6d8e329ba72b696b24be7103eeb89676d43ceba914d56048f1744a1a499b11dfbc309d1e98f2e0229c65a9938dfd6b03605d25193bd262df75569d0554f996d8a136ed45521657eb3214e1c33f2559abfea557b4fef9298e89bff4cce0a96bd097fa4877f2fee77fc114276c1dfe86adbe4e564b44ba1dbc2be473941eb0393b2624f5a483567701c476fdee50c7befe69c633e030766189bb66e959a4034a9dfc02e7c6d42505b3b12a22da1d65200342aed5b9545a1293f66035bdaf64fedfbee83de059539886da2d9dcda3fb6befdb27e2f04e0fb126ff672dda5593b0a694c8d3b56438b97c65150bf02e245d189b95f0966abc7111a96f57ea84c3d6fd5d02f5b90eba2c56c7f615cb0da7231e2b5ffd34befd9d21c1fe1ce407783b1d4913a2e49b1f4e28de722229f31d2e49e2daadee4a0cc0270abee903e01bf030563b32555fa533a347916929a21dd66f24f8aed97c7fd0281dc2084280b27db59b6cb391fdc47d0552bb0634741843032dd80e90f58fb802123cb60c32a89df25a0a27fba58ca04e47b77d04fa13e1aa7d30c938059b2c74e51e3a840dd93e0699a3ef2cffa4f651ac3c4f15df3fa123a982f95b6205dc33583d3381ad3468dbe23b1e25d8b8a3d6eb2e4e8021ef26e636b18999e982152b7d1248143deaf6315ea359d45fa101b0152bd6d2b56a561ba46331031421c7decc7c1392d7184db9ca4a2edd1e89c599be909849cebc4fb585cb23b7d7277358e28586fd344ef3e23497f96b6bd81397d9a60dc8b28d2ade65e2c18af1a8eb6368c11128769bf465e06f90b338c17a2c74d315093b75bbb7b8d912373341506ced9b456046b1ca33ed57944604e5db04d69ec5e6fb173951e27715d8775e1d7e799cc55fdf85f80f43baf6a783e5a24477bbd044099dbc0e4f7f2353de186c1594d4bcd20e80ec92e16a762b5e6d765e89c6d169b957752cbbe158ee262933701191092fbf3b00492de20aec5a4975ad577f99418033e2272a488652dfe664cfbb6ec25d305b2a5d1b2c660cf05093e9a26af0a8ebfcd9600782939a5ac13abd16fe858ae5f008422e8c3a053829d57908ef4620f8072b9068aff38327211dbbf9f45e37becd9c0eadb3ab8d0b7fae4d7670432af8a03ecf1a1788477b1cff130ef770535c6323bf97399835b3bb25407864c14f4cc3a49ffbe1060b6fa9d3239bccbda9dd026308baae9220f15f9828630356531769cfe583ea9c43439207acf2e372cd5f36348265855ba0e7b576ebe0abc6c86cfdcfdae9f1a940a4540cbd0350bfb05ff9de024981d472f901bba3a70e0e6effd4e0119b8033f29b3e8584108219522c270d10997f8346b2932e862b17d57d48024e3e113c82f07c125b97da1d8bcbea2e263c2142343bef7034ac773863bc7121f5a78de4647b981cc588f7dcfefe7219f37313f6bf834f4112d6e9560454ba9713a1d517e7ac1b046d3da63c70f35560e30ddb76c5dc3bcaf808ea48748026d5b3c2b0275d951f20ab1b5fbe948115eee19d7263fbe7f87ccd144ed5da25cdb28ed822d83cbc577b99e1bc8c0798679a8d7eda2abe1485353391b424168c661cc7f8d3ee66794864a88aadea009aa20b5c048d8d55f82b6729e15300ac255a8a049a6537005d59c318efbd01c43d646153b03a8ab4d2021e7071801869eb261ba186eb6bc907c4597ea93efc6e4510ba18dd692fd638e876335c22e66914796588ef87bf47faa4c011a822f067a4f3301191f907d416d62e56c353aa518559a63c65ab449602444b85d981340a623d6dc4e702040fc2d91e7b5f5fc946a855e746bf646cd4d5ac72c13477e285c39fcad04193dff441e590a1b4ad3f8e012737880d4651d9a5b2909ab367ac95b4db4132ceff16345de5a30a4d864057708dff4ee910160e46a92339e402c450b025d604ad645cdd64d63cf492d102bd0faf832ae62eddade545a2e13d86126bd549f21b65ac8f6b61e8f6a21f0af114f94ad0ca661c15d4c1152a7a28e8c36408987e499bc3fd7cb4087f1391547e41110108f15fa14086248bd5320c4e4dc236fd99246c357d8cba676c81e1bc954f75aee0afacb8057319caf023363f95b3c84aade7fe74e3502fa02babf253e9c8d4a2c30b0b839258786ae2db6a24036aa17f27b875f78fc79f140fff3cd78f92fa471d7f50674606aaf16ea28bd1692b62df62f7e02ee7b38778daf8ec4c5d5fcdd5edf8f17e16d0605441287bc2390b682f4d63b95f8a9db925f74d11fbcb5916e6d0e8c0a35381cc7abb2c021a754ec99a816252dfdfa94d97cc0a134a17291b474987e9b54bf8f879436aaadf41f602608291065cf4a9d9b04dbbdb760a9292bafdc4db9d0a147a928401f1dd9f822ae82c6e4cca17fdcd4dd23eb90eb2f931bb27567c6400b9c43f9260c02d5c16a8ab8e87db7a5f551b59cf76f63064ca2843c581f84a9be6c51f1fe72fdbbd3fe170fae53d2a0dfd9e70f4d17646ebcb0e524f484d257530b9f2b90b58f428272d360673458648745a96db546b828dfe80bd20be93d1b0878bf882b93e2945d4a3b45ffae8804d8eff1134bac5724a7d94d858528f9f66e268578a832becb3f2430de77ff209422da68eab048c1623be651e5bb31f0de59ce1f4bbc0ce45f63d8674abb7fad4a3166aeae60a7bcb511da4b0d130d6cfb4a555b058f07205cfdab8e6278b2bc9a98dee891b0817ea5d531d39e89fe768269a6c7a4af113781bbf7dd3edbcb3e1c157fa2dacc188423510001a27158e52c85ea6f077c6418d6f731f07bfc4bac941759001243541c2da6bb63bd674a6a928349ace4afcfd18ac3a041a6f3b3e77b60ddfbbc12ee220e0b67ac24b6101430edf12b8fb1dba49aae4638cabeb0c4aa2394939065a6fd745392826376624861c6cf02fd8e7a2a944b4fc29d19cf4115e7aeee87a7465d368bb838463fca2edf35759ef447afa6b2612b842b046c772ff968283f37cd705a598a51608f3038451ca98995a05289f70c53d9cc6d1aa9ec584b0e1f3e8984dd8f074a3e40c2f40db4e17c98d71ebe4f6c3ed17b8b15fbe834c2e20b9454ccf559da096ef1909329a19d23fb196ca40e5b5726aad91ef71f5efb053b75ceceed122964eccae5007739dd2b549aeec0d90feaa817c89e55dfc15f672fa9b0058a68aca589f9989f6c249eed37bdf0483c8dccc38ccdcd19b5301e4e87a1672f7bb3ee4f1ef3ac8489c209053cdb30c81a30b9ea730982b1940cc2cf4f7a42c7d32ecaf8ad3185f0cf47668eb99d677cbedede4b6be02d073eb37c6bf96df1817636d08c1bbd9e79ff8238a0ecf9a4023035a3c8e799126b0eb91d84ec0bab1e6262474f78b0d7c4cb3a9894b8f5c710f2cc2ceab995e794bf8ac5163fdb597a68e01826e5b5ab36b26417d43ab2201de227ca4c49ecc8c6ccfda6f4c8442e436529b9c456a3840b690eb93a8b3d52200c1a89b9816d1124b6040988d343dbcee0f4ac3de1dcc9fc50ed7d46c148592e31c67a741f6c773032dde78b8cfc57a4d1b35bf8bc253599a0341d64f736c90d0236f60e1e3b", @generic="4b0d309db93b951e6d616a4c8b4450835bf8c3fd98d9e8eb72912d2ae932c9990964e4d2556053191b325c5bcbeeaf377f7bca4bb39218be", @generic="f5f8de1a07294779d10db9942279429cb2b64bc08b885f601bc93e7c451678767fcea519d9dc7ef4b2db1cb30e98e2c87ef7ae4258ffe5ac36c7b046cca89b110d297481e7"]}, @typed={0xc, 0x48, 0x0, 0x0, @u64=0x8001}, @nested={0x1be, 0x87, 0x0, 0x1, [@generic="1d61539e7b811056a99a60108c141aa8fb429b9a3b78eae1a591aee5c9c31bb304d236f97259aead79966bea48b1a656415f8d9f2926ccd3db33ce79abfc85b5549bfc9d844acd37bd3811b8b4e26085e4135a7f63aabaa6101085d684d1211dce621728f84b03bf67dd3f65ffaecfdfd4d66e08490a5e49f175930c446a8263ae7f603339cc66c7fb15d67ef810eaa9027634b97ec015396303c44a24f921ce7096e7ab73fcb81d806aaaa83f8d984a3ea6167f36c156f522ee3dcf6980cf01", @generic="e70282f9b92f3466966a2c522edce3e2bad0e3a336e3c78255d101a9434f1ace3426798f837496a04842931944c84eed87c661dab11a42d0ba718e231dfcd7fa8730973b7c239644be73dd2ef643560140981f84408c4d6347aa9f7f296118c787a6e7964d44ece02695a088e6ee9d66efef3a69a079a6812480304665e00776cc7b82a135b4f459b32e5632381a6c6f3650a568af5f88855ba57da82d838a0723c491ee20d0cad4dc7a08dd8a2b879da3664b6c10d9f196c0d311d285e4de5f424c24d93e3e9eb375e80d67d2512cc5227c92fb988e", @typed={0x8, 0x68, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x14, 0x1e, 0x0, 0x0, @ipv6=@private1}, @typed={0x8, 0x35, 0x0, 0x0, @uid=r8}]}, @nested={0x20, 0xa, 0x0, 0x1, [@typed={0x8, 0x48, 0x0, 0x0, @fd=r9}, @typed={0x4, 0x75}, @typed={0x8, 0x79, 0x0, 0x0, @fd=r10}, @typed={0x8, 0x11, 0x0, 0x0, @uid=0xee00}]}]}, 0x12a0}}, 0x50) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:03 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x8, 0x5, 0x1}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x1c}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000200)={0x2, 'veth1_to_hsr\x00', {0x1000}, 0x3}) 21:48:03 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) io_cancel(0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x1ff, r1, &(0x7f0000000480)="5aa0be1aa81dc5264d3dd85d5f574a351f3daf7f4b0ec90f037fe2392d503587c4108e636d6d6e6145187edfa457c3b0676d5bdbec76ad16aafe5f8e6b3ebe3b08463a4911fdb71f0c0c0fa16a18348cd545e2109d5439df9d3546201ae10addcd9c3aea3685fdc09a894095db77d66b99f764953514d0a3eb736fb0cf5d5397a10be352603472012ca1d7b536778e1dfa3228812e95736c56cb85eaaeb1825e9d3d36342d97d66b05c1c9c623b598702916c56e0ce8", 0xb6, 0x80000001, 0x0, 0x3}, &(0x7f00000024c0)) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f00000003c0)=""/184) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r7 = open(0x0, 0x14183e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r7, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@qipcrtr={0x2a, 0x0, 0x7fff}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="b205", 0x2}, {&(0x7f0000000140)}, {&(0x7f0000000180)='Q', 0x1}, {&(0x7f0000000580)="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", 0xed0}, {&(0x7f00000001c0)="0e72c13d7b063ff8825f0370a0ad14726870fa8fff57e4a2b1741df8e4c4d94f6d28c5c7d39a566e0819cc2b8930fa3046465dac935a912ceba997902f170f69aeb3f00a60", 0x45}, {&(0x7f00000000c0)}], 0x6, &(0x7f0000001480)=[{0x28, 0xb08498f504429364, 0x0, "893a55c077f933c1d4112a93e07f2f7b2b3794ae"}, {0x1010, 0x115, 0x1527, "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"}], 0x1038}, 0x0, 0x20000000, 0x0, {0x0, r8}}, 0x9) r9 = open(0x0, 0x14183e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r9, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@qipcrtr={0x2a, 0x0, 0x7fff}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="b205", 0x2}, {&(0x7f0000000140)}, {&(0x7f0000000180)='Q', 0x1}, {&(0x7f0000000580)="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", 0xed0}, {&(0x7f00000001c0)="0e72c13d7b063ff8825f0370a0ad14726870fa8fff57e4a2b1741df8e4c4d94f6d28c5c7d39a566e0819cc2b8930fa3046465dac935a912ceba997902f170f69aeb3f00a60", 0x45}, {&(0x7f0000000240)}], 0x6, &(0x7f0000000300)=[{0x28, 0x101, 0x0, "893a55c077f933c1d4112a93e07f2f7b2b3794ae"}], 0x28}, 0x0, 0x20000000, 0x0, {0x0, r10}}, 0x9) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0xffff, 0x0, 0xfffffffa, 0x0, 0x1, {0x0, r10}}, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f00000000c0)={0x1000, 0x3}) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:03 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x5, 0x8000, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:03 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:03 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300)='devlink\x00') sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="84010000", @ANYRES16=r5, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x20044010}, 0x40000) r6 = socket$packet(0x11, 0x2, 0x300) r7 = dup(r6) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x100, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r8, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f2, 0x200, 0x70bd29, 0x25dfdbf9, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8080}, 0x40040) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r9 = open(&(0x7f0000000580)='./file0\x00', 0x2040, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r9, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40004}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xc8, r10, 0x209, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2c1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r9, 0x10, &(0x7f00000006c0)={&(0x7f00000005c0)=""/225, 0xe1}}, 0x10) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r11, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:03 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:03 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) 21:48:03 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 972.798232][T23894] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 972.978249][ T17] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 973.058179][T23894] usb 5-1: Using ep0 maxpacket: 32 [ 973.178201][T23894] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 973.218204][ T17] usb 4-1: Using ep0 maxpacket: 32 [ 973.348232][T23894] usb 5-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 973.357252][T23894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.365299][T23894] usb 5-1: Product: syz [ 973.369512][T23894] usb 5-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 973.376911][T23894] usb 5-1: SerialNumber: syz [ 973.418664][T23894] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 973.498226][ T17] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 973.507249][ T17] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.515854][ T17] usb 4-1: Product: syz [ 973.520304][ T17] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 973.527704][ T17] usb 4-1: SerialNumber: syz [ 973.568723][ T17] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 973.621895][ T17] usb 5-1: USB disconnect, device number 13 [ 973.769252][ T12] usb 4-1: USB disconnect, device number 107 [ 974.538139][ T12] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 974.778110][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 975.058149][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 975.067193][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.075843][ T12] usb 4-1: Product: syz [ 975.080333][ T12] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 975.087680][ T12] usb 4-1: SerialNumber: syz [ 975.128570][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:48:06 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, &(0x7f0000000280)) r6 = socket$packet(0x11, 0x2, 0x300) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r7, &(0x7f00000000c0)="6eccc79174f7335468618db521e28d437da20345c3de", &(0x7f00000001c0)=""/123}, 0x20) r9 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x100) ioctl$TIOCSISO7816(r9, 0xc0285443, &(0x7f0000000300)={0x8001, 0xe, 0xfffffffa, 0x20, 0xc71}) 21:48:06 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000001c0)={{r2}, "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"}) 21:48:06 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:06 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0xfc90c9fa3eb02ae, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x30) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, r7, 0x0, 0x0, 0x0, 0x10000, 0x0, {0x3}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:06 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}, 0x0, {0x0, r7}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:06 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xbf, 0x44f, 0xb323, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x3f, 0x1, {0x22, 0x740}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x1, 0xb8}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x0, 0x8, 0xe5}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x5, 0x40, 0x4, 0x10}, 0x15b, &(0x7f00000001c0)={0x5, 0xf, 0x15b, 0x5, [@generic={0x4b, 0x10, 0x3, "3a0c508f9d3363425102d66c8aaac46d34e1978c78ec82046f3f5fb333b7b9158633f5b4b16073e5bd8b165e7cffdbed56fe753264f2bdb8fd2f6691195c6bf10327ee608ac0819e"}, @ss_container_id={0x14, 0x10, 0x4, 0x41, "93a791dd14057f6677143494f6957c2c"}, @generic={0xe0, 0x10, 0x4, "4cd6c71b36332d2b113e15b12307f1ae50b356a4ab7f2265812fd1b96d9b9544aaba01c5e42fc13f31009711b8455258fa8b27a012e2f727d719ee7575c332b54de891b2b54fd66bffc8662e1f71accbf5601b9ed6bed93227738c32658e1424d5257a646407109467959d55c0c3a5b341989d2ea327727c7a0134c26994abbada335c8f59fa5f8fccdf22a7cb65f8b9122896636079479b2c351ee95d84b59ce0a605e43c10f008b3584c8d6d04d1ac8473bac114f813f7d4db725b42ae4be1d28d8cb46cab9c443e501dcfb3228bbab06c57e3f2567a0768e0a53b43"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x74, "a3a7cba62537641c53bf29e95ec34bd3"}]}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1401}}, {0x5f, &(0x7f0000000380)=@string={0x5f, 0x3, "ccfceabd72d4ddfaaf087e4f1c35cea4a905a33a06661b5a3fb0dd376d6519bc3d4ec63f5e0e28f0f6c853cc6850355488a69a9cae8828ee074e2623503ad8d7270f51f3fe1e88bda7887b8e9ee4bae3f61d2bd0efb4f264e56ea01376"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x24, &(0x7f0000000500)={0x20, 0x8, 0x8f, {0x8f, 0x4, "08008042c8426bb526e06468160a33ccc80efc2e8a7fb06101d009281d9d34a4e17517acdf4cc280a6fb4d92a2a909320bc3c9f159fc3d4b38f8abc0cca7082917d29f8eda52d265f12bb13dcf2b00ef5ba0352a79a074abb6723cec651acd1ecde00c93dc0ed39a6f31c826c11b18b8734e910201e5f9cd7d92c10ee0c0f30a80ea3c3855c0a84866cae44a30"}}, &(0x7f0000000480)={0x0, 0x3, 0x17, @string={0x17, 0x3, "72a90e020e66f40bbbb665ba52e832a538cfb76805"}}, &(0x7f00000005c0)={0x0, 0x22, 0xf, {[@local=@item_012={0x2, 0x2, 0x7, "f0dc"}, @local=@item_4={0x3, 0x2, 0x2, "967a79b6"}, @main=@item_012={0x1, 0x0, 0x9, 'e'}, @global=@item_4={0x3, 0x1, 0x1, "1a289c11"}]}}, &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x20, 0x1, {0x22, 0x1a3}}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000680)={0x40, 0x3, 0x70, "20473047fd92f60159e64bb45d91ad8e3661edf70ac87551e01a6eb83d059e6b74c8f61bcc5a0a37c7d6625da9f15d2df73124c6f45b0ed608e8a4df44dad7a47c20c7f607b01ac67258664619bfe3ff7a9049ef70ce7aa591d3d45143e77d1fcb5e0dcd2926607e287f58d245066c64"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000780)={0x20, 0x1, 0x4, "4fd7ce0a"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0x8}}) [ 975.328692][ T12] usb 4-1: USB disconnect, device number 108 21:48:06 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_enter(r5, 0x3f, 0xbf78, 0x1, 0x0, 0x0) 21:48:06 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:06 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}, 0x0, {0x0, r7}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:06 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCNXCL(r8, 0x540d) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:06 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000000c0)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r6, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:06 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}, 0x0, {0x0, r7}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:06 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000000c0)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r6, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 975.728078][ T12] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 975.968086][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 976.088112][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 976.268099][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 976.277202][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.285264][ T12] usb 4-1: Product: syz [ 976.289509][ T12] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 976.296864][ T12] usb 4-1: SerialNumber: syz [ 976.338648][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 976.541289][ T2824] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 976.549872][ T12] usb 4-1: USB disconnect, device number 109 [ 977.318026][ T12] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 977.558067][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 977.678036][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 977.848043][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 977.857050][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.865599][ T12] usb 4-1: Product: syz [ 977.870181][ T12] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 977.877526][ T12] usb 4-1: SerialNumber: syz [ 977.918499][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:48:08 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002680)=[{{&(0x7f0000000ac0)=@ax25={{0x3, @rose}, [@netrom, @netrom, @bcast, @bcast, @null, @default, @remote, @bcast]}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {&(0x7f0000000c40)=""/90, 0x5a}, {&(0x7f0000000580)=""/125, 0x7d}], 0x4, &(0x7f0000000540)=""/46, 0x2e}, 0x5}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000640)=""/152, 0x98}, {&(0x7f00000004c0)=""/118, 0x76}], 0x2, &(0x7f0000000340)=""/27, 0x1b}, 0xdd7}, {{&(0x7f0000000700)=@x25={0x9, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000800)=""/109, 0x6d}, 0x2}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f0000001200)=""/167, 0xa7}, {&(0x7f00000007c0)=""/44, 0x2c}, {&(0x7f0000000c00)=""/59, 0x3b}], 0x4}}], 0x4, 0x22, 0x0) accept(r0, &(0x7f0000000040)=@caif=@rfm, &(0x7f0000000100)=0x80) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) 21:48:08 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:08 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000001c0)={0x3, &(0x7f00000000c0)=[{0x7, 0xff, 0x5, 0x4}, {0x8, 0x8, 0x5, 0x100000}, {0x8000, 0x3, 0x81, 0x8}]}) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:08 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000000c0)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r6, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:08 executing program 2: r0 = epoll_create1(0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000400)=0x4, 0x4) r2 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r3 = syz_io_uring_setup(0x76ce, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r7 = signalfd(r3, &(0x7f00000000c0)={[0x5]}, 0x8) accept$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, &(0x7f00000002c0)=0x1c) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x84000) ioctl$sock_inet_tcp_SIOCATMARK(r8, 0x8905, &(0x7f0000000240)) ioctl$UI_BEGIN_FF_ERASE(r7, 0xc00c55ca, &(0x7f00000001c0)={0x7, 0x5, 0x537d}) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x3f, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) ioctl$KDSKBLED(r9, 0x4b65, 0x3f) 21:48:08 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x408, 0x100, 0x0, 0x100, 0x320, 0x320, 0x320, 0x4, &(0x7f00000000c0), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x19}, @multicast2, 0xffffff00, 0x0, 0x9, 0xf, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xfff9, 0x1, 0x73, 0x4, 0xfff, 0x6, 'geneve0\x00', 'batadv0\x00', {0xff}, {}, 0x0, 0x2}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0xff, 0x6, {0x8870}}}}, {{@arp={@rand_addr=0x64010102, @broadcast, 0xffffff00, 0xffffffff, 0x7, 0x0, {@empty, {[0xff, 0x0, 0xff, 0x839b4ac385ceb639, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x20, 0xfffd, 0x8, 0xffff, 0x0, 0x6, 'team_slave_1\x00', 'netpci0\x00', {0xff}, {}, 0x0, 0x249}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@multicast, @private=0xa010101, @private=0xa010100, 0x2}}}, {{@arp={@empty, @multicast1, 0xff, 0x0, 0xc, 0x7, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@random="a08555e1d95d", {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2, 0xdbe, 0x8, 0x20, 0xfff9, 0x6, 'veth0_to_team\x00', 'team_slave_1\x00', {0xff}, {0x80}, 0x0, 0x204}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @broadcast, @private=0xa010101, 0x1, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x458) [ 978.118418][ T2824] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 978.118809][ T12] usb 4-1: USB disconnect, device number 110 21:48:08 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r6, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:08 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r7, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x0, @fd=r4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:08 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:08 executing program 5: r0 = epoll_create1(0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket(0x9, 0x4, 0x6994) sendfile(r1, r5, &(0x7f0000000240)=0xbcf9, 0xff) r6 = socket$packet(0x11, 0x2, 0x300) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) read$rfkill(r1, &(0x7f00000000c0), 0x8) r9 = socket(0x1e, 0x1, 0x7ff) bind(r1, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x0, 0x4, 0x4, 0x2, {0xa, 0x4e23, 0x8001, @private1={0xfc, 0x1, [], 0x1}, 0x9}}}, 0x80) 21:48:09 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r6, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:09 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 978.578027][ T12] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 978.817968][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 978.938015][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 979.128017][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 979.137135][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.145128][ T12] usb 4-1: Product: syz [ 979.149307][ T12] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 979.156672][ T12] usb 4-1: SerialNumber: syz [ 979.198496][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:48:11 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0x9, 0x6}, @window={0x3, 0x2}, @mss={0x2, 0x8001}], 0x3) 21:48:11 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r6, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:11 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:11 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:11 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:11 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) write$eventfd(r6, &(0x7f00000000c0)=0x10001, 0x8) [ 981.173970][ T12] usb 4-1: USB disconnect, device number 111 21:48:11 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:11 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:12 executing program 5: r0 = epoll_create1(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000bc0)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000000800)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000008c0)={'ip6gre0\x00', &(0x7f0000000840)={'sit0\x00', 0x0, 0x2d, 0x0, 0x6, 0x10001, 0x8, @mcast2, @dev={0xfe, 0x80, [], 0x32}, 0x20, 0x7, 0x8, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000980)={'syztnl0\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x2f, 0x80, 0x0, 0xee3b, 0x40, @loopback, @empty, 0x7800, 0x7, 0xffffffff, 0x6}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000b80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000400)=ANY=[@ANYBLOB="60010000", @ANYRES16=0x0, @ANYBLOB="8e0b2500012dbd7000ffdbdf2519000000600001801400020076657468305f746f5f62617461647600080003000200000008000100", @ANYRES32=r2, @ANYBLOB="1400020076657468315f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000140002007465616d3000000000000000000000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000005400018008000100", @ANYRES32=r3, @ANYBLOB="0800030002000000080003000300000008000300000000001400020076657468305f746f5f6272696467650008000300030000001400020076657468315f746f5f626174616476001c00018008000300020000000800030003000000080003000200000068000180140002006272696467655f736c6176655f300000140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="080003000100000014000200626174616476300000000000000100524648cb14d8dba0af97fd3f96168416219f0df274e5bffdb4e94c0bf32eb6c94d82453b087c36f42eb4b6", @ANYRES32=r5, @ANYBLOB], 0x160}, 0x1, 0x0, 0x0, 0xc2}, 0x80) r6 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r7 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r10 = socket$packet(0x11, 0x2, 0x300) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r12, 0x0, 0x0}, 0x0) io_uring_enter(r7, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:12 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:12 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:12 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 981.607876][ T12] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 981.847851][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 981.967907][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 982.147891][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 982.157057][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.177829][ T12] usb 4-1: Product: syz [ 982.182031][ T12] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 982.207216][ T12] usb 4-1: SerialNumber: syz [ 982.248372][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 982.457940][ T17] usb 4-1: USB disconnect, device number 112 [ 983.237843][ T17] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 983.477825][ T17] usb 4-1: Using ep0 maxpacket: 32 [ 983.607865][ T17] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 983.777869][ T17] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 983.786885][ T17] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.794881][ T17] usb 4-1: Product: syz [ 983.799094][ T17] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 983.806444][ T17] usb 4-1: SerialNumber: syz [ 983.848289][ T17] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:48:14 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:14 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:14 executing program 2: r0 = epoll_create1(0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000001c0)="3401bc326a7e57cd2a00cc2c1de321023ce12e7f442b43183e9f137d942815d41334e3d9e8a77e7d69353c3859c4c6d1ac0a43402c9a975fb26df051e61b09bb9974b74cec3f57674d5ea274e3459a0d539ca002e55513c230a60f12574165586041af06364bb854c28621b436f957598b7d91d5bcf11efce3cfe538ce73f931806740a81ff58542767c80b898209f0f6e02ca53afec6448a42db9515bc96c13462737f964ffe7") r2 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r3 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x0, @fd=r6, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x3f, 0x0, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x800}, 0xc) 21:48:14 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ipx\x00') dup(0xffffffffffffffff) connect$tipc(r2, &(0x7f0000000240)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x4}}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f00000000c0)) r4 = open_tree(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x9000) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001580)={'team0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001640)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000400)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000440)='syzkaller\x00', 0x6, 0x91, &(0x7f0000000480)=""/145, 0x41000, 0x1, [], r5, 0x1c, r2, 0x8, &(0x7f00000015c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001600)={0x0, 0x0, 0x8715, 0x5}, 0x10, 0x2452d, r2}, 0x78) r6 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r9 = open(0x0, 0x14183e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r9, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@qipcrtr={0x2a, 0x0, 0x7fff}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="b205", 0x2}, {&(0x7f0000000140)}, {&(0x7f0000000180)='Q', 0x1}, {&(0x7f0000000580)="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", 0xed0}, {&(0x7f00000001c0)="0e72c13d7b063ff8825f0370a0ad14726870fa8fff57e4a2b1741df8e4c4d94f6d28c5c7d39a566e0819cc2b8930fa3046465dac935a912ceba997902f170f69aeb3f00a60", 0x45}, {&(0x7f0000000240)}], 0x6, &(0x7f0000000300)=[{0x28, 0x101, 0x0, "893a55c077f933c1d4112a93e07f2f7b2b3794ae"}], 0x28}, 0x0, 0x20000000, 0x0, {0x0, r10}}, 0x9) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000540)={0x6, 0x20000000, 0x1000, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) io_uring_enter(r6, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:14 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x3a4, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000140)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r9 = open(0x0, 0x14183e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r9, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@qipcrtr={0x2a, 0x0, 0x7fff}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="b205", 0x2}, {&(0x7f0000000140)}, {&(0x7f0000000180)='Q', 0x1}, {&(0x7f0000000580)="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", 0xed0}, {&(0x7f00000001c0)="0e72c13d7b063ff8825f0370a0ad14726870fa8fff57e4a2b1741df8e4c4d94f6d28c5c7d39a566e0819cc2b8930fa3046465dac935a912ceba997902f170f69aeb3f00a60", 0x45}, {&(0x7f0000000240)}], 0x6, &(0x7f0000000300)=[{0x28, 0x101, 0x0, "893a55c077f933c1d4112a93e07f2f7b2b3794ae"}], 0x28}, 0x0, 0x20000000, 0x0, {0x0, r10}}, 0x9) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r8, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:14 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') r2 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x7ff}, 0x10) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e59ddb7d1a"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6f4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000011) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x48811) [ 984.048348][ T17] usb 4-1: USB disconnect, device number 113 21:48:14 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:14 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x27f9, 0x0, &(0x7f00000002c0)="07a7bc03711b4930a809c07d32fcfe6cc349105901bf9eb9b90563237bbcf1c752e99bee60e504f4ef97d361be1057c4e0949b3325ffefcc5e1a16acd0d63342fbf6a4ce9914124e637311ccea696a3e8cf616171ca46627aa0d000942e6b2d5e0de89fd6ba428e7b445b9f7da6e329099cfa12f86e3351193929e32e5220519a7031ddfb4f4f0052bce5e9c7ed92293af566b45dab01218c78e0d103315922695a410e4fe5817cccb481b09b47a8f596355bf07a786ff4c5a09cd3fa87b1d398405054ac79bf0e6d271059db6368a", 0x2, 0x0, 0x0, {0x3}}, 0x80000000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f00000001c0)=""/146, 0x25000, 0x800, 0x1, 0x3}, 0x20) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:14 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:14 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:14 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:15 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:15 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:15 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:15 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 984.447777][ T17] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 984.687750][ T17] usb 4-1: Using ep0 maxpacket: 32 [ 984.807858][ T17] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 21:48:15 executing program 1: accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f00000001c0)=0x1c, 0x80800) r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) keyctl$get_security(0x11, 0x0, &(0x7f0000000200)=""/2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:15 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 984.977833][ T17] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 984.987004][ T17] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.995057][ T17] usb 4-1: Product: syz [ 985.003179][ T17] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 985.010764][ T17] usb 4-1: SerialNumber: syz [ 985.048352][ T17] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:48:17 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x8, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0xc0a}}, {0x55, &(0x7f0000000080)=@string={0x55, 0x3, "75bbd07fc2d213aa82b9a13805ffc47f0d4632ed84c8736920bc2928a7168e433f3f68c02afda08c9ceaa04414cdecd2db06e3efb9e4262f1a071f32c64b38dafc545455418cc369f761ca9d76142cd22e1ff4"}}, {0x9, &(0x7f0000000100)=@string={0x9, 0x3, "1cadfaf87a7523"}}, {0xd2, &(0x7f0000000140)=@string={0xd2, 0x3, "b9010238a785b278c7581f58bf03eca10c1a80f68e4db369e86fe0eb20138e461e93dda3f72bbe15dd488faa0336c7fefbaf9711cf95055d07ac4ae09956a0dbbb3697157493a897cec7bb7d7d04d934b39cbef26c9c56acd9639edbef8418a550ed52be477c8a511f5aa61235e241432104eaf1f20ff77ce07eabb22baf1ccb52ac87718d6aab495f5e152b2ff63b29641059492d3445758df963af85e452cc1c3f09334aa70f5e50cc2c973e52aa410bb18811e91133b95185887c1a6b7f720cdd9b2f2e3b54146d32ec12868bc0b6"}}, {0x93, &(0x7f0000000340)=@string={0x93, 0x3, "ce528ac26b491a20aa583c553c4d9b713f3013e5e2c75006edc20119eb1a9ddde178f6abdc61a3443597502d31b183c05679b9646142566df12ec649be4be702d4cbcff0e41207dc0fea957148447ac681e52d28fb804f53df6e3cf1cb1e311e1ad1ca401215a91f83dffc02b07697af29b6465999ac20b332642f6588233bf38581ee872f9bad20a05eb3831b05423b37"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x415}}, {0x34, &(0x7f0000000400)=@string={0x34, 0x3, "144c7c84e75a0c597cee8c9e031bab915305c032094de6f30d2c0bc9ae84e6764c861d0bad7746bbbf6637abcc197bf99a7b"}}]}) 21:48:17 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) fcntl$dupfd(r5, 0x406, r0) fsmount(r6, 0x0, 0x8) io_uring_enter(r2, 0x41, 0x0, 0x0, 0x0, 0x0) 21:48:17 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:17 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002680)=[{{&(0x7f0000000ac0)=@ax25={{0x3, @rose}, [@netrom, @netrom, @bcast, @bcast, @null, @default, @remote, @bcast]}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {&(0x7f0000000c40)=""/90, 0x5a}, {&(0x7f0000000580)=""/125, 0x7d}], 0x4, &(0x7f0000000540)=""/46, 0x2e}, 0x5}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000640)=""/152, 0x98}, {&(0x7f00000004c0)=""/118, 0x76}], 0x2, &(0x7f0000000340)=""/27, 0x1b}, 0xdd7}, {{&(0x7f0000000700)=@x25={0x9, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000800)=""/109, 0x6d}, 0x2}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f0000001200)=""/167, 0xa7}, {&(0x7f00000007c0)=""/44, 0x2c}, {&(0x7f0000000c00)=""/59, 0x3b}], 0x4}}], 0x4, 0x22, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f00000000c0)={0x4, [0x0, 0x0, 0x0, 0x0]}) r3 = syz_io_uring_setup(0x76d1, &(0x7f0000000240)={0x0, 0xece8, 0x2, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:17 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:17 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r6 = signalfd(r5, &(0x7f00000012c0)={[0xfffffffffffffc25]}, 0x8) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000280)={{0x2, 0x0, 0x0, 0x0, 0xb5d}}) r8 = dup3(r5, r1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x7, 0x4, 0x408, 0x0, 0x210, 0x110, 0x320, 0x320, 0x320, 0x4, &(0x7f00000002c0), {[{{@arp={@dev={0xac, 0x14, 0x14, 0xe}, @broadcast, 0xff, 0xff000000, 0xe, 0xa, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x401, 0x7fff, 0x5, 0xfffe, 0x800, 0x81, 'caif0\x00', 'gretap0\x00', {}, {0xff}, 0x0, 0x140}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac, @empty, @local, 0x4, 0xffffffff}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "83b4d552cf899ebb7a89bd0c7c0bd96652912c6c452d1dc4d36975645bdf"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xf}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x458) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r6, &(0x7f0000001380)={0x8080, 0x24}, &(0x7f0000001300)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r7}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r10 = add_key$fscrypt_provisioning(&(0x7f00000001c0)='fscrypt-provisioning\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000002400)=ANY=[@ANYBLOB="020000000000000078acd30b5394dd03f0b4d39c0765eef08394f66d7e17347d577d76830c3432ade594fb8618ad0b20e05fd0d50c3560af0e90bb83c52de25c33795d9935bfe16301fb0bd301a3b0001a6f11c9c954955004ee5f033386ab9c514d881371547732acc44a058bc465edadfca3b487f58508f8d72c4c59ad0a3403ea3a6f3ec693ee563cf418b0a8a21f0a59f5c89e546fbc4ed263f785147bc029069f5753403a8d1b6cd04b2c54e4d38c870b48c7913c2e8df03e56806dd30ee21a34534eeee3c388062de937e6c6bd03bbeaa2de35566cc4d8f7915d0e634624549de9b97829c9dd7453cdc3e51c2684d5e19c6884602ec914aea656e5b3fa7ba2e585360e0ccde7dd62242bde0b27986bfe5aa1336922471174059ef0facfdc420ef939e1ec4571c7dc1abbdc7b4fd223a5c54dba3b3dd541eb34996d5113f47c1902e4f8e52aff34b001428694d935234854c1ae8233d0905a7fb69ff67ca89730112d119b65aed35e27350167f218c6eb26b081d4905203d74ff12c39c11f0f1de69fcba9cb1e44b3f704101e9baddf54398680addd009a4db4268c1336f3bc2692948127ce8520c825e2df4e1e24f6442b7feb98e8d1ede51acac622406a3942d21fb3bc1e65d2c512413f46714728bb0c693409c101c82fc4292a546b77ac8318e5108b4f8fd33dc91f5325bbccd7753d825a93597d1e07842101f19b45d7160e5969e1633b1dba68dad17daeb867d42d9692152a827ac6df88007c0fe062903e5a759722b15f153cb3b17f39cc3bf937872f61df5a411eea489997cb4573a331ea91fd6a102f45f6b81a124ea4baaf1c972e7352d75215ccf068c99c4f2a9dac1c258c4c6429dd879b6117a24f7b3338771c011efaa441dd3e697ebe708f4af75be22eba244e8af0fdfd4c1a21efe52a1c007bb85cd9c87825e76d51140b7889f968e3aed80b6d4e58d78d2ea60485efe72ad22bbce424fcac8e7ca06cad0ab57ff71e44ad1cf371df2fb4d03d0dedc9c7a4bbb5f5911e1fc04c734a5c8297f9d3fd2260fef5e0e06dcc4a5fc56d75226c54ccda21f3cac2de9a134fc26c2fc97ebce7afc64d6a33d805d57d225020dd9f96986f5479733ad5aedf5fc9edbb231b7a569e30af64fdc64ebe80caca056e73b1e25bfba8f0724b17f8a48e6a25b2afb1f83e54ad0fe1d065c01ca1270f0bb54bbfc77ebed69bdb6b148ef08940e52aa4fc5a30397640abfb8f62074d853edf8647d45dd82f7c779631f4e55e746d19636272e5d6bffcbabab950e2155498b1961f03fb1082235e4e1040973af2c922012a7aec0cda0bffb9c1a2755c5f3a387c9cb43f328b24ed4e5335c5d616b301829080ff1b0c59fd1381956757d4ba3754887148856be59e19f1d3df5af38d957170daf9a9892330dfe7212ab0bc1e7980da22fa4baa076c81023d1becff0aa4942352fbea18ada22db938460698afb516a5b99cac6834fafb463fb765223f905cb5fd411a8cb57a1c20278884fa2558253b576660748e281aba352d4ee3ea7eff00712f38720fc570d3c57c03a7a70c420b765d5b3230e2c10005f3b735697496affbe43827b06d581acdf5c5b7d67840ce7ed5f619fe41270a70c500200000000000007215e22df7cffd2fde96fc9c7a42bcb404c108965185ffc485463f29af012f3341073b3d709cb4fb46568af8955402cc01d9ca73c95511cc13097c5fc4c800dd1db9278605f1a3b1f90e8ed002a18a2540f84ac37cd1f124b14f2f9d650eacc0d27568e2ea3412c2c584108d102accb3c222ae0a9d31fc2da33ab5875d2fb22e679902dffaafa842a0dce63476bfdf3620e7c43b1ecd25e650bc18a7d45b52d58f1d4863aecb834ca42eeae44c12ab8f5f3a4c01ee677caa207dcd227a85394d4740e15a727a80a3a2714f3f4bda2164f9fa51aad9c09531abcd2564f4f2d1c4c78f0a35b83f23561394d5ff0c0503745873fd5f4db8e4bab1e8d351cedffe2e3af4df4dffa7d53aca05ff9096d3a3a123e461fa259b5e67549145ae95b9976ac3e5916d566d2627d390fb8ae97780ee09dde2a652fe8d3e3b2b812ef4f0843c434284c6032b5d5e5151e903a79825d90d9931beb7f9d602266628f132748761e43db2047dcdb307794901c5bc6909bd42f5d3b7f22bcb4db58fa711b88b16d98dcd2167cc3fa7588cdd723223116ee5ba8c87513230747e5854dd69c5f6bffa437ae4d7bcb3357dba0bf36c2f45a4d74175bc625581abde4032c45c540c0c5418836a2be90f912d663ef74dfd9d7f84f74fac625caf956ca2ad15e3629dd50c7da79c7e6311069cca5a823c09ad8e7e2dfb89067cf7f68879532532b50a471e010ded197f744169b5d740f88c26465fa3c81cfa0834d5241db484ff900802dc1433aad1cdeb17610ffc9e88b90b16f39cf3c8536d5c61de5c3c059239e45cb815ba4a3bc11ff452f512a3c2fc72c57b554283acd173f0f5eb310660aca0cc97eff0c6288eb429b4982202a234ee298b22ecd3048a7d91394eb973b1c7eb9d4bc47d334453a72611a33f873c65ba5818b25840eabddd0cba62093d37fa24ef8b9fe1128c42d6e16e8de724df0a4f1bfff38d3d61a9aed8e6cce9a8597adb06764da957a7966744706350c0d58620dace76c78d075de53d34671bc6547cb0cce71efa2ea71205f2364889e28ba341d4f5f341e2bb4c89f85759e20256985b821e9b755f38d100449bb763377244609aa7584e0fdb80fc1e61e782f9bb7ec6738d9f84238f7488d777966df4d0d9b26dfcd665dd8392631dc22f3460927a8bd0de82a729809290b27572323c12983d59b42c121997f4a5daa63ac86372a1fba1ff6f34908254a7aebbfaebc19c334f42ef7c50eaecc3ec1c7d46ded1975ccb58ec71b45a2a71b1a465c94a435c2847daa728a6248542e0e5623d256d7b2ce9f79c5a371e43161b3c5e0c4b0ce4d020fdfc24d09fc98618d807d4b5d8565492b1003da591bb2f5db55230ceaf64c38499486c21614ad262b4f9ff0a6279609dfa689b982f5a47043dc912da4ee965eb958673a64c61d787844b8a26f2a782623c176fd8199f6f8106b3624c4f319c3c33c39358d7b4b97dde84ce7bc08c9951b5b32ac27af8eb122a85a0ded0f758fd4b6bdc4ce7803f09f57a25ac51566dafbfeaa373e441959800e71db170693f0909fdd90cada57889192bc89865f21ddf5b5ac21a2c990c350e8f7d7bc1f098e75a44c88c2e98b729cccb6f7fea52a5352c57222622b8d7db4d2b7ae4678aa372bef5e03a07c787d38f01a1cfdc7d418400ef6172e2e6a53733db74e1e769eef2644cdfdde3f0b7069cb8edecebf82d7eafcd712ad7580d457d1ed3ed11a91c39c096040ba37f775060cf5dc69f65b4f1f97458398647c734b9b5acc0dc83ec3754bea0d34f12490e5476356785328e37b8f51132ae06fdf79e622fa4ad3ac24e4768d39d0ba6ca0da2b2816debff6e1cfeed41d58e5046ad731f2b7ab8cad7dd284692a166334ca725e56a650bf3f985313f3e030738f49842a5b22c852e30ca8df059ca1f0809c5c227a57239447ea5bc24d08f000aaa52b786b4a8d1f5ad962b97f61177373fb70c75f9c9ec1ba2218ea16239634fc404123102bc00a9b41cf49d7c60da77e2167350419c09bb9a5839480234dee174bb9a392c027b0ad68c7fdd6da3d85489658ff2d4816f60379765c20b1251aedf08c88c343dd7d8bc199b2d144ffc6fb4d89d6a8f88473c1bcddd26604e4f00a7be2b08f804eb24a895d75bb17da60274b12b5610e4df20990873b3caebdf33e2690c519b05074fb9a710c0cac70a045a8fa89ea0d53669691f049a99a14c70694fa6eb1fa2ce35d1d0d1f7ed4c3707b1e3a7dbbbc4a91212db1bf2586def5098383dab5810b16cca800a7cc964f6aebb57d559158b6fac71edbc705d0645259db2d14053a51951a545f986bbfd4aeefefb8440f34c4f8ca4fb076bb07722cae1bfc0b037d4e16e903d02775245b06d5aac1709c60f8ababc74c3fcd476a0413e4d1cdcbb2ed144b7eb1f702a4d49af33237165109a99d0ff5417f5fc462e15170c9b0f5be965c9ed70bfd4bb60af0817606330318afda35315341faf5b5f8fb09767c6a8f8b786122797924aca900ec3ee5cdfc82f2acd412cbe1b696ae6d2c9dfc8b2d0936510f066167735eec7cfd7a0189b43dc9798b97e22f93d87fe35cd697481eba2201749d8ad7c8bb17e53a22ab608a63d20c4c1ca1e03b2be078327cb4429307493ff3b6b99549c97479649669abbc5a87f385fedaf7212de4340a383761caf776af3a659b904fec3c50874e51ba4dd5e4ce45e48f87af4a6fcb90afce9c615819d9639171b33e56841faa7090653519e072e16b5226ddd5d39aaf38cec550ccd487e52fe1976285aa4d10ccc3d75a6db37da0a7913c4e36392c855f04842f511a54323b6dacb9ece3cdbab43a39120d220a480f9e6b99da77c522aa602c66a95d9c1a8654737dbaf0414aba535e427826f999d8677d92f53852a67fc375e13a6119f89db66eb1de575bd5e49bd3656a9e8ee758059ebf8a44eff673c6223ad948b76a0810b5637145fbb4e699788d1e711d4f0e7433d04d2ed9a2080501656f63dc882ecd217079de3af19fe27f6a7d77607b167c1a9387bb7e19fbd1964a6a5dc61a26b3e4a781a2efce7b44440e3b97cc5824ef759d9352c2f287880b4462acfb5330533171dc3dcce89dbf4d6124d894f79e1f2d6f78f7b53d5c2fc5fc041efa06653607b7d8ec9042afd08b5ba037c03d627582e026e804283dd0c901bc02ddc1f0300cfc22e5190c4d9303b8e459e493f2b228b42c1981d9b6cf4db650240b0e1837038ff4d15d6ff41afc8d6f45096356c621cad7cf14361c781f113f8c62684bcf6a2277803b94dd86248f9ac7710f3a0d162324cfa8dc9f9581820bb72d55f3554144ca8ad6560cb6d94aeab38df8cd5a0bab196a40f52b62f3f81886e23fb887a8d0794e1b0897d5f184681c47ef441073b81ee6fac8fe2b1f88a0de7676ec8def797004b8e82b7585d413d3d95e0c4647cd2774ffc655c362fe203d1c69d2fca830b5888cf59de8126f166ee907f5208e5d52446049ace05244ba64cc5ba13358f6d3f26c5ba6f7dc2073f794e8d15c67359c0cf6d87a119b72d24f6225c902c56f1c776f5289e82eaee67a58b24187ef475bfe75c8dad9f46bd2cdbd8615a5e07f484bb3f27a1bf46796d31576503f04d9638f80862eb97bc961e73a3954fe28b77524dfd0f9e3d28cd4ad3d1a09881da06b94158a9961b58599ff09ac7ce6c6f306f28a6d06d8b79ea4160f2ce45eef2bcc8fbd70c6292d72a876ce145d30c7c69b6ab4fb5889b57c1f1210ba97361a9e18dbe48adc0dc72bf58214d5a5a2d2521f7abcef64c1907a172fc5ce8c7b3d79be6ffb2cbe4db06f1ccb4de16eb1a9b9132329e65fce50717f3d8c2ade16dce55f8f3a94faaf5d81d2e2e717c51691083b8d46002c1c4adfcc2aefd2d7cbc6e0a2520c582d4d42467e3a01bb9cc603f8d88bcb622cce1fd71aaea787154e9068c1ef69f6da853c814bd1dd890582f9bb7528e71388184b293477b55b9543056976fd8900224008087690d98aac57f6ddc603d23056ba051bf132249cbed7de4faf794d1da1c2e59e8fa27f3d5a0674309584a0531dad1aa9df7e830c5e959af30c98dc312c449f17c2bf141753f7eee40d19ffa18bb2a68cc7a1ea24da7efbaf85bfa0c17367aae508818a6c8a0168822e4470c211008d51f366915ee2bbc60711b8475c84e64000000000000005c5dd4192c44447b6c647a55206e"], 