086, &(0x7f0000000180)=0xff6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000100)={'syz1\x00', {}, 0x7, [0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffff8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}, 0x45c) executing program 2: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x1001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = gettid() r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x63b3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000003918110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000340), 0xfdef) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000084000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x6ed, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0x2c, 0x3e, 0x56, 0x10, 0x403, 0xfc0c, 0x680a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6db, 0x2, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0xb0, 0x7, 0xb, 0xee, 0xeb, 0x6, 0x3f, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1}, @as_header={0x7, 0x24, 0x1, 0x77, 0x0, 0x1001}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x4, 0x3, 0x6, "6650355d5981"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1f, "", 'Fn'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0x5, 0x1, "6642d4"}]}, @uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x1, 0x0, 0x0, "c22dfc71f9321778"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1, 0x0, 0x5, "9fd90b"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4a, 0x2, 0x1, 0x7f, "5712"}]}], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x1, 0xb5, 0x1, [@generic={0xe3, 0x1, "fbe3905347bd21fb3086a714d214129ad1cc38aadd1a455ffe29358cc11a52727290d4360b3de8678a9c5be1dd7b382f70b5d42dea722e4ccc729c5c206f5a124e9bc21839c21f4b5cfa8ebb1b2653fa1b1194d2b0b4cc3405dfdeeafe83516237319ba05c78fdf9ea9c701ea994050bc516cb23cc0b6b1e4dc5c18f21d1ecd0be8777ac07b5ad123a7e2c02a1bf2a69d86f4a2d7db8e70c44858bb0677dc7d55d769047676f67f930c8036641e1796f4d8e021ccc6f46cbf43e9806427a961172668c2eb400c6e4cd502825047d91b8fdf180a773a5828faa47e88b1a1998f5d8"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x1, 0x5, 0x0, [@generic={0x5c, 0x24, "d6eb75f38a1f4108c23d9cfafcd0d3730c8e2a22fc37858584e423c8a47e05b5a9e7383105bf1e1c4ee593ea651b612c3c242c3331d24e24e0a4d250f5de2e563246b53454d340f666e363b4a3ce1369b74c493ec726d82b728c"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x2, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x43, 0x6}]}}, {{0x9, 0x5, 0x9, 0x8, 0xc51b29c1bd4bee16, 0x4, 0x4, 0x47, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1d, 0x7ff}]}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x2, 0xc8}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x0, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0xc400}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x5, 0x1, 0xfe}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x4, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x81, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x100}, @generic={0xa7, 0x7, "00460d7e0a84d19f9a9dccb877f29496e55ccbf78281e0305ccd99793e1c064e606286e82ec5922b4b7aad0a387811c65ed15ce4a2834b00de91ae48f505682f7418261baccb186e1b328825671124f3b9a1f897a4f7dca94e0e5fd53d38ffee0c623d9cea619f14b0bda4da588fa133a13e616e13b7803693e188b41f089766adcbce9ad7bc1363432b11cc399a68ee8afc89dce49580e7a8ca7474f10b6db7aaecc73f6a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x81, 0x9, 0x92, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x6, 0x3, 0x1, [@generic={0x11, 0x8, "5857d316d88cefc48a04724882f6d9"}, @generic={0x37, 0x0, "5e2752f41f9c7cb5e90d4e89c9f1c197c801284239a8be78a364b46625b38cdb7d67c0906b5b4c05eba2fa9135ce6e312316936cb4"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0xd, 0xe, 0x1, 0x0, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x9, 0x9, 0x6}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x5, 0x4, 0xb5}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3f, 0xbd, 0x1, [@generic={0xcc, 0x35, "334cc78da2570b385a26078db10c4ab7e17dc9339f01d9b3764a3603fbf92ea2cb104a444dccd4ca3bf96d63be074e5cf3d44aa4f3f89f24778b1b79b52a8506a6a25601e86a6044049c367c0d879939b876c16bee954aac4a1f9e2b08ef37fd8b1e65d5a98bb7f6d8d0acd09aa37e1a3308ead30d9e28f8ca83a4e739fa931e8e87560da183fc30eb47d87ee28f30343aa40cbff4c7d753b827d92a1f3751133b42e65d8ab068fc448e198292141fd798bcbb87e04507d5167301dd87aed3834c82117a5d3231adde2c"}, @generic={0xcb, 0x24, "57d95e064d6c8da99b21715aff4fdff831ee9b50f3cd822dff34cef34ae70c417268e0ffca632f72630a6936df0489602a44ff3d5d6c15c187746e3a5841a8db163c01946379f00512cecc1ba4c741956dc5e4be6aeddd630792900eb75f8aed17ed03cafd392e483e02f81cdff80355244ff4bbbd2e0202ee86dcf5a0d0132e815fb478007c4d0ba48235afa9b0267cfe1d6f1418d457947ce5b5edba3ddd9573852933830f4dabe6845c8967081fa6516ccae675b6c343259445604d883e2b040bf6afd285f9dc08"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x80, 0x1, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x5}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x1, 0x240, 0x5, 0x2, 0xa6, [@generic={0x80, 0x2c, "6e3300b2d4da826b7ce6ec3b8b566528100cf6aeb1c3e725f6e465f06b19f6b0d093c2d26a179d24e942fcf737882812f8e1f5b9ee95444a9cb7d31cdbbb24b7c0b15ba35498568f80678b2defb09d1e49c78e1f8d9878dee38f864e28dac051fdfdbf08bb0fa58cabe65bdd694a45646a0aec42debcdabecb67f32a942c"}, @generic={0x75, 0x22, "15f7e01d70e9304e521aad05c65d1696bca3df848300e46c3977ff2283cadde397ee24c3db9476bbbc022b03f10cd7d768ec7ff32b48929b0da2812972da0110facf51f2fb62c44f32a76cfe293bbb5dffddff06a539a1eb025a468212b12f2b6c85ef3222e4cc6cb8087123fb3c4dc36514e6"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0x0, 0x6, 0x4, [@generic={0x83, 0xa, "f1b61bde8e23aee691da6fddf1a662d4faf57b33c234367581d403eecb5c217b88667064f6b64062037ea2de5fae3317bdb91a39a260b52364723448a8219bb4955c8837a5f2271f2887964319736516de8b4f372b0746bd07c16ca3e9b001b93f0121980def306598d05f9b7b22acf4e16576d441e3c7b38ec5a19143ece84dbe"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x1, 0x38, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x1a, 0x58, 0x1f}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x0, 0x3f}}, {{0x9, 0x5, 0xb, 0x8, 0x600, 0x4, 0x60, 0x7f}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x6, 0x7, 0x3a, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5}]}}, {{0x9, 0x5, 0x82, 0xc, 0x400, 0x9, 0x6, 0x2c, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x201, 0x5, 0x5, 0x6, 0x40, 0x4}, 0xc, &(0x7f0000000e80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x1}]}, 0x1, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x1809}}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000f40)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000013c0)={&(0x7f0000001140)={0x258, 0x20, 0x400, 0x70bd29, 0x25dfdbfe, {0x1d}, [@generic="9f8bbef02fef0636bc0bca3fe397deea7e98e2ef45e28a785572016d7157d43f6ffe44c2b8bcf54865bd23bb8bf4184cf4aa7c8f553a9be09c64375e343dc61eff2a033b71e5d301ecc43412ec504af88c8da9e415dde95411a585ca2964b6748e78deb0bc", @typed={0x8, 0x2d, 0x0, 0x0, @fd}, @typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@empty}, @nested={0x160, 0xf4, 0x0, 0x1, [@typed={0x8, 0xfb, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x4, 0x83}, @generic="fdd6c776e1c72f6e6448c1e798db09c55bc6d84b72262a6bd84f3c456da8d7e52d677fde1cd52ce143cb371cc32a0f9a36d143107fdab7d9c9b9c065bd3c032dae6508b65d3586ab0d4945e8388973811d4af2ac5b84da383465a88e576cf7658c8fd3d9b85ceef613e4336b6e2e0858205e3ca10fa1344747c6c8cd926924b877db08ae772c8f19dc3c3ae7bbe3a31968af581f77b1724189fd391cfe6735d266baa8e001ea42c4e3052958dc2e1257611f4fc47eb4f087c0394cdd3f076fc78c8fb6f310a107d75f3c11bb506ece1ecd7510b1d0a53eeedbffb40c48f65cb1c47aa3dcd4279b900a599951d6c9a87959e9493a", @generic="f6cf8b03aaee437855a513f218b5bc8ee0659b72294dc1c7eacaf6dccf23a7029cf679426e059fcdb72e12bf5c4214ba", @typed={0x5, 0x56, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@empty}, @typed={0xc, 0xca, 0x0, 0x0, @u64=0x8}]}, @generic="9063408c9cc09dbe86e35cb3003e3280104de5550ed71de0af3d98364d9a9e7079bbd83c2b3fc25bcf3a0d644dc7c55d63f53fd225514c79e147df1e1667c69fa71c9650994705279f7a8103e7483a0ebc94fdbadf6f3a896fbf0911d5b9eca3baa7370c48c24d1367232ba455cacc"]}, 0x258}, 0x1, 0x0, 0x0, 0x4000}, 0x40c4) [ 242.789437][ T1167] usb 4-1: new high-speed USB device number 68 using dummy_hcd executing program 0: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = gettid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x63b3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000003918110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0xfdef) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000084000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) [ 243.129460][ T337] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 243.199497][ T1167] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.210288][ T1167] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.219771][ T1167] usb 4-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 243.228580][ T1167] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.236837][ T1167] usb 4-1: config 0 descriptor?? [ 243.369433][ T337] usb 2-1: Using ep0 maxpacket: 16 executing program 2: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = gettid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x63b3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000003918110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0xfdef) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000084000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) [ 243.489480][ T337] usb 2-1: config 0 has an invalid interface number: 176 but max is 1 [ 243.497534][ T337] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 243.506034][ T337] usb 2-1: config 0 has no interface number 1 [ 243.512001][ T337] usb 2-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 243.522564][ T337] usb 2-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 243.533029][ T337] usb 2-1: config 0 interface 176 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0 [ 243.542671][ T337] usb 2-1: config 0 interface 176 altsetting 7 endpoint 0x9 has invalid maxpacket 60950, setting to 64 [ 243.553525][ T337] usb 2-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 243.563909][ T337] usb 2-1: config 0 interface 176 altsetting 7 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 243.574771][ T337] usb 2-1: config 0 interface 176 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 243.585538][ T337] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 243.595850][ T337] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 243.606175][ T337] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 243.617044][ T337] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 243.626484][ T337] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 243.636810][ T337] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 243.647145][ T337] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 243.657475][ T337] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 243.667798][ T337] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 243.678059][ T337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 243.688731][ T337] usb 2-1: config 0 interface 176 has no altsetting 0 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@user_xattr}, {@nobarrier}, {@sysvgroups}, {@norecovery}, {@errors_continue}, {@nomblk_io_submit}, {@quota}, {@noauto_da_alloc}, {@lazytime}]}, 0x3, 0x56a, &(0x7f0000000ec0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x48, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8}]}]}]}, 0x48}}, 0x0) [ 243.710672][ T28] audit: type=1326 audit(1716396170.036:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5804 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fefc327cee9 code=0x0 [ 243.744233][ T5824] loop0: detected capacity change from 0 to 1024 [ 243.751122][ T5824] EXT4-fs: Ignoring removed nomblk_io_submit option executing program 0: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = gettid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x63b3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000003918110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0xfdef) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000084000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) [ 243.760747][ T5824] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 243.773921][ T5129] EXT4-fs (loop0): unmounting filesystem. [ 243.820539][ T1167] wacom 0003:056A:0043.0057: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 243.830200][ T1167] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0043.0057/input/input156 [ 243.843714][ T1167] wacom 0003:056A:0043.0057: hidraw1: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.3-1/input0 [ 243.849532][ T337] usb 2-1: New USB device found, idVendor=0403, idProduct=fc0c, bcdDevice=68.0a executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) readv(r3, &(0x7f0000001900)=[{0x0, 0x18}, {&(0x7f0000000040)=""/65, 0x41}], 0x2) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) executing program 4: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = gettid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x63b3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000003918110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0xfdef) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000084000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) [ 243.863475][ T337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.871262][ T337] usb 2-1: Product: syz [ 243.875225][ T337] usb 2-1: Manufacturer: syz [ 243.877395][ T1167] usb 5-1: USB disconnect, device number 80 [ 243.879734][ T337] usb 2-1: SerialNumber: syz [ 243.885831][ T337] usb 2-1: config 0 descriptor?? [ 244.169913][ T337] ftdi_sio 2-1:0.176: FTDI USB Serial Device converter detected [ 244.177590][ T337] ftdi_sio ttyUSB0: unknown device type: 0x680a [ 244.184655][ T337] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 244.192140][ T337] ftdi_sio ttyUSB1: unknown device type: 0x680a [ 244.199421][ T337] usb 2-1: USB disconnect, device number 74 [ 244.205741][ T337] ftdi_sio 2-1:0.176: device disconnected [ 244.211893][ T337] ftdi_sio 2-1:0.0: device disconnected executing program 2: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = gettid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x63b3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000003918110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0xfdef) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000084000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000040)) executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="af00000000000000eaffffffffffffff9500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000e000010100002800400040008000200000000000c00018008000100", @ANYRES32], 0x30}}, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x400145042, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r4, 0x8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000001140)=""/4086, &(0x7f0000000180)=0xff6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000100)={'syz1\x00', {}, 0x7, [0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffff8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}, 0x45c) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0x10, 0xfc}, 0x20) executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000406d0422c200000000000109022400010000"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220b000000ceba"], 0x0}, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'macvlan1\x00', 0x400}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) close(r1) executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = gettid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x63b3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000003918110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0xfdef) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000084000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) executing program 4: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = gettid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x63b3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000003918110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0xfdef) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000084000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) [ 244.919459][ T1167] usb 1-1: new high-speed USB device number 77 using dummy_hcd executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x48, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8}]}]}]}, 0x48}}, 0x0) executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x43, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x6}]}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x8, {0x8, 0xa, "47f882f4d105"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 245.279496][ T1167] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.289486][ T1167] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 245.298238][ T1167] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 245.307073][ T1167] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.315360][ T1167] usb 1-1: config 0 descriptor?? [ 245.439598][ T337] usb 3-1: new high-speed USB device number 80 using dummy_hcd executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff7fd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0xb2) dup2(0xffffffffffffffff, r3) executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ext4_sync_file_exit\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='ext4_sync_file_exit\x00', r4}, 0x10) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = gettid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x63b3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000003918110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0xfdef) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000084000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000040)) [ 245.526422][ T1167] usb 4-1: USB disconnect, device number 68 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="af00000000000000eaffffffffffffff9500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000e000010100002800400040008000200000000000c00018008000100", @ANYRES32], 0x30}}, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x400145042, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r4, 0x8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000001140)=""/4086, &(0x7f0000000180)=0xff6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000100)={'syz1\x00', {}, 0x7, [0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffff8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}, 0x45c) executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000003a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x20) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0x10, 0xfc}, 0x20) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'macvlan1\x00', 0x400}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) close(r1) executing program 3: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = gettid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x63b3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000003918110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0xfdef) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000084000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) executing program 4: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = gettid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x63b3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000003918110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0xfdef) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000084000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) [ 245.799535][ T337] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.810251][ T337] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.819807][ T337] usb 3-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 245.828628][ T337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.836993][ T337] usb 3-1: config 0 descriptor?? [ 246.300591][ T28] audit: type=1326 audit(1716396172.626:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f8c17e7a667 code=0x0 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x0, 0x9, 0x1}, 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b40)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="060005"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) [ 246.360516][ T337] wacom 0003:056A:0043.0058: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 246.370074][ T337] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0043.0058/input/input161 [ 246.383004][ T337] wacom 0003:056A:0043.0058: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.2-1/input0 executing program 3: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x6bd, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0x2c, 0x3e, 0x56, 0x10, 0x403, 0xfc0c, 0x680a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6ab, 0x2, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0xb0, 0x7, 0xb, 0xee, 0xeb, 0x6, 0x3f, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1}, @as_header={0x7, 0x24, 0x1, 0x77, 0x0, 0x1001}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x4, 0x3, 0x6, "6650355d5981"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1f, "", 'Fn'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0x5, 0x1, "6642d4"}]}, @uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x1, 0x0, 0x0, "c22dfc71f9321778"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1, 0x0, 0x5, "9fd90b"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4a, 0x2, 0x1, 0x7f, "5712"}]}], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x1, 0xb5, 0x1, [@generic={0xe3, 0x1, "fbe3905347bd21fb3086a714d214129ad1cc38aadd1a455ffe29358cc11a52727290d4360b3de8678a9c5be1dd7b382f70b5d42dea722e4ccc729c5c206f5a124e9bc21839c21f4b5cfa8ebb1b2653fa1b1194d2b0b4cc3405dfdeeafe83516237319ba05c78fdf9ea9c701ea994050bc516cb23cc0b6b1e4dc5c18f21d1ecd0be8777ac07b5ad123a7e2c02a1bf2a69d86f4a2d7db8e70c44858bb0677dc7d55d769047676f67f930c8036641e1796f4d8e021ccc6f46cbf43e9806427a961172668c2eb400c6e4cd502825047d91b8fdf180a773a5828faa47e88b1a1998f5d8"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x1, 0x5, 0x0, [@generic={0x5c, 0x24, "d6eb75f38a1f4108c23d9cfafcd0d3730c8e2a22fc37858584e423c8a47e05b5a9e7383105bf1e1c4ee593ea651b612c3c242c3331d24e24e0a4d250f5de2e563246b53454d340f666e363b4a3ce1369b74c493ec726d82b728c"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x2, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x43, 0x6}]}}, {{0x9, 0x5, 0x9, 0x8, 0xc51b29c1bd4bee16, 0x4, 0x4, 0x47, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1d, 0x7ff}]}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x2, 0xc8}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x0, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0xc400}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x5, 0x1, 0xfe}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x4, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x81, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x100}, @generic={0xa7, 0x7, "00460d7e0a84d19f9a9dccb877f29496e55ccbf78281e0305ccd99793e1c064e606286e82ec5922b4b7aad0a387811c65ed15ce4a2834b00de91ae48f505682f7418261baccb186e1b328825671124f3b9a1f897a4f7dca94e0e5fd53d38ffee0c623d9cea619f14b0bda4da588fa133a13e616e13b7803693e188b41f089766adcbce9ad7bc1363432b11cc399a68ee8afc89dce49580e7a8ca7474f10b6db7aaecc73f6a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x81, 0x9, 0x92, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x6, 0x3, 0x1, [@generic={0x11, 0x8, "5857d316d88cefc48a04724882f6d9"}, @generic={0x37, 0x0, "5e2752f41f9c7cb5e90d4e89c9f1c197c801284239a8be78a364b46625b38cdb7d67c0906b5b4c05eba2fa9135ce6e312316936cb4"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0xa, 0xe, 0x1, 0x0, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x9, 0x9, 0x6}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x5, 0x4, 0xb5}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3f, 0xbd, 0x1, [@generic={0xcc, 0x35, "334cc78da2570b385a26078db10c4ab7e17dc9339f01d9b3764a3603fbf92ea2cb104a444dccd4ca3bf96d63be074e5cf3d44aa4f3f89f24778b1b79b52a8506a6a25601e86a6044049c367c0d879939b876c16bee954aac4a1f9e2b08ef37fd8b1e65d5a98bb7f6d8d0acd09aa37e1a3308ead30d9e28f8ca83a4e739fa931e8e87560da183fc30eb47d87ee28f30343aa40cbff4c7d753b827d92a1f3751133b42e65d8ab068fc448e198292141fd798bcbb87e04507d5167301dd87aed3834c82117a5d3231adde2c"}, @generic={0xcb, 0x24, "57d95e064d6c8da99b21715aff4fdff831ee9b50f3cd822dff34cef34ae70c417268e0ffca632f72630a6936df0489602a44ff3d5d6c15c187746e3a5841a8db163c01946379f00512cecc1ba4c741956dc5e4be6aeddd630792900eb75f8aed17ed03cafd392e483e02f81cdff80355244ff4bbbd2e0202ee86dcf5a0d0132e815fb478007c4d0ba48235afa9b0267cfe1d6f1418d457947ce5b5edba3ddd9573852933830f4dabe6845c8967081fa6516ccae675b6c343259445604d883e2b040bf6afd285f9dc08"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x80, 0x1, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x5}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x1, 0x240, 0x5, 0x2, 0xa6, [@generic={0x80, 0x2c, "6e3300b2d4da826b7ce6ec3b8b566528100cf6aeb1c3e725f6e465f06b19f6b0d093c2d26a179d24e942fcf737882812f8e1f5b9ee95444a9cb7d31cdbbb24b7c0b15ba35498568f80678b2defb09d1e49c78e1f8d9878dee38f864e28dac051fdfdbf08bb0fa58cabe65bdd694a45646a0aec42debcdabecb67f32a942c"}, @generic={0x75, 0x22, "15f7e01d70e9304e521aad05c65d1696bca3df848300e46c3977ff2283cadde397ee24c3db9476bbbc022b03f10cd7d768ec7ff32b48929b0da2812972da0110facf51f2fb62c44f32a76cfe293bbb5dffddff06a539a1eb025a468212b12f2b6c85ef3222e4cc6cb8087123fb3c4dc36514e6"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0x0, 0x6, 0x4, [@generic={0x83, 0xa, "f1b61bde8e23aee691da6fddf1a662d4faf57b33c234367581d403eecb5c217b88667064f6b64062037ea2de5fae3317bdb91a39a260b52364723448a8219bb4955c8837a5f2271f2887964319736516de8b4f372b0746bd07c16ca3e9b001b93f0121980def306598d05f9b7b22acf4e16576d441e3c7b38ec5a19143ece84dbe"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x1, 0x38, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x1a, 0x58, 0x1f}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x0, 0x3f}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x201, 0x5, 0x5, 0x6, 0x40, 0x4}, 0xc, &(0x7f0000000e80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x1}]}, 0x1, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x1809}}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000f40)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000013c0)={&(0x7f0000001140)={0x258, 0x20, 0x400, 0x70bd29, 0x25dfdbfe, {0x1d}, [@generic="9f8bbef02fef0636bc0bca3fe397deea7e98e2ef45e28a785572016d7157d43f6ffe44c2b8bcf54865bd23bb8bf4184cf4aa7c8f553a9be09c64375e343dc61eff2a033b71e5d301ecc43412ec504af88c8da9e415dde95411a585ca2964b6748e78deb0bc", @typed={0x8, 0x2d, 0x0, 0x0, @fd}, @typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@empty}, @nested={0x160, 0xf4, 0x0, 0x1, [@typed={0x8, 0xfb, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x4, 0x83}, @generic="fdd6c776e1c72f6e6448c1e798db09c55bc6d84b72262a6bd84f3c456da8d7e52d677fde1cd52ce143cb371cc32a0f9a36d143107fdab7d9c9b9c065bd3c032dae6508b65d3586ab0d4945e8388973811d4af2ac5b84da383465a88e576cf7658c8fd3d9b85ceef613e4336b6e2e0858205e3ca10fa1344747c6c8cd926924b877db08ae772c8f19dc3c3ae7bbe3a31968af581f77b1724189fd391cfe6735d266baa8e001ea42c4e3052958dc2e1257611f4fc47eb4f087c0394cdd3f076fc78c8fb6f310a107d75f3c11bb506ece1ecd7510b1d0a53eeedbffb40c48f65cb1c47aa3dcd4279b900a599951d6c9a87959e9493a", @generic="f6cf8b03aaee437855a513f218b5bc8ee0659b72294dc1c7eacaf6dccf23a7029cf679426e059fcdb72e12bf5c4214ba", @typed={0x5, 0x56, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@empty}, @typed={0xc, 0xca, 0x0, 0x0, @u64=0x8}]}, @generic="9063408c9cc09dbe86e35cb3003e3280104de5550ed71de0af3d98364d9a9e7079bbd83c2b3fc25bcf3a0d644dc7c55d63f53fd225514c79e147df1e1667c69fa71c9650994705279f7a8103e7483a0ebc94fdbadf6f3a896fbf0911d5b9eca3baa7370c48c24d1367232ba455cacc"]}, 0x258}, 0x1, 0x0, 0x0, 0x4000}, 0x40c4) executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x43, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x6}]}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000200)='memory.stat\x00', 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x8, {0x8, 0xa, "47f882f4d105"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 246.709451][ T1168] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 246.739425][ T337] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 246.759484][ T19] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 246.979432][ T337] usb 4-1: Using ep0 maxpacket: 16 [ 247.099545][ T337] usb 4-1: config 0 has an invalid interface number: 176 but max is 1 [ 247.107691][ T337] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 247.116194][ T337] usb 4-1: config 0 has no interface number 1 [ 247.119530][ T1168] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.122174][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.134192][ T1168] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.144763][ T337] usb 4-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 247.154397][ T1168] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 247.164783][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.173677][ T1168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.183163][ T337] usb 4-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 247.191639][ T1168] usb 2-1: config 0 descriptor?? [ 247.201549][ T19] usb 5-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 247.215108][ T337] usb 4-1: config 0 interface 176 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0 [ 247.224744][ T337] usb 4-1: config 0 interface 176 altsetting 7 endpoint 0x9 has invalid maxpacket 60950, setting to 64 [ 247.235591][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.243577][ T337] usb 4-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 247.254144][ T19] usb 5-1: config 0 descriptor?? [ 247.258959][ T337] usb 4-1: config 0 interface 176 altsetting 7 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 247.269694][ T337] usb 4-1: config 0 interface 176 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 247.280462][ T337] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 247.291093][ T337] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 247.301422][ T337] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 247.311759][ T337] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 247.321208][ T337] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 247.331554][ T337] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 247.341867][ T337] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 247.352187][ T337] usb 4-1: config 0 interface 176 has no altsetting 0 [ 247.509550][ T337] usb 4-1: New USB device found, idVendor=0403, idProduct=fc0c, bcdDevice=68.0a [ 247.518472][ T337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.526270][ T337] usb 4-1: Product: syz [ 247.530241][ T337] usb 4-1: Manufacturer: syz [ 247.534624][ T337] usb 4-1: SerialNumber: syz [ 247.539611][ T337] usb 4-1: config 0 descriptor?? executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff7fd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0xb2) dup2(0xffffffffffffffff, r3) executing program 0: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = gettid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x63b3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000003918110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0xfdef) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000084000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) [ 247.650203][ T6] usb 1-1: USB disconnect, device number 77 [ 247.710518][ T28] audit: type=1326 audit(1716396174.036:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f155c87cee9 code=0x0 [ 247.819633][ T337] ftdi_sio 4-1:0.176: FTDI USB Serial Device converter detected [ 247.827352][ T337] ftdi_sio ttyUSB0: unknown device type: 0x680a [ 247.834445][ T19] wacom 0003:056A:0043.005A: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 247.844889][ T337] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 247.852664][ T19] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0043.005A/input/input164 [ 247.865012][ T337] ftdi_sio ttyUSB1: unknown device type: 0x680a [ 247.872192][ T337] usb 4-1: USB disconnect, device number 69 [ 247.878527][ T337] ftdi_sio 4-1:0.176: device disconnected [ 247.884907][ T19] wacom 0003:056A:0043.005A: hidraw1: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.4-1/input0 [ 247.896437][ T337] ftdi_sio 4-1:0.0: device disconnected [ 247.929486][ T1168] usb 2-1: string descriptor 0 read error: -71 [ 247.949475][ T1168] uclogic 0003:256C:006D.0059: failed retrieving string descriptor #200: -71 [ 247.958190][ T1168] uclogic 0003:256C:006D.0059: failed retrieving pen parameters: -71 [ 247.966182][ T1168] uclogic 0003:256C:006D.0059: failed probing pen v2 parameters: -71 [ 247.974147][ T1168] uclogic 0003:256C:006D.0059: failed probing parameters: -71 [ 247.981429][ T1168] uclogic: probe of 0003:256C:006D.0059 failed with error -71 [ 247.989653][ T1168] usb 2-1: USB disconnect, device number 75 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000040)) executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@user_xattr}, {@nobarrier}, {@sysvgroups}, {@norecovery}, {@errors_continue}, {@nomblk_io_submit}, {@quota}, {@noauto_da_alloc}, {@lazytime}]}, 0x3, 0x56a, &(0x7f0000000ec0)="$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") socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x48, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8}]}]}]}, 0x48}}, 0x0) executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="af00000000000000eaffffffffffffff9500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000e000010100002800400040008000200000000000c00018008000100", @ANYRES32], 0x30}}, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x400145042, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r4, 0x8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000001140)=""/4086, &(0x7f0000000180)=0xff6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000100)={'syz1\x00', {}, 0x7, [0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffff8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}, 0x45c) [ 248.174545][ T337] usb 3-1: USB disconnect, device number 80 [ 248.193839][ T5898] loop2: detected capacity change from 0 to 1024 [ 248.200676][ T5898] EXT4-fs: Ignoring removed nomblk_io_submit option [ 248.210788][ T5898] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000003a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x20) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0x10, 0xfc}, 0x20) executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ext4_sync_file_exit\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='ext4_sync_file_exit\x00', r4}, 0x10) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x48, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8}]}]}]}, 0x48}}, 0x0) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r4}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='#@/#}+\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) close(r1) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff7fd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r3, 0xffffffffffffffff) [ 248.226160][ T5767] EXT4-fs (loop2): unmounting filesystem. executing program 3: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001f00)={0x84, &(0x7f0000001ac0)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x3, 0x95b, &(0x7f0000000a80)={{0x12, 0x1, 0x110, 0x6, 0x4f, 0x96, 0x10, 0x50d, 0x905c, 0x6061, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x949, 0x3, 0x1, 0x1, 0x90, 0x3f, [{{0x9, 0x4, 0xa1, 0xff, 0x9, 0x8d, 0x16, 0x6c, 0x1, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "f772a8"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1000, 0x81}, {0x6, 0x24, 0x1a, 0x2, 0x33}, [@mdlm_detail={0x4f, 0x24, 0x13, 0x2, "33ee2b68234667107c1eb5e5385b9ed5e96e141bbe53b0ca53391c337170c30444783b2f6312e5a8d405aa2b377a768dd7bcebfa09f9608f572ec3ef03f4f3522d1cb4220e73fedd8f86f4"}]}], [{{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x40, 0xc0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x24, 0x7fff}]}}, {{0x9, 0x5, 0xb, 0xf, 0x38, 0x3f, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x51b80207d6834e75, 0x2, 0x101}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x3ff}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x4, 0x9, 0x1, [@generic={0x74, 0x24, "161f81a67a877f399d362658efedf01763c5400978342735d9a721140a8570d6d16ab90cb20096c0aab8d6d8f1906e2312d25fb3d6f71e15530420d48ae3c44a6006f0b3b8ee00cea6cb7d7acbd92e01b1a6b8e45607ce714b26122ead8ce6d6835386252d1988f79d80ea4539c398ad90c0"}, @generic={0xbb, 0x23, "1c24854133c2a3beed1b5d5e3cace461a7e8e6535262aa6bdc0f6f2f36efffab3a2769c30e07445820c10311b573de8758adf88cf96a9d8082388052c5d700ec84c4a34bd0847f27dd7526b1aad3c88320cfcc3b5c19defcbbe9ec36a5de2c9c1ceeeaf036b88f05021ecedac573adae123a7b7fa7468b9c675f65d16a146bbb2665608d48307b52613767407eb189c55100335c8b530a8599c18b2f6ec3b11edbf4f2c2a4b31b0889260f8c54977e6825ba501c27f49f2838"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x2a, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x13, 0x8001}]}}, {{0x9, 0x5, 0x80, 0x1, 0x8, 0x8, 0x5, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x92, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x9a6a}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x7f, 0x1, 0x0, [@generic={0xc5, 0x2, "0397247edfdea9cf01b2654ad059c40169e99a720bef539a059a16acc35dc09186367286b4aa04260559cdb9b298aaf35d6421001a3c1d32604fc20a33afdc69117a757b83d7f86dbd0885b48aa7f450970ff82148ac8d30b0cfaa256abad4500616b1cc24653f47641c6a13e07d84526bbff5ee93317aa19368127bac185d617a5653b1b428d5c7fea1c5b01898b13edc1608dbfa4c0fbe0f1b35367610762c8fb011d05ab1c2c3437d485963fabbc781fe4ac5802cc87f6bdb44b4042dfc488b961d"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x1, 0xff, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x8, 0xf4}, @generic={0xe5, 0x23, "b4ab3a5cdc152c5bf0d9141f208b9d3ed33d6362d4d162408692b55505c7f43b36d47198208a72b62a7a04c8a91ef11b7d819597ebe5643c02b21e91533857321be273b029f80106c1e2d6ac1f478a5a8d5290c325494406f8c73af8649e938763de3dceb4d74de4c87c1aa00662b570bcf21fe0db247ad27879c3e4c3b09f7ce5e4b73d29095a4f58e00221b142f7ff7994c9bad5043b7a79d6fb5a2d19ba9e3272ca0c84cc8c182803b0d1c0e8517e999c3c1c05a84fc2d67d1460a43cf88c33f6156651918fdb12c8fd96275cd7270a27ac957b673a1820a1ce4900408ec18f5233"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0xe1, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x65}]}}, {{0x9, 