AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/w8GvXPO3zeKP/va8Z1+4ePyKPWsvfvW68059MoSJmcc7snBH/423j//87nPv2fPA6jvuO3z+R3vzcnk8DFT/dOZ3boi1Hl4cwv0dIXSngRWDWaAnvz8Y63vfYAinhNlArcRkf1YibTh8vy+EfWE2UKvqe30hDBYCFz71yMM3VxO39YWwNIRQSdt4vpK10ZcGzujNAv1pYGt3FvjVW5la4LudWQCOWXwz1F70BybqMwzPXa7B66/nuHXs7ZUOrysmhhvn+9naee5UQW/6wMQxPW2l6pgXpbfHQe+2BfBuK23nWz1txS9S+TeUt2ZDldC5aXLzhqund8ZHOsPoaFejmubpeX7m9S9tPJL0gnkdxg4MH5fX4S1PLL27a/kFj9+3YunL+z+295Vj7eaPCpu0mJ5vlZC/5hbM8xiN+zxZAG+/0rekEV+6QgibP/97n2kWL83/h5vP/+PLOd521uWOtb45lM3N4yODMfHaUDY3BwAAgAVjIew13Tr60Cea1Vea/4+0d/w/HvLPJ/PZaA+GMD6T2LskhNNmHs8Cd8XmLlsSwgdnUhP1gbVJ4GAI751JLK9VlZRYFEuMJIGfDOWB8SRwKAYmksC3YuDWJHBDDBxIAhtj4GASODcGwlT9OH5/KB9H24G+GFifbcQD8SyEXwzF1pJt9VytKgAAgOMknx321N8tnOtwrBni9PJAX6sM8QzshhkqSQ3pDLY2rWpYQ3erGjpb1VAb9+7mwy/V3NGq5tJpGB31GW7/5d98NjRRmv+PNZ//V+boSEfp+H8I62b+xtydeWS6Fl8/UZcBAAAAOAYD//viN5vFS/P/8fbO/4/7RLoKmcNjcTfEliUhjNUHsmr/sBzIjnoP5AEAAABYCGrH42vHwqfy2+wU7XQ+Xc4/cYT544H/8Tnz9x58cH2z/pbm/xPtnf/fX3+bdeJQ7MXXloSwqBD4QexlNTBjJAZ+/Mn6QD7+Q3ED3BSryk9MqFV1UyyxPgbGksC+RiV+WCtxWn0gf7Jqje+tjWMqL1EIAAAAwAkXdwfE4/Lx/P8P/Wb1Nc3Kleb/64/s/P+ZeXDp9P7pgRBWdofQlf4w4LH+bGHAGBjsyBMP9Wd1daVVXd8fwjnVgaVVvZiv/9+drjH4VF9WVQyc9qH9r59RTXyzL4SVxcDTn7vzrGpiZxKoNf6XfSF8oDratPHvLMoa70kb//qiEN5fCNSqumxRCNXGetOqHqnk1zFIq/rnSgjvKgRqVZ1dCWFXAGCBiv+Vbio+uGPXtVs2TE9Pbp/HRNyH3xc2T01Pjm7cOr2p0qBPm5I+1y1jdH15TO1e+ea5fImii+5dN9hOuvY7wbFiW/l+/NKJg/n9+F2oZ2acq3vq7q5Jh/yRD5ebCIVvUo2G3DnPQ+4vVjL7JJbqj/l7w0BYdPWOye2jX9ywc+f2VdnfdrOvzv7Gw0zZtlqVbqv+ufrWxsuj4WpZiaPdVsuKlazceeW2lTt2Xbti6soNl09ePnnVqrNXj505tmbs42eurI5qLPvbYqjL5qo6Gepbd7Y5ruM41NO7C5WciE8NCQmJhZbYOrCs6f/Jpfn/tubz//ipEz/58/UZGh3/H46H+bPHZw/zr4+Bfe0e/x9udDS/dmLASBLYHQO7HeYHAADgnSFO8uPezLhX+qfLv/Nys3Kl+f/u9n7/f5zW/68tXX9+o2X+l8cSY43W/0+X+a+t/7+70fr/6TL/tfX/970N6/9fXQskm+QX1v8HAADeCU7c+v8tl/dPLxBQytByef/0AgGlDC2X8W/3AgFHvP7/8//5V/8dmijN/29tb/5v4X4AAAA4eXz5z675nWbx0vx/X3vz/xO//l9odP7/SKPARKOFAa3/BwAAwALVaP2/4Rv7L21WrjT/P9De/D+edtFZlzvW+uZQtqZdSNe0e22o9pMBAAAAWBg6w+hoT5t561ZGXXv0bT6TLwXaLF304p8cPrLz/w+2N/+v+13GLU8svbtr+QWPv3nfiqUv7//Y3ldmj/8DAAAA86fd/RIAAAAAAAAAAAAAAMDb78X/2LOmWbz0+/+wbubxRr//j9f9i78veHdd7lhr6/X/8vsXfvqeXTNLFj42FMKHi4Ete7acEvJr8y8rBh6+ZPl7qok9aYkHXzj3pWri0jTwqRWnvlFNnJME1sdFEt+bBuJVFd9YnATi8or/ngbi9jiQBnrzwFcXZ+PoSLfVTwezbdWRbqtnB0NYUgjUttX9g1kbHekAb0sCtQF+IQ3EAf55HuhMe3XPQNarGBiMRe8YyHoFAMBJK34L7Ambp6Ynx+JX+Hh7enf9bVS3ZNn15Wo72mz+uXxpsovuXTfYTror/S46e63xnlCpDmFV6etqMUvHzCiPTy0tNt27Gwy51WpvnQ3KpY500/U2HlFfNqLRjVunN/W0HPia1llWd7fMsqo02Slm6ZzZpG3U0kZf2hhRm9umjS7H+51hdLQryfUHMTgc6rR6RbT7e/3iOn+NXgXFPFcd3vurZvWV5v/D7c3/K8VxvZFfDGB3vLLe3y2xzD8AAADMr6+u/fU34r/P3vjo083ylub/I+3N/+MerPxQcLa342C8/v/eJSHMXFp/OAvcFZu7bEkIH5xJTcQS2QX1z48lxrLAXXGHyfJYYv1EfVWLYuBAEvjJUB44mAQOxUC+l2J/yHfl/P1QCGfNpNbVl9gWSwwngc/EwEgSGI2BsSSwOAbGk8Cri/PARBL4txgIU/Xb6t7F+bYCAAA4Evk8q6f+bkjneQe6W2XoaJWhv1WGzlYZKq0yNBpFvP/tmKEnOXmlo5CpJ621L6mllCFeDP+I+1XKEH5YnzMtWGo6nn9QO9+goz7DA5/oroQmSvP/sfbm//31t1nrh+L8f/b6f1ngB7F7X4unjo/EwI8/WR/IdwwcipPdm2pVTeQl8kn7TbHEeAyMJIFtMTCeBNavywP73lMfyGfatcb31hqfyksUAgAAAHDCxR0EcTdNnP/fseMrA83Kleb/4+3N/2N7A8XGboi1Hl4cwv0ds72pBVYMZoG4H2Mw/jz+fYMhnFLYwVErMdmflehNGg7f78t+od6bVvW9vuzHB/H+hU898vDN1cRtfSEsLex9qbXxfCVroy8NnNGbBfrTwNbuLBD3/NQC3+3MAnDMansF4wsqP9WlZnjucg1ef++Ua4KmwyvtA50j31y/uZovpR2u+T7VmiN72pruv+W4Kb09Dnq3LcR327B3W/GLVP4N5a3ZUCV0bprcvOHq6Z3xkeIvWUvm6Xku/kq1nfRxeB3uPvretlZJOzCWfHyMzV1u7tdhR6zulieW3t21/ILH71ux9OX9H9v7StvdaCD+UPiR6/518EeFzTvfKiF/zS24z5MJnycL8b+BEU9bCGHdq1+/qVm8NP+faG/+353czvh13Jg7loTwkcLGfSxu/j9ekn0OFgLZp+S7yoHskPt/DTX85AQAAIDjrba7o7a/YCq/zU4IT+fJ5fwTR5g/7q8YnzN/u/3u/+tLljaLl+b/65vP/xcl3XT83/F/5onj/3M62XdFL0of2H1Mu6JL1TEvHP+f08n+bnP8f06O/zv+PxfH/1tw/H9OJ/vTVvqWtM2XrhDCy3/00LPN4qX5/7b25v/W/5t70b7a+n/rG63/t63R+n+7rf8HAADMqwYLzaXzvNLqfaUM6ep9pQwtFwhsucSg9f+OeP2/l05//jehidL8f3d78//4chgotr5Q1v8bWdegqltjYJuFAQEAADgZNdpBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNvrgX/4n03N4o/+9rxnX7h4/Io9ay9+9brzTn0yhKmZxzuycEf/jbeP//zuc+/Z88DqO+47fP5HK3m5nvz2d+tyx1rfHAphX+GRwZh4bah6ZzZw4afv2dVdTTw2FMKHi4Ete7acUk18ayiEZcXAw5csf081sSct8eAL575UTVyaBj614tQ3qolz8kBH2t1/XJx1tyPt7s2LQ1hSCNS6e8Xi+qpqbfxpHuhM2/inwayNGBiMRb8xmLURA9OxxNSiEFZ2h9CVVvVoJauqK63qXypZVV1pVV+uhHBOCKE7reqF3qyq7nTkT/ZmVcXAaR/a//oZ1cS+3hBWFgNPf+7Os6qJLySBWuN/0RvCB6ovmbTxb/dkjfekjd/WE8L7Qwi9aYlfdmcletMSL3aH8K5CoNb457tD2BV4R4gfPnWfaDt2Xbtlw/T05PZ5TPTmbfWFzVPTk6Mbt05vqiR9aqSjkH7r+qMf+3Ovf2lj9faie9cNtpPuzsv1zHR5dU/d3TUne+9jv/qLlcw+H6X6Y/7eMBAWXb1jcvvoFzfs3Ll9Vfa33eyrs79deTTbVqsWyrZaVqxk5c4rt63csevaFVNXbrh88vLJq1advXrszLE1Yx8/c2V1VGPZ3+Mx1DtP/FBP7y5UciI+ACQkJBZaorPu023sZP8gL33Rn+1oT6jMfECXphXFLB0zozweg157lCM+mu8pLUe0qjRxKGVZ3TrLmtJkYjZLX5Zl5ntdaXJYrKlzZpPG+51hdLSr0XYYrr9b3Lw/O4bN+0y+6dpNAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwf+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgUAAD//wNUIwc=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109414, &(0x7f0000000000)={0x1}) [ 1103.645811][T29720] loop3: detected capacity change from 0 to 1024 12:44:46 executing program 1: syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000bc0)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRES16, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYBLOB="3f66161893f1bf1a3e2bdb0000000000000d280e0fef286db77ae0d76cdc5a00000000d9107faeb23dbe8d398b466b020000006f8efe811d688b6fb5a99d545131f8eff1b0a1681a5eace97cbe4c0070088afe79c80e811e66c7227a9b2c1a7d38075d3a3f8d006e3dd9cb07445c1f4bb70c7728adf3f6f195c6460000002548c1d037c7d9d01836e6a5", @ANYRES8=0x0], 0x0, 0x75a, &(0x7f0000000440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) chdir(&(0x7f0000000000)='./bus\x00') lchown(&(0x7f0000000140)='./file1\x00', 0x0, 0xee00) 12:44:46 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @private}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001840), 0x0, 0x0) 12:44:46 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "4f21be5f"}}, {@umask={'umask', 0x3d, 0x700}}, {@barrier}]}, 0x3, 0x6be, &(0x7f0000000400)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 12:44:46 executing program 5: syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000080)=ANY=[@ANYBLOB="70716e6f656e666f7263652c00752bb6a96d3c1f298d2453c6242f1c605a545bfe19a1c412963c57a71f13338668f4a4d16eb1c9669c019035768922c3f5d62044c9d4c6b6bb86653394c15a6f922f669da8636143f443d359146a9c338dd73e34ecf2b4b3f7b29127"], 0x4, 0x95d1, &(0x7f00000096c0)="$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") r0 = open(&(0x7f0000007f80)='./bus\x00', 0x145542, 0x0) ftruncate(r0, 0x2007ffb) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000280)='./bus\x00', 0x0) [ 1103.848002][T29730] loop2: detected capacity change from 0 to 1024 12:44:46 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) 12:44:46 executing program 3: syz_mount_image$ntfs(&(0x7f0000000000), &(0x7f000001ee80)='./file1\x00', 0x800804, &(0x7f0000000340)={[{@case_sensitive_yes}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@disable_sparse_no}, {@dmask={'dmask', 0x3d, 0x30000000000}}, {@show_sys_files_yes}, {@disable_sparse_no}, {@errors_recover}, {@disable_sparse_yes}, {@fmask={'fmask', 0x3d, 0xff}}, {@gid={'gid', 0x3d, 0xee00}}, {@umask={'umask', 0x3d, 0x1ffffffffffff}}]}, 0xdd, 0x1ee45, &(0x7f000005cb80)="$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") [ 1103.976787][ T8601] hfsplus: b-tree write err: -5, ino 4 12:44:47 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "4f21be5f"}}, {@umask={'umask', 0x3d, 0x700}}, {@barrier}]}, 0x3, 0x6be, &(0x7f0000000400)="$eJzs3U9sHGfdB/DvrJ11Nq+UuG2S5kVItRpRQSMSO6uSICEaEIIcIhTBpVcrcRorm7RyXJRWiGyAgsSJE+qBQxEKh54QQkjlhChnJCQunHKPxI1DDsCi2Z1dT+yNY+eP120/H2l2nmefeZ7nN7/Mzu7MxtoAn1pnX8ueboqcPXbuRlm/c7vduXO7fXVYTjKTpJFMD1YpWknxUXImgyX/Xz5ZDVc8aJ5X7n5YTL/3QXtQm66W/vaNzfptMHbLbrJ3VJlKMjco/nvLw9bdXCuW41xYG+8RFaO4y4QdHSYOJq23QXetsfHQ7lt/3QK71s3B++YGs8m+DN5dy88Bqc4ODz8zTN6m56buzsUBAAAAT8vYa/m6A/dyLzeyf2fCAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE+GYvCbgUW1NIbluRTD3/9v1n5TvznhcB/Tu5f6q+8cmHQgAAAAAAAAAPBYXriXe7mR/cN6r+h/5/9iv3Kw//h/eSvXs5SVHM+NLGY1q1nJQpLZ2kDNG4urqysLG3v+ImXPXq93s+p5cmzPk/fH1V0f6Lj/abBhIwAAAAAAAAD4FOpNlY8/zNm17/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGA3KJKpwaq/HEy+2i/PpjGdZG+SZjE32rw50WAfXWNY+NNk4wAAAICd0KrW+4v/Dgq9orzmz+H+9f/evJVrWc1yVtPJUi727wkMrvobf+u2O3dut6+Wy8aBv/bPbcXRrK7Jp/q1cTPP97c4NOpxNt/Md3MsczmflSzne1nMapYyl29ksbmaxRSZre5izN653cow1o3xnrmvdn59bC/UymV8R/qRtHIpy/3YjudCcxj68L7Ckdpsf2gm62a8VWaneLWyxRxdrNblHv28Wu8Os/093zPKyHyV+zIbz9TzvjH32zxO1s+0kMboHtTBtVnK6vqZHinn+6p1meufPN2cb/NWWpWJmUEmuj8ra8Oj7/DmOU++8Pc/n7/cuHbl8qXrx3bPYfSI1h8T7Vomnt9SJjplJrqPkYm9jxP/k9OssjE4i275bJnybPliv+/+LOfbeSMXs5RTmc9CTmc+X87JtHOyltdDm+e1/1prbO+1dvTzVaF8T/pp7b1px8w8qKHM6zO1vNbPdLP9tvoza1l6dgtZKpoZn6V/jA1l+jNVoZzjR/U72RO3PhMLtUw8t3kmfvWfXpLrnWtXVi4vvjlu8M9tfOqlal2+bN+9/9z86ye2U9tT7W55vDxb/mNl8LZRPzrKtueGbevy1Rx841K11Y6zbx3oD3po1PawV2o50uFbY0aq2p4fN0va/bYjtbb7PuXkjXRGn0IA2MX2vbyv2brb+mvr/daPW5db5/Z+feb0zGeb2fOX6T9O/bbxm8ZXipfzfn6Q/ZOOFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgmuv/3OlcVOZ2llFxbSeMID3hrbNEzF4Jnm7tj3j2thZrMj6ndJNunenETMrSS7InWZ3oG5ZjKm6dzomVbSGMWT5Mou+YE74Gk4sXr1zRPX337ni8tXF19fen3p2snTp1491f7Sws0Tl5Y7S/ODx0lHCTwNax8DJh0JAAAAAAAAAAAAsFU78ecNY6YtuhPYVwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODj6exr2dNNkYX54/Nl/c7tdqdchuW1LaeTNJIU30+Kj5IzGSyZrQ1XPGieV+5++MuX3vugvTbW9HD7xrp+v/9Xr7fNvehWS+aSTFXrh5vZ0ngXauN1txnYQDHawzJhR4eJg0n7XwAAAP//n1EI4A==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) [ 1104.064858][ T8601] hfsplus: b-tree write err: -5, ino 4 12:44:47 executing program 0: rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x8) rt_sigreturn() mlockall(0x3) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0) r0 = eventfd(0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$eventfd(r2, &(0x7f0000000180)=0xffffffff80000000, 0x8) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000100)={0x28}, 0x28) [ 1104.331273][T29744] loop2: detected capacity change from 0 to 1024 [ 1104.402089][T29741] loop3: detected capacity change from 0 to 4096 [ 1104.418351][T29733] overlayfs: failed to resolve './file0': -2 12:44:47 executing program 0: rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x8) rt_sigreturn() mlockall(0x3) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020) bind$unix(0xffffffffffffffff, 0x0, 0x0) 12:44:47 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "4f21be5f"}}, {@umask={'umask', 0x3d, 0x700}}, {@barrier}]}, 0x3, 0x6be, &(0x7f0000000400)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) [ 1104.475466][T29741] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 1104.520820][T29741] ntfs: (device loop3): ntfs_read_locked_inode(): Failed to lookup $DATA attribute. [ 1104.525550][ T8601] hfsplus: b-tree write err: -5, ino 4 [ 1104.559338][T29741] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. 12:44:47 executing program 0: rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x8) rt_sigreturn() mlockall(0x3) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000002140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000003680)={0x0, 0x0, 0x0}, 0x23) bind$unix(0xffffffffffffffff, 0x0, 0x0) [ 1104.633390][T29741] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1104.693939][T29741] ntfs: volume version 3.1. [ 1104.771161][T29752] loop2: detected capacity change from 0 to 1024 [ 1104.817614][ T3604] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1104.902581][ T8606] hfsplus: b-tree write err: -5, ino 4 [ 1105.622846][T29731] loop4: detected capacity change from 0 to 32768 [ 1105.674982][T29731] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (29731) [ 1105.742702][T29731] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1105.762632][T29731] BTRFS warning (device loop4): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 1105.805683][T29731] BTRFS info (device loop4): doing ref verification [ 1105.824827][T29731] BTRFS info (device loop4): using free space tree [ 1105.997261][T29740] loop5: detected capacity change from 0 to 32768 [ 1106.031392][T29740] XFS (loop5): Mounting V5 Filesystem [ 1106.302690][T29740] XFS (loop5): Ending clean mount [ 1106.382790][T29731] BTRFS info (device loop4): enabling ssd optimizations [ 1106.470602][T29740] XFS (loop5): Quotacheck needed: Please wait. 12:44:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) shutdown(r0, 0x1) 12:44:49 executing program 1: rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x8) rt_sigreturn() mlockall(0x3) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000140)) r0 = eventfd(0xfffffffc) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$eventfd(r2, &(0x7f0000000180)=0xffffffff80000000, 0x8) 12:44:49 executing program 3: r0 = eventfd(0x0) r1 = dup2(r0, r0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffffff"], 0x15) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000007c0)="22ee0d26f2025a35", 0x8}], 0x1) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) close(r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='gid_map\x00') timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 12:44:49 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "4f21be5f"}}, {@umask={'umask', 0x3d, 0x700}}, {@barrier}]}, 0x3, 0x6be, &(0x7f0000000400)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) [ 1106.697285][T29786] loop2: detected capacity change from 0 to 1024 [ 1106.719592][T29740] XFS (loop5): Quotacheck: Done. [ 1106.907391][ T27] audit: type=1800 audit(1695041089.891:114): pid=29740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=9290 res=0 errno=0 [ 1107.016464][ T27] audit: type=1804 audit(1695041090.001:115): pid=29740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1920267076/syzkaller.vm2oKW/1815/file0/bus" dev="loop5" ino=9290 res=1 errno=0 [ 1107.054271][ T8601] hfsplus: b-tree write err: -5, ino 4 [ 1107.069304][ T27] audit: type=1804 audit(1695041090.001:116): pid=29790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir1920267076/syzkaller.vm2oKW/1815/file0/bus" dev="loop5" ino=9290 res=1 errno=0 12:44:50 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="781b740a8089071df2865b", 0xb) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="55ee77c1ad517070582a060667ec9f3f4ce375affe95e3062836c58beb3785e32a8a08cadb6364c215a1541fc75b273a630c1fde44b89f96f9962ce0"], 0x7ffff000}, 0xf, 0x0, 0x0, 0x20000000}, 0x0) accept$alg(r0, 0x0, 0x0) 12:44:50 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="8b", 0x1) recvmmsg(r1, &(0x7f0000006100), 0x400000000000682, 0x0, 0x0) 12:44:50 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000010ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x100000002272, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000004c0)={0x6, 'tunl0\x00', {}, 0x7}) r2 = accept(r1, 0x0, 0x0) recvfrom$unix(r0, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendto$inet6(r2, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_route(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[], 0x20}}, 0x50) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000640)={'filter\x00', 0x4}, 0x68) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 12:44:50 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x2000000, &(0x7f00000001c0)=[{&(0x7f0000000080)={0x114, 0x30, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd19ae7c2f4393c16a007"]}]}, 0x114}], 0x1}, 0x0) 12:44:50 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "4f21be5f"}}, {@umask={'umask', 0x3d, 0x700}}, {@barrier}]}, 0x3, 0x6be, &(0x7f0000000400)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 12:44:50 executing program 4: socketpair$unix(0x11, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) [ 1107.245528][ T3594] XFS (loop5): Unmounting Filesystem [ 1107.302854][T29802] __nla_validate_parse: 11 callbacks suppressed [ 1107.302872][T29802] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1107.324068][T29799] loop2: detected capacity change from 0 to 1024 [ 1107.329311][T29804] "syz-executor.0" (29804) uses obsolete ecb(arc4) skcipher 12:44:50 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000080)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00\x00I', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 12:44:50 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='ubifs\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) execve(&(0x7f0000000340)='./file0\x00', &(0x7f0000000580)=[0x0, &(0x7f0000000500)='cgroup.procs\x00'], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000380)='./file0/../file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0/../file0\x00'}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f000000d000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000480)="c4e3a1cf630a00f20f01df0fc7690666660f382a85cf0066b99f08000066b83847000066ba000000000f30baf80c66b8cc33838f66efbafc0cb8c838eff22ef20f0fa0c8efa70fc72f0f01c3d9f5", 0x4e}], 0x1, 0x0, &(0x7f0000000540)=[@cstype0={0x4, 0x8000e}, @cstype0={0x4, 0x2}], 0x2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 12:44:50 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "4f21be5f"}}, {@umask={'umask', 0x3d, 0x700}}, {@barrier}]}, 0x3, 0x6be, &(0x7f0000000400)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 12:44:50 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='ubifs\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) execve(&(0x7f0000000340)='./file0\x00', &(0x7f0000000580)=[0x0], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) dup(r3) open_tree(0xffffffffffffffff, &(0x7f0000000380)='./file0/../file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0/../file0\x00'}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000480)="c4e3a1cf630a00f20f01df0fc7690666660f382a85cf0066b99f08000066b83847000066ba000000000f30baf80c66b8cc33838f66efbafc0cb8c838eff22ef20f0fa0c8efa70fc72f0f01c3d9f5", 0x4e}], 0x1, 0x0, &(0x7f0000000540)=[@cstype0={0x4, 0x8000e}], 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1107.626347][T11430] hfsplus: b-tree write err: -5, ino 4 12:44:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000040)=ANY=[@ANYBLOB="0a000000ff"]) 12:44:50 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "4f21be5f"}}, {@umask={'umask', 0x3d, 0x700}}, {@barrier}]}, 0x3, 0x6be, &(0x7f0000000400)="$eJzs3U9sHGfdB/DvrJ11Nq+UuG2S5kVItRpRQSMSO6uSICEaEIIcIhTBpVcrcRorm7RyXJRWiGyAgsSJE+qBQxEKh54QQkjlhChnJCQunHKPxI1DDsCi2Z1dT+yNY+eP120/H2l2nmefeZ7nN7/Mzu7MxtoAn1pnX8ueboqcPXbuRlm/c7vduXO7fXVYTjKTpJFMD1YpWknxUXImgyX/Xz5ZDVc8aJ5X7n5YTL/3QXtQm66W/vaNzfptMHbLbrJ3VJlKMjco/nvLw9bdXCuW41xYG+8RFaO4y4QdHSYOJq23QXetsfHQ7lt/3QK71s3B++YGs8m+DN5dy88Bqc4ODz8zTN6m56buzsUBAAAAT8vYa/m6A/dyLzeyf2fCAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE+GYvCbgUW1NIbluRTD3/9v1n5TvznhcB/Tu5f6q+8cmHQgAAAAAAAAAPBYXriXe7mR/cN6r+h/5/9iv3Kw//h/eSvXs5SVHM+NLGY1q1nJQpLZ2kDNG4urqysLG3v+ImXPXq93s+p5cmzPk/fH1V0f6Lj/abBhIwAAAAAAAAD4FOpNlY8/zNm17/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGA3KJKpwaq/HEy+2i/PpjGdZG+SZjE32rw50WAfXWNY+NNk4wAAAICd0KrW+4v/Dgq9orzmz+H+9f/evJVrWc1yVtPJUi727wkMrvobf+u2O3dut6+Wy8aBv/bPbcXRrK7Jp/q1cTPP97c4NOpxNt/Md3MsczmflSzne1nMapYyl29ksbmaxRSZre5izN653cow1o3xnrmvdn59bC/UymV8R/qRtHIpy/3YjudCcxj68L7Ckdpsf2gm62a8VWaneLWyxRxdrNblHv28Wu8Os/093zPKyHyV+zIbz9TzvjH32zxO1s+0kMboHtTBtVnK6vqZHinn+6p1meufPN2cb/NWWpWJmUEmuj8ra8Oj7/DmOU++8Pc/n7/cuHbl8qXrx3bPYfSI1h8T7Vomnt9SJjplJrqPkYm9jxP/k9OssjE4i275bJnybPliv+/+LOfbeSMXs5RTmc9CTmc+X87JtHOyltdDm+e1/1prbO+1dvTzVaF8T/pp7b1px8w8qKHM6zO1vNbPdLP9tvoza1l6dgtZKpoZn6V/jA1l+jNVoZzjR/U72RO3PhMLtUw8t3kmfvWfXpLrnWtXVi4vvjlu8M9tfOqlal2+bN+9/9z86ye2U9tT7W55vDxb/mNl8LZRPzrKtueGbevy1Rx841K11Y6zbx3oD3po1PawV2o50uFbY0aq2p4fN0va/bYjtbb7PuXkjXRGn0IA2MX2vbyv2brb+mvr/daPW5db5/Z+feb0zGeb2fOX6T9O/bbxm8ZXipfzfn6Q/ZOOFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgmuv/3OlcVOZ2llFxbSeMID3hrbNEzF4Jnm7tj3j2thZrMj6ndJNunenETMrSS7InWZ3oG5ZjKm6dzomVbSGMWT5Mou+YE74Gk4sXr1zRPX337ni8tXF19fen3p2snTp1491f7Sws0Tl5Y7S/ODx0lHCTwNax8DJh0JAAAAAAAAAAAAsFU78ecNY6YtuhPYVwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODj6exr2dNNkYX54/Nl/c7tdqdchuW1LaeTNJIU30+Kj5IzGSyZrQ1XPGieV+5++MuX3vugvTbW9HD7xrp+v/9Xr7fNvehWS+aSTFXrh5vZ0ngXauN1txnYQDHawzJhR4eJg0n7XwAAAP//n1EI4A==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) [ 1107.726059][T29819] loop2: detected capacity change from 0 to 1024 [ 1107.845099][ T8601] hfsplus: b-tree write err: -5, ino 4 [ 1108.159298][T29829] loop2: detected capacity change from 0 to 1024 [ 1108.454089][ T8606] hfsplus: b-tree write err: -5, ino 4 12:44:51 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@private1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x30}, 0x0) 12:44:51 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1, 0x0, 0x1, 0x400000}}, 0x20) 12:44:51 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "dbde85", 0x34, 0x21, 0x0, @private0, @local, {[@hopopts], @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}}}, 0x0) 12:44:51 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "4f21be5f"}}, {@umask={'umask', 0x3d, 0x700}}, {@barrier}]}, 0x3, 0x6be, &(0x7f0000000400)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 12:44:51 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x2602, 0x0) 12:44:51 executing program 1: getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) mkdir(&(0x7f00000010c0)='./file0\x00', 0x40) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe(&(0x7f0000000240)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) fallocate(r5, 0x0, 0x0, 0x1000f0) getpid() sendfile(r5, r5, 0x0, 0x8800000) recvmmsg(r5, &(0x7f0000000280), 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x98000) r6 = socket$inet(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r6, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_int(r6, 0x1, 0x23, &(0x7f0000000040)=0x6, 0x4) write$binfmt_elf64(r6, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001840), 0x27148e3ad6f70ee, 0x2, 0x0) [ 1108.984284][T29840] dccp_invalid_packet: P.Data Offset(0) too small 12:44:52 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000ec0), 0x230000, 0x0) io_setup(0xffff, &(0x7f0000000980)=0x0) io_submit(r0, 0x2, &(0x7f00000009c0)=[0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000580)="05a757026ec570c76ef51e409786ca2845", 0x11, 0x0, 0x0, 0x1}]) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x2}]) io_setup(0x0, &(0x7f0000000340)) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000a00)={0x44c, 0x3f3, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2a, [0x3, 0x0, 0x0, 0x1512, 0x5, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2eb, 0x3f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x7443, 0x0, 0xff, 0x0, 0x0, 0xcd31, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x30dc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x4, 0x0, 0x100, 0x0, 0x0, 0xffff, 0x8, 0x1, 0x24e, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3], [0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x9, 0x0, 0x0, 0xf34c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x8, 0x15c, 0xdb84, 0xfffffffb, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x1, 0xc6, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1000, 0x9, 0x0, 0x3], [0x0, 0x3, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x10000, 0x1ff, 0x0, 0x101, 0x0, 0x80, 0x0, 0x3d13, 0x0, 0x5, 0x8000, 0x4, 0x7f, 0x9, 0x1, 0x10001, 0x0, 0x0, 0x9, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x0, 0x2, 0x0, 0x2, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], 0x29, ['[\x00', '/dev/loop-control\x00', '%\x00', '&[&@f{#\n\'.*{/(..-&\x00']}, [""]}, 0x44c}}, 0x4) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 12:44:52 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x21}, {0x8, 0x88be, 0x81000000, {{}, 0x4c1}}}}}}}, 0x0) 12:44:52 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) close(r0) socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f000000bd00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3e80}}], 0x1, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x2}, 0x8, 0x0) syz_open_dev$vcsa(&(0x7f0000000100), 0x9, 0x400000) syz_open_dev$mouse(&(0x7f00000000c0), 0x3, 0x14d000) [ 1109.046126][T29843] loop2: detected capacity change from 0 to 1024 12:44:52 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1, 0x0, 0x1, 0x400000}}, 0x20) [ 1109.106329][ T27] audit: type=1800 audit(1695041092.091:117): pid=29848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1960 res=0 errno=0 12:44:52 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "4f21be5f"}}, {@umask={'umask', 0x3d, 0x700}}, {@barrier}]}, 0x3, 0x6be, &(0x7f0000000400)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 12:44:52 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x21}, {0x8, 0x88be, 0x81000000, {{}, 0x4c1}}}}}}}, 0x0) [ 1109.196906][ T3659] hfsplus: b-tree write err: -5, ino 4 12:44:52 executing program 5: syz_clone(0x40000000, &(0x7f0000000000), 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)="75b8169152dd") 12:44:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000340)) 12:44:52 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x21}, {0x8, 0x88be, 0x81000000, {{}, 0x4c1}}}}}}}, 0x0) [ 1109.550950][T29861] loop2: detected capacity change from 0 to 1024 12:44:52 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x21, 0x0, 0x0) 12:44:52 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "4f21be5f"}}, {@umask={'umask', 0x3d, 0x700}}, {@barrier}]}, 0x3, 0x6be, &(0x7f0000000400)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) [ 1109.895392][ T8601] hfsplus: b-tree write err: -5, ino 4 [ 1110.164519][T29872] loop2: detected capacity change from 0 to 1024 [ 1110.332924][ T8601] hfsplus: b-tree write err: -5, ino 4 12:44:54 executing program 1: lremovexattr(&(0x7f0000000140)='./file0\x00', 0x0) 12:44:54 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x21}, {0x8, 0x88be, 0x81000000, {{}, 0x4c1}}}}}}}, 0x0) 12:44:54 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="d678e66ff60f57d7a3f72ee8ecb14590605b44664f97c41f07ffd7a924b13d1ac5454a", 0x23) 12:44:54 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x3, &(0x7f0000000080)=[{0x15, 0x0, 0x0, 0x200000}, {0x54}, {0x6}]}) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:44:54 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "4f21be5f"}}, {@umask={'umask', 0x3d, 0x700}}, {@barrier}]}, 0x3, 0x6be, &(0x7f0000000400)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 12:44:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x4a, 0x0, 0x0) 12:44:54 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) 12:44:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000000c0)={'syzkaller0\x00'}) 12:44:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="66b8a1000f00d066b82d000f00d0360f232666ba400066edb99d080000b806850166baf2eab3260f30c4c3b1680e03f3adf30f09650f794dc0c4e2753fde", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1111.359870][T29879] loop2: detected capacity change from 0 to 1024 [ 1111.390156][ T27] audit: type=1326 audit(1695041094.371:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29881 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0aeb47cae9 code=0x0 12:44:54 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "4f21be5f"}}, {@umask={'umask', 0x3d, 0x700}}, {@barrier}]}, 0x3, 0x6be, &(0x7f0000000400)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 12:44:54 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) [ 1111.501911][ T8606] hfsplus: b-tree write err: -5, ino 4 12:44:54 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) 12:44:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x18, 0x0, 0x4) 12:44:54 executing program 1: syz_emit_ethernet(0x46, &(0x7f00000000c0)={@broadcast, @local, @val, {@ipv6}}, 0x0) 12:44:54 executing program 4: set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket(0x0, 0x0, 0x0) [ 1111.743712][T29898] loop2: detected capacity change from 0 to 1024 [ 1111.881274][ T8606] hfsplus: b-tree write err: -5, ino 4 12:44:55 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000e00)=""/224, 0xe0}, {&(0x7f0000000f00)=""/103, 0x67}, {&(0x7f0000001fc0)=""/135, 0x87}, {&(0x7f0000002080)=""/65, 0x41}], 0x4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000980)=""/249, 0xf9}, {&(0x7f0000000340)=""/63, 0x3f}, {&(0x7f0000000b40)=""/184, 0xb8}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000032c0)=""/145, 0x91}], 0x1}}], 0x2, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x54}, {&(0x7f0000000fc0)=""/4096, 0x5a8}, {&(0x7f0000000400)=""/106, 0x6ec}, {&(0x7f0000000740)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x3a0}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x330}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 12:44:55 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) 12:44:55 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x4007, 0x7f}, 0x48) 12:44:55 executing program 3: syz_usb_connect$uac1(0x0, 0x8d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x8, 0x24, 0x5, 0x0, 0x0, "a053a5"}, @mixer_unit={0xa, 0x24, 0x4, 0x0, 0x0, "de81a5244c"}, @mixer_unit={0x5}, @selector_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x400}}}}}}}]}}, 0x0) 12:44:55 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "4f21be5f"}}, {@umask={'umask', 0x3d, 0x700}}, {@barrier}]}, 0x3, 0x6be, &(0x7f0000000400)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 12:44:55 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000000), 0x4) 12:44:55 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x21}, {0x8, 0x88be, 0x0, {{}, 0x4c1}}}}}}}, 0x0) 12:44:55 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/config\x00') read$proc_mixer(r0, &(0x7f0000002040)=""/196, 0xc4) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) [ 1112.313230][T29916] loop2: detected capacity change from 0 to 1024 12:44:55 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)="d7", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="57ba56cba86bbb5dd6e505ea2fb9ec476a2d66342b9518fdd63aa3de740f4837f9274dcfb450063d8e01941574f4f4a367b28ee96c81775a54ae865f8844f3acdb8bd271809d6de24b7352cfe68f9ce72ce823dbf9b592fd0542fd8c991ae91815d588d06631e8be66cdfb87a8d1dad88f5bd8aa84ac884b42b13bcdb16d70f2d721dbeb14cb2b58d8bcd45d8006ffdb8ada8e0495108db8222cee3b0296f037f8523f951e96b96dee10a50af005ff378268", 0xb2}, {&(0x7f00000002c0)="a9a92a0fa33e8dbf8a0a779b35a6762a0ae63c4b15622cdfb01788403c9437059f7fafaa13d3b25a939f6f1ec20a19487d3bdcb4137b3a798d4e89b901f0735b8b304023b7ab1954427dd9a0639d801dae0b7d2dee261cb9e5089969fc515d93584a98ed9ba346c4d38a316b17f3acb8ea76edddba78ecebc71117680186f4ed133e1125308c2724dd9c2af758688e990dbcda72e82ba5", 0x97}, {&(0x7f00000003c0)="963dbefe65efa1da682daa2371b47114fa18890d5bf39cf370faa66c8121b2e6f81bc348f7027e1a4608498a9148e5b7fc1d205388f1418dad872ae627ec982b808b51bd8797d745030e5d85064c458ec6355a7e0422cc3be91b223d547628f51e2027f30ab0e8f916f5c5d7e25230e8ca7b263bc8980a36677f308450a78a738afe1a50756d8ec702ee6377a514c8f774ad2bb79b4cbb54297f4b30cf305739bf4a185b6061273cc287eabb8befd9812e032c0223bd8c7232c7c8aa8b46c947de852c1550ae03b3672fb7031e7b94ad3bcf3e3958eee669eaa35fd5d699c9bf", 0xe0}, {&(0x7f00000004c0)="fc573e12b2d40c3a38fa82f69a52ab71c9906fe68d0ebcb4a0fcf357440dfc2601ade955a82ef0753da3f81b3b9cff0df14b195d3467d9acd645123919bf8f", 0x3f}, {&(0x7f0000000100)="9dc9d9ef3966b3d859091d58ad", 0xd}, {&(0x7f0000000540)="63029edbcb32e28653456a5110e9839a3259f40b481178560c192c167266882847a26605066be1d257301f4de34d159e42b46076226f12103194eb2633c0c7a07774034e04c5a384c5e07fb4e9bfefa1ec3a03d4921fe329c4f7a8dd0c2275a8df6218769a66f6057d270be8051d767e49bdb2567e73", 0x76}, {&(0x7f0000000600)="bbe114452131f25b04886f2454b07ed820487da6cf5d3e474a57aef38cd69a64e6", 0x21}, {&(0x7f0000000680)="0f0a1c735b888c9f0a0cc61e2219a31b00e504ab09d6643371a7ed2cbfc7dd99a663d057b32067c933a88074f40958e01e2a59be84544e11a7bb12d8f047db56131d4976cb3048ff3ce6539a4e5ef45e6bdc1f8da3549a77ca332b3d0434f05f6a6907438daab09097b3c689534d3fa06c3f572cef3c8b5c495bab3bb1203ce3ba579fe67b8361d30b11e9138b15da33ede1bbdcd5562511e6950c1fe317cfd017d35da1f658de4d7db9", 0xaa}], 0x8}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000880)="2ab438ff41b97cd01abb2a743c1a09f30fcb8e8ec1db8afd05ffe3533506b01f31dd2ecabf8c49949d55658361116bc6f9ab5832", 0x34}, {&(0x7f0000000900)="e56ec73c12253b79c79e6f1d3981f5a2d1cd8618dfc5399d79dd2006de75f11022b5b55909cd698b56baa284564e93b691652e7edd25c3b7881414d0e19e378a3da2254cf98a3659401a0008fc5e4a2f4f10560d95867e396cf83516265f52eee04ce23d3978fc97ffaf9839ae025ab0", 0x70}, {&(0x7f0000000980)="4f8a33314c08c88d4345416ceb38f8697c08ab2c4a686e44364d6772e384c805", 0x20}], 0x3}}], 0x2, 0x0) 12:44:55 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x21}, {0x8, 0x88be, 0x0, {{}, 0x4c1}}}}}}}, 0x0) 12:44:55 executing program 2: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) [ 1112.515704][ T8598] hfsplus: b-tree write err: -5, ino 4 12:44:55 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, 0x0, 0x0) [ 1112.562682][ T22] usb 4-1: new high-speed USB device number 26 using dummy_hcd 12:44:55 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x7}, {0x6}]}, 0x10) syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@multicast, @broadcast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "52d5e4", 0x30, 0x3a, 0x0, @loopback, @dev, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f1291a", 0x0, 0x0, 0x0, @local, @private2}}}}}}}, 0x0) 12:44:55 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x21}, {0x8, 0x88be, 0x0, {{}, 0x4c1}}}}}}}, 0x0) 12:44:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)) [ 1112.952809][ T22] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1112.970139][ T22] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1113.007002][ T22] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1113.030263][ T22] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1113.051268][ T22] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1113.076594][ T22] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1113.097725][ T22] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1113.280612][ T22] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1113.293219][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.313560][ T22] usb 4-1: Product: syz [ 1113.322284][ T22] usb 4-1: Manufacturer: syz [ 1113.327628][ T22] usb 4-1: SerialNumber: syz [ 1113.697722][ T22] usb 4-1: USB disconnect, device number 26 12:44:57 executing program 0: symlink(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') open(0x0, 0x105142, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x21d42a8a) utime(0x0, 0x0) getxattr(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00', &(0x7f0000000200)=""/102, 0x66) 12:44:57 executing program 2: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 12:44:57 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x13, 0x0, 0x0, @prog_id}, 0x20) 12:44:57 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) 12:44:57 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x22, &(0x7f0000001280)=""/4077, &(0x7f0000000100)=0xfed) 12:44:57 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 12:44:57 executing program 2: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 12:44:57 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001440)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x638}}], 0x1, 0x8008801) sendmmsg$inet6(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)="34aa391e488606ab21a3e2133d5c4249f0d9fb1a5969c9497bc712b09fdc095ada8bb799d268b2590b566c0c209b419159255a5f3d8b6c021195175e9a5b9906bfe5629cfb823e3af918099ba5df887cb4bfa74a321e82f3de94039bd4ed7494a09efd64461c1faa95f72ccc4ecf9cc477c2a0ff82912558e9393f0a1f27677326acb48639eb924c7d3606298b8366bff52431226bcba9c8e707fba26bf20b4debe6b4ba81eb3241992c6f", 0xab}, {&(0x7f0000000340)="55365cfe4e29cbc66047059682a581f7c8a5f56ba830017c16be5dc08abdd565a231487c382785d368653b23bc52f539d9c6a0b80106dd5a91c6", 0x3a}], 0x2}}, {{&(0x7f0000000f40)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, 0x0}}], 0x2, 0x8101) 12:44:57 executing program 0: syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xe}, {}, @broadcast, @device_a, @from_mac=@broadcast}}, {@type00={{}, {}, @device_a, @device_a, @from_mac}}}, @a_msdu}, 0x34) 12:44:57 executing program 3: mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000010c0)=""/4107, 0xfffffe32) 12:44:57 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) 12:44:57 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "4f21be5f"}}, {@umask={'umask', 0x3d, 0x700}}, {@barrier}]}, 0x3, 0x6be, &(0x7f0000000400)="$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") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) [ 1114.378012][T29959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:44:57 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002280)={0xff0, 0x14, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xfd9, 0x1, "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"}]}, 0xff0}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) 12:44:57 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200487d9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\r', 0xfffffffffffffebc, 0x40095, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000)="dc", 0x1, 0x0, 0x0, 0x0) 12:44:57 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@link_local={0x3}, @random="7f0a000300", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback=0xac1e0005}, "0000b50800000000"}}}}}, 0x0) [ 1114.580152][T29965] loop2: detected capacity change from 0 to 1024 12:44:57 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) 12:44:57 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000680)=ANY=[], 0x208e24b) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="26f471902626670fc79a008000006464f30f0926f30fc7b2000066b9800000c00f326635002000000f3066640f01df66b870983d8866ef66edf30f092e0fc7ac87200f2265", 0x45}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:44:57 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "4f21be5f"}}, {@umask={'umask', 0x3d, 0x700}}, {@barrier}]}, 0x3, 0x6be, &(0x7f0000000400)="$eJzs3U9sHGfdB/DvrJ11Nq+UuG2S5kVItRpRQSMSO6uSICEaEIIcIhTBpVcrcRorm7RyXJRWiGyAgsSJE+qBQxEKh54QQkjlhChnJCQunHKPxI1DDsCi2Z1dT+yNY+eP120/H2l2nmefeZ7nN7/Mzu7MxtoAn1pnX8ueboqcPXbuRlm/c7vduXO7fXVYTjKTpJFMD1YpWknxUXImgyX/Xz5ZDVc8aJ5X7n5YTL/3QXtQm66W/vaNzfptMHbLbrJ3VJlKMjco/nvLw9bdXCuW41xYG+8RFaO4y4QdHSYOJq23QXetsfHQ7lt/3QK71s3B++YGs8m+DN5dy88Bqc4ODz8zTN6m56buzsUBAAAAT8vYa/m6A/dyLzeyf2fCAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE+GYvCbgUW1NIbluRTD3/9v1n5TvznhcB/Tu5f6q+8cmHQgAAAAAAAAAPBYXriXe7mR/cN6r+h/5/9iv3Kw//h/eSvXs5SVHM+NLGY1q1nJQpLZ2kDNG4urqysLG3v+ImXPXq93s+p5cmzPk/fH1V0f6Lj/abBhIwAAAAAAAAD4FOpNlY8/zNm17/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGA3KJKpwaq/HEy+2i/PpjGdZG+SZjE32rw50WAfXWNY+NNk4wAAAICd0KrW+4v/Dgq9orzmz+H+9f/evJVrWc1yVtPJUi727wkMrvobf+u2O3dut6+Wy8aBv/bPbcXRrK7Jp/q1cTPP97c4NOpxNt/Md3MsczmflSzne1nMapYyl29ksbmaxRSZre5izN653cow1o3xnrmvdn59bC/UymV8R/qRtHIpy/3YjudCcxj68L7Ckdpsf2gm62a8VWaneLWyxRxdrNblHv28Wu8Os/093zPKyHyV+zIbz9TzvjH32zxO1s+0kMboHtTBtVnK6vqZHinn+6p1meufPN2cb/NWWpWJmUEmuj8ra8Oj7/DmOU++8Pc/n7/cuHbl8qXrx3bPYfSI1h8T7Vomnt9SJjplJrqPkYm9jxP/k9OssjE4i275bJnybPliv+/+LOfbeSMXs5RTmc9CTmc+X87JtHOyltdDm+e1/1prbO+1dvTzVaF8T/pp7b1px8w8qKHM6zO1vNbPdLP9tvoza1l6dgtZKpoZn6V/jA1l+jNVoZzjR/U72RO3PhMLtUw8t3kmfvWfXpLrnWtXVi4vvjlu8M9tfOqlal2+bN+9/9z86ye2U9tT7W55vDxb/mNl8LZRPzrKtueGbevy1Rx841K11Y6zbx3oD3po1PawV2o50uFbY0aq2p4fN0va/bYjtbb7PuXkjXRGn0IA2MX2vbyv2brb+mvr/daPW5db5/Z+feb0zGeb2fOX6T9O/bbxm8ZXipfzfn6Q/ZOOFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgmuv/3OlcVOZ2llFxbSeMID3hrbNEzF4Jnm7tj3j2thZrMj6ndJNunenETMrSS7InWZ3oG5ZjKm6dzomVbSGMWT5Mou+YE74Gk4sXr1zRPX337ni8tXF19fen3p2snTp1491f7Sws0Tl5Y7S/ODx0lHCTwNax8DJh0JAAAAAAAAAAAAsFU78ecNY6YtuhPYVwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODj6exr2dNNkYX54/Nl/c7tdqdchuW1LaeTNJIU30+Kj5IzGSyZrQ1XPGieV+5++MuX3vugvTbW9HD7xrp+v/9Xr7fNvehWS+aSTFXrh5vZ0ngXauN1txnYQDHawzJhR4eJg0n7XwAAAP//n1EI4A==") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 12:44:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="eb", 0x1, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r2}, &(0x7f0000000080)=0x14) [ 1114.716077][ T8598] hfsplus: b-tree write err: -5, ino 4 12:44:57 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000404355470022000000000109022400010000000009040000010300000009210000000122290009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "744db1378f11d7a08896b8d4090b3fa5af74d7a20dcaa5f847bb4da46efda8acc96435352bb593"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 12:44:57 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) 12:44:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@dellink={0x24, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_PHYS_PORT_ID={0x4, 0x3d}]}, 0x24}}, 0x0) 12:44:57 executing program 1: fsopen(&(0x7f0000000940)='rpc_pipefs\x00', 0x0) 12:44:57 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local}) 12:44:58 executing program 1: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map, 0xffffffffffffffff, 0x1a, 0x9}, 0x14) [ 1114.955713][T29984] loop2: detected capacity change from 0 to 1024 [ 1115.112295][ T8606] hfsplus: b-tree write err: -5, ino 4 [ 1115.152703][ T22] usb 1-1: new high-speed USB device number 19 using dummy_hcd 12:44:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x303}, "f8155fa65808eb12", "2f56199d6c775123bdbbe2eacfd285ac", "cadf12ea", "c2b2790aa58a70f5"}, 0x28) sendto$inet6(r0, &(0x7f0000000040)="c8", 0x1, 0x0, 0x0, 0x0) 12:44:58 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "4f21be5f"}}, {@umask={'umask', 0x3d, 0x700}}, {@barrier}]}, 0x3, 0x6be, &(0x7f0000000400)="$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") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 12:44:58 executing program 1: syz_clone(0x5003000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:44:58 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) 12:44:58 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x28}, {0x1c}, {0x6}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x14, 0x2c, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 12:44:58 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xe0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) [ 1115.536773][T30007] loop2: detected capacity change from 0 to 1024 [ 1115.562734][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1115.585069][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1115.619049][ T22] usb 1-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.22 [ 1115.651224][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.697469][ T22] usb 1-1: config 0 descriptor?? [ 1115.723939][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.730299][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.763514][ T3621] hfsplus: b-tree write err: -5, ino 4 [ 1116.183429][ T22] hid (null): invalid report_count 54456 [ 1116.422762][ T22] usb 1-1: string descriptor 0 read error: -71 [ 1116.442626][ T22] uclogic 0003:5543:0047.0005: failed retrieving string descriptor #200: -71 [ 1116.451443][ T22] uclogic 0003:5543:0047.0005: failed retrieving pen parameters: -71 [ 1116.465194][ T22] uclogic 0003:5543:0047.0005: failed probing pen v2 parameters: -71 [ 1116.475259][ T22] uclogic 0003:5543:0047.0005: failed probing parameters: -71 [ 1116.483251][ T22] uclogic: probe of 0003:5543:0047.0005 failed with error -71 [ 1116.493253][ T22] usb 1-1: USB disconnect, device number 19 12:44:59 executing program 0: socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x2) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) 12:44:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x6610, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa31086b8703240000007ea60264160af365040014000d000a000f0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 12:44:59 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) 12:44:59 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x7a, 0x23b) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) 12:44:59 executing program 5: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7f}}], {{0x9, 0x5, 0x82, 0x2, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x400}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000080)=@lang_id={0x4}}, {0x4, &(0x7f0000000400)=@string={0x4, 0x3, "f5dd"}}, {0x0, 0x0}, {0x0, 0x0}]}) 12:44:59 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "4f21be5f"}}, {@umask={'umask', 0x3d, 0x700}}, {@barrier}]}, 0x3, 0x6be, &(0x7f0000000400)="$eJzs3U9sHGfdB/DvrJ11Nq+UuG2S5kVItRpRQSMSO6uSICEaEIIcIhTBpVcrcRorm7RyXJRWiGyAgsSJE+qBQxEKh54QQkjlhChnJCQunHKPxI1DDsCi2Z1dT+yNY+eP120/H2l2nmefeZ7nN7/Mzu7MxtoAn1pnX8ueboqcPXbuRlm/c7vduXO7fXVYTjKTpJFMD1YpWknxUXImgyX/Xz5ZDVc8aJ5X7n5YTL/3QXtQm66W/vaNzfptMHbLbrJ3VJlKMjco/nvLw9bdXCuW41xYG+8RFaO4y4QdHSYOJq23QXetsfHQ7lt/3QK71s3B++YGs8m+DN5dy88Bqc4ODz8zTN6m56buzsUBAAAAT8vYa/m6A/dyLzeyf2fCAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE+GYvCbgUW1NIbluRTD3/9v1n5TvznhcB/Tu5f6q+8cmHQgAAAAAAAAAPBYXriXe7mR/cN6r+h/5/9iv3Kw//h/eSvXs5SVHM+NLGY1q1nJQpLZ2kDNG4urqysLG3v+ImXPXq93s+p5cmzPk/fH1V0f6Lj/abBhIwAAAAAAAAD4FOpNlY8/zNm17/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGA3KJKpwaq/HEy+2i/PpjGdZG+SZjE32rw50WAfXWNY+NNk4wAAAICd0KrW+4v/Dgq9orzmz+H+9f/evJVrWc1yVtPJUi727wkMrvobf+u2O3dut6+Wy8aBv/bPbcXRrK7Jp/q1cTPP97c4NOpxNt/Md3MsczmflSzne1nMapYyl29ksbmaxRSZre5izN653cow1o3xnrmvdn59bC/UymV8R/qRtHIpy/3YjudCcxj68L7Ckdpsf2gm62a8VWaneLWyxRxdrNblHv28Wu8Os/093zPKyHyV+zIbz9TzvjH32zxO1s+0kMboHtTBtVnK6vqZHinn+6p1meufPN2cb/NWWpWJmUEmuj8ra8Oj7/DmOU++8Pc/n7/cuHbl8qXrx3bPYfSI1h8T7Vomnt9SJjplJrqPkYm9jxP/k9OssjE4i275bJnybPliv+/+LOfbeSMXs5RTmc9CTmc+X87JtHOyltdDm+e1/1prbO+1dvTzVaF8T/pp7b1px8w8qKHM6zO1vNbPdLP9tvoza1l6dgtZKpoZn6V/jA1l+jNVoZzjR/U72RO3PhMLtUw8t3kmfvWfXpLrnWtXVi4vvjlu8M9tfOqlal2+bN+9/9z86ye2U9tT7W55vDxb/mNl8LZRPzrKtueGbevy1Rx841K11Y6zbx3oD3po1PawV2o50uFbY0aq2p4fN0va/bYjtbb7PuXkjXRGn0IA2MX2vbyv2brb+mvr/daPW5db5/Z+feb0zGeb2fOX6T9O/bbxm8ZXipfzfn6Q/ZOOFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgmuv/3OlcVOZ2llFxbSeMID3hrbNEzF4Jnm7tj3j2thZrMj6ndJNunenETMrSS7InWZ3oG5ZjKm6dzomVbSGMWT5Mou+YE74Gk4sXr1zRPX337ni8tXF19fen3p2snTp1491f7Sws0Tl5Y7S/ODx0lHCTwNax8DJh0JAAAAAAAAAAAAsFU78ecNY6YtuhPYVwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODj6exr2dNNkYX54/Nl/c7tdqdchuW1LaeTNJIU30+Kj5IzGSyZrQ1XPGieV+5++MuX3vugvTbW9HD7xrp+v/9Xr7fNvehWS+aSTFXrh5vZ0ngXauN1txnYQDHawzJhR4eJg0n7XwAAAP//n1EI4A==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) linkat(r1, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) [ 1116.953864][T30021] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 12:45:00 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) [ 1117.008671][T30021] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1117.011185][T30022] loop2: detected capacity change from 0 to 1024 [ 1117.076884][T30021] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. 