0x1008, 0xffffffffffffffff) keyctl$instantiate_iov(0x14, r10, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r9, 0x400445a0, &(0x7f00000000c0)=0x80) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 987.090734][ T12] usb 4-1: USB disconnect, device number 114 21:48:17 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r6, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:17 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:17 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r6, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:17 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:17 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x0, @fd_index=0x3, 0x8, 0x0, 0x0, 0x17, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:17 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 987.507748][ T12] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 987.747675][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 987.867704][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 988.057764][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 988.066823][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.075174][ T12] usb 4-1: Product: 괜畺 [ 988.079917][ T12] usb 4-1: Manufacturer: 뭵翐틂ꨓ릂㢡％翄䘍좄楳밠⠩ᚧ䎎㼿쁨ﴪ負䒠촔틬ۛ⼦ܚ㈟䯆哼啔豁槃懷鷊ᑶ투Ἦ [ 988.094529][ T12] usb 4-1: SerialNumber: ƹ㠂薧碲壇堟οꇬᨌ䶎榳濨ጠ䚎錞ꏝ⯷ᖾ䣝ꪏ㘃ﻇ꿻ᆗ闏崅갇嚙㚻ᖗ鍴鞨쟎綻ѽ㓙鲳鱬걖揙蓯ꔘ빒籇冊娟ኦ䍁С࿲糷绠늫꼫쬜걒熇檍䦫幟⬕⤻ၤ䥙㐭畅轢꽣챒㼜㌉Ꝋ帏챐霬刾䆪넋ᆈᇩ뤳蕑粈欚牿⾛㬮ᑔ㉭ዬ讆뛀 [ 988.158076][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 988.358966][ T12] usb 4-1: USB disconnect, device number 115 [ 989.127622][ T12] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 989.367621][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 989.487739][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 989.657663][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 989.666685][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.675047][ T12] usb 4-1: Product: 괜畺 [ 989.679771][ T12] usb 4-1: Manufacturer: 뭵翐틂ꨓ릂㢡％翄䘍좄楳밠⠩ᚧ䎎㼿쁨ﴪ負䒠촔틬ۛ⼦ܚ㈟䯆哼啔豁槃懷鷊ᑶ투Ἦ [ 989.694398][ T12] usb 4-1: SerialNumber: ƹ㠂薧碲壇堟οꇬᨌ䶎榳濨ጠ䚎錞ꏝ⯷ᖾ䣝ꪏ㘃ﻇ꿻ᆗ闏崅갇嚙㚻ᖗ鍴鞨쟎綻ѽ㓙鲳鱬걖揙蓯ꔘ빒籇冊娟ኦ䍁С࿲糷绠늫꼫쬜걒熇檍䦫幟⬕⤻ၤ䥙㐭畅轢꽣챒㼜㌉Ꝋ帏챐霬刾䆪넋ᆈᇩ뤳蕑粈欚牿⾛㬮ᑔ㉭ዬ讆뛀 [ 989.757997][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:48:20 executing program 4: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:20 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r6, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:20 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x11, 0x800000003, 0x0) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) bind(r9, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x4, 0x0, 0x0, 0x3, {0xa, 0x4e22, 0x2, @mcast1, 0xa1}}}, 0x80) pipe(&(0x7f0000000340)={0xffffffffffffffff}) vmsplice(r11, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(r11, 0x301, &(0x7f0000000280)) getsockname$packet(r9, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000880)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x14, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000140021015f1a04ad9345124ce434487f6764049a43f9eb19cbc34c61908092e3b679dafd5a", @ANYRES32=r12, @ANYBLOB="1400060000000000ffffffff0000000000000000140002000d000000000000000000000000000001"], 0x40}}, 0x0) write$binfmt_elf64(r9, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x3, 0x20, 0x1, 0x9, 0x2, 0x3e, 0x6, 0x235, 0x40, 0x249, 0x81, 0xcca, 0x38, 0x2, 0x8, 0x8000, 0x9}, [{0x60000000, 0x7, 0x1, 0x5f3f, 0x40, 0xffffffff, 0x5, 0xa55}], "ada1e0dcecdc89d14f253ce6c6767033c12ed413b6b87e0e4bbf38b11083171a1c15b980a5aea08ec6f7150792b1", [[], [], [], []]}, 0x4a6) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4020021}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x44890) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:20 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) keyctl$describe(0x6, 0x0, &(0x7f0000000500)=""/4096, 0x1000) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000040)) 21:48:20 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:20 executing program 1: r0 = epoll_create1(0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8a) r2 = perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x0, 0x62, 0x0, 0x0, 0x0, 0x6e0, 0x3, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x6, @perf_bp={&(0x7f00000000c0), 0xa}, 0x8010, 0x1, 0x60a, 0x6, 0x7, 0x5, 0x7f}, 0x0, 0x5, r1, 0xb) r3 = fcntl$dupfd(r2, 0x406, r0) r4 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:20 executing program 4: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:20 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 21:48:20 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r8, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 989.964283][ T12] usb 4-1: USB disconnect, device number 116 21:48:20 executing program 4: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:20 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = fspick(0xffffffffffffff9c, &(0x7f0000003980)='./file0\x00', 0x1) syncfs(r2) r3 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000480)=@security={'security\x00', 0xe, 0x4, 0x470, 0xffffffff, 0x130, 0x0, 0x130, 0xffffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@remote, @remote, [0x6ac1b628c700b0c9, 0xff, 0x0, 0xff], [0xffffff00, 0xffffffff, 0xff000000, 0xff000000], 'team0\x00', 'ip6erspan0\x00', {}, {}, 0x2c, 0x3, 0x0, 0x52}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xd, "0bca", 0x1}}, @common=@unspec=@realm={{0x30, 'realm\x00'}, {0x6, 0xdb, 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x6, 0x6}, {0x4, 0x3, 0x4}, 0x7, 0x7fffffff}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @local, [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], [0xffffff00, 0xffffffff, 0xff000000, 0xffffff00], 'bond_slave_1\x00', 'syz_tun\x00', {}, {}, 0xc, 0x6}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'ipvlan0\x00', {0x15c}}}}, {{@ipv6={@loopback, @ipv4={[], [], @multicast1}, [0xffffffff, 0xff, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0xffffff, 0xffffff00], 'ipvlan1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x5e, 0xc8, 0x6, 0x4d}, 0x0, 0x120, 0x180, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x80000001, 0x4, 0x1, [0x8, 0x0, 0x0, 0x4e43, 0x3, 0x200, 0x800, 0x2, 0x2, 0x401, 0x4, 0xe, 0x1ff, 0x5, 0x6, 0x8000], 0x4}}, @common=@srh={{0x30, 'srh\x00'}, {0x33, 0x4, 0x20, 0x3, 0xfffb, 0x242, 0x180}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0x0, 0xff0000ff, 0xffffff00, 0xffffff00], 0x4e23, 0x4e21, 0x4e23, 0x4e20, 0x80000001, 0x2, 0x6, 0x401, 0x7}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x3c, r6, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}]}]}, 0x3c}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:20 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 21:48:20 executing program 4: epoll_create1(0x0) r0 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:20 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) [ 990.172741][ T3140] tipc: Enabling of bearer rejected, failed to enable media [ 990.387589][ T12] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 990.627569][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 990.747745][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 990.917601][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 990.926617][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.935097][ T12] usb 4-1: Product: syz [ 990.939578][ T12] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 990.946965][ T12] usb 4-1: SerialNumber: syz 21:48:21 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 990.988144][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 990.994464][ T3133] tipc: Enabling of bearer rejected, failed to enable media [ 991.188863][ T12] usb 4-1: USB disconnect, device number 117 [ 991.967568][ T12] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 992.207504][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 992.327546][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 992.497581][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 992.506588][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.515064][ T12] usb 4-1: Product: syz [ 992.519622][ T12] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 992.526970][ T12] usb 4-1: SerialNumber: syz [ 992.567996][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:48:23 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0xb) 21:48:23 executing program 4: epoll_create1(0x0) r0 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:23 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:23 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r7, 0xc0406619, &(0x7f00000000c0)={{0x3, 0x0, @reserved="2194c40e6a7be96a3ab72e6f423463345d1c9f4250bd300d2c33daf15f2c8855"}}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:23 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:23 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) ioctl$F2FS_IOC_RESIZE_FS(r6, 0x4008f510, &(0x7f00000000c0)=0x6) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r7, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r7, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x10, &(0x7f00000003c0)={&(0x7f00000002c0)=""/246, 0xf6}}, 0x10) read(r7, &(0x7f0000000240)=""/75, 0x4b) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:23 executing program 4: epoll_create1(0x0) r0 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 992.768140][ T1410] usb 4-1: USB disconnect, device number 118 21:48:23 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:23 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:23 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r0, 0x400000000100006, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002200)={&(0x7f0000000100)={0x20f0, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_SOPASS={0x5d, 0x3, "a551d9cf411307c0e030ee390cc534765a378591f51b193cb86ff45cb36b5510de41ec9ae5ed70806d868235b100a75d0b620094fa1e1e967a1a9371aebf76a7ada85c81b4fb267f99f8d8b8156d8c22ca2113a636d72c7784"}, @ETHTOOL_A_WOL_SOPASS={0x1004, 0x3, "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"}, @ETHTOOL_A_WOL_MODES={0x74, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'devtmpfs\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'devtmpfs\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '[\\{:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x12}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#*/}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}, @ETHTOOL_A_WOL_SOPASS={0x1004, 0x3, "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"}]}, 0x20f0}, 0x1, 0x0, 0x0, 0xc0d1}, 0x24000000) 21:48:23 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r5, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="f15c93cb35c215fe339d1e9060c5b23e77cb58a87329a00288504db389cc6e395885fa906ac30eeae99fa388c31b5717e641e1586a90961b5f99b26c939d944f6cb1cf6817b7e51402a8459f9db642e97d3c05db56250a665d3ff188eb47e5b036d508aa5a5796fb8806b6a41487e0bfc3df087c18269bd7d2f477104c5d5db497ceaf3e1b11a5d63a2b7035dc69fa701f3b46fe701880800a7d38dccd4b3e8014aa15c96968359533ce2c5ffdd5f0d3297018bd7c025150940cdead92eb1e6bc6ba45eecf067b32425b6000b2f376ef9172426ae7fa97e5a84ef4dc540bbf5dd458ffcb75724135bd32fa04db6d6a75aedda7ab6e8501fc94e209dc3b2525ae24c954255d3247ca9c1b9525ce68179a52a87333aa2b0a8c1baa6ba6160c6d2018e67bac5402d0d89c5f798b8d1a87b0dc3306f546c61724530d9f4b6f0ee68677c7b261de5afa02d708a8ec979791de8f4831cc354ba453bc253e2435207f25494a594d4e5be39902358d362cb318ad965b7e7480a5ca5b6fe74e101c400c77392ee4419ad788f494230487811046f21f0f9665dfbaa9e94ed305a02e3fa47039e67dde19f89c8f1741aad752cdfe458ddf54e8fc10ff79b5", 0x1b9}], 0x3) sendto$inet(r5, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) r6 = socket$pptp(0x18, 0x1, 0x2) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:23 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 993.187693][ T1410] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 993.427504][ T1410] usb 4-1: Using ep0 maxpacket: 32 [ 993.557578][ T1410] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 993.727599][ T1410] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 993.736662][ T1410] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.745084][ T1410] usb 4-1: Product: syz [ 993.749399][ T1410] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 993.756764][ T1410] usb 4-1: SerialNumber: syz [ 993.798036][ T1410] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 993.998678][ T17] usb 4-1: USB disconnect, device number 119 [ 994.767429][ T17] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 995.007413][ T17] usb 4-1: Using ep0 maxpacket: 32 [ 995.127483][ T17] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 995.297495][ T17] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 995.306606][ T17] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.314610][ T17] usb 4-1: Product: syz [ 995.318813][ T17] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 995.326163][ T17] usb 4-1: SerialNumber: syz [ 995.367840][ T17] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:48:26 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=ANY=[@ANYBLOB="eb0500000000000009ff668382b071c30c063e81723571e84d0d6ddf5900"]}]}) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.mem_exclusive\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) r4 = getegid() recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000140)=""/59, 0x3b}, {&(0x7f00000003c0)=""/219, 0xdb}, {&(0x7f0000000500)=""/207, 0xcf}], 0x3, &(0x7f0000000780)=""/135, 0x87}, 0x41) ioctl$sock_inet_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000740)) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x1, 0x5}, [{0x2, 0x1}, {0x2, 0x5, 0xffffffffffffffff}, {0x2, 0x4, r2}, {0x2, 0x0, 0xee00}, {0x2, 0x4, 0xee00}, {0x2, 0x1, r3}], {0x4, 0x4}, [{0x8, 0x2, r4}]}, 0x5c, 0x0) 21:48:26 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:26 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:26 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x56d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:26 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:26 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0x1, 0x0, 0x3}) r3 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x0, 0x0}, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) io_uring_enter(r3, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:26 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r5 = open(0x0, 0x14183e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r5, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@qipcrtr={0x2a, 0x0, 0x7fff}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="b205", 0x2}, {&(0x7f0000000140)}, {&(0x7f0000000180)='Q', 0x1}, {&(0x7f0000000580)="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", 0xed0}, {&(0x7f00000001c0)="0e72c13d7b063ff8825f0370a0ad14726870fa8fff57e4a2b1741df8e4c4d94f6d28c5c7d39a566e0819cc2b8930fa3046465dac935a912ceba997902f170f69aeb3f00a60", 0x45}, {&(0x7f0000000240)}], 0x6, &(0x7f0000000300)=[{0x28, 0x101, 0x0, "893a55c077f933c1d4112a93e07f2f7b2b3794ae"}], 0x28}, 0x0, 0x20000000, 0x0, {0x0, r6}}, 0x9) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x8100, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r8, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r8, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r8, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x1, 0x8, {0x0, r7}, 0x3, 0x0, 0x1, {0x0, 0x0, r8}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 995.567862][ T17] usb 4-1: USB disconnect, device number 120 21:48:26 executing program 4: epoll_create1(0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:26 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) r3 = socket$packet(0x11, 0x2, 0x300) dup(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:26 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_UNISCRNMAP(r6, 0x4b69, &(0x7f00000001c0)=""/215) 21:48:26 executing program 4: epoll_create1(0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:26 executing program 4: epoll_create1(0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 996.017406][ T17] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 996.257435][ T17] usb 4-1: Using ep0 maxpacket: 32 [ 996.377421][ T17] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 996.747397][ T17] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 996.756437][ T17] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.764927][ T17] usb 4-1: Product: syz [ 996.769376][ T17] usb 4-1: SerialNumber: syz [ 996.807862][ T17] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 997.009202][ T17] usb 4-1: USB disconnect, device number 121 [ 997.787345][ T17] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 998.027332][ T17] usb 4-1: Using ep0 maxpacket: 32 [ 998.157357][ T17] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 21:48:29 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:29 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) r3 = socket$packet(0x11, 0x2, 0x300) dup(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:29 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x10000, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) r6 = accept(r5, 0x0, &(0x7f0000000040)) ioctl$PPPIOCGMRU(r6, 0x80047453, &(0x7f0000000240)) 21:48:29 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) chmod(&(0x7f00000000c0)='./file0/../file0\x00', 0x9a) r0 = request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='syz', r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000100)={r0, 0x6a, 0x43}, &(0x7f0000000140)={'enc=', 'pkcs1', ' hash=', {'nhpoly1305-sse2\x00'}}, &(0x7f00000001c0)="f42c29a8b51084c0d79dc0b9ed36a428698afa1bb1dedf7aa0bb6a5d519a7033920d98fb9877a251dff111164dac114a90cde0a0ad429e9a7bb152847eabd030f36d0df514ced0ba1c48acae676b81169692b33f49affad7b7698a0b2b4dfef6d6591f59b6d1a7a336ac", &(0x7f0000000240)=""/67) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r1, 0x400000000100006, 0x0) [ 998.537348][ T17] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 998.546396][ T17] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.554406][ T17] usb 4-1: Product: syz [ 998.558609][ T17] usb 4-1: SerialNumber: syz 21:48:29 executing program 5: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write(r2, &(0x7f0000000280), 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x4, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r7 = socket$packet(0x11, 0x2, 0x300) r8 = dup(r7) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000240)='y\x00', 0x2, 0x2) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x2004, @fd_index, 0x8, 0x0, 0x0, 0x1a, 0x0, {0x3}}, 0x0) io_uring_enter(r4, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:29 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_cancel(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x5, r6, &(0x7f00000001c0)="a6d51342611c8158f5fd22cb4971934a3aff7bae243c056d8d3890f46e3ffe89dda76fe915c71c080fbf74bf072d11e4e0ceb67bc3d87bee35bec277ed656afd12e0007fd2d2d66bc33ef834d1a71f2cbec235fefc660771005cc8c0127baf48484c94b90fb888bb5b62aad1c04b144569c8b5af367b737f9f534955555223108f0d1ce1f019c8d0091ec010d35f9dc18c8e901244753b5b6262cae72b92323eedc9f26f1f6f66595c3165627410b54b7fdea7cf6ae90fff576411d158c673249d1f99cd5bccbf1e5c8c73451f7944a9749b576043e2989cdc64d3a0dad6f7e66fddd34cfd7b2a", 0xe7, 0x100, 0x0, 0x1, r7}, &(0x7f0000000300)) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:29 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 998.597896][ T17] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 998.619245][ T1410] usb 4-1: USB disconnect, device number 122 21:48:29 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) r3 = socket$packet(0x11, 0x2, 0x300) dup(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:29 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:29 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:29 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:29 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:29 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:29 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:30 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"7b318695995439bb968c4bcc2b401d0b", r2, 0x0, {0x1, 0x60b}, {0x7, 0xb}, 0x4, [0x9, 0x6d4, 0x8, 0x941, 0x1000, 0x80, 0x5, 0x4, 0x400, 0x1, 0x2, 0x1, 0xfff, 0x9, 0x675, 0xb6af]}) r3 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:30 executing program 4: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:30 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:30 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x22e, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:30 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_cancel(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x5, r6, &(0x7f00000001c0)="a6d51342611c8158f5fd22cb4971934a3aff7bae243c056d8d3890f46e3ffe89dda76fe915c71c080fbf74bf072d11e4e0ceb67bc3d87bee35bec277ed656afd12e0007fd2d2d66bc33ef834d1a71f2cbec235fefc660771005cc8c0127baf48484c94b90fb888bb5b62aad1c04b144569c8b5af367b737f9f534955555223108f0d1ce1f019c8d0091ec010d35f9dc18c8e901244753b5b6262cae72b92323eedc9f26f1f6f66595c3165627410b54b7fdea7cf6ae90fff576411d158c673249d1f99cd5bccbf1e5c8c73451f7944a9749b576043e2989cdc64d3a0dad6f7e66fddd34cfd7b2a", 0xe7, 0x100, 0x0, 0x1, r7}, &(0x7f0000000300)) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:30 executing program 4: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:30 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$packet(0x11, 0x2, 0x300) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:30 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000300)='./file0\x00', 0x8, 0x2) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r6, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r6, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r6, 0xf507, 0x0) personality(0x410000e) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:30 executing program 4: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:30 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCGVERSION(r6, 0x80044501, &(0x7f00000001c0)=""/192) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:30 executing program 4: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:30 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$packet(0x11, 0x2, 0x300) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:30 executing program 4: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:30 executing program 4: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:30 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$packet(0x11, 0x2, 0x300) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:30 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:31 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_cancel(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x5, r6, &(0x7f00000001c0)="a6d51342611c8158f5fd22cb4971934a3aff7bae243c056d8d3890f46e3ffe89dda76fe915c71c080fbf74bf072d11e4e0ceb67bc3d87bee35bec277ed656afd12e0007fd2d2d66bc33ef834d1a71f2cbec235fefc660771005cc8c0127baf48484c94b90fb888bb5b62aad1c04b144569c8b5af367b737f9f534955555223108f0d1ce1f019c8d0091ec010d35f9dc18c8e901244753b5b6262cae72b92323eedc9f26f1f6f66595c3165627410b54b7fdea7cf6ae90fff576411d158c673249d1f99cd5bccbf1e5c8c73451f7944a9749b576043e2989cdc64d3a0dad6f7e66fddd34cfd7b2a", 0xe7, 0x100, 0x0, 0x1, r7}, &(0x7f0000000300)) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:31 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) dup(0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:31 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000001c0)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1, 0x40000) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002680)=[{{&(0x7f0000000ac0)=@ax25={{0x3, @rose}, [@netrom, @netrom, @bcast, @bcast, @null, @default, @remote, @bcast]}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {&(0x7f0000000c40)=""/90, 0x5a}, {&(0x7f0000000580)=""/125, 0x7d}], 0x4, &(0x7f0000000540)=""/46, 0x2e}, 0x5}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000640)=""/152, 0x98}, {&(0x7f00000004c0)=""/118, 0x76}], 0x2, &(0x7f0000000340)=""/27, 0x1b}, 0xdd7}, {{&(0x7f0000000700)=@x25={0x9, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000800)=""/109, 0x6d}, 0x2}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f0000001200)=""/167, 0xa7}, {&(0x7f00000007c0)=""/44, 0x2c}, {&(0x7f0000000c00)=""/59, 0x3b}], 0x4}}], 0x4, 0x22, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000002680)=[{{&(0x7f0000000ac0)=@ax25={{0x3, @rose}, [@netrom, @netrom, @bcast, @bcast, @null, @default, @remote, @bcast]}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {&(0x7f0000000c40)=""/90, 0x5a}, {&(0x7f0000000580)=""/125, 0x7d}], 0x4, &(0x7f0000000540)=""/46, 0x2e}, 0x5}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000640)=""/152, 0x98}, {&(0x7f00000004c0)=""/118, 0x76}], 0x2, &(0x7f0000000340)=""/27, 0x1b}, 0xdd7}, {{&(0x7f0000000700)=@x25={0x9, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000800)=""/109, 0x6d}, 0x2}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f0000001200)=""/167, 0xa7}, {&(0x7f00000007c0)=""/44, 0x2c}, {&(0x7f0000000c00)=""/59, 0x3b}], 0x4}}], 0x4, 0x22, 0x0) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f00000000c0)={{r5}, {@void, @actul_num={@val=0x2b, 0x0, 0x6b}}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:31 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:31 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) readlinkat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=""/206, 0xce) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) accept4(r0, &(0x7f0000000480)=@l2, &(0x7f0000000500)=0x80, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r7, 0x4c07) ioctl$EVIOCGBITKEY(r7, 0x80404521, &(0x7f0000000380)=""/200) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50}, 0x50) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000780)={0x18}, 0x18) r8 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r8, &(0x7f0000002680)=[{{&(0x7f0000000ac0)=@ax25={{0x3, @rose}, [@netrom, @netrom, @bcast, @bcast, @null, @default, @remote, @bcast]}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {&(0x7f0000000c40)=""/90, 0x5a}, {&(0x7f0000000580)=""/125, 0x7d}], 0x4, &(0x7f0000000540)=""/46, 0x2e}, 0x5}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000640)=""/152, 0x98}, {&(0x7f00000004c0)=""/118, 0x76}], 0x2, &(0x7f0000000340)=""/27, 0x1b}, 0xdd7}, {{&(0x7f0000000700)=@x25={0x9, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000800)=""/109, 0x6d}, 0x2}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f0000001200)=""/167, 0xa7}, {&(0x7f00000007c0)=""/44, 0x2c}, {&(0x7f0000000c00)=""/59, 0x3b}], 0x4}}], 0x4, 0x22, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r8, 0x4004f506, &(0x7f0000000540)=0x1) fcntl$setpipe(r6, 0x407, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r5, 0x8040942d, &(0x7f0000000600)) write(r6, &(0x7f00000008c0)="4352a4f76b6d", 0x6) move_mount(r6, &(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000300)='./file0\x00', 0x10) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:31 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) dup(0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:31 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:31 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) dup(0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:31 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:31 executing program 0: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) dup(r1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:31 executing program 0: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) dup(r1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:31 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:31 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_cancel(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x5, r3, &(0x7f00000001c0)="a6d51342611c8158f5fd22cb4971934a3aff7bae243c056d8d3890f46e3ffe89dda76fe915c71c080fbf74bf072d11e4e0ceb67bc3d87bee35bec277ed656afd12e0007fd2d2d66bc33ef834d1a71f2cbec235fefc660771005cc8c0127baf48484c94b90fb888bb5b62aad1c04b144569c8b5af367b737f9f534955555223108f0d1ce1f019c8d0091ec010d35f9dc18c8e901244753b5b6262cae72b92323eedc9f26f1f6f66595c3165627410b54b7fdea7cf6ae90fff576411d158c673249d1f99cd5bccbf1e5c8c73451f7944a9749b576043e2989cdc64d3a0dad6f7e66fddd34cfd7b2a", 0xe7, 0x100, 0x0, 0x1, r4}, &(0x7f0000000300)) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:31 executing program 0: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) dup(r1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:32 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r8, &(0x7f0000002680)=[{{&(0x7f0000000ac0)=@ax25={{0x3, @rose}, [@netrom, @netrom, @bcast, @bcast, @null, @default, @remote, @bcast]}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {&(0x7f0000000c40)=""/90, 0x5a}, {&(0x7f0000000580)=""/125, 0x7d}], 0x4, &(0x7f0000000540)=""/46, 0x2e}, 0x5}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000640)=""/152, 0x98}, {&(0x7f00000004c0)=""/118, 0x76}], 0x2, &(0x7f0000000340)=""/27, 0x1b}, 0xdd7}, {{&(0x7f0000000700)=@x25={0x9, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000800)=""/109, 0x6d}, 0x2}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f0000001200)=""/167, 0xa7}, {&(0x7f00000007c0)=""/44, 0x2c}, {&(0x7f0000000c00)=""/59, 0x3b}], 0x4}}], 0x4, 0x22, 0x0) r9 = openat$cgroup_procs(r1, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) fcntl$dupfd(r8, 0x0, r9) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x10ae, &(0x7f00000012c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000009100120081000c0086dd68db977a107001fffc020000000000000000000000000000ff020000000000000000000000000001160c0000000000000401d40738000000020c04ffff00009c29000000000104000000000000090000000000000000000000000000000100000000000000ff7f0000000000000710000000000205faff010000800000000001020000c910fc0200000000000000000000000000000000009d65cee7b56c74a60d5355fa4f26f58165dd7ac5119e88b86732f1acad84d5a24d7e62cf07e7b48c1b690f889e4a6b38444b580a16a23f66575ccc2c7e358d05ee68bdae2cd81369327889a64e17b63abe2f4e7a85685b388539a358ab5c2e3db11a83e2139079c9c95503b6f66af6f017d32cd90b506d7e9ab9219ffd3b445c2d518f02f26759a1ed89ecd90a2909a08c48a7190ae51cbc36ca4e5ec5eccb526e9e86c2f3facbf5a34e328a52ed07fbd16a918dfeb0658dcce1ddc7d785e3f92d1b728b4a5b4c46d5cf16bf7f4fac529edb5576e3b43a6dca1f07cb7395b4d469c446c54cad2ab1f59d5eb8edf5acee88529333ebc5a85d33620485b98fa246ac0faf9c09517e9a7ecbf4be052cf8f192a0ba65df53c20b06af080c1568551838c9330fec531d4e9d1c53ca9ae2f26447c79df94fd68f080d2d4f04c123be43cd1fa20fff3bf4a2341ac0a363f3bfe9c6f2a5a29ed66955f3a7961a3f81b831c1b0568e695e55d1033268e3bc8311f37b470f53599718be9bcb0d95d66db9118acc19e2dda8ab81aea8332b93db176245050a69b5c588b68f65304b018b00bcd9745b6ae98399a0ec15df32d655cb90b93fa489aa0fd325f05236fb8ff9892148633422a2cebea9fc82841e457c259260ec8b79e536f76fa9622e3367689ecfc5bfe7599cbe4bb4d4ac597344a13b84363f3b8db40d7c4c8239fa1b29cf64d74196c1e4763063766430102fd349020d3cd8d2fa82e7f4a0449e719877c3eaa955a4c8d02e97d3d08ab7003927dc4ab0b1b46eb0fa158c5b06ab863448b37ce69ad4024c8d20fd9e032a78bb2ab6ab91b8634899c7a43b2e4e984d11107e6b5c4f94d95b0f127d77a949a1e54135021d0f3c75672df217bc03f4de156891265e71de16173b0e243328ab54abdf41a5fe5ce2d630851c0f02dd7ad4b16121e106ca02b43641c92ebb2f190c7e62b7c5bfeb28efe0d244bb1fd9906e8a8e05937cab3c21b81924d99c7bf3092d6685e9a1f5743c4072104d58621d2181598ad852e4f0ee7de13ed7e4f9953c395c71082a186dd8f13fb97b827f230b1f600ff3a923bd012e887f021f9ab4c34c0931cb3641d224c094dbbe305842f8e7b5b6433028af631d56ce2dca705a5ef1e824158985aa1bab8468049ef0928373cedbb0b374f77aba5d24c681f96463732af4a205392e07ed12367d300107af314bcdfc58a067ff51eb453fbaf94357523d086ffdfc09f9b9afd11e8426b255b74e974d3be6424b61bb4a41b4d956be79f75bf66e260ed766edca16326177af16ce9e85721dfff2d66b79be431c9e1e38a4210aa8f870a5520dab1f2162c5344c001ae9866f42b7593e2715bf5142742a0ea0f80ec3bb907b5032e274688989df9a2097746d0e561ae81d91fc019549b45d71ed1d58ee5aa44269f4674929e03dc45d2de29f74d7c175d85968985e55e1742ba0ace9c846ac3e5ca5f272d0b053469253139976f4c78f5284bab2dc603e64db48a31cb32848534d3ed62d9f8dc55986f4db486c04b76ad01dd84a4906c815095fe7f2af852ec8da7048baf3808d438ecbe39cfb127e1e75ace2611137827b4dda383172628139dfe683586bdcce1528b2c5a2c4d9285082a2a93b26eb7d939847ffef55f3457647a647605f8b072c74419043285b6586eb681a5cd932dacc7a2f3dd66598b97ba7a80ddc6ab02eb60f7d5a3cd2cbb4658a22c96b03aa75810237f8c2e5a9e44c55e419b33057ddbc35ff6aecdad2cb8974660a1fbd346921401ef457443edc37f7206e76d647aad53e78b7200d249b6e7124238055a842f5891c190a8f54a90530f832f906e8e4e708a74ce90a8060d017f921e67bfd16d930344888d6b667d7dcabe7d7d45dbac93c2e2c930b3109872b31376c69d8ea3662b10c48205e4370e6539cfc556866d808b382a4f4de0daecafa0bfd7e4089be0ec50db5c0bba759dca6042459f9ed39be7e03e7958fb85066a956ddb65dc4f22bb13770bd705e905420923bbf9ab958444cbcf76a1051693dc89fabc4d3b5fbcf797bbf4a166d9c041b6a220c0b7ea7c8d3cfa5d6b784ffba62a15033bced37260d7a63368b7a85840e487bc1bbf80ccf3d1e3a0d46652f8d0abe6f72a94f38b2a32679c440c095a0a7c782cfd30307a6b33bf4491baa56f63b3d0d940febcbe0e67127c56032478d9386e8b4a2a85dde108c5bc2e992d11bef49756e31f784e0176b077986d192b38b61aa705a983670a4a157dff09f8569d9ac7d2088ba2cb65a861bedaf74737c927b604ca69c48634451801fe2d41cc94febfa5137dd9179b59c4aeba01c6a54bd6cdcadd2861c11215e84aa884af9de9758e185975dc881619ab710dde3058e3dd6f56b7cb64be606faa47574da2fad2d6bdb4188afc2b72c3f6b7c99d82bda8583932c511644c7b21676d2c934e349e67c7b598f86cb820104420758f063e53dba0d2c01d216e9ecaf3f3d5edbfd282d4a6e673e4e9154ce2d732e52bdacd5d46a1dfb79d6c47a43e64ed52ac7abfeba03a1b5a99f7e37e489a18d029652fe0317a7bdc3c6fb493a2343f279c5bd6957fe8a932a23aa94d6d37105a635e7b535a379cd4bed2c844a0445da450f46f8beab1edfd97cd95565fbe595bb2896a5d74f83c4cb5ef9a56d7a9440891de5989f12d0088f9c26657d4fe1d5c8e80415fc48f1e3361ee539c59fa7cb4b71336376a4e7dac4abb6505aa9343a126027a5c66f2d3e40609af6aef4a5e819650e36c5a940ce56b219fcf34e1b02b9e5c1824a29c044a860b8753ad033498a48a225e58301d3b6102409d568d6327922118a4d0bd67447c8454986e899d2c0a8570d3b1b716af0f4fdc8205c6caf9cef301dba680a08209693de10c597847fbcfa7575802ff1b075a53ef503316543c7cbc768dc10ad33506751068a6058110251b4a0544b63abfaed08c39e5acf6dff4accb2d3bf458c36f2e8b311e0b86ad6c3f273a516231c83a0d0aac4c9869bdbafedc0407af2e3e1228c9159450140111ed2e2e5e492af973fdf16943ff472d0ab791e88c773b0ec7a37f1d912cb679a03f45e71b622dabafefda4cd192d9ddd24bfc421144272fb1c5bf2b18925d997c900514390b5f86d17f47dc9e2555c8de1a1b126f6e76b9e165e4e746dfdd6d6ae106d457bf8223ad96e1285bcd466f49c6091c131d35ad221466759135f7c7201a8e32f906ed20f4aa6e43df877b5c53794e43187ee213bdb03c2c4d1e18acb9c5d8896aa92b8e34ebf1d7b41305caa9680f808ac8007f53c58546cd5fa992610b244e3369f34ffd369564892b84874e78f6fad804d36c1e3d9b703dbb9aa6a277716213afe941e8ac015273f337517ac975c91a08ff9e1fde4b7f999f34d47d96af162f524916118071632e64897930f22e98aa2a758aae07a035987b9ba2f3a0378a91cf1965b81510a63deb8004f4f3897d83e0210073f4901eaa75e3ce3d6e36be300eebe4b508157d847444d703da150d4075b14f212846f11096b72422581b3822e8583910494ae2f4936e5dbebab595f28b11608739e0db951074699571204799bf57f10237cf09c9425bfa418c717106dd1cf6c06f89b8a2512dcc3fcfd3e24ffdea13a38ce51ddc78ac74b4ee78749da52f37058899051c5cc78ffd07c03fadc62912cfe11c02b9e4e1daab15ebd1a587d6779495951ef1b52619f8223aae1177141338a043524b277a8da88e2e0212a5b9428fc9b86adabbeef708c21178c8351059e1ff2e7e95edcbb190e4146010f2875f9b31f91768bf74ae848af7635ed4da245b2a4195d28f5b804fbedd638efa92789433462ea1b498fc341c3ddaefb5b85b0d7e90dca714339ecd19623e6d6e3cfe1d8e1da9cd987556c4320863467b7f354d12819af067c3c1ebb440a7bf5df72fec9f56dc0fab1d0e9d0491c1082036c1505186b26e6eee56b591c3319bc0ef09b6c162d79c16dbd88a4690ba7c5663ee66183c27ddf829fbe65ae23340b637db7998743bfdb9e60755cbb2c0241fd8cccde6b0e4c252bc0155f623e34ce3635b273666ad48a1ac11f53948d4e882a8db11f2d974a66d0189834665532d039ad1c364dc807063d43453811788bb4e23ee2e71a16c8dd076986f1842ac40c8b4641f6735ebce4f703cbcb52257da0432848620968232ed46c3177b75df782230e851e6aa7f416d360e07c120e113684c8b24a595ca21e91603b5b9e557e3df43c83948ee2a6bebe8a1357c2f8190a6745e7e8ee13c0e4711b658e2daa28dcbf62d3cfd582a168c0ab772134ed276c8c3bf34fd3584b79fb00202268215a12920aab5f0602138523d2bb4ec40034077a5a401cc3ee74be0fdefa29f53e1303da58506ad195cce952c5c43f183152ba8ffc814b47b68cf5c0794b21b51b55b45805006bec2460536cc5182864dcda2a4d47592e6302fef949bfd9e76aa4fa1f589793aabbb8bd5d43941496738b55107174e6eb882a9092cd89912cbf5b53dda752976c776bdc9456063903f47e06269eb74553b79ffd0a01a2b429896d7efa08bd71a2b4f983769074ee5522997469c357998a548e5a6cbeaee9c25c33386dcbacc44dd00607610d01ed5c722ad8cf43925c767c77418379d899559ec408427f61f8077a649eb72f596315056298757f051478e832ab9720c5a764f86cddd094167f28b2be749508bf42e400161db69842e2956dd17356bf10a35171aad618d65c3222f660c8fc147c221ab029a6caf62f2a7984809b4826708108499427312c8ec676b908b13ec6aa49953dc59d58206e0a18d7120b4e38d71e355c7d98e81ae8b36f5cddc46cb6d26442f3126a615e3ef9176c39973ffd01f9c3b9a797c08d280d6d2e47062ef243e54d58c29d506a7431027ac39108556c669c41294d3d5c502bacbe8b2918cb21f548b6d7f6a988badd9e39ff5f538e29a855aa5569ae16e08de6525c9498b003e6fa3ae7e81aabad93de6498e40fca94f27287373763168589d0d5385b398644a4eb7a1b654c6ac7c4026f9e93732460d11a72fde4bc8405247f20dd487ff70141b97309a261984660d88454dc05f6431ae0397e5411f31bd77077148f32e1d268654a8bb43e5dbe452036b7443917790b4fc5d806662ccafefffb25e85cf39d91b5f67000b36d20de99cf0581ad3fe7ccb2b798d72f63cccd111beb982f20f425e235908413425b05775ed09bd44bb1fc5981061644b9aea9caac3923e904c24112f40c6227bd0e745524bb3dc7a73e649b68ad76f5556adf1d27da17fdcd6d95ca781b549a84b67f8fafbd8573d7a40960ecb1f74e411c649856f65da3e7a3bf1be1ff65da22fccb1611e2ee6121412fa6568dc58f6d43190b4a412d3b160497e7f18e5ed51b5cd8406fd2435ddb3b6e2d59f9166d09db6978fbf21423e713b6f4b4e766a7131d8f790d7b4a072de0c39dedab766d0e5d9431de8cb5ea07e3a08d0b124e97a44f9153e8b897090b7a27062952cd349f56c5bf85d56f73937b8e11b15d4e856b4143e631a7bc09219b028a21d34194caec499058439a896d81cbccc8d44f6f7246613ae38e42573fc346978d0ca95a6f757dfcd726cdaf506dcbac8327d00c74e4272d4a4881495a86ca8ba61b3e8fb583852d5dd5fa0371f1d4a160050696636083b730332950d4eba2f14710046e833825dc6c732a3b453be7fc735712558c3a33d1d1ee355aa5e16679c379bff3032f6afa5d1710e0a5078f8868f3dd30039f4594cfdb4982a77ca0d8113ecbba26460897cc98ea"], &(0x7f00000001c0)={0x1, 0x2, [0x38d, 0x603, 0x8a0, 0x81d]}) 21:48:32 executing program 0: epoll_create1(0x0) r0 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = socket$packet(0x11, 0x2, 0x300) dup(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:32 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:32 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f00000000c0)=0x6) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:32 executing program 0: epoll_create1(0x0) r0 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = socket$packet(0x11, 0x2, 0x300) dup(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:32 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:32 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x0, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:32 executing program 0: epoll_create1(0x0) r0 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = socket$packet(0x11, 0x2, 0x300) dup(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:32 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:32 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x0, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:32 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_cancel(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x5, r3, &(0x7f00000001c0)="a6d51342611c8158f5fd22cb4971934a3aff7bae243c056d8d3890f46e3ffe89dda76fe915c71c080fbf74bf072d11e4e0ceb67bc3d87bee35bec277ed656afd12e0007fd2d2d66bc33ef834d1a71f2cbec235fefc660771005cc8c0127baf48484c94b90fb888bb5b62aad1c04b144569c8b5af367b737f9f534955555223108f0d1ce1f019c8d0091ec010d35f9dc18c8e901244753b5b6262cae72b92323eedc9f26f1f6f66595c3165627410b54b7fdea7cf6ae90fff576411d158c673249d1f99cd5bccbf1e5c8c73451f7944a9749b576043e2989cdc64d3a0dad6f7e66fddd34cfd7b2a", 0xe7, 0x100, 0x0, 0x1, r4}, &(0x7f0000000300)) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:32 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x0, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:33 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:33 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x93db, 0x8, 0x3, 0x135, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) io_uring_enter(r6, 0x3f, 0x4, 0x3, 0x0, 0x0) 21:48:33 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000040)={0x0, 0x80, @start={0x0, 0x1, "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", "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"}, [0xf6, 0x4, 0x3, 0x6, 0x7fffffff, 0x7ff, 0x40, 0x8, 0x1, 0x1, 0x8, 0x47a, 0x0, 0x3, 0x1, 0x9, 0x3, 0x2, 0xad, 0x5, 0xff, 0x9, 0x100, 0xfffffffffffffff7, 0x8b1, 0x0, 0x5, 0x2, 0x0, 0xf1, 0xffffffff, 0x7, 0x4, 0x2, 0x6, 0x3f, 0xa9, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x7, 0x9, 0x800, 0x6, 0x2, 0xffffffffffffff00, 0x9, 0x9, 0x0, 0x4, 0x7fffffff, 0x2, 0x40, 0x9, 0x2, 0x9, 0xffff, 0x1, 0x4, 0x1, 0x400, 0x7]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000a80)={0x0, 0x7fffffff, 0x100000001, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000e80)={0x14, 0x4, {0x100000001, @struct={0x1000, 0x5}, 0x0, 0x5c616714, 0x587f, 0x3, 0xff, 0x1, 0x4, @struct={0x7f, 0x8}, 0x0, 0x4, [0x0, 0xaf, 0x5, 0x3f, 0x9, 0x800]}, {0x0, @struct={0x6, 0x9}, r1, 0x0, 0x8, 0x8, 0x3ff, 0x7, 0x85, @usage, 0x5b3, 0x1000, [0x7, 0x8, 0x3, 0x40, 0x0, 0x1980]}, {0x8000, @struct={0x8, 0x5}, r2, 0x12be, 0x4, 0x8, 0x1bd49882, 0x1c, 0x2, @usage=0x9, 0x9, 0x9, [0x0, 0x843, 0xfffffffffffffff9, 0x7fff, 0x101, 0x3]}, {0x0, 0x4}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 21:48:33 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$packet(0x11, 0x2, 0x300) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:33 executing program 5: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000240)={0x0, 0xfffffffc, 0x1a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x3, 0x3, &(0x7f00000001c0)="4a44faced882cb2347ca88b084ad084876ec42946902899ccc043605e00af5d83a1ce6f35a8526a07c0177858eb69adeb81f09a2f735dee8339ae3bc6d6fe7d916f03c4619f465d85070a6d5b754510cc1b3883170d6fc9ee4bb8c7fd199d5fe2d45", 0xca9, 0x0, 0x1, {0x2, r6}}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:33 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:33 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_io_uring_setup(0x76cf, &(0x7f00000001c0)={0x0, 0x9d14, 0x2, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:33 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$packet(0x11, 0x2, 0x300) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:33 executing program 0: epoll_create1(0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:33 executing program 0: epoll_create1(0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:33 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_cancel(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x5, r3, &(0x7f00000001c0)="a6d51342611c8158f5fd22cb4971934a3aff7bae243c056d8d3890f46e3ffe89dda76fe915c71c080fbf74bf072d11e4e0ceb67bc3d87bee35bec277ed656afd12e0007fd2d2d66bc33ef834d1a71f2cbec235fefc660771005cc8c0127baf48484c94b90fb888bb5b62aad1c04b144569c8b5af367b737f9f534955555223108f0d1ce1f019c8d0091ec010d35f9dc18c8e901244753b5b6262cae72b92323eedc9f26f1f6f66595c3165627410b54b7fdea7cf6ae90fff576411d158c673249d1f99cd5bccbf1e5c8c73451f7944a9749b576043e2989cdc64d3a0dad6f7e66fddd34cfd7b2a", 0xe7, 0x100, 0x0, 0x1, r4}, &(0x7f0000000300)) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:33 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$packet(0x11, 0x2, 0x300) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:33 executing program 0: epoll_create1(0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:33 executing program 5: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x5, 0x400000) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002680)=[{{&(0x7f0000000ac0)=@ax25={{0x3, @rose}, [@netrom, @netrom, @bcast, @bcast, @null, @default, @remote, @bcast]}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {&(0x7f0000000c40)=""/90, 0x5a}, {&(0x7f0000000580)=""/125, 0x7d}], 0x4, &(0x7f0000000540)=""/46, 0x2e}, 0x5}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000640)=""/152, 0x98}, {&(0x7f00000004c0)=""/118, 0x76}], 0x2, &(0x7f0000000340)=""/27, 0x1b}, 0xdd7}, {{&(0x7f0000000700)=@x25={0x9, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000800)=""/109, 0x6d}, 0x2}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f0000001200)=""/167, 0xa7}, {&(0x7f0000000180)=""/57, 0x39}, {&(0x7f0000000c00)=""/59, 0x3b}], 0x4}}], 0x4, 0x22, 0x0) fcntl$setpipe(r2, 0x407, 0x800) write(r1, &(0x7f0000000340), 0x41395527) r3 = syz_io_uring_setup(0x583d, &(0x7f00000001c0)={0x0, 0x3b4a, 0x0, 0xffffffff, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x4, 0xc0) ioctl$BLKDISCARD(r8, 