0x5, 0xc, 0x0, 0x100, 0x3, 0x2, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x4}]}}]}}, {{0x9, 0x4, 0x9b, 0x2b, 0x7, 0x12, 0xcb, 0x8, 0x0, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1f, 0x1, 0xab, 0xe2, 'B)'}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x80, 0x2, 0x1, 0x0, "0f"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x200, 0x6, 0x1, "cd791a48d8d35b"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x8, 0xff}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x2, 0x0, 0x8, "3090", "4294fa"}]}], [{{0x9, 0x5, 0x80, 0x1, 0x10, 0x5, 0x1f, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}, @generic={0x32, 0x6, "4e83272c560aa1881076203e42739e44e85d2a8e59775ac0233617b56f499ba3fd939833891741f224c8f3cb28dd3ff4"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x0, 0x0, 0x57, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3}, @generic={0xf8, 0x23, "76f11b8396bf4f3fe53ef697da1577cbcdd131170f26caf4a8642ce3f371d23f4a075959654e0cb53f8025f94e35887b5fd5fb222f421ea33f258d2c97369a7ab142966379d9beac9b5f19ef808f1163fc8607ce1f5c2f12029f6196dcde14ae351be97ec7e25208d3eeca533f530482aa09e6db7970adb5b80ab3ca78ed09e8363ad3ebaaf53598ed704fcbaeb57500abdcb2dfa92ad4933e1515086f7b8ff76e56aea9f4533a9b2502511a726430d667a3c8fa9f0be116d2057272c3976405642743a6696f20fb873917714fd8ef150498a082cb662856504f1e7fcbf056112f4e593f1049c2be481e48ac104c2dd745aec96cd1a7"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0x3f, 0x7, 0xf0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xdf, 0x8000}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x1, 0x86, 0x0, [@generic={0x2b, 0x22, "5fbcd2785c72e3a9701a225b26b8d41943f2c645dc3c79d99275ace1b59340c45c89276f64a7d4358d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfa, 0x3}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x7f, 0x6d, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x7fff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x7, 0x1b, 0x8, [@generic={0xbc, 0x21, "217576adcef1ef05b7ba06570012ce09b3176e084282a1c9644705709608d699bdd2555c5580535069b2a9c423024bcc4a4f60cc4b5d87886619244dca3a4c6505cd36347f5deac21ff529a8e74427c2573d668a6c5337b4a76de40687bc17367c57f8b2edb1130c13022ab17add8956d61b425a6d6380113a684fa805c50236c80e1af00bb6b0b56f067b2d6794f2d46b6c28206cc59ae18b7f044dbc38d7ac9091cafada09968537a88e2eb22d72b491a92773966deb69c3c2"}, @generic={0x3c, 0xb, "1e3b3fcacd233d7a3c4fddc50a9deac9b808ecb0aa89aa6d2847cc67fde27a7db4ff6cd3fdae8b50eefb581f8a4bc9c30b2bf1f1a685a1d85670"}]}}, {{0x9, 0x5, 0x3, 0x4, 0xbef, 0x6, 0x1, 0x4, [@generic={0x40, 0x5, "2395cb6f5bc1e6265665ad28678ba3da9260b375670d424af7dc977d3711fa27f35a0e52ae250be82397cb3dfc952c9d4a0953bf24c281aea48e63ed50f8"}, @generic={0x7d, 0x22, "f89baa97d550705f3ccbce25b55836fb178659eda0cce1514d0aa90a4555890aa6d711e55848ca5a42852678e17e92282f8647d94362893c9cd647765222826f5ada192d77b1aadccf0d71e5f47b068b24101c24accc829a4f4204acb68951eb361774943dcf00f1d30a9180c6a2abb38599402a90833b0b6ac351"}]}}]}}, {{0x9, 0x4, 0xa1, 0x0, 0x3, 0x68, 0xd3, 0x9d, 0x3f, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, '|\f'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x8, 0x4}, [@obex={0x5, 0x24, 0x15, 0x4}]}], [{{0x9, 0x5, 0xe, 0x10, 0x400, 0x10, 0x9, 0x40, [@generic={0x17, 0x6, "6ed29930c45f66505faf35fb304fc33e7b6c89322e"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x20, 0x40}]}}, {{0x9, 0x5, 0x9, 0x10, 0x220, 0x7f, 0x5, 0x8, [@generic={0x8c, 0x21, "2f9320c3560bddde1b8dc7284404a51ca28965d650f1de853fcecfdc73507eb45b59aa3f86905771252a9e5cf0dc20730fa5f5e4147be737660639e51a607c6cfc5e8f17ed6ddf83ae2ddbb6a2887998fbf30940a55a05ac53b0ef01a54c4fd1d49a4a39dd360991660c364124a822f19ad6b2aa7f2966ff8501bbcc1745b2494bb6f9a3dc1e0c2c0962"}, @generic={0xd, 0x4, "e26fd2f911c2f06e5b01fd"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ef, 0x2f, 0x6, 0x30, [@generic={0xb1, 0x21, "83fceea2dcf12551b675c3d5c4738b8b00211aa17bdf128afa60d1e2eec381780af4bd0bcff32825b8283ef806a554bd49cb46ede8f73687bf823ec06825867d1266cc308016ddb82bac7aa3a91c1822f4c58e0ef8dbc74ce685f47f41728fc77b7db01871f0546aa3db31282cc19689db27bf01d5cc45a10d6b6d688704485786f0c46bc1c2856835effe5238cc79881d3cc8015a168e1c38c6ed33480fdced8cd7edc3a2f35709a514f664814311"}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x2, 0x1f, 0x9, 0x8, 0x31}, 0x36, &(0x7f0000000140)={0x5, 0xf, 0x36, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xef, 0xff, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x5b, 0xff, 0x4, 0x1, 0x31}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x3, 0x8, 0xff}, @wireless={0xb, 0x10, 0x1, 0x4, 0x9, 0x7a, 0x4, 0x8, 0x1f}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x4, 0x4, 0x6}]}, 0x3, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc0a}}, {0x5f, &(0x7f00000003c0)=@string={0x5f, 0x3, "9790366b6889abe16ddae2700a9cbc61867652a2d3b41805eeb66b8b88eec662b48f9d9ad46177d6c0f5c6b561e910f822e6c20ebf7751352d1f12141fe086f2ed4892bc40db9d00ac0a85de0631c74a5483dcd4b033981308084357d7"}}]}) syz_usb_control_io(r1, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x40, 0xa, 0x52, {0x52, 0x23, "c40bc0a8ee30ebab8fc5db7795e8552553ec71597fc08392f5921ddd11d52800f007557901c9ef565920ba108a62fbc84d170fdea90fbe57cfd8b8efb33fbf0999ceabb68f7a873dae2927c1c7957330"}}, &(0x7f0000000500)={0x0, 0x3, 0x31, @string={0x31, 0x3, "d673fe25ad561efd51270efb7b7e912e3a53691bb0548355443806d7080026b1a43b3d712eeefd8ce29e770c0df639"}}, &(0x7f0000000540)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x9, 0x1f, "92736641", "98292035"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0xf9, 0x46, 0x81, 0x9, 0x8000}}}, &(0x7f0000001500)={0x84, &(0x7f00000006c0)={0x20, 0x7, 0x8e, "379097013ff63d83ec8707fca112f572d329220f1f2ae67c3c341e172435bfaa13f1606914578bba9089e2e578d90d0702af2c14d3cd8f761625558a2a82818f0991af9f20ce108aee78d24e3274026ed204a375072797212b4757c4473b249907afd34ba25b7c4a38ce4d7485d894215bf648ab1ab1ccae4b1cea1ff565861726f3ae98b0fe8e12344e7975931b"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0xc0, 0x1}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x1f}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000900)={0x40, 0xb, 0x2, "8864"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x5933}, &(0x7f0000000980)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000a00)={0x40, 0x19, 0x2, ' _'}, &(0x7f0000001400)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000001440)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000001480)={0x40, 0x1e, 0x1}, &(0x7f00000014c0)={0x40, 0x21, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000a40)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="0000010000008fcae376b24ea0d3de61806eb703e545979db35afce69016172fc7c73d41a67bd66fc41ddd0c4c368c951633f3206fe3e70a9cf50f8c797e381aae172c9c0799726fca9bf79c296a823641c44529006bd962da88cb7b91768d9ccf339820568199da1863752f19295cc01bd13b5b132c11"], 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000406d0422c200000000000109022400010000"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220b000000ceba"], 0x0}, 0x0) executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x43, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x6}]}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x8, {0x8, 0xa, "47f882f4d105"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff7fd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r2, r3) executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000040)) executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@user_xattr}, {@nobarrier}, {@sysvgroups}, {@norecovery}, {@errors_continue}, {@nomblk_io_submit}, {@quota}, {@noauto_da_alloc}, {@lazytime}]}, 0x3, 0x56a, &(0x7f0000000ec0)="$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") socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x48, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8}]}]}]}, 0x48}}, 0x0) executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="af00000000000000eaffffffffffffff9500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000e000010100002800400040008000200000000000c00018008000100", @ANYRES32], 0x30}}, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x400145042, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r4, 0x8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000001140)=""/4086, &(0x7f0000000180)=0xff6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000100)={'syz1\x00', {}, 0x7, [0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffff8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}, 0x45c) executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000003a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x20) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0x10, 0xfc}, 0x20) [ 248.528952][ T5925] loop0: detected capacity change from 0 to 1024 [ 248.535558][ T5925] EXT4-fs: Ignoring removed nomblk_io_submit option [ 248.551087][ T5925] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 248.565309][ T5129] EXT4-fs (loop0): unmounting filesystem. executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ext4_sync_file_exit\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='ext4_sync_file_exit\x00', r4}, 0x10) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x48, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8}]}]}]}, 0x48}}, 0x0) executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x6bd, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0x2c, 0x3e, 0x56, 0x10, 0x403, 0xfc0c, 0x680a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6ab, 0x2, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0xb0, 0x7, 0xb, 0xee, 0xeb, 0x6, 0x3f, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1}, @as_header={0x7, 0x24, 0x1, 0x77, 0x0, 0x1001}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x4, 0x3, 0x6, "6650355d5981"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1f, "", 'Fn'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0x5, 0x1, "6642d4"}]}, @uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x1, 0x0, 0x0, "c22dfc71f9321778"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1, 0x0, 0x5, "9fd90b"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4a, 0x2, 0x1, 0x7f, "5712"}]}], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x1, 0xb5, 0x1, [@generic={0xe3, 0x1, "fbe3905347bd21fb3086a714d214129ad1cc38aadd1a455ffe29358cc11a52727290d4360b3de8678a9c5be1dd7b382f70b5d42dea722e4ccc729c5c206f5a124e9bc21839c21f4b5cfa8ebb1b2653fa1b1194d2b0b4cc3405dfdeeafe83516237319ba05c78fdf9ea9c701ea994050bc516cb23cc0b6b1e4dc5c18f21d1ecd0be8777ac07b5ad123a7e2c02a1bf2a69d86f4a2d7db8e70c44858bb0677dc7d55d769047676f67f930c8036641e1796f4d8e021ccc6f46cbf43e9806427a961172668c2eb400c6e4cd502825047d91b8fdf180a773a5828faa47e88b1a1998f5d8"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x1, 0x5, 0x0, [@generic={0x5c, 0x24, "d6eb75f38a1f4108c23d9cfafcd0d3730c8e2a22fc37858584e423c8a47e05b5a9e7383105bf1e1c4ee593ea651b612c3c242c3331d24e24e0a4d250f5de2e563246b53454d340f666e363b4a3ce1369b74c493ec726d82b728c"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x2, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x43, 0x6}]}}, {{0x9, 0x5, 0x9, 0x8, 0xc51b29c1bd4bee16, 0x4, 0x4, 0x47, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1d, 0x7ff}]}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x2, 0xc8}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x0, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0xc400}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x5, 0x1, 0xfe}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x4, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x81, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x100}, @generic={0xa7, 0x7, "00460d7e0a84d19f9a9dccb877f29496e55ccbf78281e0305ccd99793e1c064e606286e82ec5922b4b7aad0a387811c65ed15ce4a2834b00de91ae48f505682f7418261baccb186e1b328825671124f3b9a1f897a4f7dca94e0e5fd53d38ffee0c623d9cea619f14b0bda4da588fa133a13e616e13b7803693e188b41f089766adcbce9ad7bc1363432b11cc399a68ee8afc89dce49580e7a8ca7474f10b6db7aaecc73f6a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x81, 0x9, 0x92, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x6, 0x3, 0x1, [@generic={0x11, 0x8, "5857d316d88cefc48a04724882f6d9"}, @generic={0x37, 0x0, "5e2752f41f9c7cb5e90d4e89c9f1c197c801284239a8be78a364b46625b38cdb7d67c0906b5b4c05eba2fa9135ce6e312316936cb4"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0xa, 0xe, 0x1, 0x0, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x9, 0x9, 0x6}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x5, 0x4, 0xb5}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3f, 0xbd, 0x1, [@generic={0xcc, 0x35, "334cc78da2570b385a26078db10c4ab7e17dc9339f01d9b3764a3603fbf92ea2cb104a444dccd4ca3bf96d63be074e5cf3d44aa4f3f89f24778b1b79b52a8506a6a25601e86a6044049c367c0d879939b876c16bee954aac4a1f9e2b08ef37fd8b1e65d5a98bb7f6d8d0acd09aa37e1a3308ead30d9e28f8ca83a4e739fa931e8e87560da183fc30eb47d87ee28f30343aa40cbff4c7d753b827d92a1f3751133b42e65d8ab068fc448e198292141fd798bcbb87e04507d5167301dd87aed3834c82117a5d3231adde2c"}, @generic={0xcb, 0x24, "57d95e064d6c8da99b21715aff4fdff831ee9b50f3cd822dff34cef34ae70c417268e0ffca632f72630a6936df0489602a44ff3d5d6c15c187746e3a5841a8db163c01946379f00512cecc1ba4c741956dc5e4be6aeddd630792900eb75f8aed17ed03cafd392e483e02f81cdff80355244ff4bbbd2e0202ee86dcf5a0d0132e815fb478007c4d0ba48235afa9b0267cfe1d6f1418d457947ce5b5edba3ddd9573852933830f4dabe6845c8967081fa6516ccae675b6c343259445604d883e2b040bf6afd285f9dc08"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x80, 0x1, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x5}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x1, 0x240, 0x5, 0x2, 0xa6, [@generic={0x80, 0x2c, "6e3300b2d4da826b7ce6ec3b8b566528100cf6aeb1c3e725f6e465f06b19f6b0d093c2d26a179d24e942fcf737882812f8e1f5b9ee95444a9cb7d31cdbbb24b7c0b15ba35498568f80678b2defb09d1e49c78e1f8d9878dee38f864e28dac051fdfdbf08bb0fa58cabe65bdd694a45646a0aec42debcdabecb67f32a942c"}, @generic={0x75, 0x22, "15f7e01d70e9304e521aad05c65d1696bca3df848300e46c3977ff2283cadde397ee24c3db9476bbbc022b03f10cd7d768ec7ff32b48929b0da2812972da0110facf51f2fb62c44f32a76cfe293bbb5dffddff06a539a1eb025a468212b12f2b6c85ef3222e4cc6cb8087123fb3c4dc36514e6"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0x0, 0x6, 0x4, [@generic={0x83, 0xa, "f1b61bde8e23aee691da6fddf1a662d4faf57b33c234367581d403eecb5c217b88667064f6b64062037ea2de5fae3317bdb91a39a260b52364723448a8219bb4955c8837a5f2271f2887964319736516de8b4f372b0746bd07c16ca3e9b001b93f0121980def306598d05f9b7b22acf4e16576d441e3c7b38ec5a19143ece84dbe"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x1, 0x38, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x1a, 0x58, 0x1f}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x0, 0x3f}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x201, 0x5, 0x5, 0x6, 0x40, 0x4}, 0xc, &(0x7f0000000e80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x1}]}, 0x1, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x1809}}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000f40)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000013c0)={&(0x7f0000001140)={0x258, 0x20, 0x400, 0x70bd29, 0x25dfdbfe, {0x1d}, [@generic="9f8bbef02fef0636bc0bca3fe397deea7e98e2ef45e28a785572016d7157d43f6ffe44c2b8bcf54865bd23bb8bf4184cf4aa7c8f553a9be09c64375e343dc61eff2a033b71e5d301ecc43412ec504af88c8da9e415dde95411a585ca2964b6748e78deb0bc", @typed={0x8, 0x2d, 0x0, 0x0, @fd}, @typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@empty}, @nested={0x160, 0xf4, 0x0, 0x1, [@typed={0x8, 0xfb, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x4, 0x83}, @generic="fdd6c776e1c72f6e6448c1e798db09c55bc6d84b72262a6bd84f3c456da8d7e52d677fde1cd52ce143cb371cc32a0f9a36d143107fdab7d9c9b9c065bd3c032dae6508b65d3586ab0d4945e8388973811d4af2ac5b84da383465a88e576cf7658c8fd3d9b85ceef613e4336b6e2e0858205e3ca10fa1344747c6c8cd926924b877db08ae772c8f19dc3c3ae7bbe3a31968af581f77b1724189fd391cfe6735d266baa8e001ea42c4e3052958dc2e1257611f4fc47eb4f087c0394cdd3f076fc78c8fb6f310a107d75f3c11bb506ece1ecd7510b1d0a53eeedbffb40c48f65cb1c47aa3dcd4279b900a599951d6c9a87959e9493a", @generic="f6cf8b03aaee437855a513f218b5bc8ee0659b72294dc1c7eacaf6dccf23a7029cf679426e059fcdb72e12bf5c4214ba", @typed={0x5, 0x56, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@empty}, @typed={0xc, 0xca, 0x0, 0x0, @u64=0x8}]}, @generic="9063408c9cc09dbe86e35cb3003e3280104de5550ed71de0af3d98364d9a9e7079bbd83c2b3fc25bcf3a0d644dc7c55d63f53fd225514c79e147df1e1667c69fa71c9650994705279f7a8103e7483a0ebc94fdbadf6f3a896fbf0911d5b9eca3baa7370c48c24d1367232ba455cacc"]}, 0x258}, 0x1, 0x0, 0x0, 0x4000}, 0x40c4) [ 248.579447][ T1168] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 248.679461][ T337] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 248.749457][ T974] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 248.879564][ T19] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 248.959643][ T1168] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 248.969213][ T1168] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 249.039483][ T337] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.049474][ T337] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 249.058188][ T337] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 249.067038][ T337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.075288][ T337] usb 3-1: config 0 descriptor?? [ 249.119532][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 249.129561][ T1168] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 249.138470][ T1168] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.146275][ T1168] usb 4-1: Product: syz [ 249.150293][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.160921][ T1168] usb 4-1: Manufacturer: syz [ 249.165327][ T1168] usb 4-1: SerialNumber: syz [ 249.169766][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.179310][ T974] usb 2-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 249.188380][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.196365][ T1168] usb 4-1: config 0 descriptor?? [ 249.201581][ T974] usb 2-1: config 0 descriptor?? [ 249.219616][ T5915] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 249.226638][ T5915] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 249.239471][ T19] usb 1-1: config 0 has an invalid interface number: 176 but max is 1 [ 249.247547][ T19] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 249.256025][ T19] usb 1-1: config 0 has no interface number 1 [ 249.262026][ T19] usb 1-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 249.272538][ T19] usb 1-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 249.283017][ T19] usb 1-1: config 0 interface 176 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0 [ 249.292655][ T19] usb 1-1: config 0 interface 176 altsetting 7 endpoint 0x9 has invalid maxpacket 60950, setting to 64 [ 249.303512][ T19] usb 1-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 249.313929][ T19] usb 1-1: config 0 interface 176 altsetting 7 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 249.324684][ T19] usb 1-1: config 0 interface 176 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 249.335447][ T19] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 249.345763][ T19] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 249.356107][ T19] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 249.366437][ T19] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 249.375888][ T19] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 249.386213][ T19] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 249.396553][ T19] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 249.406954][ T19] usb 1-1: config 0 interface 176 has no altsetting 0 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff7fd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r3, 0xffffffffffffffff) [ 249.440851][ T5915] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 249.447842][ T5915] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 executing program 4: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = gettid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x63b3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000003918110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0xfdef) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000084000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) [ 249.497696][ T337] usb 5-1: USB disconnect, device number 81 [ 249.569495][ T19] usb 1-1: New USB device found, idVendor=0403, idProduct=fc0c, bcdDevice=68.0a [ 249.578540][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.586371][ T19] usb 1-1: Product: syz [ 249.590370][ T19] usb 1-1: Manufacturer: syz [ 249.594893][ T19] usb 1-1: SerialNumber: syz [ 249.600093][ T19] usb 1-1: config 0 descriptor?? [ 249.655748][ T28] audit: type=1326 audit(1716396175.976:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5918 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff0407cee9 code=0x0 [ 249.770644][ T974] wacom 0003:056A:0043.005B: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 249.780207][ T974] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0043.005B/input/input169 [ 249.793108][ T974] wacom 0003:056A:0043.005B: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.1-1/input0 [ 249.879845][ T19] ftdi_sio 1-1:0.176: FTDI USB Serial Device converter detected [ 249.887518][ T19] ftdi_sio ttyUSB0: unknown device type: 0x680a [ 249.894678][ T19] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 249.899480][ T1168] Error reading MAC address [ 249.902251][ T19] ftdi_sio ttyUSB1: unknown device type: 0x680a [ 249.913950][ T19] usb 1-1: USB disconnect, device number 78 [ 249.920337][ T19] ftdi_sio 1-1:0.176: device disconnected [ 249.926377][ T19] ftdi_sio 1-1:0.0: device disconnected [ 250.108648][ T5915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.117037][ T5915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x0, 0x9, 0x1}, 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b40)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="060005"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r4}, 0x10) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='#@/#}+\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) close(r1) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff7fd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r2, r3) executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000040)) executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="af00000000000000eaffffffffffffff9500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000e000010100002800400040008000200000000000c00018008000100", @ANYRES32], 0x30}}, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x400145042, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r4, 0x8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000001140)=""/4086, &(0x7f0000000180)=0xff6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000100)={'syz1\x00', {}, 0x7, [0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffff8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}, 0x45c) executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@user_xattr}, {@nobarrier}, {@sysvgroups}, {@norecovery}, {@errors_continue}, {@nomblk_io_submit}, {@quota}, {@noauto_da_alloc}, {@lazytime}]}, 0x3, 0x56a, &(0x7f0000000ec0)="$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") socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x48, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8}]}]}]}, 0x48}}, 0x0) executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000003a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0x10, 0xfc}, 0x20) executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ext4_sync_file_exit\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='ext4_sync_file_exit\x00', r4}, 0x10) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'macvlan1\x00', 0x400}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) close(r1) [ 250.445542][ T5956] loop4: detected capacity change from 0 to 1024 [ 250.452286][ T5956] EXT4-fs: Ignoring removed nomblk_io_submit option [ 250.461187][ T5956] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 250.477395][ T309] EXT4-fs (loop4): unmounting filesystem. executing program 4: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x6dd, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0x2c, 0x3e, 0x56, 0x10, 0x403, 0xfc0c, 0x680a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6cb, 0x2, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0xb0, 0x7, 0xb, 0xee, 0xeb, 0x6, 0x3f, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1}, @as_header={0x7, 0x24, 0x1, 0x77, 0x0, 0x1001}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x4, 0x3, 0x6, "6650355d5981"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1f, "", 'Fn'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0x5, 0x1, "6642d4"}]}, @uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x1, 0x0, 0x0, "c22dfc71f9321778"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1, 0x0, 0x5, "9fd90b"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4a, 0x2, 0x1, 0x7f, "5712"}]}], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x1, 0xb5, 0x1, [@generic={0xe3, 0x1, "fbe3905347bd21fb3086a714d214129ad1cc38aadd1a455ffe29358cc11a52727290d4360b3de8678a9c5be1dd7b382f70b5d42dea722e4ccc729c5c206f5a124e9bc21839c21f4b5cfa8ebb1b2653fa1b1194d2b0b4cc3405dfdeeafe83516237319ba05c78fdf9ea9c701ea994050bc516cb23cc0b6b1e4dc5c18f21d1ecd0be8777ac07b5ad123a7e2c02a1bf2a69d86f4a2d7db8e70c44858bb0677dc7d55d769047676f67f930c8036641e1796f4d8e021ccc6f46cbf43e9806427a961172668c2eb400c6e4cd502825047d91b8fdf180a773a5828faa47e88b1a1998f5d8"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x1, 0x5, 0x0, [@generic={0x5c, 0x24, "d6eb75f38a1f4108c23d9cfafcd0d3730c8e2a22fc37858584e423c8a47e05b5a9e7383105bf1e1c4ee593ea651b612c3c242c3331d24e24e0a4d250f5de2e563246b53454d340f666e363b4a3ce1369b74c493ec726d82b728c"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x2, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x43, 0x6}]}}, {{0x9, 0x5, 0x9, 0x8, 0xc51b29c1bd4bee16, 0x4, 0x4, 0x47, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1d, 0x7ff}]}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x2, 0xc8}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x0, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0xc400}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x5, 0x1, 0xfe}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x4, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x81, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x100}, @generic={0xa7, 0x7, "00460d7e0a84d19f9a9dccb877f29496e55ccbf78281e0305ccd99793e1c064e606286e82ec5922b4b7aad0a387811c65ed15ce4a2834b00de91ae48f505682f7418261baccb186e1b328825671124f3b9a1f897a4f7dca94e0e5fd53d38ffee0c623d9cea619f14b0bda4da588fa133a13e616e13b7803693e188b41f089766adcbce9ad7bc1363432b11cc399a68ee8afc89dce49580e7a8ca7474f10b6db7aaecc73f6a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x81, 0x9, 0x92, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x6, 0x3, 0x1, [@generic={0x11, 0x8, "5857d316d88cefc48a04724882f6d9"}, @generic={0x37, 0x0, "5e2752f41f9c7cb5e90d4e89c9f1c197c801284239a8be78a364b46625b38cdb7d67c0906b5b4c05eba2fa9135ce6e312316936cb4"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0xc, 0xe, 0x1, 0x0, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x9, 0x9, 0x6}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x5, 0x4, 0xb5}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3f, 0xbd, 0x1, [@generic={0xcc, 0x35, "334cc78da2570b385a26078db10c4ab7e17dc9339f01d9b3764a3603fbf92ea2cb104a444dccd4ca3bf96d63be074e5cf3d44aa4f3f89f24778b1b79b52a8506a6a25601e86a6044049c367c0d879939b876c16bee954aac4a1f9e2b08ef37fd8b1e65d5a98bb7f6d8d0acd09aa37e1a3308ead30d9e28f8ca83a4e739fa931e8e87560da183fc30eb47d87ee28f30343aa40cbff4c7d753b827d92a1f3751133b42e65d8ab068fc448e198292141fd798bcbb87e04507d5167301dd87aed3834c82117a5d3231adde2c"}, @generic={0xcb, 0x24, "57d95e064d6c8da99b21715aff4fdff831ee9b50f3cd822dff34cef34ae70c417268e0ffca632f72630a6936df0489602a44ff3d5d6c15c187746e3a5841a8db163c01946379f00512cecc1ba4c741956dc5e4be6aeddd630792900eb75f8aed17ed03cafd392e483e02f81cdff80355244ff4bbbd2e0202ee86dcf5a0d0132e815fb478007c4d0ba48235afa9b0267cfe1d6f1418d457947ce5b5edba3ddd9573852933830f4dabe6845c8967081fa6516ccae675b6c343259445604d883e2b040bf6afd285f9dc08"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x80, 0x1, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x5}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x1, 0x240, 0x5, 0x2, 0xa6, [@generic={0x80, 0x2c, "6e3300b2d4da826b7ce6ec3b8b566528100cf6aeb1c3e725f6e465f06b19f6b0d093c2d26a179d24e942fcf737882812f8e1f5b9ee95444a9cb7d31cdbbb24b7c0b15ba35498568f80678b2defb09d1e49c78e1f8d9878dee38f864e28dac051fdfdbf08bb0fa58cabe65bdd694a45646a0aec42debcdabecb67f32a942c"}, @generic={0x75, 0x22, "15f7e01d70e9304e521aad05c65d1696bca3df848300e46c3977ff2283cadde397ee24c3db9476bbbc022b03f10cd7d768ec7ff32b48929b0da2812972da0110facf51f2fb62c44f32a76cfe293bbb5dffddff06a539a1eb025a468212b12f2b6c85ef3222e4cc6cb8087123fb3c4dc36514e6"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0x0, 0x6, 0x4, [@generic={0x83, 0xa, "f1b61bde8e23aee691da6fddf1a662d4faf57b33c234367581d403eecb5c217b88667064f6b64062037ea2de5fae3317bdb91a39a260b52364723448a8219bb4955c8837a5f2271f2887964319736516de8b4f372b0746bd07c16ca3e9b001b93f0121980def306598d05f9b7b22acf4e16576d441e3c7b38ec5a19143ece84dbe"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x1, 0x38, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x1a, 0x58, 0x1f}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x0, 0x3f}}, {{0x9, 0x5, 0xb, 0x8, 0x600, 0x4, 0x60, 0x7f}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x6, 0x7, 0x3a, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5}]}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x201, 0x5, 0x5, 0x6, 0x40, 0x4}, 0xc, &(0x7f0000000e80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x1}]}, 0x1, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x1809}}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000f40)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000013c0)={&(0x7f0000001140)={0x258, 0x20, 0x400, 0x70bd29, 0x25dfdbfe, {0x1d}, [@generic="9f8bbef02fef0636bc0bca3fe397deea7e98e2ef45e28a785572016d7157d43f6ffe44c2b8bcf54865bd23bb8bf4184cf4aa7c8f553a9be09c64375e343dc61eff2a033b71e5d301ecc43412ec504af88c8da9e415dde95411a585ca2964b6748e78deb0bc", @typed={0x8, 0x2d, 0x0, 0x0, @fd}, @typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@empty}, @nested={0x160, 0xf4, 0x0, 0x1, [@typed={0x8, 0xfb, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x4, 0x83}, @generic="fdd6c776e1c72f6e6448c1e798db09c55bc6d84b72262a6bd84f3c456da8d7e52d677fde1cd52ce143cb371cc32a0f9a36d143107fdab7d9c9b9c065bd3c032dae6508b65d3586ab0d4945e8388973811d4af2ac5b84da383465a88e576cf7658c8fd3d9b85ceef613e4336b6e2e0858205e3ca10fa1344747c6c8cd926924b877db08ae772c8f19dc3c3ae7bbe3a31968af581f77b1724189fd391cfe6735d266baa8e001ea42c4e3052958dc2e1257611f4fc47eb4f087c0394cdd3f076fc78c8fb6f310a107d75f3c11bb506ece1ecd7510b1d0a53eeedbffb40c48f65cb1c47aa3dcd4279b900a599951d6c9a87959e9493a", @generic="f6cf8b03aaee437855a513f218b5bc8ee0659b72294dc1c7eacaf6dccf23a7029cf679426e059fcdb72e12bf5c4214ba", @typed={0x5, 0x56, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@empty}, @typed={0xc, 0xca, 0x0, 0x0, @u64=0x8}]}, @generic="9063408c9cc09dbe86e35cb3003e3280104de5550ed71de0af3d98364d9a9e7079bbd83c2b3fc25bcf3a0d644dc7c55d63f53fd225514c79e147df1e1667c69fa71c9650994705279f7a8103e7483a0ebc94fdbadf6f3a896fbf0911d5b9eca3baa7370c48c24d1367232ba455cacc"]}, 0x258}, 0x1, 0x0, 0x0, 0x4000}, 0x40c4) [ 250.629439][ T1168] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 250.819443][ T19] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 251.029517][ T1168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.040531][ T1168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.050131][ T1168] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 251.058906][ T1168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.059431][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 251.067712][ T1168] usb 1-1: config 0 descriptor?? [ 251.189470][ T19] usb 5-1: config 0 has an invalid interface number: 176 but max is 1 [ 251.197535][ T19] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 251.206019][ T19] usb 5-1: config 0 has no interface number 1 [ 251.211891][ T19] usb 5-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 251.222385][ T19] usb 5-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 251.232892][ T19] usb 5-1: config 0 interface 176 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0 [ 251.242526][ T19] usb 5-1: config 0 interface 176 altsetting 7 endpoint 0x9 has invalid maxpacket 60950, setting to 64 [ 251.253383][ T19] usb 5-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 251.263787][ T19] usb 5-1: config 0 interface 176 altsetting 7 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 251.274566][ T19] usb 5-1: config 0 interface 176 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000008c0)={[{@numtail}, {@rodir}, {@fat=@check_strict}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@uni_xlate}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@shortname_winnt}, {@fat=@flush}, {@uni_xlateno}, {@numtail}]}, 0x6, 0x2a6, &(0x7f0000000440)="$eJzs3T9rW1cUAPDzbFlS20EaOpVCH7RDJ2N77SJTbDDV1KKh7dCa2oZiiYINhv6hqqeuXTr2ExQC2fIlsmTIHsgayBYPhhee9F4kO7JsBcvOn99v8fV999x77vXFxoPO+/Hj3v5OGnvHfzyKej2JhVa04iSJZixE6a84o/VPAABvspMsi6fZ0CxxSUTU55cWADBHM//9vzv3lACAOfvm2+++Wm+3N75O03ps9v4+6uT/2edfh8/X9+Ln6MZurEQjTiOyF4btzSzL+pU014zPev2jTh7Z++F+Mf/6k4hB/Go0ojnoOhu/1d5YTYfG4vt5Hu8X67fy+LVoxIcT1t9qb6xNiI9ONT7/dCz/5WjEg5/il+jGziCJUfyfq2n6Zfbvs9+/z9PL45P+Uac2GDeSLd7wjwYAAAAAAAAAAAAAAAAAAAAAgLfYclE7pxaD+j15V1F/Z/E0/2Yp0lLzbH2eYXxSTnSuPlA/i//K+joraZpmxcBRfCU+qkTldnYNAAAAAAAAAAAAAAAAAAAAr5fDX3/b3+52dw+upVFWAyg/1v+q87TGej6J6YNro7UWiuaUmWOxHJNETE0j38Q1Hctljfcuyvn/O7NOWL98zNK087meRnm79reTyWdYi7KnXl6Se+NjqnHFtaoXPcpmun7ViY8aM++9+sGg0Z8yJpJpiX3xeHhyRU9yfhfVwalODF8qGmPh5+7GTPf55d8ViWodAAAAAAAAAAAAAAAAAAAwV6MP/U54eHxB0MOt4Uv+a3NODgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABuyOj9/zM0+kXwFQZX4+DwlrcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAO+B5AAAA///S9mga") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x47) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x821cd0, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x112dd10, 0x0) [ 251.285322][ T19] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 251.295551][ T19] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 251.305879][ T19] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 251.316312][ T19] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 251.316568][ T974] usb 3-1: USB disconnect, device number 81 [ 251.325805][ T19] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 251.325832][ T19] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 251.325855][ T19] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 251.345973][ T5970] loop2: detected capacity change from 0 to 256 [ 251.352273][ T19] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 251.352307][ T19] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping executing program 2: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x6b4, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0x2c, 0x3e, 0x56, 0x10, 0x403, 0xfc0c, 0x680a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a2, 0x2, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0xb0, 0x7, 0xb, 0xee, 0xeb, 0x6, 0x3f, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1}, @as_header={0x7, 0x24, 0x1, 0x77, 0x0, 0x1001}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x4, 0x3, 0x6, "6650355d5981"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1f, "", 'Fn'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0x5, 0x1, "6642d4"}]}, @uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x1, 0x0, 0x0, "c22dfc71f9321778"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1, 0x0, 0x5, "9fd90b"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4a, 0x2, 0x1, 0x7f, "5712"}]}], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x1, 0xb5, 0x1, [@generic={0xe3, 0x1, "fbe3905347bd21fb3086a714d214129ad1cc38aadd1a455ffe29358cc11a52727290d4360b3de8678a9c5be1dd7b382f70b5d42dea722e4ccc729c5c206f5a124e9bc21839c21f4b5cfa8ebb1b2653fa1b1194d2b0b4cc3405dfdeeafe83516237319ba05c78fdf9ea9c701ea994050bc516cb23cc0b6b1e4dc5c18f21d1ecd0be8777ac07b5ad123a7e2c02a1bf2a69d86f4a2d7db8e70c44858bb0677dc7d55d769047676f67f930c8036641e1796f4d8e021ccc6f46cbf43e9806427a961172668c2eb400c6e4cd502825047d91b8fdf180a773a5828faa47e88b1a1998f5d8"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x1, 0x5, 0x0, [@generic={0x5c, 0x24, "d6eb75f38a1f4108c23d9cfafcd0d3730c8e2a22fc37858584e423c8a47e05b5a9e7383105bf1e1c4ee593ea651b612c3c242c3331d24e24e0a4d250f5de2e563246b53454d340f666e363b4a3ce1369b74c493ec726d82b728c"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x2, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x43, 0x6}]}}, {{0x9, 0x5, 0x9, 0x8, 0xc51b29c1bd4bee16, 0x4, 0x4, 0x47, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1d, 0x7ff}]}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x2, 0xc8}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x0, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0xc400}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x5, 0x1, 0xfe}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x4, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x81, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x100}, @generic={0xa7, 0x7, "00460d7e0a84d19f9a9dccb877f29496e55ccbf78281e0305ccd99793e1c064e606286e82ec5922b4b7aad0a387811c65ed15ce4a2834b00de91ae48f505682f7418261baccb186e1b328825671124f3b9a1f897a4f7dca94e0e5fd53d38ffee0c623d9cea619f14b0bda4da588fa133a13e616e13b7803693e188b41f089766adcbce9ad7bc1363432b11cc399a68ee8afc89dce49580e7a8ca7474f10b6db7aaecc73f6a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x81, 0x9, 0x92, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x6, 0x3, 0x1, [@generic={0x11, 0x8, "5857d316d88cefc48a04724882f6d9"}, @generic={0x37, 0x0, "5e2752f41f9c7cb5e90d4e89c9f1c197c801284239a8be78a364b46625b38cdb7d67c0906b5b4c05eba2fa9135ce6e312316936cb4"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x9, 0xe, 0x1, 0x0, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x9, 0x9, 0x6}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x5, 0x4, 0xb5}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3f, 0xbd, 0x1, [@generic={0xcc, 