12:45:00 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "4f21be5f"}}, {@umask={'umask', 0x3d, 0x700}}, {@barrier}]}, 0x3, 0x6be, &(0x7f0000000400)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) linkat(r1, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 12:45:00 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) [ 1117.179051][ T6676] hfsplus: b-tree write err: -5, ino 4 12:45:00 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x8, 0x0, 0x300) [ 1117.222726][ T6926] usb 6-1: new low-speed USB device number 27 using dummy_hcd 12:45:00 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) [ 1117.329754][T30033] loop2: detected capacity change from 0 to 1024 12:45:00 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "4f21be5f"}}, {@umask={'umask', 0x3d, 0x700}}, {@barrier}]}, 0x3, 0x6be, &(0x7f0000000400)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) linkat(r1, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) [ 1117.424955][ T8598] hfsplus: b-tree write err: -5, ino 4 [ 1117.550598][T30040] loop2: detected capacity change from 0 to 1024 [ 1117.633137][ T6926] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1117.671214][ T6926] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1117.693931][ T3621] hfsplus: b-tree write err: -5, ino 4 12:45:00 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000001500)) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8923, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x1, 0x3, 0x72, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x80, 0x10, 0x7, 0x9}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000240)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x37, r2}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4018, r0}, 0x18) socketpair(0x18, 0x0, 0x2, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000100)=""/73, &(0x7f00000000c0)=0xffffff93) 12:45:00 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:00 executing program 1: socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000001c0)=@abs={0x1}, 0x6e) listen(r0, 0x0) accept(r0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$unix(0x1, 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000240), &(0x7f00000000c0)={0x71b}, 0x0, 0x0, 0x0) [ 1118.312798][ T6926] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1118.337297][ T6926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.393240][T30020] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1118.400534][T30020] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1118.433811][ T6926] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 1118.683053][ T6926] usb 6-1: USB disconnect, device number 27 12:45:02 executing program 3: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f00000003c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000240)={0x0, 0x0, 0x4b, "0ec14b565ba4cd267c6f263d3b13eede8b49abd1c947170e94f902e25a189c6ef525af7ec7c066dbc75580bcdd889929800f06ff4ad86ed7e5d368b5872250127dbf3b193908924c185e74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000008b11837004000010203010902"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0, 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000002c0)="0f20e035000400000f22e069acf5910f2cdcebac00000f01df660f38801e26f0468010096567640f73f3200fc72b66ba2000b81cc90000ef64366766460f3880ab00800000c483f9df02c5", 0x4b}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000044c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="a3859e76ab141c8d760d616da9b9b8b793f7dc88d76816f55043670dfea1d8f6002e86a481ffe03a8c49ee6d0f07c4f78939", 0x32}], 0x1}}], 0x1, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:45:02 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "4f21be5f"}}, {@umask={'umask', 0x3d, 0x700}}, {@barrier}]}, 0x3, 0x6be, &(0x7f0000000400)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 12:45:02 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(0xffffffffffffffff, r0, 0x0) 12:45:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000480)) setsockopt$sock_void(r1, 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @timestamp, @timestamp, @timestamp, @window, @timestamp, @window, @sack_perm], 0x2000000000000302) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x148) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ppoll(0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)={[0x5]}, 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd14b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x80a, 0x0, 0x6) r2 = socket(0x11, 0x80a, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'syzkaller1\x00'}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) 12:45:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "633ad050d9551cc9", "4e21ffcaacab33c4c3f255e2056800e0", '\x005\x00', "07b84b42c103b657"}, 0x28) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="b8", 0x1}, {0x0}], 0x2}, 0x8000) 12:45:02 executing program 5: ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) open(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs$namespace(0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) [ 1119.320937][T30018] syz-executor.3 (30018): drop_caches: 3 12:45:02 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @broadcast, 'vxcan1\x00'}}, 0x1e) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 12:45:02 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(0xffffffffffffffff, r0, 0x0) 12:45:02 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000c00)={0x0, {{0xa, 0x0, 0x0, @loopback}}}, 0x88) [ 1119.436288][T30050] loop2: detected capacity change from 0 to 1024 12:45:02 executing program 0: accept(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0x100800) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000e40)) syz_clone3(&(0x7f0000000640)={0x21e0000, 0x0, &(0x7f0000000380), &(0x7f00000003c0), {0x1b}, &(0x7f0000000400)=""/212, 0xd4, &(0x7f0000000500)=""/218, &(0x7f0000000600)=[0xffffffffffffffff], 0x1}, 0x58) 12:45:02 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "4f21be5f"}}, {@umask={'umask', 0x3d, 0x700}}, {@barrier}]}, 0x3, 0x6be, &(0x7f0000000400)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) [ 1119.566256][T30055] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. 12:45:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2f, &(0x7f0000000040)={0x0, 0x0}, 0x10) [ 1119.609886][ T6676] hfsplus: b-tree write err: -5, ino 4 [ 1119.745667][T30078] loop2: detected capacity change from 0 to 1024 [ 1119.782512][ T6926] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1119.837437][ T8601] hfsplus: b-tree write err: -5, ino 4 [ 1120.042740][ T6926] usb 4-1: Using ep0 maxpacket: 8 [ 1120.172744][ T6926] usb 4-1: config 0 has no interfaces? [ 1120.342681][ T6926] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.40 [ 1120.351853][ T6926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.360287][ T6926] usb 4-1: Product: syz [ 1120.366162][ T6926] usb 4-1: Manufacturer: syz [ 1120.370897][ T6926] usb 4-1: SerialNumber: syz [ 1120.380462][ T6926] usb 4-1: config 0 descriptor?? [ 1120.680648][ T7376] usb 4-1: USB disconnect, device number 27 12:45:04 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) dup(r1) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8c02) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = dup(r0) fallocate(r2, 0x10, 0x0, 0x1002000) 12:45:04 executing program 1: getrandom(&(0x7f0000000080)=""/240, 0xfffffffffffffe77, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) 12:45:04 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fd31b408b1134200c31c0000000109021b0001000000000904000001602ef60009050206b1"], 0x0) 12:45:04 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(0xffffffffffffffff, r0, 0x0) 12:45:04 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "4f21be5f"}}, {@umask={'umask', 0x3d, 0x700}}, {@barrier}]}, 0x3, 0x6be, &(0x7f0000000400)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 12:45:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="491a40136fc85a859caaa5a6d4db1caadf3d408dd77c8248f79093d74db20643f731b58514e0734db5ebe93eedb556c5ee27273b0661c85a83cb4f90379ebdc62f6b7cab29409c03ddc00404d1be944750f529c4efa721d7d58f2bd5ebbfab227ee80e9ba3123eabd3c83d2c4b1a53878c3e11f7bf697c7f99c01a85828ceda4f673707c93617258e634c5c8a89230408e071074865cd4487276b1c7e7de792ff58e8125e47a4b2a6394c10c27067bde2ed99774b6cce6cd5e13f1708e37513811a0a81752df5ad008", 0xc9, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001340)="45f9e8e5af9f7e488a1619ea0cd4902570249f1e29b175dfa0d3ae9be1933b972b835f966d432045a33e064403006bdb8ef95b90e76baae34f74778049ff8fa4a59adf7623aaddb922b32dbbfda740b88a07e87eb2cd97c0393db1036a1ec8a376c919cdd0b40dbb899c07f1349c7a1113f57495c795bc7e38166a7bdef463457189549f4b13279fffd050bdfea3477a62d3edea8321a2e98c65330fe7199ca6bee7202aa5a5d56c4ed4c22dbb28cebcaec033c75eb78820ad1d8ceb6f90b569e165002e702e1a206666d3c9d903ce78c73f778eae82d58317c634016a3e01ae29607f7b5ff253c607e4f60c0aa49021205073cdd574a3d4c25fbf79cc8ac99ff149ae54aa56286204e628dc2dfe4384ef74c8dac04ace6c5762d03f9e19942e4b6bbbb41fefc569cc23b3319d", 0x12d}], 0x1}}], 0x1, 0x0) 12:45:04 executing program 4: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) [ 1121.340293][T30082] loop2: detected capacity change from 0 to 1024 12:45:04 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1ec0}, {&(0x7f00000000c0)=""/250, 0x5c}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x14, r0, 0xfaac4106a1b87a7, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) 12:45:04 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "4f21be5f"}}, {@umask={'umask', 0x3d, 0x700}}, {@barrier}]}, 0x3, 0x6be, &(0x7f0000000400)="$eJzs3U9sHGfdB/DvrJ11Nq+UuG2S5kVItRpRQSMSO6uSICEaEIIcIhTBpVcrcRorm7RyXJRWiGyAgsSJE+qBQxEKh54QQkjlhChnJCQunHKPxI1DDsCi2Z1dT+yNY+eP120/H2l2nmefeZ7nN7/Mzu7MxtoAn1pnX8ueboqcPXbuRlm/c7vduXO7fXVYTjKTpJFMD1YpWknxUXImgyX/Xz5ZDVc8aJ5X7n5YTL/3QXtQm66W/vaNzfptMHbLbrJ3VJlKMjco/nvLw9bdXCuW41xYG+8RFaO4y4QdHSYOJq23QXetsfHQ7lt/3QK71s3B++YGs8m+DN5dy88Bqc4ODz8zTN6m56buzsUBAAAAT8vYa/m6A/dyLzeyf2fCAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE+GYvCbgUW1NIbluRTD3/9v1n5TvznhcB/Tu5f6q+8cmHQgAAAAAAAAAPBYXriXe7mR/cN6r+h/5/9iv3Kw//h/eSvXs5SVHM+NLGY1q1nJQpLZ2kDNG4urqysLG3v+ImXPXq93s+p5cmzPk/fH1V0f6Lj/abBhIwAAAAAAAAD4FOpNlY8/zNm17/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGA3KJKpwaq/HEy+2i/PpjGdZG+SZjE32rw50WAfXWNY+NNk4wAAAICd0KrW+4v/Dgq9orzmz+H+9f/evJVrWc1yVtPJUi727wkMrvobf+u2O3dut6+Wy8aBv/bPbcXRrK7Jp/q1cTPP97c4NOpxNt/Md3MsczmflSzne1nMapYyl29ksbmaxRSZre5izN653cow1o3xnrmvdn59bC/UymV8R/qRtHIpy/3YjudCcxj68L7Ckdpsf2gm62a8VWaneLWyxRxdrNblHv28Wu8Os/093zPKyHyV+zIbz9TzvjH32zxO1s+0kMboHtTBtVnK6vqZHinn+6p1meufPN2cb/NWWpWJmUEmuj8ra8Oj7/DmOU++8Pc/n7/cuHbl8qXrx3bPYfSI1h8T7Vomnt9SJjplJrqPkYm9jxP/k9OssjE4i275bJnybPliv+/+LOfbeSMXs5RTmc9CTmc+X87JtHOyltdDm+e1/1prbO+1dvTzVaF8T/pp7b1px8w8qKHM6zO1vNbPdLP9tvoza1l6dgtZKpoZn6V/jA1l+jNVoZzjR/U72RO3PhMLtUw8t3kmfvWfXpLrnWtXVi4vvjlu8M9tfOqlal2+bN+9/9z86ye2U9tT7W55vDxb/mNl8LZRPzrKtueGbevy1Rx841K11Y6zbx3oD3po1PawV2o50uFbY0aq2p4fN0va/bYjtbb7PuXkjXRGn0IA2MX2vbyv2brb+mvr/daPW5db5/Z+feb0zGeb2fOX6T9O/bbxm8ZXipfzfn6Q/ZOOFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgmuv/3OlcVOZ2llFxbSeMID3hrbNEzF4Jnm7tj3j2thZrMj6ndJNunenETMrSS7InWZ3oG5ZjKm6dzomVbSGMWT5Mou+YE74Gk4sXr1zRPX337ni8tXF19fen3p2snTp1491f7Sws0Tl5Y7S/ODx0lHCTwNax8DJh0JAAAAAAAAAAAAsFU78ecNY6YtuhPYVwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODj6exr2dNNkYX54/Nl/c7tdqdchuW1LaeTNJIU30+Kj5IzGSyZrQ1XPGieV+5++MuX3vugvTbW9HD7xrp+v/9Xr7fNvehWS+aSTFXrh5vZ0ngXauN1txnYQDHawzJhR4eJg0n7XwAAAP//n1EI4A==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r1, 0x0, 0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 12:45:04 executing program 4: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:04 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mkdirat(0xffffffffffffff9c, &(0x7f0000004380)='./file0/file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000043c0)={0x29, 0x3, 0x0, {0x1, 0x8, 0x0, 'group_id'}}, 0x29) read$FUSE(r0, &(0x7f0000004400)={0x2020, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000100)={0x90, 0x0, r1}, 0x90) [ 1121.464970][ T6676] hfsplus: b-tree write err: -5, ino 4 12:45:04 executing program 5: ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000040)) syz_clone(0x42000000, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) syz_open_procfs$namespace(0x0, 0x0) [ 1121.572655][ T7376] usb 1-1: new high-speed USB device number 20 using dummy_hcd 12:45:04 executing program 4: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) [ 1121.661701][T30100] loop2: detected capacity change from 0 to 1024 [ 1121.794521][ T3659] hfsplus: b-tree write err: -5, ino 4 [ 1121.832685][ T7376] usb 1-1: Using ep0 maxpacket: 8 [ 1121.953172][ T7376] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 177 [ 1121.970227][ T7376] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1c.c3 [ 1121.980183][ T7376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.003802][ T7376] usb 1-1: config 0 descriptor?? [ 1122.050018][T30086] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1122.089047][ T7376] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! 12:45:05 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) [ 1122.275944][ T6926] usb 1-1: USB disconnect, device number 20 [ 1122.282761][ T3621] usb 1-1: Failed to submit usb control message: -71 [ 1122.293209][ T3621] usb 1-1: unable to send the bmi data to the device: -71 [ 1122.300379][ T3621] usb 1-1: unable to get target info from device [ 1122.309455][ T3621] usb 1-1: could not get target info (-71) [ 1122.320539][ T3621] usb 1-1: could not probe fw (-71) 12:45:05 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fd31b408b1134200c31c0000000109021b0001000000000904000001602ef60009050206b1"], 0x0) 12:45:05 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "4f21be5f"}}, {@umask={'umask', 0x3d, 0x700}}, {@barrier}]}, 0x3, 0x6be, &(0x7f0000000400)="$eJzs3U9sHGfdB/DvrJ11Nq+UuG2S5kVItRpRQSMSO6uSICEaEIIcIhTBpVcrcRorm7RyXJRWiGyAgsSJE+qBQxEKh54QQkjlhChnJCQunHKPxI1DDsCi2Z1dT+yNY+eP120/H2l2nmefeZ7nN7/Mzu7MxtoAn1pnX8ueboqcPXbuRlm/c7vduXO7fXVYTjKTpJFMD1YpWknxUXImgyX/Xz5ZDVc8aJ5X7n5YTL/3QXtQm66W/vaNzfptMHbLbrJ3VJlKMjco/nvLw9bdXCuW41xYG+8RFaO4y4QdHSYOJq23QXetsfHQ7lt/3QK71s3B++YGs8m+DN5dy88Bqc4ODz8zTN6m56buzsUBAAAAT8vYa/m6A/dyLzeyf2fCAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE+GYvCbgUW1NIbluRTD3/9v1n5TvznhcB/Tu5f6q+8cmHQgAAAAAAAAAPBYXriXe7mR/cN6r+h/5/9iv3Kw//h/eSvXs5SVHM+NLGY1q1nJQpLZ2kDNG4urqysLG3v+ImXPXq93s+p5cmzPk/fH1V0f6Lj/abBhIwAAAAAAAAD4FOpNlY8/zNm17/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGA3KJKpwaq/HEy+2i/PpjGdZG+SZjE32rw50WAfXWNY+NNk4wAAAICd0KrW+4v/Dgq9orzmz+H+9f/evJVrWc1yVtPJUi727wkMrvobf+u2O3dut6+Wy8aBv/bPbcXRrK7Jp/q1cTPP97c4NOpxNt/Md3MsczmflSzne1nMapYyl29ksbmaxRSZre5izN653cow1o3xnrmvdn59bC/UymV8R/qRtHIpy/3YjudCcxj68L7Ckdpsf2gm62a8VWaneLWyxRxdrNblHv28Wu8Os/093zPKyHyV+zIbz9TzvjH32zxO1s+0kMboHtTBtVnK6vqZHinn+6p1meufPN2cb/NWWpWJmUEmuj8ra8Oj7/DmOU++8Pc/n7/cuHbl8qXrx3bPYfSI1h8T7Vomnt9SJjplJrqPkYm9jxP/k9OssjE4i275bJnybPliv+/+LOfbeSMXs5RTmc9CTmc+X87JtHOyltdDm+e1/1prbO+1dvTzVaF8T/pp7b1px8w8qKHM6zO1vNbPdLP9tvoza1l6dgtZKpoZn6V/jA1l+jNVoZzjR/U72RO3PhMLtUw8t3kmfvWfXpLrnWtXVi4vvjlu8M9tfOqlal2+bN+9/9z86ye2U9tT7W55vDxb/mNl8LZRPzrKtueGbevy1Rx841K11Y6zbx3oD3po1PawV2o50uFbY0aq2p4fN0va/bYjtbb7PuXkjXRGn0IA2MX2vbyv2brb+mvr/daPW5db5/Z+feb0zGeb2fOX6T9O/bbxm8ZXipfzfn6Q/ZOOFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgmuv/3OlcVOZ2llFxbSeMID3hrbNEzF4Jnm7tj3j2thZrMj6ndJNunenETMrSS7InWZ3oG5ZjKm6dzomVbSGMWT5Mou+YE74Gk4sXr1zRPX337ni8tXF19fen3p2snTp1491f7Sws0Tl5Y7S/ODx0lHCTwNax8DJh0JAAAAAAAAAAAAsFU78ecNY6YtuhPYVwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODj6exr2dNNkYX54/Nl/c7tdqdchuW1LaeTNJIU30+Kj5IzGSyZrQ1XPGieV+5++MuX3vugvTbW9HD7xrp+v/9Xr7fNvehWS+aSTFXrh5vZ0ngXauN1txnYQDHawzJhR4eJg0n7XwAAAP//n1EI4A==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r1, 0x0, 0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 12:45:05 executing program 4: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r0, 0xffffffffffffffff, 0x0) 12:45:05 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) preadv(r1, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) migrate_pages(r0, 0x1ff, &(0x7f0000000280), &(0x7f00000002c0)=0x2) 12:45:05 executing program 5: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001640)={@cgroup, 0x3, 0x1, 0x7fff, &(0x7f0000001540)=[0x0, 0x0], 0x2, 0x0, 0x0, &(0x7f00000015c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) syz_clone(0x440ca000, &(0x7f0000000040)="2ff81fc19622408dc25ac4aa83f6004f9e538bbe352a6b301b8ab670c4baca35c3be79fcca2eddfc12c839dabb487d1980a9e6d021786d319e4684ea83f1f9fb0b2d", 0x42, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="129add3621e0c9484df12cb2d9b555e31f23bf70d3573eafbb974e5702347b48119e7a230075e765098b3e5075eb") 12:45:05 executing program 1: r0 = fsopen(&(0x7f0000000000)='ntfs3\x00', 0x0) readv(r0, &(0x7f0000001500)=[{&(0x7f0000000080)=""/154, 0x9a}], 0x1) 12:45:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, r2}) 12:45:05 executing program 4: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r0, 0xffffffffffffffff, 0x0) [ 1122.953681][T30130] loop2: detected capacity change from 0 to 1024 12:45:06 executing program 4: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r0, 0xffffffffffffffff, 0x0) 12:45:06 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "4f21be5f"}}, {@umask={'umask', 0x3d, 0x700}}, {@barrier}]}, 0x3, 0x6be, &(0x7f0000000400)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r1, 0x0, 0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 12:45:06 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x48000, &(0x7f0000001580)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000005b40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="6c09a424", 0x4}, {&(0x7f0000000300)="f0a86372801fa732e47dc432b53137c8149a9cd0ae8295bca246e0fbbd3e0202e061dae8f571abaad2cb69ecc0d46d15e4a5706681253b14b34655f8e1a6ab7ff5", 0x41}], 0x2}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)=""/206, 0xce}], 0x1}}], 0x1, 0x0, 0x0) [ 1123.134124][T11430] hfsplus: b-tree write err: -5, ino 4 12:45:06 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x85, 0x0, &(0x7f00000008c0)) [ 1123.222604][ T6926] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1123.282232][T30145] loop2: detected capacity change from 0 to 1024 [ 1123.456727][ T6676] hfsplus: b-tree write err: -5, ino 4 [ 1123.502736][ T6926] usb 1-1: Using ep0 maxpacket: 8 [ 1123.622741][ T6926] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 177 [ 1123.643859][ T6926] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1c.c3 [ 1123.674539][ T6926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.702511][ T6926] usb 1-1: config 0 descriptor?? [ 1123.732885][T30134] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1123.777113][ T6926] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1123.977509][ T7376] usb 1-1: USB disconnect, device number 21 [ 1123.992644][ T7149] usb 1-1: Failed to submit usb control message: -71 [ 1123.999855][ T7149] usb 1-1: unable to send the bmi data to the device: -71 [ 1124.017992][ T7149] usb 1-1: unable to get target info from device [ 1124.031375][ T7149] usb 1-1: could not get target info (-71) [ 1124.045427][ T7149] usb 1-1: could not probe fw (-71) 12:45:07 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fd31b408b1134200c31c0000000109021b0001000000000904000001602ef60009050206b1"], 0x0) 12:45:07 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') 12:45:07 executing program 4: r0 = socket(0x0, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000000)={'broute\x00'}, &(0x7f0000000080)=0x78) 12:45:07 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "4f21be5f"}}, {@umask={'umask', 0x3d, 0x700}}, {@barrier}]}, 0x3, 0x6be, &(0x7f0000000400)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 12:45:07 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x6, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 12:45:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x7b7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48) 12:45:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x24, 0x6, 0x0, @dev, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@synack={0x1e, 0x10, 0x0, 0x2, 0x7}]}}}}}}}}, 0x0) 12:45:07 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x45, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000011c0), &(0x7f0000001200), 0x80000000, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20) [ 1124.600124][T30158] loop2: detected capacity change from 0 to 1024 12:45:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x2, 0x7, 0x301}, 0x14}}, 0x0) [ 1124.725552][T30169] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 12:45:07 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "4f21be5f"}}, {@umask={'umask', 0x3d, 0x700}}, {@barrier}]}, 0x3, 0x6be, &(0x7f0000000400)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 12:45:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x87) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000001940)) [ 1124.804247][T11430] hfsplus: b-tree write err: -5, ino 4 [ 1124.872520][ T7376] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1125.033559][T30177] loop2: detected capacity change from 0 to 1024 [ 1125.112659][ T7376] usb 1-1: Using ep0 maxpacket: 8 [ 1125.133987][ T7149] hfsplus: b-tree write err: -5, ino 4 [ 1125.232840][ T7376] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 177 [ 1125.247494][ T7376] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1c.c3 [ 1125.266951][ T7376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.296644][ T7376] usb 1-1: config 0 descriptor?? [ 1125.322975][T30164] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1125.373923][ T7376] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1125.552357][ T6929] usb 1-1: USB disconnect, device number 22 [ 1125.563731][ T8601] usb 1-1: Failed to submit usb control message: -71 [ 1125.570859][ T8601] usb 1-1: could not get target info (-71) [ 1125.577050][ T8601] usb 1-1: could not probe fw (-71) 12:45:09 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fd31b408b1134200c31c0000000109021b0001000000000904000001602ef60009050206b1"], 0x0) 12:45:09 executing program 3: memfd_create(0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000001340)=0x1) 12:45:09 executing program 4: r0 = socket(0x0, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:09 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x8}]}, 0x20}}, 0x0) 12:45:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f00000051c0)=[{{&(0x7f0000000440)={0x2, 0x0, @local}, 0x10, &(0x7f0000001840)=[{&(0x7f0000001740)=')', 0x1}], 0x1, &(0x7f00000019c0)}}, {{&(0x7f0000001a00)={0x2, 0x0, @local}, 0x10, &(0x7f0000002c00)=[{&(0x7f0000001a40)='a|', 0x2}], 0x1}}, {{&(0x7f0000002d00)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x3, 0x0) 12:45:09 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "4f21be5f"}}, {@umask={'umask', 0x3d, 0x700}}, {@barrier}]}, 0x3, 0x6be, &(0x7f0000000400)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 12:45:09 executing program 3: process_madvise(0xffffffffffffffff, &(0x7f0000001140)=[{0x0}], 0x1, 0x0, 0x0) 12:45:09 executing program 5: r0 = io_uring_setup(0x7d69, &(0x7f0000000200)={0x0, 0x0, 0x40}) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:45:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000200)="e4", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @timestamp, @timestamp, @timestamp, @window, @timestamp, @window, @sack_perm], 0x2000000000000302) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd14b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x80a, 0x0, 0x6) [ 1126.192362][T30186] loop2: detected capacity change from 0 to 1024 12:45:09 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "4f21be5f"}}, {@umask={'umask', 0x3d, 0x700}}, {@barrier}]}, 0x3, 0x6be, &(0x7f0000000400)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, 0x0, 0x0) 12:45:09 executing program 3: bpf$BPF_PROG_DETACH(0x6, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x0, 0x24, 0x0, @link_id}, 0x20) 12:45:09 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @empty, @void, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x4, 0x0, @multicast, "889ddfcf", @random="7b9483889559", "0a844998"}}}}, 0x0) [ 1126.311915][ T8606] hfsplus: b-tree write err: -5, ino 4 [ 1126.442749][T23907] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1126.488833][T30208] loop2: detected capacity change from 0 to 1024 [ 1126.554534][ T8606] hfsplus: b-tree write err: -5, ino 4 [ 1126.692646][T23907] usb 1-1: Using ep0 maxpacket: 8 [ 1126.812729][T23907] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 177 [ 1126.830381][T23907] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1c.c3 [ 1126.849762][T23907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.870086][T23907] usb 1-1: config 0 descriptor?? [ 1126.892970][T30196] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1127.139078][ T6929] usb 1-1: USB disconnect, device number 23 [ 1127.142657][ T6676] ath10k_warn: 3 callbacks suppressed [ 1127.142678][ T6676] usb 1-1: Failed to submit usb control message: -71 [ 1127.159466][ T6676] usb 1-1: unable to send the bmi data to the device: -71 [ 1127.172823][ T6676] usb 1-1: unable to get target info from device [ 1127.179272][ T6676] usb 1-1: could not get target info (-71) [ 1127.192841][ T6676] usb 1-1: could not probe fw (-71) 12:45:10 executing program 0: 12:45:10 executing program 4: r0 = socket(0x0, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:10 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)) sched_rr_get_interval(r0, 0x0) 12:45:10 executing program 1: socketpair(0x3, 0x0, 0x431, &(0x7f0000000000)) 12:45:10 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x2) 12:45:10 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "4f21be5f"}}, {@umask={'umask', 0x3d, 0x700}}, {@barrier}]}, 0x3, 0x6be, &(0x7f0000000400)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, 0x0, 0x0) 12:45:10 executing program 0: 12:45:10 executing program 1: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 12:45:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @pktinfo={{0xf, 0x29, 0x32, {@mcast2}}}], 0x50}}], 0x2, 0x0) [ 1127.779894][T30224] loop2: detected capacity change from 0 to 1024 12:45:10 executing program 3: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000640)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000080)=0x10) shutdown(r0, 0x1) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000300)={r2}, &(0x7f0000000000)=0x8) 12:45:10 executing program 0: 12:45:10 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0x83419149c3b785d0}, 0x48) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) getpid() bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@cgroup=r2, r1, 0x1}, 0x14) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r0, 0xffffffffffffffff, 0x1}, 0x10) 12:45:10 executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x1}}, {@type={'type', 0x3d, "4f21be5f"}}, {@umask={'umask', 0x3d, 0x700}}, {@barrier}]}, 0x3, 0x6be, &(0x7f0000000400)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, 0x0, 0x0) 12:45:10 executing program 4: r0 = socket(0x1e, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:10 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000004440)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "3bdc0115"}, @main=@item_4={0x3, 0x0, 0x0, "81220d0c"}, @local=@item_4={0x3, 0x2, 0x0, "da05cf8b"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000080)={0x3}) [ 1127.935329][ T8601] hfsplus: b-tree write err: -5, ino 4 12:45:11 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_trie\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/86, 0x56}, {&(0x7f00000006c0)=""/79, 0x4f}, {&(0x7f0000002200)=""/4081, 0xff1}], 0x3, 0x0, 0x0) 12:45:11 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x18, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x50, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) 12:45:11 executing program 0: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 12:45:11 executing program 4: r0 = socket(0x1e, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) [ 1128.115803][T30241] loop2: detected capacity change from 0 to 1024 12:45:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000c40)={0x6, 'tunl0\x00'}) 12:45:11 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) 12:45:11 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002700)={&(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x3}, 0x1c, &(0x7f0000002640)=[{&(0x7f0000000080)="681bea6f08dd147b56ab6b0b4b8e96e5ff6076374d02b106b75362849cc9b48e8235690cb9f742", 0x27}, {&(0x7f00000000c0)="678cb7f4fdf7a2020b111fcfc6a2390f1f670b743440fc67b0458da8badf028d38a8430c70027c8b9241538f4670f5a9eb04b92373acd1b1191f4909256b047359822797b1f13559478b0796131995552921dd65f6c4fd1e17e35c445afd30f30c73f4874556", 0x66}, {&(0x7f0000000180)="143b9bdf6964926f2249f528dc7fa7b3c12452146d025719c4395624618670df44763f9170857306f8071387022ce6a96e668646fa70e064c32fe0175ea318e7131eec03360370ea60c1e47b09731751e6f1b0dd365def1b0ded5766dac3f46433136b1ccef164b5236d69eaa851fb5270403802bb7636", 0x77}, {&(0x7f0000000200)="048bdfa5a49f5d88191bae93b60b33288f1d14a5a74a72a135061f20b3be43b386d7e4cd97e6f6f1ba73641f70d420427709d22f6339eb89845563e82598e00655cd67edc55a4466405977bbbb2f1e1c5bd3a05209270a56e44ae16141de06d02cea6687bb1120014c37af1e5bc06de42f03923dc0ab64132af361919a9de5b7a9c53a25b6befd1fd8a94641ef2e302b64e236584f2eba6f91faa8046aa226a449dabc1cc938820ae3a1e43f8af5bbc30299433fdc6d4d83e44f3af3cd56d1e46965149f69f715980f8c3a050ed9f90efce81370c2a64f16e28c3fd4b4ca28705c9a42c30703e4f99b29f2229c71e72d84db87dfc064f23681a055223b44a60b82dff42ec2c0cc15e8d5eb60fa52cede19d4a1879097683901d7ce5c0abf9f5e614b5c7e3faedb902afac19a1909af4440f1fd7e3faa616b325f46149f335cff2119f3385c47149aebfdeb62876be99db77c3683d83563227bbcaf2227c67badb341d300c841750d08eb0234c4c57bd085bb6c9cf0c8ca17437ffa1585e87762e127a69549d1cb34d9cd2d71b001a85aebe9c2a1d6fc4ca6dab7acd37997713c9c665fc2ea91824ab602ef51f06f5c4a18f5ab6e36e9828c304fa558980c1d5275f3ce9d866874e497fee5901cee3337da2d6232b64c5359f20dbd2d1181ce805452fad4e7d7e1ebf64bf0d144d6141d983919ea76c927360d092b493c61ab3e51e661f8be05db31c8f125c829334cb992840bdbd73126525ce346cbc5bd81aff67877b96ea4b6553c37da3e466a8084d96abf74cf25a08c6d6057b1b626f607aa1ab4f1e373bdcc880151abcac3a1c5eaca6bee8bcc884c9ca773220baed5ed299622da2235bd7c3e2950662e5bee0acac8e67a4a3ae2aa14270bb6f3087801a769880482e7b9858ba79e6aeaa62aee6bb4560ace345a4f893db5520a9007fe2752d788fc1a628cff5173670398b4cd103cb868eaf5e7669497643030f73f89347e7d677f56eacec3df6d011806f04d5608318f48eb7b9fd8f98f7f2d02a6dcfc145319f1b46c2b03384eac5c41ac32638baa4a02a24673e59e505b746a7a5ef85556e322f9d30bd7f248b53ff825add794253e650c89bf8102e4f31efb17b61ea62475d2ecc936df96e854a5becc7d980ae8395fbebb99e17b0c8e096fdbdd1f1c2dc678b41e3bb56083f4229d537ae232fa7555d6a93e6dde238cef70ce23a5def82dae57e2702288076e74d98deec2ca1eb3728a6ebe530c855a25cdb94f562747252925cb0ca5d5c124bfa24cb9f3a4e8c8afe352ebe5d1bc3e9e46a54b085eecb251e2cf464c74a03cbef32ebf7b5ed6afbd5f3ddd48af749b2e7e45680ee33c81a95f02ef5297cc28f6abc7c444a11a6d2f4a6e2d4dbdf5f3e98f69d274fd9d7a60131f546d056a4081d65c91c6bfb629153d5b46e3af0cc843cd7e4999c24d95db84ecfc75d5f040cbd1b59253a4c38dcca485045b7d4ae1c25d4a9aa0a631aca6daf020be679301e25132f2e381d9dbc22646bb439cc4f9d6733f21d092ded01041a9b2e5d14d50641e8d74173806a48f9fea2c45e1a9bf55cddca561442ab87a3108723093a64dc03b2960a8b1b9d05fd5aa3e536853cd2cf689836739838d5729dfaaf62e4bccc5a65293ba", 0x491}], 0x4}, 0x0) [ 1128.224567][ T8601] hfsplus: b-tree write err: -5, ino 4 12:45:11 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)="cebd2a9a90d3", 0x6}, {&(0x7f0000000080)="c5f51a1251e83bc8fbfe8f8bb8871294f3cacf7f", 0x14}, {&(0x7f0000000300)="06a7f1a06ac30e333da74e3217d8cdd5743d7df68c9c5af833348a501db57a3f1f408280548fc03a628847d74b5dd323fe34e1780f86a12fd5e07dafd9a7a9e4adda1573a2d6070d93b143c57caa13f9a75738148ea15590ce0ddfc3af3ed8d968ed5569fb3a33254528d88fa654e6e2f8285b6e", 0x74}, {&(0x7f0000000d00)="95900d66f7a88482b200f0280511547d0e1b85503da3067ffe1467e3422edd694e1a06f935c0d839a9c8a3bb9c8f6dd6cfd8ca54f0acd5fbacd828127c00a622402d80b42dd734f1650f77fcaada3710a3503c9bfd367fcadf14ae8f2faae2b1b06ffb84d647ec6a3e2f4675735a4ef72a999e807097e15cfa274dbd3edc918c1e4e79d086713b48635f94ebc249b9e25141800339db2dfd9812", 0x9a}, {&(0x7f0000000dc0)="f808992af22a11b9f92abc2cefca2c24f9a73e4e7babb1401893173e85d19b7121852bcc25ee704e763cd44489418a4a6ecbcad221432e462468c64c2ae3766c6e5e86abaef9dab8ab820a45d0bec5522ca858b3d93fa76b5a1434", 0x5b}], 0x5, 0x0, 0x98}}], 0x1, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000880)=""/206, 0xce}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/177, 0xb1}], 0x3}}], 0x1, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c40)=""/150, 0x96}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x53}, {&(0x7f0000000fc0)=""/4096, 0x5a8}, {&(0x7f0000000400)=""/106, 0x68c}, {&(0x7f0000000740)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x38}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x1a8}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 12:45:11 executing program 4: r0 = socket(0x1e, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:11 executing program 2: madvise(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0xa) mremap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) 12:45:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x13, 0x0, 0x4) [ 1128.362809][T24037] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1128.745495][T24037] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1128.757360][T24037] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1128.768441][T24037] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1128.781418][T24037] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1128.790581][T24037] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.806329][T24037] usb 6-1: config 0 descriptor?? [ 1129.275935][T24037] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1129.291165][T24037] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 1129.333341][T24037] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1129.547533][T24037] usb 6-1: USB disconnect, device number 28 12:45:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private=0xa010102}}}}) 12:45:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8}, @IFLA_BROADCAST={0xa, 0x2, @dev}]}, 0x34}}, 0x0) 12:45:13 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:13 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{0x0, 0x10}], 0x1}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0x1, 0x1, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x701, 0x0, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) 12:45:13 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:45:13 executing program 0: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 12:45:13 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:13 executing program 3: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x1c, 0x201f, 0xffffffffffffffff, @prog_id}, 0x20) [ 1130.134102][T30275] device bridge_slave_0 left promiscuous mode [ 1130.153184][T30275] bridge0: port 1(bridge_slave_0) entered disabled state 12:45:13 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f00000001c0)={{0x0, 0x2, 0x0, 0x4, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 12:45:13 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="897b428e75eb"}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03050e00fa0a44000c030c2cfff57b016d2763bd563786dd398d537503e52b02591f031ee616d5c0184374a7ffe4ec55e0654786a7012c935ba514d40808efa011801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x2378, 0x4000002, 0x0, 0x2ff) 12:45:13 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1f}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x0) 12:45:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x0, 0x0, 0x11}}}}}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x4}]}, 0x40}}, 0x0) 12:45:13 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}]}]}, 0x28}}, 0x0) [ 1130.402891][ T6929] usb 3-1: new high-speed USB device number 21 using dummy_hcd 12:45:13 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) [ 1130.447918][T30294] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1130.512384][T30297] tipc: Started in network mode [ 1130.539901][T30297] tipc: Node identity ffffffff, cluster identity 31 [ 1130.552371][T30297] tipc: Node number set to 4294967295 [ 1130.783007][ T6929] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1130.792206][ T6929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.813002][ T6929] usb 3-1: config 0 descriptor?? [ 1130.857099][ T6929] gspca_main: se401-2.14.0 probing 047d:5001 [ 1131.272757][ T6929] gspca_se401: Bayer format not supported! [ 1131.478745][ T7376] usb 3-1: USB disconnect, device number 21 12:45:14 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:45:14 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TUNSETOFFLOAD(r1, 0x40047451, 0x604000000000000) 12:45:15 executing program 1: symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) 12:45:15 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x24, 0x28, 0x1, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0xfff1}, {0xffff}}}, 0x24}}, 0x0) 12:45:15 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:15 executing program 0: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 12:45:15 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440), 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:15 executing program 3: socket(0x0, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045005, &(0x7f0000000100)) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) r1 = getuid() setreuid(0xffffffffffffffff, r1) process_vm_writev(0x0, &(0x7f0000c22000), 0x0, 0x0, 0x0, 0x0) [ 1132.066146][T30307] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 12:45:15 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)=@multiplanar_fd={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "873d9798"}, 0x0, 0x4, {0x0}}) 12:45:15 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440), 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) [ 1132.132335][T30311] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:45:15 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440), 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) [ 1132.229455][T30307] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.5'. 