0x1277, &(0x7f0000000240)=0x7) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x3f, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) 21:48:33 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ef0e0072404401020301090224000101000000490400008100000000000000000001220000090581030000000000"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x15555555555555a1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000280)=ANY=[@ANYRES64=r0]}]}) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f00000001c0)="aba4cf47792ecc14d6c0ef72b05a0f09581175b85320ae62f53e8d9c2b1ce5f509ee86b6851bbbe9b0f7214e728ad119577d3c70c17d5bad3bd77c6d3e451d74389a63faff8b90a403dac35fcb49964c67758a22c2f93cc636b1fd782ca7c63bfc4e7c40298387938cb1f03182b77e387c2dffb1993c03c3a7939758a24b100b3ef8760eea64c45d418a72957fc6be40c6fd32122e0aa426e104d3dcc92d24a188", 0xa1) 21:48:33 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:33 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000002680)=[{{&(0x7f0000000ac0)=@ax25={{0x3, @rose}, [@netrom, @netrom, @bcast, @bcast, @null, @default, @remote, @bcast]}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {&(0x7f0000000c40)=""/90, 0x5a}, {&(0x7f0000000580)=""/125, 0x7d}], 0x4, &(0x7f0000000540)=""/46, 0x2e}, 0x5}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000640)=""/152, 0x98}, {&(0x7f00000004c0)=""/118, 0x76}], 0x2, &(0x7f0000000340)=""/27, 0x1b}, 0xdd7}, {{&(0x7f0000000700)=@x25={0x9, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000800)=""/109, 0x6d}, 0x2}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f0000001200)=""/167, 0xa7}, {&(0x7f00000007c0)=""/44, 0x2c}, {&(0x7f0000000c00)=""/59, 0x3b}], 0x4}}], 0x4, 0x22, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f00000000c0)=0x4000, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:33 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:34 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:34 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:34 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:34 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1003.607315][ T12] usb 4-1: new high-speed USB device number 123 using dummy_hcd 21:48:34 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_cancel(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x5, r6, &(0x7f00000001c0)="a6d51342611c8158f5fd22cb4971934a3aff7bae243c056d8d3890f46e3ffe89dda76fe915c71c080fbf74bf072d11e4e0ceb67bc3d87bee35bec277ed656afd12e0007fd2d2d66bc33ef834d1a71f2cbec235fefc660771005cc8c0127baf48484c94b90fb888bb5b62aad1c04b144569c8b5af367b737f9f534955555223108f0d1ce1f019c8d0091ec010d35f9dc18c8e901244753b5b6262cae72b92323eedc9f26f1f6f66595c3165627410b54b7fdea7cf6ae90fff576411d158c673249d1f99cd5bccbf1e5c8c73451f7944a9749b576043e2989cdc64d3a0dad6f7e66fddd34cfd7b2a", 0xe7, 0x100, 0x0, 0x1, r7}, &(0x7f0000000300)) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:34 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:34 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1003.857348][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1003.997402][ T12] usb 4-1: config 1 has an invalid descriptor of length 73, skipping remainder of the config [ 1004.008087][ T12] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 21:48:34 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x38203, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1004.797429][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=7200, bcdDevice=44.40 [ 1004.806517][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 21:48:36 executing program 3: vmsplice(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000001c0)="1aa7decca41e7053bda3b59c5552a18597d96050dbaa3a3dab047b2fd724c9a7fb158fb88a94ef2c7a902b01d64b15e7e3994fc1e5c0041b5d058306ecd15a877a54282d32b3cd614b4ae96e6673f9133872b600a682d56e43fa208820d486881b272a2f02d70446bd8cf710a4a3cd52cf75332d49e3b638112d4e916cc53e446907412455a782f4b3f9e20b9e06cface8774fd181ed6f3acdf3e97a630d64f6b436f4c1de6fafece43c5b58bf45006f", 0xb0}, {&(0x7f0000000040)="3740fc0a3ac6e42f4ec5772b2fae88cc489f85e9a779313f12c411abc8eb5b6da7675ae6aeec8af227c2d0cb75321d71217dfa90f01e65a6cefa2a61ae561e2d16f368e1a3df43243ca2", 0x4a}, {&(0x7f0000000280)="896d928b72bc7bacd62369cbe37bbadf5103306114a37e353dab8b2aeb997df71d1384226b58a1eeaff5c2ea9d64d9248c5e1d54cbdbfb08a51f17e2c0249e9faba9c205bed10ebd0f78a072f43c4275db606fe7156d392cb46ab7b6aa647fb87474b2efa41bb825e3dd684434553b50825179f23ee0498f07da3f7bed26393b6d9dc52cd5a81f6c3e889ab216abba01170a7509b722c89111a2", 0x9a}, {&(0x7f0000000100)="5090a7939230ddf7164272b2550ebcc6c10bc5a9fdca406623196983908b1101bd4c25016eaee4b470590da29f66bc27b99f1a86ba4e4568d5a5eec31d014e2b61e52554720554ae084b39579c2a5f48de4a2a8a41707abf7f60a638b1cddb072ce2077d74756ced7d", 0x69}, {&(0x7f0000000340)="f879a5affca006c48dc2ddd1418ec55da926417b2c3600894a4be906f93ec6eab76b8d264bd0e1de8bbd4720c484dbb4fde65d99d00e5a210d85548bdcd2daab046172c39e849bdbed7c76eeabe7bcc5acb5bf4aa0ec5d1dba2c130685c1f6d06a070c084bea1691d4c58d9ade5964295f0c3f69fefd3665120904872e0cc41f33dc15c7020d1dd5bd5eaaecdac37c72c18e8683703234553f37a8bd858314dbfa1067006363c8194a93d75fcc", 0xad}], 0x5, 0x6) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) 21:48:36 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:36 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:36 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r7, 0x810, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}}, 0x80) r8 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r9, 0x8919, &(0x7f0000000100)={'syz_tun\x00', 0x0}) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:36 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80101) write$evdev(r7, &(0x7f00000001c0)=[{{0x77359400}, 0x0, 0x2, 0xffffffff}], 0x18) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:36 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_cancel(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x5, r6, &(0x7f00000001c0)="a6d51342611c8158f5fd22cb4971934a3aff7bae243c056d8d3890f46e3ffe89dda76fe915c71c080fbf74bf072d11e4e0ceb67bc3d87bee35bec277ed656afd12e0007fd2d2d66bc33ef834d1a71f2cbec235fefc660771005cc8c0127baf48484c94b90fb888bb5b62aad1c04b144569c8b5af367b737f9f534955555223108f0d1ce1f019c8d0091ec010d35f9dc18c8e901244753b5b6262cae72b92323eedc9f26f1f6f66595c3165627410b54b7fdea7cf6ae90fff576411d158c673249d1f99cd5bccbf1e5c8c73451f7944a9749b576043e2989cdc64d3a0dad6f7e66fddd34cfd7b2a", 0xe7, 0x100, 0x0, 0x1, r7}, &(0x7f0000000300)) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:37 executing program 0: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1006.291740][T23894] usb 4-1: USB disconnect, device number 123 21:48:37 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:37 executing program 0: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:37 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x840, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r8, 0xc0182101, &(0x7f00000001c0)={0x0, 0x6, 0x3f1}) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:37 executing program 0: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:37 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)) r2 = syz_io_uring_setup(0x476d1, &(0x7f0000000140)={0x0, 0x75be, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xac, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x4000840) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1006.717493][T23894] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1006.967485][T23894] usb 4-1: Using ep0 maxpacket: 32 [ 1007.087537][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1007.257581][T23894] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1007.266666][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.274653][T23894] usb 4-1: Product: syz [ 1007.278832][T23894] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1007.286326][T23894] usb 4-1: SerialNumber: syz [ 1007.327900][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1007.528636][T23894] usb 4-1: USB disconnect, device number 124 21:48:38 executing program 0: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:38 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:38 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x8, 0x40, 0x3, 0x9, 0x40, "5c31725cf854a76a0469f489240bda703d7525", 0x40, 0x7fffffff}) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:38 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:38 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) syz_usb_connect$cdc_ecm(0x2, 0x85, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x1, 0x1, 0x1, 0x70, 0x5b, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x81, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xcb, 0xfbff, 0xfffe, 0x3}, [@mbim={0xc, 0x24, 0x1b, 0x7fff, 0x5, 0x1, 0x2, 0xfe}, @mdlm={0x15, 0x24, 0x12, 0xd5b}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x1, 0x1, 0x3}, @dmm={0x7, 0x24, 0x14, 0x0, 0x4a06}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0xe7, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x5, 0x85}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xff, 0x8c, 0x80}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x1f, 0x7f, 0x5, 0x20, 0x1f}, 0x38, &(0x7f0000000080)={0x5, 0xf, 0x38, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x81, 0x5, 0x8, 0x2}, @ssp_cap={0x14, 0x10, 0xa, 0x40, 0x2, 0x1, 0xff0f, 0x1000, [0x3f0f, 0xff0030]}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "384c4993614ba1bb8f27ffc77a3c270c"}]}, 0x3, [{0xdd, &(0x7f0000000280)=@string={0xdd, 0x3, "6cbaa257ed530f36d30d6a02fbd8eebb10f67bc12daa9675f0006182fd9bca4a4a2fc22fb6670770f2c570050988ac36223bf54aa5b50de9ba3d76672292e85d17f56a1881064049e37ab29d44961bd7f2b1b15de2b745a9d83abd017ca6430db1c863b85c7faad27e23af2303c8c2d92dd2d8ed82a1869fba06b696acac0259d4164c7c1bc870158010810303df80694d99ba2619a48d4abe90630bdf39170a4d4b646249a9825b25b8b06fbd564a3f8e1b4aca57d40b5133f554aebbebf3a5e107220bfdc84a6a8e2b999f5f5128f8d7d3dcd9ce6b749d59d95a"}}, {0xd6, &(0x7f0000000380)=@string={0xd6, 0x3, "73cacf2d3f4a56711ad5f6c41779e782c329006191524e9741e15a06e9edd7e78dbffea75541de09a9d5e0a77dca48bdb5da27e63a805d9d57dbaa00b6c484a42308ae01f909f1d491cb2caf128d712cac0518c9265323f2c319ba9261007b5f7a10e31f9b82943b47adff7a66723f23a0c8aa0d59dcd121d1def8171593b994935f30637ab3f8496a5573cb0aea1f32401b2021998bf7430c83a3ed8351e40390b18dd68fdd357846404abdc1c2a3333f11e354d607121bb9c2340a9986465549d0d06c0a50ba298325311cd276fc348649e238"}}, {0x4c, &(0x7f0000000100)=@string={0x4c, 0x3, "eb9ebe05837d975685cd8149ea86c61db3102cec87252b98f9f98b6fd3df5cee5bc96617c41894a539cd4d8a036202f448e3d741273312fb59a1b72115ec9def553d0cd7af4b7e4979a5"}}]}) 21:48:38 executing program 1: r0 = epoll_create1(0x0) sync() r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) r6 = dup3(r2, r5, 0xa6622e7e8e080b90) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f00000000c0)={0x4, 0x1ff, 0x20, 0x6, 0x1}, 0x14) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:38 executing program 0: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:38 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:38 executing program 0: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:38 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:38 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:38 executing program 1: vmsplice(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000001c0)="1aa7decca41e7053bda3b59c5552a18597d96050dbaa3a3dab047b2fd724c9a7fb158fb88a94ef2c7a902b01d64b15e7e3994fc1e5c0041b5d058306ecd15a877a54282d32b3cd614b4ae96e6673f9133872b600a682d56e43fa208820d486881b272a2f02d70446bd8cf710a4a3cd52cf75332d49e3b638112d4e916cc53e446907412455a782f4b3f9e20b9e06cface8774fd181ed6f3acdf3e97a630d64f6b436f4c1de6fafece43c5b58bf45006f", 0xb0}, {&(0x7f0000000040)="3740fc0a3ac6e42f4ec5772b2fae88cc489f85e9a779313f12c411abc8eb5b6da7675ae6aeec8af227c2d0cb75321d71217dfa90f01e65a6cefa2a61ae561e2d16f368e1a3df43243ca2", 0x4a}, {&(0x7f0000000280)="896d928b72bc7bacd62369cbe37bbadf5103306114a37e353dab8b2aeb997df71d1384226b58a1eeaff5c2ea9d64d9248c5e1d54cbdbfb08a51f17e2c0249e9faba9c205bed10ebd0f78a072f43c4275db606fe7156d392cb46ab7b6aa647fb87474b2efa41bb825e3dd684434553b50825179f23ee0498f07da3f7bed26393b6d9dc52cd5a81f6c3e889ab216abba01170a7509b722c89111a2", 0x9a}, {&(0x7f0000000100)="5090a7939230ddf7164272b2550ebcc6c10bc5a9fdca406623196983908b1101bd4c25016eaee4b470590da29f66bc27b99f1a86ba4e4568d5a5eec31d014e2b61e52554720554ae084b39579c2a5f48de4a2a8a41707abf7f60a638b1cddb072ce2077d74756ced7d", 0x69}, {&(0x7f0000000340)="f879a5affca006c48dc2ddd1418ec55da926417b2c3600894a4be906f93ec6eab76b8d264bd0e1de8bbd4720c484dbb4fde65d99d00e5a210d85548bdcd2daab046172c39e849bdbed7c76eeabe7bcc5acb5bf4aa0ec5d1dba2c130685c1f6d06a070c084bea1691d4c58d9ade5964295f0c3f69fefd3665120904872e0cc41f33dc15c7020d1dd5bd5eaaecdac37c72c18e8683703234553f37a8bd858314dbfa1067006363c8194a93d75fcc", 0xad}], 0x5, 0x6) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) 21:48:38 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:38 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:39 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1008.347542][T23894] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1008.607537][T23894] usb 4-1: Using ep0 maxpacket: 32 [ 1008.727591][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 21:48:39 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000200)) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1008.917657][T23894] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1008.931255][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.950342][T23894] usb 4-1: Product: syz [ 1008.959376][T23894] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1008.975672][T23894] usb 4-1: SerialNumber: syz [ 1009.018121][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1009.219167][ T3622] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1009.231102][ T12] usb 4-1: USB disconnect, device number 125 [ 1010.007618][ T12] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1010.247693][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1010.367702][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1010.537673][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1010.546687][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.555173][ T12] usb 4-1: Product: syz [ 1010.559649][ T12] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1010.567275][ T12] usb 4-1: SerialNumber: syz [ 1010.608222][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:48:41 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:41 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:41 executing program 1: vmsplice(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000001c0)="1aa7decca41e7053bda3b59c5552a18597d96050dbaa3a3dab047b2fd724c9a7fb158fb88a94ef2c7a902b01d64b15e7e3994fc1e5c0041b5d058306ecd15a877a54282d32b3cd614b4ae96e6673f9133872b600a682d56e43fa208820d486881b272a2f02d70446bd8cf710a4a3cd52cf75332d49e3b638112d4e916cc53e446907412455a782f4b3f9e20b9e06cface8774fd181ed6f3acdf3e97a630d64f6b436f4c1de6fafece43c5b58bf45006f", 0xb0}, {&(0x7f0000000040)="3740fc0a3ac6e42f4ec5772b2fae88cc489f85e9a779313f12c411abc8eb5b6da7675ae6aeec8af227c2d0cb75321d71217dfa90f01e65a6cefa2a61ae561e2d16f368e1a3df43243ca2", 0x4a}, {&(0x7f0000000280)="896d928b72bc7bacd62369cbe37bbadf5103306114a37e353dab8b2aeb997df71d1384226b58a1eeaff5c2ea9d64d9248c5e1d54cbdbfb08a51f17e2c0249e9faba9c205bed10ebd0f78a072f43c4275db606fe7156d392cb46ab7b6aa647fb87474b2efa41bb825e3dd684434553b50825179f23ee0498f07da3f7bed26393b6d9dc52cd5a81f6c3e889ab216abba01170a7509b722c89111a2", 0x9a}, {&(0x7f0000000100)="5090a7939230ddf7164272b2550ebcc6c10bc5a9fdca406623196983908b1101bd4c25016eaee4b470590da29f66bc27b99f1a86ba4e4568d5a5eec31d014e2b61e52554720554ae084b39579c2a5f48de4a2a8a41707abf7f60a638b1cddb072ce2077d74756ced7d", 0x69}, {&(0x7f0000000340)="f879a5affca006c48dc2ddd1418ec55da926417b2c3600894a4be906f93ec6eab76b8d264bd0e1de8bbd4720c484dbb4fde65d99d00e5a210d85548bdcd2daab046172c39e849bdbed7c76eeabe7bcc5acb5bf4aa0ec5d1dba2c130685c1f6d06a070c084bea1691d4c58d9ade5964295f0c3f69fefd3665120904872e0cc41f33dc15c7020d1dd5bd5eaaecdac37c72c18e8683703234553f37a8bd858314dbfa1067006363c8194a93d75fcc", 0xad}], 0x5, 0x6) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) 21:48:41 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:41 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x61) 21:48:41 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = open(0x0, 0x14183e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r8, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@qipcrtr={0x2a, 0x0, 0x7fff}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="b205", 0x2}, {&(0x7f0000000140)}, {&(0x7f0000000180)='Q', 0x1}, {&(0x7f0000000580)="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", 0xed0}, {&(0x7f00000001c0)="0e72c13d7b063ff8825f0370a0ad14726870fa8fff57e4a2b1741df8e4c4d94f6d28c5c7d39a566e0819cc2b8930fa3046465dac935a912ceba997902f170f69aeb3f00a60", 0x45}, {&(0x7f0000000240)}], 0x6, &(0x7f0000000300)=[{0x28, 0x101, 0x0, "893a55c077f933c1d4112a93e07f2f7b2b3794ae"}], 0x28}, 0x0, 0x20000000, 0x0, {0x0, r9}}, 0x9) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd=r7, 0x80, 0x0, 0x0, 0x18, 0x0, {0x0, r9}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1010.808281][ T12] usb 4-1: USB disconnect, device number 126 21:48:41 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:41 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:41 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:41 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:41 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:41 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0xc0000001}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r7, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg(r7, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x8800) sendto$inet(r7, &(0x7f0000000140)='|', 0x1, 0x401c005, 0x0, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:41 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:41 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:42 executing program 1: vmsplice(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000001c0)="1aa7decca41e7053bda3b59c5552a18597d96050dbaa3a3dab047b2fd724c9a7fb158fb88a94ef2c7a902b01d64b15e7e3994fc1e5c0041b5d058306ecd15a877a54282d32b3cd614b4ae96e6673f9133872b600a682d56e43fa208820d486881b272a2f02d70446bd8cf710a4a3cd52cf75332d49e3b638112d4e916cc53e446907412455a782f4b3f9e20b9e06cface8774fd181ed6f3acdf3e97a630d64f6b436f4c1de6fafece43c5b58bf45006f", 0xb0}, {&(0x7f0000000040)="3740fc0a3ac6e42f4ec5772b2fae88cc489f85e9a779313f12c411abc8eb5b6da7675ae6aeec8af227c2d0cb75321d71217dfa90f01e65a6cefa2a61ae561e2d16f368e1a3df43243ca2", 0x4a}, {&(0x7f0000000280)="896d928b72bc7bacd62369cbe37bbadf5103306114a37e353dab8b2aeb997df71d1384226b58a1eeaff5c2ea9d64d9248c5e1d54cbdbfb08a51f17e2c0249e9faba9c205bed10ebd0f78a072f43c4275db606fe7156d392cb46ab7b6aa647fb87474b2efa41bb825e3dd684434553b50825179f23ee0498f07da3f7bed26393b6d9dc52cd5a81f6c3e889ab216abba01170a7509b722c89111a2", 0x9a}, {&(0x7f0000000100)="5090a7939230ddf7164272b2550ebcc6c10bc5a9fdca406623196983908b1101bd4c25016eaee4b470590da29f66bc27b99f1a86ba4e4568d5a5eec31d014e2b61e52554720554ae084b39579c2a5f48de4a2a8a41707abf7f60a638b1cddb072ce2077d74756ced7d", 0x69}, {&(0x7f0000000340)="f879a5affca006c48dc2ddd1418ec55da926417b2c3600894a4be906f93ec6eab76b8d264bd0e1de8bbd4720c484dbb4fde65d99d00e5a210d85548bdcd2daab046172c39e849bdbed7c76eeabe7bcc5acb5bf4aa0ec5d1dba2c130685c1f6d06a070c084bea1691d4c58d9ade5964295f0c3f69fefd3665120904872e0cc41f33dc15c7020d1dd5bd5eaaecdac37c72c18e8683703234553f37a8bd858314dbfa1067006363c8194a93d75fcc", 0xad}], 0x5, 0x6) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) 21:48:42 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:42 executing program 3: dup(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4b4, 0xde64, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x70, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x9f, &(0x7f00000001c0)=@string={0x9f, 0x3, "79861dec738603ea2f7a3a92590f28a9cb429c611daba6b0d6facd1c3fea52e55d3547648fcc15aca08cfad0e9839426fb642a6945f2fbd92fe0d0cdfd6511fcf249659e19bd1eaf3d7b874cc900ca289d21ad6fbd23eba587aba1da053bfab4fb4b424d21096b018bf3ce87b4f99a21c6fdc7e9b21efe94f31dc2399cde8aff4554aac94aa88b57e71062e74fd6ae0379911ef41e0a10ebe88fc39c65"}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) 21:48:42 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:42 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:42 executing program 5: r0 = epoll_create1(0x0) r1 = gettid() ptrace$peeksig(0x4209, r1, &(0x7f0000000480)={0xffff, 0x1, 0x2}, &(0x7f00000004c0)=[{}, {}]) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0xaeee, 0x2, 0x1, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x3f, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='bpf\x00', 0x100480, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0xffffffffffffc7de}}, {@mode={'mode', 0x3d, 0xb91}}, {@mode={'mode', 0x3d, 0x7}}], [{@subj_user={'subj_user', 0x3d, '['}}, {@audit='audit'}, {@context={'context', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, ',~'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@dont_hash='dont_hash'}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x36, 0x31, 0x35, 0x32, 0x65, 0x39, 0x61], 0x2d, [0x66, 0x61, 0x35, 0x33], 0x2d, [0x38, 0x64, 0x35, 0x62], 0x2d, [0x66, 0x64, 0x1c, 0x62], 0x2d, [0x1, 0x38, 0x38, 0x65, 0x32, 0x31, 0x38, 0x35]}}}, {@subj_user={'subj_user', 0x3d, ' :('}}]}) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='lo\x00', 0x10) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x1a1) ioctl$sock_inet_SIOCGARP(r7, 0x8954, &(0x7f0000000200)={{0x2, 0x4e23, @multicast2}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x40, {0x2, 0x4e24, @empty}, 'geneve0\x00'}) ioctl$TIOCGSOFTCAR(r9, 0x5419, &(0x7f00000001c0)) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40001, 0xa0) 21:48:42 executing program 2: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:42 executing program 2: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:42 executing program 2: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:42 executing program 2: epoll_create1(0x0) r0 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x4000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r0, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:42 executing program 2: epoll_create1(0x0) r0 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x4000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r0, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:42 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x0, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:42 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:42 executing program 2: epoll_create1(0x0) r0 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x4000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r0, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1011.977709][ T12] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1012.217695][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1012.338211][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1012.507809][ T12] usb 4-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.40 [ 1012.516954][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.524962][ T12] usb 4-1: Product: syz [ 1012.529144][ T12] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1012.536496][ T12] usb 4-1: SerialNumber: syz [ 1012.578430][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1012.778895][T23894] usb 4-1: USB disconnect, device number 127 21:48:43 executing program 3: socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x3) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) 21:48:43 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x0, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:43 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:43 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:43 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:43 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400182, 0xc) socketpair(0x1d, 0x7, 0x6, &(0x7f00000001c0)={0xffffffffffffffff}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, r7, 0x0, r8, 0x2, 0x0, 0x0, {0x0, r9}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$binfmt_elf32(r10, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x4, 0xf8, 0x1, 0x1a, 0x3, 0x3e, 0x7f8, 0x2df, 0x38, 0x55, 0x1, 0x6, 0x20, 0x2, 0x4, 0x3, 0x200}, [{0x5, 0xfffffffc, 0x6, 0x2, 0x0, 0x101, 0xfd4a, 0x96a}], "2e80a40fb49d2179a719ca2b56880654bab48561005aef946318751e1f84c6f5755995cecbabc65de8b24972a395d9d5db99820da1bc6dffbcf965dea338513128467aad83997567bdbc82b88945aa90d11453f04279d4e19c87c5fdfed3522359328956f8aff259f8eda921e080aa6ecb777d80982db70b9e56e6c5eafea889aa14fcd7e492d9181025699ab8097787351fee8e9815d0b476c06dc707ccd189ba3d1633b551493bd1a6676ee8fe1e1eceacf856ebf9442efe7ba0d078b8af0b", [[], [], [], [], [], [], [], [], [], []]}, 0xb18) 21:48:44 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:44 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:44 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:44 executing program 2: epoll_create1(0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:44 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x0, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:44 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1013.587780][ T12] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1013.827751][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1013.947817][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1014.127840][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1014.136877][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.145300][ T12] usb 4-1: Product: syz [ 1014.149531][ T12] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1014.156899][ T12] usb 4-1: SerialNumber: syz [ 1014.198194][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1014.398747][ T12] usb 4-1: USB disconnect, device number 2 [ 1015.167831][ T12] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1015.407835][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1015.527903][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1015.707900][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1015.716917][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.724928][ T12] usb 4-1: Product: syz [ 1015.729144][ T12] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1015.736508][ T12] usb 4-1: SerialNumber: syz [ 1015.778424][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:48:46 executing program 3: get_thread_area(&(0x7f0000000040)={0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x1}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) 21:48:46 executing program 2: epoll_create1(0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:46 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000300)='./file0\x00', 0x8, 0x2) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r6, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="f15c93cb35c215fe339d1e9060c5b23e77cb58a87329a00288504db389cc6e395885fa906ac30eeae99fa388c31b5717e641e1586a90961b5f99b26c939d944f6cb1cf6817b7e51402a8459f9db642e97d3c05db56250a665d3ff188eb47e5b036d508aa5a5796fb8806b6a41487e0bfc3df087c18269bd7d2f477104c5d5db497ceaf3e1b11a5d63a2b7035dc69fa701f3b46fe701880800a7d38dccd4b3e8014aa15c96968359533ce2c5ffdd5f0d3297018bd7c025150940cdead92eb1e6bc6ba45eecf067b32425b6000b2f376ef9172426ae7fa97e5a84ef4dc540bbf5dd458ffcb75724135bd32fa04db6d6a75aedda7ab6e8501fc94e209dc3b2525ae24c954255d3247ca9c1b9525ce68179a52a87333aa2b0a8c1baa6ba6160c6d2018e67bac5402d0d89c5f798b8d1a87b0dc3306f546c61724530d9f4b6f0ee68677c7b261de5afa02d708a8ec979791de8f4831cc354ba453bc253e2435207f25494a594d4e5be39902358d362cb318ad965b7e7480a5ca5b6fe74e101c400c77392ee4419ad788f494230487811046f21f0f9665dfbaa9e94ed305a02e3fa47039e67dde19f89c8f1741aad752cdfe458ddf54e8fc10ff79b5", 0x1b9}], 0x3) sendto$inet(r6, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r6, 0xf507, 0x0) personality(0x410000e) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:46 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$packet(0x11, 0x2, 0x300) dup(0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:46 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:46 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) syz_io_uring_setup(0x5c85, &(0x7f0000000380)={0x0, 0xcc47, 0x8, 0x3, 0x3b0, 0x0, r6}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x50, r1, 0x10000000) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@cgroup=r0, r6, 0x14, 0x1}, 0x14) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x0, &(0x7f00000004c0)={r9, r10+10000000}, 0x1, 0x1, 0x1, {0x0, r11}}, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='memory.stat\x00', 0x0, 0x0) getsockopt$inet_mreqn(r13, 0x0, 0x23, &(0x7f0000000580)={@local, @remote}, &(0x7f00000005c0)=0xc) keyctl$dh_compute(0x17, &(0x7f0000000240), &(0x7f0000000280)=""/202, 0xca, 0x0) r14 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x100, 0x0) fsetxattr$trusted_overlay_redirect(r14, &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r12, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:46 executing program 2: epoll_create1(0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:46 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1015.978685][ T12] usb 4-1: USB disconnect, device number 3 21:48:46 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:46 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$packet(0x11, 0x2, 0x300) dup(0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:46 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:46 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1016.437902][ T12] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1016.677881][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1016.797960][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1016.968007][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1016.977142][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.985987][ T12] usb 4-1: Product: syz [ 1016.990432][ T12] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1016.997778][ T12] usb 4-1: SerialNumber: syz [ 1017.038445][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1017.239420][ T12] usb 4-1: USB disconnect, device number 4 21:48:48 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x29}}, 0xc) 21:48:48 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:48 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$packet(0x11, 0x2, 0x300) dup(0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:48 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x231, 0x0, r1}, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x0, 0x0}, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x4001, 0x0) io_uring_enter(r7, 0x3f, 0x0, 0x3, 0x0, 0x0) 21:48:48 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:48 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:48 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:48 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:48 executing program 2: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:48 executing program 2: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:48 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:48 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1018.048093][T23894] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1018.288013][T23894] usb 4-1: Using ep0 maxpacket: 32 [ 1018.408011][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1018.578059][T23894] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1018.587090][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.595108][T23894] usb 4-1: Product: syz [ 1018.599305][T23894] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1018.606654][T23894] usb 4-1: SerialNumber: syz [ 1018.648544][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1018.849338][T23894] usb 4-1: USB disconnect, device number 5 [ 1019.618045][T23894] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1019.858032][T23894] usb 4-1: Using ep0 maxpacket: 32 [ 1019.978047][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1020.148079][T23894] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1020.157213][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.165690][T23894] usb 4-1: Product: syz [ 1020.170137][T23894] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1020.177487][T23894] usb 4-1: SerialNumber: syz [ 1020.218652][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:48:51 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x6cb, 0x2968, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x3, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x4}}}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x15555555555555a1}) 21:48:51 executing program 1: get_thread_area(&(0x7f0000000040)={0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x1}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) 21:48:51 executing program 2: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:51 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r6, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r6, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) fallocate(r6, 0x44, 0x6, 0xfffffffffffffffa) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:51 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:51 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:51 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1020.418854][T23894] usb 4-1: USB disconnect, device number 6 21:48:51 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:51 executing program 2: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:51 executing program 2: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:51 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:51 executing program 2: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1020.828090][T23894] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1021.068062][T23894] usb 4-1: Using ep0 maxpacket: 32 [ 1021.198105][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1021.468175][T23894] usb 4-1: string descriptor 0 read error: -22 [ 1021.474413][T23894] usb 4-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.40 [ 1021.483598][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.528574][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1021.729249][T23894] usb 4-1: USB disconnect, device number 7 [ 1022.498147][ T12] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1022.738159][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1022.858211][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1023.108189][ T12] usb 4-1: string descriptor 0 read error: -22 [ 1023.114373][ T12] usb 4-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.40 [ 1023.125901][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.168655][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:48:54 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) 21:48:54 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000100)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:54 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:54 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:54 executing program 1: get_thread_area(&(0x7f0000000040)={0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x1}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) 21:48:54 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x3ff) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x9, &(0x7f00000000c0)=0x2000000000000074, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x2, &(0x7f0000000240)=[{0x6, 0x0, 0x8, 0xe8}, {0xf22, 0x6, 0xf6, 0x7}]}, 0x10) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f00000001c0)=0x6) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r5, 0xfffffffffffffffe, 0x3) sendto$inet(r5, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000000c0)) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:54 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76ce, &(0x7f0000000140)={0x0, 0xc237, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x6ff) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:54 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000100)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:54 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1023.368563][ T12] usb 4-1: USB disconnect, device number 8 21:48:54 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:54 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000100)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:54 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1023.778247][ T12] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1024.038193][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1024.158268][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1024.328247][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1024.337748][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.345807][ T12] usb 4-1: Product: syz [ 1024.350125][ T12] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1024.357473][ T12] usb 4-1: SerialNumber: syz [ 1024.398624][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1024.599467][ T12] usb 4-1: USB disconnect, device number 9 [ 1025.368255][ T12] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1025.608268][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1025.728375][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1025.898315][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1025.907386][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.915380][ T12] usb 4-1: Product: syz [ 1025.919599][ T12] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1025.927187][ T12] usb 4-1: SerialNumber: syz [ 1025.968851][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:48:56 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000000)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000200)={0x328, r9, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x54ad}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x255}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7f, @local, 0x10000}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}]}, @TIPC_NLA_NODE={0x1d0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "7791332dc100b4a3bd7b6095bbc79833f307f66112"}}, @TIPC_NLA_NODE_ID={0x101, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "0e0bbd6b72d4afcbcdb7b2f8715bd2b9b06c13808de9"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "a8bf4b97fa0c6e79709627dcaeece656a03f702684ed"}}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xec61}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x557}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9e}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080) 21:48:56 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:56 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:56 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:56 executing program 3: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x64, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x8, 0x0, 0x5}}}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x407}}, {0x46, &(0x7f0000000140)=@string={0x46, 0x3, "ecb9dc4ff8f8944041a903aa58ba77d070fbb3cfef0b60497e031b45bfc5bf4816f0cce52d9658f1d18f424e1731e36263dd7c0a81d3d8c97b92be0a4401f8ff9cebbf73"}}]}) 21:48:56 executing program 1: get_thread_area(&(0x7f0000000040)={0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x1}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) [ 1026.168855][ T12] usb 4-1: USB disconnect, device number 10 21:48:56 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:56 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:56 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:57 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:57 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:57 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1026.568322][ T12] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1026.928361][ T12] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 21:48:57 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd=r7, 0x0, 0x0, 0x0, 0x1}, 0x6) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:57 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:57 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:57 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1027.098396][ T12] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.40 [ 1027.107610][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.116210][ T12] usb 4-1: Product: syz [ 1027.129411][ T12] usb 4-1: Manufacturer: 맬俜䂔ꥁꨃ멘큷ﭰ쾳௯䥠;䔛얿䢿阭近乂ㄗ拣੼펁짘鉻ાń￸玿 [ 1027.142524][ T12] usb 4-1: SerialNumber: syz [ 1027.558349][ T12] usbhid 4-1:1.0: can't add hid device: -71 [ 1027.564670][ T12] usbhid: probe of 4-1:1.0 failed with error -71 [ 1027.572880][ T12] usb 4-1: USB disconnect, device number 11 [ 1028.148369][T23894] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1028.508405][T23894] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1028.668397][T23894] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.40 [ 1028.677434][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.685773][T23894] usb 4-1: Product: syz [ 1028.689967][T23894] usb 4-1: Manufacturer: 맬俜䂔ꥁꨃ멘큷ﭰ쾳௯䥠;䔛얿䢿阭近乂ㄗ拣੼펁짘鉻ાń￸玿 [ 1028.702767][T23894] usb 4-1: SerialNumber: syz 21:48:59 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x3ff]}, &(0x7f0000000080), 0x8) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xb0, 0x0, 0x2, 0x401, 0x0, 0x0, {0x7}, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x44}, 0x4000040) 21:48:59 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r6, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r6, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) fallocate(r6, 0x44, 0x6, 0xfffffffffffffffa) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:59 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:59 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:59 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 21:48:59 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) 21:48:59 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:59 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:59 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 21:48:59 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:59 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000480)={0x0, 0x4, 0x7c8d804a, 0x7}) r2 = openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) accept4$tipc(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x80800) r3 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) ioctl$EVIOCREVOKE(r7, 0x40044591, &(0x7f00000000c0)=0x3f) r9 = open(&(0x7f00000001c0)='./file0\x00', 0x240000, 0x40) sendmsg$IPVS_CMD_GET_CONFIG(r9, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="9b73c905", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fedbdf250d000000080005001f0000000800050006000000080005000000040028000380080003000400000008000100010000001400020076657468305f746f5f62617461647600080004000fdd00004c00038006000400070000000800030001000000060007004e24000005000800fa00000014000600fc00000000000000000000000000000114000200766c616e3100000000000000000000002000018008000b0073697000140003006401010000000000000000000000000008000600ff030000"], 0xd0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000080) io_uring_enter(r3, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:48:59 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1029.118561][T23894] usbhid 4-1:1.0: can't add hid device: -71 [ 1029.125481][T23894] usbhid: probe of 4-1:1.0 failed with error -71 [ 1029.152295][T23894] usb 4-1: USB disconnect, device number 12 [ 1029.528441][T23894] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1029.768428][T23894] usb 4-1: Using ep0 maxpacket: 32 [ 1029.888569][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1030.058502][T23894] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1030.067515][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.076018][T23894] usb 4-1: Product: syz [ 1030.080424][T23894] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1030.087777][T23894] usb 4-1: SerialNumber: syz [ 1030.128933][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1030.330609][ T12] usb 4-1: USB disconnect, device number 13 [ 1031.098456][T23894] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1031.338458][T23894] usb 4-1: Using ep0 maxpacket: 32 [ 1031.458549][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1031.628546][T23894] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1031.637583][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.645597][T23894] usb 4-1: Product: syz [ 1031.649768][T23894] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1031.657244][T23894] usb 4-1: SerialNumber: syz [ 1031.699146][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:49:02 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:02 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:02 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:02 executing program 5: r0 = epoll_create1(0x80000) r1 = request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='syz', r1) keyctl$describe(0x6, r1, &(0x7f0000000240)=""/202, 0xca) r2 