0x35, "334cc78da2570b385a26078db10c4ab7e17dc9339f01d9b3764a3603fbf92ea2cb104a444dccd4ca3bf96d63be074e5cf3d44aa4f3f89f24778b1b79b52a8506a6a25601e86a6044049c367c0d879939b876c16bee954aac4a1f9e2b08ef37fd8b1e65d5a98bb7f6d8d0acd09aa37e1a3308ead30d9e28f8ca83a4e739fa931e8e87560da183fc30eb47d87ee28f30343aa40cbff4c7d753b827d92a1f3751133b42e65d8ab068fc448e198292141fd798bcbb87e04507d5167301dd87aed3834c82117a5d3231adde2c"}, @generic={0xcb, 0x24, "57d95e064d6c8da99b21715aff4fdff831ee9b50f3cd822dff34cef34ae70c417268e0ffca632f72630a6936df0489602a44ff3d5d6c15c187746e3a5841a8db163c01946379f00512cecc1ba4c741956dc5e4be6aeddd630792900eb75f8aed17ed03cafd392e483e02f81cdff80355244ff4bbbd2e0202ee86dcf5a0d0132e815fb478007c4d0ba48235afa9b0267cfe1d6f1418d457947ce5b5edba3ddd9573852933830f4dabe6845c8967081fa6516ccae675b6c343259445604d883e2b040bf6afd285f9dc08"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x80, 0x1, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x5}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x1, 0x240, 0x5, 0x2, 0xa6, [@generic={0x80, 0x2c, "6e3300b2d4da826b7ce6ec3b8b566528100cf6aeb1c3e725f6e465f06b19f6b0d093c2d26a179d24e942fcf737882812f8e1f5b9ee95444a9cb7d31cdbbb24b7c0b15ba35498568f80678b2defb09d1e49c78e1f8d9878dee38f864e28dac051fdfdbf08bb0fa58cabe65bdd694a45646a0aec42debcdabecb67f32a942c"}, @generic={0x75, 0x22, "15f7e01d70e9304e521aad05c65d1696bca3df848300e46c3977ff2283cadde397ee24c3db9476bbbc022b03f10cd7d768ec7ff32b48929b0da2812972da0110facf51f2fb62c44f32a76cfe293bbb5dffddff06a539a1eb025a468212b12f2b6c85ef3222e4cc6cb8087123fb3c4dc36514e6"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0x0, 0x6, 0x4, [@generic={0x83, 0xa, "f1b61bde8e23aee691da6fddf1a662d4faf57b33c234367581d403eecb5c217b88667064f6b64062037ea2de5fae3317bdb91a39a260b52364723448a8219bb4955c8837a5f2271f2887964319736516de8b4f372b0746bd07c16ca3e9b001b93f0121980def306598d05f9b7b22acf4e16576d441e3c7b38ec5a19143ece84dbe"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x1, 0x38, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x1a, 0x58, 0x1f}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x201, 0x5, 0x5, 0x6, 0x40, 0x4}, 0xc, &(0x7f0000000e80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x1}]}, 0x1, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x1809}}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000f40)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000013c0)={&(0x7f0000001140)={0x258, 0x20, 0x400, 0x70bd29, 0x25dfdbfe, {0x1d}, [@generic="9f8bbef02fef0636bc0bca3fe397deea7e98e2ef45e28a785572016d7157d43f6ffe44c2b8bcf54865bd23bb8bf4184cf4aa7c8f553a9be09c64375e343dc61eff2a033b71e5d301ecc43412ec504af88c8da9e415dde95411a585ca2964b6748e78deb0bc", @typed={0x8, 0x2d, 0x0, 0x0, @fd}, @typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@empty}, @nested={0x160, 0xf4, 0x0, 0x1, [@typed={0x8, 0xfb, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x4, 0x83}, @generic="fdd6c776e1c72f6e6448c1e798db09c55bc6d84b72262a6bd84f3c456da8d7e52d677fde1cd52ce143cb371cc32a0f9a36d143107fdab7d9c9b9c065bd3c032dae6508b65d3586ab0d4945e8388973811d4af2ac5b84da383465a88e576cf7658c8fd3d9b85ceef613e4336b6e2e0858205e3ca10fa1344747c6c8cd926924b877db08ae772c8f19dc3c3ae7bbe3a31968af581f77b1724189fd391cfe6735d266baa8e001ea42c4e3052958dc2e1257611f4fc47eb4f087c0394cdd3f076fc78c8fb6f310a107d75f3c11bb506ece1ecd7510b1d0a53eeedbffb40c48f65cb1c47aa3dcd4279b900a599951d6c9a87959e9493a", @generic="f6cf8b03aaee437855a513f218b5bc8ee0659b72294dc1c7eacaf6dccf23a7029cf679426e059fcdb72e12bf5c4214ba", @typed={0x5, 0x56, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@empty}, @typed={0xc, 0xca, 0x0, 0x0, @u64=0x8}]}, @generic="9063408c9cc09dbe86e35cb3003e3280104de5550ed71de0af3d98364d9a9e7079bbd83c2b3fc25bcf3a0d644dc7c55d63f53fd225514c79e147df1e1667c69fa71c9650994705279f7a8103e7483a0ebc94fdbadf6f3a896fbf0911d5b9eca3baa7370c48c24d1367232ba455cacc"]}, 0x258}, 0x1, 0x0, 0x0, 0x4000}, 0x40c4) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r4}, 0x10) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='#@/#}+\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) close(r1) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r4}, 0x10) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='#@/#}+\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) close(r1) [ 251.352326][ T19] usb 5-1: config 0 interface 176 has no altsetting 0 [ 251.400824][ T5767] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 251.408267][ T5767] FAT-fs (loop2): Filesystem has been set read-only [ 251.414990][ T5767] FAT-fs (loop2): error, corrupted directory (invalid entries) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff7fd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r2, r3) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000040)) [ 251.484683][ T337] usb 2-1: USB disconnect, device number 76 [ 251.510339][ T19] usb 5-1: New USB device found, idVendor=0403, idProduct=fc0c, bcdDevice=68.0a [ 251.519243][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="af00000000000000eaffffffffffffff9500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000e000010100002800400040008000200000000000c00018008000100", @ANYRES32], 0x30}}, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x400145042, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r4, 0x8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000001140)=""/4086, &(0x7f0000000180)=0xff6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000100)={'syz1\x00', {}, 0x7, [0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffff8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}, 0x45c) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r4}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='#@/#}+\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) close(r1) [ 251.531139][ T19] usb 5-1: Product: syz [ 251.535320][ T19] usb 5-1: Manufacturer: syz [ 251.539948][ T19] usb 5-1: SerialNumber: syz [ 251.545106][ T19] usb 5-1: config 0 descriptor?? executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000003a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0x10, 0xfc}, 0x20) [ 251.604078][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.611021][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.618275][ T5979] device bridge_slave_0 entered promiscuous mode [ 251.625234][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.632131][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.639664][ T5979] device bridge_slave_1 entered promiscuous mode [ 251.680048][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.686895][ T5979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.694005][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.700797][ T5979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.721099][ T974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.728509][ T974] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.735747][ T974] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.744630][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.753297][ T337] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.760146][ T337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.769877][ T974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.777866][ T974] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.784721][ T974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.801111][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.808835][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.822659][ T5979] device veth0_vlan entered promiscuous mode executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0xfd, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX]) listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x0) executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ext4_sync_file_exit\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='ext4_sync_file_exit\x00', r4}, 0x10) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) [ 251.829718][ T19] ftdi_sio 5-1:0.176: FTDI USB Serial Device converter detected [ 251.833248][ T1167] usb 4-1: USB disconnect, device number 70 [ 251.837413][ T19] ftdi_sio ttyUSB0: unknown device type: 0x680a [ 251.850943][ T1168] usb 1-1: string descriptor 0 read error: -71 [ 251.856132][ T5979] device veth1_macvtap entered promiscuous mode [ 251.867943][ T19] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r4}, 0x10) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='#@/#}+\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) close(r1) [ 251.875563][ T19] ftdi_sio ttyUSB1: unknown device type: 0x680a [ 251.879478][ T1168] uclogic 0003:256C:006D.005C: failed retrieving string descriptor #200: -71 [ 251.883129][ T19] usb 5-1: USB disconnect, device number 82 [ 251.890663][ T1168] uclogic 0003:256C:006D.005C: failed retrieving pen parameters: -71 [ 251.902809][ T19] ftdi_sio 5-1:0.176: device disconnected [ 251.906281][ T1168] uclogic 0003:256C:006D.005C: failed probing pen v2 parameters: -71 [ 251.915667][ T19] ftdi_sio 5-1:0.0: device disconnected [ 251.919203][ T1168] uclogic 0003:256C:006D.005C: failed probing parameters: -71 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) readv(r3, &(0x7f0000001900)=[{0x0, 0x18}, {&(0x7f0000000040)=""/65, 0x41}], 0x2) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000008c0)={[{@numtail}, {@rodir}, {@fat=@check_strict}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@uni_xlate}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@shortname_winnt}, {@fat=@flush}, {@uni_xlateno}, {@numtail}]}, 0x6, 0x2a6, &(0x7f0000000440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x47) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x821cd0, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x112dd10, 0x0) executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x6b4, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0x2c, 0x3e, 0x56, 0x10, 0x403, 0xfc0c, 0x680a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a2, 0x2, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0xb0, 0x7, 0xb, 0xee, 0xeb, 0x6, 0x3f, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1}, @as_header={0x7, 0x24, 0x1, 0x77, 0x0, 0x1001}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x4, 0x3, 0x6, "6650355d5981"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1f, "", 'Fn'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0x5, 0x1, "6642d4"}]}, @uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x1, 0x0, 0x0, "c22dfc71f9321778"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1, 0x0, 0x5, "9fd90b"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4a, 0x2, 0x1, 0x7f, "5712"}]}], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x1, 0xb5, 0x1, [@generic={0xe3, 0x1, "fbe3905347bd21fb3086a714d214129ad1cc38aadd1a455ffe29358cc11a52727290d4360b3de8678a9c5be1dd7b382f70b5d42dea722e4ccc729c5c206f5a124e9bc21839c21f4b5cfa8ebb1b2653fa1b1194d2b0b4cc3405dfdeeafe83516237319ba05c78fdf9ea9c701ea994050bc516cb23cc0b6b1e4dc5c18f21d1ecd0be8777ac07b5ad123a7e2c02a1bf2a69d86f4a2d7db8e70c44858bb0677dc7d55d769047676f67f930c8036641e1796f4d8e021ccc6f46cbf43e9806427a961172668c2eb400c6e4cd502825047d91b8fdf180a773a5828faa47e88b1a1998f5d8"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x1, 0x5, 0x0, [@generic={0x5c, 0x24, "d6eb75f38a1f4108c23d9cfafcd0d3730c8e2a22fc37858584e423c8a47e05b5a9e7383105bf1e1c4ee593ea651b612c3c242c3331d24e24e0a4d250f5de2e563246b53454d340f666e363b4a3ce1369b74c493ec726d82b728c"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x2, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x43, 0x6}]}}, {{0x9, 0x5, 0x9, 0x8, 0xc51b29c1bd4bee16, 0x4, 0x4, 0x47, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1d, 0x7ff}]}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x2, 0xc8}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x0, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0xc400}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x5, 0x1, 0xfe}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x4, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x81, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x100}, @generic={0xa7, 0x7, "00460d7e0a84d19f9a9dccb877f29496e55ccbf78281e0305ccd99793e1c064e606286e82ec5922b4b7aad0a387811c65ed15ce4a2834b00de91ae48f505682f7418261baccb186e1b328825671124f3b9a1f897a4f7dca94e0e5fd53d38ffee0c623d9cea619f14b0bda4da588fa133a13e616e13b7803693e188b41f089766adcbce9ad7bc1363432b11cc399a68ee8afc89dce49580e7a8ca7474f10b6db7aaecc73f6a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x81, 0x9, 0x92, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x6, 0x3, 0x1, [@generic={0x11, 0x8, "5857d316d88cefc48a04724882f6d9"}, @generic={0x37, 0x0, "5e2752f41f9c7cb5e90d4e89c9f1c197c801284239a8be78a364b46625b38cdb7d67c0906b5b4c05eba2fa9135ce6e312316936cb4"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x9, 0xe, 0x1, 0x0, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x9, 0x9, 0x6}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x5, 0x4, 0xb5}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3f, 0xbd, 0x1, [@generic={0xcc, 0x35, "334cc78da2570b385a26078db10c4ab7e17dc9339f01d9b3764a3603fbf92ea2cb104a444dccd4ca3bf96d63be074e5cf3d44aa4f3f89f24778b1b79b52a8506a6a25601e86a6044049c367c0d879939b876c16bee954aac4a1f9e2b08ef37fd8b1e65d5a98bb7f6d8d0acd09aa37e1a3308ead30d9e28f8ca83a4e739fa931e8e87560da183fc30eb47d87ee28f30343aa40cbff4c7d753b827d92a1f3751133b42e65d8ab068fc448e198292141fd798bcbb87e04507d5167301dd87aed3834c82117a5d3231adde2c"}, @generic={0xcb, 0x24, "57d95e064d6c8da99b21715aff4fdff831ee9b50f3cd822dff34cef34ae70c417268e0ffca632f72630a6936df0489602a44ff3d5d6c15c187746e3a5841a8db163c01946379f00512cecc1ba4c741956dc5e4be6aeddd630792900eb75f8aed17ed03cafd392e483e02f81cdff80355244ff4bbbd2e0202ee86dcf5a0d0132e815fb478007c4d0ba48235afa9b0267cfe1d6f1418d457947ce5b5edba3ddd9573852933830f4dabe6845c8967081fa6516ccae675b6c343259445604d883e2b040bf6afd285f9dc08"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x80, 0x1, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x5}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x1, 0x240, 0x5, 0x2, 0xa6, [@generic={0x80, 0x2c, "6e3300b2d4da826b7ce6ec3b8b566528100cf6aeb1c3e725f6e465f06b19f6b0d093c2d26a179d24e942fcf737882812f8e1f5b9ee95444a9cb7d31cdbbb24b7c0b15ba35498568f80678b2defb09d1e49c78e1f8d9878dee38f864e28dac051fdfdbf08bb0fa58cabe65bdd694a45646a0aec42debcdabecb67f32a942c"}, @generic={0x75, 0x22, "15f7e01d70e9304e521aad05c65d1696bca3df848300e46c3977ff2283cadde397ee24c3db9476bbbc022b03f10cd7d768ec7ff32b48929b0da2812972da0110facf51f2fb62c44f32a76cfe293bbb5dffddff06a539a1eb025a468212b12f2b6c85ef3222e4cc6cb8087123fb3c4dc36514e6"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0x0, 0x6, 0x4, [@generic={0x83, 0xa, "f1b61bde8e23aee691da6fddf1a662d4faf57b33c234367581d403eecb5c217b88667064f6b64062037ea2de5fae3317bdb91a39a260b52364723448a8219bb4955c8837a5f2271f2887964319736516de8b4f372b0746bd07c16ca3e9b001b93f0121980def306598d05f9b7b22acf4e16576d441e3c7b38ec5a19143ece84dbe"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x1, 0x38, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x1a, 0x58, 0x1f}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x201, 0x5, 0x5, 0x6, 0x40, 0x4}, 0xc, &(0x7f0000000e80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x1}]}, 0x1, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x1809}}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000f40)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000013c0)={&(0x7f0000001140)={0x258, 0x20, 0x400, 0x70bd29, 0x25dfdbfe, {0x1d}, [@generic="9f8bbef02fef0636bc0bca3fe397deea7e98e2ef45e28a785572016d7157d43f6ffe44c2b8bcf54865bd23bb8bf4184cf4aa7c8f553a9be09c64375e343dc61eff2a033b71e5d301ecc43412ec504af88c8da9e415dde95411a585ca2964b6748e78deb0bc", @typed={0x8, 0x2d, 0x0, 0x0, @fd}, @typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@empty}, @nested={0x160, 0xf4, 0x0, 0x1, [@typed={0x8, 0xfb, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x4, 0x83}, @generic="fdd6c776e1c72f6e6448c1e798db09c55bc6d84b72262a6bd84f3c456da8d7e52d677fde1cd52ce143cb371cc32a0f9a36d143107fdab7d9c9b9c065bd3c032dae6508b65d3586ab0d4945e8388973811d4af2ac5b84da383465a88e576cf7658c8fd3d9b85ceef613e4336b6e2e0858205e3ca10fa1344747c6c8cd926924b877db08ae772c8f19dc3c3ae7bbe3a31968af581f77b1724189fd391cfe6735d266baa8e001ea42c4e3052958dc2e1257611f4fc47eb4f087c0394cdd3f076fc78c8fb6f310a107d75f3c11bb506ece1ecd7510b1d0a53eeedbffb40c48f65cb1c47aa3dcd4279b900a599951d6c9a87959e9493a", @generic="f6cf8b03aaee437855a513f218b5bc8ee0659b72294dc1c7eacaf6dccf23a7029cf679426e059fcdb72e12bf5c4214ba", @typed={0x5, 0x56, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@empty}, @typed={0xc, 0xca, 0x0, 0x0, @u64=0x8}]}, @generic="9063408c9cc09dbe86e35cb3003e3280104de5550ed71de0af3d98364d9a9e7079bbd83c2b3fc25bcf3a0d644dc7c55d63f53fd225514c79e147df1e1667c69fa71c9650994705279f7a8103e7483a0ebc94fdbadf6f3a896fbf0911d5b9eca3baa7370c48c24d1367232ba455cacc"]}, 0x258}, 0x1, 0x0, 0x0, 0x4000}, 0x40c4) [ 251.933447][ T5990] 9pnet_fd: Insufficient options for proto=fd [ 251.936044][ T1168] uclogic: probe of 0003:256C:006D.005C failed with error -71 [ 251.948950][ T1168] usb 1-1: USB disconnect, device number 79 [ 251.954706][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 251.972622][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r4}, 0x10) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='#@/#}+\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) close(r1) [ 251.984698][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 251.994824][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 251.995504][ T5997] loop3: detected capacity change from 0 to 256 [ 252.002289][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.015554][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.023885][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 252.024479][ T5069] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 252.041075][ T5069] FAT-fs (loop3): Filesystem has been set read-only [ 252.049868][ T5069] FAT-fs (loop3): error, corrupted directory (invalid entries) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000280)={'macvlan1\x00', 0x400}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) close(0xffffffffffffffff) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff7fd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r2, r3) executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000040)) executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="af00000000000000eaffffffffffffff9500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000e000010100002800400040008000200000000000c00018008000100", @ANYRES32], 0x30}}, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x400145042, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r4, 0x8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000001140)=""/4086, &(0x7f0000000180)=0xff6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000100)={'syz1\x00', {}, 0x7, [0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffff8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}, 0x45c) executing program 2: arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x40000000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) [ 252.160726][ T4652] device bridge_slave_1 left promiscuous mode [ 252.166787][ T4652] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.177657][ T4652] device bridge_slave_0 left promiscuous mode [ 252.184203][ T4652] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.192115][ T4652] device veth1_macvtap left promiscuous mode [ 252.198254][ T4652] device veth0_vlan left promiscuous mode executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='#@/#}+\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) close(r1) [ 252.288223][ T6008] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.295144][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.299631][ T337] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 252.302549][ T6008] device bridge_slave_0 entered promiscuous mode [ 252.316117][ T6008] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.323571][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.331224][ T6008] device bridge_slave_1 entered promiscuous mode executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r4}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='#@/#}+\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) close(r1) [ 252.381595][ T6008] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.388475][ T6008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.395570][ T6008] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.402367][ T6008] bridge0: port 1(bridge_slave_0) entered forwarding state executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ext4_sync_file_exit\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='ext4_sync_file_exit\x00', r4}, 0x10) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) [ 252.429132][ T974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.436986][ T974] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.440261][ T19] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 252.451514][ T974] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.463965][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.474175][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0xfd, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX]) listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x0) [ 252.482351][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.489231][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.505791][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.514993][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.517657][ T6019] 9pnet_fd: Insufficient options for proto=fd executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) readv(r3, &(0x7f0000001900)=[{0x0, 0x18}, {&(0x7f0000000040)=""/65, 0x41}], 0x2) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000008c0)={[{@numtail}, {@rodir}, {@fat=@check_strict}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@uni_xlate}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@shortname_winnt}, {@fat=@flush}, {@uni_xlateno}, {@numtail}]}, 0x6, 0x2a6, &(0x7f0000000440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x47) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x821cd0, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x112dd10, 0x0) [ 252.523077][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.535808][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.539481][ T337] usb 2-1: Using ep0 maxpacket: 16 [ 252.543560][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 252.555812][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 252.563768][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r4}, 0x10) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='#@/#}+\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) close(r1) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r4}, 0x10) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='#@/#}+\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) close(r1) [ 252.577032][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.591701][ T6021] loop4: detected capacity change from 0 to 256 [ 252.594536][ T974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 252.606111][ T974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 252.616404][ T309] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 252.620427][ T6008] device veth0_vlan entered promiscuous mode [ 252.629699][ T309] FAT-fs (loop4): Filesystem has been set read-only [ 252.636895][ T309] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 252.647716][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 252.655675][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 252.666813][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 252.674235][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.679503][ T337] usb 2-1: config 0 has an invalid interface number: 176 but max is 1 [ 252.687637][ T6008] device veth1_macvtap entered promiscuous mode [ 252.689344][ T337] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 252.703955][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 252.708888][ T337] usb 2-1: config 0 has no interface number 1 [ 252.714795][ T337] usb 2-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000040)) [ 252.726491][ T337] usb 2-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 252.737303][ T337] usb 2-1: config 0 interface 176 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0 [ 252.748279][ T337] usb 2-1: config 0 interface 176 altsetting 7 endpoint 0x9 has invalid maxpacket 60950, setting to 64 [ 252.759279][ T337] usb 2-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 252.769726][ T337] usb 2-1: config 0 interface 176 altsetting 7 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 252.780502][ T337] usb 2-1: config 0 interface 176 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 252.791433][ T337] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 252.803081][ T337] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 252.816191][ T337] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 252.827337][ T337] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 252.838355][ T337] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 252.850298][ T337] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 252.851286][ T974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 252.868891][ T974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.869589][ T337] usb 2-1: config 0 interface 176 has no altsetting 0 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff7fd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r1, r2) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200f1ff8500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint_stats\x00', r5}, 0x10) ioctl$TUNSETOFFLOAD(r4, 0x4004662b, 0x20001412) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r6 = syz_open_pts(r2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000280)='\x00', 0x0}, 0x30) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0xb, 0x1, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@ifindex=r7, r1, 0x36, 0x2020, 0x0, @prog_id=r8, r9}, 0x20) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2) read(r6, 0x0, 0x2006) timer_create(0x0, &(0x7f00000012c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r10 = gettid() tkill(r10, 0x0) [ 252.877087][ T974] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 252.906994][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 252.915472][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000280)={'macvlan1\x00', 0x400}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) close(0xffffffffffffffff) executing program 3: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x6dd, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0x2c, 0x3e, 0x56, 0x10, 0x403, 0xfc0c, 0x680a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6cb, 0x2, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0xb0, 0x7, 0xb, 0xee, 0xeb, 0x6, 0x3f, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1}, @as_header={0x7, 0x24, 0x1, 0x77, 0x0, 0x1001}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x4, 0x3, 0x6, "6650355d5981"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1f, "", 'Fn'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0x5, 0x1, "6642d4"}]}, @uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x1, 0x0, 0x0, "c22dfc71f9321778"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1, 0x0, 0x5, "9fd90b"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4a, 0x2, 0x1, 0x7f, "5712"}]}], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x1, 0xb5, 0x1, [@generic={0xe3, 0x1, "fbe3905347bd21fb3086a714d214129ad1cc38aadd1a455ffe29358cc11a52727290d4360b3de8678a9c5be1dd7b382f70b5d42dea722e4ccc729c5c206f5a124e9bc21839c21f4b5cfa8ebb1b2653fa1b1194d2b0b4cc3405dfdeeafe83516237319ba05c78fdf9ea9c701ea994050bc516cb23cc0b6b1e4dc5c18f21d1ecd0be8777ac07b5ad123a7e2c02a1bf2a69d86f4a2d7db8e70c44858bb0677dc7d55d769047676f67f930c8036641e1796f4d8e021ccc6f46cbf43e9806427a961172668c2eb400c6e4cd502825047d91b8fdf180a773a5828faa47e88b1a1998f5d8"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x1, 0x5, 0x0, [@generic={0x5c, 0x24, "d6eb75f38a1f4108c23d9cfafcd0d3730c8e2a22fc37858584e423c8a47e05b5a9e7383105bf1e1c4ee593ea651b612c3c242c3331d24e24e0a4d250f5de2e563246b53454d340f666e363b4a3ce1369b74c493ec726d82b728c"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x2, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x43, 0x6}]}}, {{0x9, 0x5, 0x9, 0x8, 0xc51b29c1bd4bee16, 0x4, 0x4, 0x47, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1d, 0x7ff}]}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x2, 0xc8}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x0, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0xc400}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x5, 0x1, 0xfe}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x4, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x81, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x100}, @generic={0xa7, 0x7, "00460d7e0a84d19f9a9dccb877f29496e55ccbf78281e0305ccd99793e1c064e606286e82ec5922b4b7aad0a387811c65ed15ce4a2834b00de91ae48f505682f7418261baccb186e1b328825671124f3b9a1f897a4f7dca94e0e5fd53d38ffee0c623d9cea619f14b0bda4da588fa133a13e616e13b7803693e188b41f089766adcbce9ad7bc1363432b11cc399a68ee8afc89dce49580e7a8ca7474f10b6db7aaecc73f6a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x81, 0x9, 0x92, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x6, 0x3, 0x1, [@generic={0x11, 0x8, "5857d316d88cefc48a04724882f6d9"}, @generic={0x37, 0x0, "5e2752f41f9c7cb5e90d4e89c9f1c197c801284239a8be78a364b46625b38cdb7d67c0906b5b4c05eba2fa9135ce6e312316936cb4"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0xc, 0xe, 0x1, 0x0, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x9, 0x9, 0x6}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x5, 0x4, 0xb5}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3f, 0xbd, 0x1, [@generic={0xcc, 0x35, "334cc78da2570b385a26078db10c4ab7e17dc9339f01d9b3764a3603fbf92ea2cb104a444dccd4ca3bf96d63be074e5cf3d44aa4f3f89f24778b1b79b52a8506a6a25601e86a6044049c367c0d879939b876c16bee954aac4a1f9e2b08ef37fd8b1e65d5a98bb7f6d8d0acd09aa37e1a3308ead30d9e28f8ca83a4e739fa931e8e87560da183fc30eb47d87ee28f30343aa40cbff4c7d753b827d92a1f3751133b42e65d8ab068fc448e198292141fd798bcbb87e04507d5167301dd87aed3834c82117a5d3231adde2c"}, @generic={0xcb, 0x24, "57d95e064d6c8da99b21715aff4fdff831ee9b50f3cd822dff34cef34ae70c417268e0ffca632f72630a6936df0489602a44ff3d5d6c15c187746e3a5841a8db163c01946379f00512cecc1ba4c741956dc5e4be6aeddd630792900eb75f8aed17ed03cafd392e483e02f81cdff80355244ff4bbbd2e0202ee86dcf5a0d0132e815fb478007c4d0ba48235afa9b0267cfe1d6f1418d457947ce5b5edba3ddd9573852933830f4dabe6845c8967081fa6516ccae675b6c343259445604d883e2b040bf6afd285f9dc08"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x80, 0x1, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x5}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x1, 0x240, 0x5, 0x2, 0xa6, [@generic={0x80, 0x2c, "6e3300b2d4da826b7ce6ec3b8b566528100cf6aeb1c3e725f6e465f06b19f6b0d093c2d26a179d24e942fcf737882812f8e1f5b9ee95444a9cb7d31cdbbb24b7c0b15ba35498568f80678b2defb09d1e49c78e1f8d9878dee38f864e28dac051fdfdbf08bb0fa58cabe65bdd694a45646a0aec42debcdabecb67f32a942c"}, @generic={0x75, 0x22, "15f7e01d70e9304e521aad05c65d1696bca3df848300e46c3977ff2283cadde397ee24c3db9476bbbc022b03f10cd7d768ec7ff32b48929b0da2812972da0110facf51f2fb62c44f32a76cfe293bbb5dffddff06a539a1eb025a468212b12f2b6c85ef3222e4cc6cb8087123fb3c4dc36514e6"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0x0, 0x6, 0x4, [@generic={0x83, 0xa, "f1b61bde8e23aee691da6fddf1a662d4faf57b33c234367581d403eecb5c217b88667064f6b64062037ea2de5fae3317bdb91a39a260b52364723448a8219bb4955c8837a5f2271f2887964319736516de8b4f372b0746bd07c16ca3e9b001b93f0121980def306598d05f9b7b22acf4e16576d441e3c7b38ec5a19143ece84dbe"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x1, 0x38, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x1a, 0x58, 0x1f}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x0, 0x3f}}, {{0x9, 0x5, 0xb, 0x8, 0x600, 0x4, 0x60, 0x7f}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x6, 0x7, 0x3a, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5}]}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x201, 0x5, 0x5, 0x6, 0x40, 0x4}, 0xc, &(0x7f0000000e80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x1}]}, 0x1, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x1809}}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000f40)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000013c0)={&(0x7f0000001140)={0x258, 0x20, 0x400, 0x70bd29, 0x25dfdbfe, {0x1d}, [@generic="9f8bbef02fef0636bc0bca3fe397deea7e98e2ef45e28a785572016d7157d43f6ffe44c2b8bcf54865bd23bb8bf4184cf4aa7c8f553a9be09c64375e343dc61eff2a033b71e5d301ecc43412ec504af88c8da9e415dde95411a585ca2964b6748e78deb0bc", @typed={0x8, 0x2d, 0x0, 0x0, @fd}, @typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@empty}, @nested={0x160, 0xf4, 0x0, 0x1, [@typed={0x8, 0xfb, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x4, 0x83}, @generic="fdd6c776e1c72f6e6448c1e798db09c55bc6d84b72262a6bd84f3c456da8d7e52d677fde1cd52ce143cb371cc32a0f9a36d143107fdab7d9c9b9c065bd3c032dae6508b65d3586ab0d4945e8388973811d4af2ac5b84da383465a88e576cf7658c8fd3d9b85ceef613e4336b6e2e0858205e3ca10fa1344747c6c8cd926924b877db08ae772c8f19dc3c3ae7bbe3a31968af581f77b1724189fd391cfe6735d266baa8e001ea42c4e3052958dc2e1257611f4fc47eb4f087c0394cdd3f076fc78c8fb6f310a107d75f3c11bb506ece1ecd7510b1d0a53eeedbffb40c48f65cb1c47aa3dcd4279b900a599951d6c9a87959e9493a", @generic="f6cf8b03aaee437855a513f218b5bc8ee0659b72294dc1c7eacaf6dccf23a7029cf679426e059fcdb72e12bf5c4214ba", @typed={0x5, 0x56, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@empty}, @typed={0xc, 0xca, 0x0, 0x0, @u64=0x8}]}, @generic="9063408c9cc09dbe86e35cb3003e3280104de5550ed71de0af3d98364d9a9e7079bbd83c2b3fc25bcf3a0d644dc7c55d63f53fd225514c79e147df1e1667c69fa71c9650994705279f7a8103e7483a0ebc94fdbadf6f3a896fbf0911d5b9eca3baa7370c48c24d1367232ba455cacc"]}, 0x258}, 0x1, 0x0, 0x0, 0x4000}, 0x40c4) [ 252.927394][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 252.936556][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 252.962928][ T6031] serio: Serial port pts0 [ 252.989505][ T19] usb 3-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 252.998503][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.006612][ T19] usb 3-1: Product: syz [ 253.010740][ T19] usb 3-1: Manufacturer: syz [ 253.015457][ T19] usb 3-1: SerialNumber: syz [ 253.020721][ T19] usb 3-1: config 0 descriptor?? [ 253.042193][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.049090][ T6036] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.049564][ T337] usb 2-1: New USB device found, idVendor=0403, idProduct=fc0c, bcdDevice=68.0a [ 253.056623][ T6036] device bridge_slave_0 entered promiscuous mode [ 253.065481][ T337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.078739][ T337] usb 2-1: Product: syz [ 253.082907][ T337] usb 2-1: Manufacturer: syz [ 253.087323][ T337] usb 2-1: SerialNumber: syz [ 253.093015][ T337] usb 2-1: config 0 descriptor?? [ 253.093167][ T6036] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.104723][ T6036] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.111977][ T6036] device bridge_slave_1 entered promiscuous mode [ 253.156280][ T6036] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.163149][ T6036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.170227][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.177024][ T6036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.198534][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 253.206189][ T1168] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.213400][ T1168] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.223112][ T1991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.231147][ T1991] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.237999][ T1991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.245182][ T5121] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 253.255831][ T1991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 253.263984][ T1991] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.270859][ T1991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.280297][ T6007] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 253.290904][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 253.302706][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.316996][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 253.327560][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 253.335742][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 253.343057][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 253.353071][ T6036] device veth0_vlan entered promiscuous mode [ 253.359530][ T19] usb 3-1: MIDIStreaming interface descriptor not found [ 253.365765][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 253.367963][ T19] usb 3-1: USB disconnect, device number 82 [ 253.375978][ T6036] device veth1_macvtap entered promiscuous mode [ 253.380088][ T337] ftdi_sio 2-1:0.176: FTDI USB Serial Device converter detected [ 253.395414][ T337] ftdi_sio ttyUSB0: unknown device type: 0x680a [ 253.400777][ T974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 253.403578][ T337] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 253.417412][ T337] ftdi_sio ttyUSB1: unknown device type: 0x680a [ 253.424988][ T337] usb 2-1: USB disconnect, device number 77 [ 253.431021][ T4652] device bridge_slave_1 left promiscuous mode [ 253.437042][ T4652] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.440247][ T337] ftdi_sio 2-1:0.176: device disconnected [ 253.449722][ T4652] device bridge_slave_0 left promiscuous mode [ 253.450672][ T337] ftdi_sio 2-1:0.0: device disconnected [ 253.455888][ T4652] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.468802][ T4652] device veth1_macvtap left promiscuous mode [ 253.474692][ T4652] device veth0_vlan left promiscuous mode [ 253.509448][ T5121] usb 4-1: Using ep0 maxpacket: 16 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000040)) executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x0, 0x9, 0x1}, 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b40)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="060005"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) [ 253.542878][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 253.629486][ T5121] usb 