12:45:15 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(0xffffffffffffffff) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="1c000000080603000000000000000000000000000500010007"], 0x1c}}, 0x0) [ 1132.354404][ T6929] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1132.722699][ T6929] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1132.731789][ T6929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.742203][ T6929] usb 3-1: config 0 descriptor?? [ 1132.784588][ T6929] gspca_main: se401-2.14.0 probing 047d:5001 [ 1133.222699][ T6929] gspca_se401: Bayer format not supported! [ 1133.431302][ T7376] usb 3-1: USB disconnect, device number 22 12:45:16 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:45:16 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8f0704"], 0x0) 12:45:16 executing program 5: timer_create(0x3, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xf, &(0x7f0000000000)={0x7, 0xffffffffffff038e}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:45:16 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x0, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:16 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(0xffffffffffffffff) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="1c000000080603000000000000000000000000000500010007"], 0x1c}}, 0x0) 12:45:16 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) 12:45:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000080)={@private2}, 0x14) 12:45:17 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x100, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_FRAME={0xb1, 0x33, @probe_request={@wo_ht={{}, {}, @device_b, @broadcast, @random="c4d5dc105f5d"}, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @val={0x72, 0x6}, [{0xdd, 0x31, "4a1d898b22caf4f0eeb31bb522be549ee2990bc54f109a3ec140958810f9315c2b63567ee2aa7ec54578dfec6184ba9b37"}, {0xdd, 0x50, "914ab5e34ccabecdc6cfb10669595c6a91ae9d718b29f823babe7f7f339a9cdafb9fd70d5acfdd43ed203e06bfec37c41204318a989bc31e81e30e0adeaf7969b3fff44471c0f37257fa751bfc7af6fe"}]}}]}, 0x100}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:45:17 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000013c0)={0x0, 0x27, "27595c1796cf4edd476b31d79fb9e93f4efd9096dcebce2018cdd08a2f63b2f46d75151cdf5e2d"}, &(0x7f0000001300)=0x2f) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0x85, &(0x7f0000000300), 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000001ac0)=@ccm_128={{0x304}, "2eb0790c1fbcba27", "1551caca56cf946cfb085024cea2c5b6", "0360b27a", "9f29c1fdd4bce36e"}, 0x28) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, &(0x7f0000001340)) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000014c0)={0x0, 0x7fff}, 0x8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001240)={0x0, 0x7ff, 0x0, 0x0, 0x0, 0x9, 0x8}, 0x20) 12:45:17 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x0, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:17 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0xa001) ioctl$USBDEVFS_CONNECTINFO(r0, 0x8008551c, &(0x7f0000001180)) [ 1134.273401][ T3663] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1134.281124][ T6929] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1134.315959][ T27] audit: type=1804 audit(1695041117.301:119): pid=30346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1112019209/syzkaller.fEyYX1/1915/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 12:45:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000008b11837004000010203010902"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x8040ae9f, &(0x7f0000001040)) [ 1134.372929][T24037] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1134.423190][ T27] audit: type=1804 audit(1695041117.301:120): pid=30346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1112019209/syzkaller.fEyYX1/1915/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 [ 1134.520524][ T6929] usb 1-1: device descriptor read/64, error -71 [ 1134.527393][ T3663] usb 4-1: Using ep0 maxpacket: 16 [ 1134.683084][ T3663] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1134.696684][ T3663] usb 4-1: config 0 has no interface number 0 [ 1134.711746][ T3663] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1134.742766][T24037] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1134.752423][T24037] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.763449][T24037] usb 3-1: config 0 descriptor?? [ 1134.822944][ T6929] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1134.830644][ T6928] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1134.842199][T24037] gspca_main: se401-2.14.0 probing 047d:5001 [ 1134.872921][ T3663] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1134.882406][ T3663] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1134.890701][ T3663] usb 4-1: Product: syz [ 1134.895452][ T3663] usb 4-1: SerialNumber: syz [ 1134.902429][ T3663] usb 4-1: config 0 descriptor?? [ 1134.950902][ T3663] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input17 [ 1135.022681][ T6929] usb 1-1: device descriptor read/64, error -71 [ 1135.102612][ T6928] usb 6-1: Using ep0 maxpacket: 8 [ 1135.142785][ T6929] usb usb1-port1: attempt power cycle [ 1135.151855][ T6933] usb 4-1: USB disconnect, device number 28 [ 1135.158258][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1135.158542][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1135.180840][ T6933] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1135.252717][T24037] gspca_se401: Bayer format not supported! [ 1135.259991][ T6928] usb 6-1: config 0 has no interfaces? [ 1135.422786][ T6928] usb 6-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.40 [ 1135.431868][ T6928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.440185][ T6928] usb 6-1: Product: syz [ 1135.444576][ T6928] usb 6-1: Manufacturer: syz [ 1135.449201][ T6928] usb 6-1: SerialNumber: syz [ 1135.462888][T23907] usb 3-1: USB disconnect, device number 23 [ 1135.463358][ T6928] usb 6-1: config 0 descriptor?? [ 1135.582613][ T6929] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1135.672703][ T6929] usb 1-1: device descriptor read/8, error -71 [ 1135.742034][ T6928] usb 6-1: USB disconnect, device number 29 12:45:18 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:45:18 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x0, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:18 executing program 1: ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000200)) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) 12:45:18 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8f0704"], 0x0) [ 1135.952623][ T6929] usb 1-1: new high-speed USB device number 27 using dummy_hcd 12:45:19 executing program 1: syz_clone(0x8000100, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="d0") [ 1136.072920][ T6929] usb 1-1: device descriptor read/8, error -71 [ 1136.193233][ T6929] usb usb1-port1: unable to enumerate USB device [ 1136.312715][ T7376] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1136.323012][T24037] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1136.552640][ T7376] usb 4-1: Using ep0 maxpacket: 16 [ 1136.672914][ T7376] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1136.680972][ T7376] usb 4-1: config 0 has no interface number 0 [ 1136.688645][ T7376] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1136.722839][T24037] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1136.732017][T24037] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.749885][T24037] usb 3-1: config 0 descriptor?? [ 1136.794924][T24037] gspca_main: se401-2.14.0 probing 047d:5001 [ 1136.812981][ T7376] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1136.822100][ T7376] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1136.831802][ T7376] usb 4-1: Product: syz [ 1136.837357][ T7376] usb 4-1: SerialNumber: syz [ 1136.843703][ T7376] usb 4-1: config 0 descriptor?? [ 1136.885867][ T7376] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input18 12:45:19 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) 12:45:19 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:19 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) dup2(r1, r2) sendfile(r2, r1, 0x0, 0x3) 12:45:19 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf, 0x21, 0x33, 0x8, 0xb05, 0x1791, 0x7ddf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x73, 0x64, 0x7a}}]}}]}}, 0x0) [ 1136.960073][T11430] device hsr_slave_0 left promiscuous mode [ 1136.977197][T11430] device hsr_slave_1 left promiscuous mode 12:45:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000095}]}) [ 1137.038606][T11430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1137.059235][T11430] batman_adv: batadv0: Removing interface: batadv_slave_0 12:45:20 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) [ 1137.117277][T11430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1137.127413][ T22] usb 4-1: USB disconnect, device number 29 [ 1137.133432][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1137.133463][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1137.141152][T11430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1137.194649][ T22] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1137.198957][T11430] device bridge_slave_1 left promiscuous mode [ 1137.232977][T24037] gspca_se401: Bayer format not supported! 12:45:20 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) [ 1137.233994][T11430] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.248836][T11430] device bridge_slave_0 left promiscuous mode [ 1137.255280][T11430] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.298557][T11430] device veth1_macvtap left promiscuous mode [ 1137.312957][ T6929] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1137.330460][T11430] device veth0_macvtap left promiscuous mode [ 1137.350230][T11430] device veth1_vlan left promiscuous mode [ 1137.372773][T11430] device veth0_vlan left promiscuous mode [ 1137.442203][T24037] usb 3-1: USB disconnect, device number 24 [ 1137.492723][ T6928] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1137.572705][ T6929] usb 6-1: Using ep0 maxpacket: 8 [ 1137.682788][ T6928] usb 1-1: device descriptor read/64, error -71 [ 1137.710234][T11430] team0 (unregistering): Port device team_slave_1 removed [ 1137.724585][T11430] team0 (unregistering): Port device team_slave_0 removed [ 1137.739089][T11430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1137.754287][T11430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1137.836444][T11430] bond0 (unregistering): Released all slaves [ 1137.893014][ T6929] usb 6-1: New USB device found, idVendor=0b05, idProduct=1791, bcdDevice=7d.df [ 1137.904906][ T6929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.913274][ T6929] usb 6-1: Product: syz [ 1137.917564][ T6929] usb 6-1: Manufacturer: syz [ 1137.922248][ T6929] usb 6-1: SerialNumber: syz [ 1137.938390][ T6929] usb 6-1: config 0 descriptor?? 12:45:21 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) 12:45:21 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000380)={0xf, 0x8}, 0x10) 12:45:21 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:21 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8f0704"], 0x0) [ 1137.973285][ T6928] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1137.995852][ T6929] r8712u: register rtl8712_netdev_ops to netdev_ops [ 1138.027039][ T6929] usb 6-1: r8712u: USB_SPEED_HIGH with 0 endpoints 12:45:21 executing program 1: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="0e", 0x1, 0xfffffffffffffffd) keyctl$invalidate(0x15, r0) add_key$user(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x3}, &(0x7f0000000780)="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", 0x1ea, 0xfffffffffffffffd) [ 1138.228757][ T6928] usb 1-1: device descriptor read/64, error -71 [ 1138.252786][ T6929] usb 6-1: r8712u: Boot from EFUSE: Autoload Failed [ 1138.259532][ T6929] usb 6-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 1138.268101][ T6929] usb 6-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 1138.277501][ T6929] usb 6-1: USB disconnect, device number 30 [ 1138.342835][ T6933] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1138.352906][ T6928] usb usb1-port1: attempt power cycle [ 1138.362832][ T7376] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1138.622642][ T6933] usb 4-1: Using ep0 maxpacket: 16 [ 1138.732815][ T7376] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1138.755403][ T7376] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.772758][ T6933] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1138.780801][ T6933] usb 4-1: config 0 has no interface number 0 [ 1138.786996][ T6928] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1138.797036][ T7376] usb 3-1: config 0 descriptor?? [ 1138.842801][ T6933] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1138.844840][ T7376] gspca_main: se401-2.14.0 probing 047d:5001 [ 1138.922975][ T6928] usb 1-1: device descriptor read/8, error -71 [ 1138.992934][ T6933] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1139.009411][ T6933] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1139.017916][ T6933] usb 4-1: Product: syz [ 1139.022115][ T6933] usb 4-1: SerialNumber: syz [ 1139.048058][ T6933] usb 4-1: config 0 descriptor?? [ 1139.096389][ T6933] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input19 [ 1139.192821][ T6928] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1139.282717][ T6928] usb 1-1: device descriptor read/8, error -71 [ 1139.292729][ T7376] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1139.300084][ T7376] se401: probe of 3-1:0.0 failed with error -71 [ 1139.332535][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1139.334323][ T7376] usb 3-1: USB disconnect, device number 25 [ 1139.352608][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1139.367297][ T7372] usb 4-1: USB disconnect, device number 30 [ 1139.382604][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 1139.389651][ T7372] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1139.403766][ T6928] usb usb1-port1: unable to enumerate USB device 12:45:23 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) 12:45:23 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:23 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf, 0x21, 0x33, 0x8, 0xb05, 0x1791, 0x7ddf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x73, 0x64, 0x7a}}]}}]}}, 0x0) 12:45:23 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8f0704"], 0x0) 12:45:23 executing program 1: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x240000}, 0x18) 12:45:23 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) 12:45:23 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:23 executing program 1: socketpair(0x22, 0x0, 0x0, &(0x7f0000001340)) 12:45:23 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:23 executing program 1: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002540)={0x0, 0x3938700}) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x10000000) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x102, 0x0) 12:45:23 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:23 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) [ 1140.392623][ T6928] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1140.402620][ T7376] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1140.413131][ T6929] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1140.482802][ T6933] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1140.673116][ T6929] usb 4-1: Using ep0 maxpacket: 16 [ 1140.678873][ T6928] usb 6-1: Using ep0 maxpacket: 8 [ 1140.684285][ T6933] usb 1-1: device descriptor read/64, error -71 [ 1140.793403][ T7376] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1140.802890][ T7376] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.812890][ T7376] usb 3-1: config 0 descriptor?? [ 1140.814167][ T6929] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1140.837197][ T6929] usb 4-1: config 0 has no interface number 0 [ 1140.844405][ T6929] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1140.855240][ T7376] gspca_main: se401-2.14.0 probing 047d:5001 [ 1140.982746][ T6933] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1141.002862][ T6928] usb 6-1: New USB device found, idVendor=0b05, idProduct=1791, bcdDevice=7d.df [ 1141.011969][ T6928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.020155][ T6929] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1141.029711][ T6929] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1141.037933][ T6928] usb 6-1: Product: syz [ 1141.042193][ T6928] usb 6-1: Manufacturer: syz [ 1141.052209][ T6929] usb 4-1: Product: syz [ 1141.056485][ T6928] usb 6-1: SerialNumber: syz [ 1141.061155][ T6929] usb 4-1: SerialNumber: syz [ 1141.077737][ T6929] usb 4-1: config 0 descriptor?? [ 1141.084585][ T6928] usb 6-1: config 0 descriptor?? [ 1141.135006][ T6928] r8712u: register rtl8712_netdev_ops to netdev_ops [ 1141.147990][ T6929] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input20 [ 1141.160372][ T6928] usb 6-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 1141.172575][ T6933] usb 1-1: device descriptor read/64, error -71 [ 1141.282654][ T7376] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1141.292897][ T6933] usb usb1-port1: attempt power cycle [ 1141.295782][ T7376] se401: probe of 3-1:0.0 failed with error -71 [ 1141.307420][ T7376] usb 3-1: USB disconnect, device number 26 [ 1141.353573][ T6929] usb 4-1: USB disconnect, device number 31 [ 1141.372718][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 1141.385064][ T6929] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1141.393823][ T6928] usb 6-1: r8712u: Boot from EFUSE: Autoload Failed [ 1141.400598][ T6928] usb 6-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 1141.408584][ T6928] usb 6-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 1141.431173][ T6928] usb 6-1: USB disconnect, device number 31 [ 1141.722580][ T6933] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1141.813272][ T6933] usb 1-1: device descriptor read/8, error -71 [ 1142.082736][ T6933] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1142.182918][ T6933] usb 1-1: device descriptor read/8, error -71 [ 1142.312924][ T6933] usb usb1-port1: unable to enumerate USB device 12:45:26 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 12:45:26 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440), 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000008b11837004000010203010902"], 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f00000002c0)={0xa3, 0x0, &(0x7f0000000080)}) 12:45:26 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) 12:45:26 executing program 3: 12:45:26 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf, 0x21, 0x33, 0x8, 0xb05, 0x1791, 0x7ddf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x73, 0x64, 0x7a}}]}}]}}, 0x0) 12:45:26 executing program 3: 12:45:26 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440), 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:26 executing program 3: 12:45:26 executing program 3: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 12:45:26 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440), 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:26 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) [ 1143.502701][ T7372] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1143.542704][ T7376] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1143.562651][ T6933] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1143.612561][ T22] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1143.782669][ T7376] usb 2-1: Using ep0 maxpacket: 8 [ 1143.802721][ T22] usb 1-1: device descriptor read/64, error -71 [ 1143.832672][ T6933] usb 6-1: Using ep0 maxpacket: 8 [ 1143.873857][ T7372] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1143.889528][ T7372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.899590][ T7372] usb 3-1: config 0 descriptor?? [ 1143.910563][ T7376] usb 2-1: config 0 has no interfaces? [ 1143.955431][ T7372] gspca_main: se401-2.14.0 probing 047d:5001 [ 1144.072597][ T22] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1144.080465][ T7376] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.40 [ 1144.091243][ T7376] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.099790][ T7376] usb 2-1: Product: syz [ 1144.104561][ T7376] usb 2-1: Manufacturer: syz [ 1144.109272][ T7376] usb 2-1: SerialNumber: syz [ 1144.116829][ T7376] usb 2-1: config 0 descriptor?? [ 1144.162813][ T6933] usb 6-1: New USB device found, idVendor=0b05, idProduct=1791, bcdDevice=7d.df [ 1144.171923][ T6933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.183718][ T6933] usb 6-1: Product: syz [ 1144.192752][ T6933] usb 6-1: Manufacturer: syz [ 1144.197404][ T6933] usb 6-1: SerialNumber: syz [ 1144.208083][ T6933] usb 6-1: config 0 descriptor?? [ 1144.266710][ T6933] r8712u: register rtl8712_netdev_ops to netdev_ops [ 1144.272582][ T22] usb 1-1: device descriptor read/64, error -71 [ 1144.278315][ T6933] usb 6-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 1144.376598][T23907] usb 2-1: USB disconnect, device number 67 [ 1144.382798][ T7372] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1144.407674][ T22] usb usb1-port1: attempt power cycle [ 1144.413748][ T7372] se401: probe of 3-1:0.0 failed with error -71 [ 1144.422632][ T7372] usb 3-1: USB disconnect, device number 27 [ 1144.512794][ T6933] usb 6-1: r8712u: Boot from EFUSE: Autoload Failed [ 1144.519856][ T6933] usb 6-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 1144.527779][ T6933] usb 6-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 1144.547506][ T6933] usb 6-1: USB disconnect, device number 32 [ 1144.822557][ T22] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1144.912755][ T22] usb 1-1: device descriptor read/8, error -71 [ 1145.182648][ T22] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1145.282689][ T22] usb 1-1: device descriptor read/8, error -71 [ 1145.402672][ T22] usb usb1-port1: unable to enumerate USB device 12:45:29 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 12:45:29 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:29 executing program 3: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 12:45:29 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:45:29 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf, 0x21, 0x33, 0x8, 0xb05, 0x1791, 0x7ddf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x73, 0x64, 0x7a}}]}}]}}, 0x0) 12:45:29 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000004c0), 0x5, 0xe182) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(r2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x800, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendfile(r0, r0, 0x0, 0x24002da8) 12:45:29 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) [ 1146.393963][T30454] loop5: detected capacity change from 0 to 1036 12:45:29 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2}}) 12:45:29 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, 0x0, 0x0, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:29 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000040)) 12:45:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0) 12:45:29 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, 0x0, 0x0, 0x9200000000000000) dup3(r1, r0, 0x0) [ 1146.642840][ T6933] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1146.650738][ T6929] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1146.822707][T24037] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1146.912663][ T6929] usb 6-1: Using ep0 maxpacket: 8 [ 1147.012540][T24037] usb 1-1: device descriptor read/64, error -71 [ 1147.062940][ T6933] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1147.072008][ T6933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.090976][ T6933] usb 3-1: config 0 descriptor?? [ 1147.159731][ T6933] gspca_main: se401-2.14.0 probing 047d:5001 [ 1147.292768][ T6929] usb 6-1: New USB device found, idVendor=0b05, idProduct=1791, bcdDevice=7d.df [ 1147.302588][T24037] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1147.310278][ T6929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.318675][ T6929] usb 6-1: Product: syz [ 1147.323250][ T6929] usb 6-1: Manufacturer: syz [ 1147.327870][ T6929] usb 6-1: SerialNumber: syz [ 1147.343474][ T6929] usb 6-1: config 0 descriptor?? [ 1147.384492][ T6929] r8712u: register rtl8712_netdev_ops to netdev_ops [ 1147.391119][ T6929] usb 6-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 1147.512767][T24037] usb 1-1: device descriptor read/64, error -71 [ 1147.622855][ T6929] usb 6-1: r8712u: Boot from EFUSE: Autoload Failed [ 1147.629677][ T6929] usb 6-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 1147.637629][T24037] usb usb1-port1: attempt power cycle [ 1147.644357][ T6929] usb 6-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 1147.660494][ T6929] usb 6-1: USB disconnect, device number 33 [ 1148.052530][T24037] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1148.152774][T24037] usb 1-1: device descriptor read/8, error -71 [ 1148.211733][ T6933] gspca_se401: read req failed req 0x06 error -19 [ 1148.226073][ T6933] usb 3-1: USB disconnect, device number 28 [ 1148.442655][T24037] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1148.542714][T24037] usb 1-1: device descriptor read/8, error -71 [ 1148.662831][T24037] usb usb1-port1: unable to enumerate USB device 12:45:32 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 12:45:32 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, 0x0, 0x0, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="127ec381c299ab70db9a662bc8ef67aec53e25831027651d822aa7ebf8245756bb73040f"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x1a000}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xca040baef64e987}, 0xc, 0x0}, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12:45:32 executing program 3: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 12:45:32 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:45:32 executing program 5: 12:45:32 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0), 0x0, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:32 executing program 5: 12:45:32 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0), 0x0, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:32 executing program 5: 12:45:32 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0), 0x0, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:32 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) dup3(r1, r0, 0x0) [ 1149.712636][ T6933] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1149.852769][T24037] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1150.052646][T24037] usb 1-1: device descriptor read/64, error -71 [ 1150.113269][ T6933] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1150.122379][ T6933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.144565][ T6933] usb 3-1: config 0 descriptor?? [ 1150.184428][ T6933] gspca_main: se401-2.14.0 probing 047d:5001 [ 1150.322533][T24037] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1150.522590][T24037] usb 1-1: device descriptor read/64, error -71 [ 1150.645232][T24037] usb usb1-port1: attempt power cycle [ 1151.062553][T24037] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1151.162718][T24037] usb 1-1: device descriptor read/8, error -71 [ 1151.220415][ T6933] gspca_se401: read req failed req 0x06 error -19 [ 1151.229025][ T6933] usb 3-1: USB disconnect, device number 29 [ 1151.433584][T24037] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1151.522769][T24037] usb 1-1: device descriptor read/8, error -71 [ 1151.642637][T24037] usb usb1-port1: unable to enumerate USB device 12:45:35 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fd31b408b1134200c31c0000000109021b"], 0x0) 12:45:35 executing program 5: syz_usb_connect(0x0, 0x0, 0x0, 0x0) 12:45:35 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:35 executing program 1: syz_clone(0xc0001000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) 12:45:35 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905"], 0x0) 12:45:35 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:45:35 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:35 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:35 executing program 1: r0 = syz_io_uring_setup(0x84c, &(0x7f0000000680), &(0x7f0000000700), &(0x7f0000000740)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, 0x0, 0x0) 12:45:35 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:35 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:35 executing program 1: r0 = io_uring_setup(0x3dd9, &(0x7f0000000040)={0x0, 0x0, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) [ 1152.832731][T24037] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1152.857395][ T7372] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1152.972738][ T6933] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1153.132731][ T7372] usb 4-1: Using ep0 maxpacket: 16 [ 1153.202678][T24037] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1153.211769][T24037] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.222706][ T6933] usb 1-1: Using ep0 maxpacket: 8 [ 1153.243718][T24037] usb 3-1: config 0 descriptor?? [ 1153.263137][ T7372] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1153.271366][ T7372] usb 4-1: config 0 has no interface number 0 [ 1153.278069][ T7372] usb 4-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1153.284897][T24037] gspca_main: se401-2.14.0 probing 047d:5001 [ 1153.342740][ T6933] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1153.357535][ T6933] usb 1-1: config 0 has no interfaces? [ 1153.363536][ T6933] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1c.c3 [ 1153.376938][ T6933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.390657][ T6933] usb 1-1: config 0 descriptor?? [ 1153.422974][ T7372] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1153.444016][ T7372] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1153.461019][ T7372] usb 4-1: Product: syz [ 1153.469667][ T7372] usb 4-1: SerialNumber: syz [ 1153.487143][ T7372] usb 4-1: config 0 descriptor?? [ 1153.565133][ T7372] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 1153.639452][ T7372] usb 1-1: USB disconnect, device number 48 [ 1153.769225][T29791] usb 4-1: USB disconnect, device number 32 12:45:37 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fd31b408b1134200c31c0000000109021b"], 0x0) 12:45:37 executing program 2: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 12:45:37 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "194411", 0x8, 0x2b, 0x0, @private1, @local, {[@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x12}]}}}}}, 0x0) 12:45:37 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:37 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905"], 0x0) 12:45:37 executing program 5: syz_usb_connect(0x0, 0x0, 0x0, 0x0) 12:45:37 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:37 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0xfe8) [ 1154.333598][T24037] gspca_se401: read req failed req 0x06 error -19 [ 1154.352359][T24037] usb 3-1: USB disconnect, device number 30 12:45:37 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:37 executing program 1: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x40) 12:45:37 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x48000, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000002180), r0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000002180), 0xffffffffffffffff) syz_clone(0xc0060140, 0x0, 0x0, &(0x7f000000c500), &(0x7f000000c540), 0x0) syz_open_dev$sndpcmc(&(0x7f000000e680), 0xfffffffffffff801, 0x80000) 12:45:37 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000) dup3(r1, r0, 0x0) [ 1154.502631][T29791] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1154.672575][ T7372] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1154.754771][T29791] usb 1-1: Using ep0 maxpacket: 8 [ 1154.892877][T29791] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.903118][T29791] usb 1-1: config 0 has no interfaces? [ 1154.912978][T29791] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1c.c3 [ 1154.922077][T29791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.930559][ T7372] usb 4-1: Using ep0 maxpacket: 16 [ 1154.943944][T29791] usb 1-1: config 0 descriptor?? [ 1155.063730][ T7372] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1155.071913][ T7372] usb 4-1: config 0 has no interface number 0 [ 1155.080619][ T7372] usb 4-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1155.196612][T23907] usb 1-1: USB disconnect, device number 49 [ 1155.222722][ T7372] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1155.232769][ T7372] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1155.240988][ T7372] usb 4-1: Product: syz [ 1155.246599][ T7372] usb 4-1: SerialNumber: syz [ 1155.253509][ T7372] usb 4-1: config 0 descriptor?? [ 1155.315451][ T7372] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 1155.516350][T23907] usb 4-1: USB disconnect, device number 33 12:45:38 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fd31b408b1134200c31c0000000109021b"], 0x0) 12:45:38 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:38 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f182edbd09d461f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 12:45:38 executing program 2: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 12:45:39 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905"], 0x0) 12:45:39 executing program 5: syz_usb_connect(0x0, 0x0, 0x0, 0x0) 12:45:39 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, &(0x7f0000001180)=""/101, 0x65) 12:45:39 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000) dup3(r1, r0, 0x0) 12:45:39 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x0) dup3(r1, r0, 0x0) 12:45:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x44, 0x0, &(0x7f0000001100)) [ 1156.072584][T29791] usb 1-1: new high-speed USB device number 50 using dummy_hcd 12:45:39 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={0x0, 0x226000, 0x1000}, 0x20) 12:45:39 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x0) dup3(r1, r0, 0x0) [ 1156.332795][T29791] usb 1-1: Using ep0 maxpacket: 8 [ 1156.402597][ T6928] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1156.472591][T29791] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.492470][T29791] usb 1-1: config 0 has no interfaces? [ 1156.498016][T29791] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1c.c3 [ 1156.522584][T29791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.550664][T29791] usb 1-1: config 0 descriptor?? [ 1156.652567][ T6928] usb 4-1: Using ep0 maxpacket: 16 [ 1156.772719][ T6928] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1156.780794][ T6928] usb 4-1: config 0 has no interface number 0 [ 1156.786963][ T6928] usb 4-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1156.814891][T29791] usb 1-1: USB disconnect, device number 50 [ 1156.932794][ T6928] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1156.942005][ T6928] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1156.950602][ T6928] usb 4-1: Product: syz [ 1156.954953][ T6928] usb 4-1: SerialNumber: syz [ 1156.962908][ T6928] usb 4-1: config 0 descriptor?? [ 1157.015785][ T6928] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 1157.215814][T29791] usb 4-1: USB disconnect, device number 34 12:45:40 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fd31b408b1134200c31c0000000109021b00010000000009040000"], 0x0) 12:45:40 executing program 2: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 12:45:40 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000015c0)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0}, 0x0) 12:45:40 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x0) dup3(r1, r0, 0x0) 12:45:40 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB], 0x0) [ 1157.672535][ T6928] usb 1-1: new high-speed USB device number 51 using dummy_hcd 12:45:40 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf, 0x21, 0x33, 0x0, 0xb05, 0x1791, 0x7ddf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x73, 0x64, 0x7a}}]}}]}}, 0x0) 12:45:40 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(0xffffffffffffffff, r0, 0x0) 12:45:40 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x80047441, 0x1000000000010) 12:45:40 executing program 1: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002280)={@ifindex, 0xffffffffffffffff, 0x14, 0x0, 0xffffffffffffffff, @link_id}, 0x20) 12:45:40 executing program 1: mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0xffffd000) mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x2) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'macvlan1\x00'}, 0x18) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x3, &(0x7f0000000040)=0x9, 0x4, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x96415, 0x8001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 12:45:40 executing program 2: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1157.922573][ T6928] usb 1-1: Using ep0 maxpacket: 8 [ 1157.935941][T30617] device dummy0 entered promiscuous mode [ 1157.949346][T30617] device dummy0 left promiscuous mode 12:45:41 executing program 1: process_vm_readv(0x0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/173, 0xfffffffffffffe76}, {&(0x7f0000000000)=""/83}, {&(0x7f0000000240)=""/92}, {&(0x7f00000003c0)=""/139}], 0x1, &(0x7f0000000d40)=[{&(0x7f0000000480)=""/221, 0xde}], 0x1, 0x0) [ 1158.032627][T29791] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1158.062722][T23907] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1158.064592][ T6928] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.089028][ T6928] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1c.c3 [ 1158.098564][ T6928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.120820][ T6928] usb 1-1: config 0 descriptor?? [ 1158.180428][ T6928] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1158.242554][T29791] usb 6-1: device descriptor read/64, error -71 [ 1158.313308][T23907] usb 4-1: Using ep0 maxpacket: 16 [ 1158.376775][ T7372] usb 1-1: USB disconnect, device number 51 [ 1158.392836][ T8606] usb 1-1: Failed to submit usb control message: -71 [ 1158.400128][ T8606] usb 1-1: unable to send the bmi data to the device: -71 [ 1158.414111][ T8606] usb 1-1: unable to get target info from device [ 1158.420486][ T8606] usb 1-1: could not get target info (-71) [ 1158.430066][ T8606] usb 1-1: could not probe fw (-71) [ 1158.433120][T23907] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1158.444466][T23907] usb 4-1: config 0 has no interface number 0 [ 1158.450916][T23907] usb 4-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1158.512687][T29791] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1158.582726][T23907] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1158.592307][T23907] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1158.600877][T23907] usb 4-1: Product: syz [ 1158.612555][T23907] usb 4-1: SerialNumber: syz [ 1158.619349][T23907] usb 4-1: config 0 descriptor?? [ 1158.678971][T23907] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 1158.702546][T29791] usb 6-1: device descriptor read/64, error -71 [ 1158.823209][T29791] usb usb6-port1: attempt power cycle 12:45:41 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fd31b408b1134200c31c0000000109021b00010000000009040000"], 0x0) 12:45:41 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000080)) 12:45:41 executing program 2: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:45:41 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(0xffffffffffffffff, r0, 0x0) [ 1158.881743][ T6933] usb 4-1: USB disconnect, device number 35 [ 1159.242913][T29791] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1159.262645][ T3720] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1159.333313][T29791] usb 6-1: device descriptor read/8, error -71 12:45:42 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB], 0x0) [ 1159.542721][ T3720] usb 1-1: Using ep0 maxpacket: 8 [ 1159.612636][T29791] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1159.684571][ T3720] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.696262][ T3720] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1c.c3 [ 1159.702551][ T6933] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1159.706219][ T3720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.722725][T29791] usb 6-1: device descriptor read/8, error -71 [ 1159.736588][ T3720] usb 1-1: config 0 descriptor?? [ 1159.777241][ T3720] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1159.842986][T29791] usb usb6-port1: unable to enumerate USB device [ 1159.952621][ T6933] usb 4-1: Using ep0 maxpacket: 16 [ 1159.978228][T29791] usb 1-1: USB disconnect, device number 52 [ 1159.992825][ T8606] usb 1-1: Failed to submit usb control message: -71 [ 1160.000351][ T8606] usb 1-1: unable to send the bmi data to the device: -71 [ 1160.007991][ T8606] usb 1-1: unable to get target info from device [ 1160.016670][ T8606] usb 1-1: could not get target info (-71) [ 1160.022745][ T8606] usb 1-1: could not probe fw (-71) [ 1160.073093][ T6933] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1160.081153][ T6933] usb 4-1: config 0 has no interface number 0 [ 1160.088053][ T6933] usb 4-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1160.212646][ T6933] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1160.226805][ T6933] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1160.235308][ T6933] usb 4-1: Product: syz [ 1160.239559][ T6933] usb 4-1: SerialNumber: syz [ 1160.252547][ T6933] usb 4-1: config 0 descriptor?? [ 1160.295627][ T6933] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 1160.496679][T23907] usb 4-1: USB disconnect, device number 36 12:45:43 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf, 0x21, 0x33, 0x0, 0xb05, 0x1791, 0x7ddf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x73, 0x64, 0x7a}}]}}]}}, 0x0) 12:45:43 executing program 1: capget(&(0x7f0000000040)={0x20071026}, &(0x7f0000000100)) 12:45:43 executing program 2: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:45:43 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(0xffffffffffffffff, r0, 0x0) 12:45:43 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fd31b408b1134200c31c0000000109021b00010000000009040000"], 0x0) 12:45:43 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:45:44 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB], 0x0) [ 1161.082849][T29791] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1161.122588][ T6933] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1161.272598][T23907] usb 6-1: new high-speed USB device number 38 using dummy_hcd 12:45:44 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1161.322615][T24037] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1161.323756][T29791] usb 1-1: Using ep0 maxpacket: 8 [ 1161.462723][T29791] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1161.477397][T29791] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1c.c3 [ 1161.486822][T23907] usb 6-1: device descriptor read/64, error -71 [ 1161.493340][T29791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.502868][ T6933] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1161.510574][T29791] usb 1-1: config 0 descriptor?? [ 1161.515372][ T6933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.535564][ T6933] usb 2-1: config 0 descriptor?? [ 1161.567446][T29791] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1161.583449][T24037] usb 4-1: Using ep0 maxpacket: 16 12:45:44 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, 0xffffffffffffffff, 0x0) [ 1161.657016][ T6925] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1161.702762][T24037] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1161.710808][T24037] usb 4-1: config 0 has no interface number 0 [ 1161.722549][T24037] usb 4-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1161.759723][T29791] usb 1-1: USB disconnect, device number 53 [ 1161.762993][T11430] usb 1-1: Failed to submit usb control message: -71 [ 1161.765933][T23907] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1161.781488][T11430] usb 1-1: could not get target info (-71) [ 1161.790362][T11430] usb 1-1: could not probe fw (-71) [ 1161.873129][ T6925] usb 3-1: device descriptor read/64, error -71 [ 1161.895566][T24037] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1161.905048][T24037] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1161.913646][T24037] usb 4-1: Product: syz [ 1161.918047][T24037] usb 4-1: SerialNumber: syz [ 1161.924935][T24037] usb 4-1: config 0 descriptor?? [ 1161.966072][T24037] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 1161.972828][T23907] usb 6-1: device descriptor read/64, error -71 [ 1162.092752][T23907] usb usb6-port1: attempt power cycle [ 1162.152531][ T6925] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1162.175973][T24037] usb 4-1: USB disconnect, device number 37 12:45:45 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fd31b408b1134200c31c0000000109021b0001000000000904000001602ef600"], 0x0) [ 1162.262951][ T6933] usb 2-1: Firmware version (0.0) predates our first public release. [ 1162.271396][ T6933] usb 2-1: Please update to version 0.2 or newer [ 1162.363117][ T6925] usb 3-1: device descriptor read/64, error -71 [ 1162.384189][ T6933] usb 2-1: USB disconnect, device number 68 12:45:45 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, 0xffffffffffffffff, 0x0) [ 1162.482802][ T6925] usb usb3-port1: attempt power cycle [ 1162.502627][T23907] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1162.612672][T23907] usb 6-1: device descriptor read/8, error -71 [ 1162.619038][ T22] usb 1-1: new high-speed USB device number 54 using dummy_hcd 12:45:45 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8f07"], 0x0) [ 1162.862565][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 1162.882633][T23907] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1162.902543][ T6925] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1162.972618][T23907] usb 6-1: device descriptor read/8, error -71 [ 1162.982593][ T6933] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1162.982851][ T22] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.003068][ T6925] usb 3-1: device descriptor read/8, error -71 [ 1163.008009][ T22] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1163.028587][ T22] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1c.c3 [ 1163.038218][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.057604][ T22] usb 1-1: config 0 descriptor?? [ 1163.122732][T23907] usb usb6-port1: unable to enumerate USB device [ 1163.262538][ T6933] usb 4-1: Using ep0 maxpacket: 16 [ 1163.272583][ T6925] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1163.307840][T23907] usb 1-1: USB disconnect, device number 54 [ 1163.322805][ T8606] ath10k_warn: 3 callbacks suppressed [ 1163.322825][ T8606] usb 1-1: Failed to submit usb control message: -71 [ 1163.336269][ T8606] usb 1-1: unable to send the bmi data to the device: -71 [ 1163.344075][ T8606] usb 1-1: unable to get target info from device [ 1163.350595][ T8606] usb 1-1: could not get target info (-71) [ 1163.357197][ T8606] usb 1-1: could not probe fw (-71) [ 1163.380512][ T6925] usb 3-1: device descriptor read/8, error -71 [ 1163.388722][ T6933] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1163.402974][ T6933] usb 4-1: config 0 has no interface number 0 [ 1163.414045][ T6933] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1163.426008][ T6933] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1163.513044][ T6925] usb usb3-port1: unable to enumerate USB device [ 1163.552665][ T6933] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1163.563792][ T6933] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1163.571959][ T6933] usb 4-1: Product: syz [ 1163.581013][ T6933] usb 4-1: SerialNumber: syz [ 1163.591666][ T6933] usb 4-1: config 0 descriptor?? [ 1163.642236][ T6933] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 1163.649932][ T6933] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input21 12:45:46 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf, 0x21, 0x33, 0x0, 0xb05, 0x1791, 0x7ddf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x73, 0x64, 0x7a}}]}}]}}, 0x0) 12:45:46 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:45:46 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, 0xffffffffffffffff, 0x0) 12:45:46 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fd31b408b1134200c31c0000000109021b0001000000000904000001602ef600"], 0x0) [ 1163.836257][T23907] usb 4-1: USB disconnect, device number 38 [ 1163.842529][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1163.849616][T23907] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1164.182561][ T22] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1164.192757][ T7372] usb 2-1: new high-speed USB device number 69 using dummy_hcd 12:45:47 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8f07"], 0x0) 12:45:47 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1164.352829][T29791] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1164.422516][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 1164.542607][T29791] usb 6-1: device descriptor read/64, error -71 [ 1164.552987][ T7372] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1164.562317][ T22] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.572696][ T7372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.581426][ T22] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1164.602817][ T7372] usb 2-1: config 0 descriptor?? [ 1164.607970][ T22] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1c.c3 [ 1164.617215][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.632259][ T22] usb 1-1: config 0 descriptor?? [ 1164.679554][ T22] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! 12:45:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x40) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x2, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12:45:47 executing program 4: timer_create(0x0, 0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, r0+60000000}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000001c0)) [ 1164.779940][T30690] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1164.790413][T23907] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1164.813537][T29791] usb 6-1: new high-speed USB device number 43 using dummy_hcd 12:45:47 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0xd3e, 0x7a15, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x48) [ 1164.872770][ T6933] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1164.877493][ T3720] usb 1-1: USB disconnect, device number 55 [ 1164.892910][T11430] usb 1-1: Failed to submit usb control message: -71 [ 1164.908902][T11430] usb 1-1: unable to send the bmi data to the device: -71 [ 1164.920211][T11430] usb 1-1: unable to get target info from device [ 1164.930858][T11430] usb 1-1: could not get target info (-71) [ 1164.947976][T11430] usb 1-1: could not probe fw (-71) [ 1165.012766][T29791] usb 6-1: device descriptor read/64, error -71 [ 1165.032592][T23907] usb 4-1: Using ep0 maxpacket: 16 [ 1165.072611][ T6933] usb 3-1: device descriptor read/64, error -71 [ 1165.132750][T29791] usb usb6-port1: attempt power cycle [ 1165.153084][T23907] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1165.161760][T23907] usb 4-1: config 0 has no interface number 0 [ 1165.169869][T23907] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1165.189591][T23907] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1165.313004][T23907] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1165.323291][ T7372] usb 2-1: Firmware version (0.0) predates our first public release. [ 1165.331737][ T7372] usb 2-1: Please update to version 0.2 or newer [ 1165.338950][T23907] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1165.347701][T23907] usb 4-1: Product: syz [ 1165.352135][T23907] usb 4-1: SerialNumber: syz 12:45:48 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fd31b408b1134200c31c0000000109021b0001000000000904000001602ef600"], 0x0) [ 1165.364027][T23907] usb 4-1: config 0 descriptor?? [ 1165.369479][ T6933] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1165.423387][T23907] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 1165.439418][T23907] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input22 [ 1165.452165][ T7372] usb 2-1: USB disconnect, device number 69 [ 1165.562575][T29791] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1165.592683][ T6933] usb 3-1: device descriptor read/64, error -71 [ 1165.619202][ T6925] usb 4-1: USB disconnect, device number 39 [ 1165.632585][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1165.644415][ T6925] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1165.652753][T29791] usb 6-1: device descriptor read/8, error -71 [ 1165.720878][ T6933] usb usb3-port1: attempt power cycle 12:45:48 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1165.772534][ T7376] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1165.922514][T29791] usb 6-1: new high-speed USB device number 45 using dummy_hcd 12:45:49 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101002) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000040)={0x0, 0x2, [{0x1, 0x1}, {0x1}]}) [ 1166.012786][T29791] usb 6-1: device descriptor read/8, error -71 [ 1166.019030][ T7376] usb 1-1: Using ep0 maxpacket: 8 [ 1166.142802][ T7376] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.152506][ T6933] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1166.156492][T29791] usb usb6-port1: unable to enumerate USB device [ 1166.185310][ T7376] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1166.200498][ T7376] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1c.c3 [ 1166.210549][ T7376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.225595][T30700] usb usb5: usbfs: process 30700 (syz-executor.4) did not claim interface 0 before use [ 1166.242931][ T6933] usb 3-1: device descriptor read/8, error -71 [ 1166.256936][ T7376] usb 1-1: config 0 descriptor?? [ 1166.335656][ T7376] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1166.497191][T29791] usb 1-1: USB disconnect, device number 56 [ 1166.512907][ T6933] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1166.520683][ T6925] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1166.520990][ T8606] usb 1-1: Failed to submit usb control message: -71 [ 1166.541058][ T8606] usb 1-1: unable to send the bmi data to the device: -71 [ 1166.549814][ T8606] usb 1-1: could not get target info (-71) [ 1166.560904][ T8606] usb 1-1: could not probe fw (-71) [ 1166.622712][ T6933] usb 3-1: device descriptor read/8, error -71 [ 1166.742671][ T6933] usb usb3-port1: unable to enumerate USB device [ 1166.892610][ T6925] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1166.902075][ T6925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.912330][ T6925] usb 2-1: config 0 descriptor?? 12:45:49 executing program 4: read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 12:45:49 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8f07"], 0x0) 12:45:49 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0xc080aebe, 0x0) 12:45:50 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fd31b408b1134200c31c0000000109021b0001000000000904000001602ef600090502"], 0x0) 12:45:50 executing program 4: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @dest_unreach={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty=0x30f, {[@timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@dev}, {@remote}, {@remote}, {@local}, {@broadcast}]}, @rr={0x7, 0xb, 0x0, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}}}, 0x0) [ 1167.252553][T24037] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1167.372731][ T6933] usb 1-1: new high-speed USB device number 57 using dummy_hcd 12:45:50 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:45:50 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0x5460, 0x0) 12:45:50 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a0, &(0x7f0000000100)={'sit0\x00', 0x0}) 12:45:50 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x7}, 0x48) 12:45:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000006500)=0x200, 0x4) [ 1167.492798][T24037] usb 4-1: Using ep0 maxpacket: 16 [ 1167.613056][T24037] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1167.621118][T24037] usb 4-1: config 0 has no interface number 0 [ 1167.627806][ T6933] usb 1-1: Using ep0 maxpacket: 8 [ 1167.634029][ T6925] usb 2-1: Firmware version (0.0) predates our first public release. [ 1167.642393][ T6925] usb 2-1: Please update to version 0.2 or newer [ 1167.649506][T24037] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1167.660980][T24037] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1167.752744][ T6933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1167.764656][ T6925] usb 2-1: USB disconnect, device number 70 [ 1167.771426][ T6933] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1c.c3 [ 1167.781394][ T6933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.789884][T24037] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1167.806563][T24037] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1167.815671][ T6933] usb 1-1: config 0 descriptor?? [ 1167.820816][T24037] usb 4-1: Product: syz [ 1167.825112][T24037] usb 4-1: SerialNumber: syz [ 1167.843801][T24037] usb 4-1: config 0 descriptor?? [ 1167.884499][T24037] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 1167.892178][T24037] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input23 [ 1167.912511][ T6928] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1168.063203][T29791] usb 1-1: USB disconnect, device number 57 [ 1168.072716][ T8601] usb 1-1: could not get target info (-71) [ 1168.081239][ T8601] usb 1-1: could not probe fw (-71) [ 1168.090687][T24037] usb 4-1: USB disconnect, device number 40 [ 1168.096840][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1168.096868][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 12:45:51 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:45:51 executing program 4: capset(&(0x7f0000000200)={0x20080522}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8}) 12:45:51 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) [ 1168.122646][ T6928] usb 3-1: device descriptor read/64, error -71 [ 1168.181556][T24037] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1168.392634][ T6928] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1168.502503][ T6926] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1168.582529][ T6928] usb 3-1: device descriptor read/64, error -71 12:45:51 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="8f0704"], 0x0) 12:45:51 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) syz_emit_ethernet(0x4c, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x16, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x4}, "2775a7399c79"}}}}}}}, 0x0) 12:45:51 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000300)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) 12:45:51 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fd31b408b1134200c31c0000000109021b0001000000000904000001602ef600090502"], 0x0) [ 1168.704446][ T6928] usb usb3-port1: attempt power cycle [ 1168.862699][ T6926] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1168.879382][ T6926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.890450][ T6926] usb 2-1: config 0 descriptor?? [ 1168.982597][ T6925] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1169.062558][T29791] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1169.112686][ T6928] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1169.212706][ T6928] usb 3-1: device descriptor read/8, error -71 [ 1169.235169][ T6925] usb 1-1: Using ep0 maxpacket: 8 [ 1169.262600][T29791] usb 4-1: device descriptor read/64, error -71 [ 1169.352692][ T6925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1169.362701][ T6925] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1c.c3 [ 1169.371820][ T6925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.381699][ T6925] usb 1-1: config 0 descriptor?? [ 1169.427130][ T6925] ath10k_warn: 5 callbacks suppressed [ 1169.427153][ T6925] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1169.482670][ T6928] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1169.542602][T29791] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1169.572590][ T6928] usb 3-1: device descriptor read/8, error -71 [ 1169.622837][ T6926] usb 2-1: Firmware version (0.0) predates our first public release. [ 1169.632317][ T7372] usb 1-1: USB disconnect, device number 58 [ 1169.633445][ T6926] usb 2-1: Please update to version 0.2 or newer [ 1169.638494][ T8606] usb 1-1: Failed to submit usb control message: -71 [ 1169.652797][ T8606] usb 1-1: unable to send the bmi data to the device: -71 [ 1169.669494][ T8606] usb 1-1: unable to get target info from device [ 1169.678838][ T8606] usb 1-1: could not get target info (-71) [ 1169.689924][ T8606] usb 1-1: could not probe fw (-71) [ 1169.692832][ T6928] usb usb3-port1: unable to enumerate USB device [ 1169.762779][T29791] usb 4-1: device descriptor read/64, error -71 [ 1169.777579][ T6926] usb 2-1: USB disconnect, device number 71 [ 1169.882915][T29791] usb usb4-port1: attempt power cycle [ 1170.312606][T29791] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1170.402629][T29791] usb 4-1: device descriptor read/8, error -71 12:45:53 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:45:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'vlan0\x00', 0x2}) ioctl$TUNSETFILTEREBPF(r0, 0x400454dc, 0x0) 12:45:53 executing program 5: socket(0x15, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d0800000f79011000000080211000001505050505050000000000000", @ANYRES8=r0], 0x40}}, 0x0) 12:45:53 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:45:53 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fd31b408b1134200c31c0000000109021b0001000000000904000001602ef600090502"], 0x0) 12:45:53 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000000)={@mcast2}, 0x14) 12:45:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40086602, 0x0) 12:45:53 executing program 5: pipe(&(0x7f0000002780)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map=r0, 0xffffffffffffffff, 0x5}, 0x20) [ 1170.672729][T29791] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1170.772764][T29791] usb 4-1: device descriptor read/8, error -71 [ 1170.802609][ T6926] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1170.812551][T23907] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1170.892638][T29791] usb usb4-port1: unable to enumerate USB device [ 1170.982747][ T6928] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1171.062629][ T6926] usb 1-1: Using ep0 maxpacket: 8 [ 1171.172674][T23907] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1171.186622][T23907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.201093][T23907] usb 2-1: config 0 descriptor?? [ 1171.202656][ T6928] usb 3-1: device descriptor read/64, error -71 [ 1171.232658][ T6926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1171.243012][ T6926] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1c.c3 [ 1171.252245][ T6926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.269616][ T6926] usb 1-1: config 0 descriptor?? [ 1171.330019][ T6926] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1171.482780][ T6928] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1171.535545][ T6926] usb 1-1: USB disconnect, device number 59 [ 1171.542716][ T8601] usb 1-1: Failed to submit usb control message: -71 [ 1171.552155][ T8601] usb 1-1: unable to send the bmi data to the device: -71 [ 1171.560065][ T8601] usb 1-1: unable to get target info from device [ 1171.568948][ T8601] usb 1-1: could not get target info (-71) [ 1171.575068][ T8601] usb 1-1: could not probe fw (-71) 12:45:54 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="8f0704"], 0x0) 12:45:54 executing program 4: r0 = io_uring_setup(0x3630, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000700)={0x1, 0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001b00), 0x0) 12:45:54 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0xc0189436, 0x0) [ 1171.702900][ T6928] usb 3-1: device descriptor read/64, error -71 [ 1171.713080][T23907] usb 2-1: Firmware version (0.0) predates our first public release. [ 1171.721205][T23907] usb 2-1: Please update to version 0.2 or newer 12:45:54 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, &(0x7f00000004c0)) [ 1171.822816][ T6928] usb usb3-port1: attempt power cycle [ 1171.856324][T23907] usb 2-1: USB disconnect, device number 72 [ 1172.212803][ T6926] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1172.292689][ T6928] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1172.392607][ T6928] usb 3-1: device descriptor read/8, error -71 [ 1172.412675][ T6926] usb 4-1: device descriptor read/64, error -71 [ 1172.672552][ T6928] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1172.702583][ T6926] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1172.762693][ T6928] usb 3-1: device descriptor read/8, error -71 [ 1172.894687][ T6928] usb usb3-port1: unable to enumerate USB device [ 1172.912590][ T6926] usb 4-1: device descriptor read/64, error -71 [ 1173.043226][ T6926] usb usb4-port1: attempt power cycle [ 1173.462760][ T6926] usb 4-1: new high-speed USB device number 47 using dummy_hcd 12:45:56 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:45:56 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x0) 12:45:56 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fd31b408b1134200c31c0000000109021b0001000000000904000001602ef60009050206"], 0x0) 12:45:56 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:45:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_newrule={0x1c, 0x18, 0xa23, 0x0, 0x0, {0xa, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0) [ 1173.553328][ T6926] usb 4-1: device descriptor read/8, error -71 12:45:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) [ 1173.624061][T30784] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1173.631918][T30784] IPv6: NLM_F_CREATE should be set when creating new route [ 1173.639224][T30784] IPv6: NLM_F_CREATE should be set when creating new route 12:45:56 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000340), 0x4) dup(r0) fsopen(0x0, 0x0) 12:45:56 executing program 5: syz_clone(0x40100000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f00000001c0)) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f00000000c0)=""/211) [ 1173.746873][T30794] sctp: [Deprecated]: syz-executor.5 (pid 30794) Use of int in max_burst socket option deprecated. [ 1173.746873][T30794] Use struct sctp_assoc_value instead [ 1173.842541][ T6926] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1173.892559][ T6928] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1173.912597][T23907] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1173.945709][ T6926] usb 4-1: device descriptor read/8, error -71 [ 1174.042618][ T7372] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1174.072902][ T6926] usb usb4-port1: unable to enumerate USB device [ 1174.182684][ T6928] usb 1-1: Using ep0 maxpacket: 8 [ 1174.232593][ T7372] usb 3-1: device descriptor read/64, error -71 [ 1174.293271][T23907] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1174.303029][T23907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.318036][T23907] usb 2-1: config 0 descriptor?? [ 1174.332844][ T6928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1174.347774][ T6928] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1174.358317][ T6928] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1c.c3 [ 1174.367835][ T6928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.381607][ T6928] usb 1-1: config 0 descriptor?? [ 1174.451068][ T6928] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1174.502575][ T7372] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1174.646531][ T6928] usb 1-1: USB disconnect, device number 60 [ 1174.652668][ T8606] usb 1-1: Failed to submit usb control message: -71 [ 1174.665766][ T8606] usb 1-1: unable to send the bmi data to the device: -71 [ 1174.673633][ T8606] usb 1-1: unable to get target info from device [ 1174.680087][ T8606] usb 1-1: could not get target info (-71) [ 1174.686102][ T8606] usb 1-1: could not probe fw (-71) [ 1174.694739][ T7372] usb 3-1: device descriptor read/64, error -71 12:45:57 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="8f0704"], 0x0) 12:45:57 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 12:45:57 executing program 4: r0 = getpgrp(0x0) capset(&(0x7f0000000300)={0x19980330, r0}, 0x0) [ 1174.812709][ T7372] usb usb3-port1: attempt power cycle [ 1174.822720][T23907] usb 2-1: Firmware version (0.0) predates our first public release. [ 1174.830933][T23907] usb 2-1: Please update to version 0.2 or newer 12:45:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 1174.944480][T23907] usb 2-1: USB disconnect, device number 73 [ 1175.222631][ T7372] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1175.322520][ T6925] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1175.322895][ T7372] usb 3-1: device descriptor read/8, error -71 [ 1175.532651][ T6925] usb 4-1: device descriptor read/64, error -71 [ 1175.612618][ T7372] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1175.702653][ T7372] usb 3-1: device descriptor read/8, error -71 [ 1175.812794][ T6925] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1175.823021][ T7372] usb usb3-port1: unable to enumerate USB device [ 1176.012504][ T6925] usb 4-1: device descriptor read/64, error -71 [ 1176.133045][ T6925] usb usb4-port1: attempt power cycle [ 1176.542535][ T6925] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1176.632709][ T6925] usb 4-1: device descriptor read/8, error -71 12:45:59 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:45:59 executing program 4: r0 = socket(0x10, 0x2, 0x0) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, 0x0, 0x0) 12:45:59 executing program 5: unshare(0x0) mq_notify(0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = io_uring_setup(0x113d, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) ftruncate(0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:45:59 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fd31b408b1134200c31c0000000109021b0001000000000904000001602ef60009050206"], 0x0) 12:45:59 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:45:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 12:45:59 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x17, &(0x7f00000003c0)={r3}, 0xc) 12:45:59 executing program 4: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000400001803c1, 0x0) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0, 0x0) open(0x0, 0x0, 0x400) [ 1176.907571][ T6925] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1177.002911][ T6925] usb 4-1: device descriptor read/8, error -71 [ 1177.012551][T24037] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1177.022746][ T7372] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1177.061072][ T27] audit: type=1804 audit(1695041160.041:121): pid=30830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2486015389/syzkaller.ZkXp1E/156/file0" dev="sda1" ino=1959 res=1 errno=0 [ 1177.143070][ T6925] usb usb4-port1: unable to enumerate USB device [ 1177.163767][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.170144][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.176567][ T6928] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1177.312669][ T7372] usb 1-1: Using ep0 maxpacket: 8 [ 1177.372741][T24037] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1177.382044][ T6928] usb 3-1: device descriptor read/64, error -71 [ 1177.388595][T24037] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.400685][T24037] usb 2-1: config 0 descriptor?? [ 1177.442883][ T7372] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1177.452775][ T7372] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1177.462583][ T7372] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1c.c3 [ 1177.471664][ T7372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.482744][ T7372] usb 1-1: config 0 descriptor?? [ 1177.541548][ T7372] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1177.652620][ T6928] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1177.740445][ T6925] usb 1-1: USB disconnect, device number 61 [ 1177.752827][ T8606] usb 1-1: Failed to submit usb control message: -71 [ 1177.760669][ T8606] usb 1-1: unable to send the bmi data to the device: -71 [ 1177.768462][ T8606] usb 1-1: unable to get target info from device [ 1177.775160][ T8606] usb 1-1: could not get target info (-71) [ 1177.781103][ T8606] usb 1-1: could not probe fw (-71) [ 1177.842680][ T6928] usb 3-1: device descriptor read/64, error -71 12:46:00 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="8f0704"], 0x0) 12:46:00 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00') read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$userns(r1, &(0x7f00000034c0)) 12:46:00 executing program 4: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000400001803c1, 0x0) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0, 0x0) open(0x0, 0x0, 0x400) [ 1177.902817][T24037] usb 2-1: Firmware version (0.0) predates our first public release. [ 1177.924016][T24037] usb 2-1: Please update to version 0.2 or newer [ 1177.962985][ T6928] usb usb3-port1: attempt power cycle 12:46:01 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="000086dd0000600000000000000060d0fd5f004c3c00fc020f00000000000000000000000000ff0200000000000000000000000000012f00000000000000242065580000000000000800600086dd080088be86dd"], 0xfdef) [ 1178.054725][T24037] usb 2-1: USB disconnect, device number 74 [ 1178.107128][T30844] ip6_tunnel: non-ECT from fc02:0f00:0000:0000:0000:0000:0000:0000 with DS=0xd [ 1178.155354][ T27] audit: type=1804 audit(1695041161.141:122): pid=30839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2486015389/syzkaller.ZkXp1E/157/file0" dev="sda1" ino=1972 res=1 errno=0 [ 1178.372623][ T6928] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1178.402569][ T6933] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1178.462786][ T6928] usb 3-1: device descriptor read/8, error -71 [ 1178.612620][ T6933] usb 4-1: device descriptor read/64, error -71 [ 1178.732645][ T6928] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1178.852617][ T6928] usb 3-1: device descriptor read/8, error -71 [ 1178.892580][ T6933] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1178.972782][ T6928] usb usb3-port1: unable to enumerate USB device [ 1179.082572][ T6933] usb 4-1: device descriptor read/64, error -71 [ 1179.204234][ T6933] usb usb4-port1: attempt power cycle [ 1179.622506][ T6933] usb 4-1: new high-speed USB device number 55 using dummy_hcd 12:46:02 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a500"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:46:02 executing program 4: syz_clone3(&(0x7f0000002980)={0x60220000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 12:46:02 executing program 5: r0 = socket(0x2, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local}}}}) 12:46:02 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fd31b408b1134200c31c0000000109021b0001000000000904000001602ef60009050206"], 0x0) 12:46:02 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1179.714733][ T6933] usb 4-1: device descriptor read/8, error -71 12:46:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:46:02 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x21, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 12:46:03 executing program 4: io_setup(0x6, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f00000021c0)={0x0, 0x0}) io_pgetevents(r0, 0x2, 0x2, &(0x7f0000002080)=[{}, {}], &(0x7f0000002200)={0x0, r1+60000000}, 0x0) io_destroy(r0) [ 1180.004589][ T6933] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1180.082523][ T6925] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1180.090225][ T6928] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1180.098072][ T6933] usb 4-1: device descriptor read/8, error -71 [ 1180.212532][ T7372] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1180.213599][ T6933] usb usb4-port1: unable to enumerate USB device [ 1180.352873][ T6925] usb 1-1: Using ep0 maxpacket: 8 [ 1180.482782][ T6928] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1180.492102][ T6925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1180.501892][ T6928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.502947][ T7372] usb 3-1: no configurations [ 1180.510492][ T6925] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1180.521803][ T7372] usb 3-1: can't read configurations, error -22 [ 1180.525646][ T6925] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1c.c3 [ 1180.540685][ T6928] usb 2-1: config 0 descriptor?? [ 1180.550779][ T6925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.562655][ T6925] usb 1-1: config 0 descriptor?? [ 1180.620276][ T6925] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1180.682575][ T7372] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1180.816701][ T6925] usb 1-1: USB disconnect, device number 62 [ 1180.832652][ T7149] usb 1-1: Failed to submit usb control message: -71 [ 1180.842673][ T7149] usb 1-1: unable to send the bmi data to the device: -71 [ 1180.849891][ T7149] usb 1-1: unable to get target info from device [ 1180.856723][ T7149] usb 1-1: could not get target info (-71) [ 1180.862945][ T7149] usb 1-1: could not probe fw (-71) 12:46:04 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="8f0704"], 0x0) 12:46:04 executing program 5: mremap(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x3000, 0xc, &(0x7f0000ffa000/0x3000)=nil) 12:46:04 executing program 4: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r1}]}, 0x20}}, 0x0) [ 1180.962651][ T7372] usb 3-1: no configurations [ 1180.967460][ T7372] usb 3-1: can't read configurations, error -22 [ 1180.979659][ T7372] usb usb3-port1: attempt power cycle 12:46:04 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x4a}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6}]}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) [ 1181.042779][ T6928] usb 2-1: Firmware version (0.0) predates our first public release. [ 1181.065096][ T6928] usb 2-1: Please update to version 0.2 or newer [ 1181.204582][ T6928] usb 2-1: USB disconnect, device number 75 [ 1181.402626][ T7372] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1181.482539][ T6933] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1181.532648][ T7372] usb 3-1: no configurations [ 1181.537314][ T7372] usb 3-1: can't read configurations, error -22 [ 1181.692678][ T6933] usb 4-1: device descriptor read/64, error -71 [ 1181.702507][ T7372] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1181.832622][ T7372] usb 3-1: no configurations [ 1181.837286][ T7372] usb 3-1: can't read configurations, error -22 [ 1181.852624][ T7372] usb usb3-port1: unable to enumerate USB device [ 1181.967247][ T6933] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1182.162557][ T6933] usb 4-1: device descriptor read/64, error -71 [ 1182.283768][ T6933] usb usb4-port1: attempt power cycle [ 1182.692520][ T6933] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1182.782686][ T6933] usb 4-1: device descriptor read/8, error -71 12:46:05 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a500"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:46:05 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x127c, 0x0) 12:46:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, 0x0) 12:46:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0xff600000}, 0x0) 12:46:05 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:46:05 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000140)={0x2a, 0x1, 0x1}, 0xc) 12:46:05 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x18, &(0x7f0000000240)=@assoc_value={r2}, 0x8) 12:46:05 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) sync() [ 1183.052653][ T6933] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1183.142809][ T6933] usb 4-1: device descriptor read/8, error -71 [ 1183.162747][ T6928] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1183.262683][ T6933] usb usb4-port1: unable to enumerate USB device [ 1183.322553][ T6925] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1183.522709][ T6928] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1183.531849][ T6928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.549281][ T6928] usb 2-1: config 0 descriptor?? [ 1183.602752][ T6925] usb 3-1: no configurations [ 1183.607509][ T6925] usb 3-1: can't read configurations, error -22 [ 1183.762524][ T6925] usb 3-1: new high-speed USB device number 60 using dummy_hcd 12:46:07 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="8f0704"], 0x0) 12:46:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x4e, 0x0, 0x0) 12:46:07 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x76, &(0x7f0000000040)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x4, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fdbf63", 0x0, 0x0, 0x0, @loopback={0xff00000000000000}, @loopback={0x0, 0xffffac1414aa}, [@hopopts={0x0, 0x0, '\x00', [@jumbo]}]}}}}}}}, 0x0) 12:46:07 executing program 0: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="ee", 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_persistent(0x16, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0xfffffffffffffffd, 0x0) [ 1184.042749][ T6925] usb 3-1: no configurations [ 1184.047399][ T6925] usb 3-1: can't read configurations, error -22 [ 1184.054471][ T6928] usb 2-1: Firmware version (0.0) predates our first public release. [ 1184.072490][ T6928] usb 2-1: Please update to version 0.2 or newer [ 1184.079637][ T6925] usb usb3-port1: attempt power cycle [ 1184.225422][ T6928] usb 2-1: USB disconnect, device number 76 [ 1184.532656][ T6925] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1184.592979][T24037] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1184.672760][ T6925] usb 3-1: no configurations [ 1184.677702][ T6925] usb 3-1: can't read configurations, error -22 [ 1184.782637][T24037] usb 4-1: device descriptor read/64, error -71 [ 1184.832920][ T6925] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1184.972659][ T6925] usb 3-1: no configurations [ 1184.978307][ T6925] usb 3-1: can't read configurations, error -22 [ 1185.001556][ T6925] usb usb3-port1: unable to enumerate USB device [ 1185.052645][T24037] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1185.252513][T24037] usb 4-1: device descriptor read/64, error -71 [ 1185.373273][T24037] usb usb4-port1: attempt power cycle [ 1185.782621][T24037] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1185.882837][T24037] usb 4-1: device descriptor read/8, error -71 12:46:08 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a500"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:46:08 executing program 4: syz_clone(0x40060000, &(0x7f00000000c0)="12064b7cec019ba12bca3d2062bba5a0d23f32e579129a1e31a5c0dbafee949f453452f1239462f3cc9d71b5dd1169bcca813693e685011a0a580a1822977931bdce9d9e206dc5f989c5d8640774dd73a0360b32e5a4129b522c853bb1e9b542a2f5e349ea05f411390d168458e4748795fe66b3f179d37df2ec59e9645d37b2298a9ec5e9b5110cdf022907da9c2d9406345e73ac5297440f57675d7b3ace5ee1c3c8b8c1ee5ef48d1719143de3e828722bc892577bdd68bcc7c9a651a0d6675852b9b13907ed5afd28bd54ef6eb61c131e504d8a1df0eb581261e4f2d8afbc5bc6c55d325256bbbe641caacb", 0xed, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="17e5110abd851b37e01dd59a94d22dded2c17f60df847673231e8c2397e95edf7ba61eac75adddb4fcad4a816d2db799dea149061075b69b6a718bdfa6df1269669436f235606b51ebe3be0151ee3eb461fefb962eb2414df8572c56932881d134ed32538e4e208fad8f54fa7a1a4ff1a4b44878cbd78ab632d35c1faba2f6") openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpid() 12:46:08 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100003000500000002000020d3"]) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4004550c, 0x0) 12:46:08 executing program 0: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="ee", 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_persistent(0x16, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0xfffffffffffffffd, 0x0) 12:46:08 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:46:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x8927, &(0x7f0000000040)) [ 1186.014563][T30910] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. 