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r3 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) r9 = openat(r7, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2) getsockopt$TIPC_CONN_TIMEOUT(r9, 0x10f, 0x82, &(0x7f00000001c0), &(0x7f0000000200)=0x4) io_uring_enter(r3, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:02 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$packet(0x11, 0x2, 0x300) dup(0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:02 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000020ef0e0c7240000102030109022400092100000001220000090581030000000000d6a55a8821886aa03b4e24a04c609734ed4443d861e165c186cde0081c7aa7977ed42b709480b27e8c41d7be936093c62db86480679e4ff868e2f9308f510d02583eb2ba937ed47a057e8222eef91fb9f270e400f0f5a5d34216d8b26b2417a20203aba1158463bb0d3102fa766b4d193ec1cd"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x5c, &(0x7f0000000040)=@string={0x5c, 0x3, "fb6ef01db079cf554206d103a0b99131ed3315dca84f981ecd34798c1d72e70a1fbf55af40b547c595f5352c194ba6d7ad6b973b50ad57f7d11b229e1a1fb66b5b0067641b2b513e20d36d9792e6eba8b9d8644be50a4394d9b3"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc0a}}]}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000340)={0x6, 'ipvlan0\x00'}, 0x18) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000140)=0x4) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x141020, 0x0) write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file0', [{0x20, '#,^'}], 0xa, "22f4e1185c829c01caceea1a5b46f9e58e296cc3870a74c204e832eac39eb54563681883777dc97c69f0e49387a1b9cf60331a14e99efcb7de135aee67cdba2812959ecf11b916b25ae74bbad075efad358f583269ee83221d328da765b3a22320106dbc5cdcf35ee14ea8f8772a3d088c12270e87e81892b5d8c476bbae9746887bd29ee5fcad0f8b73cf774a1a0beb5a"}, 0xa0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f00000000c0)) [ 1031.899403][T23894] usb 4-1: USB disconnect, device number 14 21:49:02 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) io_uring_setup(0x36c6, &(0x7f00000000c0)={0x0, 0x8b18, 0x10, 0x3, 0x1ac}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r0, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) lseek(r1, 0x3, 0x4) 21:49:02 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:02 executing program 1: r0 = epoll_create1(0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x108040, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) r2 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x1f, 0x101000) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000300)={0x2, 0xda, "cc1ffdc5c36eee7d0d149fb7e2c6e6a257dce7df018996f0d8d67b6f4c6afb09c407df81cd6f4aa63e493457bef128105b2d9a26ec27669c7084bf13c5889caba5dd926e71043ef152308ded6bcadccfae0c795aa969a37a1144503bd9aacefb18f86b9039bca36d56f79a18e3897f418b007ef6681854d0be7ee175de63790f0125a714ceffde4c095451a3ac6adce0f366350bd8a184ecb0b7a991012d66a543e36b00890f4c8b3af11107a641019862fad0c2a6d582a71c710bdef6c895464d8370c9f11b9db84ba6f90aaeae9c86a11767d44f58e712ce6a"}) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r1, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) r3 = fcntl$dupfd(r0, 0x2, r1) r4 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:02 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:02 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:02 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:02 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:02 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:02 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:02 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x3, 0x6}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:02 executing program 1 (fault-call:8 fault-nth:0): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1032.348513][T23894] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1032.598509][T23894] usb 4-1: Using ep0 maxpacket: 32 [ 1032.718591][T23894] usb 4-1: config 33 has an invalid descriptor of length 1, skipping remainder of the config [ 1032.728791][T23894] usb 4-1: config 33 has 0 interfaces, different from the descriptor's value: 9 [ 1032.888617][T23894] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1032.897678][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.905686][T23894] usb 4-1: Product: syz [ 1032.909881][T23894] usb 4-1: Manufacturer: ఊ [ 1032.914456][T23894] usb 4-1: SerialNumber: syz 21:49:05 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x4d2) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000040)={0x9, 0x7, 0x1}, 0x9) 21:49:05 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:05 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:05 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:05 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x6) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:05 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x3, 0x6}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:05 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1034.944549][ T12] usb 4-1: USB disconnect, device number 15 21:49:05 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x2, 0x0, 0x0, 0x0, 0x0) 21:49:05 executing program 4 (fault-call:8 fault-nth:0): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:05 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:05 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1035.067933][ T4190] FAULT_INJECTION: forcing a failure. [ 1035.067933][ T4190] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.082359][ T4190] CPU: 1 PID: 4190 Comm: syz-executor.4 Not tainted 5.4.65-syzkaller-00175-g63d1c2f0b547 #0 [ 1035.092409][ T4190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1035.102449][ T4190] Call Trace: [ 1035.105733][ T4190] dump_stack+0x1b0/0x21e [ 1035.110081][ T4190] ? devkmsg_release+0x11c/0x11c [ 1035.115002][ T4190] ? show_regs_print_info+0x12/0x12 [ 1035.120177][ T4190] should_fail+0x6fb/0x860 [ 1035.124593][ T4190] ? setup_fault_attr+0x2b0/0x2b0 [ 1035.129587][ T4190] ? unwind_get_return_address+0x48/0x90 [ 1035.135187][ T4190] ? arch_stack_walk+0x98/0xe0 [ 1035.139939][ T4190] should_failslab+0x5/0x20 [ 1035.144424][ T4190] kmem_cache_alloc_bulk+0x26/0x250 [ 1035.149598][ T4190] io_get_req+0x27f/0x850 [ 1035.153906][ T4190] ? io_queue_link_head+0x570/0x570 [ 1035.159092][ T4190] io_submit_sqe+0x83/0xe90 [ 1035.163563][ T4190] ? mutex_trylock+0xb0/0xb0 [ 1035.168129][ T4190] ? do_sys_open+0x4a3/0x620 [ 1035.172687][ T4190] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1035.178725][ T4190] __se_sys_io_uring_enter+0x8ce/0x1f80 [ 1035.184240][ T4190] ? __x64_sys_io_uring_enter+0xf0/0xf0 [ 1035.189779][ T4190] ? __fsnotify_parent+0x300/0x300 [ 1035.194889][ T4190] ? security_file_permission+0x128/0x300 [ 1035.200610][ T4190] ? __sb_end_write+0xa4/0xf0 [ 1035.205271][ T4190] ? vfs_write+0x427/0x4f0 [ 1035.209683][ T4190] ? fput_many+0x42/0x1a0 [ 1035.213983][ T4190] ? __ia32_sys_read+0x80/0x80 [ 1035.218716][ T4190] ? do_syscall_64+0x80/0x150 [ 1035.223376][ T4190] ? __x64_sys_io_uring_enter+0x1d/0xf0 [ 1035.228903][ T4190] do_syscall_64+0xcb/0x150 [ 1035.233390][ T4190] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1035.239260][ T4190] RIP: 0033:0x45e179 [ 1035.243144][ T4190] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:49:06 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1035.262728][ T4190] RSP: 002b:00007fbbfc71bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1035.271133][ T4190] RAX: ffffffffffffffda RBX: 00000000000082c0 RCX: 000000000045e179 [ 1035.279071][ T4190] RDX: 0000000000000000 RSI: 000000000000003f RDI: 0000000000000004 [ 1035.287026][ T4190] RBP: 00007fbbfc71bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1035.294994][ T4190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1035.302933][ T4190] R13: 00007fff7a5c70af R14: 00007fbbfc71c9c0 R15: 000000000118cf4c [ 1035.349257][ T12] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1035.598719][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1035.718703][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1035.888747][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1035.897796][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.906361][ T12] usb 4-1: Product: syz [ 1035.910796][ T12] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1035.918173][ T12] usb 4-1: SerialNumber: syz [ 1035.959172][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1036.160178][ T12] usb 4-1: USB disconnect, device number 16 [ 1036.928706][ T12] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1037.168706][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1037.288725][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1037.458797][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1037.467906][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.476473][ T12] usb 4-1: Product: syz [ 1037.481046][ T12] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1037.488389][ T12] usb 4-1: SerialNumber: syz [ 1037.529310][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:49:08 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40106614, &(0x7f00000000c0)) r6 = socket$packet(0x11, 0x2, 0x300) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:08 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:08 executing program 4 (fault-call:8 fault-nth:1): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:08 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x8, 0x0, 0x0, 0x0, 0x0) 21:49:08 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=ANY=[@ANYBLOB="1e03a3862106d19409ff768382ca71c30c063e85e84d0d6ddf5900"]}]}) 21:49:08 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1037.729562][ T12] usb 4-1: USB disconnect, device number 17 [ 1037.761310][ T4221] FAULT_INJECTION: forcing a failure. [ 1037.761310][ T4221] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.779932][ T4221] CPU: 1 PID: 4221 Comm: syz-executor.4 Not tainted 5.4.65-syzkaller-00175-g63d1c2f0b547 #0 [ 1037.789988][ T4221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1037.800043][ T4221] Call Trace: [ 1037.803334][ T4221] dump_stack+0x1b0/0x21e [ 1037.807634][ T4221] ? devkmsg_release+0x11c/0x11c [ 1037.812552][ T4221] ? show_regs_print_info+0x12/0x12 [ 1037.817729][ T4221] ? __io_submit_sqe+0x168f/0x3b60 [ 1037.822845][ T4221] ? arch_stack_walk+0x98/0xe0 [ 1037.827624][ T4221] should_fail+0x6fb/0x860 [ 1037.832009][ T4221] ? setup_fault_attr+0x2b0/0x2b0 [ 1037.836999][ T4221] ? get_order+0x30/0x30 [ 1037.841222][ T4221] ? __io_queue_sqe+0x1dd/0xad0 [ 1037.846061][ T4221] should_failslab+0x5/0x20 [ 1037.850546][ T4221] __kmalloc_track_caller+0x5d/0x2b0 [ 1037.855815][ T4221] kmemdup+0x21/0x50 [ 1037.859690][ T4221] __io_queue_sqe+0x1dd/0xad0 [ 1037.864345][ T4221] __se_sys_io_uring_enter+0x8ce/0x1f80 [ 1037.869859][ T4221] ? __x64_sys_io_uring_enter+0xf0/0xf0 [ 1037.875371][ T4221] ? __fsnotify_parent+0x300/0x300 [ 1037.880452][ T4221] ? vfs_write+0x427/0x4f0 [ 1037.884848][ T4221] ? fput_many+0x42/0x1a0 [ 1037.889147][ T4221] ? __ia32_sys_read+0x80/0x80 [ 1037.893885][ T4221] ? __x64_sys_io_uring_enter+0x1d/0xf0 [ 1037.899394][ T4221] do_syscall_64+0xcb/0x150 [ 1037.903862][ T4221] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1037.909783][ T4221] RIP: 0033:0x45e179 21:49:08 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x1, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:08 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1037.913698][ T4221] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1037.933330][ T4221] RSP: 002b:00007fbbfc71bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1037.941736][ T4221] RAX: ffffffffffffffda RBX: 00000000000082c0 RCX: 000000000045e179 [ 1037.949683][ T4221] RDX: 0000000000000000 RSI: 000000000000003f RDI: 0000000000000004 [ 1037.957623][ T4221] RBP: 00007fbbfc71bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1037.965566][ T4221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1037.973508][ T4221] R13: 00007fff7a5c70af R14: 00007fbbfc71c9c0 R15: 000000000118cf4c 21:49:08 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:08 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 21:49:08 executing program 4 (fault-call:8 fault-nth:2): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:08 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:08 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$EVIOCGPHYS(r5, 0x80404507, &(0x7f00000000c0)=""/17) r6 = socket$packet(0x11, 0x2, 0x300) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:08 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:08 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 21:49:08 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1038.298732][ T12] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1038.538753][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1038.658847][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1038.828847][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1038.837975][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.846535][ T12] usb 4-1: Product: syz [ 1038.851002][ T12] usb 4-1: Manufacturer: 蚣ء铑）荶쪂썱،蔾䷨洍姟 [ 1038.858293][ T12] usb 4-1: SerialNumber: syz [ 1038.899156][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1039.099921][ T12] usb 4-1: USB disconnect, device number 18 [ 1039.868796][T23894] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1040.118819][T23894] usb 4-1: Using ep0 maxpacket: 32 [ 1040.238865][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1040.408901][T23894] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1040.417938][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.426579][T23894] usb 4-1: Product: syz [ 1040.431051][T23894] usb 4-1: Manufacturer: 蚣ء铑）荶쪂썱،蔾䷨洍姟 [ 1040.438363][T23894] usb 4-1: SerialNumber: syz [ 1040.479355][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:49:11 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44f, 0xb324, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0xfd}}}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40d}}, {0x55, &(0x7f00000000c0)=@string={0x55, 0x3, "5698873b02aa1601934aaeb3bd709e4bc9de2e4d55c771d2f012157e8cb96e8bc561c8ea85883ca70f689d244cfb83f43979bbd89a6a418c46c71478ee5ef821e5a29cd3778606fcbbe199bbb5dfb818efcb39"}}]}) 21:49:11 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:11 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 21:49:11 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:11 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x3, 0x0, 0x0, 0x0) 21:49:11 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x88000, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:11 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1040.679411][T23894] usb 4-1: USB disconnect, device number 19 21:49:11 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNOTTY(r9, 0x5422) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0xc0406618, &(0x7f00000000c0)={{0x1, 0x0, @identifier="a14847a3b9638bf387238628789cabf2"}}) ioctl$TIOCGSID(r6, 0x5429, &(0x7f00000001c0)) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:11 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x8, 0x0, 0x0, 0x0, 0x0) 21:49:11 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:11 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2, 0x0, 0x0, 0x0, 0x0) 21:49:11 executing program 0 (fault-call:7 fault-nth:0): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1040.897425][ T4321] FAULT_INJECTION: forcing a failure. [ 1040.897425][ T4321] name failslab, interval 1, probability 0, space 0, times 0 [ 1040.912574][ T4321] CPU: 0 PID: 4321 Comm: syz-executor.0 Not tainted 5.4.65-syzkaller-00175-g63d1c2f0b547 #0 [ 1040.922635][ T4321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1040.932658][ T4321] Call Trace: [ 1040.935964][ T4321] dump_stack+0x1b0/0x21e [ 1040.940275][ T4321] ? devkmsg_release+0x11c/0x11c [ 1040.945204][ T4321] ? show_regs_print_info+0x12/0x12 [ 1040.950379][ T4321] should_fail+0x6fb/0x860 [ 1040.954770][ T4321] ? setup_fault_attr+0x2b0/0x2b0 [ 1040.959884][ T4321] ? unwind_get_return_address+0x48/0x90 [ 1040.965485][ T4321] ? arch_stack_walk+0x98/0xe0 [ 1040.970229][ T4321] should_failslab+0x5/0x20 [ 1040.974703][ T4321] kmem_cache_alloc_bulk+0x26/0x250 [ 1040.979895][ T4321] io_get_req+0x27f/0x850 [ 1040.984221][ T4321] ? io_queue_link_head+0x570/0x570 [ 1040.989424][ T4321] io_submit_sqe+0x83/0xe90 [ 1040.993924][ T4321] ? mutex_trylock+0xb0/0xb0 [ 1040.998484][ T4321] ? do_sys_open+0x4a3/0x620 [ 1041.003056][ T4321] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1041.009107][ T4321] __se_sys_io_uring_enter+0x8ce/0x1f80 [ 1041.014627][ T4321] ? __x64_sys_io_uring_enter+0xf0/0xf0 [ 1041.020149][ T4321] ? __fsnotify_parent+0x300/0x300 [ 1041.025234][ T4321] ? security_file_permission+0x128/0x300 [ 1041.030944][ T4321] ? __sb_end_write+0xa4/0xf0 [ 1041.035599][ T4321] ? vfs_write+0x427/0x4f0 [ 1041.040026][ T4321] ? fput_many+0x42/0x1a0 [ 1041.044336][ T4321] ? __ia32_sys_read+0x80/0x80 [ 1041.049083][ T4321] ? __fd_install+0x113/0x260 [ 1041.053741][ T4321] ? __x64_sys_io_uring_enter+0x1d/0xf0 [ 1041.059251][ T4321] do_syscall_64+0xcb/0x150 [ 1041.063724][ T4321] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1041.069595][ T4321] RIP: 0033:0x45e179 [ 1041.073467][ T4321] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1041.078830][T23894] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1041.093040][ T4321] RSP: 002b:00007f54e11dac78 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1041.093050][ T4321] RAX: ffffffffffffffda RBX: 00000000000082c0 RCX: 000000000045e179 [ 1041.093056][ T4321] RDX: 0000000000000000 RSI: 000000000000003f RDI: 0000000000000004 [ 1041.093062][ T4321] RBP: 00007f54e11daca0 R08: 0000000000000000 R09: 0000000000000000 [ 1041.093067][ T4321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1041.093073][ T4321] R13: 00007ffc41084def R14: 00007f54e11db9c0 R15: 000000000118cf4c [ 1041.388863][T23894] usb 4-1: Using ep0 maxpacket: 32 [ 1041.508902][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1041.678947][T23894] usb 4-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.40 [ 1041.687987][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.696607][T23894] usb 4-1: Product: syz [ 1041.701015][T23894] usb 4-1: Manufacturer: 顖㮇ꨂĖ䪓뎮炽䮞䴮읕퉱ደ縕릌譮懅袅Ꜽ栏⒝בֿ礹檚豁읆研廮⇸ꋥ펜虷ﰆ뮙ᢸ쯯 [ 1041.715708][T23894] usb 4-1: SerialNumber: syz [ 1041.759346][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1041.960411][T23894] usb 4-1: USB disconnect, device number 20 [ 1042.738905][T23894] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1042.998900][T23894] usb 4-1: Using ep0 maxpacket: 32 [ 1043.118972][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1043.289004][T23894] usb 4-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.40 [ 1043.298047][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.306038][T23894] usb 4-1: Product: syz [ 1043.310256][T23894] usb 4-1: Manufacturer: 顖㮇ꨂĖ䪓뎮炽䮞䴮읕퉱ደ縕릌譮懅袅Ꜽ栏⒝בֿ礹檚豁읆研廮⇸ꋥ펜虷ﰆ뮙ᢸ쯯 [ 1043.324423][T23894] usb 4-1: SerialNumber: syz [ 1043.369402][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:49:14 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:14 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x7, 0x0, 0x0, 0x0) 21:49:14 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x8, 0x0, 0x0, 0x0, 0x0) 21:49:14 executing program 0 (fault-call:7 fault-nth:1): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:14 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0xeeb15f11726e0fc1, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_team\x00'}]}, 0x28}}, 0x44000) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:14 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) 21:49:14 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1043.569353][T23894] usb 4-1: USB disconnect, device number 21 21:49:14 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:14 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 21:49:14 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x300, 0x0, 0x0, 0x0) 21:49:14 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:14 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 21:49:14 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x2, 0x0, 0x0, 0x0, 0x0) 21:49:14 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 21:49:14 executing program 2 (fault-call:5 fault-nth:0): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1043.843947][ T4387] FAULT_INJECTION: forcing a failure. [ 1043.843947][ T4387] name failslab, interval 1, probability 0, space 0, times 0 [ 1043.857026][ T4387] CPU: 0 PID: 4387 Comm: syz-executor.2 Not tainted 5.4.65-syzkaller-00175-g63d1c2f0b547 #0 [ 1043.867137][ T4387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1043.877174][ T4387] Call Trace: [ 1043.880444][ T4387] dump_stack+0x1b0/0x21e [ 1043.884745][ T4387] ? devkmsg_release+0x11c/0x11c [ 1043.889685][ T4387] ? show_regs_print_info+0x12/0x12 [ 1043.894856][ T4387] should_fail+0x6fb/0x860 [ 1043.899276][ T4387] ? setup_fault_attr+0x2b0/0x2b0 [ 1043.904300][ T4387] ? unwind_get_return_address+0x48/0x90 [ 1043.909924][ T4387] ? arch_stack_walk+0x98/0xe0 [ 1043.914659][ T4387] should_failslab+0x5/0x20 [ 1043.919137][ T4387] kmem_cache_alloc_bulk+0x26/0x250 [ 1043.924310][ T4387] io_get_req+0x27f/0x850 [ 1043.928612][ T4387] ? io_queue_link_head+0x570/0x570 [ 1043.933779][ T4387] io_submit_sqe+0x83/0xe90 [ 1043.938252][ T4387] ? mutex_trylock+0xb0/0xb0 [ 1043.942809][ T4387] ? do_sys_open+0x4a3/0x620 [ 1043.947367][ T4387] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1043.953403][ T4387] __se_sys_io_uring_enter+0x8ce/0x1f80 [ 1043.958919][ T4387] ? __x64_sys_io_uring_enter+0xf0/0xf0 [ 1043.964437][ T4387] ? __fsnotify_parent+0x300/0x300 [ 1043.969549][ T4387] ? security_file_permission+0x128/0x300 [ 1043.975235][ T4387] ? __sb_end_write+0xa4/0xf0 [ 1043.979879][ T4387] ? vfs_write+0x427/0x4f0 [ 1043.984262][ T4387] ? fput_many+0x42/0x1a0 [ 1043.988559][ T4387] ? __ia32_sys_read+0x80/0x80 [ 1043.993297][ T4387] ? __x64_sys_io_uring_enter+0x1d/0xf0 [ 1043.998832][ T4387] do_syscall_64+0xcb/0x150 [ 1044.003324][ T4387] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1044.009182][ T4387] RIP: 0033:0x45e179 [ 1044.013044][ T4387] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1044.032618][ T4387] RSP: 002b:00007f88c149fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 21:49:14 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x700, 0x0, 0x0, 0x0) [ 1044.041007][ T4387] RAX: ffffffffffffffda RBX: 00000000000082c0 RCX: 000000000045e179 [ 1044.049027][ T4387] RDX: 0000000000000000 RSI: 000000000000003f RDI: 0000000000000004 [ 1044.056972][ T4387] RBP: 00007f88c149fca0 R08: 0000000000000000 R09: 0000000000000000 [ 1044.064911][ T4387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1044.072854][ T4387] R13: 00007ffe0db6342f R14: 00007f88c14a09c0 R15: 000000000118cf4c [ 1044.158972][T23894] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1044.408965][T23894] usb 4-1: Using ep0 maxpacket: 32 21:49:15 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000010401040000000000080000000000000000020080000000000000000500010003000000080005400000000308000440000000048477dd60dff2e90951dd79bb821127b1ac579ae422654114408d50b878948295a8072b25ea4732c15ac79cc0efb2110bb2411f785cbc6cbc64704255a79af8fc8be437431e1c203404aae1e96d621b8ad15e422a63b8f1ea4741fee103dd9be95693de5ac7b0c48d9883195aca656d67be01c2e3956f5379ac6e0a562637501af069a36bd866c0c57d95cad3603e088bc9"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x6) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, r6, 0x0, 0x0, 0x0, 0x20, 0x0, {0x1}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1044.529003][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1044.699029][T23894] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1044.708136][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.716161][T23894] usb 4-1: Product: syz [ 1044.720357][T23894] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1044.727706][T23894] usb 4-1: SerialNumber: syz [ 1044.769413][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:49:17 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x8, 0x0, 0x0, 0x0, 0x0) 21:49:17 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x3, 0x0, 0x0, 0x0) 21:49:17 executing program 2 (fault-call:5 fault-nth:1): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:17 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x4000, 0x0, 0x0, 0x0) 21:49:17 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)=r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) 21:49:17 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x1231, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev(r8, &(0x7f00000004c0)=[{&(0x7f0000000280)='C', 0x1}], 0x1, 0x8000, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1046.615097][T23894] usb 4-1: USB disconnect, device number 22 [ 1046.644404][ T4415] FAULT_INJECTION: forcing a failure. [ 1046.644404][ T4415] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.657149][ T4415] CPU: 1 PID: 4415 Comm: syz-executor.2 Not tainted 5.4.65-syzkaller-00175-g63d1c2f0b547 #0 [ 1046.667196][ T4415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1046.677218][ T4415] Call Trace: [ 1046.680492][ T4415] dump_stack+0x1b0/0x21e [ 1046.684846][ T4415] ? devkmsg_release+0x11c/0x11c [ 1046.689751][ T4415] ? show_regs_print_info+0x12/0x12 [ 1046.694953][ T4415] ? __io_submit_sqe+0x168f/0x3b60 [ 1046.700080][ T4415] ? arch_stack_walk+0x98/0xe0 [ 1046.704840][ T4415] should_fail+0x6fb/0x860 [ 1046.709251][ T4415] ? setup_fault_attr+0x2b0/0x2b0 [ 1046.714255][ T4415] ? get_order+0x30/0x30 [ 1046.718472][ T4415] ? __io_queue_sqe+0x1dd/0xad0 [ 1046.723300][ T4415] should_failslab+0x5/0x20 [ 1046.727824][ T4415] __kmalloc_track_caller+0x5d/0x2b0 [ 1046.733076][ T4415] kmemdup+0x21/0x50 [ 1046.736940][ T4415] __io_queue_sqe+0x1dd/0xad0 [ 1046.741588][ T4415] __se_sys_io_uring_enter+0x8ce/0x1f80 [ 1046.747104][ T4415] ? __x64_sys_io_uring_enter+0xf0/0xf0 [ 1046.752618][ T4415] ? __fsnotify_parent+0x300/0x300 [ 1046.757705][ T4415] ? vfs_write+0x427/0x4f0 [ 1046.762089][ T4415] ? fput_many+0x42/0x1a0 [ 1046.766387][ T4415] ? __ia32_sys_read+0x80/0x80 [ 1046.771153][ T4415] ? __x64_sys_io_uring_enter+0x1d/0xf0 [ 1046.776663][ T4415] do_syscall_64+0xcb/0x150 [ 1046.781137][ T4415] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1046.786993][ T4415] RIP: 0033:0x45e179 [ 1046.790855][ T4415] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:49:17 executing program 2 (fault-call:5 fault-nth:2): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1046.810423][ T4415] RSP: 002b:00007f88c149fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1046.818802][ T4415] RAX: ffffffffffffffda RBX: 00000000000082c0 RCX: 000000000045e179 [ 1046.826740][ T4415] RDX: 0000000000000000 RSI: 000000000000003f RDI: 0000000000000004 [ 1046.834712][ T4415] RBP: 00007f88c149fca0 R08: 0000000000000000 R09: 0000000000000000 [ 1046.842661][ T4415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1046.850606][ T4415] R13: 00007ffe0db6342f R14: 00007f88c14a09c0 R15: 000000000118cf4c 21:49:17 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:17 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x4, 0x0, 0x0, 0x0) 21:49:17 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) open(&(0x7f0000000380)='./file0\x00', 0x2, 0x8) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r7 = accept4$inet6(r6, &(0x7f0000000400)={0xa, 0x0, 0x0, @private2}, &(0x7f00000003c0)=0x1c, 0x1000) fcntl$setsig(r7, 0xa, 0x1d) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000240)=""/224, &(0x7f0000000340)=0xe0) r8 = request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='@(/,*\x00', 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x7de4c1d, 0x0, r8) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:17 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:17 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x2, 0x0, 0x0, 0x0, 0x0) 21:49:17 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x800000, 0x0, 0x0, 0x0) 21:49:17 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x8, 0x0, 0x0, 0x0, 0x0) 21:49:17 executing program 5 (fault-call:3 fault-nth:0): syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x40047211, 0x0) 21:49:17 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x7, 0x0, 0x0, 0x0) [ 1047.209024][T23894] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1047.449057][T23894] usb 4-1: Using ep0 maxpacket: 32 [ 1047.569189][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1047.739141][T23894] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1047.748168][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.756164][T23894] usb 4-1: Product: syz [ 1047.760342][T23894] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1047.767692][T23894] usb 4-1: SerialNumber: syz [ 1047.829494][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:49:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa95f61d9d901d71a}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "9ef79ceb46"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x20044000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) 21:49:20 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x3, 0x0, 0x0, 0x0) 21:49:20 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x1000000, 0x0, 0x0, 0x0) 21:49:20 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x40047211, 0x0) 21:49:20 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:49:20 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x8, 0x0, 0x0, 0x0) 21:49:20 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x2, 0x0) [ 1049.655264][ T12] usb 4-1: USB disconnect, device number 23 21:49:20 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x3, 0x0, 0x0, 0x0) 21:49:20 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x4b47, 0x0) 21:49:20 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x7, 0x0, 0x0, 0x0) 21:49:20 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x10, 0x0, 0x0, 0x0) 21:49:20 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x3000000, 0x0, 0x0, 0x0) [ 1050.079171][ T12] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1050.319183][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1050.439231][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1050.609210][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1050.618256][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.626852][ T12] usb 4-1: Product: syz [ 1050.631482][ T12] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1050.638827][ T12] usb 4-1: SerialNumber: syz [ 1050.679677][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1050.880309][ T12] usb 4-1: USB disconnect, device number 24 [ 1051.649255][ T12] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1051.889214][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1052.009243][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1052.179260][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1052.188261][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.196250][ T12] usb 4-1: Product: syz [ 1052.200423][ T12] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1052.207789][ T12] usb 4-1: SerialNumber: syz [ 1052.249705][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:49:23 executing program 3: syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x97, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x82f}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x89, 0x3f, 0x3}}]}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x39, &(0x7f0000000000)=@string={0x39, 0x3, "94720649aa53762e652d94042784911ec975f85f6b3348057e57487afeeeef00a59ab349bb79276a473d56b8717463f5a88f1ef7007df0"}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) 21:49:23 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x4b49, 0x0) 21:49:23 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x4, 0x0, 0x0, 0x0) 21:49:23 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0xf5, 0x0, 0x0, 0x0) 21:49:23 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x7000000, 0x0, 0x0, 0x0) 21:49:23 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x10, 0x0, 0x0, 0x0) 21:49:23 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x541b, 0x0) [ 1052.449650][T23894] usb 4-1: USB disconnect, device number 25 21:49:23 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x7, 0x0, 0x0, 0x0) 21:49:23 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x5421, 0x0) 21:49:23 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x40000000, 0x0, 0x0, 0x0) 21:49:23 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x300, 0x0, 0x0, 0x0) 21:49:23 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x300, 0x0, 0x0, 0x0) [ 1052.899277][T23894] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1053.139281][T23894] usb 4-1: Using ep0 maxpacket: 32 [ 1053.259328][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1053.429335][T23894] usb 4-1: New USB device found, idVendor=056a, idProduct=0097, bcdDevice= 0.40 [ 1053.438480][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.446541][T23894] usb 4-1: Product: syz [ 1053.450829][T23894] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1053.458193][T23894] usb 4-1: SerialNumber: syz [ 1053.499826][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1053.700483][T23894] usb 4-1: USB disconnect, device number 26 [ 1054.469334][ T12] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1054.709330][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1054.839370][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1055.009397][ T12] usb 4-1: New USB device found, idVendor=056a, idProduct=0097, bcdDevice= 0.40 [ 1055.018606][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.027120][ T12] usb 4-1: Product: syz [ 1055.031559][ T12] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1055.038941][ T12] usb 4-1: SerialNumber: syz [ 1055.079842][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:49:25 executing program 3: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x304, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfc}}}}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x3801}}]}) 21:49:25 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x700, 0x0, 0x0, 0x0) 21:49:25 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x5450, 0x0) 21:49:25 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x3, 0x0, 0x0) 21:49:25 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x8, 0x0, 0x0, 0x0) 21:49:25 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x700, 0x0, 0x0, 0x0) 21:49:26 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x5451, 0x0) [ 1055.280154][ T12] usb 4-1: USB disconnect, device number 27 21:49:26 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x5452, 0x0) 21:49:26 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x10, 0x0, 0x0, 0x0) 21:49:26 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x5460, 0x0) 21:49:26 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x4000, 0x0, 0x0, 0x0) 21:49:26 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x7, 0x0, 0x0) [ 1055.739427][ T12] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 1056.109392][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1056.289453][ T12] usb 4-1: New USB device found, idVendor=056a, idProduct=0304, bcdDevice= 0.40 [ 1056.298727][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.306729][ T12] usb 4-1: Product: syz [ 1056.311051][ T12] usb 4-1: Manufacturer: syz [ 1056.315638][ T12] usb 4-1: SerialNumber: syz [ 1056.359926][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1056.560875][ T12] usb 4-1: USB disconnect, device number 28 [ 1057.329439][T23894] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 1057.689544][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1057.859541][T23894] usb 4-1: New USB device found, idVendor=056a, idProduct=0304, bcdDevice= 0.40 [ 1057.868698][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.876823][T23894] usb 4-1: Product: syz [ 1057.881033][T23894] usb 4-1: Manufacturer: syz [ 1057.885647][T23894] usb 4-1: SerialNumber: syz [ 1057.929934][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:49:28 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x440a}}, {0x1e, &(0x7f0000000040)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) 21:49:28 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x1f00, 0x0, 0x0, 0x0) 21:49:28 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x40049409, 0x0) 21:49:28 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0xf5, 0x0, 0x0, 0x0) 21:49:28 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x800000, 0x0, 0x0, 0x0) 21:49:28 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x300, 0x0, 0x0) 21:49:28 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x40086602, 0x0) [ 1058.129952][ T12] usb 4-1: USB disconnect, device number 29 21:49:28 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x40087602, 0x0) 21:49:28 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x300, 0x0, 0x0, 0x0) 21:49:28 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x4020940d, 0x0) 21:49:28 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x4000, 0x0, 0x0, 0x0) 21:49:29 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x40305828, 0x0) [ 1058.579419][ T12] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1058.819509][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1058.939532][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1059.119605][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1059.128626][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.136843][ T12] usb 4-1: Product: syz [ 1059.141046][ T12] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1059.148457][ T12] usb 4-1: SerialNumber: syz [ 1059.189995][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1059.391415][ T12] usb 4-1: USB disconnect, device number 30 [ 1060.159571][T23894] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1060.399501][T23894] usb 4-1: Using ep0 maxpacket: 32 [ 1060.519558][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1060.699524][T23894] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1060.708572][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.717288][T23894] usb 4-1: Product: syz [ 1060.721868][T23894] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1060.729238][T23894] usb 4-1: SerialNumber: syz [ 1060.770060][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:49:31 executing program 3: syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000020ef0e0c724000010203010902a40003010000092100000001220000090581030000000000000000000000000000008815803717c0d300e8c14c94ffc1e6bbf8f43c78a3b546928e4a43402d3d319a58ea0ae34635f0a5e5ae4c4b222e7858a43d3ebfa6f3890841db06d63cba8e7ce5f8b7efa15f9ab33fd0f3"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=ANY=[@ANYBLOB="1e03a3862106d194063e815a3571e84d0d6ddf5900"]}]}) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) 21:49:31 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x1000000, 0x0, 0x0, 0x0) 21:49:31 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x700, 0x0, 0x0, 0x0) 21:49:31 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x700, 0x0, 0x0) 21:49:31 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x4030582a, 0x0) 21:49:31 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0xf5ff, 0x0, 0x0, 0x0) 21:49:31 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x80047210, 0x0) [ 1060.971207][T23894] usb 4-1: USB disconnect, device number 31 21:49:31 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x4000, 0x0, 0x0, 0x0) 21:49:31 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x80047213, 0x0) 21:49:31 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x80086601, 0x0) 21:49:31 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x4000, 0x0, 0x0) 21:49:31 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0xfff5, 0x0, 0x0, 0x0) [ 1061.389589][T23894] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1061.629558][T23894] usb 4-1: Using ep0 maxpacket: 32 [ 1061.759589][T23894] usb 4-1: config index 0 descriptor too short (expected 164, got 36) [ 1061.767993][T23894] usb 4-1: config 1 has an invalid descriptor of length 33, skipping remainder of the config [ 1061.778188][T23894] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1061.939646][T23894] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1061.948739][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.957644][T23894] usb 4-1: Product: syz [ 1061.962098][T23894] usb 4-1: Manufacturer: 蚣ء铑㸆媁焵䷨洍姟 [ 1061.968774][T23894] usb 4-1: SerialNumber: syz [ 1062.210898][T23894] usb 4-1: USB disconnect, device number 32 [ 1062.979597][T23894] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1063.219592][T23894] usb 4-1: Using ep0 maxpacket: 32 [ 1063.339653][T23894] usb 4-1: config index 0 descriptor too short (expected 164, got 36) [ 1063.347893][T23894] usb 4-1: config 1 has an invalid descriptor of length 33, skipping remainder of the config [ 1063.358069][T23894] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1063.519666][T23894] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1063.528681][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.537224][T23894] usb 4-1: Product: syz [ 1063.541780][T23894] usb 4-1: Manufacturer: 蚣ء铑㸆媁焵䷨洍姟 [ 1063.548344][T23894] usb 4-1: SerialNumber: syz 21:49:34 executing program 3: syz_usb_connect$hid(0x6, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000020ef0e0c724000010203010902240001010000000904000000030100009d7a00000001220000090581030000009160a59085abb4364a2675412ac7eef43bbd30b333f8240e8c48712542b8a2b5ab92a3023166968940b2b29176284b1dfe553b1a8cd5b09f8facbb8b321aacf4b2236c665962af0804e2a6bb5b20b0b3da"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000280)={0x2, "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"}) 21:49:34 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x3000000, 0x0, 0x0, 0x0) 21:49:34 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0xf5ff, 0x0, 0x0, 0x0) 21:49:34 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x800000, 0x0, 0x0) 21:49:34 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x80087601, 0x0) 21:49:34 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x80000, 0x0, 0x0, 0x0) 21:49:34 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0xc0045878, 0x0) [ 1063.790148][T23894] usb 4-1: USB disconnect, device number 33 21:49:34 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0xc0045878, 0x0) 21:49:34 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0xfff5, 0x0, 0x0, 0x0) 21:49:34 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x1000000, 0x0, 0x0) 21:49:34 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 21:49:34 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x800000, 0x0, 0x0, 0x0) 21:49:35 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000040)=ANY=[@ANYBLOB="1e03a3862106d19409ff668382b071c30c063e815a3571e84d0dd8556ddf5900"]}]}) 21:49:35 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x7000000, 0x0, 0x0, 0x0) 21:49:35 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x80000, 0x0, 0x0, 0x0) 21:49:35 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0xc0189436, 0x0) 21:49:35 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x3000000, 0x0, 0x0) 21:49:35 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x1000000, 0x0, 0x0, 0x0) 21:49:35 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0xc020660b, 0x0) 21:49:35 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x800000, 0x0, 0x0, 0x0) 21:49:35 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000100)={{0x4, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x1, 'fo\x00', 0x30, 0xfffffffb, 0x69}, {@initdev={0xac, 0x1e, 0x3, 0x0}, 0x4e24, 0x1, 0x8, 0xef0, 0x7fff}}, 0x44) fcntl$setstatus(r1, 0x4, 0x400) fcntl$setpipe(r0, 0x407, 0x7) r2 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r2, 0x40047211, 0x0) 21:49:35 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) syz_mount_image$msdos(&(0x7f0000000380)='msdos\x00', &(0x7f0000000400)='./bus\x00', 0x10000, 0x3, &(0x7f0000000580)=[{&(0x7f0000000440)="106827f1c0ac0155b12ad00ec50f6d42af3ee6d934a272eb9c5a88cf0f1cab582fc25b6ee5", 0x25, 0x1000}, {&(0x7f0000000480)="656ab19114fd031d818bca2ee321d58664e05234995248302074140ff24199e9a01cc7e7869a8f9f1e1d0c65c9badda13f56d9235c7a3372815984ee6af36db24fce2a7f3bdb2d79e0f1d123e186", 0x4e, 0x1}, {&(0x7f0000000500)="bdfc33e77db72b84bcc5dc2dde06dcdb7a219e64dafe892cdfa0002283ddb569e1e4ebac770d6b27a3dc9b267029531e412c2334a6c377daa025056cc7c84071dbd17c0daa230f3e0e9752ecb6d4beb331ce7fdc655c5855e79248d1", 0x5c}], 0x0, &(0x7f00000006c0)={[{@fat=@tz_utc='tz=UTC'}, {@nodots='nodots'}, {@dots='dots'}, {@dots='dots'}, {@fat=@errors_remount='errors=remount-ro'}, {@fat=@uid={'uid', 0x3d, 0xee00}}], [{@euid_gt={'euid>', r1}}, {@uid_lt={'uid<', 0xee00}}]}) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1a8, 0x0, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_EXPECT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0xc0, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}, @CTA_EXPECT_MASTER={0x80, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xb2}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x20}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000000) ioctl$FITRIM(r0, 