4-1: config 0 has an invalid interface number: 176 but max is 1 [ 253.637513][ T5121] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 253.646036][ T5121] usb 4-1: config 0 has no interface number 1 [ 253.651958][ T5121] usb 4-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 253.663151][ T5121] usb 4-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 253.673678][ T5121] usb 4-1: config 0 interface 176 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0 [ 253.683469][ T5121] usb 4-1: config 0 interface 176 altsetting 7 endpoint 0x9 has invalid maxpacket 60950, setting to 64 [ 253.694277][ T5121] usb 4-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 253.704689][ T5121] usb 4-1: config 0 interface 176 altsetting 7 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 253.715482][ T5121] usb 4-1: config 0 interface 176 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='#@/#}+\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) close(r1) [ 253.726325][ T5121] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 253.736555][ T5121] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 253.746869][ T5121] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 253.757214][ T5121] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 253.766704][ T5121] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping executing program 2: arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x40000000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x6bd, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0x2c, 0x3e, 0x56, 0x10, 0x403, 0xfc0c, 0x680a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6ab, 0x2, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0xb0, 0x7, 0xb, 0xee, 0xeb, 0x6, 0x3f, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1}, @as_header={0x7, 0x24, 0x1, 0x77, 0x0, 0x1001}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x4, 0x3, 0x6, "6650355d5981"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1f, "", 'Fn'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0x5, 0x1, "6642d4"}]}, @uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x1, 0x0, 0x0, "c22dfc71f9321778"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1, 0x0, 0x5, "9fd90b"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4a, 0x2, 0x1, 0x7f, "5712"}]}], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x1, 0xb5, 0x1, [@generic={0xe3, 0x1, "fbe3905347bd21fb3086a714d214129ad1cc38aadd1a455ffe29358cc11a52727290d4360b3de8678a9c5be1dd7b382f70b5d42dea722e4ccc729c5c206f5a124e9bc21839c21f4b5cfa8ebb1b2653fa1b1194d2b0b4cc3405dfdeeafe83516237319ba05c78fdf9ea9c701ea994050bc516cb23cc0b6b1e4dc5c18f21d1ecd0be8777ac07b5ad123a7e2c02a1bf2a69d86f4a2d7db8e70c44858bb0677dc7d55d769047676f67f930c8036641e1796f4d8e021ccc6f46cbf43e9806427a961172668c2eb400c6e4cd502825047d91b8fdf180a773a5828faa47e88b1a1998f5d8"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x1, 0x5, 0x0, [@generic={0x5c, 0x24, "d6eb75f38a1f4108c23d9cfafcd0d3730c8e2a22fc37858584e423c8a47e05b5a9e7383105bf1e1c4ee593ea651b612c3c242c3331d24e24e0a4d250f5de2e563246b53454d340f666e363b4a3ce1369b74c493ec726d82b728c"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x2, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x43, 0x6}]}}, {{0x9, 0x5, 0x9, 0x8, 0xc51b29c1bd4bee16, 0x4, 0x4, 0x47, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1d, 0x7ff}]}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x2, 0xc8}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x0, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0xc400}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x5, 0x1, 0xfe}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x4, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x81, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x100}, @generic={0xa7, 0x7, "00460d7e0a84d19f9a9dccb877f29496e55ccbf78281e0305ccd99793e1c064e606286e82ec5922b4b7aad0a387811c65ed15ce4a2834b00de91ae48f505682f7418261baccb186e1b328825671124f3b9a1f897a4f7dca94e0e5fd53d38ffee0c623d9cea619f14b0bda4da588fa133a13e616e13b7803693e188b41f089766adcbce9ad7bc1363432b11cc399a68ee8afc89dce49580e7a8ca7474f10b6db7aaecc73f6a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x81, 0x9, 0x92, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x6, 0x3, 0x1, [@generic={0x11, 0x8, "5857d316d88cefc48a04724882f6d9"}, @generic={0x37, 0x0, "5e2752f41f9c7cb5e90d4e89c9f1c197c801284239a8be78a364b46625b38cdb7d67c0906b5b4c05eba2fa9135ce6e312316936cb4"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0xa, 0xe, 0x1, 0x0, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x9, 0x9, 0x6}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x5, 0x4, 0xb5}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3f, 0xbd, 0x1, [@generic={0xcc, 0x35, "334cc78da2570b385a26078db10c4ab7e17dc9339f01d9b3764a3603fbf92ea2cb104a444dccd4ca3bf96d63be074e5cf3d44aa4f3f89f24778b1b79b52a8506a6a25601e86a6044049c367c0d879939b876c16bee954aac4a1f9e2b08ef37fd8b1e65d5a98bb7f6d8d0acd09aa37e1a3308ead30d9e28f8ca83a4e739fa931e8e87560da183fc30eb47d87ee28f30343aa40cbff4c7d753b827d92a1f3751133b42e65d8ab068fc448e198292141fd798bcbb87e04507d5167301dd87aed3834c82117a5d3231adde2c"}, @generic={0xcb, 0x24, "57d95e064d6c8da99b21715aff4fdff831ee9b50f3cd822dff34cef34ae70c417268e0ffca632f72630a6936df0489602a44ff3d5d6c15c187746e3a5841a8db163c01946379f00512cecc1ba4c741956dc5e4be6aeddd630792900eb75f8aed17ed03cafd392e483e02f81cdff80355244ff4bbbd2e0202ee86dcf5a0d0132e815fb478007c4d0ba48235afa9b0267cfe1d6f1418d457947ce5b5edba3ddd9573852933830f4dabe6845c8967081fa6516ccae675b6c343259445604d883e2b040bf6afd285f9dc08"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x80, 0x1, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x5}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x1, 0x240, 0x5, 0x2, 0xa6, [@generic={0x80, 0x2c, "6e3300b2d4da826b7ce6ec3b8b566528100cf6aeb1c3e725f6e465f06b19f6b0d093c2d26a179d24e942fcf737882812f8e1f5b9ee95444a9cb7d31cdbbb24b7c0b15ba35498568f80678b2defb09d1e49c78e1f8d9878dee38f864e28dac051fdfdbf08bb0fa58cabe65bdd694a45646a0aec42debcdabecb67f32a942c"}, @generic={0x75, 0x22, "15f7e01d70e9304e521aad05c65d1696bca3df848300e46c3977ff2283cadde397ee24c3db9476bbbc022b03f10cd7d768ec7ff32b48929b0da2812972da0110facf51f2fb62c44f32a76cfe293bbb5dffddff06a539a1eb025a468212b12f2b6c85ef3222e4cc6cb8087123fb3c4dc36514e6"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0x0, 0x6, 0x4, [@generic={0x83, 0xa, "f1b61bde8e23aee691da6fddf1a662d4faf57b33c234367581d403eecb5c217b88667064f6b64062037ea2de5fae3317bdb91a39a260b52364723448a8219bb4955c8837a5f2271f2887964319736516de8b4f372b0746bd07c16ca3e9b001b93f0121980def306598d05f9b7b22acf4e16576d441e3c7b38ec5a19143ece84dbe"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x1, 0x38, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x1a, 0x58, 0x1f}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x0, 0x3f}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x201, 0x5, 0x5, 0x6, 0x40, 0x4}, 0xc, &(0x7f0000000e80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x1}]}, 0x1, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x1809}}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000f40)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000013c0)={&(0x7f0000001140)={0x258, 0x20, 0x400, 0x70bd29, 0x25dfdbfe, {0x1d}, [@generic="9f8bbef02fef0636bc0bca3fe397deea7e98e2ef45e28a785572016d7157d43f6ffe44c2b8bcf54865bd23bb8bf4184cf4aa7c8f553a9be09c64375e343dc61eff2a033b71e5d301ecc43412ec504af88c8da9e415dde95411a585ca2964b6748e78deb0bc", @typed={0x8, 0x2d, 0x0, 0x0, @fd}, @typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@empty}, @nested={0x160, 0xf4, 0x0, 0x1, [@typed={0x8, 0xfb, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x4, 0x83}, @generic="fdd6c776e1c72f6e6448c1e798db09c55bc6d84b72262a6bd84f3c456da8d7e52d677fde1cd52ce143cb371cc32a0f9a36d143107fdab7d9c9b9c065bd3c032dae6508b65d3586ab0d4945e8388973811d4af2ac5b84da383465a88e576cf7658c8fd3d9b85ceef613e4336b6e2e0858205e3ca10fa1344747c6c8cd926924b877db08ae772c8f19dc3c3ae7bbe3a31968af581f77b1724189fd391cfe6735d266baa8e001ea42c4e3052958dc2e1257611f4fc47eb4f087c0394cdd3f076fc78c8fb6f310a107d75f3c11bb506ece1ecd7510b1d0a53eeedbffb40c48f65cb1c47aa3dcd4279b900a599951d6c9a87959e9493a", @generic="f6cf8b03aaee437855a513f218b5bc8ee0659b72294dc1c7eacaf6dccf23a7029cf679426e059fcdb72e12bf5c4214ba", @typed={0x5, 0x56, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@empty}, @typed={0xc, 0xca, 0x0, 0x0, @u64=0x8}]}, @generic="9063408c9cc09dbe86e35cb3003e3280104de5550ed71de0af3d98364d9a9e7079bbd83c2b3fc25bcf3a0d644dc7c55d63f53fd225514c79e147df1e1667c69fa71c9650994705279f7a8103e7483a0ebc94fdbadf6f3a896fbf0911d5b9eca3baa7370c48c24d1367232ba455cacc"]}, 0x258}, 0x1, 0x0, 0x0, 0x4000}, 0x40c4) [ 253.777188][ T5121] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 253.787599][ T5121] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 253.797912][ T5121] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 253.808303][ T5121] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 253.818792][ T5121] usb 4-1: config 0 interface 176 has no altsetting 0 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0xfd, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRESHEX=r2]) listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x0) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) readv(r3, &(0x7f0000001900)=[{0x0, 0x18}, {&(0x7f0000000040)=""/65, 0x41}], 0x2) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000008c0)={[{@numtail}, {@rodir}, {@fat=@check_strict}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@uni_xlate}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@shortname_winnt}, {@fat=@flush}, {@uni_xlateno}, {@numtail}]}, 0x6, 0x2a6, &(0x7f0000000440)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x821cd0, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x112dd10, 0x0) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r4}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='#@/#}+\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) close(r1) [ 253.900441][ T6052] 9pnet_fd: Insufficient options for proto=fd [ 253.924330][ T6056] loop0: detected capacity change from 0 to 256 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff7fd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r1, r2) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000280)={'macvlan1\x00', 0x400}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) close(0xffffffffffffffff) executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000040)) executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x0, 0x9, 0x1}, 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b40)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='track_foreign_dirty\x00'}, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000540)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="060005"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) [ 253.969493][ T337] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 253.979587][ T5121] usb 4-1: New USB device found, idVendor=0403, idProduct=fc0c, bcdDevice=68.0a [ 253.988490][ T5121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.996447][ T5121] usb 4-1: Product: syz [ 254.000579][ T5121] usb 4-1: Manufacturer: syz [ 254.005002][ T5121] usb 4-1: SerialNumber: syz [ 254.010165][ T5121] usb 4-1: config 0 descriptor?? [ 254.109471][ T974] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 254.119474][ T330] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 254.289665][ T5121] ftdi_sio 4-1:0.176: FTDI USB Serial Device converter detected [ 254.297476][ T5121] ftdi_sio ttyUSB0: unknown device type: 0x680a [ 254.304531][ T5121] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 254.311891][ T1991] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 254.312244][ T4652] device bridge_slave_1 left promiscuous mode [ 254.319617][ T5121] ftdi_sio ttyUSB1: unknown device type: 0x680a [ 254.325497][ T4652] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.331490][ T337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.349136][ T4652] device bridge_slave_0 left promiscuous mode [ 254.355425][ T974] usb 3-1: Using ep0 maxpacket: 16 [ 254.359457][ T330] usb 2-1: Using ep0 maxpacket: 16 [ 254.360607][ T4652] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.365402][ T5121] usb 4-1: USB disconnect, device number 71 [ 254.378708][ T4652] device veth1_macvtap left promiscuous mode [ 254.380532][ T5121] ftdi_sio 4-1:0.176: device disconnected [ 254.384769][ T4652] device veth0_vlan left promiscuous mode [ 254.394204][ T337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.406145][ T5121] ftdi_sio 4-1:0.0: device disconnected [ 254.411658][ T337] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 254.421348][ T337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.429831][ T337] usb 5-1: config 0 descriptor?? [ 254.479477][ T330] usb 2-1: config 0 has an invalid interface number: 176 but max is 1 [ 254.487543][ T330] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 254.496080][ T330] usb 2-1: config 0 has no interface number 1 [ 254.502000][ T330] usb 2-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 254.512589][ T330] usb 2-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 254.523320][ T330] usb 2-1: config 0 interface 176 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0 [ 254.533200][ T330] usb 2-1: config 0 interface 176 altsetting 7 endpoint 0x9 has invalid maxpacket 60950, setting to 64 [ 254.544147][ T330] usb 2-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 254.554586][ T330] usb 2-1: config 0 interface 176 altsetting 7 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 254.565356][ T330] usb 2-1: config 0 interface 176 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 254.576181][ T330] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 254.586447][ T330] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 254.597095][ T330] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 254.607462][ T330] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 254.616926][ T330] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 254.627776][ T330] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 254.638200][ T330] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 254.648468][ T330] usb 2-1: config 0 interface 176 has no altsetting 0 [ 254.659480][ T974] usb 3-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 254.668352][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.669515][ T1991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.677012][ T974] usb 3-1: Product: syz [ 254.686985][ T1991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.690969][ T974] usb 3-1: Manufacturer: syz [ 254.690986][ T974] usb 3-1: SerialNumber: syz [ 254.691887][ T974] usb 3-1: config 0 descriptor?? [ 254.700809][ T1991] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 254.723479][ T1991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.732132][ T1991] usb 1-1: config 0 descriptor?? executing program 3: arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x40000000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) [ 254.819668][ T330] usb 2-1: New USB device found, idVendor=0403, idProduct=fc0c, bcdDevice=68.0a [ 254.828598][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.836494][ T330] usb 2-1: Product: syz [ 254.840434][ T330] usb 2-1: Manufacturer: syz [ 254.844843][ T330] usb 2-1: SerialNumber: syz [ 254.849877][ T330] usb 2-1: config 0 descriptor?? [ 254.962604][ T6048] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 255.049588][ T974] usb 3-1: MIDIStreaming interface descriptor not found [ 255.057797][ T974] usb 3-1: USB disconnect, device number 83 [ 255.099497][ T1167] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 255.129621][ T330] ftdi_sio 2-1:0.176: FTDI USB Serial Device converter detected [ 255.137276][ T330] ftdi_sio ttyUSB0: unknown device type: 0x680a [ 255.143398][ T337] usb 5-1: string descriptor 0 read error: -71 [ 255.150998][ T330] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 255.158418][ T330] ftdi_sio ttyUSB1: unknown device type: 0x680a [ 255.165450][ T330] usb 2-1: USB disconnect, device number 78 [ 255.171830][ T330] ftdi_sio 2-1:0.176: device disconnected [ 255.177864][ T330] ftdi_sio 2-1:0.0: device disconnected [ 255.183306][ T337] uclogic 0003:256C:006D.005D: failed retrieving string descriptor #200: -71 [ 255.192886][ T337] uclogic 0003:256C:006D.005D: failed retrieving pen parameters: -71 [ 255.200898][ T337] uclogic 0003:256C:006D.005D: failed probing pen v2 parameters: -71 [ 255.208709][ T337] uclogic 0003:256C:006D.005D: failed probing parameters: -71 [ 255.216130][ T337] uclogic: probe of 0003:256C:006D.005D failed with error -71 [ 255.224528][ T337] usb 5-1: USB disconnect, device number 83 [ 255.289460][ T1991] usbhid 1-1:0.0: can't add hid device: -71 [ 255.295410][ T1991] usbhid: probe of 1-1:0.0 failed with error -71 [ 255.302398][ T1991] usb 1-1: USB disconnect, device number 80 [ 255.369658][ T1167] usb 4-1: Using ep0 maxpacket: 16 executing program 2: arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x40000000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x6b4, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0x2c, 0x3e, 0x56, 0x10, 0x403, 0xfc0c, 0x680a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a2, 0x2, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0xb0, 0x7, 0xb, 0xee, 0xeb, 0x6, 0x3f, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1}, @as_header={0x7, 0x24, 0x1, 0x77, 0x0, 0x1001}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x4, 0x3, 0x6, "6650355d5981"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1f, "", 'Fn'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0x5, 0x1, "6642d4"}]}, @uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x1, 0x0, 0x0, "c22dfc71f9321778"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1, 0x0, 0x5, "9fd90b"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4a, 0x2, 0x1, 0x7f, "5712"}]}], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x1, 0xb5, 0x1, [@generic={0xe3, 0x1, "fbe3905347bd21fb3086a714d214129ad1cc38aadd1a455ffe29358cc11a52727290d4360b3de8678a9c5be1dd7b382f70b5d42dea722e4ccc729c5c206f5a124e9bc21839c21f4b5cfa8ebb1b2653fa1b1194d2b0b4cc3405dfdeeafe83516237319ba05c78fdf9ea9c701ea994050bc516cb23cc0b6b1e4dc5c18f21d1ecd0be8777ac07b5ad123a7e2c02a1bf2a69d86f4a2d7db8e70c44858bb0677dc7d55d769047676f67f930c8036641e1796f4d8e021ccc6f46cbf43e9806427a961172668c2eb400c6e4cd502825047d91b8fdf180a773a5828faa47e88b1a1998f5d8"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x1, 0x5, 0x0, [@generic={0x5c, 0x24, "d6eb75f38a1f4108c23d9cfafcd0d3730c8e2a22fc37858584e423c8a47e05b5a9e7383105bf1e1c4ee593ea651b612c3c242c3331d24e24e0a4d250f5de2e563246b53454d340f666e363b4a3ce1369b74c493ec726d82b728c"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x2, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x43, 0x6}]}}, {{0x9, 0x5, 0x9, 0x8, 0xc51b29c1bd4bee16, 0x4, 0x4, 0x47, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1d, 0x7ff}]}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x2, 0xc8}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x0, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0xc400}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x5, 0x1, 0xfe}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x4, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x81, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x100}, @generic={0xa7, 0x7, "00460d7e0a84d19f9a9dccb877f29496e55ccbf78281e0305ccd99793e1c064e606286e82ec5922b4b7aad0a387811c65ed15ce4a2834b00de91ae48f505682f7418261baccb186e1b328825671124f3b9a1f897a4f7dca94e0e5fd53d38ffee0c623d9cea619f14b0bda4da588fa133a13e616e13b7803693e188b41f089766adcbce9ad7bc1363432b11cc399a68ee8afc89dce49580e7a8ca7474f10b6db7aaecc73f6a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x81, 0x9, 0x92, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x6, 0x3, 0x1, [@generic={0x11, 0x8, "5857d316d88cefc48a04724882f6d9"}, @generic={0x37, 0x0, "5e2752f41f9c7cb5e90d4e89c9f1c197c801284239a8be78a364b46625b38cdb7d67c0906b5b4c05eba2fa9135ce6e312316936cb4"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x9, 0xe, 0x1, 0x0, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x9, 0x9, 0x6}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x5, 0x4, 0xb5}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3f, 0xbd, 0x1, [@generic={0xcc, 0x35, "334cc78da2570b385a26078db10c4ab7e17dc9339f01d9b3764a3603fbf92ea2cb104a444dccd4ca3bf96d63be074e5cf3d44aa4f3f89f24778b1b79b52a8506a6a25601e86a6044049c367c0d879939b876c16bee954aac4a1f9e2b08ef37fd8b1e65d5a98bb7f6d8d0acd09aa37e1a3308ead30d9e28f8ca83a4e739fa931e8e87560da183fc30eb47d87ee28f30343aa40cbff4c7d753b827d92a1f3751133b42e65d8ab068fc448e198292141fd798bcbb87e04507d5167301dd87aed3834c82117a5d3231adde2c"}, @generic={0xcb, 0x24, "57d95e064d6c8da99b21715aff4fdff831ee9b50f3cd822dff34cef34ae70c417268e0ffca632f72630a6936df0489602a44ff3d5d6c15c187746e3a5841a8db163c01946379f00512cecc1ba4c741956dc5e4be6aeddd630792900eb75f8aed17ed03cafd392e483e02f81cdff80355244ff4bbbd2e0202ee86dcf5a0d0132e815fb478007c4d0ba48235afa9b0267cfe1d6f1418d457947ce5b5edba3ddd9573852933830f4dabe6845c8967081fa6516ccae675b6c343259445604d883e2b040bf6afd285f9dc08"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x80, 0x1, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x5}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x1, 0x240, 0x5, 0x2, 0xa6, [@generic={0x80, 0x2c, "6e3300b2d4da826b7ce6ec3b8b566528100cf6aeb1c3e725f6e465f06b19f6b0d093c2d26a179d24e942fcf737882812f8e1f5b9ee95444a9cb7d31cdbbb24b7c0b15ba35498568f80678b2defb09d1e49c78e1f8d9878dee38f864e28dac051fdfdbf08bb0fa58cabe65bdd694a45646a0aec42debcdabecb67f32a942c"}, @generic={0x75, 0x22, "15f7e01d70e9304e521aad05c65d1696bca3df848300e46c3977ff2283cadde397ee24c3db9476bbbc022b03f10cd7d768ec7ff32b48929b0da2812972da0110facf51f2fb62c44f32a76cfe293bbb5dffddff06a539a1eb025a468212b12f2b6c85ef3222e4cc6cb8087123fb3c4dc36514e6"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0x0, 0x6, 0x4, [@generic={0x83, 0xa, "f1b61bde8e23aee691da6fddf1a662d4faf57b33c234367581d403eecb5c217b88667064f6b64062037ea2de5fae3317bdb91a39a260b52364723448a8219bb4955c8837a5f2271f2887964319736516de8b4f372b0746bd07c16ca3e9b001b93f0121980def306598d05f9b7b22acf4e16576d441e3c7b38ec5a19143ece84dbe"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x1, 0x38, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x1a, 0x58, 0x1f}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x201, 0x5, 0x5, 0x6, 0x40, 0x4}, 0xc, &(0x7f0000000e80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x1}]}, 0x1, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x1809}}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000f40)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000013c0)={&(0x7f0000001140)={0x258, 0x20, 0x400, 0x70bd29, 0x25dfdbfe, {0x1d}, [@generic="9f8bbef02fef0636bc0bca3fe397deea7e98e2ef45e28a785572016d7157d43f6ffe44c2b8bcf54865bd23bb8bf4184cf4aa7c8f553a9be09c64375e343dc61eff2a033b71e5d301ecc43412ec504af88c8da9e415dde95411a585ca2964b6748e78deb0bc", @typed={0x8, 0x2d, 0x0, 0x0, @fd}, @typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@empty}, @nested={0x160, 0xf4, 0x0, 0x1, [@typed={0x8, 0xfb, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x4, 0x83}, @generic="fdd6c776e1c72f6e6448c1e798db09c55bc6d84b72262a6bd84f3c456da8d7e52d677fde1cd52ce143cb371cc32a0f9a36d143107fdab7d9c9b9c065bd3c032dae6508b65d3586ab0d4945e8388973811d4af2ac5b84da383465a88e576cf7658c8fd3d9b85ceef613e4336b6e2e0858205e3ca10fa1344747c6c8cd926924b877db08ae772c8f19dc3c3ae7bbe3a31968af581f77b1724189fd391cfe6735d266baa8e001ea42c4e3052958dc2e1257611f4fc47eb4f087c0394cdd3f076fc78c8fb6f310a107d75f3c11bb506ece1ecd7510b1d0a53eeedbffb40c48f65cb1c47aa3dcd4279b900a599951d6c9a87959e9493a", @generic="f6cf8b03aaee437855a513f218b5bc8ee0659b72294dc1c7eacaf6dccf23a7029cf679426e059fcdb72e12bf5c4214ba", @typed={0x5, 0x56, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@empty}, @typed={0xc, 0xca, 0x0, 0x0, @u64=0x8}]}, @generic="9063408c9cc09dbe86e35cb3003e3280104de5550ed71de0af3d98364d9a9e7079bbd83c2b3fc25bcf3a0d644dc7c55d63f53fd225514c79e147df1e1667c69fa71c9650994705279f7a8103e7483a0ebc94fdbadf6f3a896fbf0911d5b9eca3baa7370c48c24d1367232ba455cacc"]}, 0x258}, 0x1, 0x0, 0x0, 0x4000}, 0x40c4) executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0xfd, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRESHEX=r2]) listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x0) executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="af00000000000000eaffffffffffffff9500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000e000010100002800400040008000200000000000c00018008000100", @ANYRES32], 0x30}}, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x400145042, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r4, 0x8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000001140)=""/4086, &(0x7f0000000180)=0xff6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000100)={'syz1\x00', {}, 0x7, [0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffff8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}, 0x45c) executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ext4_sync_file_exit\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='ext4_sync_file_exit\x00', r4}, 0x10) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000003a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0x10, 0xfc}, 0x20) executing program 4: arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x40000000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) [ 255.659488][ T1167] usb 4-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 255.672328][ T1167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.680424][ T1167] usb 4-1: Product: syz [ 255.683252][ T6076] 9pnet_fd: Insufficient options for proto=fd [ 255.684447][ T1167] usb 4-1: Manufacturer: syz [ 255.694763][ T1167] usb 4-1: SerialNumber: syz [ 255.700116][ T1167] usb 4-1: config 0 descriptor?? executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff7fd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r1, r2) executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000040)) executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ext4_sync_file_exit\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='ext4_sync_file_exit\x00', r4}, 0x10) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) executing program 0: arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x40000000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) [ 255.770463][ T974] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 255.869447][ T1991] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 255.940860][ T6068] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 256.009510][ T974] usb 3-1: Using ep0 maxpacket: 16 [ 256.019451][ T24] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 256.029533][ T1167] usb 4-1: MIDIStreaming interface descriptor not found [ 256.038127][ T1167] usb 4-1: USB disconnect, device number 72 [ 256.099458][ T60] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 256.109486][ T1991] usb 2-1: Using ep0 maxpacket: 16 [ 256.229488][ T1991] usb 2-1: config 0 has an invalid interface number: 176 but max is 1 [ 256.237555][ T1991] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 256.246170][ T1991] usb 2-1: config 0 has no interface number 1 [ 256.252108][ T1991] usb 2-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 256.262595][ T1991] usb 2-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 256.273234][ T1991] usb 2-1: config 0 interface 176 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0 [ 256.279447][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 256.282858][ T1991] usb 2-1: config 0 interface 176 altsetting 7 endpoint 0x9 has invalid maxpacket 60950, setting to 64 [ 256.298759][ T1991] usb 2-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 256.299490][ T974] usb 3-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 256.309152][ T1991] usb 2-1: config 0 interface 176 altsetting 7 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 256.318316][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.328972][ T1991] usb 2-1: config 0 interface 176 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 256.336844][ T974] usb 3-1: Product: syz [ 256.347453][ T1991] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 256.351474][ T974] usb 3-1: Manufacturer: syz [ 256.361729][ T1991] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 256.366388][ T60] usb 1-1: Using ep0 maxpacket: 16 [ 256.376514][ T1991] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 256.381419][ T974] usb 3-1: SerialNumber: syz [ 256.391699][ T1991] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 256.396836][ T974] usb 3-1: config 0 descriptor?? [ 256.405733][ T1991] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping executing program 3: arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x40000000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) [ 256.420666][ T1991] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 256.431002][ T1991] usb 2-1: config 0 interface 176 has no altsetting 0 [ 256.589487][ T24] usb 5-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 256.589672][ T1991] usb 2-1: New USB device found, idVendor=0403, idProduct=fc0c, bcdDevice=68.0a [ 256.598583][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.607406][ T1991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.615180][ T24] usb 5-1: Product: syz [ 256.622965][ T1991] usb 2-1: Product: syz [ 256.622978][ T1991] usb 2-1: Manufacturer: syz [ 256.622990][ T1991] usb 2-1: SerialNumber: syz [ 256.627039][ T24] usb 5-1: Manufacturer: syz [ 256.631633][ T1991] usb 2-1: config 0 descriptor?? [ 256.635346][ T24] usb 5-1: SerialNumber: syz [ 256.636092][ T24] usb 5-1: config 0 descriptor?? [ 256.661496][ T6072] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 256.709746][ T60] usb 1-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 256.718941][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.726900][ T60] usb 1-1: Product: syz [ 256.730942][ T60] usb 1-1: Manufacturer: syz [ 256.735288][ T60] usb 1-1: SerialNumber: syz [ 256.739442][ T337] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 256.740337][ T60] usb 1-1: config 0 descriptor?? [ 256.751940][ T974] usb 3-1: MIDIStreaming interface descriptor not found [ 256.760535][ T974] usb 3-1: USB disconnect, device number 84 [ 256.911513][ T6084] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 256.920873][ T1991] ftdi_sio 2-1:0.176: FTDI USB Serial Device converter detected [ 256.928450][ T1991] ftdi_sio ttyUSB0: unknown device type: 0x680a [ 256.935461][ T1991] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 256.943113][ T1991] ftdi_sio ttyUSB1: unknown device type: 0x680a [ 256.950318][ T1991] usb 2-1: USB disconnect, device number 79 [ 256.956618][ T1991] ftdi_sio 2-1:0.176: device disconnected [ 256.963051][ T1991] ftdi_sio 2-1:0.0: device disconnected [ 256.979456][ T337] usb 4-1: Using ep0 maxpacket: 16 [ 256.989507][ T24] usb 5-1: MIDIStreaming interface descriptor not found [ 256.999147][ T24] usb 5-1: USB disconnect, device number 84 [ 257.089577][ T60] usb 1-1: MIDIStreaming interface descriptor not found [ 257.098736][ T60] usb 1-1: USB disconnect, device number 81 executing program 2: arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x40000000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) [ 257.259516][ T337] usb 4-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 257.268427][ T337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.276245][ T337] usb 4-1: Product: syz [ 257.280382][ T337] usb 4-1: Manufacturer: syz [ 257.284773][ T337] usb 4-1: SerialNumber: syz [ 257.290161][ T337] usb 4-1: config 0 descriptor?? executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x0, 0x9, 0x1}, 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b40)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='track_foreign_dirty\x00'}, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000540)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="060005"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0xfd, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRESHEX=r2]) listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x0) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='#@/#}+\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) close(r1) executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'macvlan1\x00', 0x400}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) close(r0) executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0xfd, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX]) listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x0) [ 257.440409][ T6100] 9pnet_fd: Insufficient options for proto=fd executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200f1ff8500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004662b, 0x20001412) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r5 = syz_open_pts(r2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000280)='\x00', 0x0}, 0x30) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0xb, 0x1, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@ifindex=r6, r1, 0x36, 0x2020, 0x0, @prog_id=r7, r8}, 0x20) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000200)=0x2) read(r5, 0x0, 0x2006) timer_create(0x0, &(0x7f00000012c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r9 = gettid() tkill(r9, 0x0) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff7fd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r1, r2) [ 257.511737][ T6106] 9pnet_fd: Insufficient options for proto=fd executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000040)) executing program 4: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001f00)={0x84, &(0x7f0000001ac0)=ANY=[@ANYBLOB="000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x95b, &(0x7f0000000a80)={{0x12, 0x1, 0x110, 0x6, 0x4f, 0x96, 0x10, 0x50d, 0x905c, 0x6061, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x949, 0x3, 0x1, 0x1, 0x90, 0x3f, [{{0x9, 0x4, 0xa1, 0xff, 0x9, 0x8d, 0x16, 0x6c, 0x1, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "f772a8"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1000, 0x81}, {0x6, 0x24, 0x1a, 0x2, 0x33}, [@mdlm_detail={0x4f, 0x24, 0x13, 0x2, "33ee2b68234667107c1eb5e5385b9ed5e96e141bbe53b0ca53391c337170c30444783b2f6312e5a8d405aa2b377a768dd7bcebfa09f9608f572ec3ef03f4f3522d1cb4220e73fedd8f86f4"}]}], [{{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x40, 0xc0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x24, 0x7fff}]}}, {{0x9, 0x5, 0xb, 0xf, 0x38, 0x3f, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x51b80207d6834e75, 0x2, 0x101}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x3ff}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x4, 0x9, 0x1, [@generic={0x74, 0x24, "161f81a67a877f399d362658efedf01763c5400978342735d9a721140a8570d6d16ab90cb20096c0aab8d6d8f1906e2312d25fb3d6f71e15530420d48ae3c44a6006f0b3b8ee00cea6cb7d7acbd92e01b1a6b8e45607ce714b26122ead8ce6d6835386252d1988f79d80ea4539c398ad90c0"}, @generic={0xbb, 0x23, "1c24854133c2a3beed1b5d5e3cace461a7e8e6535262aa6bdc0f6f2f36efffab3a2769c30e07445820c10311b573de8758adf88cf96a9d8082388052c5d700ec84c4a34bd0847f27dd7526b1aad3c88320cfcc3b5c19defcbbe9ec36a5de2c9c1ceeeaf036b88f05021ecedac573adae123a7b7fa7468b9c675f65d16a146bbb2665608d48307b52613767407eb189c55100335c8b530a8599c18b2f6ec3b11edbf4f2c2a4b31b0889260f8c54977e6825ba501c27f49f2838"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x2a, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x13, 0x8001}]}}, {{0x9, 0x5, 0x80, 0x1, 0x8, 0x8, 0x5, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x92, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x9a6a}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x7f, 0x1, 0x0, [@generic={0xc5, 0x2, "0397247edfdea9cf01b2654ad059c40169e99a720bef539a059a16acc35dc09186367286b4aa04260559cdb9b298aaf35d6421001a3c1d32604fc20a33afdc69117a757b83d7f86dbd0885b48aa7f450970ff82148ac8d30b0cfaa256abad4500616b1cc24653f47641c6a13e07d84526bbff5ee93317aa19368127bac185d617a5653b1b428d5c7fea1c5b01898b13edc1608dbfa4c0fbe0f1b35367610762c8fb011d05ab1c2c3437d485963fabbc781fe4ac5802cc87f6bdb44b4042dfc488b961d"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x1, 0xff, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x8, 0xf4}, @generic={0xe5, 0x23, "b4ab3a5cdc152c5bf0d9141f208b9d3ed33d6362d4d162408692b55505c7f43b36d47198208a72b62a7a04c8a91ef11b7d819597ebe5643c02b21e91533857321be273b029f80106c1e2d6ac1f478a5a8d5290c325494406f8c73af8649e938763de3dceb4d74de4c87c1aa00662b570bcf21fe0db247ad27879c3e4c3b09f7ce5e4b73d29095a4f58e00221b142f7ff7994c9bad5043b7a79d6fb5a2d19ba9e3272ca0c84cc8c182803b0d1c0e8517e999c3c1c05a84fc2d67d1460a43cf88c33f6156651918fdb12c8fd96275cd7270a27ac957b673a1820a1ce4900408ec18f5233"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0xe1, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x65}]}}, {{0x9, 0x5, 0xc, 0x0, 0x100, 0x3, 0x2, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x4}]}}]}}, {{0x9, 0x4, 0x9b, 0x2b, 0x7, 0x12, 0xcb, 0x8, 0x0, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1f, 0x1, 0xab, 0xe2, 'B)'}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x80, 0x2, 0x1, 0x0, "0f"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x200, 0x6, 0x1, "cd791a48d8d35b"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x8, 0xff}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x2, 0x0, 0x8, "3090", "4294fa"}]}], [{{0x9, 0x5, 0x80, 0x1, 0x10, 0x5, 0x1f, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}, @generic={0x32, 0x6, "4e83272c560aa1881076203e42739e44e85d2a8e59775ac0233617b56f499ba3fd939833891741f224c8f3cb28dd3ff4"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x0, 0x0, 0x57, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3}, @generic={0xf8, 0x23, "76f11b8396bf4f3fe53ef697da1577cbcdd131170f26caf4a8642ce3f371d23f4a075959654e0cb53f8025f94e35887b5fd5fb222f421ea33f258d2c97369a7ab142966379d9beac9b5f19ef808f1163fc8607ce1f5c2f12029f6196dcde14ae351be97ec7e25208d3eeca533f530482aa09e6db7970adb5b80ab3ca78ed09e8363ad3ebaaf53598ed704fcbaeb57500abdcb2dfa92ad4933e1515086f7b8ff76e56aea9f4533a9b2502511a726430d667a3c8fa9f0be116d2057272c3976405642743a6696f20fb873917714fd8ef150498a082cb662856504f1e7fcbf056112f4e593f1049c2be481e48ac104c2dd745aec96cd1a7"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0x3f, 0x7, 0xf0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xdf, 