12:46:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @timestamp, @timestamp, @timestamp, @window, @timestamp, @window, @sack_perm], 0x2000000000000302) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) socket(0x11, 0x80a, 0x0) 12:46:09 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) [ 1186.156169][T24037] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1186.252856][T24037] usb 4-1: device descriptor read/8, error -71 [ 1186.312643][ T6925] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1186.392684][T24037] usb usb4-port1: unable to enumerate USB device [ 1186.432577][ T6929] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1186.712891][ T6925] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1186.726475][ T6925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.734993][ T6929] usb 3-1: no configurations [ 1186.739930][ T6929] usb 3-1: can't read configurations, error -22 [ 1186.760075][ T6925] usb 2-1: config 0 descriptor?? [ 1186.902616][ T6929] usb 3-1: new high-speed USB device number 64 using dummy_hcd 12:46:10 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109", @ANYBLOB="8f0704"], 0x0) 12:46:10 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 12:46:10 executing program 5: r0 = msgget$private(0x0, 0x0) msgget$private(0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) 12:46:10 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000440)) ftruncate(r0, 0x0) [ 1187.222732][ T6929] usb 3-1: no configurations [ 1187.227401][ T6929] usb 3-1: can't read configurations, error -22 [ 1187.260597][ T6929] usb usb3-port1: attempt power cycle [ 1187.272898][ T6925] usb 2-1: Firmware version (0.0) predates our first public release. [ 1187.290251][ T6925] usb 2-1: Please update to version 0.2 or newer [ 1187.427445][ T6925] usb 2-1: USB disconnect, device number 77 [ 1187.703336][T24037] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1187.732635][ T6929] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1187.882803][ T6929] usb 3-1: no configurations [ 1187.887817][ T6929] usb 3-1: can't read configurations, error -22 [ 1187.942529][T24037] usb 4-1: Using ep0 maxpacket: 16 [ 1188.042578][ T6929] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1188.113570][T24037] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1188.132856][T24037] usb 4-1: can't read configurations, error -61 [ 1188.192749][ T6929] usb 3-1: no configurations [ 1188.197454][ T6929] usb 3-1: can't read configurations, error -22 [ 1188.209950][ T6929] usb usb3-port1: unable to enumerate USB device [ 1188.302507][T24037] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1188.542556][T24037] usb 4-1: Using ep0 maxpacket: 16 [ 1188.727300][T24037] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1188.734949][T24037] usb 4-1: can't read configurations, error -61 [ 1188.741431][T24037] usb usb4-port1: attempt power cycle 12:46:12 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a50000000109021200"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:46:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x80000001) 12:46:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0xb, 0x0, 0x0) 12:46:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 12:46:12 executing program 1: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:46:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) sendto$inet6(r2, 0x0, 0x0, 0x4955, 0x0, 0x0) 12:46:12 executing program 0: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 12:46:12 executing program 5: r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000140)=""/176, 0xb0) [ 1189.152969][T24037] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1189.255401][T24037] usb 4-1: Using ep0 maxpacket: 16 [ 1189.462650][ T7372] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1189.462650][T24037] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1189.472873][ T3591] Bluetooth: hci0: command 0x0406 tx timeout [ 1189.478274][T24037] usb 4-1: can't read configurations, error -61 [ 1189.484664][T28780] Bluetooth: hci2: command 0x0406 tx timeout [ 1189.642741][T24037] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1189.732586][T24037] usb 4-1: Using ep0 maxpacket: 16 [ 1189.822690][ T7372] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.832967][ T7372] usb 3-1: config 0 has no interfaces? [ 1189.838523][ T7372] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1189.847722][ T7372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.857870][ T7372] usb 3-1: config 0 descriptor?? [ 1189.922791][T24037] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1189.931828][T24037] usb 4-1: can't read configurations, error -61 [ 1189.938808][T24037] usb usb4-port1: unable to enumerate USB device 12:46:13 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109", @ANYBLOB="8f0704"], 0x0) 12:46:13 executing program 5: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=@known='user.syz\x00', 0x0, 0x0, 0x0) 12:46:13 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) 12:46:13 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = fcntl$dupfd(r0, 0x0, r0) getsockname$inet6(r1, 0x0, &(0x7f00000000c0)) [ 1190.712533][ T7372] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1190.952549][ T7372] usb 4-1: Using ep0 maxpacket: 16 [ 1191.113389][ T7372] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1191.121775][ T7372] usb 4-1: can't read configurations, error -61 [ 1191.282590][ T7372] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1191.522533][ T7372] usb 4-1: Using ep0 maxpacket: 16 [ 1191.682585][ T7372] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1191.691162][ T7372] usb 4-1: can't read configurations, error -61 [ 1191.701730][ T7372] usb usb4-port1: attempt power cycle [ 1192.122612][ T7372] usb 4-1: new high-speed USB device number 71 using dummy_hcd 12:46:15 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a50000000109021200"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:46:15 executing program 1: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:46:15 executing program 5: r0 = fsopen(&(0x7f0000000040)='ext2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='\x00', &(0x7f0000000080)='ext2\x00', 0x0) 12:46:15 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12:46:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getresuid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x7fffdf005000, 0x0, 0x11, r0, 0x0) [ 1192.176167][T23907] usb 3-1: USB disconnect, device number 67 [ 1192.222818][ T7372] usb 4-1: Using ep0 maxpacket: 16 12:46:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) ioctl$TIOCL_PASTESEL(r0, 0x4bfb, 0x0) 12:46:15 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) 12:46:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1192.412875][ T7372] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1192.422878][ T7372] usb 4-1: can't read configurations, error -61 [ 1192.605941][ T7372] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1192.652592][T23907] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1192.722943][ T7372] usb 4-1: Using ep0 maxpacket: 16 [ 1192.902741][ T7372] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1192.910610][ T7372] usb 4-1: can't read configurations, error -61 [ 1192.917568][ T7372] usb usb4-port1: unable to enumerate USB device [ 1193.032726][T23907] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.047398][T23907] usb 3-1: config 0 has no interfaces? [ 1193.053503][T23907] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1193.069192][T23907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.079792][T23907] usb 3-1: config 0 descriptor?? 12:46:16 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109", @ANYBLOB="8f0704"], 0x0) 12:46:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = fcntl$dupfd(r0, 0x0, r0) getpeername$packet(r1, 0x0, 0x0) 12:46:16 executing program 0: mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) 12:46:16 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xa0}}, 0x24004844) [ 1193.812535][T23907] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1194.062525][T23907] usb 4-1: Using ep0 maxpacket: 16 [ 1194.222672][T23907] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1194.230348][T23907] usb 4-1: can't read configurations, error -61 [ 1194.392627][T23907] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1194.642557][T23907] usb 4-1: Using ep0 maxpacket: 16 [ 1194.802703][T23907] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1194.811230][T23907] usb 4-1: can't read configurations, error -61 [ 1194.817811][T23907] usb usb4-port1: attempt power cycle 12:46:18 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a50000000109021200"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:46:18 executing program 1: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:46:18 executing program 4: socketpair$unix(0x11, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000500)=@framed={{}, [@btf_id]}, 0x0, 0x0, 0x81, &(0x7f00000005c0)=""/129, 0x0, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x1, 0x2, 0xd2c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x90) 12:46:18 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) close(r0) 12:46:18 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x0, [], 0x0, "7464fbe08eb369"}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000000300)={0x0, [], 0x0, "ab519c2144f066"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) [ 1195.232670][T23907] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1195.245642][T24037] usb 3-1: USB disconnect, device number 68 12:46:18 executing program 4: msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) [ 1195.332771][T23907] usb 4-1: Using ep0 maxpacket: 16 12:46:18 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x0, [], 0x0, "7464fbe08eb369"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 12:46:18 executing program 4: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000000)={[{@noacl}, {@fastboot}, {@whint_mode_fs}, {@fsync_mode_strict}]}, 0x1, 0x54f9, &(0x7f000000ab40)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYogbSQBqiB3FJCBBEeB4WIRJE8thX0fZIZxoIfMwgO80YaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS3fVenFz9fu6bc5u306e2QAAAADnbKv1on4yS/2vzf3vza2fTb+IiDIizq3dR/HpJHPU5FSvvL56MYbbiDrh8BmT5voSEX+a6+FH198CAAAAXK7NcjVPq/X0MBt6QPQpFW3Kb38z5RURUc3uM6WVh7xfmcLq3/c4/mdKqwtY00xhqeQ2zpX2LvXf/Vi1mz5ritSUb78/29wBAIAejU6aflchAAAA9Onf0ANgGEU8bWUetwInqWm29z6f9AAAAIAPqBh6AAAAAEDn6vW/8/8AAADgsqXz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjStlovNsvVvG3Obt9OntkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/szzsKhEAYhMHe9Z3J3P+w0qCpqUkVCB9/YzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLE/LykQAkEQBXPG/076/oeVBD2DCBHQ8KiiFg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf9Ltf/k9MjTPJ3Glj6XgkWbtqbF019h40jh6Mt38DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLFzP69xVHEAwN/M7GxtVVyj7CEiCh70Yrfb2tqbeFCCB/8EIaTbGrv1R5uDLUXIxZvknIvoUURQ4i3/Q84J5BJvOewhgmdlZmeSyQ9w/dGZTfL5wJv33WGY932zEPKd9xIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNLo3YM4yQ6dcRwX5zb3Hi9k/daRPrO+sj2btSyO6kz6dHi5+iHqNpcIAAAA50dS1vchhJ10bS7r405e/6flNVnN/92z47is54/W/WVf1v5Z+/WX3Rf3B+qMx8luentxOLhyPJXWk5vldHvub69o5U8+f/eS5F9I/MHyC6M0f57RNxsb77Xz8EId2QIA/8blsi+C8vehrO83mRgA50arUniX9X/SaTYnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDqMlsPTZRyFEGZbB3Fma+/xwkn9+sr2bNlurK6uVO+Z3SINIdxeHA6u1DiXaffg4aO788Ph4H79wSshhKZGf6eY/t2PJrg4hEaej+B/CuLiy56WfE5H0OAPJQAAzqS0aFldv5OuzWXnopkQ/vz+cP3/eiUOE9b/ux/f2KyOVa3/+7XNcPr1lu593nvw8NGbi/fm7wzuDD5962r/7f61m9ev3+zl70p63pgAAADw37SLVq3/45nj6/+XKnGYsP7/4tv+V9WxEvX/iQ4W/ZrOBAAA4Hx7/tU/fo9OOB+12+HL+aWl+/3xcf/z1fGxgVT/sQtFq9b/yUzTWQEAAAB1GC1Hh9b/b1XiMOH6/zM/vPRT9Z5JCOFisf5/eeGz4a36pjPV6vhz4qbnCAAAQLMuFq26/p/m+//j/S0PcQjhjdfGcfFvACeq/5P3v/6xOlZ1//+1+qY4leLu+HnkfTeEVrfpjAAAADjLnipaVuz/lq7NffLzpQ/b9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2vAAAA//+END5e") [ 1195.525060][T23907] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1195.542587][T23907] usb 4-1: can't read configurations, error -61 [ 1195.692612][T24037] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1195.702530][T23907] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1195.761086][T31005] loop4: detected capacity change from 0 to 40427 [ 1195.770912][T31005] F2FS-fs (loop4): Unrecognized mount option "whint_mode=fs-based" or missing value [ 1195.792806][T23907] usb 4-1: Using ep0 maxpacket: 16 [ 1196.002836][T23907] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1196.010543][T23907] usb 4-1: can't read configurations, error -61 [ 1196.017752][T23907] usb usb4-port1: unable to enumerate USB device [ 1196.062667][T24037] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.073003][T24037] usb 3-1: config 0 has no interfaces? [ 1196.078515][T24037] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1196.087738][T24037] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.098610][T24037] usb 3-1: config 0 descriptor?? 12:46:19 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904", @ANYBLOB="8f0704"], 0x0) 12:46:19 executing program 5: syz_mount_image$f2fs(&(0x7f00000105c0), &(0x7f00000000c0)='./bus\x00', 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB='fastboot,active_logs=0,test_dummy_encryption,disable_ext_identify,resgid=', @ANYRESHEX=0x0, @ANYBLOB=',noinline_xattr,disable_ext_identify,noextent_cache,resuid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f657874656e745f63616368652c646174615f666c7573682c0029ebadf3a87e453ef8ab04165fa6c021fbd33071024013cfeea47d0f2fdbd0a2687459f3ff245ab6a32dffccd825494eb794ada3913f2acc5e1b"], 0x1, 0x10632, &(0x7f0000031240)="$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") 12:46:19 executing program 1: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:46:19 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = fcntl$dupfd(r0, 0x0, r0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1196.862491][T24037] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1197.122645][T24037] usb 4-1: Using ep0 maxpacket: 16 [ 1197.252790][T24037] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 1197.261023][T24037] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1197.272526][T24037] usb 4-1: config 0 has no interface number 0 [ 1197.278829][T24037] usb 4-1: config 0 interface 143 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1197.292560][T24037] usb 4-1: config 0 interface 143 has no altsetting 0 [ 1197.316300][T31011] loop5: detected capacity change from 0 to 131072 [ 1197.324379][T31011] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 1197.332108][T31011] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1197.442783][T24037] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1197.451893][T24037] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1197.468226][T24037] usb 4-1: Product: syz [ 1197.473469][T24037] usb 4-1: SerialNumber: syz [ 1197.484477][T24037] usb 4-1: config 0 descriptor?? [ 1197.741812][T24037] usb 4-1: USB disconnect, device number 77 12:46:21 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:46:21 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000001200)='kfree\x00'}, 0x10) fgetxattr(r0, &(0x7f00000006c0)=@known='user.incfs.metadata\x00', 0x0, 0x0) 12:46:21 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0) 12:46:21 executing program 1: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:46:21 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) 12:46:21 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904", @ANYBLOB="8f0704"], 0x0) [ 1198.327673][ T6925] usb 3-1: USB disconnect, device number 69 12:46:21 executing program 5: socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x40224400, 0x0, 0x0, 0x0, 0x0, 0x0) 12:46:21 executing program 4: r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) 12:46:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5411, 0x0) 12:46:21 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) socket$packet(0x11, 0x3, 0x300) 12:46:22 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1199.012550][ T6925] usb 3-1: new high-speed USB device number 70 using dummy_hcd 12:46:22 executing program 1: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1199.402327][T29792] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1199.513153][ T6925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1199.525052][ T6925] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1199.540742][ T6925] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1199.550300][ T6925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.565298][ T6925] usb 3-1: config 0 descriptor?? [ 1199.652637][T29792] usb 4-1: Using ep0 maxpacket: 16 [ 1199.772844][T29792] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 1199.781097][T29792] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1199.791877][T29792] usb 4-1: config 0 has no interface number 0 [ 1199.798407][T29792] usb 4-1: config 0 interface 143 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1199.811827][T29792] usb 4-1: config 0 interface 143 has no altsetting 0 [ 1199.932622][T29792] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1199.942049][T29792] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1199.950817][T29792] usb 4-1: Product: syz [ 1199.955572][T29792] usb 4-1: SerialNumber: syz [ 1199.971207][T29792] usb 4-1: config 0 descriptor?? [ 1200.227337][T29792] usb 4-1: USB disconnect, device number 78 12:46:24 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:46:24 executing program 5: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0x1, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000ffffff00001c000012c6efba24fda0515800000029cbfc072c79"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x89, &(0x7f0000000900)=""/137, 0x41000, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000001010000000000001f00000085100000ffffffff9500080000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x91, &(0x7f0000000400)=""/145, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xa, 0x7, 0x200}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff]}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x100004, 0x0, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x100004, 0x0, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380)}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f0000000180)=""/30, &(0x7f0000000240), &(0x7f0000000040), 0x1}, 0x38) bpf$ITER_CREATE(0x21, &(0x7f0000001100), 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0x2, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x1}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x38) 12:46:24 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x2c, 0x2c, 0x20, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xa, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0xb61f1991d7a96265) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) 12:46:24 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 12:46:24 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:46:24 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904", @ANYBLOB="8f0704"], 0x0) [ 1201.413693][ T7372] usb 3-1: USB disconnect, device number 70 12:46:24 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x2, 0x0, 0x300) 12:46:24 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)=0x6) 12:46:24 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r2}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000002680)={r4, r3, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) close(r0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x208e24b) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 12:46:24 executing program 4: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@link_local, @multicast, @val={@void, {0x806}}, {@llc_tr={0x11, {@llc={0x0, 0x0, "b8"}}}}}, 0x0) [ 1201.627346][T31058] EXT4-fs warning (device sda1): ext4_group_extend:1863: can't shrink FS - resize aborted [ 1201.742555][T29792] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1201.742555][ T6933] usb 2-1: new high-speed USB device number 78 using dummy_hcd 12:46:24 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2) 12:46:24 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0x0, 0xffffffff, 0x2000}) [ 1201.922550][ T7372] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1201.953296][T31066] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 1201.980632][ T6933] usb 2-1: device descriptor read/64, error -71 [ 1201.982550][T29792] usb 4-1: Using ep0 maxpacket: 16 [ 1202.112759][T29792] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 1202.120998][T29792] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.132633][T29792] usb 4-1: config 0 has no interface number 0 [ 1202.138911][T29792] usb 4-1: config 0 interface 143 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1202.152629][T29792] usb 4-1: config 0 interface 143 has no altsetting 0 [ 1202.272807][T29792] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1202.282788][ T6933] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1202.284124][T29792] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1202.300368][ T7372] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.312224][ T7372] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1202.322286][T29792] usb 4-1: Product: syz [ 1202.327537][T29792] usb 4-1: SerialNumber: syz [ 1202.332738][ T7372] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1202.344880][T29792] usb 4-1: config 0 descriptor?? [ 1202.350155][ T7372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.391168][ T7372] usb 3-1: config 0 descriptor?? [ 1202.492671][ T6933] usb 2-1: device descriptor read/64, error -71 [ 1202.607822][T29792] usb 4-1: USB disconnect, device number 79 [ 1202.622758][ T6933] usb usb2-port1: attempt power cycle [ 1203.052652][ T6933] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1203.142819][ T6933] usb 2-1: device descriptor read/8, error -71 [ 1203.432737][ T6933] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1203.556661][ T6933] usb 2-1: device descriptor read/8, error -71 [ 1203.682847][ T6933] usb usb2-port1: unable to enumerate USB device 12:46:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 12:46:27 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 12:46:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 12:46:27 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00010000000009040800010300", @ANYBLOB="8f0704"], 0x0) 12:46:27 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:46:27 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1204.491146][ T6933] usb 3-1: USB disconnect, device number 71 12:46:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x11, &(0x7f0000000240)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x110, 0x220, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@empty, @rand_addr, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'veth1_to_batadv\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="3adb495da077", @mac=@dev, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@remote, @rand_addr, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 12:46:27 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x2}, 0x20) 12:46:27 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0xc}, 0x20) 12:46:27 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 12:46:27 executing program 5: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x103, 0x1}, 0x20) setresuid(0x0, r1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x103}, 0x20) 12:46:27 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}]}, &(0x7f0000000240)=0x10) [ 1204.693213][T31087] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 12:46:27 executing program 0: r0 = socket$inet(0x2, 0x6, 0x0) io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000001400)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) io_pgetevents(r1, 0x0, 0x4, 0x0, 0x0, 0x0) 12:46:27 executing program 5: setreuid(0xee00, 0xffffffffffffffff) setpriority(0x0, 0x0, 0x0) [ 1204.812596][ T6925] usb 4-1: new high-speed USB device number 80 using dummy_hcd 12:46:27 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvfrom$x25(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0xffffffffffffffe8) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="10000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000100001"], 0xac}}, 0x0) [ 1204.962552][ T6929] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1205.012755][ T6933] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1205.082749][ T6925] usb 4-1: Using ep0 maxpacket: 16 [ 1205.172771][ T6929] usb 2-1: device descriptor read/64, error -71 [ 1205.212714][ T6925] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1205.220767][ T6925] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.231235][ T6925] usb 4-1: config 0 has no interface number 0 [ 1205.237602][ T6925] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1205.383037][ T6925] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1205.398241][ T6925] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1205.406967][ T6925] usb 4-1: Product: syz [ 1205.411240][ T6925] usb 4-1: SerialNumber: syz [ 1205.419026][ T6925] usb 4-1: config 0 descriptor?? [ 1205.424536][ T6933] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.434901][ T6933] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1205.444318][ T6929] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1205.452746][ T6933] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1205.467929][ T6933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.481748][ T6933] usb 3-1: config 0 descriptor?? [ 1205.642611][ T6929] usb 2-1: device descriptor read/64, error -71 [ 1205.715199][ T6925] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 1205.733557][ T6925] usb 4-1: USB disconnect, device number 80 [ 1205.772835][ T6929] usb usb2-port1: attempt power cycle 12:46:29 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00010000000009040800010300", @ANYBLOB="8f0704"], 0x0) [ 1206.199411][ T6929] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1206.322612][ T6929] usb 2-1: device descriptor read/8, error -71 [ 1206.482532][ T7372] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1206.601001][ T6929] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1206.702584][ T6929] usb 2-1: device descriptor read/8, error -71 [ 1206.722576][ T7372] usb 4-1: Using ep0 maxpacket: 16 [ 1206.837731][ T6929] usb usb2-port1: unable to enumerate USB device [ 1206.842736][ T7372] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1206.852165][ T7372] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.862534][ T7372] usb 4-1: config 0 has no interface number 0 [ 1206.868762][ T7372] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1206.996020][ T7372] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1207.009044][ T7372] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1207.018335][ T7372] usb 4-1: Product: syz [ 1207.026656][ T7372] usb 4-1: SerialNumber: syz [ 1207.034027][ T7372] usb 4-1: config 0 descriptor?? [ 1207.314433][ T7372] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 1207.334645][ T7372] usb 4-1: USB disconnect, device number 81 12:46:30 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a50000000109021200010000000009"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:46:30 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8917, 0x0) 12:46:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x17, &(0x7f0000000000)="84b72664", 0x4) 12:46:30 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2}, 0x20) 12:46:30 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1207.610588][T29792] usb 3-1: USB disconnect, device number 72 12:46:30 executing program 0: r0 = socket(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89e0, 0x0) 12:46:30 executing program 5: bpf$MAP_CREATE(0x14, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 12:46:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x110, 0x220, 0x30c, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@empty, @rand_addr, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'veth1_to_batadv\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="3adb495da077", @mac=@dev, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@remote, @rand_addr, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 12:46:30 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00010000000009040800010300", @ANYBLOB="8f0704"], 0x0) 12:46:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480)="979b25d0e9dd", &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x0, 0x0}) 12:46:30 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000000)) 12:46:30 executing program 0: r0 = socket(0x21, 0x2, 0x2) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) [ 1207.953174][ T6929] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1208.072546][T29792] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1208.152522][ T6929] usb 2-1: device descriptor read/64, error -71 [ 1208.152522][ T7372] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1208.392695][ T7372] usb 4-1: Using ep0 maxpacket: 16 [ 1208.432547][ T6929] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1208.432639][T29792] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1208.449621][T29792] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1208.463862][T29792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.481602][T29792] usb 3-1: config 0 descriptor?? [ 1208.522682][ T7372] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1208.533748][ T7372] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.544326][ T7372] usb 4-1: config 0 has no interface number 0 [ 1208.550529][ T7372] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1208.652723][ T6929] usb 2-1: device descriptor read/64, error -71 [ 1208.682930][ T7372] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1208.692182][ T7372] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1208.700602][ T7372] usb 4-1: Product: syz [ 1208.705041][ T7372] usb 4-1: SerialNumber: syz [ 1208.711990][ T7372] usb 4-1: config 0 descriptor?? [ 1208.772829][ T6929] usb usb2-port1: attempt power cycle [ 1208.994469][ T7372] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 1209.004239][ T7372] usb 4-1: USB disconnect, device number 82 [ 1209.202529][ T6929] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1209.312699][ T6929] usb 2-1: device descriptor read/8, error -71 [ 1209.612671][ T6929] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1209.723051][ T6929] usb 2-1: device descriptor read/8, error -71 [ 1209.853075][ T6929] usb usb2-port1: unable to enumerate USB device 12:46:33 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a50000000109021200010000000009"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:46:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480)="979b25d0e9dd", &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x0, 0x0}) 12:46:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x4c, r1, 0x984ad8406ae26d25, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x4c}}, 0x0) 12:46:33 executing program 0: r0 = socket(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8931, &(0x7f0000000180)={'batadv_slave_1\x00'}) 12:46:33 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b000100000000090408000103000000", @ANYBLOB="8f0704"], 0x0) 12:46:33 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1210.688666][T29792] usb 3-1: USB disconnect, device number 73 12:46:33 executing program 0: io_setup(0x20, &(0x7f00000000c0)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) io_submit(r0, 0x2, &(0x7f0000000240)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f00000000c0)="77a510d1fc7608ffc21df5eefc8c19545fddf18ff8e22789", 0x18}]) 12:46:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480)="979b25d0e9dd", &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x0, 0x0}) 12:46:33 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f0000000000)) 12:46:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480)="979b25d0e9dd", &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x0, 0x0}) 12:46:33 executing program 5: io_setup(0x20, &(0x7f00000000c0)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) io_submit(r0, 0x2, &(0x7f0000000240)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f00000000c0)="77a510d1fc7608ff", 0x8}]) 12:46:33 executing program 0: bpf$MAP_CREATE(0x4, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 1211.022612][ T7372] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1211.152525][ T6929] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1211.152587][T29792] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1211.262644][ T7372] usb 4-1: Using ep0 maxpacket: 16 [ 1211.372660][ T6929] usb 2-1: device descriptor read/64, error -71 [ 1211.382701][ T7372] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1211.397805][ T7372] usb 4-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 1211.409409][ T7372] usb 4-1: config 0 has no interface number 0 [ 1211.419888][ T7372] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1211.532705][T29792] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1211.541726][T29792] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1211.551145][T29792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.559566][ T7372] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1211.570490][T29792] usb 3-1: config 0 descriptor?? [ 1211.581100][ T7372] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1211.589584][ T7372] usb 4-1: Product: syz [ 1211.593972][ T7372] usb 4-1: SerialNumber: syz [ 1211.605105][ T7372] usb 4-1: config 0 descriptor?? [ 1211.642601][ T6929] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1211.645501][ T7372] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 1211.832561][ T6929] usb 2-1: device descriptor read/64, error -71 [ 1211.847666][ T7372] usb 4-1: USB disconnect, device number 83 [ 1211.952773][ T6929] usb usb2-port1: attempt power cycle [ 1212.375973][ T6929] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1212.482747][ T6929] usb 2-1: device descriptor read/8, error -71 [ 1212.772605][ T6929] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1212.862686][ T6929] usb 2-1: device descriptor read/8, error -71 [ 1212.996174][ T6929] usb usb2-port1: unable to enumerate USB device 12:46:36 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a50000000109021200010000000009"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:46:36 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480)="979b25d0e9dd", &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x0, 0x0}) 12:46:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x29, 0x43, 0x0, 0x0) 12:46:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r1, 0x984ad8406ae26d25, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 12:46:36 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b000100000000090408000103000000", @ANYBLOB="8f0704"], 0x0) 12:46:36 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1213.780620][ T7372] usb 3-1: USB disconnect, device number 74 12:46:36 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480)="979b25d0e9dd", &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x0, 0x0}) 12:46:36 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1d, 0x0, 0x0, &(0x7f0000000a80)='GPL\x00', 0x7fff, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x37, r3, 0x8, &(0x7f0000000b80)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000bc0)={0x3, 0xb, 0x1, 0xda21}, 0x10, r1, r2, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) syz_open_dev$vcsa(&(0x7f00000008c0), 0x0, 0x200100) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000}}, './file0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) 12:46:36 executing program 0: r0 = socket$inet(0x2, 0x6, 0x0) ioctl$SG_BLKTRACESTOP(r0, 0x5411, 0xff9f01a1fa7f0000) 12:46:36 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480)="979b25d0e9dd", &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x0, 0x0}) 12:46:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x110, 0x220, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@empty, @rand_addr, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'veth1_to_batadv\x00', {}, {}, 0x2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="3adb495da077", @mac=@dev, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@remote, @rand_addr, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 12:46:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0x8000000, 0x3f0, 0x110, 0x110, 0x220, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@empty, @rand_addr, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'veth1_to_batadv\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="3adb495da077", @mac=@dev, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@remote, @rand_addr, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) [ 1214.132734][ T6928] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1214.242496][ T7372] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1214.252534][ T6929] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1214.372608][ T6928] usb 4-1: Using ep0 maxpacket: 16 [ 1214.459479][ T6929] usb 2-1: device descriptor read/64, error -71 [ 1214.522670][ T6928] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1214.533031][ T6928] usb 4-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 1214.550120][ T6928] usb 4-1: config 0 has no interface number 0 [ 1214.560930][ T6928] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1214.619106][ T7372] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1214.631925][ T7372] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1214.647995][ T7372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.678734][ T7372] usb 3-1: config 0 descriptor?? [ 1214.713139][ T6928] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1214.732939][ T6928] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1214.743161][ T6929] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1214.757919][ T6928] usb 4-1: Product: syz [ 1214.771797][ T6928] usb 4-1: SerialNumber: syz [ 1214.805088][ T6928] usb 4-1: config 0 descriptor?? [ 1214.855310][ T6928] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 1214.942587][ T6929] usb 2-1: device descriptor read/64, error -71 [ 1215.060083][ T6928] usb 4-1: USB disconnect, device number 84 [ 1215.066603][ T6929] usb usb2-port1: attempt power cycle [ 1215.586998][ T6929] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1215.692714][ T6929] usb 2-1: device descriptor read/8, error -71 [ 1215.962655][ T6929] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1216.052581][ T6929] usb 2-1: device descriptor read/8, error -71 [ 1216.184531][ T6929] usb usb2-port1: unable to enumerate USB device 12:46:40 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:46:40 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480)="979b25d0e9dd", &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x0, 0x0}) 12:46:40 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1d, 0x0, 0x0, &(0x7f0000000a80)='GPL\x00', 0x7fff, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x37, r3, 0x8, &(0x7f0000000b80)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000bc0)={0x3, 0xb, 0x1, 0xda21}, 0x10, r1, r2, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) syz_open_dev$vcsa(&(0x7f00000008c0), 0x0, 0x200100) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000}}, './file0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) 12:46:40 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:46:40 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b000100000000090408000103000000", @ANYBLOB="8f0704"], 0x0) 12:46:40 executing program 0: r0 = socket(0xa, 0x5, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) 12:46:40 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480)="979b25d0e9dd", &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x0, 0x0}) 12:46:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x200000a, &(0x7f0000000140)={[{@utf8}, {@uni_xlate}, {@shortname_lower}, {@numtail}, {@shortname_win95}, {@rodir}, {@fat=@check_strict}, {@uni_xlateno}, {@utf8}, {@uni_xlateno}, {@shortname_mixed}]}, 0x1, 0x256, &(0x7f0000000c00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) [ 1217.147588][ T7376] usb 3-1: USB disconnect, device number 75 12:46:40 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480)="979b25d0e9dd", &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x0, 0x0}) 12:46:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 12:46:40 executing program 4: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480)="979b25d0e9dd", &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x0, 0x0}) 12:46:40 executing program 0: r0 = socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) [ 1217.362658][ T6929] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1217.512514][ T7376] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1217.532735][ T7372] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1217.612623][ T6929] usb 4-1: Using ep0 maxpacket: 16 [ 1217.722484][ T7372] usb 2-1: device descriptor read/64, error -71 [ 1217.732650][ T6929] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1217.741235][ T6929] usb 4-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 1217.753119][ T6929] usb 4-1: config 0 has no interface number 0 [ 1217.759502][ T6929] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1217.882678][ T7376] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1217.891753][ T7376] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.902950][ T6929] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1217.910259][ T7376] usb 3-1: config 0 descriptor?? [ 1217.923249][ T6929] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1217.943263][ T6929] usb 4-1: Product: syz [ 1217.951322][ T6929] usb 4-1: SerialNumber: syz [ 1217.954917][ T7376] gspca_main: se401-2.14.0 probing 047d:5001 [ 1217.970504][ T6929] usb 4-1: config 0 descriptor?? [ 1217.992549][ T7372] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1218.025142][ T6929] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 1218.182551][ T7372] usb 2-1: device descriptor read/64, error -71 [ 1218.236474][T29792] usb 4-1: USB disconnect, device number 85 [ 1218.303134][ T7372] usb usb2-port1: attempt power cycle 12:46:41 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:46:41 executing program 4: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480)="979b25d0e9dd", &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x0, 0x0}) 12:46:41 executing program 0: ioperm(0x0, 0x3ff, 0x6) readv(0xffffffffffffffff, 0x0, 0x0) [ 1218.712803][ T7372] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1218.802684][ T7372] usb 2-1: device descriptor read/8, error -71 [ 1219.062514][ T7376] usb 3-1: reset high-speed USB device number 76 using dummy_hcd [ 1219.073296][ T7372] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1219.162799][ T7372] usb 2-1: device descriptor read/8, error -71 [ 1219.282588][ T7372] usb usb2-port1: unable to enumerate USB device [ 1219.642749][ T7376] gspca_se401: read req failed req 0x06 error -71 [ 1219.650416][ T7376] se401: probe of 3-1:0.0 failed with error -71 [ 1219.663998][ T7376] usb 3-1: USB disconnect, device number 76 12:46:43 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:46:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r0) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r2, 0x10b}, 0x14}}, 0x0) 12:46:43 executing program 0: io_setup(0x10000, &(0x7f0000000000)) io_setup(0x20, &(0x7f00000000c0)) 12:46:43 executing program 4: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480)="979b25d0e9dd", &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x0, 0x0}) 12:46:43 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00010000000009040800010300000009", @ANYBLOB="8f0704"], 0x0) 12:46:43 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:46:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 12:46:43 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_elf32(r1, 0x0, 0x3) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0xffffff6d) splice(r0, 0x0, r2, 0x0, 0x4ff9c, 0x0) 12:46:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 12:46:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 12:46:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x0, 0x0, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480)="979b25d0e9dd", &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x0, 0x0}) [ 1220.382600][T29791] usb 4-1: new high-speed USB device number 86 using dummy_hcd 12:46:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x110, 0x220, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@empty, @rand_addr, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'veth1_to_batadv\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="3adb495da077", @mac=@dev, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@remote, @rand_addr, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) [ 1220.512573][ T6925] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1220.572818][ T7372] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1220.632733][T29791] usb 4-1: Using ep0 maxpacket: 16 [ 1220.752826][T29791] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1220.760991][T29791] usb 4-1: config 0 has no interface number 0 [ 1220.767298][T29791] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1220.882630][ T6925] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1220.892219][ T6925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.902892][ T7372] usb 2-1: no configurations [ 1220.907800][T29791] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1220.917334][ T7372] usb 2-1: can't read configurations, error -22 [ 1220.921219][ T6925] usb 3-1: config 0 descriptor?? [ 1220.932675][T29791] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1220.941163][T29791] usb 4-1: Product: syz [ 1220.945614][T29791] usb 4-1: SerialNumber: syz [ 1220.955998][T29791] usb 4-1: config 0 descriptor?? [ 1220.964239][ T6925] gspca_main: se401-2.14.0 probing 047d:5001 [ 1220.995694][T29791] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 1221.092537][ T7372] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1221.197134][ T6928] usb 4-1: USB disconnect, device number 86 [ 1221.393496][ T7372] usb 2-1: no configurations [ 1221.398300][ T7372] usb 2-1: can't read configurations, error -22 [ 1221.406058][ T7372] usb usb2-port1: attempt power cycle [ 1221.812493][ T7372] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1221.953748][ T7372] usb 2-1: no configurations [ 1221.958411][ T7372] usb 2-1: can't read configurations, error -22 [ 1222.003056][ T6925] gspca_se401: read req failed req 0x06 error -19 [ 1222.011261][ T6925] usb 3-1: USB disconnect, device number 77 [ 1222.112634][ T7372] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1222.242767][ T7372] usb 2-1: no configurations [ 1222.247429][ T7372] usb 2-1: can't read configurations, error -22 [ 1222.260726][ T7372] usb usb2-port1: unable to enumerate USB device 12:46:46 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:46:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x0, 0x0, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480)="979b25d0e9dd", &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x0, 0x0}) 12:46:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x20, &(0x7f00000000c0)=0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_submit(r1, 0x2, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0}]) 12:46:46 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x4c}, 0x4c}, 0x300}, 0x0) 12:46:46 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:46:46 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00010000000009040800010300000009", @ANYBLOB="8f0704"], 0x0) 12:46:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x0, 0x0, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480)="979b25d0e9dd", &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x0, 0x0}) 12:46:46 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480)) 12:46:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000004200)={&(0x7f00000040c0), 0xc, &(0x7f00000041c0)={&(0x7f0000004100)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 12:46:46 executing program 5: syz_genetlink_get_family_id$ethtool(&(0x7f0000001c80), 0xffffffffffffffff) syz_usb_connect$uac1(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x3, 0x1, 0xe0, 0x0, 0xf7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, '/'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x80, {0x7, 0x25, 0x1, 0x0, 0xa2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x9, 0x4, {0x7}}}}}}}]}}, 0x0) 12:46:46 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host}, 0x10) 12:46:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480)="979b25d0e9dd", &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x0, 0x0}) [ 1223.472962][ T6933] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1223.480695][T24037] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1223.632637][ T6925] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1223.672787][ T6929] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1223.723201][ T6933] usb 4-1: Using ep0 maxpacket: 16 [ 1223.842703][ T6933] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1223.850841][T24037] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1223.859962][ T6933] usb 4-1: config 0 has no interface number 0 [ 1223.866237][T24037] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.874608][ T6933] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1223.890484][T24037] usb 3-1: config 0 descriptor?? [ 1223.912639][ T6925] usb 2-1: no configurations [ 1223.917458][ T6929] usb 6-1: Using ep0 maxpacket: 16 [ 1223.922956][ T6925] usb 2-1: can't read configurations, error -22 [ 1223.934643][T24037] gspca_main: se401-2.14.0 probing 047d:5001 [ 1224.002779][ T6933] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1224.012225][ T6933] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1224.020543][ T6933] usb 4-1: Product: syz [ 1224.025226][ T6933] usb 4-1: SerialNumber: syz [ 1224.035607][ T6933] usb 4-1: config 0 descriptor?? [ 1224.042591][ T6929] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.053198][ T6929] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1224.062246][ T6929] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1224.077682][ T6933] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 1224.092492][ T6925] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1224.242652][ T6929] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1224.252155][ T6929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.260309][ T6929] usb 6-1: Product: syz [ 1224.264619][ T6929] usb 6-1: Manufacturer: syz [ 1224.269343][ T6929] usb 6-1: SerialNumber: syz [ 1224.280843][ T6933] usb 4-1: USB disconnect, device number 87 [ 1224.302598][T24037] usb 3-1: reset high-speed USB device number 78 using dummy_hcd [ 1224.382652][ T6925] usb 2-1: no configurations [ 1224.387295][ T6925] usb 2-1: can't read configurations, error -22 [ 1224.394326][ T6925] usb usb2-port1: attempt power cycle [ 1224.642728][ T6929] usb 6-1: 0:2 : does not exist [ 1224.666309][ T6929] usb 6-1: USB disconnect, device number 46 [ 1224.812552][ T6925] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1224.952650][ T6925] usb 2-1: no configurations [ 1224.957327][ T6925] usb 2-1: can't read configurations, error -22 [ 1225.112660][ T6925] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1225.168608][T24037] gspca_se401: read req failed req 0x06 error -19 [ 1225.176622][T24037] usb 3-1: USB disconnect, device number 78 [ 1225.252748][ T6925] usb 2-1: no configurations [ 1225.257425][ T6925] usb 2-1: can't read configurations, error -22 [ 1225.263934][ T6925] usb usb2-port1: unable to enumerate USB device 12:46:49 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:46:49 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/locks\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) 12:46:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480)="979b25d0e9dd", &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x0, 0x0}) 12:46:49 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00010000000009040800010300000009", @ANYBLOB="8f0704"], 0x0) 12:46:49 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:46:49 executing program 5: syz_clone(0x0, 0x0, 0x7, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigreturn() r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x10, r0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x40000000, &(0x7f0000000240)) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000840)={0x77359400}, 0x0) 12:46:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480)="979b25d0e9dd", &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x0, 0x0}) 12:46:49 executing program 0: syz_clone(0x0, 0x0, 0x7, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigreturn() r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x10, r0, 0x0, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x40000000, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000640), 0x0, &(0x7f00000006c0)) rt_sigtimedwait(&(0x7f0000000780)={[0x3ff]}, 0x0, &(0x7f0000000840)={0x77359400}, 0x8) 12:46:49 executing program 5: syz_clone(0x0, 0x0, 0x7, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigreturn() r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x10, r0, 0x0, 0x0) rt_sigreturn() 12:46:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x0, 0x1, @scatter={0x0, 0x0, 0x0}, 0x0, &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x0, 0x0}) 12:46:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) r2 = accept4$inet6(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000009cc0)=""/53, &(0x7f0000009d00)=0x35) 12:46:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x0, 0x1, @scatter={0x0, 0x0, 0x0}, 0x0, &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x0, 0x0}) [ 1226.562688][T24037] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1226.580424][ T6925] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1226.600909][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 1226.702590][ T7372] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1226.812513][T24037] usb 4-1: Using ep0 maxpacket: 16 [ 1226.932685][T24037] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1226.940869][T24037] usb 4-1: config 0 has no interface number 0 [ 1226.947592][T24037] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1226.982613][ T6925] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1226.982835][ T7372] usb 2-1: no configurations [ 1226.996214][ T6925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.996719][ T7372] usb 2-1: can't read configurations, error -22 [ 1227.019556][ T6925] usb 3-1: config 0 descriptor?? [ 1227.067272][ T6925] gspca_main: se401-2.14.0 probing 047d:5001 [ 1227.074623][T24037] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1227.086290][T24037] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1227.094680][T24037] usb 4-1: Product: syz [ 1227.098960][T24037] usb 4-1: SerialNumber: syz [ 1227.111422][T24037] usb 4-1: config 0 descriptor?? [ 1227.152512][ T7372] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1227.161298][T24037] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 1227.359370][T29791] usb 4-1: USB disconnect, device number 88 [ 1227.422620][ T6925] usb 3-1: reset high-speed USB device number 79 using dummy_hcd [ 1227.454955][ T7372] usb 2-1: no configurations [ 1227.462995][ T7372] usb 2-1: can't read configurations, error -22 [ 1227.469862][ T7372] usb usb2-port1: attempt power cycle [ 1227.902580][ T7372] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1228.032655][ T7372] usb 2-1: no configurations [ 1228.037391][ T7372] usb 2-1: can't read configurations, error -22 [ 1228.192714][ T7372] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1228.313654][ T6925] gspca_se401: read req failed req 0x06 error -19 [ 1228.323074][ T7372] usb 2-1: no configurations [ 1228.328175][ T7372] usb 2-1: can't read configurations, error -22 [ 1228.332713][ T6925] usb 3-1: USB disconnect, device number 79 [ 1228.335397][ T7372] usb usb2-port1: unable to enumerate USB device 12:46:52 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef0000000109021200010000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:46:52 executing program 5: syz_clone(0x0, 0x0, 0x7, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigreturn() r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x10, r0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x40000000, &(0x7f0000000240)) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0) 12:46:52 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r0, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x0) 12:46:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x0, 0x1, @scatter={0x0, 0x0, 0x0}, 0x0, &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x0, 0x0}) 12:46:52 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 12:46:52 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:46:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x0, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480), &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x0, 0x0}) 12:46:52 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:46:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2402, 0x0) close(r0) 12:46:52 executing program 5: bpf$MAP_CREATE(0x1c, &(0x7f0000000440)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 12:46:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x0, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480), &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x0, 0x0}) 12:46:52 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"/3595], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x18}, 0x0) ioctl$TUNSETNOCSUM(r4, 0x8914, 0x20000000) [ 1229.661936][T31319] device team0 entered promiscuous mode [ 1229.668046][T31319] device team_slave_0 entered promiscuous mode [ 1229.674645][ T6925] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1229.683407][T31319] device team_slave_1 entered promiscuous mode [ 1229.802879][ T6933] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1230.102975][ T6925] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1230.116522][ T6925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.129308][ T6925] usb 3-1: config 0 descriptor?? [ 1230.182648][ T6933] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.195830][ T6925] gspca_main: se401-2.14.0 probing 047d:5001 [ 1230.201932][ T6933] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1230.211275][ T6933] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1230.220576][ T6933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.233601][ T6933] usb 2-1: config 0 descriptor?? [ 1230.552497][ T6925] usb 3-1: reset high-speed USB device number 80 using dummy_hcd [ 1231.443220][ T6925] gspca_se401: read req failed req 0x06 error -19 [ 1231.457994][ T6925] usb 3-1: USB disconnect, device number 80 12:46:55 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef0000000109021200010000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:46:55 executing program 5: bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001d00)) 12:46:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x0, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480), &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x0, 0x0}) 12:46:55 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"/3595], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x18}, 0x0) ioctl$TUNSETNOCSUM(r4, 0x8914, 0x20000000) 12:46:55 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:46:55 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1232.410881][ T7372] usb 2-1: USB disconnect, device number 114 12:46:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x3, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480)="979b25", &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x0, 0x0}) 12:46:55 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r0, 0x0, 0x0) 12:46:55 executing program 3: socketpair(0x10, 0x3, 0x3, &(0x7f0000000080)) 12:46:55 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000440)=r0, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000440)=r1, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0x96f, 0x10}, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r3) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x9, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xcd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20}, @jmp={0x5, 0x0, 0x2, 0x1, 0xc, 0xfffffffffffffffc, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x20}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x800}], &(0x7f0000000140)='syzkaller\x00', 0x40, 0x1000, &(0x7f0000000780)=""/4096, 0x41100, 0x48, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000001c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xc, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000300)=[r2, 0xffffffffffffffff, r3, 0x1, r4, 0x1, 0x1], &(0x7f0000000340)=[{0x4, 0x5, 0xb, 0xb}, {0x0, 0x3, 0xa, 0xb}], 0x10, 0x2}, 0x90) mkdirat$cgroup(r3, &(0x7f0000000480)='syz0\x00', 0x1ff) 12:46:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x3, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480)="979b25", &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x0, 0x0}) 12:46:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x3, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480)="979b25", &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x0, 0x0}) [ 1232.748454][T24037] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1232.912715][ T7372] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1233.172635][T24037] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1233.181833][T24037] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.198350][T24037] usb 3-1: config 0 descriptor?? [ 1233.251695][T24037] gspca_main: se401-2.14.0 probing 047d:5001 [ 1233.272652][ T7372] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.288662][ T7372] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1233.297736][ T7372] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1233.313197][ T7372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.328361][ T7372] usb 2-1: config 0 descriptor?? [ 1233.622487][T24037] usb 3-1: reset high-speed USB device number 81 using dummy_hcd [ 1234.514569][T24037] gspca_se401: read req failed req 0x06 error -19 [ 1234.532048][T24037] usb 3-1: USB disconnect, device number 81 12:46:58 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef0000000109021200010000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:46:58 executing program 5: socketpair(0x10, 0x3, 0x10, &(0x7f0000000080)) 12:46:58 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000bd0000000000101a00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r1, 0x0, 0x0) 12:46:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x5, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480)="979b25d0e9", &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x0, 0x0}) 12:46:58 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:46:58 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1235.505462][T24037] usb 2-1: USB disconnect, device number 115 12:46:58 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4502}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x8, 0x2}]}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'veth0_to_bond\x00', @local}) 12:46:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x5, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480)="979b25d0e9", &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x0, 0x0}) 12:46:58 executing program 3: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='$\x00', 0xfffffffffffffffe) 12:46:58 executing program 3: timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:46:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x5, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480)="979b25d0e9", &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x0, 0x0}) 12:46:58 executing program 5: sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) [ 1235.823074][ T6925] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1235.992512][T24037] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1236.182639][ T6925] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1236.195287][ T6925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.205532][ T6925] usb 3-1: config 0 descriptor?? [ 1236.245168][ T6925] gspca_main: se401-2.14.0 probing 047d:5001 [ 1236.362720][T24037] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.377548][T24037] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1236.388331][T24037] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1236.397576][T24037] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.407205][T24037] usb 2-1: config 0 descriptor?? [ 1236.612539][ T6925] usb 3-1: reset high-speed USB device number 82 using dummy_hcd [ 1237.474289][ T6925] gspca_se401: read req failed req 0x06 error -19 [ 1237.493158][ T6925] usb 3-1: USB disconnect, device number 82 12:47:01 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:47:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480)="979b25d0e9dd", 0x0, 0x0, 0x0, 0x0, 0x0}) 12:47:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r2, r1, 0x0) 12:47:01 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:47:01 executing program 3: syz_emit_ethernet(0x46, &(0x7f00000001c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0000c0", 0x10, 0x33, 0x0, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 12:47:01 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1238.597116][ T6925] usb 2-1: USB disconnect, device number 116 [ 1238.604432][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.610779][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 12:47:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480)="979b25d0e9dd", 0x0, 0x0, 0x0, 0x0, 0x0}) 12:47:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010003"]) 12:47:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r0) 12:47:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x53, 0x0, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480)="979b25d0e9dd", 0x0, 0x0, 0x0, 0x0, 0x0}) 12:47:01 executing program 5: syz_clone(0x4a000100, &(0x7f0000000480)='k', 0x1, 0x0, 0x0, &(0x7f0000000580)) [ 1238.902700][T23907] usb 3-1: new high-speed USB device number 83 using dummy_hcd 12:47:02 executing program 4: syz_io_uring_setup(0x709b, &(0x7f0000000100), &(0x7f0000000180), 0x0) [ 1239.072970][ T6925] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1239.322812][T23907] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1239.331934][T23907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.361097][T23907] usb 3-1: config 0 descriptor?? [ 1239.404452][T23907] gspca_main: se401-2.14.0 probing 047d:5001 [ 1239.432887][ T6925] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1239.442034][ T6925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.484140][ T6925] usb 2-1: config 0 descriptor?? [ 1239.772528][T23907] usb 3-1: reset high-speed USB device number 83 using dummy_hcd [ 1240.674066][T23907] gspca_se401: read req failed req 0x06 error -19 [ 1240.688674][T23907] usb 3-1: USB disconnect, device number 83 12:47:04 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:47:04 executing program 3: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0xfffffffffffffffc) 12:47:04 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000d40), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000040)={0x0, 0x0, 0x5}) 12:47:04 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000040)={0x0, 0x10}) 12:47:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0xd, 0xa, 0x801}, 0x14}}, 0x0) 12:47:04 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1241.701697][T23907] usb 2-1: USB disconnect, device number 117 12:47:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x4, 0x0, 0x0, @uid}]}, 0x2c}, {0x0}], 0x2, 0x0, 0x0, 0x20004880}, 0x0) 12:47:04 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000040)={{}, {0x100000004}}) ioctl$PTP_PEROUT_REQUEST(r0, 0xc0603d0f, &(0x7f0000000000)) 12:47:04 executing program 4: times(&(0x7f0000000000)) times(&(0x7f0000000580)) 12:47:04 executing program 0: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000140)={[0x8]}, 0x8}) 12:47:04 executing program 3: syz_clone(0x4a000100, 0x0, 0x0, 0x0, 0x0, 0x0) 12:47:04 executing program 4: syz_io_uring_setup(0x3947, &(0x7f0000000000), 0x0, 0x0) [ 1242.022865][T29792] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1242.156183][T23907] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1242.433526][T29792] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1242.442798][T29792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.463733][T29792] usb 3-1: config 0 descriptor?? [ 1242.524653][T29792] gspca_main: se401-2.14.0 probing 047d:5001 [ 1242.602841][T23907] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1242.611941][T23907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.631016][T23907] usb 2-1: config 0 descriptor?? [ 1242.952667][T29792] gspca_se401: Wrong descriptor type [ 1243.155343][T23907] usb 3-1: USB disconnect, device number 84 12:47:07 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:47:07 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40603d07, &(0x7f0000000000)) 12:47:07 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') preadv(r0, &(0x7f0000002780)=[{&(0x7f0000002400)=""/76, 0x4c}], 0x1, 0x0, 0x0) 12:47:07 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f00000010c0), 0x111600, 0x0) 12:47:07 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x43403d05, &(0x7f0000000040)) 12:47:07 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1244.794122][T23907] usb 2-1: USB disconnect, device number 118 12:47:07 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)="80") 12:47:07 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000000)) 12:47:07 executing program 0: syz_genetlink_get_family_id$nfc(&(0x7f0000000440), 0xffffffffffffffff) 12:47:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0xcc, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) 12:47:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) 12:47:08 executing program 4: syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) [ 1245.132785][T24037] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1245.252700][T23907] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1245.512638][T24037] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1245.521850][T24037] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.531871][T24037] usb 3-1: config 0 descriptor?? [ 1245.575451][T24037] gspca_main: se401-2.14.0 probing 047d:5001 [ 1245.632683][T23907] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1245.641792][T23907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.657081][T23907] usb 2-1: config 0 descriptor?? [ 1246.012591][T24037] gspca_se401: Wrong descriptor type [ 1246.218679][T23907] usb 3-1: USB disconnect, device number 85 12:47:10 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef0000000109021200010000000009040000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:47:10 executing program 0: syz_io_uring_setup(0x3947, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x709b, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000000180), &(0x7f00000001c0)) 12:47:10 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x19, &(0x7f0000000200), &(0x7f0000000240)=0x8) 12:47:10 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f00000001c0)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 12:47:10 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)=0x8) 12:47:10 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1247.885032][T24037] usb 2-1: USB disconnect, device number 119 12:47:10 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = socket$inet6_sctp(0x1c, 0x1, 0x84) r3 = dup2(r2, r1) r4 = dup2(r0, r3) sendmsg$inet_sctp(r4, &(0x7f00000001c0)={&(0x7f0000000280)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x13, &(0x7f0000000100), 0x8) 12:47:10 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x20, &(0x7f0000000180), 0x4) 12:47:11 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="01e57176"], 0x79) 12:47:11 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x100, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 12:47:11 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet(r1, &(0x7f0000000240)={0x10, 0x2}, 0x10) 12:47:11 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001600)={&(0x7f00000001c0)=@in6={0x1c, 0x1c}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000000200)="b5", 0x1}], 0x1, &(0x7f0000001580)=[@prinfo={0x14, 0x84, 0x7, {0x2}}], 0x14}, 0x0) [ 1248.212990][ T6925] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1248.382481][T24037] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1248.622613][ T6925] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1248.631705][ T6925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.647467][ T6925] usb 3-1: config 0 descriptor?? [ 1248.704873][ T6925] gspca_main: se401-2.14.0 probing 047d:5001 [ 1248.763329][T24037] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1248.773572][T24037] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.788189][T24037] usb 2-1: config 0 descriptor?? [ 1249.132711][ T6925] gspca_se401: Wrong descriptor type [ 1249.335661][ T6925] usb 3-1: USB disconnect, device number 86 12:47:13 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef0000000109021200010000000009040000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:47:13 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) 12:47:13 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000340)={0x0, 0x5, 0xcb69, 0x2}, 0x10) 12:47:13 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$sock_int(r0, 0xffff, 0x1015, &(0x7f00000002c0), 0x4) 12:47:13 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet(r1, &(0x7f0000000240)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x103, &(0x7f0000000000), &(0x7f00000000c0)=0x8) 12:47:13 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1250.964852][T29792] usb 2-1: USB disconnect, device number 120 12:47:14 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0), 0x84) 12:47:14 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) listen(r0, 0x0) bind(r0, &(0x7f0000000100)=@in6={0x1c, 0x1c}, 0x1c) 12:47:14 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = socket$inet6_sctp(0x1c, 0x1, 0x84) r3 = dup2(r2, r1) r4 = dup2(r0, r3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x105, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 12:47:14 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x103, &(0x7f0000000000), &(0x7f00000000c0)=0x8) 12:47:14 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000000)='|', 0x1, 0x100, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 12:47:14 executing program 5: pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) [ 1251.272675][T24037] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1251.500148][T29792] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1251.643331][T24037] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1251.652662][T24037] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.664183][T24037] usb 3-1: config 0 descriptor?? [ 1251.704067][T24037] gspca_main: se401-2.14.0 probing 047d:5001 [ 1251.902627][T29792] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1251.911834][T29792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.928022][T29792] usb 2-1: config 0 descriptor?? [ 1252.162717][T24037] gspca_se401: Wrong descriptor type [ 1252.367150][T29792] usb 3-1: USB disconnect, device number 87 12:47:17 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef0000000109021200010000000009040000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:47:17 executing program 3: syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @empty, @val, {@ipv4}}, 0x0) 12:47:17 executing program 4: syz_emit_ethernet(0xe, &(0x7f0000000100)={@broadcast, @empty, @val, {@ipv4}}, 0x0) 12:47:17 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff}) preadv(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) 12:47:17 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') 12:47:17 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1254.089171][T24037] usb 2-1: USB disconnect, device number 121 12:47:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000140)={0x0, 0x101}, 0x10) 12:47:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f00000000c0), 0x8) 12:47:17 executing program 4: syz_io_uring_setup(0x3f, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)) 12:47:17 executing program 3: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000002c0)={&(0x7f0000000140)=@ieee802154={0x24, @short}, 0x80, 0x0}, 0x0) 12:47:17 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 12:47:17 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x0, 0x0}, 0x10) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x48850) syz_io_uring_setup(0x61b, &(0x7f0000000940)={0x0, 0xb53e, 0x2, 0x0, 0x29}, &(0x7f00000009c0), &(0x7f0000000a00)) [ 1254.452523][ T6933] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1254.622510][T24037] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1254.632772][ T6925] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1254.812753][ T6933] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1254.822744][ T6933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.835980][ T6933] usb 3-1: config 0 descriptor?? [ 1254.875523][ T6933] gspca_main: se401-2.14.0 probing 047d:5001 [ 1254.992730][T24037] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1255.007379][T24037] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.019685][T24037] usb 2-1: config 0 descriptor?? [ 1255.152666][ T6925] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1255.161858][ T6925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.174875][ T6925] usb 6-1: Product: syz [ 1255.179108][ T6925] usb 6-1: Manufacturer: syz [ 1255.185621][ T6925] usb 6-1: SerialNumber: syz [ 1255.233779][ T6925] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1255.312759][ T6933] gspca_se401: Wrong descriptor type [ 1255.517800][T23907] usb 3-1: USB disconnect, device number 88 [ 1255.842645][T24037] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1256.048210][T31558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.059443][T31558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1256.069196][ T6933] usb 6-1: USB disconnect, device number 47 [ 1256.912744][T24037] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1256.919819][T24037] ath9k_htc: Failed to initialize the device [ 1256.931035][ T6933] usb 6-1: ath9k_htc: USB layer deinitialized 12:47:20 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:47:20 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 12:47:20 executing program 3: io_uring_setup(0x3776, &(0x7f00000005c0)) 12:47:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'ipvlan0\x00'}) 12:47:20 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:47:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000005fc0)=[{{&(0x7f0000000040)={0x2, 0x4e22}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000140)='#', 0x1}], 0x2}}], 0x1, 0x0) [ 1257.226129][ T6933] usb 2-1: USB disconnect, device number 122 12:47:20 executing program 5: openat$audio1(0xffffff9c, &(0x7f0000000340), 0x403, 0x0) 12:47:20 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_linger(r0, 0x1, 0x29, &(0x7f00000000c0), 0x8) 12:47:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000640), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000003c0)={0x0, 0x0, 0x0}) 12:47:20 executing program 4: r0 = socket$phonet(0x23, 0x2, 0x1) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f0000000140)) [ 1257.307095][T31573] 8021q: VLANs not supported on ipvlan0 12:47:20 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000600)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) 12:47:20 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26, 0x0, 0xb}, 0x20) [ 1257.552809][T24037] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1257.722665][ T6933] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1257.812823][ T6929] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1257.912621][T24037] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1257.921865][T24037] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.939558][T24037] usb 3-1: config 0 descriptor?? [ 1257.984441][T24037] gspca_main: se401-2.14.0 probing 047d:5001 [ 1258.052613][ T6929] usb 5-1: Using ep0 maxpacket: 32 [ 1258.082571][ T6933] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1258.092300][ T6933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.109706][ T6933] usb 2-1: config 0 descriptor?? [ 1258.212664][ T6929] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1258.292652][ T6929] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1258.412683][T24037] gspca_se401: Wrong descriptor type [ 1258.472644][ T6929] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1258.481740][ T6929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.490169][ T6929] usb 5-1: Product: syz [ 1258.494670][ T6929] usb 5-1: Manufacturer: syz [ 1258.499457][ T6929] usb 5-1: SerialNumber: syz [ 1258.543556][ T6929] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 1258.621042][ T6929] usb 3-1: USB disconnect, device number 89 [ 1258.746329][T29792] usb 5-1: USB disconnect, device number 28 12:47:23 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:47:23 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 12:47:23 executing program 0: r0 = socket(0x2, 0x3, 0x5) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x3, 'vlan0\x00'}) 12:47:23 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_linger(r0, 0x1, 0x15, &(0x7f00000000c0)={0x0, 0x80000000}, 0x8) 12:47:23 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:47:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_linger(r0, 0x1, 0x46, &(0x7f00000000c0), 0x8) [ 1260.316759][ T6929] usb 2-1: USB disconnect, device number 123 12:47:23 executing program 3: syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x60ac, &(0x7f0000001200)={0x0, 0x0, 0x2000}, &(0x7f0000001280), &(0x7f00000012c0)) 12:47:23 executing program 0: add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, 0x0, @b}, 0x48, 0xfffffffffffffffb) 12:47:23 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'd'}]}}, 0x0, 0x2a}, 0x20) 12:47:23 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_int(r0, 0x1, 0x2e, 0x0, &(0x7f0000000040)) 12:47:23 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_linger(r0, 0x1, 0x9, &(0x7f00000000c0), 0x8) 12:47:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_linger(r0, 0x1, 0x28, &(0x7f00000000c0)={0x1}, 0x8) [ 1260.639251][T23907] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1260.652610][T24037] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1260.812486][ T6929] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1261.022643][T24037] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1261.032005][T24037] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.049550][T24037] usb 3-1: config 0 descriptor?? [ 1261.094512][T24037] gspca_main: se401-2.14.0 probing 047d:5001 [ 1261.182563][T23907] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1261.191642][T23907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.202583][ T6929] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1261.205911][T23907] usb 