0x40047211, 0x0) 21:49:35 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x1000000, 0x0, 0x0, 0x0) 21:49:35 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x10000000, 0x0, 0x0, 0x0) [ 1064.681185][ T12] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1064.939633][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1065.059687][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1065.229667][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1065.238716][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.247075][ T12] usb 4-1: Product: syz [ 1065.251371][ T12] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്嗘 [ 1065.258947][ T12] usb 4-1: SerialNumber: syz [ 1065.300155][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1065.501227][ T12] usb 4-1: USB disconnect, device number 34 [ 1066.279662][ T12] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1066.519650][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1066.639724][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1066.809727][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1066.818907][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.827494][ T12] usb 4-1: Product: syz [ 1066.831961][ T12] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്嗘 [ 1066.839539][ T12] usb 4-1: SerialNumber: syz [ 1066.880357][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:49:37 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x7000000, 0x0, 0x0) 21:49:37 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x3000000, 0x0, 0x0, 0x0) 21:49:37 executing program 5: recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/42, 0x2a, 0x2000, &(0x7f0000000100)=@hci={0x1f, 0x4, 0x4}, 0x80) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000200)='./file0\x00', 0x246042, 0x0) ioctl$FITRIM(r0, 0x40047211, 0x0) fchmodat(r0, &(0x7f0000000180)='./file1\x00', 0x11) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e648c35e4e957b3987278d0fb0fa50b33f9e007076bb6dc64a01005878d4c2fc2fa21f004e6f6f13651d38b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1a55943e7ec97a13bf323968231036d8ce27a1ea801a327c7da7508798c894052c0900000081efffff0000010000000000d466320e3b2f51738a5e56c59e1d119f351bcf57c80469480e813b1320ee0018df3b7150e8eb869adb7697701597c37902e47a0ea9fd4958197d667a3054bdf9408abb17290c7d06c5e0cc3462be1b931d81136634f158663a65cfa9c25ce29e868585d9cc55bc1e5d563f9f07000000bcea537a62234333da9f16d4db71ad878b0b69a60456d5d765b99dc0952e715e88dae5f5a4f290727b08344b7b766e4bb72822caf7528cfc667f9aa8dbc98ac895f94f0000875247bd40ad6b63997300dcbd91fad341c5000000d045ea439cb639ca764f97b5603026e7579aa403d773468cbdd99c86d99fcbdfc8e0112aa6e1ade0c578f2be7e82a81926b957ce32115733469af8e2b056715b000000007ba6e55050db6f3d989374dca7f240b224c27e8dfaf4ff1edb100500000030402d05c7454c6c54672834c0e303fd52d5721e1006efb26c0dd2aae852ce82476c4ce9c4e100000000006500220892f7f25ebae0499455c7301ac78bf3c6f36fda8dbf889a83f845a9b81b0b6b8c9257e1315e0d1fa1962af94fffebece45a9be6bc8f83983c712b33df90c7fc6e3572b6b406dae620b26569fc9739240be8e0b747985cef7e3e8de160904ff99d12955ef345c3acebe93ec4fa3d7d66b47494827bec8f804853235bd6ae6edb8147ae7168c5d4ac517fd9a317b532f97c6fe6e2c6c6b7b284f774572d36e0bbff1dc4e0ac775e240cb7202288fb134b60a78cecbeae41aefc7464cb9e5c9e047e964ed5fa73effd070f49b5d0020778c0bf4bca824276b3da62f420a0b8838e15ce6b2667c61a3155717d46ac2c84a216c3156aea10543a0a299fc7aa91c3000000000000000000000000000093a380afcae319b7b660f23d6980765fb9e7529e32fb89d7aa6735b353e98bdd3b637e9044cc3f5968e7a591deb747e2817cdd625235af0b059f1a3673b2d2132294cccb88308d2d5030d195defa2e29d7ef22fd38a81d1a2a0d4e11e62a4be34b18aed89e9659ad3b45d676afd3fedcd76510b755061ba1c80a5ab01fb804452c8489a7d181ba9deb3d7de03469bfc68ae5bca53d46eada151d85eec894c9a49c36daa368a821fd971481a7c0a6ab6a1d60c91bbaad7efb9dc0781c0dc4f598f29503f0c181ef8f991d60b97766e161c3fe8a291682f576c4c430bc01d5f79184425d700fcbe17c78d6d20fe1c0005a348202b85489c77a6e65aa311f5c13a32d43cb2cbaeb02a062c16f3cefcb383bca53aaba73ab361bb467db9cacb0416c12413154b63f525580a21cc8a80be77b45afc6de272dafebd7591e5f6ac3a4a251908bb623da3ea4ebd29a0fc804930371d417d5b991518fb12880bb753c9b3f751f0065cac2f56b25e0f22a3554ba5d1b91658da0380a00"/1146], &(0x7f0000000180)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xc0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r2}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r2}, 0xc) 21:49:37 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x3000000, 0x0, 0x0, 0x0) 21:49:37 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0xfc, &(0x7f0000000280)=@string={0xfc, 0x3, "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"}}, {0xa3, &(0x7f00000001c0)=@string={0xa3, 0x3, "a3862106d1372b99d53c3e45730000003e815a3571e84d0d6ddf5900a83a7717b54b1a5415edd5437e421e4d7c303890ab4a96904cf727c94a3c41c3d9d345569ba64505339ee6d586de0928acc5f3f43afcfc8017aaae2dfa8c371309bb9b93d86aee548bdac65212403f0c416391bf2b3bd1215bd628bb91ef4b72d0bc4185d3afbaf332f8c1a55bdea973e55b85382e5a0ad404ae7dcaf5c090769b9be16167"}}]}) 21:49:37 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x40000000, 0x0, 0x0, 0x0) 21:49:37 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') chroot(&(0x7f0000000040)='./bus/file0\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x40047211, 0x0) [ 1067.081601][T23894] usb 4-1: USB disconnect, device number 35 21:49:37 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f0000000040)='./file1\x00', 0xfffffffe, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="b1d5a8d2962c27cf95edc90a38eeb717a3308f912a5543e8b2fdef01b2e3f7b82d520569824f453ff83de451f29669ea755a7f2e8441197ac490a54f2b96b718b66150796902dbc6cbd129417d38311c2b69ccaaf5de7ae68931fc5a9c97fc83b95c2e2715705f67a9de41f261a8faefad1e316ce807cd75f64a2a2445b379711d34b914ed8c5d38ddf374e6bec1bb391123e742fd5c0222", @ANYBLOB="b139a41319e248ab3fc4f0e795c780679482fb4d9c805de5f80765e5120d551f92ba163049ba89c85e801e7ea240f2360a2f26208a1fdc1b870409ddcf0489bb706a0ed8e65b314f767d53efaf796736b8e8772adeca73bf18cf87e6b68aed871204dcd80b00afbe9884a93ff22279d34f3d584920a48f7e1edffdcd6fb28deb24a9c5df0195fe89e50f652f06420d62b529ebaff4d7b506896715f0c363105ec101605ca2ca625f9a9c85758635f00303074cb3cc7fd1addab8530da83474f2329bfe4b473c36252d48", @ANYRESHEX]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x40047211, 0x0) 21:49:37 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x4000000, 0x0, 0x0, 0x0) 21:49:37 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x4000000, 0x0, 0x0, 0x0) 21:49:37 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x40000000, 0x0, 0x0) 21:49:37 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x40047211, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, 0xfffffffffffffffd) 21:49:38 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0xeffdffff, 0x0, 0x0, 0x0) [ 1067.272500][ T4902] FAT-fs (loop5): Unrecognized mount option "ըҖ" or missing value 21:49:38 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x7000000, 0x0, 0x0, 0x0) 21:49:38 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x40047211, 0x0) socket$inet6(0xa, 0xa, 0x40) 21:49:38 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x7000000, 0x0, 0x0, 0x0) [ 1067.539715][T23894] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1067.789735][T23894] usb 4-1: Using ep0 maxpacket: 32 [ 1067.909783][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1068.079771][T23894] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1068.088775][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.096764][T23894] usb 4-1: Product: syz [ 1068.100947][T23894] usb 4-1: Manufacturer: 蚣ء㟑餫㳕䔾s [ 1068.106832][T23894] usb 4-1: SerialNumber: syz [ 1068.150225][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1068.351081][T23894] usb 4-1: USB disconnect, device number 36 [ 1069.119743][ T12] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1069.359744][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1069.479871][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1069.649818][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1069.658896][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.667475][ T12] usb 4-1: Product: syz [ 1069.671935][ T12] usb 4-1: Manufacturer: 蚣ء㟑餫㳕䔾s [ 1069.677805][ T12] usb 4-1: SerialNumber: syz [ 1069.720185][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:49:40 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x8000000, 0x0, 0x0, 0x0) 21:49:40 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x10000000000, 0x0, 0x0) 21:49:40 executing program 5: r0 = syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0xffffffffffffffff) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='syz', r1) keyctl$get_security(0x11, r1, &(0x7f0000000100)=""/86, 0x56) r2 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r2, 0x40047211, 0x0) 21:49:40 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0xfffffdef, 0x0, 0x0, 0x0) 21:49:40 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x8000000, 0x0, 0x0, 0x0) 21:49:40 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000880)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x14, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xffffffff}}, @IFA_LOCAL={0x14, 0x2, @loopback={0xd00000000000000}}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000804}, 0xc801) 21:49:40 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x40047211, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(0x0) mount$overlay(0x0, &(0x7f0000001540)='./bus\x00', &(0x7f0000001580)='overlay\x00', 0x804000, &(0x7f00000015c0)={[{@metacopy_on='metacopy=on'}, {@nfs_export_off='nfs_export=off'}, {@redirect_dir={'redirect_dir', 0x3d, './bus'}}, {@xino_off='xino=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file1'}}, {@metacopy_off='metacopy=off'}, {@index_off='index=off'}, {@nfs_export_on='nfs_export=on'}, {@xino_on='xino=on'}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid'}}]}) setuid(r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) accept$inet6(r4, &(0x7f0000000180), &(0x7f0000001500)=0x1c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001400)={{{@in=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='overlay\x00', 0x402, &(0x7f0000000340)={[], [{@euid_eq={'euid', 0x3d, r5}}, {@smackfstransmute={'smackfstransmute', 0x3d, '#^,{%*('}}, {@euid_lt={'euid<', r6}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}]}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) readlinkat(r7, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)=""/4096, 0x1000) [ 1069.926358][ T12] usb 4-1: USB disconnect, device number 37 21:49:40 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x10000000, 0x0, 0x0, 0x0) 21:49:40 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x80000000000000, 0x0, 0x0) 21:49:40 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x3, 0x0, 0x0) [ 1070.065662][ T4986] overlayfs: unrecognized mount option "func=MODULE_CHECK" or missing value 21:49:40 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x40000000, 0x0, 0x0, 0x0) 21:49:40 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x10000000, 0x0, 0x0, 0x0) 21:49:40 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0xeffdffff, 0x0, 0x0, 0x0) 21:49:40 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x100000000000000, 0x0, 0x0) 21:49:41 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x7, 0x0, 0x0) 21:49:41 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x1f000000, 0x0, 0x0, 0x0) 21:49:41 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0xf5ffffff, 0x0, 0x0, 0x0) [ 1070.329951][ T12] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1070.569822][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1070.699816][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1070.869835][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1070.879091][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.887603][ T12] usb 4-1: Product: syz [ 1070.892067][ T12] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1070.899412][ T12] usb 4-1: SerialNumber: syz [ 1070.940184][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1071.144178][ T4976] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1071.152763][ T12] usb 4-1: USB disconnect, device number 38 [ 1071.969834][T23894] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1072.209858][T23894] usb 4-1: Using ep0 maxpacket: 32 [ 1072.329870][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1072.499886][T23894] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1072.508914][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.517561][T23894] usb 4-1: Product: syz [ 1072.522060][T23894] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1072.529408][T23894] usb 4-1: SerialNumber: syz [ 1072.570248][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:49:43 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000902240001050000000904000000090581030000000000801fd51dd77fdba172c8b68c03d60a51edc1e6aa5c4ab099b14cac27da87e33ba6df7f224fef6e"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) 21:49:43 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x300000000000000, 0x0, 0x0) 21:49:43 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x10, 0x0, 0x0) 21:49:43 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0xfffffdef, 0x0, 0x0, 0x0) 21:49:43 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x40000000, 0x0, 0x0, 0x0) 21:49:43 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x40047211, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000040)={0x1, 0x1, 0x12}) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) io_uring_enter(r1, 0x5786, 0xf65b, 0xef93eb8b34c4bb76, &(0x7f0000000140)={[0x5]}, 0x8) [ 1072.771040][ T5049] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1072.779593][ T12] usb 4-1: USB disconnect, device number 39 21:49:43 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0xfffffff5, 0x0, 0x0, 0x0) 21:49:43 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x300, 0x0, 0x0) 21:49:43 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x700000000000000, 0x0, 0x0) 21:49:43 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0xeffdffff, 0x0, 0x0, 0x0) 21:49:43 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0xffffffff, 0x0, 0x0, 0x0) 21:49:43 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x3, 0x0, 0x0) [ 1073.269865][ T12] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1073.549877][ T12] usb 4-1: device descriptor read/64, error 18 [ 1073.939906][ T12] usb 4-1: device descriptor read/64, error 18 [ 1074.209868][ T12] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1074.479902][ T12] usb 4-1: device descriptor read/64, error 18 [ 1074.869978][ T12] usb 4-1: device descriptor read/64, error 18 [ 1074.990004][ T12] usb usb4-port1: attempt power cycle [ 1075.709970][ T12] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1075.799991][ T12] usb 4-1: Invalid ep0 maxpacket: 1 21:49:46 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x245, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x2, 0x1, 0x2}}]}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x9) socket$inet_icmp(0x2, 0x2, 0x1) 21:49:46 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x700, 0x0, 0x0) 21:49:46 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x4000000000000000, 0x0, 0x0) 21:49:46 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0xf5ffffff, 0x0, 0x0, 0x0) 21:49:46 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x4, 0x0, 0x0) 21:49:46 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r0, 0x100, 0x70bd2c, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x71f7e6437f9e609c}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffffc}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}}, 0x40804) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r1, 0x40047211, 0x0) 21:49:46 executing program 5: chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x40047211, 0x0) 21:49:46 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x7, 0x0, 0x0) 21:49:46 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x13, 0x2, {0x0, 0x4, 0x7}}, 0x14) ioctl$FITRIM(r0, 0x40047211, 0x0) 21:49:46 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x4000, 0x0, 0x0) 21:49:46 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0xfffffdef, 0x0, 0x0, 0x0) 21:49:46 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x8, 0x0, 0x0) [ 1076.259993][ T12] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1076.349980][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1076.470008][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1076.640041][ T12] usb 4-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40 [ 1076.649108][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.657629][ T12] usb 4-1: Product: syz [ 1076.662037][ T12] usb 4-1: Manufacturer: syz [ 1076.666610][ T12] usb 4-1: SerialNumber: syz [ 1076.710574][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1076.911889][ T12] usb 4-1: USB disconnect, device number 43 [ 1077.689991][ T12] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1077.929966][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1078.050077][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1078.230046][ T12] usb 4-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40 [ 1078.239053][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.247046][ T12] usb 4-1: Product: syz [ 1078.251551][ T12] usb 4-1: Manufacturer: syz [ 1078.256130][ T12] usb 4-1: SerialNumber: syz [ 1078.300493][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:49:49 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000020ef0e0c72400001020301090224000101000000094600000003010000092100000001000000000581030000bf41494add99cec9492b079979b1fe67f7472e31d3999942db8a980dd2443dcaaa5302000000e4a8cd5b7b5f46b9aab131c97c3f45df9c0c6aa5c6e5e83e8ef217eb06c5204681409e38c0e9b05fbed1c70bbd6efd3244a79a2945d747ade78c09626124f45b699054d27f5dec4d99c0e6924d059e00000000000000000000000072b3078ef34c9a3bf6b15a0835be4f63811bbbc9770760d7d1aac3559836ea082f097312a4cb87da9c9b3881858870973c8ab54ce77a8acf957345ee35715b58004a7f199bb8a71447662b0310284a317cd44f1e6958bab790417f65f33b4814bafd0f078c42ba019fe10732f8a2a266bab0f058f70b7d35d6509bb74c6122c5ae111ab6fed3ffbaa4ada5c4edd39895e6458ee3d1913b5e667633e2617388bdc46f36a37f6fe213d6051d8da0bfadb1cdfff8c07602fcebcc5d1c739aeb1d3de51050f48df6c5ece5fe72c7907700486c3e0324068c35139f9016e7ee8d74a3ce2b1d55ed500794356e83e2ca3497a8787eba38009e"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x401}}]}) 21:49:49 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0xffffffff00000000, 0x0, 0x0) 21:49:49 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x10, 0x0, 0x0) 21:49:49 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0xa1b, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) accept4(r0, &(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f00000001c0)=0x80, 0x800) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000140)=0x1) r1 = fsmount(r0, 0x0, 0x70) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/schedstat\x00', 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x220212, 0x4) r4 = dup2(r3, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c02200065c6aad790ab4cd8ba14000000000000000000", @ANYRES16=r5, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="08062bbb7000fe00000008003a0009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000090}, 0x840) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1c, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x8010) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="97738377060000002d57e19c61ea2d0c493488becb0558b8db02f411f7706fb2acff2d2e7a311e9bf1a44b54dd149e74c28188d9cc657d28859a07000000000000003a12370235e0d24e2c", @ANYRES16=r5, @ANYBLOB="00022abd7000fddbdf25110000000600280000000000080034007975000006002800030000000500380000000000"], 0x34}}, 0x4008040) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r5, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x20044010) ioctl$FITRIM(r0, 0x40047211, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000100)) 21:49:49 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x800000, 0x0, 0x0) 21:49:49 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0xfffffff5, 0x0, 0x0, 0x0) [ 1078.501053][ T12] usb 4-1: USB disconnect, device number 44 21:49:49 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0xf5, 0x0, 0x0) [ 1078.552498][ T5186] FAT-fs (loop5): bogus number of FAT structure [ 1078.559113][ T5186] FAT-fs (loop5): Can't find a valid FAT filesystem 21:49:49 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x182) ioctl$FITRIM(r0, 0x40047211, 0x0) 21:49:49 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x1000000, 0x0, 0x0) 21:49:49 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x3) 21:49:49 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0xffffffff, 0x0, 0x0, 0x0) 21:49:49 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x40047211, 0x0) timer_create(0x4, &(0x7f0000000040)={0x0, 0x13, 0x0, @thr={&(0x7f0000000100)="67b425654df62e7f3ea6f54483d0cd07e987c9091f9127af990e982955ac1a895c0c7b9f32224568918d9c53b8fb765588ee4dc27af5d00002a2e75523a2db4da890f432dc7c976bf9e4b32dc5a80bc3eb032c1af37782f2909095cb9904491f477e7488d5c3c0e738230b99f9c1fb95fc90f00249f8f39dcff9dd0a25219d19ec2a1abad1c6316c2096c26c93b27ffba8975e93d2195c9ff37a27098f41e9e2e9aee55119342ecd00c1", &(0x7f00000001c0)="ca997c02ebdcf9491b3d1dd50fc2dba0d4ddea2d43781128354ea227ec7dadc8371d51a834927025cfe9f03c6f2bd9d0c708edd0fd6af2e1ded2b5c9f050fbbfa40caa8bb2f802db86c7afb6555ecf30a97db2205d438668111f4bb5e6b8"}}, &(0x7f0000000240)) [ 1078.910065][ T12] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1079.160062][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1079.280048][ T12] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.290129][ T12] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1079.450069][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1079.459109][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.467136][ T12] usb 4-1: Product: syz [ 1079.471320][ T12] usb 4-1: Manufacturer: Ё [ 1079.475806][ T12] usb 4-1: SerialNumber: syz [ 1079.721120][T23894] usb 4-1: USB disconnect, device number 45 [ 1080.490048][T23894] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1080.730069][T23894] usb 4-1: Using ep0 maxpacket: 32 [ 1080.850157][T23894] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.860248][T23894] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1081.020178][T23894] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1081.029244][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.037239][T23894] usb 4-1: Product: syz [ 1081.041452][T23894] usb 4-1: Manufacturer: Ё [ 1081.046027][T23894] usb 4-1: SerialNumber: syz 21:49:51 executing program 3: syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000040)=@lang_id={0x4}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3401}}]}) 21:49:51 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x300, 0x0, 0x0) 21:49:51 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000880)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x14, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xffffffff}}, @IFA_LOCAL={0x14, 0x2, @loopback={0xd00000000000000}}]}, 0x40}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000100)={'sit0\x00', r2, 0x4, 0x1f, 0x0, 0x3, 0x1, @loopback, @loopback, 0x8000, 0x20, 0x8, 0x10000}}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r3, 0x40047211, 0x0) 21:49:51 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x7) 21:49:51 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x3, 0x0, 0x0) 21:49:51 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x3000000, 0x0, 0x0) [ 1081.290526][ T12] usb 4-1: USB disconnect, device number 46 21:49:52 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x700, 0x0, 0x0) [ 1081.334595][ T5251] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 21:49:52 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x4, 0x0, 0x0) 21:49:52 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x7000000, 0x0, 0x0) 21:49:52 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x4000, 0x0, 0x0) 21:49:52 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x300) 21:49:52 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f0000000100)='./file1/file0\x00', 0xfbffffff, 0x1c, &(0x7f0000000080), 0x20004, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000040)) ioctl$FITRIM(r0, 0x40047211, 0x0) [ 1081.418034][ T5270] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 21:49:52 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0xf5ff, 0x0, 0x0) 21:49:52 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x7, 0x4) syz_emit_ethernet(0x15, &(0x7f0000000280)=ANY=[], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') ioctl$FITRIM(0xffffffffffffffff, 0x40047211, 0x0) 21:49:52 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000040)=ANY=[@ANYBLOB="1e03a3862106b071c30c063e815a3571e800000000000000000000000000e4bb48d63b02f80f5512b3d119246d58c14bc7f5a0dbdb918e863818bd55a7347b5642342898f1bb142db948e558d31f27fc1f90ec1dc331afb4974cf4bdc33e0fd179"]}]}) 21:49:52 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x7, 0x0, 0x0) 21:49:52 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x700) 21:49:52 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x10000000, 0x0, 0x0) 21:49:52 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0xfff5, 0x0, 0x0) 21:49:52 executing program 5: r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getpeername(r0, &(0x7f0000000100)=@qipcrtr, &(0x7f0000000180)=0x80) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r1, 0x40047211, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1b) 21:49:52 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x4000) 21:49:52 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x80000, 0x0, 0x0) 21:49:52 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x8, 0x0, 0x0) 21:49:52 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x40000000, 0x0, 0x0) 21:49:52 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x800000, 0x0, 0x0) 21:49:52 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x800000) [ 1082.150137][ T12] usb 4-1: new high-speed USB device number 47 using dummy_hcd 21:49:52 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0xeffdffff, 0x0, 0x0) [ 1082.390119][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1082.510146][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1082.680165][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1082.689215][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.697212][ T12] usb 4-1: Product: syz [ 1082.701457][ T12] usb 4-1: Manufacturer: 蚣ء熰ೃ㸆媁焵è [ 1082.707771][ T12] usb 4-1: SerialNumber: syz [ 1082.750647][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1082.951420][ T12] usb 4-1: USB disconnect, device number 47 [ 1083.720169][ T12] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1083.960165][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1084.080194][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1084.250203][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1084.259215][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.267197][ T12] usb 4-1: Product: syz [ 1084.271370][ T12] usb 4-1: Manufacturer: 蚣ء熰ೃ㸆媁焵è [ 1084.277606][ T12] usb 4-1: SerialNumber: syz [ 1084.320648][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:49:55 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x1000000, 0x0, 0x0) 21:49:55 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x10, 0x0, 0x0) 21:49:55 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x1000000) 21:49:55 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0xfffffdef, 0x0, 0x0) 21:49:55 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r0, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="2e03af862206d19409ff668382f1286d3c3f9d4cffe171a672e057dfb982acfa19b7d1357ca3e84d0d6ddf590000"]}]}) ioprio_get$pid(0x2, 0xffffffffffffffff) 21:49:55 executing program 5: r0 = syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17, 0x2000000000000}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x6, 0x3, 0x2, 0x3, 0x572, 0x9, {0x1, 0x80000001, 0x6, 0x1000, 0x6, 0x4, 0x0, 0x2, 0xf9, 0x6000, 0x4, 0xee00, 0x0, 0x80, 0x1}}, {0x0, 0x4}}}, 0xa0) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x4d, 0x0, 0x3f, "1afb32da2f0ad332e3d738919e6ba247", "923bccc679c522e3a924d70fc809090500190bf11070b9ca8e573657f8537ee8e3df5e313804b297d32378e005bd8c167959bdab582dccff"}, 0x4d, 0x2) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000100)=""/184) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ttyS3\x00', 0x200000, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000380)={0x1, 0x0, 0xd, 0x9, 0xdb, &(0x7f00000006c0)}) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000340)) r3 = open_tree(r0, &(0x7f0000000040)='./bus\x00', 0x900) ioctl$TIOCSIG(r1, 0x40045436, 0x1e) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000b00)=ANY=[@ANYBLOB="ffffffff0000000002004e206401010200000000000000000000000000000000000000000000a9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000020036c34e22ac14143b00000000007ce7f401e25de6fb7c16203a8eb674160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ac1414bb0000000000000000000082862f8efdcca0dee925e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e226401010200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000ba6b239ef5969a6600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011bbadf272435e9a9bbd469380b65aa024abe0ecdaa6cf9361dd934a4b2a300e0cd24145d1246446344ae7cb06f4ff800a611a25e728fdbcc183580bea9ad790148d4cf73e39a04061c3b114cb12315503dba94d5519"], 0x290) ioctl$FITRIM(r1, 0x40047211, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000080)={0x6, 'vlan1\x00', {0x7}, 0x6}) [ 1084.520616][ T12] usb 4-1: USB disconnect, device number 48 21:49:55 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0xa7b, 0x800) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000100)=0x7f, 0x4) r2 = socket$inet(0x2, 0x800, 0x7) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000140)=0x4) ioctl$FITRIM(r1, 0x40047211, 0x0) 21:49:55 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x3000000, 0x0, 0x0) [ 1084.562763][ T5385] FAT-fs (loop5): bogus number of reserved sectors [ 1084.569421][ T5385] FAT-fs (loop5): Can't find a valid FAT filesystem 21:49:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') fstat(r0, &(0x7f0000000080)) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r1, 0x40047211, 0x0) 21:49:55 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x3000000) 21:49:55 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x10000000000, 0x0, 0x0) 21:49:55 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0xf5, 0x0, 0x0) 21:49:55 executing program 5: r0 = syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002680)=[{{&(0x7f0000000ac0)=@ax25={{0x3, @rose}, [@netrom, @netrom, @bcast, @bcast, @null, @default, @remote, @bcast]}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {&(0x7f0000000c40)=""/90, 0x5a}, {&(0x7f0000000580)=""/125, 0x7d}], 0x4, &(0x7f0000000540)=""/46, 0x2e}, 0x5}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000640)=""/152, 0x98}, {&(0x7f00000004c0)=""/118, 0x76}], 0x2, &(0x7f0000000340)=""/27, 0x1b}, 0xdd7}, {{&(0x7f0000000700)=@x25={0x9, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000800)=""/109, 0x6d}, 0x2}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f0000001200)=""/167, 0xa7}, {&(0x7f00000007c0)=""/44, 0x2c}, {&(0x7f0000000c00)=""/59, 0x3b}], 0x4}}], 0x4, 0x22, 0x0) r2 = open_tree(r0, &(0x7f0000000040)='./bus\x00', 0x900) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000900)={{r2}, "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"}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x8, 0x24, 0x8, 0x0, 0x0, 0x0, "9c"}, @extension_unit={0xb, 0x24, 0x8, 0x0, 0x0, 0x0, "5098c303"}, @extension_unit={0x7}, @feature_unit={0xb, 0x24, 0x6, 0x0, 0x0, 0x2, [0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) ioctl$FITRIM(r3, 0x40047211, 0x0) 21:49:55 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x4000000, 0x0, 0x0) 21:49:55 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x7000000, 0x0, 0x0) 21:49:55 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x300, 0x0, 0x0) [ 1085.100177][ T88] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1085.107899][ T12] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1085.340208][ T88] usb 6-1: Using ep0 maxpacket: 8 [ 1085.390207][ T12] usb 4-1: device descriptor read/64, error 18 [ 1085.470254][ T88] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1085.481004][ T88] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1085.490673][ T88] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1085.501536][ T88] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1085.670260][ T88] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1085.679291][ T88] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.687947][ T88] usb 6-1: Product: syz [ 1085.692412][ T88] usb 6-1: Manufacturer: syz [ 1085.696993][ T88] usb 6-1: SerialNumber: syz [ 1085.780292][ T12] usb 4-1: device descriptor read/64, error 18 [ 1086.050204][ T12] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1086.320247][ T12] usb 4-1: device descriptor read/64, error 18 [ 1086.710259][ T12] usb 4-1: device descriptor read/64, error 18 [ 1086.830266][ T12] usb usb4-port1: attempt power cycle 21:49:58 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000100)=""/85) 21:49:58 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x1000000000000, 0x0, 0x0) 21:49:58 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x7000000) 21:49:58 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x8000000, 0x0, 0x0) 21:49:58 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x700, 0x0, 0x0) [ 1087.540229][ T12] usb 4-1: new high-speed USB device number 51 using dummy_hcd 21:49:58 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x10000000, 0x0, 0x0) [ 1087.650271][ T12] usb 4-1: device descriptor read/8, error -71 21:49:58 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x40000000) 21:49:58 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x1f00, 0x0, 0x0) 21:49:58 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x80000000000000, 0x0, 0x0) 21:49:58 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x40000000, 0x0, 0x0) 21:49:58 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0xeffdffff, 0x0, 0x0) 21:49:58 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x10000000000) [ 1087.848182][ T88] usb 6-1: USB disconnect, device number 10 [ 1087.861498][ T12] usb 4-1: device descriptor read/8, error -71 [ 1088.350352][ T12] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1088.440324][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1088.560313][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1088.740335][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1088.749342][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.757343][ T12] usb 4-1: Product: syz [ 1088.761535][ T12] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1088.768883][ T12] usb 4-1: SerialNumber: syz [ 1088.810742][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1089.011997][ T12] usb 4-1: USB disconnect, device number 52 [ 1089.780325][ T12] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1090.020324][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1090.140333][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1090.310377][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1090.319382][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.327383][ T12] usb 4-1: Product: syz [ 1090.331567][ T12] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1090.339698][ T12] usb 4-1: SerialNumber: syz [ 1090.390814][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:50:01 executing program 3: bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x8000) write$P9_RLOPEN(r0, &(0x7f0000000180)={0x18, 0xd, 0x1, {{0x8, 0x2, 0x3}, 0x40}}, 0x18) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000100)=ANY=[@ANYBLOB="0700000000fb6a59b23143687e51ac620c063f860b07fd09246f2a9cd47e", @ANYRES64=0x0]}]}) 21:50:01 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x100000000000000, 0x0, 0x0) 21:50:01 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x4000, 0x0, 0x0) 21:50:01 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0xf5ffffff, 0x0, 0x0) 21:50:01 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x30) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x4404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup3(r2, r3, 0x80000) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x44, r5, 0x8, 0x70bd26, 0x25dfdbff, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0xec, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040001) ioctl$FITRIM(r0, 0x40047211, 0x0) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './bus/file0', [{}, {}], 0xa, "f2846d55194f70dbb585c03aab879930f424f5a1a6ea98ad05e4353ba47bf9f36868bb35d8c287523f52a769f645a8a405e8fe78fba1521d666ef273ed327ccac60877812f8505919af3b7b9a4e662b7dac9691c8e6d7711082875cb0a95c87106ac35440b557ca568c54158ff7c66735fe4d8bc24859997abec920eef422e10b0c6d4f417f91113bb779caffd91daa3e0673876b87edb20b4375aadc7f1d0915eb78861b9335c432488926b9d24e711a5"}, 0xc2) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e23, 0x0, @local, 0x58b80811}, {0xa, 0x4e20, 0x0, @empty, 0x1}, 0x6fe8, [0x5, 0x6, 0x0, 0xf8, 0x3, 0x1, 0x3ff, 0x1000000]}, 0x5c) 21:50:01 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x80000000000000) [ 1090.591178][ T12] usb 4-1: USB disconnect, device number 53 21:50:01 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r1, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x2000000, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES64]) chdir(&(0x7f0000000000)='./file1\x00') r2 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r2, 0x40047211, 0x0) 21:50:01 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0xfffffdef, 0x0, 0x0) 21:50:01 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0xf5ff, 0x0, 0x0) 21:50:01 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x300000000000000, 0x0, 0x0) 21:50:01 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x100000000000000) 21:50:01 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0xfffffff5, 0x0, 0x0) [ 1090.795868][ T5556] FAT-fs (loop5): Unrecognized mount option "" or missing value [ 1091.040401][ T12] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1091.280427][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1091.400382][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1091.482511][ T5556] FAT-fs (loop5): Unrecognized mount option "" or missing value [ 1091.770394][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1091.779446][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.787463][ T12] usb 4-1: Product: syz [ 1091.791676][ T12] usb 4-1: SerialNumber: syz [ 1091.830814][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1092.031611][ T12] usb 4-1: USB disconnect, device number 54 21:50:03 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x44a}}, {0x1e, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf590045401c7c9d6801e80566656dc0304bc4ead2d3de71b6042ffcda00006b10878b7a2f7e4967d38fe7ef2a8f05484ed845070255a571ec845ae73361a020d4d631540b2ef29cc3bfc8cb2cddff16b4244431c281c91d903c8ef68cee5d8db71331e1783225665776e9692c23607670028aae42be20049ddce2ee78720e20774343908b701fdabe6ccbefb4f63b140eba30116fc9cc21d35c83b71503f8a42aecb07ee2325bde37f71b511daf7651a335f270c89f69a3eeed1bb439f57d361c2e90e9dd"]}]}) 21:50:03 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0xfff5, 0x0, 0x0) 21:50:03 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x10000000000, 0x0, 0x0) 21:50:03 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x700000000000000, 0x0, 0x0) 21:50:03 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x300000000000000) 21:50:03 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000040)='./file1\x00', 0x6042, 0x20) ioctl$FITRIM(r0, 0x40047211, 0x0) 21:50:03 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000100)={0x7, 'veth0_to_bridge\x00', {0x3}, 0x6}) ioctl$FITRIM(r0, 0x40047211, 0x0) 21:50:03 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@private, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000880)={'ip_vti0\x00', &(0x7f0000000800)={'syztnl1\x00', r1, 0x1, 0x708, 0x0, 0xabd, {{0x15, 0x4, 0x2, 0x1b, 0x54, 0x65, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @loopback, {[@cipso={0x86, 0x3f, 0xffffffffffffffff, [{0x2, 0x2}, {0x5, 0xf, "a32880cee80da14eed6a8765f2"}, {0x1, 0x11, "7ab7b103393d07d6cc9e59ebcc6a2d"}, {0xf, 0x4, "b905"}, {0x68fddde97fedbe42, 0x4, 'e>'}, {0x0, 0xf, "40446e8605ee5633aa3a3628ae"}]}]}}}}}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x3) ioctl$FITRIM(r0, 0x40047211, 0x0) 21:50:03 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x8000000000000, 0x0, 0x0) 21:50:03 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x80000, 0x0, 0x0) 21:50:03 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x700000000000000) 21:50:03 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x1000000000000000, 0x0, 0x0) [ 1092.840367][ T12] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1093.100373][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1093.220477][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1093.390427][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1093.399449][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.407834][ T12] usb 4-1: Product: syz [ 1093.412124][ T12] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1093.419492][ T12] usb 4-1: SerialNumber: syz [ 1093.460904][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1093.661592][ T12] usb 4-1: USB disconnect, device number 55 [ 1094.430473][ T12] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1094.670437][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1094.790490][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1094.960475][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1094.969489][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.977549][ T12] usb 4-1: Product: syz [ 1094.981722][ T12] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1094.989092][ T12] usb 4-1: SerialNumber: syz [ 1095.030879][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:50:05 executing program 3: lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000300)={0x0, 0xfb, 0x7d, 0x0, 0x0, "eabfc4548c1501c87bdafdfc9a43f4e2", "0991e1f9b80820800e2f3c93bc008edc009451d6c049f7026ccc1d95a236233dfff0eea0a0573177a89056e4666550b86c3a875ded04ff4f208d9f0a08cc3fe03c0113940749ff6253d0f2e6e164420115ed5797b8098e3ce0fefef5d6321bd828b13e32df1cc5db"}, 0x7d, 0x3) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x3c01}}, {0x55, &(0x7f0000000180)=@string={0x55, 0x3, "b835a30840a08395f5337170556f0e034335a050220c9681c2af3dfb02f8fd6d7134d97ec5a21d18eb6fe48bb940a8cffaddfa803f9f07f9135b60deb565059943086c2ebc15aa6f8836d9438616f004cf47fd"}}, {0x100, &(0x7f0000000200)=@string={0x100, 0x3, "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"}}]}) 21:50:05 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x80000000000000, 0x0, 0x0) 21:50:05 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40090}, 0x2000c001) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./bus\x00', r0) chdir(&(0x7f0000000000)='./file1\x00') r2 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$FITRIM(r2, 0x40047211, 0x0) r3 = syz_open_dev$rtc(&(0x7f0000000280)='/dev/rtc#\x00', 0x8, 0x200000) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f0000000300)) 21:50:05 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x800000, 0x0, 0x0) 21:50:05 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x4000000000000000, 0x0, 0x0) 21:50:05 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x4000000000000000) [ 1095.230909][T23894] usb 4-1: USB disconnect, device number 56 21:50:06 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x100000000000000, 0x0, 0x0) 21:50:06 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x1000000, 0x0, 0x0) 21:50:06 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0xffffffff00000000) 21:50:06 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x8000000000000000, 0x0, 0x0) 21:50:06 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x300000000000000, 0x0, 0x0) 21:50:06 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x400000000000000, 0x0, 0x0) [ 1095.631355][T23894] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 1095.990498][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1096.170492][T23894] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1096.179536][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.187568][T23894] usb 4-1: Manufacturer: 㖸ࢣꁀ閃㏵灱潕̎㕃傠ఢ膖꿂﬽淽㑱给ꋅ᠝濫诤䂹쾨胺鼿龜嬓斵餅ࡃ⹬ᖼ澪㚈䏙ᚆӰ䟏 [ 1096.201966][T23894] usb 4-1: SerialNumber: syz [ 1096.251047][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1096.451494][T23894] usb 4-1: USB disconnect, device number 57 21:50:07 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000140020ef0e0c7240006b810203010902240001010000330904000000ad0100000921bbc1715300000001220000090581037c66b62e9026c1a6314014f22bb2b72be054807bf5e865e83636f4d88e6f5f277bbdd75d4655a99776b7f77cdae2fce61dc46a6f975ebda163897a5ef9a94e"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) r0 = getpid() ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000040)={0x3f, 0xae64, 0x8000}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e9340000000104010400000000000000000000000a0800030700007fff080005400000000208000340000000f10600064000030000"], 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x600040e0) 21:50:07 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x3000000, 0x0, 0x0) 21:50:07 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0xeffdffff00000000, 0x0, 0x0) 21:50:07 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x100, 0x70bd25, 0x4}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r4, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x2, 0x10001, 0x6, 0xfffe}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10000000}, 0x20040800) r5 = accept$inet6(r1, 0x0, &(0x7f0000000380)) setsockopt$inet6_MCAST_LEAVE_GROUP(r5, 0x29, 0x2d, &(0x7f00000003c0)={0xffff3b99, {{0xa, 0x4e21, 0xfff, @private2, 0xae7}}}, 0x88) r6 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) splice(r1, &(0x7f0000000300)=0x9, 0xffffffffffffffff, &(0x7f0000000340)=0xf45, 0x9, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r6, 0x3f, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)=0x0) ptrace$peeksig(0x4209, r11, &(0x7f00000001c0)={0x7, 0x1, 0x2}, &(0x7f0000000200)=[{}, {}]) 21:50:07 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x700000000000000, 0x0, 0x0) 21:50:07 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x40047211, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x1c, 0x3, 0x18b, &(0x7f0000000400)="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"}) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x464, 0x400, 0x70bd25, 0x25dfdbff, "cc06e3b00e449d664bdfd223", ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) 21:50:07 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) sendmmsg(0xffffffffffffffff, &(0x7f0000001000)=[{{&(0x7f0000000340)=@xdp={0x2c, 0x4, 0x0, 0xa}, 0x80, &(0x7f0000000740)=[{&(0x7f00000004c0)="3bf21ff7b5d194e75abd26555972421a5d9ff2a6f25840858a603a6e03d1c40b0501d4aaaaffb27c28a6a8833d867b8673de9a116f696c1037c6c3acc02d14defde28399e345ae653d1d8106ef8decf4ea82eb62b489619223588450aa7e9c483918f97f347e98034b4b5e0f3f17a53252617d06e9d399a99b5e7cb79a62c684bf447787e1", 0x85}, {&(0x7f0000000440)="9b34d278f269911f0cc22f9d8fda90ac961f0d89912783d8a609fe5c1764238cdd2c782a529752f9c528ae39d1b1a19c09fbe62dfb751c", 0x37}, {&(0x7f0000000580)="0259d05280be66498d32ba5d59660dfd9f4b38ab9a7aab36e3a48a4937f054f58c5f30cf4f46e36c5951dee68082bc23c7223a7582f7aeb4786d2246c2f780b4483d40f98fdf1c0ebf611ccefa00120ea75087304203e9a4858c31d3b5b889e4e26bec8ae8f5ef76eb95f3499e9847fc1768", 0x72}, {&(0x7f0000000640)="4c771162a6781a94989030fcc0c02a8258ff0e546dd88bd2b7ed007a0315c954066c71ea4e67f1d009a86665fcf93850d65446a15aacf65e85dddaab04d03c2785f6aa061affa941c56f93bf3a601d5712996f3a694ccbf562878e23a10ba5f6679a3ad7f771053e2e8ea6c4498587a9cd71a676a1ad9383a9b4403e2111d9ad064c823dda5bec843590f6e769ab35b79578f63f6b92e1963d69761aa35b4290c8ecd3ae1e797a5bc6ee8c7c8b1fe60bcd03b0e71d3d634d6a236c2a0f41987ec1579bdb1e6b203486f6f42986c4b38d0b5cce8e0ec9887878982099b07dab239584db4a3e987943836406a29923dece5dfb2e39b5cfe3", 0xf7}], 0x4, &(0x7f0000002040)=[{0x1010, 0x102, 0x7, "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"}, {0x78, 0x29, 0x5, "5b04baf3af54830798a98f78c2f886d3e045a30f3538c03de67a12687073bed3ebbe56034c9152ddd948657f3ccc79f186bdd7133783ecf53b28da19122bec58d6aad5a330f46b7f7242aa7d83247803f846fbb536c3bc111348198b88d31d05119d2d0131b0"}, {0x90, 0x116, 0x8001, "e57f14d67c9d95d7d9d5e31d9cd9991d1dc9653cfe8a7643015b43b40cf490aeb8012241914e55f6d4d8a4a91654cbe9e52fb5a9c1ceaaaa7cb3dc8f3e0d6a62ec51159f6b5a093b6a299dbf3e9069dbb069c9445cd30ff8104f56b237dc97c303794d9231a3ecab9d9d8437d727a3a98889134ca08c6d18506198"}, {0x20, 0x1, 0x600, "2c1855aa4e52198dac62"}], 0x1138}}, {{&(0x7f00000007c0)=@nfc_llcp={0x27, 0x1, 0x1, 0x1, 0x96, 0xc4, "f9f02fe19669c651d6c36ae20ecacda6b05068e04b202f42bef2105b4d8f60e76355b0f5956c9cada0f96bc78ea11815cbf938b48db1d2b457b8d86f03a64d", 0x30}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000840)="6be1d0b11e1a6393293aaa", 0xb}, {&(0x7f0000000880)="e11112a6b87c21672079cc7494b6a632c80384265949aed7c64533c7d1a62c2b53b878086e8bf4f04850feb06c29ccb7c77140a08a52979d9bc0875e77f7688d81887bc30fd74122d7f2dae67299e987b5cd18827f25bcbb543173a69848630e0ad20b742bd02f012b2644", 0x6b}, {&(0x7f0000000900)="2c8a8063659a9e9a3b26d043c17642703f4151fab0f35fcf5a298334cd737d2a0fa148bf58515331885da613169ead2d07305a099b74f97246eaebe40488b721ba91cce4b6864b5d05e868fb5c7cb874102ff340586c436403f6fd34e7ebd8659910", 0x62}, {&(0x7f0000000980)="b54edc06264f806617509a27905cf57c7260373190d8c37f0c95d354e1", 0x1d}, {&(0x7f00000009c0)="15557eb9b691761dc153901cd49e335e48bb18179e57300c1bc167ba84a265fe08e1e1563b794b65254b3f8c4a63bd6e04989bf42c5aeabd36c017a2e1621675891cb7a480791c6d03c20a56cde8775137d023fd8652f206f780f2dde7a158051858e7b11705f48eb4808fb6b2edf2cca2f8c22717ff083d", 0x78}, {&(0x7f0000000a40)="0064314c6359c922a507a6d53d990e9a475c402a2433444916ee036082cfe0a45c9056f1660bfc9a3984c743725edc58db786b8c1c2c614b41d7b3584bf2367131817eed3b3f60", 0x47}, {&(0x7f0000000ac0)="6f23bb2c2b60aa44a5188542f364ad6680a0d3704383e92340f0ca0177707d58a04b86017984c88026befcf7c431012563902cd63eb129c631d490e3c80826025ba1754d5f0173ba40efe0b11ace3eb3a6c058b32a1ae1f39708166d1288bec7efc010583bf0aa7876b2c04b9842c8b9902a40fb92e8ec2d43ce85fda5b0b1bf26929e4be793ccfa9a3b86793069d7a8de66853fc9925cf9d9545921e9ef3d61197c2db1d9f15ebff9b3febe94794ed190d269226a27c27fb6711825eca799ed5c32cf0e0f6373531da954d2e5be12ee58a486aac2da510ecd80caaf86dbe7b2af8abefa", 0xe4}, {&(0x7f0000000bc0)="de19d2b475e33dbc1076a12ae4f7c6e09046830e9c511d06960927ffe33b997f3c538961670f90a73b0ab3666c8e57eb2a", 0x31}, {&(0x7f0000000c00)="24dc2f8b7eaa421615e082c53a1df1e329d0d199018c6ebf032b8925103f7e1050294c8fa738792eda0446e284d0cd498a560ff312e65f2a2c6f1a933f9ff6752c0f20b7a7ae023c10283b4ad534ef755ad1167ebbfbd7ace9bdd501c76d94680e289e69173af7419195b9784822c041e535d7418982a69e331e3c75b6891350dcf8e920681efb28d8d0e667fa2d379c143a008d94912697ee1993750024f7bce09febb4c81df6f7b461f771253d2576b1c1", 0xb2}, {&(0x7f0000000cc0)="d71a699026b144d66a9333718a893e8c0ac6a748b419a83a861fb89bd283623aa5b6813feda530d2361eea0c5c9454c2050455aa74ae78cd831226075e7834059e478f362b3bfeb188b6e32b89b5974d11484c7507d5b32b55cb3ef66df31e8edf2d12f7b93d131c2b84fddfc40a556044ffcc9c5c0602909c5caa719c6a244200846c644b36c761710b0caa3066f36235a28b558d195e385724396891bc87374882738094115e8bc5fef1ecca4f6e1f0782d8256d855527856a8b2c4029c3cca867ce8043be7fa91db3a30aee5cd99c2bf7f4fe3591f6b5a56ac56bab379cc72977af52f3b2d9fe0343a5af9cf8c77c54a27fd2", 0xf4}], 0xa, &(0x7f0000000e80)=[{0x108, 0x10b, 0x4, "5df1899c4d24b5f4c2221c6172a0fa8776655123f3abde11f10c63da62311df38f0671db1112818ee041a18a0fe47cb6d2675b304b642a8635dc7f86ab66e5956e26c0d2362d2f3f9b3712aef86690386e569f999e8f1b5add89c8ea9ca3f0f197f20e5059e481ac1f7ac4d255a6cd199d27da40eb1b2ceedff9e01d811acc016fe4c3623d974814abf8fc8ea3012d6aff68a7fdcb721aead3721c3ad7a1fe159c0f1aac78440543094816981c3b327a5f985402594c7c7ca928c2be6350fb8dc68603ae939695a695bab478cfd0fc45d642d2c625424f76663df919e16ec0fc55246319c8d095ac1b96d48c62de4bc96687"}, {0x68, 0x109, 0x2311, "008c3da8e08b79801bf46bf28c80df3c34ef87431496477535a758f3a3fb22a026a9848d98aa35f262cd044dfacb50181b68d657420b3fb92bf47ba218a476a34dc081efa64b892142157c6a3b7383db8c2388"}], 0x170}}], 0x2, 0x4044881) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x402001, 0xac) r1 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r1, 0x40047211, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x22, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000300)='wg1\x00', 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8) writev(r2, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="f15c93cb35c215fe339d1e9060c5b23e77cb58a87329a00288504db389cc6e395885fa906ac30eeae99fa388c31b5717e641e1586a90961b5f99b26c939d944f6cb1cf6817b7e51402a8459f9db642e97d3c05db56250a665d3ff188eb47e5b036d508aa5a5796fb8806b6a41487e0bfc3df087c18269bd7d2f477104c5d5db497ceaf3e1b11a5d63a2b7035dc69fa701f3b46fe701880800a7d38dccd4b3e8014aa15c96968359533ce2c5ffdd5f0d3297018bd7c025150940cdead92eb1e6bc6ba45eecf067b32425b6000b2f376ef9172426ae7fa97e5a84ef4dc540bbf5dd458ffcb75724135bd32fa04db6d6a75aedda7ab6e8501fc94e209dc3b2525ae24c954255d3247ca9c1b9525ce68179a52a87333aa2b0a8c1baa6ba6160c6d2018e67bac5402d0d89c5f798b8d1a87b0dc3306f546c61724530d9f4b6f0ee68677c7b261de5afa02d708a8ec979791de8f4831cc354ba453bc253e2435207f25494a594d4e5be39902358d362cb318ad965b7e7480a5ca5b6fe74e101c400c77392ee4419ad788f494230487811046f21f0f9665dfbaa9e94ed305a02e3fa47039e67dde19f89c8f1741aad752cdfe458ddf54e8fc10ff79b5", 0x1b9}], 0x3) sendto$inet(r2, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r2) 21:50:07 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f00000000c0)=0xe8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:07 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x800000000000000, 0x0, 0x0) 21:50:07 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x4000000, 0x0, 0x0) 21:50:07 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0xffffffff00000000, 0x0, 0x0) 21:50:07 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x1000000000000000, 0x0, 0x0) [ 1097.270523][ T12] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1097.520499][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1097.680566][ T12] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1097.688122][ T12] usb 4-1: can't read configurations, error -61 [ 1097.819484][ T5734] FAT-fs (loop5): Unrecognized mount option ";єZ&UYrB]X@`:n Ԫ|(={sޚoil7ì-⃙Ee=ba#XP~H94~KK^?2Ra}ә^|bƄDw" or missing value [ 1097.840864][ T12] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1098.080535][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1098.240574][ T12] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1098.248129][ T12] usb 4-1: can't read configurations, error -61 [ 1098.255275][ T12] usb usb4-port1: attempt power cycle [ 1098.970531][ T12] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1099.060590][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1099.230526][ T12] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1099.238168][ T12] usb 4-1: can't read configurations, error -61 [ 1099.390548][ T12] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1099.490636][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1099.650564][ T12] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1099.658464][ T12] usb 4-1: can't read configurations, error -61 [ 1099.665367][ T12] usb usb4-port1: unable to enumerate USB device 21:50:10 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ef0e0c72400001020301090224000101000000090400000003010000092100000001220000090581030000682f00"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) getuid() 21:50:10 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x8}) 21:50:10 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x4000000000000000, 0x0, 0x0) 21:50:10 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x7000000, 0x0, 0x0) 21:50:10 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x3) 21:50:10 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U+', 0x80000000}, 0x16, 0x2) ioctl$FITRIM(r0, 0x40047211, 0x0) 21:50:10 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x4e4a01, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000140)) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000100)) r2 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r2, 0x40047211, 0x0) 21:50:10 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0xeffdffff00000000, 0x0, 0x0) 21:50:10 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x8000000, 0x0, 0x0) 21:50:10 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x7) 21:50:10 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0xf5ffffffffffffff, 0x0, 0x0) 21:50:10 executing program 1: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = syz_io_uring_setup(0x4e6a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0xb4, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r5 = pidfd_open(0xffffffffffffffff, 0x0) pwrite64(r5, &(0x7f00000001c0)="634c5c4a1b4826ef1469a1e91fcae7c2c704aff59ca4913748e7481739c62211fe34071b0625dd43de9b19a5ae76777dedb2d310fbbebb4177ca78861ee18c57246a6dff323d98e90cc9778651a7c7f70f2a769f971974e1cdf006d593b5b68e05570e8c250ff9035b3935a272afbab5ddf92f34f256fd94947f25b2939eefce0474e4c703bbac65b1f6563b520dbc392164ac5abee008768bcf1f5d3cd457f23f28952d6157a90c02d9510f3134c4a99f27c062213de567306bb457cd1f3f6d2294e8c3243771acaf68", 0xca, 0xffffffffffff7008) r6 = socket$packet(0x11, 0x2, 0x300) r7 = dup(r6) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PPPIOCDISCONN(r8, 0x7439) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x7}, 0x6) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1100.450577][T23894] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1100.690561][T23894] usb 4-1: Using ep0 maxpacket: 32 [ 1100.810620][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1100.980682][T23894] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1100.989854][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.997874][T23894] usb 4-1: Product: syz [ 1101.002183][T23894] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1101.009586][T23894] usb 4-1: SerialNumber: syz [ 1101.052600][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1101.252803][T23894] usb 4-1: USB disconnect, device number 62 [ 1102.020588][T23894] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1102.270608][T23894] usb 4-1: Using ep0 maxpacket: 32 [ 1102.390646][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1102.560731][T23894] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1102.569745][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.577823][T23894] usb 4-1: Product: syz [ 1102.581995][T23894] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1102.589343][T23894] usb 4-1: SerialNumber: syz [ 1102.631033][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:50:13 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x3ad9) 21:50:13 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0xfffffffffffffff5, 0x0, 0x0) 21:50:13 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x10) 21:50:13 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x10000000, 0x0, 0x0) 21:50:13 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17, 0x2}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x40047211, 0x0) 21:50:13 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f00000001c0)={r0, r1+10000000}, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) r4 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r7 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) write$P9_RREADDIR(r8, &(0x7f0000000240)={0x87, 0x29, 0x1, {0x1, [{{0x0, 0x4, 0x3}, 0x3ff, 0x5, 0x7, './file0'}, {{0x1, 0x0, 0x7}, 0x8, 0x27, 0x7, './file0'}, {{0x0, 0x4, 0x3}, 0x6, 0xff, 0x7, './file0'}, {{0x2, 0x1, 0x2}, 0x400000004, 0x6, 0x7, './file0'}]}}, 0x87) dup(r7) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r4, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:13 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') chdir(&(0x7f0000000040)='./bus\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x40047211, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000100)={0xfffffff7, 0x1f, 0x20400000, 0x61, 0x400}) [ 1102.831017][ T12] usb 4-1: USB disconnect, device number 63 [ 1102.864432][ T5836] FAT-fs (loop5): invalid media value (0x74) [ 1102.873014][ T5836] FAT-fs (loop5): Can't find a valid FAT filesystem 21:50:13 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x3) 21:50:13 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0xaaaaaaaaaaaab74, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0xa24402, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000040)=0x8) ioctl$FITRIM(r0, 0x40047211, 0x0) 21:50:13 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x300) 21:50:13 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x1f000000, 0x0, 0x0) 21:50:13 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x4) [ 1103.250712][ T12] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1103.500617][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1103.620659][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1103.790746][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1103.800194][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.809217][ T12] usb 4-1: Product: syz [ 1103.813958][ T12] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1103.831733][ T12] usb 4-1: SerialNumber: syz [ 1103.881300][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1104.081927][T23894] usb 4-1: USB disconnect, device number 64 [ 1104.850639][T23894] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1105.090716][T23894] usb 4-1: Using ep0 maxpacket: 32 [ 1105.210715][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1105.380699][T23894] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1105.389840][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.397948][T23894] usb 4-1: Product: syz [ 1105.402122][T23894] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1105.409471][T23894] usb 4-1: SerialNumber: syz [ 1105.451126][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:50:16 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x700) 21:50:16 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x7) 21:50:16 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x40000000, 0x0, 0x0) 21:50:16 executing program 1: epoll_create1(0x0) r0 = syz_io_uring_setup(0x76d1, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x5d5801, 0x0) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x320}}, 0x0) io_uring_enter(r0, 0x3f, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) ioctl$EVIOCRMFF(r6, 0x40044581, &(0x7f0000000140)=0x464) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000180)={0x73a, 0x9, 0x80000000}) clock_gettime(0x0, &(0x7f0000002cc0)={0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r9}, 0x50) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000002e40)={0x60, 0x0, r9, {{0x1f, 0x4, 0xffffffffffffffff, 0x1, 0x7, 0xff, 0x5, 0x3}}}, 0x60) recvmmsg(r3, &(0x7f0000002b80)=[{{&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000240)=""/101, 0x65}, {&(0x7f0000000040)=""/19, 0x13}, {&(0x7f00000002c0)=""/95, 0x5f}, {&(0x7f0000000340)=""/216, 0xd8}], 0x4, &(0x7f0000000480)=""/114, 0x72}, 0xfff}, {{&(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000002ec0)=""/232, 0xe8}, {&(0x7f0000000680)=""/69, 0x45}, {&(0x7f0000000700)=""/245, 0xf5}, {&(0x7f0000000800)=""/235, 0xeb}, {&(0x7f0000000580)=""/21, 0x15}, {&(0x7f0000000940)=""/181, 0xb5}], 0x6, &(0x7f0000000c00)=""/250, 0xfa}, 0x5}, {{&(0x7f0000000b80)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000001fc0), 0x0, &(0x7f0000002040)=""/121, 0x79}, 0xffffffe0}, {{&(0x7f00000020c0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f00000026c0), 0x0, &(0x7f0000002740)=""/14, 0xe}, 0xc0}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000002780)=""/192, 0xc0}, {&(0x7f0000002840)=""/95, 0x5f}, {&(0x7f00000028c0)=""/205, 0xcd}, {&(0x7f00000029c0)=""/88, 0x58}], 0x4, &(0x7f0000002a80)=""/217, 0xd9}, 0x401}], 0x5, 0x40010000, &(0x7f0000002d00)={r7, r8+10000000}) ioctl$sock_inet_SIOCDARP(r10, 0x8953, &(0x7f0000002d40)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x38}}, {0x307, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x48, {0x2, 0x4e24, @empty}, 'bond0\x00'}) 21:50:16 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000080)={0x1, 0x4}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000040)=ANY=[@ANYBLOB="16b8b260f78021236b9ec603bb03a38621e97f59b079d37e37815a3571e84d0d6d5f5c278bcec49d53ddbd217e234c19be5900"]}]}) 21:50:16 executing program 5: r0 = syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) statx(r0, &(0x7f0000000040)='./bus\x00', 0x7fe, 0x7ff, &(0x7f0000000100)) ioctl$FITRIM(r1, 0x40047211, 0x0) 21:50:16 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xa) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$sock_proto_private(r1, 0x89ee, &(0x7f0000000040)="2f2865d4") ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000180)='rose0\x00') times(&(0x7f0000000140)) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r3) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r5, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x81) getgroups(0x4, &(0x7f0000000100)=[r0, 0x0, 0x0, r3]) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) r6 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r6, 0x40047211, 0x0) [ 1105.651101][T23894] usb 4-1: USB disconnect, device number 65 21:50:16 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x8) 21:50:16 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x4000) 21:50:16 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0xeffdffff, 0x0, 0x0) 21:50:16 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x10) 21:50:16 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0xf5) 21:50:16 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x800000) 21:50:16 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0xf5ffffff, 0x0, 0x0) 21:50:16 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x300) [ 1106.150745][T23894] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1106.390679][T23894] usb 4-1: Using ep0 maxpacket: 32 21:50:17 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) r8 = dup2(0xffffffffffffffff, r7) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x154, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x154}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 1106.510820][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1106.890750][T23894] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1106.899797][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.908649][T23894] usb 4-1: Product: syz [ 1106.913188][T23894] usb 4-1: SerialNumber: syz [ 1106.961313][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:50:19 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0xfffffdef, 0x0, 0x0) 21:50:19 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x700) 21:50:19 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x1000000) 21:50:19 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000001c0)) r6 = dup3(0xffffffffffffffff, r4, 0x80000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x8010, r5, 0x10000000) syz_io_uring_submit(r3, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x461}}, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/xfrm_stat\x00') ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0) r9 = dup2(r4, r6) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r11) syz_mount_image$fuse(&(0x7f0000000240)='fuse\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x2000000, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB="2c726f6f746d6f66653030303030303132213030302c75732aa2476cfc5c28388d8499e37c5e1758", @ANYRESDEC=0xee01, @ANYBLOB=',group_id=', @ANYRESDEC=r11, @ANYBLOB=',max_read=0x0000000000000008,max_read=0x0000000000000002,blksize=0x0000000000001000,fsname=(*],appraise_type=imasig,\x00']) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:19 executing program 3: getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000001c0)=""/254, &(0x7f0000000040)=0xfe) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x404}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r1, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) getsockopt$inet_buf(r1, 0x0, 0x28, &(0x7f0000000080)=""/19, &(0x7f0000000100)=0x13) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x9) 21:50:19 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) lsetxattr$security_capability(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v3={0x3000000, [{0x5e009de, 0x9}, {0x4, 0x3}], r1}, 0x18, 0x1) r2 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r2, 0x40047211, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003a00)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r5, 0x305, 0x0, 0x0, {0x11}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003a00)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r8, 0x305, 0x0, 0x0, {0x11}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x924, 0xffffffffffffffff}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x4}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x50}, 0x1, 0x0, 0x0, 0x4844}, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2, 0x0) ioctl$TCSETS(r10, 0x5402, &(0x7f0000000040)={0x9, 0x6, 0x1, 0x1000, 0x12, "0962a92a679057488e015cdd71ac55411410bf"}) 21:50:19 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x40047211, 0x0) membarrier(0x2, 0x0) [ 1108.687614][T23894] usb 4-1: USB disconnect, device number 66 [ 1108.713653][ T5978] fuse: Bad value for 'fd' 21:50:19 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x4000) 21:50:19 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7201a960632ed46b0fde8aad6bba45825a570e80e9649fced16db574dd5a49d3145698a6e6995b025f1e868d", @ANYRES16=r0, @ANYRES64], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x2, 0xffffffc6, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x40, 0x6, 0x400}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0xa0, r0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x9}, @ETHTOOL_A_CHANNELS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7f}, @ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc010}, 0x20008090) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000880)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x14, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xffffffff}}, @IFA_LOCAL={0x14, 0x2, @loopback={0xd00000000000000}}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xb0, r0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40080}, 0x40) r5 = syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) mkdirat(r5, &(0x7f0000000040)='./file1\x00', 0x160) chdir(&(0x7f0000000000)='./file1\x00') r6 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r6, 0x40047211, 0x0) setxattr$security_selinux(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:selinux_config_t:s0\x00', 0x26, 0x6) epoll_create(0x10000) [ 1108.809064][ T5993] fuse: Bad value for 'fd' 21:50:19 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0xfffffff5, 0x0, 0x0) 21:50:19 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x3000000) 21:50:19 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0xf5ff) [ 1108.902881][ T6012] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 21:50:19 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x100, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:19 executing program 5: r0 = syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x8000000ffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17, 0x10}], 0x40000, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r1, 0x40047211, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002680)=[{{&(0x7f0000000ac0)=@ax25={{0x3, @rose}, [@netrom, @netrom, @bcast, @bcast, @null, @default, @remote, @bcast]}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {&(0x7f0000000c40)=""/90, 0x5a}, {&(0x7f0000000580)=""/125, 0x7d}], 0x4, &(0x7f0000000540)=""/46, 0x2e}, 0x5}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000640)=""/152, 0x98}, {&(0x7f00000004c0)=""/118, 0x76}], 0x2, &(0x7f0000000340)=""/27, 0x1b}, 0xdd7}, {{&(0x7f0000000700)=@x25={0x9, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000800)=""/109, 0x6d}, 0x2}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f0000001200)=""/167, 0xa7}, {&(0x7f00000007c0)=""/44, 0x2c}, {&(0x7f0000000c00)=""/59, 0x3b}], 0x4}}], 0x4, 0x22, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000100), 0x4) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000040)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x8}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x1d2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1d, 0x13, "43fc1dd9104bed54190a4fce4d77c7354ab212c8f5b2f7cd82"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) [ 1108.947573][ T6024] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 21:50:19 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0xfff5) 21:50:19 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x10000000000, 0x0, 0x0) [ 1109.100836][T23894] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1109.340813][T23894] usb 4-1: Using ep0 maxpacket: 32 [ 1109.460779][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1109.630839][T23894] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1109.639836][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.647850][T23894] usb 4-1: Product: syz [ 1109.652048][T23894] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1109.659403][T23894] usb 4-1: SerialNumber: syz [ 1109.701183][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:50:22 executing program 3: ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000040)) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="12019001000000201904010040000102030109022d000101000000090400400003010000092100000001220000090581030000000000090502034000013f1e4388b4451624f3903b3c6903ec3e74a1f5eca1d2784013dc36e36c545f2531c0fffe33ac7f74ea58041a4683a8b0a083ffaf7cb5fa7c21dc"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x3, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x46}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x1c56}}]}) 21:50:22 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x7000000) 21:50:22 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0x20, 0x8, 0x0, 0x4}, 0x14) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:22 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x80000) 21:50:22 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x8000000000000, 0x0, 0x0) 21:50:22 executing program 5: r0 = syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0xfffffffb, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="04000509fa080000666174000404090a020002740ef801", 0x17, 0x80}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(0xffffffffffffffff, r2, 0x80000) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x10) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000240)="536789bc419ed99d6b9e2d7cc6726c859498aae65e20fcd8e5593858c2ab387f73b37677cd5f717b73593f14d04b4fa4d8193f3384571521d7850d21f55b6f335ffa02a8e3968b6d40621c5e8e30dbcc57bf00d1a90f6c8551dfd1ec66fe6e1c74b7359babd160683542fec0d01b6dde74eb8fd4438d3b2b77a96bfb1c728b") vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x7}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x6}, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x864c2, 0x0) ioctl$FITRIM(r4, 0x40047211, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={r4, 0x8, 0x6, 0x10001}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) io_submit(0x0, 0x5, &(0x7f0000000940)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0xff, 0xffffffffffffffff, &(0x7f0000000340)="42c167e28c9cf6daf93dc531142261f67249d3455e9fb408b5aaffe4221fd8a225da3a3f6543621179ea50282283c860fd0e8431c116a9", 0x37, 0xfffffffffffffffa, 0x0, 0x3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x6, r5, &(0x7f0000000440)="cabde438a0cc7d5c22f663c2304420a3f30aca87f2a30262f6e453942cc7c49ebdc1a61d8f238afaceb3d97ca406e06a1656a54bfa55d329ccdf23253ca52accb0aec3bf5832", 0x46, 0x1, 0x0, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xb6, 0xffffffffffffffff, &(0x7f00000006c0)="1fbb8b582b2d980d69fc9160dcec14d91d85e7b6b652c46aa146efacf47104a3ac443e016fcca84d62f2ea2381eaa652aa5763dbae75dd6de6fd5d5a810125eb7be5056fa18d11f5252f05584948b27977afa0ce1de309f0047b52463473fed00ce9c61d0b9c4c27f748b73aca98022018af9c3bd02d1ea9289fc0c0a7fea537db5b7040ce5d10188df3ce876f78fec0f07713b276b361574808508884c2dfe71e8af0df1c0f", 0xa6, 0x3, 0x0, 0x2, r5}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x1ff, 0xffffffffffffffff, &(0x7f0000000780)="02288243cbc9d9dd10921f78699ce801aa712f203a936f72b6e1b0d94e03fe7fd083c67581c37ab689af2d75239a1dc707714d6b6751ded650075885a9ab43e15271c18230612b790cbc0e4ce57bee09f8d8e3cd56a3b1b0711b3d646b332b04b80d8870ae7975f1021d4b17b74e806f59e7f9b61e6e0caa0edf82471aa330aff97e3b248d4f6221f9ddcb61e16d3c4ddd834452da9a4a061b", 0x99, 0x5, 0x0, 0x1, r6}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x289206290eacfbfd, 0x3ff, r7, &(0x7f0000000840)="8bfb4e4870e9fc082add445ca4067df4c768acc6fb666fb7b3de77043eca44a99c14a57cb5feb2e2262fb5e698be67473f6c65c3cf02cfea028641cdcd635a2d9d183f1d66f3d181f3ca28f483d6652ce2839068a5dbab368c6742054248eaf63c4090bf17468f6bff267b2fbaedd7d4fe0b15195006ca54b7e72688a61a7dc6f94abf4d06fe", 0x86, 0x65, 0x0, 0x1, r2}]) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x20) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f00000001c0), 0x0, 0x4) [ 1111.725876][ T12] usb 4-1: USB disconnect, device number 67 [ 1111.757913][ T6064] FAT-fs (loop5): bogus number of reserved sectors [ 1111.764654][ T6064] FAT-fs (loop5): Can't find a valid FAT filesystem 21:50:22 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x800000) 21:50:22 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x10000000) 21:50:22 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x1000000) 21:50:22 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x80000000000000, 0x0, 0x0) 21:50:22 executing program 1: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x10, 0x80, 0xfffffffd, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/169) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:22 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x3000000) [ 1112.190837][ T12] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1112.440792][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1112.570881][ T12] usb 4-1: config 1 interface 0 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1112.583915][ T12] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1112.750835][ T12] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.40 [ 1112.760272][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.768769][ T12] usb 4-1: Product: ᱖ [ 1112.773256][ T12] usb 4-1: SerialNumber: syz [ 1112.811291][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1113.012304][ T12] usb 4-1: USB disconnect, device number 68 21:50:24 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d5, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x36b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='syz', r6) r7 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$reject(0x13, r6, 0x0, 0x5, r7) r8 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:24 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x40000000) 21:50:24 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x4000000) 21:50:24 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x100000000000000, 0x0, 0x0) 21:50:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@empty, @in6}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@local}}, &(0x7f0000001880)=0xe8) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002680)=[{{&(0x7f0000000ac0)=@ax25={{0x3, @rose}, [@netrom, @netrom, @bcast, @bcast, @null, @default, @remote, @bcast]}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {&(0x7f0000000c40)=""/90, 0x5a}, {&(0x7f0000000580)=""/125, 0x7d}], 0x4, &(0x7f0000000540)=""/46, 0x2e}, 0x5}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000640)=""/152, 0x98}, {&(0x7f00000004c0)=""/118, 0x76}], 0x2, &(0x7f0000000340)=""/27, 0x1b}, 0xdd7}, {{&(0x7f0000000700)=@x25={0x9, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000800)=""/109, 0x6d}, 0x2}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f0000001200)=""/167, 0xa7}, {&(0x7f00000007c0)=""/44, 0x2c}, {&(0x7f0000000c00)=""/59, 0x3b}], 0x4}}], 0x4, 0x22, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002680)=[{{&(0x7f0000000ac0)=@ax25={{0x3, @rose}, [@netrom, @netrom, @bcast, @bcast, @null, @default, @remote, @bcast]}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {&(0x7f0000000c40)=""/90, 0x5a}, {&(0x7f0000000580)=""/125, 0x7d}], 0x4, &(0x7f0000000540)=""/46, 0x2e}, 0x5}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000640)=""/152, 0x98}, {&(0x7f00000004c0)=""/118, 0x76}], 0x2, &(0x7f0000000340)=""/27, 0x1b}, 0xdd7}, {{&(0x7f0000000700)=@x25={0x9, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000800)=""/109, 0x6d}, 0x2}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f0000001200)=""/167, 0xa7}, {&(0x7f00000007c0)=""/44, 0x2c}, {&(0x7f0000000c00)=""/59, 0x3b}], 0x4}}], 0x4, 0x22, 0x0) ppoll(&(0x7f00000017c0)=[{0xffffffffffffffff, 0x8080}, {r0, 0x10}, {r1, 0x7100}, {r2, 0x80}], 0x4, &(0x7f0000001800)={0x0, 0x989680}, &(0x7f0000001840)={[0x7]}, 0x8) signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x2]}, 0x8) r3 = syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r4 = open(&(0x7f0000000040)='./bus\x00', 0x400400, 0x0) pwritev(r3, &(0x7f0000001740)=[{&(0x7f0000000400)="3b093c077906dab5febb7dd14f0f4015fb66f21a9a9e9297f83c632552ccd0506d750bd153871d15bebb374ab37a07768a007b3dcba5ddc91da39b25d96a6b4d2cbf9b6095ef4bfe6db3dad826fba2dff9cf00a629548e45524289d6efe55732a45c55593629bda8fb0f1a52e04cd53e2ec5901d4da6d9a56339359b62bc74dc8ea2fd34c6ce26281393bc45d46f0b39d5044c160acccdf0c92560dbc211da77a5acb3d2a0fa6441c6baf30173535b7186fbd651f46955bb16b468ee7f1f71edba38bd469502bd7186cc24fddfe15bd41155da5f16b839ed0bd19e8692253ab6d52b", 0xe2}, {&(0x7f0000000240)="a7f0bec69ce38a0999da6cb7e3e072ec0289d5673f60c51fff04e98c711efaf94ba5ebdd", 0x24}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000300)="08e3af0cffbecd41f154bbeeb704e9321bb335a80053b1e8a89e827a4c0988029edda385148ffea0051d8b65640e3a2d522d94e5adbc2606117aae438b9257ded8979149b26cabd5a812a5d2008c50bf906e2d006e4b415d8afd6a36ab0b1b0b0ad7205e1a706634e12a06c9acf79317768057af2e8b969ce21c271cdc0ba39599b5d45a", 0x84}, {&(0x7f0000001500)="8ed05aefde767a7967672b38c35e6497edc7888dc508c82b4c03530420b8bc3b8fe455cbb90a8dbe7f688645c9ab48230817cad5da4159e635fdf2733ec6d5a91c1ac17a1f6efdb6af76f22583fc9383bb40ac9c82b71b25b6b172c06296534af323bea4eed4ae957feefb263235b1d65e0d3f0f90fc4cb3", 0x78}, {&(0x7f0000000280)="d5c127313db7e1b88a6756b5b5ffb3d8", 0x10}, {&(0x7f0000001580)="c0b623c322394fb8e45bef6f7d6ece2dc01ad8048f1110c7b67c2f0c82fd050dc872b583a6fb36111c5687aee0001b3c25d5839f957a3c94bd826ce952c358c25b4e18d009b107c87c009e5318fc746783fd2a52fc16fb906b176fdc7a74e0a6bb8e6aaf3d6a999fcc3f7917bdb92e0e95cd470d0c0290369aada8173e681f781d985859c452d254181bef3879b7c706b5cf70e89347f4a7a12869be5a912f573cc355c10b60bddd1b447a552bb221d31419364da03d76fda6a4f71b65d584f5b632576ae0dc0eb5975ce8ad59f86f56caed424fa718dd", 0xd7}, {&(0x7f0000001680)="364f473c833deccb09aaa5f7bd7fa8db52efeeb60790f49d48ebc2f0fdd0b543eb1aeaa70291b7326def6786440d10c569b691123592bb39dc0c574f3a22ae45ecad61178b98252d497964baaa706426e334ac79646ee14417e58abc3492f17297f522b97e2fb96714a17e87bb3976428a50985ec216909c3f6d8bf7680bb2ae1b5289c0fcc7196ba6c9d5766205196db54c7fff886fa55c94873aa2cea8d9fa92a7aca366eb359bdec2bb508d228e798540a8871b8c23f340", 0xb9}], 0x8, 0x7fffffff, 0x80) ioctl$FITRIM(r4, 0x40047211, 0x0) 21:50:24 executing program 3: r0 = syz_io_uring_complete(0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getpid() setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) process_vm_readv(r1, &(0x7f0000000440)=[{&(0x7f0000000300)=""/60, 0x3c}, {&(0x7f0000000340)=""/184, 0xb8}, {&(0x7f0000000500)=""/132, 0x84}], 0x3, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/57, 0x39}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000640)=""/139, 0x8b}], 0x3, 0x0) writev(r2, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r2, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000740)='/dev/full\x00', 0x10000, 0x0) fspick(r3, &(0x7f00000007c0)='./file0\x00', 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r2, 0x1, 0x2, 0x9}) sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xc0, 0x29, 0x400, 0x70bd2a, 0x25dfdbfb, {0x1c}, [@generic="10b3bb287a3e566b45ed5f5d314192d0269975fc6061cc5bf7c48fafdc6b6ee95746fa854508c7b853c920d98b18892376", @nested={0x6f, 0x8a, 0x0, 0x1, [@typed={0x8, 0x94, 0x0, 0x0, @pid=r1}, @typed={0x4, 0x36}, @generic="838873ca721324222e7911cd7d2d16731997cadb1d019687a25fd5449b4c91f09c85aa736b4cea3e35ef80d4c140f0e4bfcbcdb89455e3ec5c3ef14d1de45e96b510e4fb3c52208954a27756834a1c8ce0aee82cd36c3912f003bae31041dc"]}, @typed={0x8, 0x36, 0x0, 0x0, @fd}]}, 0xc0}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) 21:50:24 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x7000000) 21:50:24 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0xeffdffff) 21:50:24 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x300000000000000, 0x0, 0x0) 21:50:24 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$TCSBRK(r1, 0x5409, 0xd691) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x7, 0x401, 0x0, 0x4, 0x4, 0x1}, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001340)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000001240)=0x800, 0xb27) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000012c0)='/dev/ttyS3\x00', &(0x7f0000001300)='\\\x00', 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000011c0)={r6}, 0x8) mknodat(r8, &(0x7f0000001200)='./file0\x00', 0x200, 0x10001) io_uring_enter(r2, 0x3e41, 0x0, 0x0, 0x0, 0x0) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x2a4600, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r5, 0x50009401, &(0x7f00000001c0)={{r9}, "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"}) 21:50:24 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x8000000) 21:50:24 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x10000000) 21:50:24 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0xfffffdef) 21:50:24 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x400000000000000, 0x0, 0x0) 21:50:24 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x40000000) [ 1113.930846][ T12] usb 4-1: new high-speed USB device number 69 using dummy_hcd 21:50:24 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0xeffdffff) [ 1114.180885][ T12] usb 4-1: Using ep0 maxpacket: 32 21:50:25 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}, {&(0x7f0000002040)="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", 0xfff, 0x1000}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x40047211, 0x0) [ 1114.310902][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1114.500946][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1114.509984][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.518241][ T12] usb 4-1: Product: syz [ 1114.522517][ T12] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1114.529872][ T12] usb 4-1: SerialNumber: syz [ 1114.571517][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:50:27 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x10000000000) 21:50:27 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x700000000000000, 0x0, 0x0) 21:50:27 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0xf5ffffff) 21:50:27 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x11c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x35}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x140000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xbc09}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5d}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4800000000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x805}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd4d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc0}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x24000850}, 0x400008a) r1 = syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) fspick(r1, &(0x7f0000000040)='./file1\x00', 0x1) ioctl$FITRIM(r2, 0x40047211, 0x0) signalfd(r2, &(0x7f0000000340)={[0x80000000]}, 0x8) 21:50:27 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x2f77, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1ec, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = timerfd_create(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r10, 0x407, 0x0) write(r10, &(0x7f00000003c0)="8a93962b4ec1553337e1b9b527c7c6002b6ceb0ecb0eb4e9a6c2074c05465223fa2ffc268cce0a4f2fd3f8b4d08c19225bf0bf7f9a3e6d469320247b5e548915dfae296c98575d50e3aec39ad74ea4039d10aecfb91b5f7f3616994001d6a4f19a53243e03fc1a9cec3db724d0ec053c6a59898d03a0b907491d64bdeb6fcb80d29c23d7b6e76344cfb1023d84a7c72f007e4fdc371f36eee3bf10675b56872ae1b106c9dd8358b9aa09e5ba33120535bbfb0d0585929f905d147f687ed66694ed2dc20d00"/211, 0xffffff42) ioctl$BTRFS_IOC_SET_FEATURES(r10, 0x40309439, &(0x7f00000000c0)={0x3, 0x2, 0x13}) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000002680)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x20, 0x1, 0x1, [r1, r2, r2, r0]}}], 0x38}], 0x1, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x22, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, {0x9e, &(0x7f00000001c0)=@string={0x9e, 0x3, "46862106d19409ff668382b071c30c063e815a3591e84d0d6ddf590076467487b67094679b3a6cd5636fab1c118e77d43e6d1b1fc914f8f4f325ab070200000000000000320f364432bcee849d99fb049534ffa400d264da0eeb57662e593624965fe1c66c01260fa7cd566f2d856e78f2ce85c42765aaf26ee1d150374ecac60dd51146974654926252bd0a3d8e2b0cc2d1a1e7debd8c1f97fffa97"}}]}) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xa8) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000100)) [ 