0x8000}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x1, 0x86, 0x0, [@generic={0x2b, 0x22, "5fbcd2785c72e3a9701a225b26b8d41943f2c645dc3c79d99275ace1b59340c45c89276f64a7d4358d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfa, 0x3}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x7f, 0x6d, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x7fff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x7, 0x1b, 0x8, [@generic={0xbc, 0x21, "217576adcef1ef05b7ba06570012ce09b3176e084282a1c9644705709608d699bdd2555c5580535069b2a9c423024bcc4a4f60cc4b5d87886619244dca3a4c6505cd36347f5deac21ff529a8e74427c2573d668a6c5337b4a76de40687bc17367c57f8b2edb1130c13022ab17add8956d61b425a6d6380113a684fa805c50236c80e1af00bb6b0b56f067b2d6794f2d46b6c28206cc59ae18b7f044dbc38d7ac9091cafada09968537a88e2eb22d72b491a92773966deb69c3c2"}, @generic={0x3c, 0xb, "1e3b3fcacd233d7a3c4fddc50a9deac9b808ecb0aa89aa6d2847cc67fde27a7db4ff6cd3fdae8b50eefb581f8a4bc9c30b2bf1f1a685a1d85670"}]}}, {{0x9, 0x5, 0x3, 0x4, 0xbef, 0x6, 0x1, 0x4, [@generic={0x40, 0x5, "2395cb6f5bc1e6265665ad28678ba3da9260b375670d424af7dc977d3711fa27f35a0e52ae250be82397cb3dfc952c9d4a0953bf24c281aea48e63ed50f8"}, @generic={0x7d, 0x22, "f89baa97d550705f3ccbce25b55836fb178659eda0cce1514d0aa90a4555890aa6d711e55848ca5a42852678e17e92282f8647d94362893c9cd647765222826f5ada192d77b1aadccf0d71e5f47b068b24101c24accc829a4f4204acb68951eb361774943dcf00f1d30a9180c6a2abb38599402a90833b0b6ac351"}]}}]}}, {{0x9, 0x4, 0xa1, 0x0, 0x3, 0x68, 0xd3, 0x9d, 0x3f, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, '|\f'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x8, 0x4}, [@obex={0x5, 0x24, 0x15, 0x4}]}], [{{0x9, 0x5, 0xe, 0x10, 0x400, 0x10, 0x9, 0x40, [@generic={0x17, 0x6, "6ed29930c45f66505faf35fb304fc33e7b6c89322e"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x20, 0x40}]}}, {{0x9, 0x5, 0x9, 0x10, 0x220, 0x7f, 0x5, 0x8, [@generic={0x8c, 0x21, "2f9320c3560bddde1b8dc7284404a51ca28965d650f1de853fcecfdc73507eb45b59aa3f86905771252a9e5cf0dc20730fa5f5e4147be737660639e51a607c6cfc5e8f17ed6ddf83ae2ddbb6a2887998fbf30940a55a05ac53b0ef01a54c4fd1d49a4a39dd360991660c364124a822f19ad6b2aa7f2966ff8501bbcc1745b2494bb6f9a3dc1e0c2c0962"}, @generic={0xd, 0x4, "e26fd2f911c2f06e5b01fd"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ef, 0x2f, 0x6, 0x30, [@generic={0xb1, 0x21, "83fceea2dcf12551b675c3d5c4738b8b00211aa17bdf128afa60d1e2eec381780af4bd0bcff32825b8283ef806a554bd49cb46ede8f73687bf823ec06825867d1266cc308016ddb82bac7aa3a91c1822f4c58e0ef8dbc74ce685f47f41728fc77b7db01871f0546aa3db31282cc19689db27bf01d5cc45a10d6b6d688704485786f0c46bc1c2856835effe5238cc79881d3cc8015a168e1c38c6ed33480fdced8cd7edc3a2f35709a514f664814311"}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x2, 0x1f, 0x9, 0x8, 0x31}, 0x36, &(0x7f0000000140)={0x5, 0xf, 0x36, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xef, 0xff, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x5b, 0xff, 0x4, 0x1, 0x31}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x3, 0x8, 0xff}, @wireless={0xb, 0x10, 0x1, 0x4, 0x9, 0x7a, 0x4, 0x8, 0x1f}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x4, 0x4, 0x6}]}, 0x3, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc0a}}, {0x5f, &(0x7f00000003c0)=@string={0x5f, 0x3, "9790366b6889abe16ddae2700a9cbc61867652a2d3b41805eeb66b8b88eec662b48f9d9ad46177d6c0f5c6b561e910f822e6c20ebf7751352d1f12141fe086f2ed4892bc40db9d00ac0a85de0631c74a5483dcd4b033981308084357d7"}}]}) syz_usb_control_io(r1, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x40, 0xa, 0x52, {0x52, 0x23, "c40bc0a8ee30ebab8fc5db7795e8552553ec71597fc08392f5921ddd11d52800f007557901c9ef565920ba108a62fbc84d170fdea90fbe57cfd8b8efb33fbf0999ceabb68f7a873dae2927c1c7957330"}}, &(0x7f0000000500)={0x0, 0x3, 0x31, @string={0x31, 0x3, "d673fe25ad561efd51270efb7b7e912e3a53691bb0548355443806d7080026b1a43b3d712eeefd8ce29e770c0df639"}}, &(0x7f0000000540)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x9, 0x1f, "92736641", "98292035"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0xf9, 0x46, 0x81, 0x9, 0x8000}}}, &(0x7f0000001500)={0x84, &(0x7f00000006c0)={0x20, 0x7, 0x8e, "379097013ff63d83ec8707fca112f572d329220f1f2ae67c3c341e172435bfaa13f1606914578bba9089e2e578d90d0702af2c14d3cd8f761625558a2a82818f0991af9f20ce108aee78d24e3274026ed204a375072797212b4757c4473b249907afd34ba25b7c4a38ce4d7485d894215bf648ab1ab1ccae4b1cea1ff565861726f3ae98b0fe8e12344e7975931b"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0xc0, 0x1}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x1f}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000900)={0x40, 0xb, 0x2, "8864"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x5933}, &(0x7f0000000980)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000a00)={0x40, 0x19, 0x2, ' _'}, &(0x7f0000001400)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000001440)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000001480)={0x40, 0x1e, 0x1}, &(0x7f00000014c0)={0x40, 0x21, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000a40)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="0000010000008fcae376b24ea0d3de61806eb703e545979db35afce69016172fc7c73d41a67bd66fc41ddd0c4c368c951633f3206fe3e70a9cf50f8c797e381aae172c9c0799726fca9bf79c296a823641c44529006bd962da88cb7b91768d9ccf339820568199da1863752f19295cc01bd13b5b132c11"], 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10) [ 257.558220][ T6108] serio: Serial port pts0 [ 257.562463][ T974] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 257.609596][ T337] usb 4-1: MIDIStreaming interface descriptor not found [ 257.617520][ T337] usb 4-1: USB disconnect, device number 73 [ 257.669459][ T60] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 257.840110][ T974] usb 3-1: Using ep0 maxpacket: 16 [ 257.859462][ T1167] usb 5-1: new high-speed USB device number 85 using dummy_hcd executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x0, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000003a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0x10, 0xfc}, 0x20) executing program 3: arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x40000000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) [ 258.029514][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.040309][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.050286][ T60] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 258.059505][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.067743][ T60] usb 2-1: config 0 descriptor?? [ 258.129575][ T974] usb 3-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 258.138454][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.146416][ T974] usb 3-1: Product: syz [ 258.150514][ T974] usb 3-1: Manufacturer: syz [ 258.154817][ T974] usb 3-1: SerialNumber: syz [ 258.159737][ T974] usb 3-1: config 0 descriptor?? [ 258.229493][ T1167] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 258.239111][ T1167] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x6bd, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0x2c, 0x3e, 0x56, 0x10, 0x403, 0xfc0c, 0x680a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6ab, 0x2, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0xb0, 0x7, 0xb, 0xee, 0xeb, 0x6, 0x3f, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1}, @as_header={0x7, 0x24, 0x1, 0x77, 0x0, 0x1001}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x4, 0x3, 0x6, "6650355d5981"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1f, "", 'Fn'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0x5, 0x1, "6642d4"}]}, @uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x1, 0x0, 0x0, "c22dfc71f9321778"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1, 0x0, 0x5, "9fd90b"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4a, 0x2, 0x1, 0x7f, "5712"}]}], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x1, 0xb5, 0x1, [@generic={0xe3, 0x1, "fbe3905347bd21fb3086a714d214129ad1cc38aadd1a455ffe29358cc11a52727290d4360b3de8678a9c5be1dd7b382f70b5d42dea722e4ccc729c5c206f5a124e9bc21839c21f4b5cfa8ebb1b2653fa1b1194d2b0b4cc3405dfdeeafe83516237319ba05c78fdf9ea9c701ea994050bc516cb23cc0b6b1e4dc5c18f21d1ecd0be8777ac07b5ad123a7e2c02a1bf2a69d86f4a2d7db8e70c44858bb0677dc7d55d769047676f67f930c8036641e1796f4d8e021ccc6f46cbf43e9806427a961172668c2eb400c6e4cd502825047d91b8fdf180a773a5828faa47e88b1a1998f5d8"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x1, 0x5, 0x0, [@generic={0x5c, 0x24, "d6eb75f38a1f4108c23d9cfafcd0d3730c8e2a22fc37858584e423c8a47e05b5a9e7383105bf1e1c4ee593ea651b612c3c242c3331d24e24e0a4d250f5de2e563246b53454d340f666e363b4a3ce1369b74c493ec726d82b728c"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x2, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x43, 0x6}]}}, {{0x9, 0x5, 0x9, 0x8, 0xc51b29c1bd4bee16, 0x4, 0x4, 0x47, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1d, 0x7ff}]}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x2, 0xc8}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x0, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0xc400}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x5, 0x1, 0xfe}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x4, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x81, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x100}, @generic={0xa7, 0x7, "00460d7e0a84d19f9a9dccb877f29496e55ccbf78281e0305ccd99793e1c064e606286e82ec5922b4b7aad0a387811c65ed15ce4a2834b00de91ae48f505682f7418261baccb186e1b328825671124f3b9a1f897a4f7dca94e0e5fd53d38ffee0c623d9cea619f14b0bda4da588fa133a13e616e13b7803693e188b41f089766adcbce9ad7bc1363432b11cc399a68ee8afc89dce49580e7a8ca7474f10b6db7aaecc73f6a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x81, 0x9, 0x92, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x6, 0x3, 0x1, [@generic={0x11, 0x8, "5857d316d88cefc48a04724882f6d9"}, @generic={0x37, 0x0, "5e2752f41f9c7cb5e90d4e89c9f1c197c801284239a8be78a364b46625b38cdb7d67c0906b5b4c05eba2fa9135ce6e312316936cb4"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0xa, 0xe, 0x1, 0x0, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x9, 0x9, 0x6}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x5, 0x4, 0xb5}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3f, 0xbd, 0x1, [@generic={0xcc, 0x35, "334cc78da2570b385a26078db10c4ab7e17dc9339f01d9b3764a3603fbf92ea2cb104a444dccd4ca3bf96d63be074e5cf3d44aa4f3f89f24778b1b79b52a8506a6a25601e86a6044049c367c0d879939b876c16bee954aac4a1f9e2b08ef37fd8b1e65d5a98bb7f6d8d0acd09aa37e1a3308ead30d9e28f8ca83a4e739fa931e8e87560da183fc30eb47d87ee28f30343aa40cbff4c7d753b827d92a1f3751133b42e65d8ab068fc448e198292141fd798bcbb87e04507d5167301dd87aed3834c82117a5d3231adde2c"}, @generic={0xcb, 0x24, "57d95e064d6c8da99b21715aff4fdff831ee9b50f3cd822dff34cef34ae70c417268e0ffca632f72630a6936df0489602a44ff3d5d6c15c187746e3a5841a8db163c01946379f00512cecc1ba4c741956dc5e4be6aeddd630792900eb75f8aed17ed03cafd392e483e02f81cdff80355244ff4bbbd2e0202ee86dcf5a0d0132e815fb478007c4d0ba48235afa9b0267cfe1d6f1418d457947ce5b5edba3ddd9573852933830f4dabe6845c8967081fa6516ccae675b6c343259445604d883e2b040bf6afd285f9dc08"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x80, 0x1, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x5}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x1, 0x240, 0x5, 0x2, 0xa6, [@generic={0x80, 0x2c, "6e3300b2d4da826b7ce6ec3b8b566528100cf6aeb1c3e725f6e465f06b19f6b0d093c2d26a179d24e942fcf737882812f8e1f5b9ee95444a9cb7d31cdbbb24b7c0b15ba35498568f80678b2defb09d1e49c78e1f8d9878dee38f864e28dac051fdfdbf08bb0fa58cabe65bdd694a45646a0aec42debcdabecb67f32a942c"}, @generic={0x75, 0x22, "15f7e01d70e9304e521aad05c65d1696bca3df848300e46c3977ff2283cadde397ee24c3db9476bbbc022b03f10cd7d768ec7ff32b48929b0da2812972da0110facf51f2fb62c44f32a76cfe293bbb5dffddff06a539a1eb025a468212b12f2b6c85ef3222e4cc6cb8087123fb3c4dc36514e6"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0x0, 0x6, 0x4, [@generic={0x83, 0xa, "f1b61bde8e23aee691da6fddf1a662d4faf57b33c234367581d403eecb5c217b88667064f6b64062037ea2de5fae3317bdb91a39a260b52364723448a8219bb4955c8837a5f2271f2887964319736516de8b4f372b0746bd07c16ca3e9b001b93f0121980def306598d05f9b7b22acf4e16576d441e3c7b38ec5a19143ece84dbe"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x1, 0x38, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x1a, 0x58, 0x1f}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x0, 0x3f}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x201, 0x5, 0x5, 0x6, 0x40, 0x4}, 0xc, &(0x7f0000000e80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x1}]}, 0x1, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x1809}}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000f40)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000013c0)={&(0x7f0000001140)={0x258, 0x20, 0x400, 0x70bd29, 0x25dfdbfe, {0x1d}, [@generic="9f8bbef02fef0636bc0bca3fe397deea7e98e2ef45e28a785572016d7157d43f6ffe44c2b8bcf54865bd23bb8bf4184cf4aa7c8f553a9be09c64375e343dc61eff2a033b71e5d301ecc43412ec504af88c8da9e415dde95411a585ca2964b6748e78deb0bc", @typed={0x8, 0x2d, 0x0, 0x0, @fd}, @typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@empty}, @nested={0x160, 0xf4, 0x0, 0x1, [@typed={0x8, 0xfb, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x4, 0x83}, @generic="fdd6c776e1c72f6e6448c1e798db09c55bc6d84b72262a6bd84f3c456da8d7e52d677fde1cd52ce143cb371cc32a0f9a36d143107fdab7d9c9b9c065bd3c032dae6508b65d3586ab0d4945e8388973811d4af2ac5b84da383465a88e576cf7658c8fd3d9b85ceef613e4336b6e2e0858205e3ca10fa1344747c6c8cd926924b877db08ae772c8f19dc3c3ae7bbe3a31968af581f77b1724189fd391cfe6735d266baa8e001ea42c4e3052958dc2e1257611f4fc47eb4f087c0394cdd3f076fc78c8fb6f310a107d75f3c11bb506ece1ecd7510b1d0a53eeedbffb40c48f65cb1c47aa3dcd4279b900a599951d6c9a87959e9493a", @generic="f6cf8b03aaee437855a513f218b5bc8ee0659b72294dc1c7eacaf6dccf23a7029cf679426e059fcdb72e12bf5c4214ba", @typed={0x5, 0x56, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@empty}, @typed={0xc, 0xca, 0x0, 0x0, @u64=0x8}]}, @generic="9063408c9cc09dbe86e35cb3003e3280104de5550ed71de0af3d98364d9a9e7079bbd83c2b3fc25bcf3a0d644dc7c55d63f53fd225514c79e147df1e1667c69fa71c9650994705279f7a8103e7483a0ebc94fdbadf6f3a896fbf0911d5b9eca3baa7370c48c24d1367232ba455cacc"]}, 0x258}, 0x1, 0x0, 0x0, 0x4000}, 0x40c4) [ 258.329449][ T337] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 258.429534][ T1167] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 258.438481][ T1167] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.446303][ T1167] usb 5-1: Product: syz [ 258.450339][ T1167] usb 5-1: Manufacturer: syz [ 258.454649][ T1167] usb 5-1: SerialNumber: syz [ 258.459535][ T1167] usb 5-1: config 0 descriptor?? [ 258.479837][ T6114] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 258.486986][ T6114] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 258.499576][ T974] usb 3-1: MIDIStreaming interface descriptor not found [ 258.507873][ T974] usb 3-1: USB disconnect, device number 85 [ 258.569476][ T337] usb 4-1: Using ep0 maxpacket: 16 [ 258.599470][ T60] usbhid 2-1:0.0: can't add hid device: -71 [ 258.605280][ T60] usbhid: probe of 2-1:0.0 failed with error -71 [ 258.611965][ T60] usb 2-1: USB disconnect, device number 80 [ 258.629455][ T1991] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 258.699838][ T6114] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 258.706848][ T6114] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0xfd, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r2]) listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x0) executing program 2: arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x40000000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) [ 258.849481][ T337] usb 4-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 258.858501][ T337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.866279][ T337] usb 4-1: Product: syz [ 258.870371][ T1991] usb 1-1: Using ep0 maxpacket: 16 [ 258.875325][ T337] usb 4-1: Manufacturer: syz [ 258.879739][ T337] usb 4-1: SerialNumber: syz [ 258.884606][ T337] usb 4-1: config 0 descriptor?? [ 258.927419][ T6124] 9pnet_fd: Insufficient options for proto=fd [ 258.989512][ T1991] usb 1-1: config 0 has an invalid interface number: 176 but max is 1 [ 258.997522][ T1991] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 259.006043][ T1991] usb 1-1: config 0 has no interface number 1 [ 259.012044][ T1991] usb 1-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 259.022549][ T1991] usb 1-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ext4_sync_file_exit\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='ext4_sync_file_exit\x00', r4}, 0x10) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) [ 259.033049][ T1991] usb 1-1: config 0 interface 176 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0 [ 259.042865][ T1991] usb 1-1: config 0 interface 176 altsetting 7 endpoint 0x9 has invalid maxpacket 60950, setting to 64 [ 259.053743][ T1991] usb 1-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 259.064157][ T1991] usb 1-1: config 0 interface 176 altsetting 7 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 259.074912][ T1991] usb 1-1: config 0 interface 176 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 259.085762][ T1991] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 259.096094][ T1991] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 259.106387][ T1991] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 259.116760][ T1991] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 259.126442][ T1991] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping executing program 1: arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x40000000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) [ 259.138884][ T6119] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 259.148049][ T1991] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 259.158464][ T1991] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 259.159540][ T1167] dm9601: No valid MAC address in EEPROM, using 6e:74:19:ae:02:c0 [ 259.168897][ T1991] usb 1-1: config 0 interface 176 has no altsetting 0 [ 259.219554][ T337] usb 4-1: MIDIStreaming interface descriptor not found [ 259.227565][ T337] usb 4-1: USB disconnect, device number 74 [ 259.329435][ T6] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 259.339459][ T1991] usb 1-1: New USB device found, idVendor=0403, idProduct=fc0c, bcdDevice=68.0a [ 259.348317][ T1991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.356153][ T1991] usb 1-1: Product: syz [ 259.359961][ T6114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.360124][ T1991] usb 1-1: Manufacturer: syz [ 259.368436][ T6114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.372872][ T1991] usb 1-1: SerialNumber: syz [ 259.385189][ T1991] usb 1-1: config 0 descriptor?? [ 259.459460][ T60] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 259.569431][ T6] usb 3-1: Using ep0 maxpacket: 16 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0xfd, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX]) listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x0) executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'macvlan1\x00', 0x400}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) close(r0) [ 259.662455][ T6132] 9pnet_fd: Insufficient options for proto=fd [ 259.669741][ T1991] ftdi_sio 1-1:0.176: FTDI USB Serial Device converter detected [ 259.677517][ T1991] ftdi_sio ttyUSB0: unknown device type: 0x680a [ 259.685287][ T1991] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 259.693034][ T1991] ftdi_sio ttyUSB1: unknown device type: 0x680a [ 259.699464][ T60] usb 2-1: Using ep0 maxpacket: 16 [ 259.700427][ T1991] usb 1-1: USB disconnect, device number 82 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000040)) executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x43, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x8, {0x8, 0xa, "47f882f4d105"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 259.710829][ T1991] ftdi_sio 1-1:0.176: device disconnected [ 259.717002][ T1991] ftdi_sio 1-1:0.0: device disconnected [ 259.849609][ T6] usb 3-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 259.858607][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.866395][ T6] usb 3-1: Product: syz [ 259.870592][ T6] usb 3-1: Manufacturer: syz [ 259.874942][ T6] usb 3-1: SerialNumber: syz [ 259.879999][ T6] usb 3-1: config 0 descriptor?? [ 259.939491][ T1167] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 259.960713][ T1167] dm9601 5-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet, 6e:74:19:ae:02:c0 [ 259.973635][ T1167] usb 5-1: USB disconnect, device number 85 [ 259.979646][ T1167] dm9601 5-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet [ 260.009515][ T60] usb 2-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 260.018398][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.026231][ T60] usb 2-1: Product: syz [ 260.030208][ T974] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 260.037613][ T60] usb 2-1: Manufacturer: syz [ 260.042005][ T60] usb 2-1: SerialNumber: syz [ 260.046805][ T60] usb 2-1: config 0 descriptor?? executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x0, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000003a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0x10, 0xfc}, 0x20) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200f1ff8500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004662b, 0x20001412) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r5 = syz_open_pts(r2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000280)='\x00', 0x0}, 0x30) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0xb, 0x1, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@ifindex=r6, r1, 0x36, 0x2020, 0x0, @prog_id=r7, r8}, 0x20) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000200)=0x2) read(r5, 0x0, 0x2006) timer_create(0x0, &(0x7f00000012c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r9 = gettid() tkill(r9, 0x0) [ 260.122921][ T6126] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 260.199507][ T6] usb 3-1: MIDIStreaming interface descriptor not found [ 260.207265][ T6143] serio: Serial port pts0 [ 260.207892][ T6] usb 3-1: USB disconnect, device number 86 executing program 4: arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x40000000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) [ 260.369645][ T60] usb 2-1: MIDIStreaming interface descriptor not found [ 260.377607][ T60] usb 2-1: USB disconnect, device number 81 [ 260.409476][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.420233][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.429824][ T974] usb 4-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 260.438680][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.446913][ T974] usb 4-1: config 0 descriptor?? executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0xfd, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r2]) listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x0) executing program 2: arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x40000000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) [ 260.599448][ T1167] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 260.654012][ T6148] 9pnet_fd: Insufficient options for proto=fd executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff7fd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r1, r2) executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x0, 0x9, 0x1}, 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b40)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='track_foreign_dirty\x00'}, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000540)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="060005"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) [ 260.849569][ T1167] usb 5-1: Using ep0 maxpacket: 16 executing program 0: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001f00)={0x84, &(0x7f0000001ac0)=ANY=[@ANYBLOB="000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x95b, &(0x7f0000000a80)={{0x12, 0x1, 0x110, 0x6, 0x4f, 0x96, 0x10, 0x50d, 0x905c, 0x6061, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x949, 0x3, 0x1, 0x1, 0x90, 0x3f, [{{0x9, 0x4, 0xa1, 0xff, 0x9, 0x8d, 0x16, 0x6c, 0x1, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "f772a8"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1000, 0x81}, {0x6, 0x24, 0x1a, 0x2, 0x33}, [@mdlm_detail={0x4f, 0x24, 0x13, 0x2, "33ee2b68234667107c1eb5e5385b9ed5e96e141bbe53b0ca53391c337170c30444783b2f6312e5a8d405aa2b377a768dd7bcebfa09f9608f572ec3ef03f4f3522d1cb4220e73fedd8f86f4"}]}], [{{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x40, 0xc0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x24, 0x7fff}]}}, {{0x9, 0x5, 0xb, 0xf, 0x38, 0x3f, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x51b80207d6834e75, 0x2, 0x101}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x3ff}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x4, 0x9, 0x1, [@generic={0x74, 0x24, "161f81a67a877f399d362658efedf01763c5400978342735d9a721140a8570d6d16ab90cb20096c0aab8d6d8f1906e2312d25fb3d6f71e15530420d48ae3c44a6006f0b3b8ee00cea6cb7d7acbd92e01b1a6b8e45607ce714b26122ead8ce6d6835386252d1988f79d80ea4539c398ad90c0"}, @generic={0xbb, 0x23, "1c24854133c2a3beed1b5d5e3cace461a7e8e6535262aa6bdc0f6f2f36efffab3a2769c30e07445820c10311b573de8758adf88cf96a9d8082388052c5d700ec84c4a34bd0847f27dd7526b1aad3c88320cfcc3b5c19defcbbe9ec36a5de2c9c1ceeeaf036b88f05021ecedac573adae123a7b7fa7468b9c675f65d16a146bbb2665608d48307b52613767407eb189c55100335c8b530a8599c18b2f6ec3b11edbf4f2c2a4b31b0889260f8c54977e6825ba501c27f49f2838"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x2a, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x13, 0x8001}]}}, {{0x9, 0x5, 0x80, 0x1, 0x8, 0x8, 0x5, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x92, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x9a6a}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x7f, 0x1, 0x0, [@generic={0xc5, 0x2, "0397247edfdea9cf01b2654ad059c40169e99a720bef539a059a16acc35dc09186367286b4aa04260559cdb9b298aaf35d6421001a3c1d32604fc20a33afdc69117a757b83d7f86dbd0885b48aa7f450970ff82148ac8d30b0cfaa256abad4500616b1cc24653f47641c6a13e07d84526bbff5ee93317aa19368127bac185d617a5653b1b428d5c7fea1c5b01898b13edc1608dbfa4c0fbe0f1b35367610762c8fb011d05ab1c2c3437d485963fabbc781fe4ac5802cc87f6bdb44b4042dfc488b961d"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x1, 0xff, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x8, 0xf4}, @generic={0xe5, 0x23, "b4ab3a5cdc152c5bf0d9141f208b9d3ed33d6362d4d162408692b55505c7f43b36d47198208a72b62a7a04c8a91ef11b7d819597ebe5643c02b21e91533857321be273b029f80106c1e2d6ac1f478a5a8d5290c325494406f8c73af8649e938763de3dceb4d74de4c87c1aa00662b570bcf21fe0db247ad27879c3e4c3b09f7ce5e4b73d29095a4f58e00221b142f7ff7994c9bad5043b7a79d6fb5a2d19ba9e3272ca0c84cc8c182803b0d1c0e8517e999c3c1c05a84fc2d67d1460a43cf88c33f6156651918fdb12c8fd96275cd7270a27ac957b673a1820a1ce4900408ec18f5233"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0xe1, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x65}]}}, {{0x9, 0x5, 0xc, 0x0, 0x100, 0x3, 0x2, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x4}]}}]}}, {{0x9, 0x4, 0x9b, 0x2b, 0x7, 0x12, 0xcb, 0x8, 0x0, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1f, 0x1, 0xab, 0xe2, 'B)'}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x80, 0x2, 0x1, 0x0, "0f"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x200, 0x6, 0x1, "cd791a48d8d35b"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x8, 0xff}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x2, 0x0, 0x8, "3090", "4294fa"}]}], [{{0x9, 0x5, 0x80, 0x1, 0x10, 0x5, 0x1f, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}, @generic={0x32, 0x6, "4e83272c560aa1881076203e42739e44e85d2a8e59775ac0233617b56f499ba3fd939833891741f224c8f3cb28dd3ff4"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x0, 0x0, 0x57, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3}, @generic={0xf8, 0x23, "76f11b8396bf4f3fe53ef697da1577cbcdd131170f26caf4a8642ce3f371d23f4a075959654e0cb53f8025f94e35887b5fd5fb222f421ea33f258d2c97369a7ab142966379d9beac9b5f19ef808f1163fc8607ce1f5c2f12029f6196dcde14ae351be97ec7e25208d3eeca533f530482aa09e6db7970adb5b80ab3ca78ed09e8363ad3ebaaf53598ed704fcbaeb57500abdcb2dfa92ad4933e1515086f7b8ff76e56aea9f4533a9b2502511a726430d667a3c8fa9f0be116d2057272c3976405642743a6696f20fb873917714fd8ef150498a082cb662856504f1e7fcbf056112f4e593f1049c2be481e48ac104c2dd745aec96cd1a7"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0x3f, 0x7, 0xf0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xdf, 0x8000}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x1, 0x86, 0x0, [@generic={0x2b, 0x22, "5fbcd2785c72e3a9701a225b26b8d41943f2c645dc3c79d99275ace1b59340c45c89276f64a7d4358d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfa, 0x3}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x7f, 0x6d, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x7fff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x7, 0x1b, 0x8, [@generic={0xbc, 0x21, "217576adcef1ef05b7ba06570012ce09b3176e084282a1c9644705709608d699bdd2555c5580535069b2a9c423024bcc4a4f60cc4b5d87886619244dca3a4c6505cd36347f5deac21ff529a8e74427c2573d668a6c5337b4a76de40687bc17367c57f8b2edb1130c13022ab17add8956d61b425a6d6380113a684fa805c50236c80e1af00bb6b0b56f067b2d6794f2d46b6c28206cc59ae18b7f044dbc38d7ac9091cafada09968537a88e2eb22d72b491a92773966deb69c3c2"}, @generic={0x3c, 0xb, "1e3b3fcacd233d7a3c4fddc50a9deac9b808ecb0aa89aa6d2847cc67fde27a7db4ff6cd3fdae8b50eefb581f8a4bc9c30b2bf1f1a685a1d85670"}]}}, {{0x9, 0x5, 0x3, 0x4, 0xbef, 0x6, 0x1, 0x4, [@generic={0x40, 0x5, "2395cb6f5bc1e6265665ad28678ba3da9260b375670d424af7dc977d3711fa27f35a0e52ae250be82397cb3dfc952c9d4a0953bf24c281aea48e63ed50f8"}, @generic={0x7d, 0x22, "f89baa97d550705f3ccbce25b55836fb178659eda0cce1514d0aa90a4555890aa6d711e55848ca5a42852678e17e92282f8647d94362893c9cd647765222826f5ada192d77b1aadccf0d71e5f47b068b24101c24accc829a4f4204acb68951eb361774943dcf00f1d30a9180c6a2abb38599402a90833b0b6ac351"}]}}]}}, {{0x9, 0x4, 0xa1, 0x0, 0x3, 0x68, 0xd3, 0x9d, 0x3f, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, '|\f'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x8, 0x4}, [@obex={0x5, 0x24, 0x15, 0x4}]}], [{{0x9, 0x5, 0xe, 0x10, 0x400, 0x10, 0x9, 0x40, [@generic={0x17, 0x6, "6ed29930c45f66505faf35fb304fc33e7b6c89322e"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x20, 0x40}]}}, {{0x9, 0x5, 0x9, 0x10, 0x220, 0x7f, 0x5, 0x8, [@generic={0x8c, 0x21, "2f9320c3560bddde1b8dc7284404a51ca28965d650f1de853fcecfdc73507eb45b59aa3f86905771252a9e5cf0dc20730fa5f5e4147be737660639e51a607c6cfc5e8f17ed6ddf83ae2ddbb6a2887998fbf30940a55a05ac53b0ef01a54c4fd1d49a4a39dd360991660c364124a822f19ad6b2aa7f2966ff8501bbcc1745b2494bb6f9a3dc1e0c2c0962"}, @generic={0xd, 0x4, "e26fd2f911c2f06e5b01fd"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ef, 0x2f, 0x6, 0x30, [@generic={0xb1, 0x21, "83fceea2dcf12551b675c3d5c4738b8b00211aa17bdf128afa60d1e2eec381780af4bd0bcff32825b8283ef806a554bd49cb46ede8f73687bf823ec06825867d1266cc308016ddb82bac7aa3a91c1822f4c58e0ef8dbc74ce685f47f41728fc77b7db01871f0546aa3db31282cc19689db27bf01d5cc45a10d6b6d688704485786f0c46bc1c2856835effe5238cc79881d3cc8015a168e1c38c6ed33480fdced8cd7edc3a2f35709a514f664814311"}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x2, 0x1f, 0x9, 0x8, 0x31}, 0x36, &(0x7f0000000140)={0x5, 0xf, 0x36, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xef, 0xff, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x5b, 0xff, 0x4, 0x1, 0x31}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x3, 0x8, 0xff}, @wireless={0xb, 0x10, 0x1, 0x4, 0x9, 0x7a, 0x4, 0x8, 0x1f}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x4, 0x4, 0x6}]}, 0x3, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc0a}}, {0x5f, &(0x7f00000003c0)=@string={0x5f, 0x3, "9790366b6889abe16ddae2700a9cbc61867652a2d3b41805eeb66b8b88eec662b48f9d9ad46177d6c0f5c6b561e910f822e6c20ebf7751352d1f12141fe086f2ed4892bc40db9d00ac0a85de0631c74a5483dcd4b033981308084357d7"}}]}) syz_usb_control_io(r1, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x40, 0xa, 0x52, {0x52, 0x23, "c40bc0a8ee30ebab8fc5db7795e8552553ec71597fc08392f5921ddd11d52800f007557901c9ef565920ba108a62fbc84d170fdea90fbe57cfd8b8efb33fbf0999ceabb68f7a873dae2927c1c7957330"}}, &(0x7f0000000500)={0x0, 0x3, 0x31, @string={0x31, 0x3, "d673fe25ad561efd51270efb7b7e912e3a53691bb0548355443806d7080026b1a43b3d712eeefd8ce29e770c0df639"}}, &(0x7f0000000540)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x9, 0x1f, "92736641", "98292035"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0xf9, 0x46, 0x81, 0x9, 0x8000}}}, &(0x7f0000001500)={0x84, &(0x7f00000006c0)={0x20, 0x7, 0x8e, "379097013ff63d83ec8707fca112f572d329220f1f2ae67c3c341e172435bfaa13f1606914578bba9089e2e578d90d0702af2c14d3cd8f761625558a2a82818f0991af9f20ce108aee78d24e3274026ed204a375072797212b4757c4473b249907afd34ba25b7c4a38ce4d7485d894215bf648ab1ab1ccae4b1cea1ff565861726f3ae98b0fe8e12344e7975931b"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0xc0, 0x1}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x1f}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000900)={0x40, 0xb, 0x2, "8864"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x5933}, &(0x7f0000000980)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000a00)={0x40, 0x19, 0x2, ' _'}, &(0x7f0000001400)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000001440)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000001480)={0x40, 0x1e, 0x1}, &(0x7f00000014c0)={0x40, 0x21, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000a40)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="0000010000008fcae376b24ea0d3de61806eb703e545979db35afce69016172fc7c73d41a67bd66fc41ddd0c4c368c951633f3206fe3e70a9cf50f8c797e381aae172c9c0799726fca9bf79c296a823641c44529006bd962da88cb7b91768d9ccf339820568199da1863752f19295cc01bd13b5b132c11"], 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10) [ 260.920453][ T974] wacom 0003:056A:0043.005E: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 260.929459][ T6] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 260.930233][ T974] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0043.005E/input/input176 [ 260.949964][ T974] wacom 0003:056A:0043.005E: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.3-1/input0 [ 261.079432][ T337] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 261.122061][ T974] usb 4-1: USB disconnect, device number 75 [ 261.169435][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 261.169473][ T1167] usb 5-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 261.183345][ T1167] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.191063][ T1167] usb 5-1: Product: syz [ 261.195039][ T1167] usb 5-1: Manufacturer: syz [ 261.199487][ T1167] usb 5-1: SerialNumber: syz [ 261.204297][ T1167] usb 5-1: config 0 descriptor?? [ 261.259441][ T1991] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 261.439514][ T337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.441703][ T6146] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 261.450422][ T6] usb 3-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 261.468294][ T337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.477912][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.485744][ T337] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 261.494627][ T6] usb 3-1: Product: syz [ 261.498602][ T6] usb 3-1: Manufacturer: syz [ 261.503071][ T337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.510879][ T6] usb 3-1: SerialNumber: syz [ 261.515691][ T6] usb 3-1: config 0 descriptor?? [ 261.520893][ T337] usb 2-1: config 0 descriptor?? executing program 3: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x6b4, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0x2c, 0x3e, 0x56, 0x10, 0x403, 0xfc0c, 0x680a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a2, 0x2, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0xb0, 0x7, 0xb, 0xee, 0xeb, 0x6, 0x3f, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1}, @as_header={0x7, 0x24, 0x1, 0x77, 0x0, 0x1001}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x4, 0x3, 0x6, "6650355d5981"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1f, "", 'Fn'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0x5, 0x1, "6642d4"}]}, @uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x1, 0x0, 0x0, "c22dfc71f9321778"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1, 0x0, 0x5, "9fd90b"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4a, 0x2, 0x1, 0x7f, "5712"}]}], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x1, 0xb5, 0x1, [@generic={0xe3, 0x1, "fbe3905347bd21fb3086a714d214129ad1cc38aadd1a455ffe29358cc11a52727290d4360b3de8678a9c5be1dd7b382f70b5d42dea722e4ccc729c5c206f5a124e9bc21839c21f4b5cfa8ebb1b2653fa1b1194d2b0b4cc3405dfdeeafe83516237319ba05c78fdf9ea9c701ea994050bc516cb23cc0b6b1e4dc5c18f21d1ecd0be8777ac07b5ad123a7e2c02a1bf2a69d86f4a2d7db8e70c44858bb0677dc7d55d769047676f67f930c8036641e1796f4d8e021ccc6f46cbf43e9806427a961172668c2eb400c6e4cd502825047d91b8fdf180a773a5828faa47e88b1a1998f5d8"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x1, 0x5, 0x0, [@generic={0x5c, 0x24, "d6eb75f38a1f4108c23d9cfafcd0d3730c8e2a22fc37858584e423c8a47e05b5a9e7383105bf1e1c4ee593ea651b612c3c242c3331d24e24e0a4d250f5de2e563246b53454d340f666e363b4a3ce1369b74c493ec726d82b728c"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x2, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x43, 0x6}]}}, {{0x9, 0x5, 0x9, 0x8, 0xc51b29c1bd4bee16, 0x4, 0x4, 0x47, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1d, 0x7ff}]}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x2, 0xc8}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x0, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0xc400}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x5, 0x1, 0xfe}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x4, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x81, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x100}, @generic={0xa7, 0x7, "00460d7e0a84d19f9a9dccb877f29496e55ccbf78281e0305ccd99793e1c064e606286e82ec5922b4b7aad0a387811c65ed15ce4a2834b00de91ae48f505682f7418261baccb186e1b328825671124f3b9a1f897a4f7dca94e0e5fd53d38ffee0c623d9cea619f14b0bda4da588fa133a13e616e13b7803693e188b41f089766adcbce9ad7bc1363432b11cc399a68ee8afc89dce49580e7a8ca7474f10b6db7aaecc73f6a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x81, 0x9, 0x92, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x6, 0x3, 0x1, [@generic={0x11, 0x8, "5857d316d88cefc48a04724882f6d9"}, @generic={0x37, 