6-1: Product: syz [ 1261.212009][ T6929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.218496][T23907] usb 6-1: Manufacturer: syz [ 1261.234504][ T6929] usb 2-1: config 0 descriptor?? [ 1261.235669][T23907] usb 6-1: SerialNumber: syz [ 1261.284179][T23907] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1261.532630][T24037] gspca_se401: Wrong descriptor type [ 1261.735256][ T7376] usb 3-1: USB disconnect, device number 90 [ 1261.862646][T23907] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1262.067563][T31595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1262.079668][T31595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.089743][T31595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1262.102915][T31595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.114957][T31595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1262.124695][T31595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.136931][T29791] usb 6-1: USB disconnect, device number 48 [ 1262.913597][T23907] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1262.920733][T23907] ath9k_htc: Failed to initialize the device [ 1262.929430][T29791] usb 6-1: ath9k_htc: USB layer deinitialized 12:47:26 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:47:26 executing program 3: socketpair(0x22, 0x0, 0x4, &(0x7f0000000080)) 12:47:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="290200000000000000000100000008", @ANYRES32=0x0, @ANYBLOB='<'], 0x58}}, 0x0) 12:47:26 executing program 4: syz_open_dev$usbmon(&(0x7f0000001180), 0x0, 0x145242) 12:47:26 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:47:26 executing program 5: syz_io_uring_setup(0x2fdc, 0x0, &(0x7f0000000200), 0x0) [ 1263.403478][T29791] usb 2-1: USB disconnect, device number 124 12:47:26 executing program 5: r0 = socket$phonet(0x23, 0x2, 0x1) getsockopt$sock_int(r0, 0x1, 0x27, 0x0, &(0x7f0000000140)) 12:47:26 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) 12:47:26 executing program 4: openat$binder_debug(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 12:47:26 executing program 0: openat$dma_heap(0xffffff9c, &(0x7f0000000400), 0x20081, 0x0) [ 1263.503390][T31623] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 12:47:26 executing program 5: socketpair(0x3, 0x0, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x800, r0}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080)=0x2, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000004700)={'veth0_to_batadv\x00'}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'macsec0\x00', {0x2}, 0x1}) 12:47:26 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x3}]}}, 0x0, 0x26}, 0x20) [ 1263.723270][T24037] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1263.902487][T29791] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1264.093170][T24037] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1264.102268][T24037] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.114497][T24037] usb 3-1: config 0 descriptor?? [ 1264.157161][T24037] gspca_main: se401-2.14.0 probing 047d:5001 [ 1264.262603][T29791] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1264.271760][T29791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.288361][T29791] usb 2-1: config 0 descriptor?? [ 1264.572656][T24037] gspca_se401: Wrong descriptor type [ 1264.785497][ T6929] usb 3-1: USB disconnect, device number 91 12:47:29 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:47:29 executing program 4: r0 = socket$phonet(0x23, 0x2, 0x1) bind(r0, &(0x7f0000000000)=@ethernet={0x0, @dev}, 0x80) 12:47:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000002740)=[{{&(0x7f0000000040)={0x2, 0x4e24}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0xc}}], 0xc}}], 0x1, 0x4014) 12:47:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003ac0)={0x0, 0x2, &(0x7f0000003840)=@raw=[@btf_id], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 12:47:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x7, 0xa, 0x446}, 0x48) 12:47:29 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1266.506473][ T6929] usb 2-1: USB disconnect, device number 125 12:47:29 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x8, 0xa, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) openat$binder_debug(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) io_uring_setup(0x3776, &(0x7f00000005c0)={0x0, 0x665b, 0x800, 0x1, 0x16d}) 12:47:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xdc}}], 0x2, 0x0) 12:47:29 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind(r0, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="bc1bffd94e1b"}, 0x80) 12:47:29 executing program 0: r0 = socket(0x29, 0x2, 0x0) getsockname$packet(r0, 0x0, 0x0) 12:47:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000400)={0x1, 0x0, @ioapic}) 12:47:29 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x8202) write$sndseq(r0, &(0x7f0000000100)=[{0xff, 0x0, 0x0, 0x0, @time, {}, {}, @result}], 0x1c) [ 1266.842569][T29791] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1266.982712][ T6929] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1267.202613][T29791] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1267.213868][T29791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.224011][T29791] usb 3-1: config 0 descriptor?? [ 1267.264686][T29791] gspca_main: se401-2.14.0 probing 047d:5001 [ 1267.372721][ T6929] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1267.385159][ T6929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.401489][ T6929] usb 2-1: config 0 descriptor?? [ 1267.702612][T29791] gspca_se401: Wrong descriptor type [ 1267.908380][ T6933] usb 3-1: USB disconnect, device number 92 [ 1267.914561][ T6929] usb 2-1: Firmware version (0.0) predates our first public release. [ 1267.929620][ T6929] usb 2-1: Please update to version 0.2 or newer [ 1268.050684][ T6929] usb 2-1: USB disconnect, device number 126 12:47:31 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:47:31 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x1f, @any, 0x0, 0x2}, 0xe) 12:47:31 executing program 4: futex(&(0x7f0000000040), 0x6, 0x0, 0x0, 0x0, 0x0) 12:47:31 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0xff}, 0xe) 12:47:31 executing program 5: socketpair(0x8, 0x0, 0x0, &(0x7f00000003c0)) 12:47:31 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f000000"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:47:31 executing program 4: r0 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mkdirat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x1ff) 12:47:31 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x6, 0x0, &(0x7f0000000540)) 12:47:31 executing program 5: futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futex(&(0x7f0000000040)=0x1, 0x6, 0x0, &(0x7f0000000100)={r0, r1+60000000}, 0x0, 0x0) 12:47:31 executing program 3: openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x27040, 0x0) 12:47:31 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000140)={@broadcast, @multicast1, 0x1, "1682c261eced966c69369fb835bb835393dd4dc3dc63f9ee5582bed4204d684a"}, 0x3c) 12:47:31 executing program 0: r0 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x10) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@dev, @in6=@private2}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@private2}, 0x0, @in=@multicast2, 0x0, 0x0, 0x1}}, 0xe8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700), 0x202200, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000d00), 0x141000, 0x0) [ 1268.726163][T29791] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1268.834988][T29792] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1269.092674][T29791] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1269.101924][T29791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.118731][T29791] usb 2-1: config 0 descriptor?? [ 1269.203260][T29792] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1269.212348][T29792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.232252][T29792] usb 3-1: config 0 descriptor?? [ 1269.284649][T29792] gspca_main: se401-2.14.0 probing 047d:5001 [ 1269.622634][T29791] usb 2-1: Firmware version (0.0) predates our first public release. [ 1269.630840][T29791] usb 2-1: Please update to version 0.2 or newer [ 1269.722606][T29792] gspca_se401: Wrong descriptor type [ 1269.737445][T29791] usb 2-1: USB disconnect, device number 127 [ 1269.929544][ T6933] usb 3-1: USB disconnect, device number 93 12:47:33 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:47:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) 12:47:33 executing program 3: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000002a40)='syz0\x00') 12:47:33 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000080)={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) 12:47:33 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00'}) 12:47:33 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f000000"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:47:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x20, @any, 0x0, 0x2}, 0xe) 12:47:33 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x2103}) ioctl$TUNSETFILTEREBPF(r0, 0x400454ce, 0x0) 12:47:33 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000002480), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000024c0)) 12:47:33 executing program 5: socketpair(0x10, 0x0, 0x0, &(0x7f0000000500)) [ 1270.422557][T29791] usb 2-1: new high-speed USB device number 2 using dummy_hcd 12:47:33 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, 0x0) 12:47:33 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x40085203, 0x0) [ 1270.802512][ T6933] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1270.812875][T29791] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1270.822085][T29791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.836446][T29791] usb 2-1: config 0 descriptor?? [ 1271.192667][ T6933] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1271.202573][ T6933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.219370][ T6933] usb 3-1: config 0 descriptor?? [ 1271.276558][ T6933] gspca_main: se401-2.14.0 probing 047d:5001 [ 1271.332748][T29791] usb 2-1: Firmware version (0.0) predates our first public release. [ 1271.340927][T29791] usb 2-1: Please update to version 0.2 or newer [ 1271.449173][T29791] usb 2-1: USB disconnect, device number 2 [ 1271.712655][ T6933] gspca_se401: Wrong descriptor type 12:47:34 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:47:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x48) 12:47:34 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/asound/card0/oss_mixer\x00', 0x942, 0x0) write$proc_mixer(r0, 0x0, 0x2) 12:47:34 executing program 4: mq_unlink(&(0x7f0000000080)='-\\\x85\\-$^^/$\\-)&]\x00') 12:47:34 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x81, 0x2}, 0xe) [ 1271.853028][T31721] ALSA: mixer_oss: invalid OSS volume '' [ 1271.921694][T29791] usb 3-1: USB disconnect, device number 94 [ 1272.152515][ T6933] usb 2-1: new high-speed USB device number 3 using dummy_hcd 12:47:35 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f000000"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:47:35 executing program 5: io_uring_setup(0x71dd, &(0x7f00000001c0)={0x0, 0x0, 0x20}) 12:47:35 executing program 4: pselect6(0x40, &(0x7f0000000180)={0x4}, 0x0, 0x0, &(0x7f0000000280), 0x0) 12:47:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4c00) 12:47:35 executing program 0: rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x8) rt_sigreturn() syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000140)) r0 = eventfd(0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000100)={0x28}, 0x28) 12:47:35 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/timer\x00', 0x0, 0x0) 12:47:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file2\x00', 0xa08886, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESHEX], 0x1, 0x2b8, &(0x7f00000007c0)="$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") r0 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r0, 0x2007fff) r1 = open(&(0x7f0000000400)='./bus\x00', 0x44000, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) [ 1272.512933][ T6933] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1272.557723][ T6933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.574335][ T6933] usb 2-1: config 0 descriptor?? [ 1272.610693][T31744] loop5: detected capacity change from 0 to 128 [ 1272.659515][ T27] audit: type=1804 audit(1695041255.641:123): pid=31744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1920267076/syzkaller.vm2oKW/1963/file2/bus" dev="loop5" ino=1048617 res=1 errno=0 [ 1272.772692][ T6929] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1273.073004][ T6933] usb 2-1: Firmware version (0.0) predates our first public release. [ 1273.081148][ T6933] usb 2-1: Please update to version 0.2 or newer [ 1273.132799][ T6929] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1273.148455][ T6929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.159179][ T6929] usb 3-1: config 0 descriptor?? [ 1273.174378][ T6933] usb 2-1: USB disconnect, device number 3 [ 1273.204178][ T6929] gspca_main: se401-2.14.0 probing 047d:5001 12:47:36 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:47:36 executing program 0: r0 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='memory.numa_stat\x00', 0x0, 0x0) 12:47:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file2\x00', 0xa08886, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESHEX], 0x1, 0x2b8, &(0x7f00000007c0)="$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") openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x0, 0x0) 12:47:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e22, @empty}, 0x10) 12:47:36 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) [ 1273.602849][T31750] loop3: detected capacity change from 0 to 128 [ 1273.643082][ T6929] gspca_se401: Wrong descriptor type [ 1273.845107][ T6929] usb 3-1: USB disconnect, device number 95 [ 1273.882516][ T6933] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1274.263643][ T6933] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1274.274582][ T6933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.288547][ T6933] usb 2-1: config 0 descriptor?? 12:47:37 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000023"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:47:37 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x80, @fixed, 0x1}, 0xe) 12:47:37 executing program 4: r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) symlinkat(&(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file1\x00') 12:47:37 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001940)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x40) 12:47:37 executing program 0: r0 = open(&(0x7f0000000140)='./bus\x00', 0x127842, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x1000000201005) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff6, 0x11, r2, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) 12:47:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file2\x00', 0xa08886, &(0x7f0000000000)=ANY=[], 0x1, 0x2cc, &(0x7f0000000740)="$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") r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x48001035, r0, 0x0) [ 1274.399968][ T27] audit: type=1800 audit(1695041257.381:124): pid=31765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1966 res=0 errno=0 12:47:37 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) [ 1274.565492][T31772] loop3: detected capacity change from 0 to 128 [ 1274.683097][T24037] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1274.701405][T31765] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 1274.743725][T31765] File: /root/syzkaller-testdir1851040449/syzkaller.WOJqdd/209/bus PID: 31765 Comm: syz-executor.0 [ 1274.792693][ T6933] usb 2-1: Firmware version (0.0) predates our first public release. [ 1274.800838][ T6933] usb 2-1: Please update to version 0.2 or newer [ 1274.933907][ T6933] usb 2-1: USB disconnect, device number 4 [ 1275.062708][T24037] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1275.082785][T24037] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.107854][T24037] usb 3-1: config 0 descriptor?? [ 1275.159445][T24037] gspca_main: se401-2.14.0 probing 047d:5001 12:47:38 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:47:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) 12:47:38 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000700)={0x1f, 0x0, @none}, 0xe) 12:47:38 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000000)) 12:47:38 executing program 0: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) getgroups(0x2, &(0x7f00000002c0)=[0x0, 0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000480), 0x4) getgroups(0x4, &(0x7f0000000300)=[0x0, 0x0, 0xee00, 0x0]) syz_clone3(&(0x7f0000000240)={0x40200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000100)=""/170, 0x0}, 0x58) [ 1275.592586][T24037] gspca_se401: Wrong descriptor type [ 1275.632620][T29792] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1275.799681][T24037] usb 3-1: USB disconnect, device number 96 [ 1276.042785][T29792] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1276.052000][T29792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.070337][T29792] usb 2-1: config 0 descriptor?? 12:47:39 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000023"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12:47:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0xffffff9b) 12:47:39 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) fchmod(r0, 0x0) 12:47:39 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000700)={0x1f, 0x0, @none, 0x500}, 0xe) 12:47:39 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000000c0)=0x81, 0x4) 12:47:39 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) getrlimit(0x8, &(0x7f00000007c0)) socket$inet6(0xa, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000840)={0x0, 0x0, 0x801, 0x20040006, 0x17800, 0xffcf0000}) 12:47:39 executing program 5: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x400}}, [{}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x49, &(0x7f0000000100)=@string={0x49, 0x3, "fe8eb7287df909e44df98870696d2342f114e9fbf132809ed04296ed1ef639836120faf7b2b9a552cb58d693b3517f003b42d790bfaa3896077be1af6fb4894dae77a4840099f6"}}]}) [ 1276.592833][T29792] usb 2-1: Firmware version (0.0) predates our first public release. [ 1276.592863][T29792] usb 2-1: Please update to version 0.2 or newer [ 1276.707491][T29792] usb 2-1: USB disconnect, device number 5 [ 1276.733133][ T6933] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1276.775055][T24037] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1277.013004][T24037] usb 6-1: Using ep0 maxpacket: 8 12:47:40 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 12:47:40 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 12:47:40 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) io_setup(0x6, &(0x7f0000000000)) [ 1277.092723][ T6933] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1277.092761][ T6933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.098606][ T6933] usb 3-1: config 0 descriptor?? [ 1277.132834][T24037] usb 6-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1277.132873][T24037] usb 6-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 12:47:40 executing program 4: r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, 0x0, 0x0) getgroups(0x4, &(0x7f00000002c0)=[0xee01, 0x0, 0xee01, 0xee00]) read$FUSE(r0, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000380)={0x78, 0xe8d43bd31385be86, 0x0, {0x81, 0x0, 0x0, {0x5, 0x7, 0x2, 0x4, 0x1, 0x3, 0x4, 0x1, 0x6, 0x2000, 0x3, r3, r2, 0xe79}}}, 0x78) getpgrp(0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000480)=0x7ff, 0x4) r4 = openat$cgroup(r0, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x40200000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {0x20}, &(0x7f00000000c0)=""/55, 0x37, &(0x7f0000000100)=""/170, 0x0, 0x0, {r4}}, 0x58) [ 1277.132904][T24037] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1277.135300][ T6933] gspca_main: se401-2.14.0 probing 047d:5001 12:47:40 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000800)) [ 1277.292769][T24037] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1277.327499][T24037] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.374889][T24037] usb 6-1: Product: syz [ 1277.382732][T29792] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1277.398518][T24037] usb 6-1: Manufacturer: 軾⢷諒淚炈浩䈣ᓱﯩ㋱麀䋐茹⁡릲劥壋鏖决䈻郗꪿阸笇꿡둯䶉瞮蒤餀 [ 1277.446539][T24037] usb 6-1: SerialNumber: syz [ 1277.482924][T31799] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1277.582652][ T6933] gspca_se401: Wrong descriptor type [ 1277.748786][T24037] usb 6-1: USB disconnect, device number 49 [ 1277.782895][T29792] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1277.785061][ T6933] usb 3-1: USB disconnect, device number 97 [ 1277.791972][T29792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.816778][T29792] usb 2-1: config 0 descriptor?? 12:47:41 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) 12:47:41 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x5, 0x401) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000840)={0x0, 0x0, 0x801, 0x20040006, 0x17800, 0xffcf0000}) 12:47:41 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x401) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000840)={0x0, 0x0, 0x801, 0x20040006, 0x17800, 0xffcf0000}) 12:47:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000280)={0x0, 0x0, "8648df"}) 12:47:41 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000023"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1278.302544][T29792] usb 2-1: Firmware version (0.0) predates our first public release. [ 1278.310849][T29792] usb 2-1: Please update to version 0.2 or newer 12:47:41 executing program 5: r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffeb}, 0xfffffdef}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp_prespec={0x7, 0x4}]}}}], 0x18}}], 0x2, 0x0) 12:47:41 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, 0x0, 0x0) getgroups(0x6, &(0x7f00000002c0)=[0xee01, 0x0, 0xee01, 0x0, 0xee00, 0xee00]) read$FUSE(r0, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r1, &(0x7f0000000380)={0x78, 0xe8d43bd31385be86, 0x0, {0x81, 0x0, 0x0, {0x5, 0x7, 0x2, 0x4, 0x1, 0x3, 0x4, 0x1, 0x6, 0x2000, 0x3, r7, r3, 0xe79}}}, 0x78) r8 = getpgrp(0xffffffffffffffff) r9 = getpgrp(0xffffffffffffffff) getgroups(0x6, &(0x7f0000000300)=[r5, r6, r2, 0xee00, r4, r5]) getgroups(0x2, &(0x7f0000000400)=[0xee00, r4]) r10 = openat$cgroup(r0, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x40200000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x20}, &(0x7f00000000c0)=""/55, 0x37, &(0x7f0000000100)=""/170, &(0x7f00000001c0)=[r8, r9], 0x2, {r10}}, 0x58) [ 1278.465251][T29792] usb 2-1: USB disconnect, device number 6 [ 1278.686817][ T6933] usb 3-1: new high-speed USB device number 98 using dummy_hcd 12:47:42 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000700)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 12:47:42 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x7d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@dmm={0x7}, @mbim_extended={0x8}]}}}}}]}}, 0x0) 12:47:42 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 12:47:42 executing program 5: r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, 0x0, 0x0) getgroups(0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, 0x0, 0x0) getgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000400)=[0x0]) r3 = openat$cgroup(r0, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x40200000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {0x20}, &(0x7f00000000c0)=""/55, 0x37, &(0x7f0000000100)=""/170, &(0x7f00000001c0)=[r2], 0x1, {r3}}, 0x58) 12:47:42 executing program 4: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) [ 1279.912544][T29792] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1279.916256][ T6933] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1279.939687][ T6933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.957487][ T6933] usb 3-1: config 0 descriptor?? 12:47:42 executing program 5: write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) getgroups(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) getpgrp(0xffffffffffffffff) getgroups(0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x40200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1279.972532][ T7372] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1280.007753][ T6933] gspca_main: se401-2.14.0 probing 047d:5001 [ 1280.032610][ T6928] usb 5-1: new high-speed USB device number 29 using dummy_hcd 12:47:43 executing program 5: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_clone3(&(0x7f00000005c0)={0x18821000, 0x0, &(0x7f0000000300), &(0x7f0000000340), {0x12}, &(0x7f0000000380)=""/165, 0xa5, &(0x7f0000000440)=""/202, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x9}, 0x58) [ 1280.222799][ T7372] usb 4-1: Using ep0 maxpacket: 8 [ 1280.283990][ T6928] usb 5-1: Using ep0 maxpacket: 8 [ 1280.315353][T29792] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1280.332479][T29792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.359590][T29792] usb 2-1: config 0 descriptor?? [ 1280.364890][ T7372] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1280.381514][ T7372] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1280.399471][ T7372] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1280.402884][ T6928] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1280.409736][ T7372] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1280.433002][ T6933] gspca_se401: Wrong descriptor type [ 1280.439078][ T7372] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1280.460056][ T7372] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 12:47:43 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), 0xffffffffffffffff) 12:47:43 executing program 5: setregid(0xffffffffffffffff, 0xee01) setregid(0xffffffffffffffff, 0x0) [ 1280.633543][ T6928] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1280.642714][ T7372] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1280.642747][ T7372] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.642771][ T7372] usb 4-1: Product: syz [ 1280.642788][ T7372] usb 4-1: Manufacturer: syz [ 1280.667476][ T6928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.691034][ T7372] usb 4-1: SerialNumber: syz [ 1280.707375][ T6928] usb 5-1: Product: syz [ 1280.724376][ T6928] usb 5-1: Manufacturer: syz [ 1280.740756][ T6928] usb 5-1: SerialNumber: syz [ 1280.769705][T24037] usb 3-1: USB disconnect, device number 98 [ 1280.922837][T29792] usb 2-1: Firmware version (0.0) predates our first public release. [ 1280.932019][T29792] usb 2-1: Please update to version 0.2 or newer [ 1281.007974][T24037] usb 5-1: USB disconnect, device number 29 [ 1281.022712][ T7372] cdc_ncm 4-1:1.0: bind() failure [ 1281.040863][ T7372] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1281.048514][ T7372] cdc_ncm 4-1:1.1: bind() failure [ 1281.055904][T29792] usb 2-1: USB disconnect, device number 7 [ 1281.078026][ T7372] usb 4-1: USB disconnect, device number 89 12:47:44 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 12:47:44 executing program 5: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x40200000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1281.522493][T24037] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1281.922684][T24037] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1281.935187][T24037] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.963527][T24037] usb 3-1: config 0 descriptor?? [ 1282.015413][T24037] gspca_main: se401-2.14.0 probing 047d:5001 12:47:45 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080), 0x4fc1, 0x105601) 12:47:45 executing program 5: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x9}}]}}]}}, 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000e00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) 12:47:45 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 12:47:45 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xb, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045519, &(0x7f0000001300)) 12:47:45 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) getrlimit(0x8, &(0x7f00000007c0)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000840)={0x0, 0x0, 0x801, 0x20040006, 0x17800, 0xffcf0000}) 12:47:45 executing program 3: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) 12:47:45 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2}}) [ 1282.452626][T24037] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1282.460033][T24037] se401: probe of 3-1:0.0 failed with error -71 [ 1282.489645][T24037] usb 3-1: USB disconnect, device number 99 [ 1282.502933][ T7372] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1282.532749][T29792] usb 2-1: new high-speed USB device number 8 using dummy_hcd 12:47:45 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000700)={0x1f, 0x3, @none}, 0xe) 12:47:45 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030509025c0002010600000904"], 0x0) [ 1282.662734][ T6928] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1282.772695][ T7372] usb 6-1: Using ep0 maxpacket: 8 [ 1282.892773][ T7372] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1282.917055][ T6928] usb 4-1: Using ep0 maxpacket: 8 [ 1282.922834][T29792] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1282.932871][T29792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 12:47:45 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) [ 1282.944543][T29792] usb 2-1: config 0 descriptor?? [ 1283.023701][T24037] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1283.032827][ T6928] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1283.103063][ T7372] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1283.127108][ T7372] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.138193][ T7372] usb 6-1: Product: syz [ 1283.147713][ T7372] usb 6-1: Manufacturer: syz [ 1283.154855][ T7372] usb 6-1: SerialNumber: syz [ 1283.202682][ T6928] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1283.216359][ T6928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.236720][ T6928] usb 4-1: Product: syz [ 1283.244350][ T6928] usb 4-1: Manufacturer: syz [ 1283.253643][ T6928] usb 4-1: SerialNumber: syz [ 1283.283012][T24037] usb 1-1: Using ep0 maxpacket: 8 [ 1283.302698][ T26] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1283.402645][T24037] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.418819][T24037] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1283.440288][T31862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1283.466564][T31862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1283.475301][T29792] usb 2-1: Firmware version (0.0) predates our first public release. [ 1283.483705][T29792] usb 2-1: Please update to version 0.2 or newer [ 1283.502587][T24037] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.527320][T24037] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1283.540407][ T6928] usb 4-1: USB disconnect, device number 90 [ 1283.559597][ T7372] usb 6-1: USB disconnect, device number 50 [ 1283.613946][T24037] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.630451][T24037] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1283.639795][T29792] usb 2-1: USB disconnect, device number 8 [ 1283.682548][ T26] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1283.692871][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.703094][ T26] usb 3-1: config 0 descriptor?? 12:47:46 executing program 4: lstat(&(0x7f0000001e40)='./file0\x00', 0x0) [ 1283.742850][T24037] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.749137][ T26] gspca_main: se401-2.14.0 probing 047d:5001 [ 1283.762844][T24037] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 12:47:46 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052e48000105"], 0x0) [ 1283.872899][T24037] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.889213][T24037] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 12:47:46 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:47:47 executing program 5: r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffeb}, 0xfffffdef}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x40, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x2, 0x0, 0x3, 0x0, [{@empty}, {@private}, {@remote}, {@multicast2}, {@multicast1}]}]}}}], 0x40}}], 0x2, 0x0) 12:47:47 executing program 3: syz_clone3(&(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000400)=""/238, 0xee, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x5}, 0x58) [ 1284.072684][T24037] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1284.101035][T24037] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 12:47:47 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @random="11c3cb27c80d", @val, {@ipv6}}, 0x0) [ 1284.126855][T24037] usb 1-1: Product: syz [ 1284.135685][T24037] usb 1-1: Manufacturer: syz [ 1284.146362][T24037] usb 1-1: SerialNumber: syz 12:47:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) syz_mount_image$tmpfs(&(0x7f0000002240), &(0x7f0000000040)='./file0\x00', 0x2302038, 0x0, 0x0, 0x0, &(0x7f0000000180)) mount(&(0x7f0000000300)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0) sendfile(r2, r1, 0x0, 0x100801700) [ 1284.212761][ T22] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1284.220541][ T26] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1284.229617][ T26] se401: probe of 3-1:0.0 failed with error -71 [ 1284.245369][ T26] usb 3-1: USB disconnect, device number 100 12:47:47 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090018105e22060000000000bf0109022400010000000009040000090300000009210000000122220009058103ab"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000002440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "2a201000", '3\x00'}}, 0x0}, 0x0) 12:47:47 executing program 5: mkdir(0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000380)={0x0, 0x0, '\x00', 0x1, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) getpid() [ 1284.442116][T31899] loop5: detected capacity change from 0 to 512 [ 1284.446523][T24037] usb 1-1: USB disconnect, device number 63 [ 1284.451275][T29792] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1284.512507][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 1284.522138][T31899] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1284.532343][T31899] ext4 filesystem being mounted at /root/syzkaller-testdir1920267076/syzkaller.vm2oKW/1982/file0 supports timestamps until 2038 (0x7fffffff) [ 1284.662444][ T6928] usb 4-1: new high-speed USB device number 91 using dummy_hcd 12:47:47 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000002341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) [ 1284.843798][ T22] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.866909][ T22] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1284.886431][ T22] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1284.922511][ T6928] usb 4-1: Using ep0 maxpacket: 16 12:47:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) 12:47:48 executing program 0: unlink(&(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') [ 1285.042785][ T6928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1285.062881][T29792] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1285.068196][ T6928] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1285.071998][T29792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.093427][ T22] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1285.113562][T29792] usb 2-1: config 0 descriptor?? [ 1285.122697][ T6933] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1285.131425][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 12:47:48 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x101981, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1285.151639][ T22] usb 5-1: Product: syz [ 1285.167169][ T22] usb 5-1: Manufacturer: syz [ 1285.173475][ T6928] usb 4-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 1285.177937][ T22] usb 5-1: SerialNumber: syz [ 1285.194951][ T6928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=191 [ 1285.221444][ T6928] usb 4-1: SerialNumber: syz [ 1285.248419][ T6928] usb 4-1: config 0 descriptor?? [ 1285.263623][ T22] cdc_ncm 5-1:1.0: skipping garbage [ 1285.268881][ T22] cdc_ncm 5-1:1.0: skipping garbage [ 1285.324026][ T6928] hub 4-1:0.0: USB hub found [ 1285.369011][ T3594] EXT4-fs (loop5): unmounting filesystem. [ 1285.370716][ T22] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1285.381921][ T22] cdc_ncm 5-1:1.0: bind() failure [ 1285.471947][ T22] usb 5-1: USB disconnect, device number 30 [ 1285.512594][ T6933] usb 3-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1285.521676][ T6933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.549842][ T6933] usb 3-1: config 0 descriptor?? [ 1285.582659][ T6928] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1285.594516][ T6933] gspca_main: se401-2.14.0 probing 047d:5001 [ 1285.603002][T29792] usb 2-1: Firmware version (0.0) predates our first public release. [ 1285.611124][T29792] usb 2-1: Please update to version 0.2 or newer [ 1285.742595][ T6928] usbhid 4-1:0.0: can't add hid device: -71 [ 1285.748648][ T6928] usbhid: probe of 4-1:0.0 failed with error -71 [ 1285.769557][T29792] usb 2-1: USB disconnect, device number 9 [ 1285.804008][ T6928] usb 4-1: USB disconnect, device number 91 12:47:48 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x301002, 0x0) readahead(r0, 0x0, 0x0) [ 1286.032739][ T6933] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1286.069236][ T6933] se401: probe of 3-1:0.0 failed with error -71 12:47:49 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:47:49 executing program 5: syz_clone(0x55023500, 0x0, 0x0, 0x0, 0x0, 0x0) 12:47:49 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x385802, 0x0) fcntl$getflags(r0, 0x2) 12:47:49 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000000)={0x0, 0x9}) 12:47:49 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40603d07, &(0x7f0000000000)) [ 1286.104240][ T6933] usb 3-1: USB disconnect, device number 101 12:47:49 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x406855c9, &(0x7f0000000100)={0x10}) 12:47:49 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="545ffa1dbd45", @val, {@ipv4}}, 0x0) 12:47:49 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000040)={{}, {0x5}}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40603d07, &(0x7f0000000000)) [ 1286.482657][ T6928] usb 2-1: new high-speed USB device number 10 using dummy_hcd 12:47:49 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001000)={0x0, 0x0, 0xc, {0xc, 0x0, "02bc63b5e555fac92b94"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x20, 0x4, [{{0x9, 0x4, 0x0, 0xfc, 0x2, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x40}}}}}]}}]}}, 0x0) 12:47:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setattr(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x4503, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x12, 0x4cd, &(0x7f0000000780)="$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") 12:47:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4040aea0, &(0x7f0000000040)=ANY=[@ANYBLOB='\a@']) 12:47:49 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090018105e22060000000000bf0109022400010000000009040000090300000009210000000122220009058103ab"], 0x0) syz_usb_control_io(r0, &(0x7f0000002440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "2a201000", '3\x00'}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00e60004"], 0x0, 0x0, 0x0, 0x0}) [ 1286.729858][T31943] loop4: detected capacity change from 0 to 512 [ 1286.933275][ T6933] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1286.941557][ T6928] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1286.977066][T31943] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1286.989243][T31943] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=7 [ 1286.999094][T31943] EXT4-fs warning (device loop4): ext4_enable_quotas:7000: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 1287.013887][T31943] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1287.030476][T31943] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 352: padding at end of block bitmap is not set [ 1287.053908][T31943] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6139: Corrupt filesystem [ 1287.067741][T31943] EXT4-fs (loop4): 1 orphan inode deleted [ 1287.074181][T31943] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1287.154098][ T6928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.316785][ T6928] usb 2-1: config 0 descriptor?? [ 1287.362607][ T6933] usb 3-1: Using ep0 maxpacket: 16 [ 1287.541630][T28777] EXT4-fs (loop4): unmounting filesystem. [ 1287.542683][ T6933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1287.570524][ T6933] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1287.602859][T29792] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1287.663090][ T6933] usb 3-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 1287.677704][ T6933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=191 [ 1287.687455][ T6933] usb 3-1: SerialNumber: syz [ 1287.700840][ T6933] usb 3-1: config 0 descriptor?? [ 1287.763638][ T6933] hub 3-1:0.0: USB hub found [ 1287.852577][T29792] usb 4-1: Using ep0 maxpacket: 32 [ 1287.942703][ T6928] usb 2-1: Firmware version (0.0) predates our first public release. [ 1287.957900][ T6928] usb 2-1: Please update to version 0.2 or newer [ 1287.972567][T29792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1287.989477][T29792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1287.992646][ T6933] hub 3-1:0.0: 1 port detected [ 1288.014946][T29792] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1288.042599][T29792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.052813][T29792] usb 4-1: config 0 descriptor?? [ 1288.072790][T31935] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1288.099833][ T6928] usb 2-1: USB disconnect, device number 10 [ 1288.102210][T29792] hub 4-1:0.0: USB hub found [ 1288.302593][T29792] hub 4-1:0.0: 2 ports detected [ 1288.322542][T29792] hub 4-1:0.0: insufficient power available to use all downstream ports 12:47:51 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:47:51 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090018105e22060000000000bf0109022400010000000009040000090300000009210000000122220009058103ab"], 0x0) syz_usb_control_io(r0, &(0x7f0000002440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "2a201000", '3\x00'}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00e600040000"], 0x0, 0x0, 0x0, 0x0}) 12:47:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setattr(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x4503, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x12, 0x4cd, &(0x7f0000000780)="$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") 12:47:51 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000040)={{}, {0x5}}) ioctl$PTP_EXTTS_REQUEST2(r0, 0xc0603d06, &(0x7f0000000000)) 12:47:51 executing program 0: r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) [ 1288.618727][T31955] loop4: detected capacity change from 0 to 512 [ 1288.761802][T31955] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1288.771735][T31955] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=7 [ 1288.781444][T31955] EXT4-fs warning (device loop4): ext4_enable_quotas:7000: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 1288.796122][T31955] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1288.806425][T31955] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 352: padding at end of block bitmap is not set [ 1288.828299][T31955] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6139: Corrupt filesystem [ 1288.840625][T31955] EXT4-fs (loop4): 1 orphan inode deleted [ 1288.846717][T31955] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1288.931282][ T6933] usb 3-1: USB disconnect, device number 102 12:47:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setattr(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x4503, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x12, 0x4cd, &(0x7f0000000780)="$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") [ 1289.466121][T31935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.500163][T31935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 12:47:52 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x80503d0a, &(0x7f0000000000)) [ 1289.518540][T28777] EXT4-fs (loop4): unmounting filesystem. 