1116.552713][ T12] usb 4-1: USB disconnect, device number 69 21:50:27 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0xfffffdef) 21:50:27 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x800000000000000, 0x0, 0x0) 21:50:27 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x1000000000000) 21:50:27 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0xfffffff5) 21:50:27 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x10000000000) 21:50:27 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x80000000000000) [ 1116.960948][ T12] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1117.200933][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1117.320916][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1117.490956][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1117.499961][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.508476][ T12] usb 4-1: Product: syz [ 1117.513007][ T12] usb 4-1: Manufacturer: 虆ء铑）荦낂썱،脾㕚്Y䙶蝴炶枔㪛핬潣Ძ踑푷派Ἓᓉ◳ޫ [ 1117.525029][ T12] usb 4-1: SerialNumber: syz [ 1117.561301][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1117.763080][ T12] usb 4-1: USB disconnect, device number 70 21:50:28 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x1000000000000000, 0x0, 0x0) 21:50:28 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x8000000000000) 21:50:28 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x100000000000000) 21:50:28 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x40047211, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=@ng={0x4, 0x1, "500590778e238948a5"}, 0xb, 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000000)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(r2, &(0x7f00000001c0)=0xfffffffffffffffb, r3, &(0x7f0000000240)=0xd4, 0x6, 0x3) 21:50:28 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x3a, &(0x7f00000000c0)={0x1, 0x21c, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x7224, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x50, &(0x7f0000000040)=@string={0x50, 0x3, "5bce58b3786f38e8de69a4d2a3dc2fab9aa858c8452c15f05673d82edc46dd6ea0fd28dbe211b8eadcf96db3ccd6e6badbeb87fb2a977dcf6577eab1b12ce5ccc6eab7217109c09c396d609b6a6d"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3009}}]}) 21:50:28 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0xfffffffe, 0x4, 0x0, 0x154, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) sysinfo(&(0x7f0000000100)=""/150) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000300)={&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000002c0)=""/19, 0x13}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r7, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8}, 0x50) write$FUSE_BMAP(r1, &(0x7f0000000240)={0x18, 0xb, r8, {0x6}}, 0x18) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:29 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x80000000000000) 21:50:29 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x300000000000000) 21:50:29 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x1f00000000000000, 0x0, 0x0) 21:50:29 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x100000000000000) 21:50:29 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x300000000000000) 21:50:29 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x4000000000000000, 0x0, 0x0) 21:50:29 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x700000000000000) 21:50:29 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x400000000000000) 21:50:29 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x700000000000000) [ 1118.740991][T23894] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1118.980993][T23894] usb 4-1: Using ep0 maxpacket: 32 21:50:29 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x5, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}, {&(0x7f0000000180)="85cb8324de5bf8382c2e33fa32c8d6caa340a53a748c25a7c77b548a", 0x1c, 0x7fff}, {&(0x7f00000001c0)="3d8b5e83b7e19d9a2b12e79ef89ed342924e7f7ab190d3a80c47db7225076c9786649fe350c095e63cf407aca7677a038ebcf72dc7cfa6d1faaedc17f9c51c7288f2477fef695e95feb617e9581fc453ca86371bf3c05add92d91b3556d9a04321e76f7b88ab0c3e8427b4cdac9db8ca6bc4b1d6b912f63cbcf124854f9d1f4e7dd3b6b34f97120111add4f1128264cc5623296ae2a1b73230cc68a6eb4576caae1c29c7929ac4e98cb9e0b8a832ab0d0abe3b1028eabe8bd40c4236539c935601e1dd79992b9662e0281b1fc18e8c9217faf77f22d4f23ac99506cec18060dbaaebe060593fbd21703a7f57ad6d806e85687990066322df79553a20ed24", 0xfe}, {&(0x7f0000000300)="179a922a6d59d3b253afabd347412550a6b45cec4cc6e19513022436e72e6f76fd39e710b6333ddb5300f36c083eeb39c51cba522e49fb138ee3d5e748414e8e5eb0482f471cb66c3d50fd465500de9646479e573aea809890", 0x59, 0x200}, {&(0x7f0000000380)="3639a2b3cd", 0x5, 0x6}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x8740, 0x0) getsockname$unix(r0, &(0x7f0000000480)=@abs, &(0x7f0000000500)=0x6e) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f0000000040)='./file1\x00', r1}, 0x10) ioctl$FITRIM(r0, 0x40047211, 0x0) [ 1119.100999][T23894] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.122694][T23894] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1119.203605][ T6336] FAT-fs (loop5): invalid media value (0x90) [ 1119.210563][ T6336] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1119.321018][T23894] usb 4-1: New USB device found, idVendor=0eef, idProduct=7224, bcdDevice= 0.40 [ 1119.340264][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.349392][T23894] usb 4-1: Product: syz [ 1119.360943][T23894] usb 4-1: Manufacturer: syz [ 1119.371104][T23894] usb 4-1: SerialNumber: syz [ 1119.651055][T23894] usbhid 4-1:1.0: can't add hid device: -22 [ 1119.657032][T23894] usbhid: probe of 4-1:1.0 failed with error -22 [ 1119.664869][T23894] usb 4-1: USB disconnect, device number 71 21:50:30 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0xeffdffff00000000, 0x0, 0x0) 21:50:30 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x1000000000000000) 21:50:30 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x800000000000000) 21:50:30 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x40047211, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000100)='./file1\x00', 0x6, 0x4, &(0x7f0000001400)=[{&(0x7f0000000140)="dc59fe22ba3f20be4e313166ae3a0ccdb97ab5727167bed4ab13694690f1481e35156f237811795629620320e74fb657173817a17a5515d58c121fe0c2ad670a602bcb3fa534b85f34b8d77bffddea7d705b6a043d7b55381cdfb7b2a03a70715fffd5c875a24ae80553ac190d16fb80c8b72a100981937f9294a114ec353db6ac5203810a19edf99f672d3bffc1ff325beba5356c1f34f8e5901cd18aa14e026ffa8e0fbca318a139807341ca7b183b8d88a5d8b8c033e173b03fd8e21f6bd226126699dd5be9aa127e1415d9d51e28f7a7e3adca007bdc3c2868f36c126c285d23c00553635ef3a4b6acd318d273f8", 0xf0, 0x3ff}, {&(0x7f0000000240)="6f3e28d848b5f9a61c7e2a06dc270fcc641707b6fbbe3012c4c97aaa654b5e42", 0x14, 0xb85}, {&(0x7f0000000300)="2b845efa919c37ef962e10969c09cb23720f247b67d737f4326ab483ae3a6181831b0c4805587bc5cb082332b87c5592d140f9a2ebee9990243289f7882f967b2c273ae10d2822ed053ccdc67340dc4f62a138acc92d6ecbda9ba28e97c2afa933de74cd49279a70d66c961961973263db49d60e69d9e685e96c416db7c465363bd04213713bcb3dbfae257a", 0x8c, 0x3ff}, {&(0x7f0000000400)="a7d947f41e2bc40ed5caca285f748fcdbf77206ef62190090d40d510db95d1bac8b251f02dd5119400e6cee78f1d352f6a716407fbf54210a6650f94b114a623ecd262405522713f773743065e85b99b5a59bfc068db78e0c5474a4108e15d486f18e5b8476c0274dd3e095fa0657fbf8a3a90f1381a59a0110ac0444c2e65ca4dbb44461cc854b38c32a0df2030dca2a65760e5d84749cabd4d7d4eb5559744d8b89ce3b9f8008bb79e0fd1f1fe47d41d5547ca31ff43723ea107e3eafbe5f4776fb3de4d5b03dce2635560dbf7620fcc4d561a91f3b9c6af6429ff48b400e069085d1e3d76f6442cd6d89894a80bc74155e562d3eab2c822c8a2b190095ff328ed6b772f208579c5ab36a5b4bc43fe78c0e75def9ef37c39e5d44cbcdf07236fd46355acaccee20c8f4beffdd43438e704b112ef5f31fd3a3552ee1b8802c54c3cfc0556fe653d9eb621b2ac534e26962d9dde5991b0fae54fef03393ff86ada333cde2c3b028b465f25a62bb2f4dc5c84f1bad66f64aa588b090ada7da2a7287da7a35e61787d61175e24a240d21c7621d416b915ea8b18fd4adefa64514be0cf2fa89bd1ee6649e8545976c422fb5cdf6e97a2ea0bc5543249751d5041bdba1c6892bd0838c19fcacd8c41e58d822c6606e1eee4f70da806d66485575e3947c180c1cf14a1f32731e8450c90ba585b2ed36542702f739abfa819923794fa60d17a18eccb73e15f9df5c9ec7116881516f3a845f693c556140dd7dd6186706d449b83ff7e36b62be318b2c08a282fbde0aacfecc50e6614706a94c60c3e0d1f6ced1e545c17f563707122302ff93e918afbab2bd0ed47fda120f6f05820f500de21bb091da085c4b0784f78c80db8e1fba23300bd450fcc1c6f003bfc6dbd8eae751e90e80465902772992710ac0d198d84a298a1711ee270ab10394963bfeed9612a392a5461c25c03a963b3ffaca59f90988414b1b4ae932a5c3ad40c91134198b604a45fe8035e91e9db9c10cbf84b0ea1ad16a849cc5f0e1abaa7b0da3e70ac22aa4397843f48e5f79561f90590a7a6580919de5f41a47f9d9aa4d49210f8128d5e42fbe712a9909918da0bb24fa79cab172f3eb1836781dfc5d2668df7c9f4410449d37629ab75e9ce3f7152bec45f2d76b844e51a55e26166c16a92371bfee846e20a3a3ded09ff3dd2d47f6205cfc109072539bd0521022c8f22222bfc022acbb04ab2f33346d4b3335798b6e83b115afd99d96b98fd342e7fec7d8d45514fe0ce9f519e170b6dd56f3455c140c1647dc1e63e9be3158e212ad6f8491592dba0fdde10d404225864876ffaec8cb8babbe9243ab1b2603ce95c1ddae0e17ebcd4869ff713d33a550f2fb0691605fc6f25684eb7730d686c667d4339499fee6d03259409602b84b15a8dc327fb1287663794ceb0818a26df5ce6add9d4c04f4229f77f274895fdf561bda030717f90b478690850195b1fadea5997c6cfb83a59b450f1dd7c50f3c2c5535592f4feabe325fb567b7c000ffa402d79b8133e862e4118ac6c17029aeff12019c6c10a8140587656a4f9e5069b36d2cc3451dc1dbb8d7ce884d7b2cf0e73421838381fa547215f76a0c6000b243539a3c4dd526b3b8f90b3c5bc834bbebf57aeaa5d37153d15ee34b4c209abd179147d54c1af5e16c195b649ae0c0646bd1b68678244c0beab8d45dbb1f5fa13b0847d70d80e47c2d85c6ee9ea2901d805f615ffd583147e7919956b1382d475517dec3e178c238c5729cedfdee6a68f7c128b5cc6ce42870e7444777a0c3bbdfabd4cb2005d3cc1918cf5900d84338a935b9352796459d356dbab2dbb72f238c96e4fb37209359458d7520baeab44fa4afa259011dd59e7705d9abd3d8b6aad6a752d9303a1205526bd8096c462f8a45c39320a5fba978f472077ee10969f3593c6b32abed398df83545d684e8a7f1e7542841bdced8834ebcb2e6beb589294e0dad00f012d60a991f4d6a04c3ce9d963a68b62893c7fe1f3d476ce1a9fe5b27f29e9e5c55b205b1f202871a1cc08e9a34e93df599171681de7ce734fd00e32d6e03d9463846f8c6ff540380ff8c9ae46071d33581320a1bf7235d982e85e3058f174a24427d2f54d196b34831fefaae586d2ae7fd9f0a14d3e6769c2f474c7ba520bd47259a9e384ec85197b9d649f446ab8393eb818f8aab6c6a6436dc11de6b0367334f8212d5af6d2be00f5c802687ad765b86f785bfda78fc6191717ab788d336e30ff4a5c0d0566fbe9c13cc43b2e9c29a58b0858e9f46d0220eb41548b091307cbaffcc186c647c0830e8c00f234f624a94e8710498ba477c46d3869780d0853d317463c85dca8aabbde1b57e7356cc50ead1185a5e77052a05c362a07dd5f9fa10f6ac0f9a0408dd0b48fd6d398f0aaf0469c79d176c52257a8683fbb7082e4bc764dfee5056ba6261ede8275ee1876b309cc91ebe69606391a1cffe7eaccfa85c34eb0327337f25dcea61d88079bd1da5a64e7e381cd2e3d2ef169be62da945eddefb23604871675c93a32e222b98e1932175470cac8360e76b01523c1db9047867bf05419a0b1d04545c614fcb00cf649769b47ef62e641d56b1a7f54b9eef2dcfcd084cb866dacbfa693be03eafa3c728659d1527ce007247e378287e19d87e24c99e4df857b875475d4b01e5c8d6b2483539c31f403327647566f41e7692edfe3e0e79c975322096782649d9d1a312dfeb6991f9ae536268c86cd15c970672e023742267d34b59901926339e7be59389eb2e0718e51246fe9239c86c2af7e88261fcd2fdf13acd6c6de813f8c5fd145ab38c9137157ffb8b3bf5c45fe1aa414b25d85c186e24323f480a6734c553605a54284a84151924281264772ed612dfbb584070cf36ffa461895b751423325cf460c990578d7e684fb101320b71d1289be874ab103d82ed824f61c40f533a468283a638af3229a2e769eb8889ef433c83ec3b4b224e506307f50a1510238c8e27d4a0eec344961218660e5c9d75c53e5550b45566bf87e6bc4c2a13ac020569fdaf750ab85c8e848715c85e69290858d52dd496ff0f5f8fb79afd046a7a0d9a73ae0887662b06a39b4df10980ccd197c890cbb001a83a673eac7b46a3f6efb6f87ec2cb0289e1ff6ed8c9c7741b26e56fa257928311260b170dc5793ab6cfd06996fab72a7a381e5403fec8a9360761882301572be2d351a109bf5c90b0cc8b5995845f514273e794dfb5d0512ee65a0c69ee3c5361206211954be371ddda7c97487facc2e4a176386d3053a36ffaa72cd2b1205ab9ef5c50770ff2c976b26df1aaa6de0b83cf24bd70ce0e93b7bf7f3185aae9a7c51f1404cfea55459794f97b0214582e06214f79a3db37be66016b795b34e9603aa129c5469839f57f18e6b3ac6d60e8d7a6f2e81e8847dcb08a6d1902e10f05d560e2e0f865835f389dafc289acdac5631ca6415f8048935997dd578bfac0fe40f7011cd72e3fa924840a0d55b5e38e121a825aa6d4f9608c65048096ccbb12baff395cb9dabf805acd7f1a996576d2b6489a808df1d3ffdda4be1e7800b43c6c9ace867a4dc89a4c48d75cf1c4fb058f453c2a1deb0be39723bcbeddc7ec22ac9c0400cb13544c46c270353a71072175b82f045b5db81e69b66cde942b7d9dfdb21dd4107139199084555ab973e845caa57a88463b6fd473c7fd83da06bf3c3fb5fe7cb7d7f2d3e71809d369d03f0ec0e937267937192b58674041bb72d39f1dba82c8c528ff6af0c305cc42eb8c66dea2f0ead678a3bbc6a7b4df28477d9e6bc5294249d2979b06f70ce0cf3b90413f78484ccc80ef72a265218c0dc4cf1925c6249b5b64a07c2fd7cfa1f87ace1584630f772b33bba57e52e95ac1ab1ca305f8d6de74ca80fb65e652b3f5917517a13f864f150843e898b392acef3054762245f0257d826c5e0d68186c26ff76ef3300360c8783de857be4017828b1c6a34fe673e8a5649f02c35e1c2b7198ca6614ac0aecca82876f732c32129cccf4184770cf3cc9c4886ede4a2003d95b55e7c61c0611c2d92a6f21020c785c109fcb192c567447a2cc1090ff119318296801b0275ace32882921ba412463c19623a02f330adc725cb8e705c50e98c15845b83083e2fff928cc5f5597ffd87d633646463af367eac9322a7e24996f75f652f15d90729a0058764f4a8628829ba8e35550438d182721c687079be023a065f2d53a653fd8768323068d8b411ae6d1daf8c6be38460f65293ace650695c82293f449f8d0e556cc973185c30f65a504a75a7884108ea4a8578c7638762c49ba05b792c8874fb5c625b5e5dabf9456e7fdc7d6342d0d3ab72cf31975f1572e0c3fe8bdc2311abd9ec51b67d7deb2f83cbb85654df8b4c78a12e23cf236db78039fba50e1f14d3eadb466139c5898049d87b28294a2805f9b7366a7f85f0e3d57161f105546746f438663445dadff5af45c14adc42815e196d46ff43a765ed4c8b799584e37562a2a7b22ad72a3a2b43ef6437a4e68037132426ce3aaf2a95c65b900fbc0c349935a9da5e26bb86366353282b75c0d2a72033c6d5744598252dab7b44e9779f65f304d1efe57edaba673f5009fcd3e04f165fe13d9834794067348b99bb7990eceb310ffd283343edd35c0ffb9733b2ac7ee57ae3882b3cea13555e6d2c0d0ed0f941b09f197b483f118c32b8dc763d2b45632458db57ca81f14fd723ae5ab4840f66cab5602d0b3024abf45d19490b5e54e8a2b01ca9bd4446d446cc4fb9d1dcd1b62ab95dfaf161bdc89c20041077edf9afbb1ce2bf87f978b7ccac2b8912a042e20ff4ab96077b003fa5605843debd8fe4659b150891f88256a60b0a8a0f2a87906578c264d131bd8d10f1a178af12ab299596ccd767cfe0a26cc5f70602aec9b91636ee0235eb9ec30d22d42350aec6f7b3e9503fed09cde46f2aa022a4fa29b34f6ae8bb82b28867ad6f75963ec53082752e3fce0af03ec3c358482bd273dbdc543bbc96bc5074cb99ee49f2f83c7f0ed9f247be2ba2520371e802c1d4b833e3da23461155f77949aa62a5fd8f80ec61b1295d1cb64f9e3ee0d80cd9fda65d76cbfc0ded06389ea1dc430633bbaad7a213b006c9898e5963f093eb289f7727c700ffe112030e8fbc7bcf0e57a41b62497e8d41bfbe8d011942c9a8790bd450550e18c7dc05f678553530eefc5dbe131213a753c009e83efecb82846aefb8a9e09be319003714c43aacfbea96d687cbb5b3349c2f1c516bb9321e11b64b9aeef18acf5c5658b1a85cca950f1f0bfc65ff2495bcdfe50a5d00b412773c6945e62c2bf8c42f349c4e8e2e4b6c2180bd6870b292114da9ce3d02fc3252ebf9e06de2ac4d5879f94edfa2fa683ec862e69702aa8febe62b82ab05db55fa7d8b2de5596dffaecef48ef67b2ee7a9d568f5ebf9b84e68de3782a2f48d93d945628385be5096a738d61e8eee48dcabec2814053fb36331862e6d6c2a3b97bc961fa7dce6a03be349b65dea695f87c79ed41e5da1aa892b1dfc1663ed29a7dc1c289d5c12e8970989fed01a33d11e3fe6a4513774aee970925df7465078e38ba2806c25ddc873d45ff12d94335ce4cc90c943a14c91b78cd6457ee90a07fcb4bc72a83ef56e112e8e90d91a07d9372e89a44449aa0d6d8ee44fd1687408f51f21bf4ede74f3cf2cc45ae54903610d5656f9f82a4cc841015528b7f2f59938d57b4b074dcde974f6e37f665b4ef39eaa02fda40a02797925c049daf04b67f26e41762b9fae399992", 0x1000, 0x57d1}], 0x4401, &(0x7f0000001500)=ANY=[@ANYBLOB="6d706f6c3d64656661756c743d7374617469633a2d2c3a2f312c35342c6d6f64653d30303030303030303030304830303030303030303031312c73697a023d33382c00", @ANYRES16=r0, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYRESHEX]) 21:50:30 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x2, {0xc0000000, 0x80000000, 0x1, 0x8, 0x7ff}}) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000040020ef0e0c723fe801020301090224000101651a0009040000000301000009210000000122ce4a090581030000000000"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0xffffffe4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f00000001c0)=""/252) 21:50:30 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r8 = open(0x0, 0x14183e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r8, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@qipcrtr={0x2a, 0x0, 0x7fff}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="b205", 0x2}, {&(0x7f0000000140)}, {&(0x7f0000000180)='Q', 0x1}, {&(0x7f0000000580)="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", 0xed0}, {&(0x7f00000001c0)="0e72c13d7b063ff8825f0370a0ad14726870fa8fff57e4a2b1741df8e4c4d94f6d28c5c7d39a566e0819cc2b8930fa3046465dac935a912ceba997902f170f69aeb3f00a60", 0x45}, {&(0x7f0000000240)}], 0x6, &(0x7f0000000300)=[{0x28, 0x101, 0x0, "893a55c077f933c1d4112a93e07f2f7b2b3794ae"}], 0x28}, 0x0, 0x20000000, 0x0, {0x0, r9}}, 0x9) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x7, 0xfff, {0x0, r2}, 0x1ff, 0x4, 0x0, {0x0, r9, r7}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:30 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x1000000000000000) 21:50:30 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0xf5ffffffffffffff, 0x0, 0x0) 21:50:30 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCSREPORT(r6, 0x400c4808, &(0x7f00000000c0)={0x2, 0x100, 0x3f}) 21:50:31 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x4000000000000000) 21:50:31 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x4000000000000000) 21:50:31 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0xeffdffff00000000) 21:50:31 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0xffffffff00000000, 0x0, 0x0) 21:50:31 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) accept4$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14, 0xc0000) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000280)={0x2, 0x30, 0x7fff, 0x8f35, 0x4b, 0x7fff, &(0x7f0000000200)="094ff3dadaccd8b71683260e4b6f0e489c03062e055d45382878140c7b8a2c9403fb6324b24fa7dccb40eba0303b40ff42b86300b5eb34b57f7b85460cc978f1d1f5095a7d78dd7651c788"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:31 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0xf5ffffffffffffff) [ 1120.470997][T23894] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1120.730967][T23894] usb 4-1: Using ep0 maxpacket: 32 [ 1120.851008][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 21:50:31 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000000c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1121.031071][T23894] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice=e8.3f [ 1121.040098][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.048656][T23894] usb 4-1: Product: syz [ 1121.053533][T23894] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1121.060880][T23894] usb 4-1: SerialNumber: syz 21:50:33 executing program 3: ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x9, 0x2, 0x3, 0x7}, {0x4, 0x1, 0x2, 0x20}, {0x1, 0xa7, 0x1, 0x2}]}) 21:50:33 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x8000000000000000) 21:50:33 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0xfffffffffffffff5) 21:50:33 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0xfffffffffffffff5, 0x0, 0x0) 21:50:33 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = timerfd_create(0x4, 0x800) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000300)="71d86777f7e007f89f230d51d7f76a5e405657c3ec01623565b720f26b45070b32f9dc6d5923183ef617c5eae490e8c456051831bd06ac25adfecda654d29ea329c50072407a4047d43ddf0b962f97dd9006cad73c7b21bfbf4a67db832def8e6ee1df5abbfe30f116350eeff43d331b634e544bc4a0dd3751ab5aa688ed844f5833c0adc4c040cb92a3786beb3f910455ab07900a3bc03abaf07870", 0x9c) write$UHID_INPUT(r0, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, 0x0, 0xe06, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffbff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe0}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r2 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r2, 0x40047211, 0x0) 21:50:33 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x191901, 0x0) ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f00000001c0)={0x6, 0x3daa, 0x3800, 0x4}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:33 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000020ef0e0c72400001020301090224000101000001090400000003010000092100000001220000090581030000000000bdb51b18f8d17cec177799e4aa8bade58e726dca242238386f145d57f84f80b8c610c7f3eeebe802237bf25d2d03ecca4f3b0e76bf5cd3da4e936fa5dfe855d24a4aa4542558"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=ANY=[@ANYBLOB="1e03a3862106d19409ff668382b071c30c063e815a35710d6ddf59000000"]}]}) [ 1123.182814][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1123.202964][T23894] usb 4-1: USB disconnect, device number 72 21:50:33 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2e5, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x321202, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETA(r5, 0x5406, &(0x7f00000004c0)={0x9, 0x0, 0x0, 0x1, 0x0, "490a9c2aea31aef4"}) r7 = syz_open_pts(r5, 0x0) ioctl$TCSETSF(r7, 0x5412, &(0x7f0000000100)={0xa, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:34 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0xeffdffff00000000) 21:50:34 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x3) 21:50:34 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x3fa, 0x200, 0x70bd2c, 0x25dfdbfc, {0x1, 0x0, 0x1, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4a084) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f0000000280)=""/143, &(0x7f0000000340)=0x8f) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) sendmsg$NLBL_CALIPSO_C_LIST(r8, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048840}, 0x4000038) 21:50:34 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x4d44, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:34 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000800)={0x0, 0x8000000, 0x8, 0x0, 0x7, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) r6 = socket(0x1, 0x800, 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740)='/dev/zero\x00', 0x40000, 0x0) io_cancel(0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x6, r6, &(0x7f00000006c0)="e98ccf1f81e2e802917fb6bc6ff46fc7ada2db3f66b1b08976d7570e464ebf4bcd028345cb8bb34b44ab3d5079bfd9ee8792b5a47ad09420eabd78123868f82e684e82861aa75ff8a81eb74f345976e9692002fe0dcbba14e6e405fcd9f8bcd6", 0x60, 0x1, 0x0, 0x0, r9}, &(0x7f00000007c0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x7, &(0x7f0000000680)=r8, 0x1) sendto$unix(r6, &(0x7f0000000580)="b07e10b5f9ac2c75593fb0e63d843201e1683f156429a1317404ae62d370b9116e24d5ee06a04611e16c2320601e704a0fab8deb6a654a3d57f8f85c639a183d07bd55dcc1002fab8fc23828b1436e97e73d8c481323799bdda6042afdf4ad5c3415160a99c09a9180262be0", 0x6c, 0x8044, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e22}, 0x6e) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x340, 0x270, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x270, 0xffffffff, 0xffffffff, 0x270, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xf8, 0x158, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xb}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast2, [0xff000000, 0xffffffff, 0xff000000, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e24, 0x800, 0x5, 0xff, 0x6, 0x401}}}, {{@ipv6={@private2, @mcast2, [0xff, 0xffffffff, 0xffffff00, 0xff000000], [0xff000000, 0xff, 0xff000000, 0xffffff00], 'bridge_slave_1\x00', 'ip6_vti0\x00', {}, {0xff}, 0x88, 0x7f, 0xe, 0x8}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x8, 0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 'veth0_to_bond\x00', {0x10001}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 21:50:34 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x4) 21:50:34 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0xffffffff00000000) [ 1123.631033][T23894] usb 4-1: new high-speed USB device number 73 using dummy_hcd 21:50:34 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x7) [ 1123.881109][T23894] usb 4-1: Using ep0 maxpacket: 32 21:50:34 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0xffeffff9, 0x0, 0x0, 0x80000000, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='rxrpc_peer\x00', r1}, 0x10) dup(r1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000240)={{0x1, 0x0, @identifier="1749919976f4a2856cbaec19514632da"}}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$packet(r5, &(0x7f0000000200)="a0781c09c94a3a281443106c", 0xc, 0x1, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:34 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x8) [ 1124.021109][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1124.211158][T23894] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1124.220286][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.228667][T23894] usb 4-1: Product: syz [ 1124.232891][T23894] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚൱Y [ 1124.240043][T23894] usb 4-1: SerialNumber: syz [ 1124.281531][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1124.482362][ T12] usb 4-1: USB disconnect, device number 73 [ 1125.251058][T23894] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1125.491129][T23894] usb 4-1: Using ep0 maxpacket: 32 [ 1125.611109][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1125.781160][T23894] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1125.790189][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.798754][T23894] usb 4-1: Product: syz [ 1125.803219][T23894] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚൱Y [ 1125.810487][T23894] usb 4-1: SerialNumber: syz [ 1125.851580][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:50:36 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x10) 21:50:36 executing program 5: setxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v2={0x2000000, [{0x1, 0x8}, {0x3, 0x5}]}, 0x14, 0x0) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x204430, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x146042, 0x0) ioctl$FITRIM(r0, 0x40047211, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000018105e04da0300000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00222200000006238dbc9fe2744985cb62179ce1eea0052433a135c27e66"], 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, &(0x7f0000000080)={0x40, 0xd, 0x32, {0x32, 0x9, "331a66c3a298621687057f6583f1647f9347ba4afc4c3c87e6009d18e7988f73c089d42ee9a1a6083e4b803226bae0a4"}}, &(0x7f0000000180)={0x0, 0x3, 0xce, @string={0xce, 0x3, "c36c4519fe2d7225c36e9411ac9ccc91834b665c2230d929ccb3bd8ac9039561d63249b0b2245cf48cf3c5acd26f30ccfbe43c0f8a6b99bfa2238987c287fc189bdcfece528c4bb8a5f800daef06a723858f0f7f10270500a8bc9c776edcda3fdc4e6e640645416f97b61da7d64395100b07ee28e4c67d6a96b6d4375c95a649c26a5dd485553a230ce53362d9fbf6a276b051d51a68d2c6f20fb316eb9ad7e72010d5722e743beee7d0ad4cb8846c0d0df9b4ccfe1ee5de4acfc1cba71bf82178692a36cd9441ecd3a32bfc"}}, &(0x7f00000000c0)={0x0, 0x22, 0x25, {[@local=@item_4={0x3, 0x2, 0x1, "426a65f7"}, @global=@item_4={0x3, 0x1, 0x1, "2be241c1"}, @local=@item_4={0x3, 0x2, 0x1, "34b47950"}, @global=@item_4={0x3, 0x1, 0x0, "8f34cf8e"}, @global=@item_012={0x2, 0x1, 0x3, "8af6"}, @global=@item_4={0x3, 0x1, 0x8, "72afc6ad"}, @main=@item_4={0x3, 0x0, 0x2, "8cfecebf"}, @global=@item_012={0x0, 0x1, 0x3}, @local=@item_012={0x2, 0x2, 0x90de0009ebb9b348, "8189"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0xff, 0x4, 0x1, {0x22, 0x2e}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x0, 0x30, 0x3f, "55d6ef429957110a2204a177ee857846391d1227e95f5a307c0aa3b4b21a50ee9a2b491a209216b9799c9879bb552cd555941cbfc9101bbcc1e1214fc794bb"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000480)={0x20, 0x1, 0x9a, "60567bc987ff1e53127234663704678aec038fd70c22b840171ae5cc5b46252a1628b49c5330109f7136b9064b21a243e49e56664b72541e38d9f0cfea8526708bcd40d105879b38e306f39b4079cde9fa81e653453c8d475b8e396813e924e03e871ec911b9b6d95f254fa75b7b61e88a75f5d039a704b159d892d5ca58407e9e6f61f90733060d0a61f8f1a47603ca4889ffe03b76123150ae"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0xf9}}) open(&(0x7f00000005c0)='./file1\x00', 0xa02, 0x90) 21:50:36 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000880)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x14, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r9}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xffffffff}}, @IFA_LOCAL={0x14, 0x2, @loopback={0xd00000000000000}}]}, 0x40}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl1\x00', r9, 0x40, 0x10, 0x80000000, 0x40, {{0x11, 0x4, 0x1, 0x2, 0x44, 0x64, 0x0, 0x40, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @noop, @ssrr={0x89, 0x13, 0xb0, [@dev={0xac, 0x14, 0x14, 0x2f}, @multicast2, @broadcast, @empty]}, @rr={0x7, 0x17, 0xbe, [@multicast1, @local, @multicast2, @local, @multicast2]}, @generic={0x83, 0x3, "9a"}]}}}}}) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:36 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r7, r3, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x1, 0x0, 0x1, {0x0, r4}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:36 executing program 0: r0 = epoll_create1(0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x6, 0x1, 0x9218a79083b81575, 0x0, 0x0, {0x3, 0x0, 0x2}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r8, 0xf}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r8, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x24040040) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGPTLCK(r6, 0x80045439, &(0x7f0000000280)) 21:50:36 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000240)="6fb3b13cf9d84f52e7ef8fc27c19b070c7f9c931704da1b2cfd0f8868a497ce1857a2930c52fa128e9647b5bc9142c7066f9a3873463b6260084c3926cfbcdca309b0b74739e0d95fccb393e7cf13f42f35d6b767fe2b5dcd4701e245b7bffc0c63363b3bea8d34c54820942e5ff4bdbfeebaa733786908bd06b7f4ae491abed59597444914585ba852c2fb474b73a31f33f64d1f74279cd63ad4e45a87a5628fc6e81c6f01e43f3a60b535e4b567b0f497a6f55", 0xb4, 0x10, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000040)) [ 1126.051493][T23894] usb 4-1: USB disconnect, device number 74 [ 1126.091733][ T6508] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 21:50:36 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0xf5) [ 1126.192549][ T6520] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 21:50:36 executing program 2: r0 = epoll_create1(0x0) ioctl$CHAR_RAW_ROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000b40)) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = dup(r1) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x26c, 0x14, 0x400, 0x70bd2b, 0x25dfdbfd, {0x1e, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x1e, 0x1, "aa45e169bf653877227a7455c49e595858edb78d39fa4641a05b"}, @INET_DIAG_REQ_BYTECODE={0x1d, 0x1, "ca47f5fa05983185dc7a9650cf62458fbfbe2d1ef8e198112b"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "3c382ceeb59ea8ea5d39e1226fe25e3e8e0cfe12bf8039b9936d8cfa3a59b2f6b3d9323320b5e73c9c98430c607f343dc0218042a68bba87bf214db02ad200bf78c8819088"}, @INET_DIAG_REQ_BYTECODE={0xcc, 0x1, "e5064f6d0252f7761b6e5d0a2919217ded0fc4c6ada1603a1d627a1c2933e848eea0a9c5b3c248eeda9993baf082ad289130c8f540263e975617d2d3f5198e6305a7cb33972a8cc0ecded990580c1ccb5eb73faed2856f246494e34535d47a2d0c7807f7503ddbf904c823e7ba837f1a46498bd7db1a0e1da13fe74646b8529fa6ecf58e66dea1389072983d906aea58de043adcdfe5ee674a37b17f1fb6344c7bc887137db8b5ae085b0126765c9247e53ec91354566ff02b1fbb201138dcbdfd8aa67797b946ae"}, @INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "6b2befe267c5ebdf6b1f99afd159f21d867d169bacdaae19ec3581f6a184f2e1f68946cf8f579f834ae5bc1dc4115cf3ac13482db528ca7c5389e10120bec3bf0af419cf56aeea5e39b0fa81540200611d70674fea40c9be0e8e10700f923e640569a89831ed1f2a82a9a1f03fc48469bd74ea94f0020e307ae3da492793543172f6beaf0d006bc0f2f7978c1bd43666c4d1fef461777ff19827a37ac9"}, @INET_DIAG_REQ_BYTECODE={0x47, 0x1, "e495ad504fcc2b0ded794ddd2cbb8a099222c28f0053baaf5b72c43c1587c4889981f43eb2e176c7e4a1c3b5b862d3b6b4f861b78aba4d41624d42fe5114a5b41651e9"}, @INET_DIAG_REQ_BYTECODE={0x11, 0x1, "6608ddce408fcdad5118e2525d"}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) r7 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x70, 0x60, 0x7, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x1f, 0x6, 0x80}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x3, 0x3, 0x1f}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x300, 0x1, 0x8, 0x40, 0x8, 0x80}, 0x3e, &(0x7f0000000540)={0x5, 0xf, 0x3e, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "4dbbd18763e9cd98a9d1822f68ddca79"}, @ss_container_id={0x14, 0x10, 0x4, 0x3e, "74fad0d183c08af663cae727ae1fe225"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xd, 0x0, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x4, 0x5, 0x1}]}}) syz_usb_control_io$printer(r7, &(0x7f0000000840)={0x14, &(0x7f0000000700)={0x20, 0x23, 0xe6, {0xe6, 0x0, "05b3695ef2f33af7ba0a1ed24d47e7f218fb1a142d86aa1e5abe18a2ea397bc5df20e4710a5da942743c75da854e354babdc1c48eb615aed79a8a1501be375930b4a697379e971d477a5398bd36f2be3ef1cbb0bd98961bc8d25b938ae35b13f6d44f8a7acb4d3cab8540af8ffc066a944908cdf5d42cbc3c8a5596f40a64ce430c0bf8e295bc308f9c622531989b13903142d66cb34702a1be171618f86f86b9e6e504b62d510a014b79865f4f847280e56e8f9ffcbd982ab4ac98d059423720b04acf727bd691d017ee4deacff570189fe02890a1eb8930d42cce9d18bfb9dfd765c4f"}}, &(0x7f0000000800)={0x0, 0x3, 0x25, @string={0x25, 0x3, "2691255393a9bd455a8aa79c101f27fef0b564024446854470fa86c3e734d86f319e73"}}}, &(0x7f0000000b00)={0x34, &(0x7f0000000880)={0x20, 0x13, 0xf6, "6174ed5da294a2c3a05f04e2c5307ca08926f66d63c6e719ad39033b7c2bffe3e93645ac090ec0410ea7037099803c12212cb8c99a04934f18ec8f8262b601a56cc6c5e8bcf6043b7449eefb4888ad10f4fa6aeeec7b502ea09c75da27446e7bdd20f65a94b64a64d4f132ec085927221b6e283e1f9b44646f49e03850c40138a7cb51ef30cb7cdc2c9b58bb1ba106eaf0f20660d4504bc5b4d805f614a72828947a41ec1c8956f3d06f5da216c1d5c37ff8f5a9f198d8caa5b5a6d8ff30a16d4bc911040dee3959086af48131859aa74b4a87198a8c97f2e3d5891dcdd97aab491de93f17a6d1100163f934af41aee2f5875c6fc98f"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000a00)={0x20, 0x0, 0x68, {0x66, "920f8d2f8a7870cd3a103204fd8d497a5ce2764e9736f26794382475b60dbf472f9b03616de51315fd85856f599496da508bc3acaff26383beeb1ae845ae217b035d0947b977de83bc59700cc43f140dcfae0f0056897774a566e36b2997e5a46ab15b711212"}}, &(0x7f0000000a80)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000ac0)={0x20, 0x0, 0x1, 0x1f}}) 21:50:36 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x40010, 0xffffffffffffffff, 0x8000000) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$key(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x400000000000003, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x9, 0x300}]}, 0x30}}, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002680)=[{{&(0x7f0000000ac0)=@ax25={{0x3, @rose}, [@netrom, @netrom, @bcast, @bcast, @null, @default, @remote, @bcast]}, 0x80, &(0x7f0000000980)=[{0x0, 0xffffffffffffff7f}, {0x0}, {&(0x7f0000000c40)=""/90, 0x5a}, {&(0x7f0000000580)=""/125, 0x7d}], 0x4, &(0x7f0000000540)=""/46, 0x2e}, 0x5}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000640)=""/152, 0x98}, {&(0x7f00000004c0)=""/118, 0x76}], 0x2, &(0x7f0000000340)=""/27, 0x1b}, 0xdd7}, {{&(0x7f0000000700)=@x25={0x9, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000240)=""/118, 0x76}, 0x2}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/56, 0x38}, {&(0x7f0000001200)=""/167, 0xa7}, {&(0x7f00000007c0)=""/44, 0x2c}, {&(0x7f0000000c00)=""/59, 0x3b}], 0x4}}], 0x4, 0x22, 0x0) ioctl$sock_SIOCDELDLCI(r10, 0x8981, &(0x7f00000000c0)={'ip6tnl0\x00', 0x7}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:37 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x300) [ 1126.421096][ T6005] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1126.451073][T23894] usb 4-1: new high-speed USB device number 75 using dummy_hcd 21:50:37 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x828e, 0x8, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000380)=@generic={0x27, "028200c116a64b21a15f23a14d9e64d12aeeed8d1de7965466c2d4503b0d68cea6ec624860ff9cf7df589ffb3e96abb94bcf677c3aaa97bac16700ba6c0212d439fee491382793aa1198e9ba30edfbb8f8b8931d591c977a3fa6fd276c7c0d49d3d62af10a332b14f5b542807f1845a2f7a1a15c958c35067e5f2bfaf610"}}, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r8 = socket$inet6(0xa, 0xa, 0x7f) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x8006, 0x93, 0x0, 0xe8}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r7, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r7, &(0x7f00000002c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x23, 0x15, 0x0, 0x0) r9 = accept$inet6(r6, 0x0, &(0x7f00000000c0)) sendfile(r7, r9, 0x0, 0x1) ioctl$LOOP_CLR_FD(r1, 0x4c01) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:37 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x700) 21:50:37 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76cf, &(0x7f0000000140)={0x0, 0x3e34, 0x0, 0x0, 0x3, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1126.591127][ T12] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 1126.661104][ T6005] usb 6-1: Using ep0 maxpacket: 16 [ 1126.691070][T23894] usb 4-1: Using ep0 maxpacket: 32 [ 1126.801220][ T6005] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1126.812436][ T6005] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1126.822858][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1126.835628][ T6005] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1126.849124][ T6005] usb 6-1: New USB device found, idVendor=045e, idProduct=03da, bcdDevice= 0.00 [ 1126.858551][ T6005] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.867592][ T6005] usb 6-1: config 0 descriptor?? [ 1126.961142][ T12] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1127.001156][T23894] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1127.010236][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.018243][T23894] usb 4-1: Product: syz [ 1127.022515][T23894] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1127.029862][T23894] usb 4-1: SerialNumber: syz [ 1127.081566][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1127.121164][ T12] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1127.130275][ T12] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.138780][ T12] usb 3-1: Product: syz [ 1127.143214][ T12] usb 3-1: Manufacturer: syz [ 1127.147783][ T12] usb 3-1: SerialNumber: syz [ 1127.342099][ T6005] hid-generic 0003:045E:03DA.0002: unknown main item tag 0x3 [ 1127.349473][ T6005] hid-generic 0003:045E:03DA.0002: unknown main item tag 0x0 [ 1127.356891][ T6005] hid-generic 0003:045E:03DA.0002: unknown main item tag 0x0 [ 1127.364289][ T6005] hid-generic 0003:045E:03DA.0002: unknown main item tag 0x0 [ 1127.371701][ T6005] hid-generic 0003:045E:03DA.0002: unknown main item tag 0x0 [ 1127.379068][ T6005] hid-generic 0003:045E:03DA.0002: unknown main item tag 0x0 [ 1127.386477][ T6005] hid-generic 0003:045E:03DA.0002: unknown main item tag 0x0 [ 1127.393912][ T6005] hid-generic 0003:045E:03DA.0002: unknown main item tag 0x0 [ 1127.401357][ T6005] hid-generic 0003:045E:03DA.0002: unknown main item tag 0x0 [ 1127.410214][ T6005] hid-generic 0003:045E:03DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:03da] on usb-dummy_hcd.5-1/input0 [ 1127.611182][ T12] usblp: can't set desired altsetting 6 on interface 0 [ 1127.619136][ T12] usb 3-1: USB disconnect, device number 13 21:50:39 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f0000000040)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x40047211, 0x0) 21:50:39 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x1f00) 21:50:39 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$P9_RREADLINK(r8, &(0x7f0000000240)={0x10, 0x17, 0x2, {0x7, './file0/../file0/file0'}}, 0xfffffffffffffebf) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:39 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f00000000c0)) r6 = socket$packet(0x11, 0x2, 0x300) dup(r6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0xd9c1, 0x80, 0xffffffffffffffa7, 0xacc, 0x7, 0x401}, &(0x7f0000000240)={0x1, 0xbaeb, 0x8, 0x40, 0x80000001, 0x7fff, 0x5b8, 0x7}, &(0x7f0000000280)={0x180000, 0xd51, 0x7, 0xfffffffffffff029, 0x1, 0x1800000000000, 0x0, 0x2}, &(0x7f0000000300)={r7, r8+60000000}, &(0x7f0000000380)={&(0x7f0000000340)={[0x8000]}, 0x8}) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:39 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000040)=ANY=[@ANYBLOB="1e03a37c2106d1709409ff668382b071c30c060100000071e84d0d6ddf3989"]}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f0000001500)=0xc) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xc3b, 0x5, &(0x7f0000000400)=[{&(0x7f0000000140)="b2d894a574c57849a276791a3d080dde70757663109d445161a331b76a", 0x1d, 0x80000000}, {&(0x7f0000000180)="974adb77eaa05a9771bc7879023a69b55c7b251ae0b58f511987fd79ceef20dd325ffe962bac34a42f216988ce52a81e14a6bef76a8c8bddd53b2c1f4bb18602c5b9bc81178ada466b58b53493c1328ffcbdb7dea46eb7256493de95a91bdaf0", 0x60, 0x8}, {&(0x7f0000000200)="ba89d91239582b24c94c7d02508d6d0de20ccb7d01bf21c7538dde8073f08bc980e59e031c36cbab0cfe98619d3af7c81aa038d62418de7917a12c1da12a169d77613e6b1379639082318362889c10a7f3353b20a59d60dc5be7d81a8594edc9ad43e31faf3126d69f8164d409d09548099c46e9232b2da56a41677884c8075e8f23d978858906a5b06fceb6a6594701e59e31242bea8c67145ed06ad26405a829e82797389e7e51aaaf49f7ee717a604e7f3140569c23cbd336c1310447a6eeb60d8af9763b386bfeb0e50f139d012fc29f093cc6f857aabb182564253d82a9404d88ec69182400d8e9b5487ffe313b4b0e6522", 0xf4, 0x1}, {&(0x7f0000000300)="b53e69edea99aadfbd0e5ad9bd03da29fc0fac66446420827c996ebce14acad04194bc893bd813a8d6f2755e2f5c4f5818bfefe2ca0c7342097a9c198188e16eb786f8b5f689e0d49b89e3c1b2c66c243660862a6278754ce8de4afff41c539c03ad6c2dbb954d8faf6537e3e696e11407cefa4b27faa08247f1a673a0a4032eb21ab24aec70060ac7af144a7198104dbad6d01e826ed99e48cd2bc6612796657bfec326a784f0750bc1d53fe0fcd05e03db3d0906b9e0cf21a8f9e7f9d08b17588251ae2e631f9335b9f17531", 0xcd, 0x1}, {&(0x7f0000000500)="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", 0x1000, 0x9}], 0x20010, &(0x7f0000001540)={[{@numtail='nonumtail=0'}, {@shortname_lower='shortname=lower'}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@nonumtail='nnonumtail=1'}, {@fat=@showexec='showexec'}], [{@fsmagic={'fsmagic', 0x3d, 0x844}}, {@smackfshat={'smackfshat', 0x3d, 'U('}}, {@uid_eq={'uid', 0x3d, r0}}, {@euid_gt={'euid>'}}, {@subj_user={'subj_user'}}]}) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000001600)) [ 1129.081863][ T6005] usb 6-1: USB disconnect, device number 11 21:50:39 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) getsockname(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f00000000c0)=0x80) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0xaab2459a40c79557}, 0x4000000) r4 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r4, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:39 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x40047211, 0x0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x268, 0x1, 0x5, 0x303, 0x0, 0x0, {0x5, 0x0, 0x3}, [{{0x254, 0x1, {{0xddde2a084dcb3d7b, 0x8}, 0x0, 0x5, 0x1, 0x3ff, 0x1b, 'syz1\x00', "731c37c964e7fa314dbd748d5a7fedabbf6bf93c15b0009bbc630683cee671a8", "eefb690b64744427211d57bece1aba46f218a6c5614a6eb2d1057847e06ee4a4", [{0x2, 0x3f0c, {0x3, 0xa}}, {0x81, 0xfff9, {0x3, 0x8}}, {0x3ff, 0x5, {0x3, 0xee5}}, {0x0, 0x6e04, {0x1, 0x80}}, {0x1119, 0x400, {0x3, 0xfffffffc}}, {0x0, 0x5, {0x0, 0x80000000}}, {0x2, 0x1e8, {0x0, 0x5}}, {0x80, 0x31b, {0x3}}, {0xf4, 0x1f, {0x3, 0x6}}, {0x8, 0x3, {0x2, 0xfff}}, {0x8, 0x1, {0x0, 0xffff}}, {0x9, 0x9, {0x2, 0x800}}, {0x7f, 0x4, {0x2, 0x439c}}, {0x3, 0xffff, {0x0, 0x5}}, {0x9, 0x0, {0x1, 0x6}}, {0x2, 0xa59}, {0x6, 0x4, {0x0, 0xfffffffb}}, {0x3, 0x8, {0x0, 0x9}}, {0x7, 0x7fff, {0x0, 0xffffffff}}, {0x7, 0xfffa, {0x1}}, {0x7, 0x8001, {0x3, 0x8001}}, {0x4, 0x1, {0x3, 0x40}}, {0x9, 0x200, {0x0, 0x3}}, {0x6, 0x8000, {0x2, 0x85deaad3}}, {0x1c00, 0x729, {0x3, 0x3}}, {0x2, 0x2, {0x3, 0x2}}, {0x9, 0x1, {0x1, 0xd44f}}, {0x1, 0x0, {0x3, 0x3}}, {0x8000, 0x7e3, {0x0, 0x80000001}}, {0x9, 0xff80}, {0x1ff, 0xfff, {0x1, 0x7}}, {0x7fff, 0x7, {0x1, 0xa40}}, {0x1ff, 0x4e5, {0x2, 0x4}}, {0x8, 0x8, {0x0, 0x400}}, {0xfff, 0xfff, {0x2, 0x5}}, {0x40, 0xffff, {0x0, 0x5}}, {0xff9c, 0xb0d, {0x2}}, {0x1, 0x6, {0x1, 0x48}}, {0x9eff, 0x6, {0x3, 0x1ff}}, {0x1, 0x200, {0x3, 0x80000001}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x3}, 0x8800) [ 1129.137394][T23894] usb 4-1: USB disconnect, device number 75 21:50:39 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003a00)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r2, 0x305, 0x0, 0x0, {0x11}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x140, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0xa0ad}, @NL80211_ATTR_FTM_RESPONDER={0x108, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xe8, 0x2, "0494e525192a6d37aca57b844b0c6dbdd358df9f95a691f25e7de0b0fe502a985179965116b7676661339263f5a7da3d0fc5c6dc97ad964762183d37ddc05e25a372556c6a3d08d661d34c3ddd2fe99c06454684a449d557bd9647d9c734c8774b8ed3c473872e0672dcef6e017f1585e4637538ae56016221a556940d11979fe23e7710780ae93e7ba278630c34183dcbe25538138761b70a16e3b5dbe33e25a048907c43a436d3ac7380c6092682b736d53452166bb7cfc06ba119db2810e06da187274898250b8f9040048b983b090f2274a19994ada95312e967afd0b44a604e291f"}, @NL80211_FTM_RESP_ATTR_LCI={0xe, 