0x0, "5e2752f41f9c7cb5e90d4e89c9f1c197c801284239a8be78a364b46625b38cdb7d67c0906b5b4c05eba2fa9135ce6e312316936cb4"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x9, 0xe, 0x1, 0x0, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x9, 0x9, 0x6}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x5, 0x4, 0xb5}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3f, 0xbd, 0x1, [@generic={0xcc, 0x35, "334cc78da2570b385a26078db10c4ab7e17dc9339f01d9b3764a3603fbf92ea2cb104a444dccd4ca3bf96d63be074e5cf3d44aa4f3f89f24778b1b79b52a8506a6a25601e86a6044049c367c0d879939b876c16bee954aac4a1f9e2b08ef37fd8b1e65d5a98bb7f6d8d0acd09aa37e1a3308ead30d9e28f8ca83a4e739fa931e8e87560da183fc30eb47d87ee28f30343aa40cbff4c7d753b827d92a1f3751133b42e65d8ab068fc448e198292141fd798bcbb87e04507d5167301dd87aed3834c82117a5d3231adde2c"}, @generic={0xcb, 0x24, "57d95e064d6c8da99b21715aff4fdff831ee9b50f3cd822dff34cef34ae70c417268e0ffca632f72630a6936df0489602a44ff3d5d6c15c187746e3a5841a8db163c01946379f00512cecc1ba4c741956dc5e4be6aeddd630792900eb75f8aed17ed03cafd392e483e02f81cdff80355244ff4bbbd2e0202ee86dcf5a0d0132e815fb478007c4d0ba48235afa9b0267cfe1d6f1418d457947ce5b5edba3ddd9573852933830f4dabe6845c8967081fa6516ccae675b6c343259445604d883e2b040bf6afd285f9dc08"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x80, 0x1, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x5}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x1, 0x240, 0x5, 0x2, 0xa6, [@generic={0x80, 0x2c, "6e3300b2d4da826b7ce6ec3b8b566528100cf6aeb1c3e725f6e465f06b19f6b0d093c2d26a179d24e942fcf737882812f8e1f5b9ee95444a9cb7d31cdbbb24b7c0b15ba35498568f80678b2defb09d1e49c78e1f8d9878dee38f864e28dac051fdfdbf08bb0fa58cabe65bdd694a45646a0aec42debcdabecb67f32a942c"}, @generic={0x75, 0x22, "15f7e01d70e9304e521aad05c65d1696bca3df848300e46c3977ff2283cadde397ee24c3db9476bbbc022b03f10cd7d768ec7ff32b48929b0da2812972da0110facf51f2fb62c44f32a76cfe293bbb5dffddff06a539a1eb025a468212b12f2b6c85ef3222e4cc6cb8087123fb3c4dc36514e6"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0x0, 0x6, 0x4, [@generic={0x83, 0xa, "f1b61bde8e23aee691da6fddf1a662d4faf57b33c234367581d403eecb5c217b88667064f6b64062037ea2de5fae3317bdb91a39a260b52364723448a8219bb4955c8837a5f2271f2887964319736516de8b4f372b0746bd07c16ca3e9b001b93f0121980def306598d05f9b7b22acf4e16576d441e3c7b38ec5a19143ece84dbe"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x1, 0x38, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x1a, 0x58, 0x1f}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x201, 0x5, 0x5, 0x6, 0x40, 0x4}, 0xc, &(0x7f0000000e80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x1}]}, 0x1, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x1809}}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000f40)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000013c0)={&(0x7f0000001140)={0x258, 0x20, 0x400, 0x70bd29, 0x25dfdbfe, {0x1d}, [@generic="9f8bbef02fef0636bc0bca3fe397deea7e98e2ef45e28a785572016d7157d43f6ffe44c2b8bcf54865bd23bb8bf4184cf4aa7c8f553a9be09c64375e343dc61eff2a033b71e5d301ecc43412ec504af88c8da9e415dde95411a585ca2964b6748e78deb0bc", @typed={0x8, 0x2d, 0x0, 0x0, @fd}, @typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@empty}, @nested={0x160, 0xf4, 0x0, 0x1, [@typed={0x8, 0xfb, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x4, 0x83}, @generic="fdd6c776e1c72f6e6448c1e798db09c55bc6d84b72262a6bd84f3c456da8d7e52d677fde1cd52ce143cb371cc32a0f9a36d143107fdab7d9c9b9c065bd3c032dae6508b65d3586ab0d4945e8388973811d4af2ac5b84da383465a88e576cf7658c8fd3d9b85ceef613e4336b6e2e0858205e3ca10fa1344747c6c8cd926924b877db08ae772c8f19dc3c3ae7bbe3a31968af581f77b1724189fd391cfe6735d266baa8e001ea42c4e3052958dc2e1257611f4fc47eb4f087c0394cdd3f076fc78c8fb6f310a107d75f3c11bb506ece1ecd7510b1d0a53eeedbffb40c48f65cb1c47aa3dcd4279b900a599951d6c9a87959e9493a", @generic="f6cf8b03aaee437855a513f218b5bc8ee0659b72294dc1c7eacaf6dccf23a7029cf679426e059fcdb72e12bf5c4214ba", @typed={0x5, 0x56, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@empty}, @typed={0xc, 0xca, 0x0, 0x0, @u64=0x8}]}, @generic="9063408c9cc09dbe86e35cb3003e3280104de5550ed71de0af3d98364d9a9e7079bbd83c2b3fc25bcf3a0d644dc7c55d63f53fd225514c79e147df1e1667c69fa71c9650994705279f7a8103e7483a0ebc94fdbadf6f3a896fbf0911d5b9eca3baa7370c48c24d1367232ba455cacc"]}, 0x258}, 0x1, 0x0, 0x0, 0x4000}, 0x40c4) [ 261.559536][ T1167] usb 5-1: MIDIStreaming interface descriptor not found [ 261.567674][ T1167] usb 5-1: USB disconnect, device number 86 [ 261.629584][ T1991] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 261.639211][ T1991] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 261.799587][ T1991] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 261.808548][ T1991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.816343][ T1991] usb 1-1: Product: syz [ 261.820357][ T1991] usb 1-1: Manufacturer: syz [ 261.824691][ T1991] usb 1-1: SerialNumber: syz [ 261.829669][ T1991] usb 1-1: config 0 descriptor?? [ 261.839531][ T6] usb 3-1: MIDIStreaming interface descriptor not found [ 261.848106][ T6] usb 3-1: USB disconnect, device number 87 [ 261.853951][ T6156] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 261.861110][ T6156] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 261.909432][ T974] usb 4-1: new high-speed USB device number 76 using dummy_hcd executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'macvlan1\x00', 0x400}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) close(r0) executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000040)) executing program 4: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x6bd, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0x2c, 0x3e, 0x56, 0x10, 0x403, 0xfc0c, 0x680a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6ab, 0x2, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0xb0, 0x7, 0xb, 0xee, 0xeb, 0x6, 0x3f, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1}, @as_header={0x7, 0x24, 0x1, 0x77, 0x0, 0x1001}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x4, 0x3, 0x6, "6650355d5981"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1f, "", 'Fn'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0x5, 0x1, "6642d4"}]}, @uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x1, 0x0, 0x0, "c22dfc71f9321778"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1, 0x0, 0x5, "9fd90b"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4a, 0x2, 0x1, 0x7f, "5712"}]}], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x1, 0xb5, 0x1, [@generic={0xe3, 0x1, "fbe3905347bd21fb3086a714d214129ad1cc38aadd1a455ffe29358cc11a52727290d4360b3de8678a9c5be1dd7b382f70b5d42dea722e4ccc729c5c206f5a124e9bc21839c21f4b5cfa8ebb1b2653fa1b1194d2b0b4cc3405dfdeeafe83516237319ba05c78fdf9ea9c701ea994050bc516cb23cc0b6b1e4dc5c18f21d1ecd0be8777ac07b5ad123a7e2c02a1bf2a69d86f4a2d7db8e70c44858bb0677dc7d55d769047676f67f930c8036641e1796f4d8e021ccc6f46cbf43e9806427a961172668c2eb400c6e4cd502825047d91b8fdf180a773a5828faa47e88b1a1998f5d8"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x1, 0x5, 0x0, [@generic={0x5c, 0x24, "d6eb75f38a1f4108c23d9cfafcd0d3730c8e2a22fc37858584e423c8a47e05b5a9e7383105bf1e1c4ee593ea651b612c3c242c3331d24e24e0a4d250f5de2e563246b53454d340f666e363b4a3ce1369b74c493ec726d82b728c"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x2, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x43, 0x6}]}}, {{0x9, 0x5, 0x9, 0x8, 0xc51b29c1bd4bee16, 0x4, 0x4, 0x47, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1d, 0x7ff}]}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x2, 0xc8}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x0, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0xc400}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x5, 0x1, 0xfe}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x4, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x81, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x100}, @generic={0xa7, 0x7, "00460d7e0a84d19f9a9dccb877f29496e55ccbf78281e0305ccd99793e1c064e606286e82ec5922b4b7aad0a387811c65ed15ce4a2834b00de91ae48f505682f7418261baccb186e1b328825671124f3b9a1f897a4f7dca94e0e5fd53d38ffee0c623d9cea619f14b0bda4da588fa133a13e616e13b7803693e188b41f089766adcbce9ad7bc1363432b11cc399a68ee8afc89dce49580e7a8ca7474f10b6db7aaecc73f6a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x81, 0x9, 0x92, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x6, 0x3, 0x1, [@generic={0x11, 0x8, "5857d316d88cefc48a04724882f6d9"}, @generic={0x37, 0x0, "5e2752f41f9c7cb5e90d4e89c9f1c197c801284239a8be78a364b46625b38cdb7d67c0906b5b4c05eba2fa9135ce6e312316936cb4"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0xa, 0xe, 0x1, 0x0, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x9, 0x9, 0x6}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x5, 0x4, 0xb5}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3f, 0xbd, 0x1, [@generic={0xcc, 0x35, "334cc78da2570b385a26078db10c4ab7e17dc9339f01d9b3764a3603fbf92ea2cb104a444dccd4ca3bf96d63be074e5cf3d44aa4f3f89f24778b1b79b52a8506a6a25601e86a6044049c367c0d879939b876c16bee954aac4a1f9e2b08ef37fd8b1e65d5a98bb7f6d8d0acd09aa37e1a3308ead30d9e28f8ca83a4e739fa931e8e87560da183fc30eb47d87ee28f30343aa40cbff4c7d753b827d92a1f3751133b42e65d8ab068fc448e198292141fd798bcbb87e04507d5167301dd87aed3834c82117a5d3231adde2c"}, @generic={0xcb, 0x24, "57d95e064d6c8da99b21715aff4fdff831ee9b50f3cd822dff34cef34ae70c417268e0ffca632f72630a6936df0489602a44ff3d5d6c15c187746e3a5841a8db163c01946379f00512cecc1ba4c741956dc5e4be6aeddd630792900eb75f8aed17ed03cafd392e483e02f81cdff80355244ff4bbbd2e0202ee86dcf5a0d0132e815fb478007c4d0ba48235afa9b0267cfe1d6f1418d457947ce5b5edba3ddd9573852933830f4dabe6845c8967081fa6516ccae675b6c343259445604d883e2b040bf6afd285f9dc08"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x80, 0x1, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x5}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x1, 0x240, 0x5, 0x2, 0xa6, [@generic={0x80, 0x2c, "6e3300b2d4da826b7ce6ec3b8b566528100cf6aeb1c3e725f6e465f06b19f6b0d093c2d26a179d24e942fcf737882812f8e1f5b9ee95444a9cb7d31cdbbb24b7c0b15ba35498568f80678b2defb09d1e49c78e1f8d9878dee38f864e28dac051fdfdbf08bb0fa58cabe65bdd694a45646a0aec42debcdabecb67f32a942c"}, @generic={0x75, 0x22, "15f7e01d70e9304e521aad05c65d1696bca3df848300e46c3977ff2283cadde397ee24c3db9476bbbc022b03f10cd7d768ec7ff32b48929b0da2812972da0110facf51f2fb62c44f32a76cfe293bbb5dffddff06a539a1eb025a468212b12f2b6c85ef3222e4cc6cb8087123fb3c4dc36514e6"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0x0, 0x6, 0x4, [@generic={0x83, 0xa, "f1b61bde8e23aee691da6fddf1a662d4faf57b33c234367581d403eecb5c217b88667064f6b64062037ea2de5fae3317bdb91a39a260b52364723448a8219bb4955c8837a5f2271f2887964319736516de8b4f372b0746bd07c16ca3e9b001b93f0121980def306598d05f9b7b22acf4e16576d441e3c7b38ec5a19143ece84dbe"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x1, 0x38, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x1a, 0x58, 0x1f}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x0, 0x3f}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x201, 0x5, 0x5, 0x6, 0x40, 0x4}, 0xc, &(0x7f0000000e80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x1}]}, 0x1, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x1809}}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000f40)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000013c0)={&(0x7f0000001140)={0x258, 0x20, 0x400, 0x70bd29, 0x25dfdbfe, {0x1d}, [@generic="9f8bbef02fef0636bc0bca3fe397deea7e98e2ef45e28a785572016d7157d43f6ffe44c2b8bcf54865bd23bb8bf4184cf4aa7c8f553a9be09c64375e343dc61eff2a033b71e5d301ecc43412ec504af88c8da9e415dde95411a585ca2964b6748e78deb0bc", @typed={0x8, 0x2d, 0x0, 0x0, @fd}, @typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@empty}, @nested={0x160, 0xf4, 0x0, 0x1, [@typed={0x8, 0xfb, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x4, 0x83}, @generic="fdd6c776e1c72f6e6448c1e798db09c55bc6d84b72262a6bd84f3c456da8d7e52d677fde1cd52ce143cb371cc32a0f9a36d143107fdab7d9c9b9c065bd3c032dae6508b65d3586ab0d4945e8388973811d4af2ac5b84da383465a88e576cf7658c8fd3d9b85ceef613e4336b6e2e0858205e3ca10fa1344747c6c8cd926924b877db08ae772c8f19dc3c3ae7bbe3a31968af581f77b1724189fd391cfe6735d266baa8e001ea42c4e3052958dc2e1257611f4fc47eb4f087c0394cdd3f076fc78c8fb6f310a107d75f3c11bb506ece1ecd7510b1d0a53eeedbffb40c48f65cb1c47aa3dcd4279b900a599951d6c9a87959e9493a", @generic="f6cf8b03aaee437855a513f218b5bc8ee0659b72294dc1c7eacaf6dccf23a7029cf679426e059fcdb72e12bf5c4214ba", @typed={0x5, 0x56, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@empty}, @typed={0xc, 0xca, 0x0, 0x0, @u64=0x8}]}, @generic="9063408c9cc09dbe86e35cb3003e3280104de5550ed71de0af3d98364d9a9e7079bbd83c2b3fc25bcf3a0d644dc7c55d63f53fd225514c79e147df1e1667c69fa71c9650994705279f7a8103e7483a0ebc94fdbadf6f3a896fbf0911d5b9eca3baa7370c48c24d1367232ba455cacc"]}, 0x258}, 0x1, 0x0, 0x0, 0x4000}, 0x40c4) [ 262.059505][ T337] usbhid 2-1:0.0: can't add hid device: -71 [ 262.065332][ T337] usbhid: probe of 2-1:0.0 failed with error -71 [ 262.072384][ T337] usb 2-1: USB disconnect, device number 82 [ 262.072525][ T6156] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 262.085387][ T6156] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 262.169457][ T974] usb 4-1: Using ep0 maxpacket: 16 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x0, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000003a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0x10, 0xfc}, 0x20) executing program 2: arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x40000000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) [ 262.309477][ T974] usb 4-1: config 0 has an invalid interface number: 176 but max is 1 [ 262.317576][ T974] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 262.326169][ T974] usb 4-1: config 0 has no interface number 1 [ 262.332066][ T974] usb 4-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 262.342704][ T974] usb 4-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 262.353229][ T974] usb 4-1: config 0 interface 176 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0 [ 262.363013][ T974] usb 4-1: config 0 interface 176 altsetting 7 endpoint 0x9 has invalid maxpacket 60950, setting to 64 [ 262.373855][ T974] usb 4-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 262.384263][ T974] usb 4-1: config 0 interface 176 altsetting 7 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 262.395024][ T974] usb 4-1: config 0 interface 176 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 262.405932][ T974] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 262.416179][ T1167] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 262.423590][ T974] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 262.433910][ T974] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 262.444386][ T974] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 262.453972][ T974] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 262.464240][ T974] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 262.474683][ T974] usb 4-1: config 0 interface 176 has no altsetting 0 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0xfd, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r2]) listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x0) executing program 1: arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x40000000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) [ 262.549468][ T1991] dm9601: No valid MAC address in EEPROM, using 6e:74:19:ae:02:c0 [ 262.585869][ T6171] 9pnet_fd: Insufficient options for proto=fd [ 262.629509][ T60] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 262.659562][ T974] usb 4-1: New USB device found, idVendor=0403, idProduct=fc0c, bcdDevice=68.0a [ 262.668535][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.676371][ T974] usb 4-1: Product: syz [ 262.680530][ T974] usb 4-1: Manufacturer: syz [ 262.684922][ T974] usb 4-1: SerialNumber: syz [ 262.689851][ T974] usb 4-1: config 0 descriptor?? [ 262.699430][ T1167] usb 5-1: Using ep0 maxpacket: 16 [ 262.750146][ T6156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.758417][ T6156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.819463][ T1167] usb 5-1: config 0 has an invalid interface number: 176 but max is 1 [ 262.827648][ T1167] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 262.836242][ T1167] usb 5-1: config 0 has no interface number 1 [ 262.842169][ T1167] usb 5-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 262.852675][ T1167] usb 5-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 262.863465][ T1167] usb 5-1: config 0 interface 176 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0 [ 262.869440][ T330] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 262.873080][ T1167] usb 5-1: config 0 interface 176 altsetting 7 endpoint 0x9 has invalid maxpacket 60950, setting to 64 [ 262.891305][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 262.896256][ T1167] usb 5-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 262.906661][ T1167] usb 5-1: config 0 interface 176 altsetting 7 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 262.917440][ T1167] usb 5-1: config 0 interface 176 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 262.928196][ T1167] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 262.938522][ T1167] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 262.948929][ T1167] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 262.959224][ T1167] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 262.968896][ T974] ftdi_sio 4-1:0.176: FTDI USB Serial Device converter detected [ 262.976424][ T1167] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 262.986879][ T974] ftdi_sio ttyUSB0: unknown device type: 0x680a [ 262.993922][ T974] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 263.001217][ T1167] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 263.011756][ T974] ftdi_sio ttyUSB1: unknown device type: 0x680a [ 263.018564][ T1167] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 263.028951][ T974] usb 4-1: USB disconnect, device number 76 [ 263.035712][ T974] ftdi_sio 4-1:0.176: device disconnected [ 263.041567][ T1167] usb 5-1: config 0 interface 176 has no altsetting 0 [ 263.048671][ T974] ftdi_sio 4-1:0.0: device disconnected [ 263.119429][ T330] usb 2-1: Using ep0 maxpacket: 16 [ 263.169489][ T60] usb 3-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 263.178461][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.186329][ T60] usb 3-1: Product: syz [ 263.190345][ T60] usb 3-1: Manufacturer: syz [ 263.194734][ T60] usb 3-1: SerialNumber: syz [ 263.200447][ T60] usb 3-1: config 0 descriptor?? [ 263.209500][ T1167] usb 5-1: New USB device found, idVendor=0403, idProduct=fc0c, bcdDevice=68.0a [ 263.218399][ T1167] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.226222][ T1167] usb 5-1: Product: syz [ 263.230159][ T1167] usb 5-1: Manufacturer: syz [ 263.234586][ T1167] usb 5-1: SerialNumber: syz [ 263.239550][ T1167] usb 5-1: config 0 descriptor?? [ 263.329459][ T1991] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 263.350631][ T1991] dm9601 1-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, 6e:74:19:ae:02:c0 [ 263.363262][ T1991] usb 1-1: USB disconnect, device number 83 [ 263.369299][ T1991] dm9601 1-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff7fd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r1, r2) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200f1ff8500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r5}, 0x10) ioctl$TUNSETOFFLOAD(r4, 0x4004662b, 0x20001412) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r6 = syz_open_pts(r2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000280)='\x00', 0x0}, 0x30) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0xb, 0x1, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@ifindex=r7, r1, 0x36, 0x2020, 0x0, @prog_id=r8, r9}, 0x20) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2) read(r6, 0x0, 0x2006) timer_create(0x0, &(0x7f00000012c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r10 = gettid() tkill(r10, 0x0) [ 263.399503][ T330] usb 2-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 263.408402][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.416218][ T330] usb 2-1: Product: syz [ 263.420540][ T330] usb 2-1: Manufacturer: syz [ 263.425224][ T330] usb 2-1: SerialNumber: syz [ 263.430131][ T330] usb 2-1: config 0 descriptor?? [ 263.452274][ T6169] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 263.509457][ T6178] serio: Serial port pts0 [ 263.529902][ T1167] ftdi_sio 5-1:0.176: FTDI USB Serial Device converter detected [ 263.537615][ T1167] ftdi_sio ttyUSB0: unknown device type: 0x680a [ 263.544678][ T1167] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 263.552052][ T60] usb 3-1: MIDIStreaming interface descriptor not found [ 263.559260][ T1167] ftdi_sio ttyUSB1: unknown device type: 0x680a [ 263.566416][ T60] usb 3-1: USB disconnect, device number 88 [ 263.573475][ T1167] usb 5-1: USB disconnect, device number 87 [ 263.579985][ T1167] ftdi_sio 5-1:0.176: device disconnected [ 263.586017][ T1167] ftdi_sio 5-1:0.0: device disconnected executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x43, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x8, {0x8, 0xa, "47f882f4d105"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 263.671767][ T6173] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 263.759527][ T330] usb 2-1: MIDIStreaming interface descriptor not found [ 263.767920][ T330] usb 2-1: USB disconnect, device number 83 executing program 2: arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x40000000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1b3200, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000080)=[@acquire_done={0x40106309, 0x0, 0x2}], 0x0, 0x0, 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000040), &(0x7f0000001540)=""/152}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x48) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'xfrm0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000a80)="e1", 0x1, 0x0, &(0x7f0000000980)={0x11, 0x0, r8}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x101}}, @fwd={0xa}]}, {0x0, [0x2e, 0x61]}}, &(0x7f00000004c0)=""/100, 0x40, 0x64, 0x1}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r9, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x10, 0x80, 0x91f, 0xfff, 0x1010, r0, 0x1, '\x00', r8, r10, 0x1, 0x2, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='ext4_da_write_pages_extent\x00', r12}, 0x10) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r13, &(0x7f0000000980), 0x12) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) [ 263.979435][ T974] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 263.996022][ T28] audit: type=1400 audit(1716396190.316:448): avc: denied { set_context_mgr } for pid=6184 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000040)) executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'macvlan1\x00', 0x400}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) close(r0) [ 264.017985][ T28] audit: type=1400 audit(1716396190.336:449): avc: denied { write } for pid=6184 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x0, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000003a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0x10, 0xfc}, 0x20) executing program 4: arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x40000000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0xfd, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfd', @ANYRESHEX=r2]) listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x0) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r4}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='#@/#}+\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) close(r1) executing program 4: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x6b4, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0x2c, 0x3e, 0x56, 0x10, 0x403, 0xfc0c, 0x680a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a2, 0x2, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0xb0, 0x7, 0xb, 0xee, 0xeb, 0x6, 0x3f, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1}, @as_header={0x7, 0x24, 0x1, 0x77, 0x0, 0x1001}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x4, 0x3, 0x6, "6650355d5981"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1f, "", 'Fn'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0x5, 0x1, "6642d4"}]}, @uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x1, 0x0, 0x0, "c22dfc71f9321778"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1, 0x0, 0x5, "9fd90b"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4a, 0x2, 0x1, 0x7f, "5712"}]}], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x1, 0xb5, 0x1, [@generic={0xe3, 0x1, "fbe3905347bd21fb3086a714d214129ad1cc38aadd1a455ffe29358cc11a52727290d4360b3de8678a9c5be1dd7b382f70b5d42dea722e4ccc729c5c206f5a124e9bc21839c21f4b5cfa8ebb1b2653fa1b1194d2b0b4cc3405dfdeeafe83516237319ba05c78fdf9ea9c701ea994050bc516cb23cc0b6b1e4dc5c18f21d1ecd0be8777ac07b5ad123a7e2c02a1bf2a69d86f4a2d7db8e70c44858bb0677dc7d55d769047676f67f930c8036641e1796f4d8e021ccc6f46cbf43e9806427a961172668c2eb400c6e4cd502825047d91b8fdf180a773a5828faa47e88b1a1998f5d8"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x1, 0x5, 0x0, [@generic={0x5c, 0x24, "d6eb75f38a1f4108c23d9cfafcd0d3730c8e2a22fc37858584e423c8a47e05b5a9e7383105bf1e1c4ee593ea651b612c3c242c3331d24e24e0a4d250f5de2e563246b53454d340f666e363b4a3ce1369b74c493ec726d82b728c"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x2, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x43, 0x6}]}}, {{0x9, 0x5, 0x9, 0x8, 0xc51b29c1bd4bee16, 0x4, 0x4, 0x47, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1d, 0x7ff}]}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x2, 0xc8}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x0, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0xc400}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x5, 0x1, 0xfe}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x4, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x81, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x100}, @generic={0xa7, 0x7, "00460d7e0a84d19f9a9dccb877f29496e55ccbf78281e0305ccd99793e1c064e606286e82ec5922b4b7aad0a387811c65ed15ce4a2834b00de91ae48f505682f7418261baccb186e1b328825671124f3b9a1f897a4f7dca94e0e5fd53d38ffee0c623d9cea619f14b0bda4da588fa133a13e616e13b7803693e188b41f089766adcbce9ad7bc1363432b11cc399a68ee8afc89dce49580e7a8ca7474f10b6db7aaecc73f6a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x81, 0x9, 0x92, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x6, 0x3, 0x1, [@generic={0x11, 0x8, "5857d316d88cefc48a04724882f6d9"}, @generic={0x37, 0x0, "5e2752f41f9c7cb5e90d4e89c9f1c197c801284239a8be78a364b46625b38cdb7d67c0906b5b4c05eba2fa9135ce6e312316936cb4"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x9, 0xe, 0x1, 0x0, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x9, 0x9, 0x6}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x5, 0x4, 0xb5}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3f, 0xbd, 0x1, [@generic={0xcc, 0x35, "334cc78da2570b385a26078db10c4ab7e17dc9339f01d9b3764a3603fbf92ea2cb104a444dccd4ca3bf96d63be074e5cf3d44aa4f3f89f24778b1b79b52a8506a6a25601e86a6044049c367c0d879939b876c16bee954aac4a1f9e2b08ef37fd8b1e65d5a98bb7f6d8d0acd09aa37e1a3308ead30d9e28f8ca83a4e739fa931e8e87560da183fc30eb47d87ee28f30343aa40cbff4c7d753b827d92a1f3751133b42e65d8ab068fc448e198292141fd798bcbb87e04507d5167301dd87aed3834c82117a5d3231adde2c"}, @generic={0xcb, 0x24, "57d95e064d6c8da99b21715aff4fdff831ee9b50f3cd822dff34cef34ae70c417268e0ffca632f72630a6936df0489602a44ff3d5d6c15c187746e3a5841a8db163c01946379f00512cecc1ba4c741956dc5e4be6aeddd630792900eb75f8aed17ed03cafd392e483e02f81cdff80355244ff4bbbd2e0202ee86dcf5a0d0132e815fb478007c4d0ba48235afa9b0267cfe1d6f1418d457947ce5b5edba3ddd9573852933830f4dabe6845c8967081fa6516ccae675b6c343259445604d883e2b040bf6afd285f9dc08"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x80, 0x1, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x5}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x1, 0x240, 0x5, 0x2, 0xa6, [@generic={0x80, 0x2c, "6e3300b2d4da826b7ce6ec3b8b566528100cf6aeb1c3e725f6e465f06b19f6b0d093c2d26a179d24e942fcf737882812f8e1f5b9ee95444a9cb7d31cdbbb24b7c0b15ba35498568f80678b2defb09d1e49c78e1f8d9878dee38f864e28dac051fdfdbf08bb0fa58cabe65bdd694a45646a0aec42debcdabecb67f32a942c"}, @generic={0x75, 0x22, "15f7e01d70e9304e521aad05c65d1696bca3df848300e46c3977ff2283cadde397ee24c3db9476bbbc022b03f10cd7d768ec7ff32b48929b0da2812972da0110facf51f2fb62c44f32a76cfe293bbb5dffddff06a539a1eb025a468212b12f2b6c85ef3222e4cc6cb8087123fb3c4dc36514e6"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0x0, 0x6, 0x4, [@generic={0x83, 0xa, "f1b61bde8e23aee691da6fddf1a662d4faf57b33c234367581d403eecb5c217b88667064f6b64062037ea2de5fae3317bdb91a39a260b52364723448a8219bb4955c8837a5f2271f2887964319736516de8b4f372b0746bd07c16ca3e9b001b93f0121980def306598d05f9b7b22acf4e16576d441e3c7b38ec5a19143ece84dbe"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x1, 0x38, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x1a, 0x58, 0x1f}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x201, 0x5, 0x5, 0x6, 0x40, 0x4}, 0xc, &(0x7f0000000e80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x1}]}, 0x1, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x1809}}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000f40)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000013c0)={&(0x7f0000001140)={0x258, 0x20, 0x400, 0x70bd29, 0x25dfdbfe, {0x1d}, [@generic="9f8bbef02fef0636bc0bca3fe397deea7e98e2ef45e28a785572016d7157d43f6ffe44c2b8bcf54865bd23bb8bf4184cf4aa7c8f553a9be09c64375e343dc61eff2a033b71e5d301ecc43412ec504af88c8da9e415dde95411a585ca2964b6748e78deb0bc", @typed={0x8, 0x2d, 0x0, 0x0, @fd}, @typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@empty}, @nested={0x160, 0xf4, 0x0, 0x1, [@typed={0x8, 0xfb, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x4, 0x83}, @generic="fdd6c776e1c72f6e6448c1e798db09c55bc6d84b72262a6bd84f3c456da8d7e52d677fde1cd52ce143cb371cc32a0f9a36d143107fdab7d9c9b9c065bd3c032dae6508b65d3586ab0d4945e8388973811d4af2ac5b84da383465a88e576cf7658c8fd3d9b85ceef613e4336b6e2e0858205e3ca10fa1344747c6c8cd926924b877db08ae772c8f19dc3c3ae7bbe3a31968af581f77b1724189fd391cfe6735d266baa8e001ea42c4e3052958dc2e1257611f4fc47eb4f087c0394cdd3f076fc78c8fb6f310a107d75f3c11bb506ece1ecd7510b1d0a53eeedbffb40c48f65cb1c47aa3dcd4279b900a599951d6c9a87959e9493a", @generic="f6cf8b03aaee437855a513f218b5bc8ee0659b72294dc1c7eacaf6dccf23a7029cf679426e059fcdb72e12bf5c4214ba", @typed={0x5, 0x56, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@empty}, @typed={0xc, 0xca, 0x0, 0x0, @u64=0x8}]}, @generic="9063408c9cc09dbe86e35cb3003e3280104de5550ed71de0af3d98364d9a9e7079bbd83c2b3fc25bcf3a0d644dc7c55d63f53fd225514c79e147df1e1667c69fa71c9650994705279f7a8103e7483a0ebc94fdbadf6f3a896fbf0911d5b9eca3baa7370c48c24d1367232ba455cacc"]}, 0x258}, 0x1, 0x0, 0x0, 0x4000}, 0x40c4) [ 264.114282][ T6193] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 264.131436][ T6195] 9pnet_fd: Insufficient options for proto=fd executing program 1: r0 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff2600000008003950323030302e75"], 0x15) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09220f0000000b449bab59030d34b632660f4b99cb"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) preadv(r2, &(0x7f0000002ac0)=[{0x0}], 0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) write$P9_RMKDIR(r0, &(0x7f0000000380)={0x14, 0x49, 0x2, {0x10, 0x2, 0x8}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000580)='./file0\x00', 0x0, 0x223216, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rmdir(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r9 = openat$cgroup_int(r8, &(0x7f0000000200)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f00000003c0), 0x12) write$cgroup_int(r7, &(0x7f00000000c0), 0x12) ioctl$SIOCSIFHWADDR(r7, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) executing program 3: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001f00)={0x84, &(0x7f0000001ac0)=ANY=[@ANYBLOB="000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x95b, &(0x7f0000000a80)={{0x12, 0x1, 0x110, 0x6, 0x4f, 0x96, 0x10, 0x50d, 0x905c, 0x6061, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x949, 0x3, 0x1, 0x1, 0x90, 0x3f, [{{0x9, 0x4, 0xa1, 0xff, 0x9, 0x8d, 0x16, 0x6c, 0x1, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "f772a8"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1000, 0x81}, {0x6, 0x24, 0x1a, 0x2, 0x33}, [@mdlm_detail={0x4f, 0x24, 0x13, 0x2, "33ee2b68234667107c1eb5e5385b9ed5e96e141bbe53b0ca53391c337170c30444783b2f6312e5a8d405aa2b377a768dd7bcebfa09f9608f572ec3ef03f4f3522d1cb4220e73fedd8f86f4"}]}], [{{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x40, 0xc0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x24, 0x7fff}]}}, {{0x9, 0x5, 0xb, 0xf, 0x38, 0x3f, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x51b80207d6834e75, 0x2, 0x101}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x3ff}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x4, 0x9, 0x1, [@generic={0x74, 0x24, "161f81a67a877f399d362658efedf01763c5400978342735d9a721140a8570d6d16ab90cb20096c0aab8d6d8f1906e2312d25fb3d6f71e15530420d48ae3c44a6006f0b3b8ee00cea6cb7d7acbd92e01b1a6b8e45607ce714b26122ead8ce6d6835386252d1988f79d80ea4539c398ad90c0"}, @generic={0xbb, 0x23, "1c24854133c2a3beed1b5d5e3cace461a7e8e6535262aa6bdc0f6f2f36efffab3a2769c30e07445820c10311b573de8758adf88cf96a9d8082388052c5d700ec84c4a34bd0847f27dd7526b1aad3c88320cfcc3b5c19defcbbe9ec36a5de2c9c1ceeeaf036b88f05021ecedac573adae123a7b7fa7468b9c675f65d16a146bbb2665608d48307b52613767407eb189c55100335c8b530a8599c18b2f6ec3b11edbf4f2c2a4b31b0889260f8c54977e6825ba501c27f49f2838"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x2a, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x13, 0x8001}]}}, {{0x9, 0x5, 0x80, 0x1, 0x8, 0x8, 0x5, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x92, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x9a6a}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x7f, 0x1, 0x0, [@generic={0xc5, 0x2, "0397247edfdea9cf01b2654ad059c40169e99a720bef539a059a16acc35dc09186367286b4aa04260559cdb9b298aaf35d6421001a3c1d32604fc20a33afdc69117a757b83d7f86dbd0885b48aa7f450970ff82148ac8d30b0cfaa256abad4500616b1cc24653f47641c6a13e07d84526bbff5ee93317aa19368127bac185d617a5653b1b428d5c7fea1c5b01898b13edc1608dbfa4c0fbe0f1b35367610762c8fb011d05ab1c2c3437d485963fabbc781fe4ac5802cc87f6bdb44b4042dfc488b961d"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x1, 0xff, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x8, 0xf4}, @generic={0xe5, 0x23, "b4ab3a5cdc152c5bf0d9141f208b9d3ed33d6362d4d162408692b55505c7f43b36d47198208a72b62a7a04c8a91ef11b7d819597ebe5643c02b21e91533857321be273b029f80106c1e2d6ac1f478a5a8d5290c325494406f8c73af8649e938763de3dceb4d74de4c87c1aa00662b570bcf21fe0db247ad27879c3e4c3b09f7ce5e4b73d29095a4f58e00221b142f7ff7994c9bad5043b7a79d6fb5a2d19ba9e3272ca0c84cc8c182803b0d1c0e8517e999c3c1c05a84fc2d67d1460a43cf88c33f6156651918fdb12c8fd96275cd7270a27ac957b673a1820a1ce4900408ec18f5233"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0xe1, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x65}]}}, {{0x9, 0x5, 0xc, 0x0, 0x100, 0x3, 0x2, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x4}]}}]}}, {{0x9, 0x4, 0x9b, 0x2b, 0x7, 0x12, 0xcb, 0x8, 0x0, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1f, 0x1, 0xab, 0xe2, 'B)'}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x80, 0x2, 0x1, 0x0, "0f"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x200, 0x6, 0x1, "cd791a48d8d35b"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x8, 0xff}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x2, 0x0, 0x8, "3090", "4294fa"}]}], [{{0x9, 0x5, 0x80, 0x1, 0x10, 0x5, 0x1f, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}, @generic={0x32, 0x6, "4e83272c560aa1881076203e42739e44e85d2a8e59775ac0233617b56f499ba3fd939833891741f224c8f3cb28dd3ff4"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x0, 0x0, 0x57, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3}, @generic={0xf8, 0x23, "76f11b8396bf4f3fe53ef697da1577cbcdd131170f26caf4a8642ce3f371d23f4a075959654e0cb53f8025f94e35887b5fd5fb222f421ea33f258d2c97369a7ab142966379d9beac9b5f19ef808f1163fc8607ce1f5c2f12029f6196dcde14ae351be97ec7e25208d3eeca533f530482aa09e6db7970adb5b80ab3ca78ed09e8363ad3ebaaf53598ed704fcbaeb57500abdcb2dfa92ad4933e1515086f7b8ff76e56aea9f4533a9b2502511a726430d667a3c8fa9f0be116d2057272c3976405642743a6696f20fb873917714fd8ef150498a082cb662856504f1e7fcbf056112f4e593f1049c2be481e48ac104c2dd745aec96cd1a7"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0x3f, 0x7, 0xf0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xdf, 0x8000}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x1, 0x86, 0x0, [@generic={0x2b, 0x22, "5fbcd2785c72e3a9701a225b26b8d41943f2c645dc3c79d99275ace1b59340c45c89276f64a7d4358d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfa, 0x3}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x7f, 0x6d, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x7fff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x7, 0x1b, 0x8, [@generic={0xbc, 0x21, "217576adcef1ef05b7ba06570012ce09b3176e084282a1c9644705709608d699bdd2555c5580535069b2a9c423024bcc4a4f60cc4b5d87886619244dca3a4c6505cd36347f5deac21ff529a8e74427c2573d668a6c5337b4a76de40687bc17367c57f8b2edb1130c13022ab17add8956d61b425a6d6380113a684fa805c50236c80e1af00bb6b0b56f067b2d6794f2d46b6c28206cc59ae18b7f044dbc38d7ac9091cafada09968537a88e2eb22d72b491a92773966deb69c3c2"}, @generic={0x3c, 0xb, "1e3b3fcacd233d7a3c4fddc50a9deac9b808ecb0aa89aa6d2847cc67fde27a7db4ff6cd3fdae8b50eefb581f8a4bc9c30b2bf1f1a685a1d85670"}]}}, {{0x9, 0x5, 0x3, 0x4, 0xbef, 0x6, 0x1, 0x4, [@generic={0x40, 0x5, "2395cb6f5bc1e6265665ad28678ba3da9260b375670d424af7dc977d3711fa27f35a0e52ae250be82397cb3dfc952c9d4a0953bf24c281aea48e63ed50f8"}, @generic={0x7d, 0x22, "f89baa97d550705f3ccbce25b55836fb178659eda0cce1514d0aa90a4555890aa6d711e55848ca5a42852678e17e92282f8647d94362893c9cd647765222826f5ada192d77b1aadccf0d71e5f47b068b24101c24accc829a4f4204acb68951eb361774943dcf00f1d30a9180c6a2abb38599402a90833b0b6ac351"}]}}]}}, {{0x9, 0x4, 0xa1, 0x0, 0x3, 0x68, 0xd3, 0x9d, 0x3f, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, '|\f'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x8, 0x4}, [@obex={0x5, 0x24, 0x15, 0x4}]}], [{{0x9, 0x5, 0xe, 0x10, 0x400, 0x10, 0x9, 0x40, [@generic={0x17, 0x6, "6ed29930c45f66505faf35fb304fc33e7b6c89322e"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x20, 