12:47:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x4503, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x12, 0x4cd, &(0x7f0000000780)="$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") [ 1289.572826][ T26] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1289.652622][ T7372] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1290.019780][T31968] loop4: detected capacity change from 0 to 512 [ 1291.237218][T29792] usb 4-1: USB disconnect, device number 92 [ 1291.342551][ T26] usb 6-1: Using ep0 maxpacket: 16 12:47:54 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000040)={{}, {0x5}}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40603d10, &(0x7f0000000000)) 12:47:54 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000100)={0x10}) 12:47:54 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090018105e22060000000000bf0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000002440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "2a201000", '3\x00'}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 12:47:54 executing program 5: r0 = fsopen(&(0x7f0000000040)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fspick(r1, &(0x7f0000000000)='./file0\x00', 0x0) [ 1291.473202][T31968] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1291.482793][ T7372] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1291.491878][ T7372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.501000][T31968] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=7 [ 1291.510563][T31968] EXT4-fs warning (device loop4): ext4_enable_quotas:7000: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 1291.525305][T31968] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1291.542671][T31968] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 352: padding at end of block bitmap is not set [ 1291.558270][ T26] usb 6-1: unable to read config index 0 descriptor/all 12:47:54 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:47:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002380)) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getrlimit(0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getpid() r2 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) syz_mount_image$tmpfs(&(0x7f0000002240), &(0x7f0000000040)='./file0\x00', 0x2302038, 0x0, 0x0, 0x0, &(0x7f0000000180)) mount(&(0x7f0000000300)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r4 = open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0x100801700) [ 1291.565449][T31968] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6139: Corrupt filesystem [ 1291.577003][T31968] EXT4-fs (loop4): 1 orphan inode deleted [ 1291.582953][T31968] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1291.599908][ T26] usb 6-1: can't read configurations, error -71 [ 1291.612289][ T7372] usb 2-1: config 0 descriptor?? [ 1291.633293][ T7372] usb 2-1: can't set config #0, error -71 [ 1291.663429][ T7372] usb 2-1: USB disconnect, device number 11 12:47:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) 12:47:54 executing program 3: r0 = socket(0x2, 0x2, 0x0) getsockopt$inet_tcp_int(r0, 0x11, 0x0, 0x0, 0x0) 12:47:54 executing program 5: r0 = socket(0x10, 0x2, 0xa) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x60}}, 0x0) [ 1291.778542][T28777] EXT4-fs (loop4): unmounting filesystem. 12:47:54 executing program 3: r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.controllers\x00', 0x3f00, 0x0) 12:47:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x4}]]}, 0x30}}, 0x0) [ 1291.892741][T24037] usb 1-1: new high-speed USB device number 64 using dummy_hcd 12:47:55 executing program 4: io_setup(0x7, &(0x7f00000023c0)) 12:47:55 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000300), 0x4) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xc9, 0x0, 0x0) [ 1292.063863][T31994] netlink: 'syz-executor.5': attribute type 281 has an invalid length. [ 1292.092524][ T7372] usb 2-1: new high-speed USB device number 12 using dummy_hcd 12:47:55 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, 0x0) [ 1292.172539][T24037] usb 1-1: Using ep0 maxpacket: 16 [ 1292.302818][T24037] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1292.319721][T24037] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1292.332598][T24037] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1292.442878][T24037] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 1292.452091][T24037] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=191 [ 1292.460741][T24037] usb 1-1: SerialNumber: syz [ 1292.462806][ T7372] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1292.481227][T24037] usb 1-1: config 0 descriptor?? [ 1292.482483][ T7372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.508845][ T7372] usb 2-1: config 0 descriptor?? [ 1292.535552][T24037] hub 1-1:0.0: USB hub found [ 1292.742627][T24037] hub 1-1:0.0: 1 port detected [ 1293.002778][T24037] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 1293.010272][T24037] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 1293.172724][T24037] usbhid 1-1:0.0: can't add hid device: -71 [ 1293.178742][T24037] usbhid: probe of 1-1:0.0 failed with error -71 [ 1293.212619][ T7372] usb 2-1: Firmware version (0.0) predates our first public release. [ 1293.221932][ T7372] usb 2-1: Please update to version 0.2 or newer [ 1293.233482][T24037] usb 1-1: USB disconnect, device number 64 [ 1293.315078][ T7372] usb 2-1: USB disconnect, device number 12 12:47:56 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090018105e22060000000000bf0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000002440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "2a201000", '3\x00'}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 12:47:56 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f00000000c0)=0x5, 0x4) 12:47:56 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:47:56 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) fcntl$getflags(r0, 0x1) 12:47:56 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 12:47:56 executing program 2: sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) r0 = socket(0x2, 0xa, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x8912, &(0x7f0000000240)) 12:47:56 executing program 4: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder1\x00', 0x802, 0x0) 12:47:56 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x501000, 0x0) r1 = socket(0x1d, 0x100803, 0x2) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f00000000c0)={@multicast2, @local}) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000300), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@private, @multicast1, 0x0, "00df17ae3af5fa08343a704fcce0242a42483c6a32865513e9839fae63e06e1e"}, 0x3c) 12:47:56 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$getflags(0xffffffffffffffff, 0x401) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000070000021000000000001d82ac4ec02fd5fdf7ffff"], 0x1c}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendfile(r1, r1, &(0x7f00000000c0)=0x5, 0x4) 12:47:56 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x21, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x0, @vifc_lcl_ifindex, @local}, 0x10) 12:47:56 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) [ 1293.802602][T24037] usb 1-1: new high-speed USB device number 65 using dummy_hcd 12:47:56 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x50, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x50}}, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x8912, &(0x7f0000000240)) [ 1294.052679][T24037] usb 1-1: Using ep0 maxpacket: 16 [ 1294.072483][ T7372] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1294.172714][T24037] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1294.183801][T24037] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1294.193900][T24037] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1294.282805][T24037] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 1294.292058][T24037] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=191 [ 1294.300976][T24037] usb 1-1: SerialNumber: syz [ 1294.307838][T24037] usb 1-1: config 0 descriptor?? [ 1294.353517][T24037] hub 1-1:0.0: USB hub found [ 1294.432591][ T7372] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1294.441729][ T7372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.459639][ T7372] usb 2-1: config 0 descriptor?? [ 1294.562693][T24037] hub 1-1:0.0: 1 port detected [ 1294.842697][T24037] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 1294.849213][T24037] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 1294.992611][T24037] usbhid 1-1:0.0: can't add hid device: -71 [ 1294.998628][T24037] usbhid: probe of 1-1:0.0 failed with error -71 [ 1295.043516][T24037] usb 1-1: USB disconnect, device number 65 [ 1295.162800][ T7372] usb 2-1: Firmware version (0.0) predates our first public release. [ 1295.170948][ T7372] usb 2-1: Please update to version 0.2 or newer [ 1295.264095][ T7372] usb 2-1: USB disconnect, device number 13 12:47:58 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090018105e22060000000000bf0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000002440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "2a201000", '3\x00'}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 12:47:58 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x41, 0x0) 12:47:58 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:47:58 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x401) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x4000, 0x86) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000070000021000000000001d82ac4ec02fd5fdf7ffffffffffffff0000000000"], 0x1c}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r2, &(0x7f00000000c0)=0x5, 0x4) 12:47:58 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x80000001, 0xfffffffffffffff8}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x0, &(0x7f0000000000)) ioctl$NS_GET_NSTYPE(r0, 0x5450, 0x719000) 12:47:58 executing program 4: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800, 0x0) 12:47:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000005ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, &(0x7f0000005c80)) [ 1295.668961][T24037] usb 1-1: new high-speed USB device number 66 using dummy_hcd 12:47:58 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xd0042, 0x0) 12:47:58 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x48001, 0x0, 0x0) 12:47:58 executing program 4: r0 = semget$private(0x0, 0x3, 0x0) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f00000001c0)=""/104) 12:47:58 executing program 5: r0 = semget$private(0x0, 0x7, 0x0) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000280)=""/210) 12:47:58 executing program 5: semctl$SEM_STAT_ANY(0x0, 0x3, 0x14, &(0x7f0000000040)=""/212) [ 1295.932745][T24037] usb 1-1: Using ep0 maxpacket: 16 [ 1296.012478][ T6928] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1296.072749][T24037] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1296.090447][T24037] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1296.100254][T24037] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1296.192731][T24037] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 1296.202173][T24037] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=191 [ 1296.210651][T24037] usb 1-1: SerialNumber: syz [ 1296.217435][T24037] usb 1-1: config 0 descriptor?? [ 1296.263253][T24037] hub 1-1:0.0: USB hub found [ 1296.392737][ T6928] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1296.402068][ T6928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.421569][ T6928] usb 2-1: config 0 descriptor?? [ 1296.482783][T24037] hub 1-1:0.0: 1 port detected [ 1296.732553][T24037] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 1296.739006][T24037] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 1296.902618][T24037] usbhid 1-1:0.0: can't add hid device: -71 [ 1296.908837][T24037] usbhid: probe of 1-1:0.0 failed with error -71 [ 1296.943378][T24037] usb 1-1: USB disconnect, device number 66 [ 1297.112905][ T6928] usb 2-1: Firmware version (0.0) predates our first public release. [ 1297.121046][ T6928] usb 2-1: Please update to version 0.2 or newer 12:48:00 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090018105e22060000000000bf0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000002440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "2a201000", '3\x00'}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 12:48:00 executing program 3: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, 0x0) [ 1297.249118][ T6928] usb 2-1: USB disconnect, device number 14 [ 1297.532551][ T7372] usb 1-1: new high-speed USB device number 67 using dummy_hcd 12:48:00 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) accept$unix(r0, 0x0, 0x0) 12:48:00 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) 12:48:00 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r0, &(0x7f0000002800)='Y', 0x1, 0x0, 0x0, 0x0) 12:48:00 executing program 2: semget$private(0x0, 0x2, 0x102) 12:48:00 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) 12:48:00 executing program 2: io_setup(0x0, &(0x7f0000000200)=0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0) 12:48:00 executing program 3: r0 = semget$private(0x0, 0x4, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000001080)=""/98) 12:48:00 executing program 5: semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, &(0x7f0000000400)=""/146) 12:48:00 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000140)="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", 0xfc) 12:48:00 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xc, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1297.782516][ T7372] usb 1-1: Using ep0 maxpacket: 16 [ 1297.902737][ T7372] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1297.916341][ T7372] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1297.927128][ T7372] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1298.012643][ T7372] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 1298.021743][ T7372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=191 [ 1298.032769][ T7372] usb 1-1: SerialNumber: syz [ 1298.043592][ T7372] usb 1-1: config 0 descriptor?? [ 1298.086014][ T7372] hub 1-1:0.0: USB hub found [ 1298.302581][ T7372] hub 1-1:0.0: 1 port detected [ 1298.562536][ T7372] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 1298.569082][ T7372] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 1298.712654][ T7372] usbhid 1-1:0.0: can't add hid device: -71 [ 1298.718669][ T7372] usbhid: probe of 1-1:0.0 failed with error -71 [ 1298.753948][ T7372] usb 1-1: USB disconnect, device number 67 12:48:02 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090018105e22060000000000bf0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000002440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "2a201000", '3\x00'}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 12:48:02 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\t'], 0x12) 12:48:02 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:48:02 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:48:02 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, 0x0) 12:48:02 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4502}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 12:48:02 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) write$cgroup_pressure(r1, &(0x7f0000000040)={'full'}, 0x2f) 12:48:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380), 0x4) 12:48:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4502}) 12:48:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4502}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x15, 0x0, 0x0, 0xffffefff}, {0x6}]}) 12:48:02 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x40086602, &(0x7f0000001380)) ioctl$TUNGETFEATURES(r0, 0x2, &(0x7f0000001380)) 12:48:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4502}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x64}, {0x6}]}) [ 1299.412531][T29792] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1299.652651][T29792] usb 1-1: Using ep0 maxpacket: 16 [ 1299.772708][T29792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1299.784532][T29792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1299.796057][T29792] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1299.892598][T29792] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 1299.901685][T29792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=191 [ 1299.915043][T29792] usb 1-1: SerialNumber: syz [ 1299.927966][T29792] usb 1-1: config 0 descriptor?? [ 1299.974087][T29792] hub 1-1:0.0: USB hub found [ 1300.033912][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.040238][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.192959][T29792] hub 1-1:0.0: 1 port detected [ 1300.412531][T29792] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 1300.419073][T29792] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 1300.562669][T29792] usbhid 1-1:0.0: can't add hid device: -71 [ 1300.568758][T29792] usbhid: probe of 1-1:0.0 failed with error -71 [ 1300.603965][T29792] usb 1-1: USB disconnect, device number 68 12:48:03 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4502}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x50}, {0x6}]}) 12:48:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4502}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x94, 0x0, 0x0, 0x122}, {0x6}]}) 12:48:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4502}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x2c}, {0x6}]}) 12:48:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x400454d9, &(0x7f0000000080)={0x0, 0x0}) 12:48:03 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090018105e22060000000000bf0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000002440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "2a201000", '3\x00'}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 12:48:03 executing program 5: syz_clone(0x42021100, 0x0, 0x0, 0x0, 0x0, 0x0) 12:48:04 executing program 1: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x0, 0xdf9, 0x6, 0x200, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x7}, 0x48) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000680), 0x8) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x1, 0x6, 0xc2, 0x273, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x301800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x4, 0x5, 0x4, 0x20}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000840), &(0x7f0000000880)=[{}]}, 0x90) 12:48:04 executing program 4: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 12:48:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4502}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x1}, {0x6}]}) 12:48:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNDETACHFILTER(r0, 0x541b, 0xf0ff1f00000000) 12:48:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002540)=[{0x0}], 0x1}, 0x0) 12:48:04 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4502}) 12:48:04 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x9, &(0x7f0000000500)=ANY=[@ANYBLOB="1858000003000000000000000000000018000000000000800000000000100000183a00006c00000000000000000000001850000006000000000000000000000085"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 12:48:04 executing program 2: r0 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xe, 0x1, 0x0, @link_id}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 12:48:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002f80)={&(0x7f0000002e80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x0, 0x1}]}]}}, 0x0, 0x36}, 0x20) [ 1301.252610][T29792] usb 1-1: new high-speed USB device number 69 using dummy_hcd 12:48:04 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002280)={0x0, 0x3, &(0x7f0000001f40)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) [ 1301.502506][T29792] usb 1-1: Using ep0 maxpacket: 16 [ 1301.622764][T29792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1301.640268][T29792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1301.650124][T29792] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1301.745229][T29792] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 1301.759105][T29792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=191 [ 1301.767628][T29792] usb 1-1: SerialNumber: syz [ 1301.779384][T29792] usb 1-1: config 0 descriptor?? [ 1301.823121][T29792] hub 1-1:0.0: USB hub found [ 1302.042573][T29792] hub 1-1:0.0: 1 port detected [ 1302.262529][T29792] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 1302.269012][T29792] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 1302.432520][T29792] usbhid 1-1:0.0: can't add hid device: -71 [ 1302.438576][T29792] usbhid: probe of 1-1:0.0 failed with error -71 [ 1302.493226][T29792] usb 1-1: USB disconnect, device number 69 12:48:05 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090018105e22060000000000bf0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000002440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "2a201000", '3\x00'}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 12:48:05 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002f80)={&(0x7f0000002e80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x0, 0x1}]}]}}, 0x0, 0x36, 0x0, 0x1}, 0x20) 12:48:05 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f00000011c0)=@generic={&(0x7f0000001180)='./file0\x00'}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001780)=@bpf_lsm={0x1d, 0x3, &(0x7f0000001600)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001680), 0x8, 0x10, 0x0}, 0x90) mkdir(&(0x7f0000001a00)='./file0\x00', 0x0) 12:48:05 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) lremovexattr(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)=@random={'osx.', '\\^\x00'}) 12:48:05 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r0, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x0) 12:48:05 executing program 1: ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x5450, 0x0) [ 1302.794872][ T27] audit: type=1800 audit(1695041285.781:125): pid=32140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1967 res=0 errno=0 12:48:05 executing program 4: semget(0x2, 0x2, 0x20) 12:48:05 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002f80)={&(0x7f0000002e80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, 0x0, 0x36, 0x0, 0x1}, 0x20) 12:48:05 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@ifindex, 0x11, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 12:48:05 executing program 3: socketpair(0x6b00d76c6e07ef94, 0x0, 0x0, &(0x7f0000000100)) 12:48:05 executing program 5: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f00000004c0)={[{@noacl}, {@fastboot}, {@noinline_xattr}, {@fsync_mode_strict}]}, 0x1, 0x54f9, &(0x7f000000ab40)="$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") mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x2000401) open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) 12:48:05 executing program 4: timer_create(0x0, 0x0, &(0x7f0000002040)) timer_getoverrun(0x0) [ 1303.142544][ T6925] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1303.412653][ T6925] usb 1-1: Using ep0 maxpacket: 16 [ 1303.449413][T32158] loop5: detected capacity change from 0 to 40427 [ 1303.470618][T32158] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1303.515284][T32158] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1303.552712][ T6925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1303.566292][ T6925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1303.577818][ T6925] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1303.579785][T32158] [ 1303.592994][T32158] ====================================================== [ 1303.600004][T32158] WARNING: possible circular locking dependency detected [ 1303.607015][T32158] 6.1.53-syzkaller #0 Not tainted [ 1303.612029][T32158] ------------------------------------------------------ [ 1303.619033][T32158] syz-executor.5/32158 is trying to acquire lock: [ 1303.625437][T32158] ffff888070cab1b0 (&fi->i_sem){++++}-{3:3}, at: f2fs_add_inline_entry+0x3a4/0x760 [ 1303.634808][T32158] [ 1303.634808][T32158] but task is already holding lock: [ 1303.642164][T32158] ffff888070caab60 (&fi->i_xattr_sem){.+.+}-{3:3}, at: f2fs_add_dentry+0x9b/0x1e0 [ 1303.651439][T32158] [ 1303.651439][T32158] which lock already depends on the new lock. [ 1303.651439][T32158] [ 1303.661834][T32158] [ 1303.661834][T32158] the existing dependency chain (in reverse order) is: [ 1303.670851][T32158] [ 1303.670851][T32158] -> #1 (&fi->i_xattr_sem){.+.+}-{3:3}: [ 1303.678584][T32158] lock_acquire+0x1f8/0x5a0 [ 1303.683634][T32158] down_read+0x43/0x2e0 [ 1303.688381][T32158] f2fs_getxattr+0xb4/0x1460 [ 1303.693563][T32158] __f2fs_get_acl+0x52/0x8a0 [ 1303.698696][T32158] f2fs_init_acl+0xd3/0x960 [ 1303.703736][T32158] f2fs_init_inode_metadata+0xaa0/0x11d0 [ 1303.709916][T32158] f2fs_add_regular_entry+0x866/0xe00 [ 1303.715807][T32158] f2fs_add_dentry+0xf3/0x1e0 [ 1303.721006][T32158] f2fs_do_add_link+0x21a/0x340 [ 1303.726376][T32158] f2fs_create+0x749/0xa10 [ 1303.731314][T32158] path_openat+0x12f1/0x2e60 [ 1303.736425][T32158] do_filp_open+0x230/0x480 [ 1303.741471][T32158] do_sys_openat2+0x13b/0x500 [ 1303.746672][T32158] __x64_sys_openat+0x243/0x290 [ 1303.752046][T32158] do_syscall_64+0x3d/0xb0 [ 1303.756984][T32158] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1303.763408][T32158] [ 1303.763408][T32158] -> #0 (&fi->i_sem){++++}-{3:3}: [ 1303.770622][T32158] validate_chain+0x1667/0x58e0 [ 1303.773953][ T6925] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 1303.775993][T32158] __lock_acquire+0x125b/0x1f80 [ 1303.776019][T32158] lock_acquire+0x1f8/0x5a0 [ 1303.785126][ T6925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=191 [ 1303.790383][T32158] down_write+0x36/0x60 [ 1303.790414][T32158] f2fs_add_inline_entry+0x3a4/0x760 [ 1303.795567][ T6925] usb 1-1: SerialNumber: syz [ 1303.803608][T32158] f2fs_add_dentry+0xb6/0x1e0 [ 1303.803635][T32158] f2fs_do_add_link+0x21a/0x340 [ 1303.803655][T32158] f2fs_create+0x749/0xa10 [ 1303.834211][T32158] path_openat+0x12f1/0x2e60 [ 1303.839324][T32158] do_filp_open+0x230/0x480 [ 1303.844349][T32158] do_sys_openat2+0x13b/0x500 [ 1303.849540][T32158] __x64_sys_creat+0x11f/0x160 [ 1303.854833][T32158] do_syscall_64+0x3d/0xb0 [ 1303.859777][T32158] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1303.866207][T32158] [ 1303.866207][T32158] other info that might help us debug this: [ 1303.866207][T32158] [ 1303.876433][T32158] Possible unsafe locking scenario: [ 1303.876433][T32158] [ 1303.883898][T32158] CPU0 CPU1 [ 1303.889283][T32158] ---- ---- [ 1303.894652][T32158] lock(&fi->i_xattr_sem); [ 1303.899159][T32158] lock(&fi->i_sem); [ 1303.905679][T32158] lock(&fi->i_xattr_sem); [ 1303.912716][T32158] lock(&fi->i_sem); [ 1303.916756][T32158] [ 1303.916756][T32158] *** DEADLOCK *** [ 1303.916756][T32158] [ 1303.924988][T32158] 4 locks held by syz-executor.5/32158: [ 1303.930541][T32158] #0: ffff888076a34460 (sb_writers#24){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 1303.939867][T32158] #1: ffff888070caa4f0 (&type->i_mutex_dir_key#11){+.+.}-{3:3}, at: path_openat+0x7b6/0x2e60 [ 1303.950155][T32158] #2: ffff88809fcd83b0 (&sbi->cp_rwsem){++++}-{3:3}, at: f2fs_create+0x67e/0xa10 [ 1303.959514][T32158] #3: ffff888070caab60 (&fi->i_xattr_sem){.+.+}-{3:3}, at: f2fs_add_dentry+0x9b/0x1e0 [ 1303.969185][T32158] [ 1303.969185][T32158] stack backtrace: [ 1303.975077][T32158] CPU: 1 PID: 32158 Comm: syz-executor.5 Not tainted 6.1.53-syzkaller #0 [ 1303.983504][T32158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1303.993556][T32158] Call Trace: [ 1303.996885][T32158] [ 1303.999813][T32158] dump_stack_lvl+0x1e3/0x2cb [ 1304.004499][T32158] ? nf_tcp_handle_invalid+0x642/0x642 [ 1304.009968][T32158] ? print_circular_bug+0x12b/0x1a0 [ 1304.015168][T32158] check_noncircular+0x2fa/0x3b0 [ 1304.020102][T32158] ? __kernel_text_address+0x9/0x40 [ 1304.025385][T32158] ? add_chain_block+0x850/0x850 [ 1304.030330][T32158] ? lockdep_lock+0x11f/0x2a0 [ 1304.035003][T32158] ? stack_trace_save+0x113/0x1c0 [ 1304.040034][T32158] ? _find_first_zero_bit+0xd0/0x100 [ 1304.045333][T32158] validate_chain+0x1667/0x58e0 [ 1304.050208][T32158] ? __lock_acquire+0x125b/0x1f80 [ 1304.055231][T32158] ? reacquire_held_locks+0x660/0x660 [ 1304.060604][T32158] ? look_up_lock_class+0x77/0x140 [ 1304.065732][T32158] ? register_lock_class+0x100/0x990 [ 1304.071031][T32158] ? __might_sleep+0xb0/0xb0 [ 1304.075677][T32158] ? is_dynamic_key+0x230/0x230 [ 1304.080524][T32158] ? mark_lock+0x9a/0x340 [ 1304.084853][T32158] __lock_acquire+0x125b/0x1f80 [ 1304.089717][T32158] lock_acquire+0x1f8/0x5a0 [ 1304.094214][T32158] ? f2fs_add_inline_entry+0x3a4/0x760 [ 1304.099676][T32158] ? read_lock_is_recursive+0x10/0x10 [ 1304.105062][T32158] ? PageHeadHuge+0x8e/0x1c0 [ 1304.109792][T32158] ? __might_sleep+0xb0/0xb0 [ 1304.114398][T32158] ? pagecache_get_page+0x120/0x250 [ 1304.119645][T32158] ? f2fs_grab_cache_page+0x38/0x3c0 [ 1304.124958][T32158] ? _find_next_zero_bit+0x88/0x140 [ 1304.130252][T32158] ? _find_next_bit+0xe9/0x120 [ 1304.135046][T32158] down_write+0x36/0x60 [ 1304.139210][T32158] ? f2fs_add_inline_entry+0x3a4/0x760 [ 1304.144664][T32158] f2fs_add_inline_entry+0x3a4/0x760 [ 1304.149950][T32158] ? do_convert_inline_dir+0x1c90/0x1c90 [ 1304.155579][T32158] ? down_read+0x1b1/0x2e0 [ 1304.160096][T32158] f2fs_add_dentry+0xb6/0x1e0 [ 1304.164777][T32158] f2fs_do_add_link+0x21a/0x340 [ 1304.169633][T32158] ? __might_sleep+0xb0/0xb0 [ 1304.174252][T32158] ? f2fs_add_dentry+0x1e0/0x1e0 [ 1304.179205][T32158] ? up_read+0x20/0x20 [ 1304.183332][T32158] ? down_read+0x1b1/0x2e0 [ 1304.187750][T32158] f2fs_create+0x749/0xa10 [ 1304.192191][T32158] ? f2fs_lookup+0xae0/0xae0 [ 1304.196800][T32158] path_openat+0x12f1/0x2e60 [ 1304.201412][T32158] ? do_filp_open+0x480/0x480 [ 1304.206112][T32158] do_filp_open+0x230/0x480 [ 1304.210614][T32158] ? vfs_tmpfile+0x4a0/0x4a0 [ 1304.215231][T32158] ? _raw_spin_unlock+0x24/0x40 [ 1304.220092][T32158] ? alloc_fd+0x59c/0x640 [ 1304.224484][T32158] do_sys_openat2+0x13b/0x500 [ 1304.229236][T32158] ? do_sys_open+0x220/0x220 [ 1304.233526][ T6925] usb 1-1: config 0 descriptor?? [ 1304.233833][T32158] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1304.244748][T32158] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1304.250726][T32158] __x64_sys_creat+0x11f/0x160 [ 1304.255488][T32158] ? __x64_compat_sys_openat+0x290/0x290 [ 1304.261141][T32158] ? syscall_enter_from_user_mode+0x2e/0x220 [ 1304.267125][T32158] ? lockdep_hardirqs_on+0x94/0x130 [ 1304.272339][T32158] ? syscall_enter_from_user_mode+0x2e/0x220 [ 1304.278360][T32158] do_syscall_64+0x3d/0xb0 [ 1304.282776][T32158] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1304.288689][T32158] RIP: 0033:0x7f0aeb47cae9 [ 1304.293101][T32158] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1304.312704][T32158] RSP: 002b:00007f0aec1f90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1304.321123][T32158] RAX: ffffffffffffffda RBX: 00007f0aeb59bf80 RCX: 00007f0aeb47cae9 [ 1304.325359][ T6925] hub 1-1:0.0: USB hub found [ 1304.329102][T32158] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 1304.329122][T32158] RBP: 00007f0aeb4c847a R08: 0000000000000000 R09: 0000000000000000 [ 1304.349744][T32158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1304.357734][T32158] R13: 000000000000000b R14: 00007f0aeb59bf80 R15: 00007fff9c027e08 [ 1304.365727][T32158] [ 1304.382531][ T3594] syz-executor.5: attempt to access beyond end of device [ 1304.382531][ T3594] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1304.532655][ T6925] hub 1-1:0.0: 1 port detected [ 1304.742653][ T6925] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 1304.749043][ T6925] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 1304.892596][ T6925] usbhid 1-1:0.0: can't add hid device: -71 [ 1304.898711][ T6925] usbhid: probe of 1-1:0.0 failed with error -71 [ 1304.933077][ T6925] usb 1-1: USB disconnect, device number 70 12:48:08 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090018105e22060000000000bf0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000002440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "2a201000", '3\x00'}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 12:48:08 executing program 1: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat$null(r1, &(0x7f0000000240)='./file0\x00', 0x2000, 0x103) 12:48:08 executing program 2: r0 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xb) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.stat\x00', 0x5000000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000) 12:48:08 executing program 3: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./bus\x00', 0x80, &(0x7f0000000040)={[{@ref_verify}, {@nossd}, {@inode_cache}, {@compress_force}, {@space_cache_v2}, {}, {@noacl}]}, 0x5, 0x50ef, &(0x7f0000005140)="$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") r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x1}) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000001100)={0x0, 0x5, 0xffffffffffffff7f}) 12:48:08 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000ac0)='/sys/module/8021q', 0x3c000, 0x0) 12:48:08 executing program 5: shmget(0x2, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil) 12:48:08 executing program 2: r0 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xb) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.stat\x00', 0x5000000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000) 12:48:08 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x21d42a8a) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') fstatfs(r0, &(0x7f00000002c0)=""/205) 12:48:08 executing program 1: syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./file0\x00', 0x0, &(0x7f0000000040)={[{@gquota}, {@uquota}]}, 0x1, 0x980a, &(0x7f00000130c0)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fchown(r0, r1, 0xffffffffffffffff) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x147042, 0x0) ftruncate(r2, 0x2007fff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r3, &(0x7f0000004200)="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", 0xffe00) write$vhost_msg(r0, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0}}, 0x48) write$damon_init_regions(r3, &(0x7f0000000280), 0xe00) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400405}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r5 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) sendfile(r4, r5, 0x0, 0x1000000201005) 12:48:08 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x2, 0x9df, &(0x7f0000000540)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x0, 0x0) 12:48:08 executing program 2: r0 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xb) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.stat\x00', 0x5000000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000) [ 1305.430380][ T27] audit: type=1800 audit(1695041288.411:126): pid=32185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1964 res=0 errno=0 12:48:08 executing program 2: r0 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xb) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.stat\x00', 0x5000000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x8000000) [ 1305.520861][T32187] loop5: detected capacity change from 0 to 1764 [ 1305.542247][T32187] ISO 9660 Extensions: Microsoft Joliet Level 3 [ 1305.582089][T32187] ISOFS: changing to secondary root [ 1305.617462][T32187] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1305.632513][ T6925] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1305.855615][T32174] loop3: detected capacity change from 0 to 32768 [ 1305.866789][T32174] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (32174) [ 1305.887479][T32174] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1305.899168][ T6925] usb 1-1: Using ep0 maxpacket: 16 [ 1305.905848][T32174] BTRFS info (device loop3): doing ref verification [ 1305.932536][T32174] BTRFS warning (device loop3): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 1305.945981][T32174] BTRFS info (device loop3): force zlib compression, level 3 [ 1305.955681][T32174] BTRFS info (device loop3): allowing degraded mounts [ 1305.964926][T32174] BTRFS info (device loop3): using free space tree [ 1306.035846][ T6925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1306.073372][ T6925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1306.095136][ T6925] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1306.149456][ T8606] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 1306.182597][ T6925] usb 1-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 1306.191711][ T6925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=191 [ 1306.212412][ T6925] usb 1-1: SerialNumber: syz [ 1306.219896][ T6925] usb 1-1: config 0 descriptor?? [ 1306.265613][ T27] audit: type=1804 audit(1695041289.251:127): pid=32183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1112019209/syzkaller.fEyYX1/2012/bus" dev="sda1" ino=1949 res=1 errno=0 [ 1306.291491][ T6925] hub 1-1:0.0: USB hub found [ 1306.296813][ T27] audit: type=1804 audit(1695041289.281:128): pid=32183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1112019209/syzkaller.fEyYX1/2012/bus" dev="sda1" ino=1949 res=1 errno=0 [ 1306.387296][ T27] audit: type=1804 audit(1695041289.371:129): pid=32183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1112019209/syzkaller.fEyYX1/2012/bus" dev="sda1" ino=1949 res=1 errno=0 [ 1306.426869][ T27] audit: type=1804 audit(1695041289.401:130): pid=32183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1112019209/syzkaller.fEyYX1/2012/bus" dev="sda1" ino=1949 res=1 errno=0 [ 1306.492528][ T6925] hub 1-1:0.0: 1 port detected [ 1306.703270][ T6925] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 1306.709691][ T6925] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 1306.894589][ T6925] usbhid 1-1:0.0: can't add hid device: -71 [ 1306.900639][ T6925] usbhid: probe of 1-1:0.0 failed with error -71 [ 1306.933068][ T6925] usb 1-1: USB disconnect, device number 71 12:48:10 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090018105e22060000000000bf0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000002440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "2a201000", '3\x00'}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 12:48:10 executing program 4: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat$null(r1, &(0x7f0000000240)='./file0\x00', 0x408, 0x103) 12:48:10 executing program 2: r0 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xb) openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.stat\x00', 0x5000000, 0x0) 12:48:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@setlink={0x2c, 0x13, 0xb41, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_BROADCAST={0xa}]}, 0x2c}}, 0x0) 12:48:10 executing program 3: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./bus\x00', 0x80, &(0x7f0000000040)={[{@ref_verify}, {@nossd}, {@inode_cache}, {@compress_force}, {@space_cache_v2}, {}, {@noacl}]}, 0x5, 0x50ef, &(0x7f0000005140)="$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") r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x1}) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000001100)={0x0, 0x5, 0xffffffffffffff7f}) 12:48:10 executing program 1: syz_emit_ethernet(0x232, &(0x7f0000000000)=ANY=[@ANYBLOB="d56a1fcdde46aaaaaaaaaabb86dd6084f45101fcf000fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) 12:48:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x8a, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@sack={