0x40}]}}, {{0x9, 0x5, 0x9, 0x10, 0x220, 0x7f, 0x5, 0x8, [@generic={0x8c, 0x21, "2f9320c3560bddde1b8dc7284404a51ca28965d650f1de853fcecfdc73507eb45b59aa3f86905771252a9e5cf0dc20730fa5f5e4147be737660639e51a607c6cfc5e8f17ed6ddf83ae2ddbb6a2887998fbf30940a55a05ac53b0ef01a54c4fd1d49a4a39dd360991660c364124a822f19ad6b2aa7f2966ff8501bbcc1745b2494bb6f9a3dc1e0c2c0962"}, @generic={0xd, 0x4, "e26fd2f911c2f06e5b01fd"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ef, 0x2f, 0x6, 0x30, [@generic={0xb1, 0x21, "83fceea2dcf12551b675c3d5c4738b8b00211aa17bdf128afa60d1e2eec381780af4bd0bcff32825b8283ef806a554bd49cb46ede8f73687bf823ec06825867d1266cc308016ddb82bac7aa3a91c1822f4c58e0ef8dbc74ce685f47f41728fc77b7db01871f0546aa3db31282cc19689db27bf01d5cc45a10d6b6d688704485786f0c46bc1c2856835effe5238cc79881d3cc8015a168e1c38c6ed33480fdced8cd7edc3a2f35709a514f664814311"}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x2, 0x1f, 0x9, 0x8, 0x31}, 0x36, &(0x7f0000000140)={0x5, 0xf, 0x36, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xef, 0xff, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x5b, 0xff, 0x4, 0x1, 0x31}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x3, 0x8, 0xff}, @wireless={0xb, 0x10, 0x1, 0x4, 0x9, 0x7a, 0x4, 0x8, 0x1f}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x4, 0x4, 0x6}]}, 0x3, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc0a}}, {0x5f, &(0x7f00000003c0)=@string={0x5f, 0x3, "9790366b6889abe16ddae2700a9cbc61867652a2d3b41805eeb66b8b88eec662b48f9d9ad46177d6c0f5c6b561e910f822e6c20ebf7751352d1f12141fe086f2ed4892bc40db9d00ac0a85de0631c74a5483dcd4b033981308084357d7"}}]}) syz_usb_control_io(r1, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x40, 0xa, 0x52, {0x52, 0x23, "c40bc0a8ee30ebab8fc5db7795e8552553ec71597fc08392f5921ddd11d52800f007557901c9ef565920ba108a62fbc84d170fdea90fbe57cfd8b8efb33fbf0999ceabb68f7a873dae2927c1c7957330"}}, &(0x7f0000000500)={0x0, 0x3, 0x31, @string={0x31, 0x3, "d673fe25ad561efd51270efb7b7e912e3a53691bb0548355443806d7080026b1a43b3d712eeefd8ce29e770c0df639"}}, &(0x7f0000000540)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x9, 0x1f, "92736641", "98292035"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0xf9, 0x46, 0x81, 0x9, 0x8000}}}, &(0x7f0000001500)={0x84, &(0x7f00000006c0)={0x20, 0x7, 0x8e, "379097013ff63d83ec8707fca112f572d329220f1f2ae67c3c341e172435bfaa13f1606914578bba9089e2e578d90d0702af2c14d3cd8f761625558a2a82818f0991af9f20ce108aee78d24e3274026ed204a375072797212b4757c4473b249907afd34ba25b7c4a38ce4d7485d894215bf648ab1ab1ccae4b1cea1ff565861726f3ae98b0fe8e12344e7975931b"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0xc0, 0x1}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x1f}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000900)={0x40, 0xb, 0x2, "8864"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x5933}, &(0x7f0000000980)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000a00)={0x40, 0x19, 0x2, ' _'}, &(0x7f0000001400)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000001440)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000001480)={0x40, 0x1e, 0x1}, &(0x7f00000014c0)={0x40, 0x21, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000a40)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="0000010000008fcae376b24ea0d3de61806eb703e545979db35afce69016172fc7c73d41a67bd66fc41ddd0c4c368c951633f3206fe3e70a9cf50f8c797e381aae172c9c0799726fca9bf79c296a823641c44529006bd962da88cb7b91768d9ccf339820568199da1863752f19295cc01bd13b5b132c11"], 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10) [ 264.249472][ T330] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 264.369509][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.380307][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.389771][ T974] usb 1-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 264.398598][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.406873][ T974] usb 1-1: config 0 descriptor?? [ 264.459467][ T1167] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 264.459467][ T1991] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 264.489562][ T330] usb 3-1: Using ep0 maxpacket: 16 [ 264.559452][ T337] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 264.739473][ T1167] usb 5-1: Using ep0 maxpacket: 16 [ 264.769558][ T330] usb 3-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 264.778533][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.786458][ T330] usb 3-1: Product: syz [ 264.790447][ T330] usb 3-1: Manufacturer: syz [ 264.794853][ T330] usb 3-1: SerialNumber: syz [ 264.799922][ T330] usb 3-1: config 0 descriptor?? [ 264.819529][ T1991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 264.830539][ T1991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 264.841942][ T1991] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 264.854630][ T1991] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.863495][ T1991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.869482][ T1167] usb 5-1: config 0 has an invalid interface number: 176 but max is 1 [ 264.872819][ T1991] usb 2-1: config 0 descriptor?? [ 264.879254][ T1167] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 264.879280][ T1167] usb 5-1: config 0 has no interface number 1 [ 264.879306][ T1167] usb 5-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 264.899543][ T6201] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 264.910428][ T974] wacom 0003:056A:0043.005F: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 264.919525][ T337] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 264.925763][ T974] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0043.005F/input/input179 [ 264.935355][ T337] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 264.946722][ T1167] usb 5-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 264.946752][ T1167] usb 5-1: config 0 interface 176 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0 [ 264.977350][ T1167] usb 5-1: config 0 interface 176 altsetting 7 endpoint 0x9 has invalid maxpacket 60950, setting to 64 [ 264.988575][ T1167] usb 5-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 264.999060][ T974] wacom 0003:056A:0043.005F: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.0-1/input0 [ 265.010733][ T1167] usb 5-1: config 0 interface 176 altsetting 7 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 265.021590][ T1167] usb 5-1: config 0 interface 176 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 265.032260][ T1167] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 265.042515][ T1167] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 265.043658][ T6183] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 265.052839][ T1167] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 265.072273][ T1167] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 265.081726][ T1167] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 265.092065][ T1167] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 265.102512][ T1167] usb 5-1: config 0 interface 176 has no altsetting 0 [ 265.102796][ T5121] usb 1-1: USB disconnect, device number 84 [ 265.119616][ T337] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 265.128461][ T337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.136314][ T337] usb 4-1: Product: syz [ 265.140403][ T330] usb 3-1: MIDIStreaming interface descriptor not found [ 265.147469][ T337] usb 4-1: Manufacturer: syz [ 265.152079][ T337] usb 4-1: SerialNumber: syz [ 265.156953][ T330] usb 3-1: USB disconnect, device number 89 [ 265.163597][ T337] usb 4-1: config 0 descriptor?? [ 265.179491][ T6203] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 265.186516][ T6203] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 265.279632][ T1167] usb 5-1: New USB device found, idVendor=0403, idProduct=fc0c, bcdDevice=68.0a [ 265.288570][ T1167] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.296369][ T1167] usb 5-1: Product: syz [ 265.300328][ T1167] usb 5-1: Manufacturer: syz [ 265.304724][ T1167] usb 5-1: SerialNumber: syz [ 265.309811][ T1167] usb 5-1: config 0 descriptor?? [ 265.400167][ T6203] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 265.407619][ T6203] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 265.419531][ T1991] usbhid 2-1:0.0: can't add hid device: -71 [ 265.425429][ T1991] usbhid: probe of 2-1:0.0 failed with error -71 [ 265.432619][ T1991] usb 2-1: USB disconnect, device number 84 executing program 2: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x6bd, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0x2c, 0x3e, 0x56, 0x10, 0x403, 0xfc0c, 0x680a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6ab, 0x2, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0xb0, 0x7, 0xb, 0xee, 0xeb, 0x6, 0x3f, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1}, @as_header={0x7, 0x24, 0x1, 0x77, 0x0, 0x1001}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x4, 0x3, 0x6, "6650355d5981"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1f, "", 'Fn'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0x5, 0x1, "6642d4"}]}, @uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x1, 0x0, 0x0, "c22dfc71f9321778"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1, 0x0, 0x5, "9fd90b"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4a, 0x2, 0x1, 0x7f, "5712"}]}], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x1, 0xb5, 0x1, [@generic={0xe3, 0x1, "fbe3905347bd21fb3086a714d214129ad1cc38aadd1a455ffe29358cc11a52727290d4360b3de8678a9c5be1dd7b382f70b5d42dea722e4ccc729c5c206f5a124e9bc21839c21f4b5cfa8ebb1b2653fa1b1194d2b0b4cc3405dfdeeafe83516237319ba05c78fdf9ea9c701ea994050bc516cb23cc0b6b1e4dc5c18f21d1ecd0be8777ac07b5ad123a7e2c02a1bf2a69d86f4a2d7db8e70c44858bb0677dc7d55d769047676f67f930c8036641e1796f4d8e021ccc6f46cbf43e9806427a961172668c2eb400c6e4cd502825047d91b8fdf180a773a5828faa47e88b1a1998f5d8"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x1, 0x5, 0x0, [@generic={0x5c, 0x24, "d6eb75f38a1f4108c23d9cfafcd0d3730c8e2a22fc37858584e423c8a47e05b5a9e7383105bf1e1c4ee593ea651b612c3c242c3331d24e24e0a4d250f5de2e563246b53454d340f666e363b4a3ce1369b74c493ec726d82b728c"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x2, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x43, 0x6}]}}, {{0x9, 0x5, 0x9, 0x8, 0xc51b29c1bd4bee16, 0x4, 0x4, 0x47, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1d, 0x7ff}]}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x2, 0xc8}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x0, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0xc400}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x5, 0x1, 0xfe}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x4, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x81, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x100}, @generic={0xa7, 0x7, "00460d7e0a84d19f9a9dccb877f29496e55ccbf78281e0305ccd99793e1c064e606286e82ec5922b4b7aad0a387811c65ed15ce4a2834b00de91ae48f505682f7418261baccb186e1b328825671124f3b9a1f897a4f7dca94e0e5fd53d38ffee0c623d9cea619f14b0bda4da588fa133a13e616e13b7803693e188b41f089766adcbce9ad7bc1363432b11cc399a68ee8afc89dce49580e7a8ca7474f10b6db7aaecc73f6a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x81, 0x9, 0x92, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x6, 0x3, 0x1, [@generic={0x11, 0x8, "5857d316d88cefc48a04724882f6d9"}, @generic={0x37, 0x0, "5e2752f41f9c7cb5e90d4e89c9f1c197c801284239a8be78a364b46625b38cdb7d67c0906b5b4c05eba2fa9135ce6e312316936cb4"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0xa, 0xe, 0x1, 0x0, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x9, 0x9, 0x6}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x5, 0x4, 0xb5}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3f, 0xbd, 0x1, [@generic={0xcc, 0x35, "334cc78da2570b385a26078db10c4ab7e17dc9339f01d9b3764a3603fbf92ea2cb104a444dccd4ca3bf96d63be074e5cf3d44aa4f3f89f24778b1b79b52a8506a6a25601e86a6044049c367c0d879939b876c16bee954aac4a1f9e2b08ef37fd8b1e65d5a98bb7f6d8d0acd09aa37e1a3308ead30d9e28f8ca83a4e739fa931e8e87560da183fc30eb47d87ee28f30343aa40cbff4c7d753b827d92a1f3751133b42e65d8ab068fc448e198292141fd798bcbb87e04507d5167301dd87aed3834c82117a5d3231adde2c"}, @generic={0xcb, 0x24, "57d95e064d6c8da99b21715aff4fdff831ee9b50f3cd822dff34cef34ae70c417268e0ffca632f72630a6936df0489602a44ff3d5d6c15c187746e3a5841a8db163c01946379f00512cecc1ba4c741956dc5e4be6aeddd630792900eb75f8aed17ed03cafd392e483e02f81cdff80355244ff4bbbd2e0202ee86dcf5a0d0132e815fb478007c4d0ba48235afa9b0267cfe1d6f1418d457947ce5b5edba3ddd9573852933830f4dabe6845c8967081fa6516ccae675b6c343259445604d883e2b040bf6afd285f9dc08"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x80, 0x1, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x5}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x1, 0x240, 0x5, 0x2, 0xa6, [@generic={0x80, 0x2c, "6e3300b2d4da826b7ce6ec3b8b566528100cf6aeb1c3e725f6e465f06b19f6b0d093c2d26a179d24e942fcf737882812f8e1f5b9ee95444a9cb7d31cdbbb24b7c0b15ba35498568f80678b2defb09d1e49c78e1f8d9878dee38f864e28dac051fdfdbf08bb0fa58cabe65bdd694a45646a0aec42debcdabecb67f32a942c"}, @generic={0x75, 0x22, "15f7e01d70e9304e521aad05c65d1696bca3df848300e46c3977ff2283cadde397ee24c3db9476bbbc022b03f10cd7d768ec7ff32b48929b0da2812972da0110facf51f2fb62c44f32a76cfe293bbb5dffddff06a539a1eb025a468212b12f2b6c85ef3222e4cc6cb8087123fb3c4dc36514e6"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0x0, 0x6, 0x4, [@generic={0x83, 0xa, "f1b61bde8e23aee691da6fddf1a662d4faf57b33c234367581d403eecb5c217b88667064f6b64062037ea2de5fae3317bdb91a39a260b52364723448a8219bb4955c8837a5f2271f2887964319736516de8b4f372b0746bd07c16ca3e9b001b93f0121980def306598d05f9b7b22acf4e16576d441e3c7b38ec5a19143ece84dbe"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x1, 0x38, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x1a, 0x58, 0x1f}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x0, 0x3f}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x201, 0x5, 0x5, 0x6, 0x40, 0x4}, 0xc, &(0x7f0000000e80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x1}]}, 0x1, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x1809}}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000f40)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000013c0)={&(0x7f0000001140)={0x258, 0x20, 0x400, 0x70bd29, 0x25dfdbfe, {0x1d}, [@generic="9f8bbef02fef0636bc0bca3fe397deea7e98e2ef45e28a785572016d7157d43f6ffe44c2b8bcf54865bd23bb8bf4184cf4aa7c8f553a9be09c64375e343dc61eff2a033b71e5d301ecc43412ec504af88c8da9e415dde95411a585ca2964b6748e78deb0bc", @typed={0x8, 0x2d, 0x0, 0x0, @fd}, @typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@empty}, @nested={0x160, 0xf4, 0x0, 0x1, [@typed={0x8, 0xfb, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x4, 0x83}, @generic="fdd6c776e1c72f6e6448c1e798db09c55bc6d84b72262a6bd84f3c456da8d7e52d677fde1cd52ce143cb371cc32a0f9a36d143107fdab7d9c9b9c065bd3c032dae6508b65d3586ab0d4945e8388973811d4af2ac5b84da383465a88e576cf7658c8fd3d9b85ceef613e4336b6e2e0858205e3ca10fa1344747c6c8cd926924b877db08ae772c8f19dc3c3ae7bbe3a31968af581f77b1724189fd391cfe6735d266baa8e001ea42c4e3052958dc2e1257611f4fc47eb4f087c0394cdd3f076fc78c8fb6f310a107d75f3c11bb506ece1ecd7510b1d0a53eeedbffb40c48f65cb1c47aa3dcd4279b900a599951d6c9a87959e9493a", @generic="f6cf8b03aaee437855a513f218b5bc8ee0659b72294dc1c7eacaf6dccf23a7029cf679426e059fcdb72e12bf5c4214ba", @typed={0x5, 0x56, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@empty}, @typed={0xc, 0xca, 0x0, 0x0, @u64=0x8}]}, @generic="9063408c9cc09dbe86e35cb3003e3280104de5550ed71de0af3d98364d9a9e7079bbd83c2b3fc25bcf3a0d644dc7c55d63f53fd225514c79e147df1e1667c69fa71c9650994705279f7a8103e7483a0ebc94fdbadf6f3a896fbf0911d5b9eca3baa7370c48c24d1367232ba455cacc"]}, 0x258}, 0x1, 0x0, 0x0, 0x4000}, 0x40c4) executing program 0: arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x40000000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) [ 265.589623][ T1167] ftdi_sio 5-1:0.176: FTDI USB Serial Device converter detected [ 265.597271][ T1167] ftdi_sio ttyUSB0: unknown device type: 0x680a [ 265.605189][ T1167] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 265.612648][ T1167] ftdi_sio ttyUSB1: unknown device type: 0x680a [ 265.619890][ T1167] usb 5-1: USB disconnect, device number 88 [ 265.626910][ T1167] ftdi_sio 5-1:0.176: device disconnected [ 265.632936][ T1167] ftdi_sio 5-1:0.0: device disconnected executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) unshare(0x400) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @initdev}, &(0x7f0000000240)=0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x4, 0xfffffff7, 0x1, 0x8, r2, 0xfffffffb, '\x00', r3, r4, 0x5, 0x5, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f00000002c0)}, 0x20) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r7}, 0x10) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r6, 0xc4c03d09, &(0x7f00000006c0)={0x11}) [ 265.839443][ T330] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 265.849465][ T337] dm9601: No valid MAC address in EEPROM, using 6e:74:19:ae:02:c0 [ 265.878271][ T28] audit: type=1400 audit(1716396192.196:450): avc: denied { read append } for pid=6208 comm="syz-executor.1" name="ptp0" dev="devtmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 265.902231][ T1991] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 265.909782][ T28] audit: type=1400 audit(1716396192.196:451): avc: denied { open } for pid=6208 comm="syz-executor.1" path="/dev/ptp0" dev="devtmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000040)) executing program 1: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'macvlan1\x00', 0x400}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) close(r0) [ 265.933429][ T28] audit: type=1400 audit(1716396192.236:452): avc: denied { ioctl } for pid=6208 comm="syz-executor.1" path="/dev/ptp0" dev="devtmpfs" ino=172 ioctlcmd=0x3d09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x0, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000003a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0x10, 0xfc}, 0x20) executing program 1: arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x40000000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0xfd, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfd', @ANYRESHEX=r2]) listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x0) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r4}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='#@/#}+\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) close(r1) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200f1ff8500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r5}, 0x10) ioctl$TUNSETOFFLOAD(r4, 0x4004662b, 0x20001412) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r6 = syz_open_pts(r2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000280)='\x00', 0x0}, 0x30) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0xb, 0x1, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@ifindex=r7, r1, 0x36, 0x2020, 0x0, @prog_id=r8, r9}, 0x20) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2) read(r6, 0x0, 0x2006) timer_create(0x0, &(0x7f00000012c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r10 = gettid() tkill(r10, 0x0) [ 266.032877][ T6217] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 266.050056][ T6203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.058281][ T6203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.067514][ T6219] 9pnet_fd: Insufficient options for proto=fd executing program 4: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = gettid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x63b3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000003918110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0xfdef) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) [ 266.109451][ T330] usb 3-1: Using ep0 maxpacket: 16 [ 266.138371][ T6224] serio: Serial port pts0 [ 266.169585][ T1991] usb 1-1: Using ep0 maxpacket: 16 [ 266.229549][ T330] usb 3-1: config 0 has an invalid interface number: 176 but max is 1 [ 266.237646][ T330] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 266.246766][ T330] usb 3-1: config 0 has no interface number 1 [ 266.252804][ T330] usb 3-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 266.263316][ T330] usb 3-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 266.273925][ T330] usb 3-1: config 0 interface 176 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0 [ 266.283590][ T330] usb 3-1: config 0 interface 176 altsetting 7 endpoint 0x9 has invalid maxpacket 60950, setting to 64 [ 266.294597][ T330] usb 3-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 266.305019][ T330] usb 3-1: config 0 interface 176 altsetting 7 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 266.315809][ T330] usb 3-1: config 0 interface 176 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 266.326548][ T330] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 266.336854][ T330] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 266.347194][ T330] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 266.357780][ T330] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 266.367293][ T330] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 266.377687][ T330] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 266.388020][ T330] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 266.398271][ T330] usb 3-1: config 0 interface 176 has no altsetting 0 [ 266.449525][ T1991] usb 1-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 266.458424][ T1991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.466278][ T1991] usb 1-1: Product: syz [ 266.470216][ T1991] usb 1-1: Manufacturer: syz [ 266.474622][ T1991] usb 1-1: SerialNumber: syz [ 266.479617][ T1991] usb 1-1: config 0 descriptor?? [ 266.559501][ T330] usb 3-1: New USB device found, idVendor=0403, idProduct=fc0c, bcdDevice=68.0a [ 266.568466][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.576377][ T330] usb 3-1: Product: syz [ 266.580290][ T330] usb 3-1: Manufacturer: syz [ 266.584689][ T330] usb 3-1: SerialNumber: syz [ 266.589621][ T330] usb 3-1: config 0 descriptor?? [ 266.629532][ T337] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 266.650694][ T337] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, 6e:74:19:ae:02:c0 [ 266.663725][ T337] usb 4-1: USB disconnect, device number 77 [ 266.669699][ T337] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 266.721568][ T6207] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 266.799529][ T1991] usb 1-1: MIDIStreaming interface descriptor not found [ 266.807437][ T1991] usb 1-1: USB disconnect, device number 85 executing program 1: arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xc, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x40000000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) [ 266.869640][ T330] ftdi_sio 3-1:0.176: FTDI USB Serial Device converter detected [ 266.877332][ T330] ftdi_sio ttyUSB0: unknown device type: 0x680a [ 266.885015][ T330] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 266.892490][ T330] ftdi_sio ttyUSB1: unknown device type: 0x680a [ 266.899553][ T330] usb 3-1: USB disconnect, device number 90 [ 266.906090][ T330] ftdi_sio 3-1:0.176: device disconnected [ 266.912196][ T330] ftdi_sio 3-1:0.0: device disconnected executing program 4: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001f00)={0x84, &(0x7f0000001ac0)=ANY=[@ANYBLOB="000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x95b, &(0x7f0000000a80)={{0x12, 0x1, 0x110, 0x6, 0x4f, 0x96, 0x10, 0x50d, 0x905c, 0x6061, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x949, 0x3, 0x1, 0x1, 0x90, 0x3f, [{{0x9, 0x4, 0xa1, 0xff, 0x9, 0x8d, 0x16, 0x6c, 0x1, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "f772a8"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1000, 0x81}, {0x6, 0x24, 0x1a, 0x2, 0x33}, [@mdlm_detail={0x4f, 0x24, 0x13, 0x2, "33ee2b68234667107c1eb5e5385b9ed5e96e141bbe53b0ca53391c337170c30444783b2f6312e5a8d405aa2b377a768dd7bcebfa09f9608f572ec3ef03f4f3522d1cb4220e73fedd8f86f4"}]}], [{{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x40, 0xc0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x24, 0x7fff}]}}, {{0x9, 0x5, 0xb, 0xf, 0x38, 0x3f, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x51b80207d6834e75, 0x2, 0x101}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x3ff}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x4, 0x9, 0x1, [@generic={0x74, 0x24, "161f81a67a877f399d362658efedf01763c5400978342735d9a721140a8570d6d16ab90cb20096c0aab8d6d8f1906e2312d25fb3d6f71e15530420d48ae3c44a6006f0b3b8ee00cea6cb7d7acbd92e01b1a6b8e45607ce714b26122ead8ce6d6835386252d1988f79d80ea4539c398ad90c0"}, @generic={0xbb, 0x23, "1c24854133c2a3beed1b5d5e3cace461a7e8e6535262aa6bdc0f6f2f36efffab3a2769c30e07445820c10311b573de8758adf88cf96a9d8082388052c5d700ec84c4a34bd0847f27dd7526b1aad3c88320cfcc3b5c19defcbbe9ec36a5de2c9c1ceeeaf036b88f05021ecedac573adae123a7b7fa7468b9c675f65d16a146bbb2665608d48307b52613767407eb189c55100335c8b530a8599c18b2f6ec3b11edbf4f2c2a4b31b0889260f8c54977e6825ba501c27f49f2838"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x2a, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x13, 0x8001}]}}, {{0x9, 0x5, 0x80, 0x1, 0x8, 0x8, 0x5, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x92, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x9a6a}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x7f, 0x1, 0x0, [@generic={0xc5, 0x2, "0397247edfdea9cf01b2654ad059c40169e99a720bef539a059a16acc35dc09186367286b4aa04260559cdb9b298aaf35d6421001a3c1d32604fc20a33afdc69117a757b83d7f86dbd0885b48aa7f450970ff82148ac8d30b0cfaa256abad4500616b1cc24653f47641c6a13e07d84526bbff5ee93317aa19368127bac185d617a5653b1b428d5c7fea1c5b01898b13edc1608dbfa4c0fbe0f1b35367610762c8fb011d05ab1c2c3437d485963fabbc781fe4ac5802cc87f6bdb44b4042dfc488b961d"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x1, 0xff, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x8, 0xf4}, @generic={0xe5, 0x23, "b4ab3a5cdc152c5bf0d9141f208b9d3ed33d6362d4d162408692b55505c7f43b36d47198208a72b62a7a04c8a91ef11b7d819597ebe5643c02b21e91533857321be273b029f80106c1e2d6ac1f478a5a8d5290c325494406f8c73af8649e938763de3dceb4d74de4c87c1aa00662b570bcf21fe0db247ad27879c3e4c3b09f7ce5e4b73d29095a4f58e00221b142f7ff7994c9bad5043b7a79d6fb5a2d19ba9e3272ca0c84cc8c182803b0d1c0e8517e999c3c1c05a84fc2d67d1460a43cf88c33f6156651918fdb12c8fd96275cd7270a27ac957b673a1820a1ce4900408ec18f5233"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0xe1, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x65}]}}, {{0x9, 0x5, 0xc, 0x0, 0x100, 0x3, 0x2, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x4}]}}]}}, {{0x9, 0x4, 0x9b, 0x2b, 0x7, 0x12, 0xcb, 0x8, 0x0, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1f, 0x1, 0xab, 0xe2, 'B)'}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x80, 0x2, 0x1, 0x0, "0f"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x200, 0x6, 0x1, "cd791a48d8d35b"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x8, 0xff}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x2, 0x0, 0x8, "3090", "4294fa"}]}], [{{0x9, 0x5, 0x80, 0x1, 0x10, 0x5, 0x1f, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}, @generic={0x32, 0x6, "4e83272c560aa1881076203e42739e44e85d2a8e59775ac0233617b56f499ba3fd939833891741f224c8f3cb28dd3ff4"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x0, 0x0, 0x57, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3}, @generic={0xf8, 0x23, "76f11b8396bf4f3fe53ef697da1577cbcdd131170f26caf4a8642ce3f371d23f4a075959654e0cb53f8025f94e35887b5fd5fb222f421ea33f258d2c97369a7ab142966379d9beac9b5f19ef808f1163fc8607ce1f5c2f12029f6196dcde14ae351be97ec7e25208d3eeca533f530482aa09e6db7970adb5b80ab3ca78ed09e8363ad3ebaaf53598ed704fcbaeb57500abdcb2dfa92ad4933e1515086f7b8ff76e56aea9f4533a9b2502511a726430d667a3c8fa9f0be116d2057272c3976405642743a6696f20fb873917714fd8ef150498a082cb662856504f1e7fcbf056112f4e593f1049c2be481e48ac104c2dd745aec96cd1a7"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0x3f, 0x7, 0xf0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xdf, 0x8000}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x1, 0x86, 0x0, [@generic={0x2b, 0x22, "5fbcd2785c72e3a9701a225b26b8d41943f2c645dc3c79d99275ace1b59340c45c89276f64a7d4358d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfa, 0x3}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x7f, 0x6d, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x7fff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x7, 0x1b, 0x8, [@generic={0xbc, 0x21, "217576adcef1ef05b7ba06570012ce09b3176e084282a1c9644705709608d699bdd2555c5580535069b2a9c423024bcc4a4f60cc4b5d87886619244dca3a4c6505cd36347f5deac21ff529a8e74427c2573d668a6c5337b4a76de40687bc17367c57f8b2edb1130c13022ab17add8956d61b425a6d6380113a684fa805c50236c80e1af00bb6b0b56f067b2d6794f2d46b6c28206cc59ae18b7f044dbc38d7ac9091cafada09968537a88e2eb22d72b491a92773966deb69c3c2"}, @generic={0x3c, 0xb, "1e3b3fcacd233d7a3c4fddc50a9deac9b808ecb0aa89aa6d2847cc67fde27a7db4ff6cd3fdae8b50eefb581f8a4bc9c30b2bf1f1a685a1d85670"}]}}, {{0x9, 0x5, 0x3, 0x4, 0xbef, 0x6, 0x1, 0x4, [@generic={0x40, 0x5, "2395cb6f5bc1e6265665ad28678ba3da9260b375670d424af7dc977d3711fa27f35a0e52ae250be82397cb3dfc952c9d4a0953bf24c281aea48e63ed50f8"}, @generic={0x7d, 0x22, "f89baa97d550705f3ccbce25b55836fb178659eda0cce1514d0aa90a4555890aa6d711e55848ca5a42852678e17e92282f8647d94362893c9cd647765222826f5ada192d77b1aadccf0d71e5f47b068b24101c24accc829a4f4204acb68951eb361774943dcf00f1d30a9180c6a2abb38599402a90833b0b6ac351"}]}}]}}, {{0x9, 0x4, 0xa1, 0x0, 0x3, 0x68, 0xd3, 0x9d, 0x3f, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, '|\f'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x8, 0x4}, [@obex={0x5, 0x24, 0x15, 0x4}]}], [{{0x9, 0x5, 0xe, 0x10, 0x400, 0x10, 0x9, 0x40, [@generic={0x17, 0x6, "6ed29930c45f66505faf35fb304fc33e7b6c89322e"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x20, 0x40}]}}, {{0x9, 0x5, 0x9, 0x10, 0x220, 0x7f, 0x5, 0x8, [@generic={0x8c, 0x21, "2f9320c3560bddde1b8dc7284404a51ca28965d650f1de853fcecfdc73507eb45b59aa3f86905771252a9e5cf0dc20730fa5f5e4147be737660639e51a607c6cfc5e8f17ed6ddf83ae2ddbb6a2887998fbf30940a55a05ac53b0ef01a54c4fd1d49a4a39dd360991660c364124a822f19ad6b2aa7f2966ff8501bbcc1745b2494bb6f9a3dc1e0c2c0962"}, @generic={0xd, 0x4, "e26fd2f911c2f06e5b01fd"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ef, 0x2f, 0x6, 0x30, [@generic={0xb1, 0x21, "83fceea2dcf12551b675c3d5c4738b8b00211aa17bdf128afa60d1e2eec381780af4bd0bcff32825b8283ef806a554bd49cb46ede8f73687bf823ec06825867d1266cc308016ddb82bac7aa3a91c1822f4c58e0ef8dbc74ce685f47f41728fc77b7db01871f0546aa3db31282cc19689db27bf01d5cc45a10d6b6d688704485786f0c46bc1c2856835effe5238cc79881d3cc8015a168e1c38c6ed33480fdced8cd7edc3a2f35709a514f664814311"}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x2, 0x1f, 0x9, 0x8, 0x31}, 0x36, &(0x7f0000000140)={0x5, 0xf, 0x36, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xef, 0xff, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x5b, 0xff, 0x4, 0x1, 0x31}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x3, 0x8, 0xff}, @wireless={0xb, 0x10, 0x1, 0x4, 0x9, 0x7a, 0x4, 0x8, 0x1f}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x4, 0x4, 0x6}]}, 0x3, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc0a}}, {0x5f, &(0x7f00000003c0)=@string={0x5f, 0x3, "9790366b6889abe16ddae2700a9cbc61867652a2d3b41805eeb66b8b88eec662b48f9d9ad46177d6c0f5c6b561e910f822e6c20ebf7751352d1f12141fe086f2ed4892bc40db9d00ac0a85de0631c74a5483dcd4b033981308084357d7"}}]}) syz_usb_control_io(r1, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x40, 0xa, 0x52, {0x52, 0x23, "c40bc0a8ee30ebab8fc5db7795e8552553ec71597fc08392f5921ddd11d52800f007557901c9ef565920ba108a62fbc84d170fdea90fbe57cfd8b8efb33fbf0999ceabb68f7a873dae2927c1c7957330"}}, &(0x7f0000000500)={0x0, 0x3, 0x31, @string={0x31, 0x3, "d673fe25ad561efd51270efb7b7e912e3a53691bb0548355443806d7080026b1a43b3d712eeefd8ce29e770c0df639"}}, &(0x7f0000000540)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x9, 0x1f, "92736641", "98292035"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0xf9, 0x46, 0x81, 0x9, 0x8000}}}, &(0x7f0000001500)={0x84, &(0x7f00000006c0)={0x20, 0x7, 0x8e, "379097013ff63d83ec8707fca112f572d329220f1f2ae67c3c341e172435bfaa13f1606914578bba9089e2e578d90d0702af2c14d3cd8f761625558a2a82818f0991af9f20ce108aee78d24e3274026ed204a375072797212b4757c4473b249907afd34ba25b7c4a38ce4d7485d894215bf648ab1ab1ccae4b1cea1ff565861726f3ae98b0fe8e12344e7975931b"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0xc0, 0x1}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x1f}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000900)={0x40, 0xb, 0x2, "8864"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x5933}, &(0x7f0000000980)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000a00)={0x40, 0x19, 0x2, ' _'}, &(0x7f0000001400)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000001440)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000001480)={0x40, 0x1e, 0x1}, &(0x7f00000014c0)={0x40, 0x21, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000a40)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="0000010000008fcae376b24ea0d3de61806eb703e545979db35afce69016172fc7c73d41a67bd66fc41ddd0c4c368c951633f3206fe3e70a9cf50f8c797e381aae172c9c0799726fca9bf79c296a823641c44529006bd962da88cb7b91768d9ccf339820568199da1863752f19295cc01bd13b5b132c11"], 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={0x0}}, 0x0) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff7fd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r1, r2) executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ext4_sync_file_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='ext4_sync_file_exit\x00', r3}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r3}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='#@/#}+\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) close(r1) [ 267.016159][ T6233] Zero length message leads to an empty skb executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) readv(r2, &(0x7f0000001900)=[{0x0, 0x18}, {&(0x7f0000000040)=""/65, 0x41}], 0x2) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="af00000000000000eaffffffffffffff9500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000e000010100002800400040008000200000000000c00018008000100", @ANYRES32], 0x30}}, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x400145042, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r4, 0x8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000001140)=""/4086, &(0x7f0000000180)=0xff6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000100)={'syz1\x00', {}, 0x7, [0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffff8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}, 0x45c) executing program 3: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001f00)={0x84, &(0x7f0000001ac0)=ANY=[@ANYBLOB="000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x95b, &(0x7f0000000a80)={{0x12, 0x1, 0x110, 0x6, 0x4f, 0x96, 0x10, 0x50d, 0x905c, 0x6061, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x949, 0x3, 0x1, 0x1, 0x90, 0x3f, [{{0x9, 0x4, 0xa1, 0xff, 0x9, 0x8d, 0x16, 0x6c, 0x1, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "f772a8"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1000, 0x81}, {0x6, 0x24, 0x1a, 0x2, 0x33}, [@mdlm_detail={0x4f, 0x24, 0x13, 0x2, "33ee2b68234667107c1eb5e5385b9ed5e96e141bbe53b0ca53391c337170c30444783b2f6312e5a8d405aa2b377a768dd7bcebfa09f9608f572ec3ef03f4f3522d1cb4220e73fedd8f86f4"}]}], [{{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x40, 0xc0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x24, 0x7fff}]}}, {{0x9, 0x5, 0xb, 0xf, 0x38, 0x3f, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x51b80207d6834e75, 0x2, 0x101}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x3ff}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x4, 0x9, 0x1, [@generic={0x74, 0x24, "161f81a67a877f399d362658efedf01763c5400978342735d9a721140a8570d6d16ab90cb20096c0aab8d6d8f1906e2312d25fb3d6f71e15530420d48ae3c44a6006f0b3b8ee00cea6cb7d7acbd92e01b1a6b8e45607ce714b26122ead8ce6d6835386252d1988f79d80ea4539c398ad90c0"}, @generic={0xbb, 0x23, "1c24854133c2a3beed1b5d5e3cace461a7e8e6535262aa6bdc0f6f2f36efffab3a2769c30e07445820c10311b573de8758adf88cf96a9d8082388052c5d700ec84c4a34bd0847f27dd7526b1aad3c88320cfcc3b5c19defcbbe9ec36a5de2c9c1ceeeaf036b88f05021ecedac573adae123a7b7fa7468b9c675f65d16a146bbb2665608d48307b52613767407eb189c55100335c8b530a8599c18b2f6ec3b11edbf4f2c2a4b31b0889260f8c54977e6825ba501c27f49f2838"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x2a, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x13, 0x8001}]}}, {{0x9, 0x5, 0x80, 0x1, 0x8, 0x8, 0x5, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x92, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x9a6a}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x7f, 0x1, 0x0, [@generic={0xc5, 0x2, "0397247edfdea9cf01b2654ad059c40169e99a720bef539a059a16acc35dc09186367286b4aa04260559cdb9b298aaf35d6421001a3c1d32604fc20a33afdc69117a757b83d7f86dbd0885b48aa7f450970ff82148ac8d30b0cfaa256abad4500616b1cc24653f47641c6a13e07d84526bbff5ee93317aa19368127bac185d617a5653b1b428d5c7fea1c5b01898b13edc1608dbfa4c0fbe0f1b35367610762c8fb011d05ab1c2c3437d485963fabbc781fe4ac5802cc87f6bdb44b4042dfc488b961d"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x1, 0xff, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x8, 0xf4}, @generic={0xe5, 0x23, "b4ab3a5cdc152c5bf0d9141f208b9d3ed33d6362d4d162408692b55505c7f43b36d47198208a72b62a7a04c8a91ef11b7d819597ebe5643c02b21e91533857321be273b029f80106c1e2d6ac1f478a5a8d5290c325494406f8c73af8649e938763de3dceb4d74de4c87c1aa00662b570bcf21fe0db247ad27879c3e4c3b09f7ce5e4b73d29095a4f58e00221b142f7ff7994c9bad5043b7a79d6fb5a2d19ba9e3272ca0c84cc8c182803b0d1c0e8517e999c3c1c05a84fc2d67d1460a43cf88c33f6156651918fdb12c8fd96275cd7270a27ac957b673a1820a1ce4900408ec18f5233"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0xe1, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x65}]}}, {{0x9, 0x5, 0xc, 0x0, 0x100, 0x3, 0x2, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x4}]}}]}}, {{0x9, 0x4, 0x9b, 0x2b, 0x7, 0x12, 0xcb, 0x8, 0x0, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1f, 0x1, 0xab, 0xe2, 'B)'}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x80, 0x2, 0x1, 0x0, "0f"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x200, 0x6, 0x1, "cd791a48d8d35b"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x8, 0xff}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x2, 0x0, 0x8, "3090", "4294fa"}]}], [{{0x9, 0x5, 0x80, 0x1, 0x10, 0x5, 0x1f, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}, @generic={0x32, 0x6, "4e83272c560aa1881076203e42739e44e85d2a8e59775ac0233617b56f499ba3fd939833891741f224c8f3cb28dd3ff4"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x0, 0x0, 0x57, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3}, @generic={0xf8, 0x23, "76f11b8396bf4f3fe53ef697da1577cbcdd131170f26caf4a8642ce3f371d23f4a075959654e0cb53f8025f94e35887b5fd5fb222f421ea33f258d2c97369a7ab142966379d9beac9b5f19ef808f1163fc8607ce1f5c2f12029f6196dcde14ae351be97ec7e25208d3eeca533f530482aa09e6db7970adb5b80ab3ca78ed09e8363ad3ebaaf53598ed704fcbaeb57500abdcb2dfa92ad4933e1515086f7b8ff76e56aea9f4533a9b2502511a726430d667a3c8fa9f0be116d2057272c3976405642743a6696f20fb873917714fd8ef150498a082cb662856504f1e7fcbf056112f4e593f1049c2be481e48ac104c2dd745aec96cd1a7"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0x3f, 0x7, 0xf0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xdf, 0x8000}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x1, 0x86, 0x0, [@generic={0x2b, 0x22, "5fbcd2785c72e3a9701a225b26b8d41943f2c645dc3c79d99275ace1b59340c45c89276f64a7d4358d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfa, 0x3}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x7f, 0x6d, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x7fff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x7, 0x1b, 0x8, [@generic={0xbc, 0x21, "217576adcef1ef05b7ba06570012ce09b3176e084282a1c9644705709608d699bdd2555c5580535069b2a9c423024bcc4a4f60cc4b5d87886619244dca3a4c6505cd36347f5deac21ff529a8e74427c2573d668a6c5337b4a76de40687bc17367c57f8b2edb1130c13022ab17add8956d61b425a6d6380113a684fa805c50236c80e1af00bb6b0b56f067b2d6794f2d46b6c28206cc59ae18b7f044dbc38d7ac9091cafada09968537a88e2eb22d72b491a92773966deb69c3c2"}, @generic={0x3c, 0xb, "1e3b3fcacd233d7a3c4fddc50a9deac9b808ecb0aa89aa6d2847cc67fde27a7db4ff6cd3fdae8b50eefb581f8a4bc9c30b2bf1f1a685a1d85670"}]}}, {{0x9, 0x5, 0x3, 0x4, 0xbef, 0x6, 0x1, 0x4, [@generic={0x40, 0x5, "2395cb6f5bc1e6265665ad28678ba3da9260b375670d424af7dc977d3711fa27f35a0e52ae250be82397cb3dfc952c9d4a0953bf24c281aea48e63ed50f8"}, @generic={0x7d, 0x22, "f89baa97d550705f3ccbce25b55836fb178659eda0cce1514d0aa90a4555890aa6d711e55848ca5a42852678e17e92282f8647d94362893c9cd647765222826f5ada192d77b1aadccf0d71e5f47b068b24101c24accc829a4f4204acb68951eb361774943dcf00f1d30a9180c6a2abb38599402a90833b0b6ac351"}]}}]}}, {{0x9, 0x4, 0xa1, 0x0, 0x3, 0x68, 0xd3, 0x9d, 0x3f, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, '|\f'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x8, 0x4}, [@obex={0x5, 0x24, 0x15, 0x4}]}], [{{0x9, 0x5, 0xe, 0x10, 0x400, 0x10, 0x9, 0x40, [@generic={0x17, 0x6, "6ed29930c45f66505faf35fb304fc33e7b6c89322e"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x20, 0x40}]}}, {{0x9, 0x5, 0x9, 0x10, 0x220, 0x7f, 0x5, 0x8, [@generic={0x8c, 0x21, "2f9320c3560bddde1b8dc7284404a51ca28965d650f1de853fcecfdc73507eb45b59aa3f86905771252a9e5cf0dc20730fa5f5e4147be737660639e51a607c6cfc5e8f17ed6ddf83ae2ddbb6a2887998fbf30940a55a05ac53b0ef01a54c4fd1d49a4a39dd360991660c364124a822f19ad6b2aa7f2966ff8501bbcc1745b2494bb6f9a3dc1e0c2c0962"}, @generic={0xd, 0x4, "e26fd2f911c2f06e5b01fd"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ef, 0x2f, 0x6, 0x30, [@generic={0xb1, 0x21, "83fceea2dcf12551b675c3d5c4738b8b00211aa17bdf128afa60d1e2eec381780af4bd0bcff32825b8283ef806a554bd49cb46ede8f73687bf823ec06825867d1266cc308016ddb82bac7aa3a91c1822f4c58e0ef8dbc74ce685f47f41728fc77b7db01871f0546aa3db31282cc19689db27bf01d5cc45a10d6b6d688704485786f0c46bc1c2856835effe5238cc79881d3cc8015a168e1c38c6ed33480fdced8cd7edc3a2f35709a514f664814311"}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x2, 0x1f, 0x9, 0x8, 0x31}, 0x36, &(0x7f0000000140)={0x5, 0xf, 0x36, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xef, 0xff, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x5b, 0xff, 0x4, 0x1, 0x31}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x3, 0x8, 0xff}, @wireless={0xb, 0x10, 0x1, 0x4, 0x9, 0x7a, 0x4, 0x8, 0x1f}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x4, 0x4, 0x6}]}, 0x3, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc0a}}, {0x5f, &(0x7f00000003c0)=@string={0x5f, 0x3, "9790366b6889abe16ddae2700a9cbc61867652a2d3b41805eeb66b8b88eec662b48f9d9ad46177d6c0f5c6b561e910f822e6c20ebf7751352d1f12141fe086f2ed4892bc40db9d00ac0a85de0631c74a5483dcd4b033981308084357d7"}}]}) syz_usb_control_io(r1, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x40, 0xa, 0x52, {0x52, 0x23, "c40bc0a8ee30ebab8fc5db7795e8552553ec71597fc08392f5921ddd11d52800f007557901c9ef565920ba108a62fbc84d170fdea90fbe57cfd8b8efb33fbf0999ceabb68f7a873dae2927c1c7957330"}}, &(0x7f0000000500)={0x0, 0x3, 0x31, @string={0x31, 0x3, "d673fe25ad561efd51270efb7b7e912e3a53691bb0548355443806d7080026b1a43b3d712eeefd8ce29e770c0df639"}}, &(0x7f0000000540)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x9, 0x1f, "92736641", "98292035"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0xf9, 0x46, 0x81, 0x9, 0x8000}}}, &(0x7f0000001500)={0x84, &(0x7f00000006c0)={0x20, 0x7, 0x8e, "379097013ff63d83ec8707fca112f572d329220f1f2ae67c3c341e172435bfaa13f1606914578bba9089e2e578d90d0702af2c14d3cd8f761625558a2a82818f0991af9f20ce108aee78d24e3274026ed204a375072797212b4757c4473b249907afd34ba25b7c4a38ce4d7485d894215bf648ab1ab1ccae4b1cea1ff565861726f3ae98b0fe8e12344e7975931b"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0xc0, 0x1}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x1f}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000900)={0x40, 0xb, 0x2, "8864"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x5933}, &(0x7f0000000980)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000a00)={0x40, 0x19, 0x2, ' _'}, &(0x7f0000001400)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000001440)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000001480)={0x40, 0x1e, 0x1}, &(0x7f00000014c0)={0x40, 0x21, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000a40)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="0000010000008fcae376b24ea0d3de61806eb703e545979db35afce69016172fc7c73d41a67bd66fc41ddd0c4c368c951633f3206fe3e70a9cf50f8c797e381aae172c9c0799726fca9bf79c296a823641c44529006bd962da88cb7b91768d9ccf339820568199da1863752f19295cc01bd13b5b132c11"], 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10) executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1548f5e0b33006bd1049ca45bd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc96eb384dbb4268c50943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906bde2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75"], 0x1, 0x5511, &(0x7f0000015b80)="$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") mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000240)='./file0\x00', &(0x7f0000000080), &(0x7f0000000500)=@v2, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[], 0x2008}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5}, 0x48) close(r4) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x1}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x39}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44040}, 0x800) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r5}, &(0x7f0000000400), &(0x7f0000000540)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000700)='mm_lru_insertion\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r7}, 0x10) [ 267.189457][ T6] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 267.259439][ T337] usb 5-1: new high-speed USB device number 89 using dummy_hcd executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6, 0x12, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e23, 0x8}}}}}, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000000), r1, 0x0, 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x11}}, 0x120) clock_gettime(0x0, &(0x7f00000002c0)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) ppoll(&(0x7f0000000280)=[{r0, 0x100}, {r4, 0x6e}, {}, {r3, 0x20}, {0xffffffffffffffff, 0x4110}, {r5, 0x4048}, {r5, 0xa}], 0x7, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) futex(&(0x7f0000001300)=0x80000001, 0x800000000006, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r7 = signalfd(0xffffffffffffffff, &(0x7f00000002c0), 0x8) read$FUSE(r7, &(0x7f0000002900)={0x2020}, 0x2020) pselect6(0x40, &(0x7f00000000c0)={0x80000000, 0x5, 0x7, 0xe54, 0x0, 0x1, 0x3, 0x1}, &(0x7f0000000180)={0x2, 0x4, 0x1ff, 0xcdce, 0x8000000000000001, 0x1, 0x401, 0x80000000}, &(0x7f00000001c0)={0x1000, 0x10000, 0x101, 0xffffffff, 0x8, 0x6, 0x8000, 0x9ca9}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000440)={&(0x7f0000000400)={[0x81]}, 0x8}) [ 267.343001][ T6247] loop0: detected capacity change from 0 to 40427 [ 267.350512][ T6247] F2FS-fs (loop0): invalid crc value [ 267.357107][ T6247] F2FS-fs (loop0): Found nat_bits in checkpoint [ 267.381398][ T6247] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 267.388887][ T28] audit: type=1400 audit(1716396193.706:453): avc: denied { mount } for pid=6246 comm="syz-executor.0" name="/" dev="loop0" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 267.411196][ T974] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 267.419189][ T28] audit: type=1400 audit(1716396193.716:454): avc: denied { mounton } for pid=6246 comm="syz-executor.0" path="/root/syzkaller-testdir2516533289/syzkaller.mrOXJI/93/file0/bus" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 267.447164][ T28] audit: type=1400 audit(1716396193.716:455): avc: denied { setattr } for pid=6246 comm="syz-executor.0" name="work" dev="loop0" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 267.447519][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 267.494171][ T28] audit: type=1400 audit(1716396193.716:456): avc: denied { remove_name } for pid=6246 comm="syz-executor.0" name="#54" dev="loop0" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 267.530710][ T28] audit: type=1400 audit(1716396193.716:457): avc: denied { rename } for pid=6246 comm="syz-executor.0" name="#54" dev="loop0" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 executing program 0: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = gettid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x63b3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000003918110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0xfdef) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) [ 267.614955][ T5129] syz-executor.0: attempt to access beyond end of device [ 267.614955][ T5129] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 267.652414][ T5129] syz-executor.0: attempt to access beyond end of device [ 267.652414][ T5129] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 267.669813][ T337] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 267.684577][ T337] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 267.786026][ T6] usb 2-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 267.801051][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.809229][ T6] usb 2-1: Product: syz [ 267.826055][ T6] usb 2-1: Manufacturer: syz [ 267.831015][ T6] usb 2-1: SerialNumber: syz [ 267.853088][ T6] usb 2-1: config 0 descriptor?? [ 267.860810][ T974] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 267.872897][ T974] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 267.892760][ T337] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 267.903986][ T337] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.912493][ T337] usb 5-1: Product: syz [ 267.916774][ T337] usb 5-1: Manufacturer: syz [ 267.932255][ T337] usb 5-1: SerialNumber: syz [ 267.951161][ T337] usb 5-1: config 0 descriptor?? [ 267.988275][ T6231] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 267.998252][ T6231] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 268.097721][ T4650] kworker/u4:61: attempt to access beyond end of device [ 268.097721][ T4650] loop0: rw=2049, sector=40960, nr_sectors = 128 limit=40427 [ 268.118461][ T974] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 268.374031][ T6231] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 268.466889][ T6231] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 268.503131][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.518362][ T974] usb 4-1: Product: syz [ 268.530864][ T974] usb 4-1: Manufacturer: syz executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200f1ff8500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r5}, 0x10) ioctl$TUNSETOFFLOAD(r4, 0x4004662b, 0x20001412) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r6 = syz_open_pts(r2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000280)='\x00', 0x0}, 0x30) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0xb, 0x1, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@ifindex=r7, r1, 0x36, 0x2020, 0x0, @prog_id=r8, r9}, 0x20) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2) read(r6, 0x0, 0x2006) timer_create(0x0, &(0x7f00000012c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r10 = gettid() tkill(r10, 0x0) executing program 0: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'macvlan1\x00', 0x400}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) close(r0) [ 268.649466][ T974] usb 4-1: SerialNumber: syz [ 268.654599][ T974] usb 4-1: config 0 descriptor?? [ 268.679849][ T6245] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 268.687114][ T6245] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x43, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x6}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x8, {0x8, 0xa, "47f882f4d105"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 268.707232][ T6259] serio: Serial port pts0 [ 268.711764][ T6] usb 2-1: MIDIStreaming interface descriptor not found [ 268.719785][ T6] usb 2-1: USB disconnect, device number 85 [ 268.840977][ T6263] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.847836][ T6263] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.855145][ T6263] device bridge_slave_0 entered promiscuous mode [ 268.861862][ T6263] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.868694][ T6263] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.875936][ T6263] device bridge_slave_1 entered promiscuous mode [ 268.901161][ T6245] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 268.908187][ T6245] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 268.932521][ T6263] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.939414][ T6263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.946450][ T6263] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.949462][ T337] dm9601: No valid MAC address in EEPROM, using 6e:74:19:ae:02:c0 [ 268.953295][ T6263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.981164][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.988482][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.995842][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.012139][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.020191][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.027059][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.034989][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.043007][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.049851][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.057070][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.064778][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.081154][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 269.091307][ T6263] device veth0_vlan entered promiscuous mode [ 269.100002][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 269.107666][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 269.116020][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 269.123371][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 269.134838][ T6263] device veth1_macvtap entered promiscuous mode [ 269.141809][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready executing program 1: arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) [ 269.149796][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 269.157673][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 269.161624][ T6231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.175706][ T6231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.186043][ T6268] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ext4_sync_file_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='ext4_sync_file_exit\x00', r3}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x43, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x6}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x8, {0x8, 0xa, "47f882f4d105"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r3}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='#@/#}+\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) close(r1) [ 269.188275][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 269.203972][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 269.222191][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 269.230768][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 269.240352][ T4650] device bridge_slave_1 left promiscuous mode [ 269.246346][ T4650] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.254269][ T4650] device bridge_slave_0 left promiscuous mode [ 269.261119][ T4650] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.268650][ T4650] device veth1_macvtap left promiscuous mode [ 269.274566][ T4650] device veth0_vlan left promiscuous mode executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="af00000000000000eaffffffffffffff9500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000e000010100002800400040008000200000000000c00018008000100", @ANYRES32], 0x30}}, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x400145042, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r4, 0x8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000001140)=""/4086, &(0x7f0000000180)=0xff6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000100)={'syz1\x00', {}, 0x7, [0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffff8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}, 0x45c) [ 269.359486][ T974] dm9601: No valid MAC address in EEPROM, using 6e:74:19:ae:02:c0 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) readv(r3, &(0x7f0000001900)=[{0x0, 0x18}, {&(0x7f0000000040)=""/65, 0x41}], 0x2) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x0, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000003a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0x10, 0xfc}, 0x20) executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x6bd, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0x2c, 0x3e, 0x56, 0x10, 0x403, 0xfc0c, 0x680a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6ab, 0x2, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0xb0, 0x7, 0xb, 0xee, 0xeb, 0x6, 0x3f, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1}, @as_header={0x7, 0x24, 0x1, 0x77, 0x0, 0x1001}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x4, 0x3, 0x6, "6650355d5981"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1f, "", 'Fn'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0x5, 0x1, "6642d4"}]}, @uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x1, 0x0, 0x0, "c22dfc71f9321778"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1, 0x0, 0x5, "9fd90b"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4a, 0x2, 0x1, 0x7f, "5712"}]}], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x1, 0xb5, 0x1, [@generic={0xe3, 0x1, "fbe3905347bd21fb3086a714d214129ad1cc38aadd1a455ffe29358cc11a52727290d4360b3de8678a9c5be1dd7b382f70b5d42dea722e4ccc729c5c206f5a124e9bc21839c21f4b5cfa8ebb1b2653fa1b1194d2b0b4cc3405dfdeeafe83516237319ba05c78fdf9ea9c701ea994050bc516cb23cc0b6b1e4dc5c18f21d1ecd0be8777ac07b5ad123a7e2c02a1bf2a69d86f4a2d7db8e70c44858bb0677dc7d55d769047676f67f930c8036641e1796f4d8e021ccc6f46cbf43e9806427a961172668c2eb400c6e4cd502825047d91b8fdf180a773a5828faa47e88b1a1998f5d8"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x1, 0x5, 0x0, [@generic={0x5c, 0x24, "d6eb75f38a1f4108c23d9cfafcd0d3730c8e2a22fc37858584e423c8a47e05b5a9e7383105bf1e1c4ee593ea651b612c3c242c3331d24e24e0a4d250f5de2e563246b53454d340f666e363b4a3ce1369b74c493ec726d82b728c"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x2, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x43, 0x6}]}}, {{0x9, 0x5, 0x9, 0x8, 0xc51b29c1bd4bee16, 0x4, 0x4, 0x47, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1d, 0x7ff}]}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x2, 0xc8}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x0, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0xc400}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x5, 0x1, 0xfe}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x4, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x81, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x100}, @generic={0xa7, 0x7, "00460d7e0a84d19f9a9dccb877f29496e55ccbf78281e0305ccd99793e1c064e606286e82ec5922b4b7aad0a387811c65ed15ce4a2834b00de91ae48f505682f7418261baccb186e1b328825671124f3b9a1f897a4f7dca94e0e5fd53d38ffee0c623d9cea619f14b0bda4da588fa133a13e616e13b7803693e188b41f089766adcbce9ad7bc1363432b11cc399a68ee8afc89dce49580e7a8ca7474f10b6db7aaecc73f6a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x81, 0x9, 0x92, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x6, 0x3, 0x1, [@generic={0x11, 0x8, "5857d316d88cefc48a04724882f6d9"}, @generic={0x37, 0x0, "5e2752f41f9c7cb5e90d4e89c9f1c197c801284239a8be78a364b46625b38cdb7d67c0906b5b4c05eba2fa9135ce6e312316936cb4"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0xa, 0xe, 0x1, 0x0, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x9, 0x9, 0x6}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x5, 0x4, 0xb5}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3f, 0xbd, 0x1, [@generic={0xcc, 0x35, "334cc78da2570b385a26078db10c4ab7e17dc9339f01d9b3764a3603fbf92ea2cb104a444dccd4ca3bf96d63be074e5cf3d44aa4f3f89f24778b1b79b52a8506a6a25601e86a6044049c367c0d879939b876c16bee954aac4a1f9e2b08ef37fd8b1e65d5a98bb7f6d8d0acd09aa37e1a3308ead30d9e28f8ca83a4e739fa931e8e87560da183fc30eb47d87ee28f30343aa40cbff4c7d753b827d92a1f3751133b42e65d8ab068fc448e198292141fd798bcbb87e04507d5167301dd87aed3834c82117a5d3231adde2c"}, @generic={0xcb, 0x24, "57d95e064d6c8da99b21715aff4fdff831ee9b50f3cd822dff34cef34ae70c417268e0ffca632f72630a6936df0489602a44ff3d5d6c15c187746e3a5841a8db163c01946379f00512cecc1ba4c741956dc5e4be6aeddd630792900eb75f8aed17ed03cafd392e483e02f81cdff80355244ff4bbbd2e0202ee86dcf5a0d0132e815fb478007c4d0ba48235afa9b0267cfe1d6f1418d457947ce5b5edba3ddd9573852933830f4dabe6845c8967081fa6516ccae675b6c343259445604d883e2b040bf6afd285f9dc08"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x80, 0x1, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x5}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x1, 0x240, 0x5, 0x2, 0xa6, [@generic={0x80, 0x2c, "6e3300b2d4da826b7ce6ec3b8b566528100cf6aeb1c3e725f6e465f06b19f6b0d093c2d26a179d24e942fcf737882812f8e1f5b9ee95444a9cb7d31cdbbb24b7c0b15ba35498568f80678b2defb09d1e49c78e1f8d9878dee38f864e28dac051fdfdbf08bb0fa58cabe65bdd694a45646a0aec42debcdabecb67f32a942c"}, @generic={0x75, 0x22, "15f7e01d70e9304e521aad05c65d1696bca3df848300e46c3977ff2283cadde397ee24c3db9476bbbc022b03f10cd7d768ec7ff32b48929b0da2812972da0110facf51f2fb62c44f32a76cfe293bbb5dffddff06a539a1eb025a468212b12f2b6c85ef3222e4cc6cb8087123fb3c4dc36514e6"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0x0, 0x6, 0x4, [@generic={0x83, 0xa, "f1b61bde8e23aee691da6fddf1a662d4faf57b33c234367581d403eecb5c217b88667064f6b64062037ea2de5fae3317bdb91a39a260b52364723448a8219bb4955c8837a5f2271f2887964319736516de8b4f372b0746bd07c16ca3e9b001b93f0121980def306598d05f9b7b22acf4e16576d441e3c7b38ec5a19143ece84dbe"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x1, 0x38, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x1a, 0x58, 0x1f}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3f}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x201, 0x5, 0x5, 0x6, 0x40, 0x4}, 0xc, &(0x7f0000000e80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x1}]}, 0x1, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x1809}}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000f40)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000013c0)={&(0x7f0000001140)={0x258, 0x20, 0x400, 0x70bd29, 0x25dfdbfe, {0x1d}, [@generic="9f8bbef02fef0636bc0bca3fe397deea7e98e2ef45e28a785572016d7157d43f6ffe44c2b8bcf54865bd23bb8bf4184cf4aa7c8f553a9be09c64375e343dc61eff2a033b71e5d301ecc43412ec504af88c8da9e415dde95411a585ca2964b6748e78deb0bc", @typed={0x8, 0x2d, 0x0, 0x0, @fd}, @typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@empty}, @nested={0x160, 0xf4, 0x0, 0x1, [@typed={0x8, 0xfb, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x4, 0x83}, @generic="fdd6c776e1c72f6e6448c1e798db09c55bc6d84b72262a6bd84f3c456da8d7e52d677fde1cd52ce143cb371cc32a0f9a36d143107fdab7d9c9b9c065bd3c032dae6508b65d3586ab0d4945e8388973811d4af2ac5b84da383465a88e576cf7658c8fd3d9b85ceef613e4336b6e2e0858205e3ca10fa1344747c6c8cd926924b877db08ae772c8f19dc3c3ae7bbe3a31968af581f77b1724189fd391cfe6735d266baa8e001ea42c4e3052958dc2e1257611f4fc47eb4f087c0394cdd3f076fc78c8fb6f310a107d75f3c11bb506ece1ecd7510b1d0a53eeedbffb40c48f65cb1c47aa3dcd4279b900a599951d6c9a87959e9493a", @generic="f6cf8b03aaee437855a513f218b5bc8ee0659b72294dc1c7eacaf6dccf23a7029cf679426e059fcdb72e12bf5c4214ba", @typed={0x5, 0x56, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@empty}, @typed={0xc, 0xca, 0x0, 0x0, @u64=0x8}]}, @generic="9063408c9cc09dbe86e35cb3003e3280104de5550ed71de0af3d98364d9a9e7079bbd83c2b3fc25bcf3a0d644dc7c55d63f53fd225514c79e147df1e1667c69fa71c9650994705279f7a8103e7483a0ebc94fdbadf6f3a896fbf0911d5b9eca3baa7370c48c24d1367232ba455cacc"]}, 0x258}, 0x1, 0x0, 0x0, 0x4000}, 0x40c4) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={0x0}}, 0x0) executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6, 0x12, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e23, 0x8}}}}}, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000000), r1, 0x0, 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x11}}, 0x120) clock_gettime(0x0, &(0x7f00000002c0)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) ppoll(&(0x7f0000000280)=[{r0, 0x100}, {r4, 0x6e}, {}, {r3, 0x20}, {0xffffffffffffffff, 0x4110}, {r5, 0x4048}, {r5, 0xa}], 0x7, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) futex(&(0x7f0000001300)=0x80000001, 0x800000000006, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r7 = signalfd(0xffffffffffffffff, &(0x7f00000002c0), 0x8) read$FUSE(r7, &(0x7f0000002900)={0x2020}, 0x2020) pselect6(0x40, &(0x7f00000000c0)={0x80000000, 0x5, 0x7, 0xe54, 0x0, 0x1, 0x3, 0x1}, &(0x7f0000000180)={0x2, 0x4, 0x1ff, 0xcdce, 0x8000000000000001, 0x1, 0x401, 0x80000000}, &(0x7f00000001c0)={0x1000, 0x10000, 0x101, 0xffffffff, 0x8, 0x6, 0x8000, 0x9ca9}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000440)={&(0x7f0000000400)={[0x81]}, 0x8}) [ 269.529546][ T1167] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 269.568903][ T6245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.584200][ T6245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.739910][ T330] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 269.785225][ T337] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 269.875349][ T337] dm9601 5-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet, 6e:74:19:ae:02:c0 [ 269.927616][ T337] usb 5-1: USB disconnect, device number 89 [ 269.940317][ T1167] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.966888][ T337] dm9601 5-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet [ 269.982966][ T330] usb 2-1: Using ep0 maxpacket: 16 [ 270.026057][ T1167] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.037182][ T1167] usb 1-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 270.048744][ T1167] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.074291][ T1167] usb 1-1: config 0 descriptor?? [ 270.145920][ T6] ================================================================== [ 270.153817][ T6] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 270.161451][ T6] Read of size 8 at addr ffff888131fe6cf0 by task kworker/0:0/6 [ 270.168912][ T6] [ 270.171085][ T6] CPU: 0 PID: 6 Comm: kworker/0:0 Not tainted 6.1.75-syzkaller-00023-g0a5aada71cc9 #0 [ 270.180546][ T6] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 270.190441][ T6] Workqueue: ipv6_addrconf addrconf_dad_work [ 270.196262][ T6] Call Trace: [ 270.199378][ T6] [ 270.202155][ T6] dump_stack_lvl+0x151/0x1b7 [ 270.206665][ T6] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 270.211961][ T6] ? _printk+0xd1/0x111 [ 270.215953][ T6] ? __virt_addr_valid+0x242/0x2f0 [ 270.220900][ T6] print_report+0x158/0x4e0 [ 270.225239][ T6] ? __virt_addr_valid+0x242/0x2f0 [ 270.230187][ T6] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 270.236263][ T6] ? __list_del_entry_valid+0xa6/0x130 [ 270.241559][ T6] kasan_report+0x13c/0x170 [ 270.245895][ T6] ? __list_del_entry_valid+0xa6/0x130 [ 270.251192][ T6] __asan_report_load8_noabort+0x14/0x20 [ 270.256659][ T6] __list_del_entry_valid+0xa6/0x130 [ 270.261783][ T6] process_one_work+0x4d7/0xcb0 [ 270.266470][ T6] worker_thread+0xa60/0x1260 [ 270.270981][ T6] kthread+0x26d/0x300 [ 270.274884][ T6] ? worker_clr_flags+0x1a0/0x1a0 [ 270.279744][ T6] ? kthread_blkcg+0xd0/0xd0 [ 270.284182][ T6] ret_from_fork+0x1f/0x30 [ 270.288427][ T6] [ 270.291294][ T6] [ 270.293458][ T6] Allocated by task 337: [ 270.297539][ T6] kasan_set_track+0x4b/0x70 [ 270.301966][ T6] kasan_save_alloc_info+0x1f/0x30 [ 270.306910][ T6] __kasan_kmalloc+0x9c/0xb0 [ 270.311338][ T6] __kmalloc_node+0xb4/0x1e0 [ 270.315763][ T6] kvmalloc_node+0x221/0x640 [ 270.320188][ T6] alloc_netdev_mqs+0x8c/0xf90 [ 270.324789][ T6] alloc_etherdev_mqs+0x36/0x40 [ 270.329475][ T6] usbnet_probe+0x207/0x27c0 [ 270.333901][ T6] usb_probe_interface+0x5b6/0xa90 [ 270.338850][ T6] really_probe+0x2b8/0x920 [ 270.343190][ T6] __driver_probe_device+0x1a0/0x310 [ 270.348311][ T6] driver_probe_device+0x54/0x3d0 [ 270.353178][ T6] __device_attach_driver+0x2e3/0x490 [ 270.358378][ T6] bus_for_each_drv+0x183/0x200 [ 270.363064][ T6] __device_attach+0x312/0x510 [ 270.367664][ T6] device_initial_probe+0x1a/0x20 [ 270.372612][ T6] bus_probe_device+0xbe/0x1e0 [ 270.377219][ T6] device_add+0xb60/0xf10 [ 270.381377][ T6] usb_set_configuration+0x190f/0x1e80 [ 270.386677][ T6] usb_generic_driver_probe+0x8b/0x150 [ 270.392055][ T6] usb_probe_device+0x144/0x260 [ 270.396740][ T6] really_probe+0x2b8/0x920 [ 270.401079][ T6] __driver_probe_device+0x1a0/0x310 [ 270.406199][ T6] driver_probe_device+0x54/0x3d0 [ 270.411059][ T6] __device_attach_driver+0x2e3/0x490 [ 270.416269][ T6] bus_for_each_drv+0x183/0x200 [ 270.420958][ T6] __device_attach+0x312/0x510 [ 270.425556][ T6] device_initial_probe+0x1a/0x20 [ 270.430416][ T6] bus_probe_device+0xbe/0x1e0 [ 270.435013][ T6] device_add+0xb60/0xf10 [ 270.439192][ T6] usb_new_device+0xf32/0x1810 [ 270.443779][ T6] hub_event+0x2db1/0x4830 [ 270.448039][ T6] process_one_work+0x73d/0xcb0 [ 270.452720][ T6] worker_thread+0xa60/0x1260 [ 270.457232][ T6] kthread+0x26d/0x300 [ 270.461141][ T6] ret_from_fork+0x1f/0x30 [ 270.465394][ T6] [ 270.467563][ T6] Freed by task 337: [ 270.471294][ T6] kasan_set_track+0x4b/0x70 [ 270.475721][ T6] kasan_save_free_info+0x2b/0x40 [ 270.480581][ T6] ____kasan_slab_free+0x131/0x180 [ 270.485529][ T6] __kasan_slab_free+0x11/0x20 [ 270.490126][ T6] __kmem_cache_free+0x218/0x3b0 [ 270.494902][ T6] kfree+0x7a/0xf0 [ 270.498460][ T6] kvfree+0x35/0x40 [ 270.502103][ T6] netdev_freemem+0x3f/0x60 [ 270.506451][ T6] netdev_release+0x7f/0xb0 [ 270.510783][ T6] device_release+0x95/0x1c0 [ 270.515208][ T6] kobject_put+0x178/0x260 [ 270.519464][ T6] put_device+0x1f/0x30 [ 270.523456][ T6] free_netdev+0x393/0x480 [ 270.527709][ T6] usbnet_disconnect+0x245/0x390 [ 270.532484][ T6] usb_unbind_interface+0x1fa/0x8c0 [ 270.537517][ T6] device_release_driver_internal+0x53e/0x870 [ 270.543420][ T6] device_release_driver+0x19/0x20 [ 270.548363][ T6] bus_remove_device+0x2fa/0x360 [ 270.553138][ T6] device_del+0x663/0xe90 [ 270.557303][ T6] usb_disable_device+0x380/0x720 [ 270.562165][ T6] usb_disconnect+0x32a/0x890 [ 270.566676][ T6] hub_event+0x1ed8/0x4830 [ 270.570931][ T6] process_one_work+0x73d/0xcb0 [ 270.575615][ T6] worker_thread+0xd71/0x1260 [ 270.580129][ T6] kthread+0x26d/0x300 [ 270.584033][ T6] ret_from_fork+0x1f/0x30 [ 270.588288][ T6] [ 270.590459][ T6] Last potentially related work creation: [ 270.596021][ T6] kasan_save_stack+0x3b/0x60 [ 270.600525][ T6] __kasan_record_aux_stack+0xb4/0xc0 [ 270.605732][ T6] kasan_record_aux_stack_noalloc+0xb/0x10 [ 270.611377][ T6] insert_work+0x56/0x310 [ 270.615539][ T6] __queue_work+0x9b6/0xd70 [ 270.619882][ T6] queue_work_on+0x105/0x170 [ 270.624308][ T6] usbnet_link_change+0xeb/0x100 [ 270.629081][ T6] usbnet_probe+0x1dbe/0x27c0 [ 270.633592][ T6] usb_probe_interface+0x5b6/0xa90 [ 270.638542][ T6] really_probe+0x2b8/0x920 [ 270.642881][ T6] __driver_probe_device+0x1a0/0x310 [ 270.648001][ T6] driver_probe_device+0x54/0x3d0 [ 270.652859][ T6] __device_attach_driver+0x2e3/0x490 [ 270.658069][ T6] bus_for_each_drv+0x183/0x200 [ 270.662770][ T6] __device_attach+0x312/0x510 [ 270.667355][ T6] device_initial_probe+0x1a/0x20 [ 270.672215][ T6] bus_probe_device+0xbe/0x1e0 [ 270.676814][ T6] device_add+0xb60/0xf10 [ 270.680982][ T6] usb_set_configuration+0x190f/0x1e80 [ 270.686276][ T6] usb_generic_driver_probe+0x8b/0x150 [ 270.691570][ T6] usb_probe_device+0x144/0x260 [ 270.696255][ T6] really_probe+0x2b8/0x920 [ 270.700596][ T6] __driver_probe_device+0x1a0/0x310 [ 270.705719][ T6] driver_probe_device+0x54/0x3d0 [ 270.710666][ T6] __device_attach_driver+0x2e3/0x490 [ 270.715870][ T6] bus_for_each_drv+0x183/0x200 [ 270.720557][ T6] __device_attach+0x312/0x510 [ 270.725157][ T6] device_initial_probe+0x1a/0x20 [ 270.730017][ T6] bus_probe_device+0xbe/0x1e0 [ 270.734618][ T6] device_add+0xb60/0xf10 [ 270.738784][ T6] usb_new_device+0xf32/0x1810 [ 270.743385][ T6] hub_event+0x2db1/0x4830 [ 270.747635][ T6] process_one_work+0x73d/0xcb0 [ 270.752322][ T6] worker_thread+0xa60/0x1260 [ 270.756836][ T6] kthread+0x26d/0x300 [ 270.760740][ T6] ret_from_fork+0x1f/0x30 [ 270.764996][ T6] [ 270.767164][ T6] The buggy address belongs to the object at ffff888131fe6000 [ 270.767164][ T6] which belongs to the cache kmalloc-4k of size 4096 [ 270.781054][ T6] The buggy address is located 3312 bytes inside of [ 270.781054][ T6] 4096-byte region [ffff888131fe6000, ffff888131fe7000) [ 270.794330][ T6] [ 270.796504][ T6] The buggy address belongs to the physical page: [ 270.802752][ T6] page:ffffea0004c7f800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x131fe0 [ 270.812817][ T6] head:ffffea0004c7f800 order:3 compound_mapcount:0 compound_pincount:0 [ 270.820977][ T6] flags: 0x4000000000010200(slab|head|zone=1) [ 270.826885][ T6] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 270.835302][ T6] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 270.843715][ T6] page dumped because: kasan: bad access detected [ 270.849974][ T6] page_owner tracks the page as allocated [ 270.855519][ T6] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5138, tgid 5138 (syz-executor.1), ts 205346565256, free_ts 204981830737 [ 270.878436][ T6] post_alloc_hook+0x213/0x220 [ 270.883031][ T6] prep_new_page+0x1b/0x110 [ 270.887370][ T6] get_page_from_freelist+0x27ea/0x2870 [ 270.892751][ T6] __alloc_pages+0x3a1/0x780 [ 270.897181][ T6] alloc_slab_page+0x6c/0xf0 [ 270.901606][ T6] new_slab+0x90/0x3e0 [ 270.905511][ T6] ___slab_alloc+0x6f9/0xb80 [ 270.909935][ T6] __slab_alloc+0x5d/0xa0 [ 270.914101][ T6] __kmem_cache_alloc_node+0x1af/0x250 [ 270.919400][ T6] kmalloc_trace+0x2a/0xa0 [ 270.923650][ T6] kobject_uevent_env+0x262/0x720 [ 270.928510][ T6] kobject_uevent+0x1f/0x30 [ 270.932848][ T6] netdev_queue_update_kobjects+0x235/0x4a0 [ 270.938578][ T6] netdev_register_kobject+0x270/0x320 [ 270.943870][ T6] register_netdevice+0xe43/0x1490 [ 270.948818][ T6] veth_newlink+0x7fc/0xc70 [ 270.953157][ T6] page last free stack trace: [ 270.957673][ T6] free_unref_page_prepare+0x83d/0x850 [ 270.962964][ T6] free_unref_page+0xb2/0x5c0 [ 270.967480][ T6] __free_pages+0x61/0xf0 [ 270.971648][ T6] __free_slab+0xce/0x1a0 [ 270.975812][ T6] discard_slab+0x29/0x40 [ 270.979978][ T6] __slab_free+0x205/0x280 [ 270.984317][ T6] ___cache_free+0xc6/0xd0 [ 270.988568][ T6] qlist_free_all+0xc5/0x140 [ 270.993082][ T6] kasan_quarantine_reduce+0x15a/0x180 [ 270.998376][ T6] __kasan_slab_alloc+0x24/0x80 [ 271.003063][ T6] slab_post_alloc_hook+0x53/0x2c0 [ 271.008011][ T6] kmem_cache_alloc_node+0x18a/0x2d0 [ 271.013141][ T6] __alloc_skb+0xcc/0x2d0 [ 271.017298][ T6] alloc_skb_with_frags+0xa6/0x680 [ 271.022246][ T6] sock_alloc_send_pskb+0x915/0xa50 [ 271.027284][ T6] mld_newpack+0x1c0/0xa90 [ 271.031535][ T6] [ 271.033701][ T6] Memory state around the buggy address: [ 271.039180][ T6] ffff888131fe6b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 271.047074][ T6] ffff888131fe6c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 271.054967][ T6] >ffff888131fe6c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 271.062863][ T6] ^ [ 271.070538][ T6] ffff888131fe6d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 271.078437][ T6] ffff888131fe6d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 271.086320][ T6] ================================================================== [ 271.094229][ T6] Disabling lock debugging due to kernel taint [ 271.102338][ T330] usb 2-1: config 0 has an invalid interface number: 176 but max is 1 [ 271.127094][ T330] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 271.138210][ T330] usb 2-1: config 0 has no interface number 1 2024/05/22 16:43:17 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 271.148479][ T330] usb 2-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 271.159513][ T330] usb 2-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 271.339581][ T330] usb 2-1: config 0 interface 176 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0 [ 271.369744][ T330] usb 2-1: config 0 interface 176 altsetting 7 endpoint 0x9 has invalid maxpacket 60950, setting to 64 [ 271.410214][ T330] usb 2-1: config 0 interface 176 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 271.420918][ T330] usb 2-1: config 0 interface 176 altsetting 7 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 271.435768][ T330] usb 2-1: config 0 interface 176 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 271.448826][ T330] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 271.459406