0x2, "1341f5f77c9547626992"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac02, 0xfac06]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac08}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000000) ioctl$FITRIM(r0, 0x40047211, 0x0) 21:50:39 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f00000000c0)) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:39 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x4000) 21:50:39 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000000100)={0x2, 0x3, 0x4}) r1 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r1, 0x40047211, 0x0) 21:50:40 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x1, @rand_addr=0x64010100}}, 0x1e) recvfrom$unix(r0, &(0x7f0000000100)=""/243, 0xf3, 0x10100, &(0x7f0000000200)=@file={0x1, './file1\x00'}, 0x6e) 21:50:40 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) getdents64(r1, &(0x7f0000000200)=""/159, 0x9f) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) accept$unix(r1, 0x0, &(0x7f00000000c0)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x80) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:40 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x2) ioctl$FITRIM(r0, 0x40047211, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@union={0xc, 0x1, 0x0, 0x5, 0x1, 0xa1cc, [{0x5, 0x1, 0x5}]}]}, {0x0, [0x2e]}}, &(0x7f0000000100)=""/94, 0x33, 0x5e, 0x1}, 0x20) [ 1129.601247][T23894] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1129.851168][T23894] usb 4-1: Using ep0 maxpacket: 32 [ 1129.971176][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 21:50:40 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x8000000) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00) ioctl$FITRIM(r0, 0x40047211, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 21:50:40 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0xf5ff) [ 1130.141226][T23894] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1130.150292][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.159292][T23894] usb 4-1: Product: syz [ 1130.163873][T23894] usb 4-1: Manufacturer: 粣ء烑ঔ替芃熰ೃĆ [ 1130.170663][T23894] usb 4-1: SerialNumber: syz [ 1130.211566][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1130.454274][T23894] usb 4-1: USB disconnect, device number 76 [ 1131.221204][T23894] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1131.461198][T23894] usb 4-1: Using ep0 maxpacket: 32 [ 1131.581220][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1131.751211][T23894] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1131.760254][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.768820][T23894] usb 4-1: Product: syz [ 1131.773251][T23894] usb 4-1: Manufacturer: 粣ء烑ঔ替芃熰ೃĆ [ 1131.779727][T23894] usb 4-1: SerialNumber: syz [ 1131.821535][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:50:42 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f00000000c0)=0x1, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000001c0)=0x1000, 0x4) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) recvmmsg(r6, &(0x7f00000058c0)=[{{&(0x7f0000000200)=@qipcrtr, 0x80, &(0x7f0000001540)=[{&(0x7f0000000280)=""/2, 0x2}, {&(0x7f00000002c0)=""/140, 0x8c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/90, 0x5a}, {&(0x7f0000001400)=""/18, 0x12}, {&(0x7f0000001440)=""/194, 0xc2}], 0x6}, 0x8000}, {{&(0x7f00000015c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001640)=""/129, 0x81}, {&(0x7f0000001700)=""/119, 0x77}, {&(0x7f0000001780)=""/185, 0xb9}], 0x3, &(0x7f0000001880)=""/132, 0x84}, 0x4}, {{&(0x7f0000001940)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001ec0)=[{&(0x7f00000019c0)=""/20, 0x14}, {&(0x7f0000001a00)=""/242, 0xf2}, {&(0x7f0000001b00)=""/157, 0x9d}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/17, 0x11}, {&(0x7f0000001cc0)=""/240, 0xf0}, {&(0x7f0000001dc0)=""/225, 0xe1}], 0x7, &(0x7f0000001f40)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000002f40)=@can, 0x80, &(0x7f0000003180)=[{&(0x7f0000002fc0)=""/179, 0xb3}, {&(0x7f0000003080)}, {&(0x7f00000030c0)=""/38, 0x26}, {&(0x7f0000003100)=""/83, 0x53}], 0x4, &(0x7f00000031c0)=""/34, 0x22}, 0x2}, {{&(0x7f0000003200)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005780)=[{&(0x7f0000003280)=""/164, 0xa4}, {&(0x7f0000003340)=""/88, 0x58}, {&(0x7f00000033c0)=""/141, 0x8d}, {&(0x7f0000003480)=""/251, 0xfb}, {&(0x7f0000003580)=""/182, 0xb6}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f0000005640)=""/35, 0x23}, {&(0x7f0000005680)=""/243, 0xf3}], 0x9, &(0x7f0000005840)=""/102, 0x66}, 0x3b}], 0x5, 0x100, &(0x7f0000005a00)={0x0, 0x989680}) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000003080)=0x1) 21:50:42 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f00000000c0)={0x8, 0x3}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:42 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x3, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x6}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x2}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xb0a6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000801}, 0x40001) prctl$PR_GET_KEEPCAPS(0x7) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:42 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17, 0x1}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x2) ioctl$FITRIM(r0, 0x40047211, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000100)={{r2}, {@void, @max='max'}}) 21:50:42 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0xfff5) 21:50:42 executing program 3: r0 = getpid() getdents(0xffffffffffffff9c, &(0x7f0000000300)=""/193, 0xc1) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES32=r0], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc0c}}]}) r1 = dup(0xffffffffffffffff) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f00000001c0)={0x9, 0x3, "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"}) [ 1132.084486][T23894] usb 4-1: USB disconnect, device number 77 [ 1132.132240][ T6674] FAT-fs (loop5): invalid media value (0x0e) [ 1132.138330][ T6674] FAT-fs (loop5): Can't find a valid FAT filesystem 21:50:42 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x80000) 21:50:43 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x800000) [ 1132.551181][T23894] usb 4-1: new high-speed USB device number 78 using dummy_hcd 21:50:43 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x1000000) [ 1132.821187][T23894] usb 4-1: device descriptor read/64, error 18 21:50:43 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x3000000) [ 1132.930227][ T6684] FAT-fs (loop5): invalid media value (0x0e) [ 1132.937205][ T6684] FAT-fs (loop5): Can't find a valid FAT filesystem 21:50:43 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x40047211, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000300)={0x0, 0x0}) sched_setattr(r2, &(0x7f0000000340)={0x38, 0x0, 0x0, 0x4, 0x2, 0x0, 0x10000, 0x5, 0xa1fd, 0x3}, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0xff) inotify_init1(0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$getown(r3, 0x9) r4 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x2, 0x400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140)="7b607930383671de37cde315c58ac58b27f793e0f4ed6a148928f7736d498f76add9f37c3111397131db1a69223761cf5e7f44db9ae5ddc6bfcf51d17cfca6c32313bf14ae9d53973fc9c3129ddfc91c241b9b4b46b7d98a53a4736c4a9dbaf4b88317ea12d7d9d4acbb88273d30570064f541182ad0cee78bf4e587f37add040efa513569c310742e279dacc149d925372714f07312473d0765", 0x9a, r4}, 0x68) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x1}, 0x4) 21:50:43 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:43 executing program 1: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xc0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0xfffe, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2}, 0x0, 0x0, &(0x7f0000000200)={0x3, 0xb, 0x2, 0x9}, &(0x7f0000000240)=0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0xfffffffffffffff8}}, 0x10) r3 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r3, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:43 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x4000000) 21:50:43 executing program 2: r0 = epoll_create1(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000200), &(0x7f0000000240)=0xc) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r2 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) accept$unix(r2, 0x0, &(0x7f00000000c0)) r3 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x2}, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r1}, 0x8) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/locks\x00', 0x0, 0x0) r10 = signalfd(r0, &(0x7f0000000380)={[0x44]}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, r8, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r9}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r11}, {0x8, 0x1, r1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x48040}, 0x4041) io_uring_enter(r3, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:43 executing program 0: r0 = epoll_create1(0x80000) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f00000000c0)={0x0, 0xff}) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000e0601040000000000000000050000070500010007000000050001ec070000000500010007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x2010, r5, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x800000, 0x0) r7 = syz_open_dev$ptys(0xc, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r8, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80014000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) syz_io_uring_submit(r6, r3, &(0x7f0000000080)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4007, @fd=r7, 0x5, 0x3, 0x81, 0x1a, 0x0, {0x3}}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1133.211295][T23894] usb 4-1: device descriptor read/64, error 18 21:50:43 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x7000000) [ 1133.481244][T23894] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1133.751302][T23894] usb 4-1: device descriptor read/64, error 18 [ 1134.151235][T23894] usb 4-1: device descriptor read/64, error 18 [ 1134.271287][T23894] usb usb4-port1: attempt power cycle [ 1134.981236][T23894] usb 4-1: new high-speed USB device number 80 using dummy_hcd 21:50:45 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1241, 0x5015, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3863f06d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) 21:50:45 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) keyctl$dh_compute(0x17, &(0x7f00000000c0), &(0x7f00000001c0)=""/174, 0xae, &(0x7f0000000300)={&(0x7f0000000280)={'sha256-ssse3\x00'}, &(0x7f00000002c0)="e851", 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:45 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x8000000) 21:50:45 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x9111, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17, 0x40}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000100)={0xdc, "9873517e699e971daf6d2f001e74873f0231b144c9c220837f9003c7280ca2c17fe727401d37ea87c762f2da28d8f3d31e7142a2fd0972fbaa82d4aa73b9acfa"}) ioctl$FITRIM(r0, 0x40047211, 0x0) 21:50:45 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/meminfo\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7201a960632ed46b0fde8aad6bba45825a570e80e9649fced16db574dd5a49d3145698a6e6995b025f1e868d", @ANYRES16=r1, @ANYRES64], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x2, 0xffffffc6, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x40, 0x6, 0x400}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0xa0, r1, 0x0, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x9}, @ETHTOOL_A_CHANNELS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7f}, @ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc010}, 0x20008090) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000880)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x14, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xffffffff}}, @IFA_LOCAL={0x14, 0x2, @loopback={0xd00000000000000}}]}, 0x40}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000003940)={'tunl0\x00', &(0x7f0000003880)={'syztnl2\x00', 0x0, 0x80, 0x40, 0x3, 0x401, {{0x1f, 0x4, 0x3, 0x2, 0x7c, 0x64, 0x0, 0x9, 0x4, 0x0, @broadcast, @remote, {[@lsrr={0x83, 0x27, 0x39, [@remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x36}, @local, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x37}, @loopback, @rand_addr=0x64010101]}, @rr={0x7, 0x1b, 0x5c, [@broadcast, @multicast2, @remote, @private=0xa010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x35}]}, @timestamp_addr={0x44, 0x24, 0xb1, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x14}, 0xc3f}, {@multicast1, 0x4a}, {@multicast1, 0x871}, {@rand_addr=0x64010102, 0x40}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000003a40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10020400}, 0xc, &(0x7f0000003a00)={&(0x7f0000003980)={0x54, r1, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) r9 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r12, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r9, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:45 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) r7 = getgid() r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) statx(r1, &(0x7f00000002c0)='./file0\x00', 0x6000, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r12) r13 = getegid() write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="0703000009000000", @ANYRES64=0x0, @ANYBLOB="0200000000000000030000000000000002000000000000000a00000000000000390100000180000001000000000000000200000000000000080000000000000001010000000000005c00000000000000070000000000000004000000000400000080000000c0000010000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="070000000200000000000000000000000000000009000000000000000b000000010000002f6465762f74747953330000000000000100000000000000000000000000000004000000000000000180000000000000ad0000000500000005000000000000000000003800000000060000000000000000040000000000000500000000000000000000001000000000080000000000800100010000a000008b0e0000", @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="ff07000000100000000000000300000000000000000000000000000002000000040000002a2d00000000000004000000000000000000000000000000d0ec000000000000060000000000000002000000060000000600000000000000400000000000000005000000000000000900000000000000060000000000000009000000000000000300000008000000c9c5000000600000ff0f0000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff00000001000000000000000300000000000000ffffffffffffffff0100000003000000270000000000000000000000000000000000000000000000ffffff7f000000000600000000000000c1ffffff05000000060000000000000008000000000000000700000000000000050000000000000000100000000000002ebc0000000000000200000005000000a60d00000060000005000000", @ANYRES32, @ANYRES32, @ANYBLOB="000800007f000000000000000200000000000000000800000000000001000000008000005e0000000000000005000000000000000200000000000000080000000000000001040000000000000700000000000000050000000000000009000000000000000900000000000000eaa1cd5500000000001000000000000002000000000000000100000020000000070000000020000005000000", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="010000800300000000000000060000000000000002000000000000000200000000040000252b000000000000"], 0x338) r14 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1135.160390][T23894] usb 4-1: device descriptor read/8, error -71 [ 1135.174069][ T6762] FAT-fs (loop5): bogus number of reserved sectors [ 1135.185279][ T6762] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1135.192815][ T6761] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 21:50:45 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x40047211, 0x0) utime(&(0x7f0000000040)='./bus\x00', &(0x7f0000000100)) [ 1135.219235][ T6762] FAT-fs (loop5): bogus number of reserved sectors [ 1135.226589][ T6762] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1135.252939][ T6775] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 21:50:45 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x40047211, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./bus\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:syslog_conf_t:s0\x00', 0x23, 0x3) 21:50:46 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x459f, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r1}, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:46 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x10000000) 21:50:46 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:46 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file2\x00', 0x9, 0x0, &(0x7f0000000040), 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r0, 0x40047211, 0x0) [ 1135.411271][T23894] usb 4-1: device descriptor read/8, error -71 [ 1135.440348][ T6804] FAT-fs (loop5): bogus number of reserved sectors [ 1135.447184][ T6804] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1135.476765][ T6804] FAT-fs (loop5): bogus number of reserved sectors [ 1135.483373][ T6804] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1135.901324][T23894] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1135.991282][T23894] usb 4-1: Using ep0 maxpacket: 32 [ 1136.111289][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1136.281270][T23894] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.40 [ 1136.290297][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.298293][T23894] usb 4-1: Product: syz [ 1136.302481][T23894] usb 4-1: Manufacturer: 蚣ؿ铑）荦낂썱،脾㕚്Y [ 1136.309840][T23894] usb 4-1: SerialNumber: syz [ 1136.351901][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1136.553049][T23894] usb 4-1: USB disconnect, device number 81 [ 1137.321303][T23894] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1137.561266][T23894] usb 4-1: Using ep0 maxpacket: 32 [ 1137.681363][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1137.851392][T23894] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.40 [ 1137.860456][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.868444][T23894] usb 4-1: Product: syz [ 1137.872640][T23894] usb 4-1: Manufacturer: 蚣ؿ铑）荦낂썱،脾㕚്Y [ 1137.880040][T23894] usb 4-1: SerialNumber: syz [ 1137.921795][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:50:48 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x330c) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:48 executing program 2: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10d8c0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r2, &(0x7f0000000180)="d7fe273de95ba10813967072f24df725c33273a9325631d1cf5e65abd22fb4dc89840dac9928ddc79f1ba209f4a636277d20420294e6e373a3974aac12c03ee08c8a03993d896fc7a5bab6f5892fa8586a73d302a6d5703251582f25211e84437faad9e915c48cdb2e32210040358ffc874ee32470ac454f29ad9f4d2fec49a048ac76997e003c5744e2ebb02859a7203ab342dace1ecc9ce9833db6cfc05720cd86a50391cf56ffbb7966d3051198dd3cf6d5d1a2b7e5eb0f04eb4f0490000f11638d578f70c7abebe11bad17afbfe5820e21b00a2e546f011c2e3e63563b1f0494d55ef5cd9213f14bf18b8df5f5296ccee4249a9e0446b34d93f242057a8fecee9409916eb45fb72b6bc19b72792eb156fec5925f9bb009eaa1b3614ed999b1c73ecef89885d8b42f3bb26d6ae60d235be927bb9a56a0d1759ec89b4de2fc59671f2c16b688d924a62e45440155eb4f543dc9f0f7872cc66c495cc38a6d2db71858d1dc577a5071ebac1884bfb7db9cc35d0ed6a2cdf4560b18c21438b8f48e2d4b61fa460c3da070ac71606a872d97b4db321b895a575beaefd271a862af0f26982116a5fa444fb8f76a683bf396b83cb74f37c9c1c0db6e8f622622e20f30adb69a3a324f1eedc866c0f096fb928fec2abedb58321f2ce3224f2e29d2f34d7f5c6f584b28c4939eb1a22a2d6d23e34d3ebb49418dc265d7405e740cbbcef8c498c6f3cb8ce13df02a7cb62df8d08d894ee3d54b01377bb28776094b7479c224188d7cc867230716e6fb34785152cde48a58c2c2db93b885b9fc1fe53f5fc8985d428cf2ac4e4ec4667c74859e087c247e6de183c00d8d0affc0c629322dea7791262491009ac236df3caabbaf315f2bc18a270d284aaed7977f48399b405faa70f737b4696c10f8140c684b603615d130df48ddb9afd4ea1dbe329f4a13b79a4d18bb8b51001211df78021a00cd23e3283ef686d74c9d7edd1988ec7e72409226cc14c4a4f0f3fc6fd098b61e6a5d13d22647808278cc8c1595ad3937443e0685a8be17af770118934ba9d64a0ca68f5a2b8d24e71147d1558162814d3aa98851cf8ba041493bcbab456f0ce9f8c4cd963a7dd9b69be5283f2f0cb63d0a341ae0de549df7ed18965f9f25c831f788e4d423bcd138683f36554a516f9856e7a3427f2554d5ccdfaa1047f2150fac2dadbcf7e19139609be1b6a882ee148af7112e0fdb95e27839f9cc9a334058e384e83c2386c042098564ea408a835461f89ef9ba22ade6dd79ea8a05e92f46bf9b49d22b918d543ae1aec1b0594b47b99d34fd4695d1b7de56022f61bf888a9a67f5643e1042b7176d5c6da3026f47b8e57bb4049670d64937499762d83fc71b369da0fd6ee1b9fbfb0cbf840950aaad97a875cc6d54be22e978fe76ff3467cef81938a132186f0a61f1ea05f30c865a323fb170d1886836ca3e3bbdbc5618067761d889984d611cb8cb2ed267521b1aa67b68d16dcdf7a4634ce930c60749ccf65fd8bc3686bc23d13ae68ec8f8bc7e76e4532c6ee495cb07f1d87f77be937ba4255f8cc1b2163ba41f098553ade30771c574b0c26d727650c65d6cd57abfa11346f4035bddcd5d2ac070d5e5a7ba1b089c76b9ecede349206b5f1eb9dbd6224583f6bc7cfe419e6232e6a9ea298e0f58f88b5e1e3ddba3fe482b3635f854c4de1ca1dec955de45e955c3f68bf2b57511f91b89d010dd7a4d4c98185eb2a1a7e3a706dc12bfba8521cec9e09b748027c5a795d8b1d84ec9f40f1827cf6987c07ec787beaa2703930d0737301549471f694632f32c8318821c406aec20f3d9a93d5b7ea7f7a8d505b5a857c3aa3bc958999d2dec4d3d3d5519279cc78886bc782d78a2b051f046c43078e19669fd4b87d27b0896d4e6fdbe3b65868f651205630ed110e15056f6dc9c5c733b01c5f93d04f5f5ea2c02fc5207506479923da6a8d40800f18a7908589f90f569231284f4bbf42448a052cbe5f38a5f969d169f42ffdcc0328b2455238075b6b08e5232bdc588031b1052cb20497379d8bffad6bcbd14ef6cef579e7784b4f0ae2449824bd60c2b7d73accd183eb5eff736e4d6395e4e1da149121a62de388d229cb2139a45dd61288af89d346fabd3b210e2331b7097d2266506123078b6c07273172224f47b0e1c8f620659953c69f7b9a0e3af14cd844336e49a85de8ae36d5c68abbf25f2601418cdf20c4f4d0a2f03715600f6399a9cce07393861d9aba51833335421a3450f040f13303c2eeee1cad1cc44a10a1d3aaf43f15eaf266b799beb6c38a2bf42e16ab98cc11bd81a309119cb709edc7e8e378e1fb41e3623cccbad574c243dd96dbe821d6ba488c0bc716cdf7b5394b15bcf5d769d20d919288e5a95162753082f1720f05d1458f52d6f21ced6e32415c4ce278d6f3f53f9cd86a301478131c5b2da62cdee3de221c628e4ea9691ca10865a4109f8d9af8bd49ff0ffded6d508098e2c5c3bce3e5747fe72d5591d3c99dd26cb9700665555bedc9ef28b13fcf6f06441a91178a4ecf56ac7db0140965ad8726da7efae5933f4e96f15f5a92f575454135ee8d276a2421ffe0f8f662bcf72d3d35313db182da6a383991ba78b114b741cd12e487a017b0e9ff3b21ba861ef3707a22037735f032a12f0368ad4fe49bdc8c60d9e1a128b6d7595aa932066398a3fbe4269739bc46b5b72640ecbc9cccc74e338dbbafdab52882685c4c6ed2a5e04464de4861f2ababdf3b2f65b2b8541cc1bb202a6697f3b94bda3e7373559850efd8dba8794f7f2685ed2cbd80f42c6ca7994c0a4cc8b0b2c4bd64f81234f2ce2ba6c7f334c44d9add8a68bb613b1d92626fd83394529eb3e33feba9707932ee44fdcb084eee59930309be22158aa2ff1ebe074e02e14b9b25ab0a00369e64803b82ec66952113eed13b10d6c13ce844085e6a59e5169d8c0a87443c6d1a0676f753d205f993ef53398546cc854596a7107c2bfafcb3d89d79f0ab379b27752874d49e408ec749231c4e82e2ac5f0523d61385da06a18a30ec204040f17342e584ea49782876ff31935bb9cf3347f077c4c0e8f74a29f36c15b689ea96897d305ac4511875f15df86dc472809d6f13a7134827cd367e9fb860195bc1396dac9322bcbd86e20056ba8cc5f6229189f1212cf1865d4b72610bed9fcaf4a6646d0e67e97cae37098386279701329efe2d2494e5ff53fefbeb0b8282b3a3c11e30e4fc347d79c61d48381545a52c3c71fb41e416435a6b15e06670713c0f7e526d1bd612b346daeb4b7bafadce166b6434815f1f510e82f7bf52983a57c1ef36e0f8e385e953073f05ad79f7f494bcf60ccc4aa447b77a798b0ca8db69106a67b2401716e18156ea8dc7b63b306aa6a17b9fb99c5edd0fd573b6d32057e8803375df92d109290955487b9046b345b646c488c40201b39c4a76d03a89ce66b6608525a902827bd1b4623cfdd03f4b0f5dcb3a433f5bf13026eb5d338f8f089f90df9dc926cf6dcd792fcebbc8c69bb5d54a38f40cae5ebf98d7a0052607fc963a3dfd154388b019823818323e8c8781632bab41f5a52c88fc3205fe83e3601534ee6189733e5146aa97ba46a1f8766c153af2a02c6ee401b9c6840243c91871c4c2db1abfbecc99da4c7653ad2ebcf39acf14b5221cf00f8b9e103914a5e05b6e226038271295d2c0828cdd00e5b90cfcd95368cbc97db5a5f2f8dd65a1750dffd441ca05bc86a5d41c9e0656fd7e9b0d56c10e2e54e4629275a372b03b67090b21a71295f2f40e13c444e1f407292568778e3e0d2aee3fa6e15302d483106fbccdbbeca6180b578b9db065815643bc5d079591d50d8f3fba41ec2d9917da728476401ee17fdab8794a079bb6622b5794b4b5a15ef0c61f47ba1bef0c19b81f08bacf134d84c6d5beda6b0bcef54b4486a1f2cdfe3ad2ea0cee4ddebc291300fe93867f931e1b2dd6e49fca710480df28ebf1b9a14064dfe65307c3a27331e408b85dbf6da340e468645359f8766aa272e5ffcca11d0a4efae62a062e91c51160a9370e31c054099311c5a73a5734ee7882b756378b0181bddc151f90b4a6c73dd1c587d6358f9afdde084e7281dde70931c8680d5017ac964a8d0f42566bd108193ce3c1752fdfbe1e255130d696db4d8c80c673a485ebbd666c7f39b5e65016516b142760322d45446b4b076940166c890850246d9274d288368bce91b0ab6e9d2eac73565479bd7208175e03be7bee142fdc6dce8fb02c302d27f3aef25edd745786ba77fa2b57c34a52a251cffed3818ed114f111114c8f04e4ca25bbabc9ac5b05407a1c875c49ec2e0e072860dc38e6b5db844e421934182f49799411bec6a518891f0dedffa51ed08a3e29172e31ac6a5dcc62e9cc18797951f51c94d0700b335561268c7703186892b623384d0beb2cb35e59403b9900499aaa6c79ccea0c3a8498c1ac296822b7181710cbf23081f1f6ca47496181d04c179b03a2b9d44c8826c9f9f1f90cae3a2dff5a06a01cce5f00b174bb6dce5749f71131f4fdadc4b7d90977467e4a436d64f2c2d32969ba26dda515d8104e21c0ec7c773ffabe430e0cbb136681609e9d894d2cbe023fab5d0167c8e6ef60e4c842c50cb9ad9536b5df51cc93847112113f1cc45ad65bb264b198b7910caad62ed5b2b17ccc8f6e34f91048acbefce4864b0de208b36f4e2002dfa9c6c938677535d879bcd71c47c835a63cb78c10cfde8174d138d6646804195f2e55980b942aea425d21c1fd44e9ef249211b42714387e9d39a336d33df97e285b337ac4e1d481a5b721dbc38b7e3ace8c3034db63814e1b799555cea3bd7af968a80f312bc52a49fb19745fefefa537beafadb4dbd8c2724d7698a9a0fd953108e4d81312ccdbf310baafd72b002f54cb07cd237591a12c0faa77b4f3fc32ea9b25228369d4121bc9f0b4fef1905c5d3013b6189ca452ca637061b326406e2457a9b11e6fd0f3f52e24d73f136cc22137770514b225aee9904a463e5baa5a554d8a09e0f05bd7156ceabc316fe9c4f3b5fce567f5dd8815d92df5c4ef92928b952b24f588b317fbb940a5d21bb18657495748c14fc578e45467c0f6f8b586c56668e7b938c37d73d3aebd2dfb227c037a7618e26e367caa4130b350ce69eb0035dea0c91bde6e2a39035f91e88e739aafa77d56e2efebba06935ab28956f2791095645cfabcfae23d286c0ae72ccc78d7585d1e11b6035361295b20ca4dac08117ab8273e2ddddf072de693ed065ecbbd8ff7f08ba572ff2b5dc68af3de6e78a506a0dd6d003c1da5cc8473ef8884f486c48d553a71fb22e7cc3146e0e85aa396a1959654a44f666d1d54be4b4d1a581640a65f589dd04dfbde41958e242e46ec95455c6ea946d0ee8df80ae624b3d1abbbc45d5e555e99e8964466684d8eeadbd64b0738d25a0f45c3dc38d2fc4da5f2269bc383020044a9bb70412f1d294f4e38b82d89928a85ae01fd07bcc8175368eaea09ca67d041deba0a6f92bccb23a47720ff0133f93e270dc01185b78a33ace4db954f56ec4032ec729db1eb5e1d5178efd4dc18c85566edaf928acf0d3f209ca6342b7c31dc1b039cd40ef07beace6f63f1390bf860853316a01aa9624e29d5a1dc5facbb17724e01249d6b3ea9ff3844d9d50d4b3a11072142092eaceaa8d9d2145ebb2bb5a30b8b28316a71edac95f5b92a64cbe64c5c1c2126861019534456617f27168cdd05c705abe07e234cfe63b91c2490e0f8aba56ca5ad88e95ea9c8caee0fd54", &(0x7f0000001180)=@tcp=r3, 0x1}, 0x20) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001280)='/dev/rtc0\x00', 0x81001, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f00000012c0)={0x10000008}) r5 = syz_io_uring_setup(0x3476, &(0x7f0000000080)={0x0, 0x1000b245, 0x34, 0xfffffffe, 0x385, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000100)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) io_uring_enter(r5, 0x3f, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001240)='/dev/hwrng\x00', 0x100, 0x0) ioctl$UI_SET_PROPBIT(r7, 0x4004556e, 0x15) write(r6, &(0x7f0000000340), 0x41395527) connect$pppl2tp(r6, &(0x7f0000001200)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x0, 0x0, 0x1, 0x3}}, 0x2e) 21:50:48 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x54) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000340)=0x2, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r6, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/149, 0x95}, {&(0x7f0000000a40)=""/3, 0x3}, {&(0x7f0000000a80)=""/179, 0xb3}, {&(0x7f0000000b40)=""/183, 0xb7}], 0x4, &(0x7f0000000c40)=""/28, 0x1c}, 0x4}, {{&(0x7f0000000c80)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000d00)=""/143, 0x8f}, {&(0x7f0000000dc0)=""/24, 0x18}, {&(0x7f0000000e00)=""/143, 0x8f}, {&(0x7f0000000ec0)=""/9, 0x9}, {&(0x7f0000000f00)=""/60, 0x3c}, {&(0x7f0000000f40)=""/48, 0x30}, {&(0x7f0000000f80)=""/184, 0xb8}, {&(0x7f0000001040)=""/106, 0x6a}, {&(0x7f00000010c0)=""/146, 0x92}], 0x9, &(0x7f0000001240)=""/159, 0x9f}, 0x80}, {{&(0x7f0000001300)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000001640)=[{&(0x7f0000001380)=""/233, 0xe9}, {&(0x7f0000001480)=""/249, 0xf9}, {&(0x7f0000001580)=""/155, 0x9b}], 0x3, &(0x7f0000001680)=""/204, 0xcc}, 0x30000}, {{&(0x7f0000001780)=@hci, 0x80, &(0x7f0000001900)=[{&(0x7f0000001800)=""/251, 0xfb}], 0x1, &(0x7f0000001940)=""/4096, 0x1000}, 0x80000001}, {{&(0x7f0000002940)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002b40)=[{&(0x7f00000029c0)=""/200, 0xc8}, {&(0x7f0000002ac0)=""/29, 0x1d}, {&(0x7f0000002b00)=""/46, 0x2e}], 0x3, &(0x7f0000002b80)=""/12, 0xc}, 0xa51}, {{&(0x7f0000002bc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002c40)=""/27, 0x1b}, {&(0x7f00000005c0)=""/204, 0xcc}, {&(0x7f0000002d80)=""/125, 0x7d}, {&(0x7f0000002e00)=""/117, 0x75}, {&(0x7f0000000440)=""/171, 0xab}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f0000002fc0)=""/53, 0x35}, {&(0x7f0000003000)=""/18, 0x12}], 0x8, &(0x7f00000030c0)=""/17, 0x11}, 0xd48}, {{&(0x7f0000003100), 0x80, &(0x7f0000003500)}, 0x1f}, {{0x0, 0x0, &(0x7f0000004940)=[{&(0x7f0000003580)=""/175, 0xaf}, {&(0x7f0000003640)=""/53, 0x35}, {&(0x7f0000003680)=""/96, 0x60}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/18, 0x12}, {&(0x7f0000004740)=""/76, 0x4c}, {&(0x7f00000047c0)=""/108, 0x6c}, {&(0x7f0000004840)=""/224, 0xe0}], 0x8, &(0x7f00000049c0)=""/243, 0xf3}, 0x7a057be2}], 0x8, 0x22, 0x0) fcntl$setownex(r7, 0xf, &(0x7f0000004cc0)={0x0, 0xffffffffffffffff}) dup(r6) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='uid_map\x00') ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000200)) ioctl$BLKSECDISCARD(r8, 0x127d, &(0x7f00000001c0)=0x48a) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) r9 = openat$random(0xffffffffffffff9c, &(0x7f0000000380)='/dev/urandom\x00', 0x105802, 0x0) prctl$PR_SET_TSC(0x1a, 0x1) r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/cgroup\x00') ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f0000000400)={r10, 0x9, 0x6, 0x3}) 21:50:48 executing program 5: r0 = syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x9, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="9cea9c93dff3b0a6e9862db0edc81626804c3abd4e243b3d5a4d816989d9de3e197af22ce45883177b46db5fd1519fa8b0aafd51103d2ad7b97af402d34bde7fdab172ee501e8541feb30096e0d5807e30dad56fb5e965b7f04e5f0f93fb3da13aaa3e74b4c85fa58100b2a0500af98a9c43a70d0bf84577da8d33b554c3a8f19ae119f6e1de65a6", 0x88, 0x5}], 0x10432, &(0x7f0000000240)={[{@fat=@discard='discard'}, {@nodots='nodots'}, {@dots='dots'}, {@dots='dots'}, {@fat=@check_strict='check=strict'}, {@dots='dots'}], [{@appraise_type='appraise_type=imasig'}, {@obj_role={'obj_role', 0x3d, 'check=strict'}}, {@seclabel='seclabel'}]}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000400)={{r2}, "de624f34d60733af914aa8dab0eccc3ecc197147df169629430be134322b28e39a2e3904575cf538edbb2168c67c8c27b9ff2e892539f5b4cfb85a99e176fc6041516a6a2ae20e666718f0791034e89d384011b91fc84fa2666d90a2f4a4956f61d4407b41ed8c0ee280bd47928c9f97c760136694fb64db8480d6b51feb7fc4ea14e1b63ac3a681f54e59480157958e9552f93c16aa93fdfe4eb1086f27cc737cbccec3f5492507f124b8845f489f0e440f76891876bea97141085368185758f8c20b3b6fae0bd5da288c67eb5820f1b537f316b4ff125492cb3bb9dfdcc1051e158c878c2889536c5a3a15e03df855b83837c3c68532a04d60e0e8fb4e1cb2267403f10ffdecdb235e2fedd8bcc9d8b06b292cec7b85bd86cfabef0900dc7111debf1048e6aa3eb124d988162b7d9dd9b7cd693ca395f55bcaa6be7b710c411d52b2e3bce23db8f081f622f75a0a2940111ec73ebc2b209949787479cea4622f2ee9479a6105a554e0d82eaddcd688428c2fe66dd6ad16ee64cc6fd2870f418baab87bc705d44abaa6f8ab6e367a570bad61782a0c0f1ce82ee6d476e61634b4661a49c64364258ee47d65eea31564f017753d3e9f19ecafb7da2cdcf093f886f8f3075ef063e6f5bb0ca816df745d95030471490b4fa08642511e7db0395d4ecc255603c1ec111aaa502666833ca4a5e2505cb49acedea98cffc137b289ca2e8871362164f79858146d6fb1452613ba38578d189959b69fa274d7fd632bed68cae8ac6d88b994e823df2be299878997c12cc136492989e48be38137e4e8691409569e6a7c5f9df9c11b417a0113eb32428d043ec14562dd5e778db9eddfe88b9045f4ce716bbc6a42232861450d717ca076c85e308b49b135150b5ad5c071b67c908742630f9ad10fcd92ec5eaec941b933deb4bdbaa402143fda216a97bca876178c5a38737634d8a8f6085f844f74c6203a1216e6cb921e87720a831276383193b62acaaefb6d6cfe6db97b885a589a5f8702c3cbe766cc712b9495a45e7277b93f34ef8d44efe08a5276123fcfb048093b0096bfeb60ccb3c04d33f7b96073a546a5daa1bf0262115e09d6c0ced9a51189acdf0d69da6167d687099d1fd5c674c73b246e34df2b095f301d55e0255be19cac7fdd4b5f24dcbe08a39ea59e2348b8e9bf9d96e31fa0c3be2f3aa1a14bcc1c239d1dacfed9aa168f97b3396036349d022b9d69c10d4b4f4a83c68f53b5bd3170542ff28c16322d293db61e4f3cb1beaf096f3c6d8bbe2b36d873992983e5cd2ad8586a6577cd4904f8a0cc1bf49cf0c0f275aa25f83736342b94d7cdc63e554885590dbfad4d21c5acc1b47d5e0eba9b17bc3aac6b4d344fe10b54026818008dd7e19c6039dbd1f4c8bd13041015278dd60d868d5e77df620eecb00cd4f0e34b430b7573d5b401398d46f336cb92d07f65bc4dcfdd32a2636297e8d1d6b0e4e6bfc65077dd8fed4f9dcf46c7cdac707a10c50325e60a7db6fb663322da37bdd28ac4f476304a86106a7ba4ad4ab1e55e9991f8f6af4a434244484387ee80fc52b89d4623e3e0d77548f969291281ee801a3576c16c485c5cb5ab6e72b8c34d365ce13c0b35e449b375702e5a3c612aba2ae818156b4114c6b0c64de07bfde807d99254c7510cf50f1f4187a27f22504a8a75512b81b8484a17e4d20ea8f8dbb2055453089c86f02413131f6812bb0dc7b442c34fe3d5ae66d21e3e55f4266deb27616d70c176a70a0f53c2d193ef5b639c72b2ab2dccc730a391fecd38efc9e4477b0f9bcc38984af9ca952623604a1cbfba404e1bccbd60bedcbbba5605a4e666304e6c56503c2575d9d01a648ddbaf95ba34bd754b4869d8f727e02754ae3346f72cd096129e135b5ad9aadb196bad60cfb4d50183c1994f392becb686b27c1d84f1c5a96f977639fda8b62d3526d6f478a0a93442eaae3517d30e3b9c2ecd8e8410d72842d066fad58135e67fff71a490c16814951466085695893cd80eaa9875473cf22a49b8655564712834e7a7a56f76736814cb244ac0e2d36f9b45ed6836742bd69747dffe5144094246fb074f6e156054ecd073eaa367d525442c61f7a7ced98111feeb1df16d7a06b2d6775b63cef82fedac7f7da87c46b6601a33bc06d82a7876d1c0d06facf26928afbb59f1a108d2036cc4ded0985b6579a9d075cc79ed9b3c916a22725a19c911a1bca3a0ddb9b98b9f1d31cadb3932651ab390311b6d99473f1026ecfc38f64ee28541cd858b477574adff0b66ad9bbf65afb8d5438a8a02bd4edf4370f67f860618386a53cff74bd2fa0e21ce7f67121ce59d45ef7e382292877d7cdea0bbac163e9392a9f6e1a6f9cccc2df75b6ca4518a359907f1b39aa57ee1ad03e03b2136a73c916bf786356c8e00a9dd53f12587a045eb9259543f8a131eb3eaf4545d1c6023def7e07433f4fd8a6dc4fccd8f7c57e88c794b459d9f46e418fda33750fe56490fbc3a1b96d8aeb26bd1e978efbaaf09af2b1f0524fdcbc0054afb6806aaa4a90d3259e3c1c1e9a4a37e55eb45dab410acfa3d8ec3277fd7fe39aa1772415e13391c5dc349a3648860c74e4037fcc81d10119e2f6095ae70f49b6e298dc8b62543dd483a6078e2a225b93427bf322901506852c4e0c06d7895328a0de5dc2469f9245e5647627b2b9bfec6fc236d6c4987d6aa1f337148d4df3c330c42c1b1a0d10365c9818b6a7fa55d05f56ae05d36c062400880ba5426a5d8d374d851b15aea6e08757434f5b80d9ab966ee9d532b2d5615661eaba68ca95f0a8917fc7b18e695c79c3eeec02bf2c12591832babe433b620234499eed30ca2ab7bcc0121e8aaf48ee05a04a89c7aa2397b45fa97cc914bae64644f3d0416dcfa1d5f975f1f80239334d149478ca2d8b997adf413db1d3908f12ba0c03ae9adc19be64c2923260d4e2a5f3612223fd35eee43d33805e2129e6ec235c156f5dace0116ae582ceb09408bdce01356ec3a51cf43c185bcfd6e56bf0b2148524e18225dd67b8b1ba2593b5630a49e3d10f09704b7b652f1e3e6bf9be8b184ee86b4c8d89edf100c26418f36bf51a212af186e9826f552e2bb3f9cac0892b2567cdd5353d7f0212abb4baab67d2dba608d537393d9870a879d74f90a33c31439290419406c06d6be7ffd4d603919bac85b28c71ca5fc99c10764ceea2ec66c3c09927dd2a8c1bf3d8e2a98c71c10661cca670e4fcd5736bbef9ba72986d9e656a05ade5bb2ec36283888d1e4d0f34fe7e16ace1fa4ffdc4bb2da78d3bee568fa76972d16b30e17f2d3fdad3be5292b2dfee57a50183d35b69c7152ecc9a51b2b20e20aaeed9a1c48c11c2e344771e72d28df52bdbbc5b707580b0f6589a8a118a1e7a2587ae76a92ee57511781f5c6ecd0a30367378b8b3816e0e7fe7eb07c9c77ba08094515ca8b0d40a9093f4d39e4b6d5f4ffd466fc201ec470f0cc6dc197ad1e41fc61dd1b95c0047afd25eb34d70fb104138601f171930e0f8a76eaa54f921861596ffef103acfcca406cafeeaf37ef013dadd84f5d942a1d80d181ed99048e350ade569d6bc46d2d4f769946119a0e88e7b205f77fa0ce33188171370cf49edbe6a17fb1212af8111b5d7b91f3f05ac1cdf80618647e4deef090777ff946ecf3e51c2018c2e07976b7c27e105abc9c29b0425ef34aa8f320f1d4d4fc37cfaa6147513a26dfaa2b51acf1724295cd5a5e4fa98466ae93708193848475fe0922fcb2541be5382beb40e0aed03444f05a7f504c8dc387cbf7487db8412faf99913feab461aeb245650a473590d3bb6fd5a94bdd7e1aad9eacaf6c3e01a32fbf85d60bad2c93e82a5e504dd1dfc4aed1ffee85bee699190316c3861e6d3d82ef320edb8e121d94cace65402f1428b6402a1c1810c1efd5e96b98b3f1f19d7463ffc89f1cbde5759e2460dcd174949cb272265c00303958ab601a36e128efc2efed6260d8d330b3cb4a85b0463bd1c55f6831b56eab074e95230244df71b5bbf80a9a2dd3cfc49862cbae28094a3fda210e0999e2b5e12027af64a47d2ebb19ed396ed171019c817541bb3d023bf0c79fdef92f9e88f5157b5254d785d7c9e3efacb5113ce0ac9e3665545286d36c5768d842a1b131669712a3bffec517caaadb1d71325e647f968579332ea6e46e2e9514e25828e9174b239752d4ec50bbf49e7a8496e5f9c7dccacce0f6dd252ecb0e124292d16534ebf439c3daf572f865967458686d28798870552e447be45a0e26f39a45661a4a3474b2cde3f1acb19f704833622eda4cfd159375d7002bd5544a58ff9c0619de033a0f152c49930b41bbf36f88391bc6f95c255d3f221500ff73f300e862c945c3c2dbd5fb9aec8b64ddc0c1a0b360aeb34b60636ff3cd20ecaaf9474706232c59c27f4c7faaf6e443685718e7ef8021a68d55feda3dc4405528762020d769803c50a85a3caf3a47e4657ac59bae4fa91f0d8c6db15317cab93db079ae1755452aec2555e5c905ccb3445cbe5ec1caf44710885a817dd571864605ceb39152ae288aa66a0702a21c3dd8f65b34924ec8c176744443472fe6894efdca2e1a4ca75a4d4b5f657b522337ee0bc497adb69d60d7341a72aa2ab6e9bf15c5a5f530b0457fb9d2e685ab93f39f65dd4ea714cc90997ef90273c56721741a9310e04888eaa9c5ffb3d8a45b95d92063acc9990108628b5ce60c0d41dd41a9792d6ed335ca1020ac7cad5f98f03282cf8ffa805d1092271b0410c2a2cb8efad8d262a235981fe3135560914284ec73986304ec99ca7d235b1ef43e9396b58fb3191828d8cd07a88be0022d862f438ad6f9f3071c4b86d558a07880ffa64c97303446b59e3f4210d14d2308d2c2c4d7de4d7ddbeda7f69a4d5f2f08e0eec14df5a114a3ea1bf6752dd8b039ee5fc0b4d63fb52dd3236945e36d43f269bb1cd225f9bd87634313ca4cc91a1012d536030e060ec7ebdec0a19de638e7aa8c1031ad76c8144daf039633df8975d492073147240975c635beb3e778cbf4da290781bd0638be5fef28eb52e6532fb9069bf9b0790aa72552b78abbdcd9076f6aa71cb23512fe85f642256552590473d7529912e656e85ba61f3e652761076dbee3cdc836aa45b4d2c25f0a0db0c2611213c25c07acae9f4b2c94bb148136e58cddeb109e7de2f0d4da9350a5b100804f8a2517ec34de2235f364e7adf5022dfa23447339c239cbde265cd1f38c03e5dd660e37e394f569e99fa67fc41b43f57dbb0b1fe571a935b026421af855134b4945da35e521364a7770f54f6b9cf08e17d5e1d5ada9356a24ccc48292a78ad7cf36e16dd44967a671d0817ca0e0e4c95086b0b2255b54f1d803168666eb059aeee8ce906f40bc5b5e385e18b0b4fbfb1b97d5e5d976b89d51db29bbe91be732b31f62b550540080d6646c2e991639b808036528cbc6b202729d17ef362ffd3f5e766cb360ebaf5e5c2b5c98107c0fee32ec173e0816062ddb5ff225ebd3f5fa0d24c11c6f4b76d54e50bc627dd218e3d62da7d23d50349949102b4894b8dcccbead4198d9387feb5260367a5cb3f3ddc1f8035286bf6aa832559fe1940d8ef2607cf2d46db920495d054260e2b52fce73d73fe09a86ca8d88cdb3fbe0555dc8e2f0546f23d10b74b3d382610e36e8a901d8f8f34d0efa03511ffcd55198231fd2a1acdac9b5c581f1fa2465fb13a63024666615b48ae8a6e981a1ce9fa9b2a78e2864fd2f0149fbe7725175b66fccf45b3bde6fa4122ad852d365"}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) getdents(r0, &(0x7f0000000300)=""/7, 0x7) ioctl$FITRIM(r3, 0x40047211, 0x0) 21:50:48 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r0, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20) 21:50:48 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x1f000000) [ 1138.121869][T23894] usb 4-1: USB disconnect, device number 82 21:50:49 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x40000000) 21:50:49 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) fsmount(r1, 0x1, 0x0) r2 = syz_io_uring_setup(0x72d1, &(0x7f0000000140)={0x0, 0x0, 0x10, 0x1, 0x800, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:49 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_complete(0x0) r3 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = dup(r6) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r7, 0xc038943b, &(0x7f0000000380)={0x3, 0x10, [], 0x0, &(0x7f0000000340)=[0x0, 0x0]}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r8, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r9, 0x400, 0x70bd28, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$USBDEVFS_GET_SPEED(r2, 0x551f) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000000c0)) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r3, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:49 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0xeffdffff) 21:50:49 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) ioctl$TCXONC(r1, 0x540a, 0x3) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1138.531305][T23894] usb 4-1: new high-speed USB device number 83 using dummy_hcd 21:50:49 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0xf5ffffff) 21:50:49 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) r7 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x400000, 0x80) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r7, 0xf504, 0x0) [ 1138.781277][T23894] usb 4-1: Using ep0 maxpacket: 32 21:50:49 executing program 2: r0 = epoll_create1(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x2, r1) r3 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r3, 0x3f, 0x0, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000000, 0x1010, r2, 0x100000000) [ 1138.901384][T23894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 21:50:49 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000240)='veth1_macvtap\x00', 0x10) r7 = dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x5, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_config_ext, 0x46648, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x80000000, 0xffffffffffffffff, 0x2) socket(0x10, 0x2, 0x0) r8 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) getsockopt$SO_BINDTODEVICE(r8, 0x1, 0x1d, &(0x7f0000000000), 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) r9 = ioctl$TIOCGPTPEER(r7, 0x5441, 0x101) ioctl$TIOCGDEV(r9, 0x80045432, &(0x7f0000000280)) 21:50:49 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f00000000c0)={0x7, 0xeb, 0xffff, 0x101}, 0x10) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1139.101424][T23894] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1139.110452][T23894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.119261][T23894] usb 4-1: Product: syz [ 1139.123454][T23894] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1139.129525][ T6891] ================================================================== [ 1139.131548][T23894] usb 4-1: SerialNumber: syz [ 1139.138881][ T6891] BUG: KASAN: use-after-free in __list_del_entry_valid+0x2b/0x100 [ 1139.151208][ T6891] Read of size 8 at addr ffff8881cf1f8b80 by task syz-executor.0/6891 [ 1139.159337][ T6891] [ 1139.161669][ T6891] CPU: 0 PID: 6891 Comm: syz-executor.0 Not tainted 5.4.65-syzkaller-00175-g63d1c2f0b547 #0 [ 1139.171721][ T6891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1139.181758][ T6891] Call Trace: [ 1139.185029][ T6891] dump_stack+0x1b0/0x21e [ 1139.189334][ T6891] ? up_read+0x10/0x10 [ 1139.193368][ T6891] ? show_regs_print_info+0x12/0x12 [ 1139.198527][ T6891] ? printk+0xc0/0x104 [ 1139.202558][ T6891] print_address_description+0x96/0x5d0 [ 1139.208077][ T6891] ? devkmsg_release+0x11c/0x11c [ 1139.212977][ T6891] ? mmap_region+0xe38/0x1bb0 [ 1139.217630][ T6891] ? __percpu_ref_switch_mode+0x340/0x5d0 [ 1139.223312][ T6891] __kasan_report+0x14b/0x1c0 [ 1139.227976][ T6891] ? _raw_spin_lock_irq+0x80/0x180 [ 1139.233080][ T6891] ? __list_del_entry_valid+0x2b/0x100 [ 1139.238502][ T6891] ? mutex_trylock+0xb0/0xb0 [ 1139.243054][ T6891] kasan_report+0x27/0x50 [ 1139.247377][ T6891] ? mutex_trylock+0xb0/0xb0 [ 1139.251972][ T6891] __list_del_entry_valid+0x2b/0x100 [ 1139.257232][ T6891] io_cancel_async_work+0x9b/0x280 [ 1139.262306][ T6891] io_ring_ctx_wait_and_kill+0xaf/0x1380 [ 1139.267914][ T6891] ? __get_user_pages+0x1420/0x1420 [ 1139.273077][ T6891] ? io_cancel_async_work+0x280/0x280 [ 1139.278410][ T6891] ? vm_mmap_pgoff+0x1db/0x230 [ 1139.283158][ T6891] io_uring_release+0x59/0x70 [ 1139.287798][ T6891] ? io_uring_flush+0x130/0x130 [ 1139.292627][ T6891] __fput+0x27d/0x6c0 [ 1139.296584][ T6891] task_work_run+0x176/0x1a0 [ 1139.301140][ T6891] prepare_exit_to_usermode+0x286/0x2e0 [ 1139.306648][ T6891] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1139.312504][ T6891] RIP: 0033:0x45e1ca [ 1139.316375][ T6891] Code: 89 f5 41 54 49 89 fc 55 53 74 35 49 63 e8 48 63 da 4d 89 f9 49 89 e8 4d 63 d6 48 89 da 4c 89 ee 4c 89 e7 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 4e 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 00 [ 1139.335953][ T6891] RSP: 002b:00007f54e11b9bc8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1139.344350][ T6891] RAX: 0000000020fff000 RBX: 0000000000000003 RCX: 000000000045e1ca [ 1139.352285][ T6891] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020fff000 [ 1139.360220][ T6891] RBP: 0000000000000004 R08: 0000000000000004 R09: 0000000010000000 [ 1139.368155][ T6891] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020fff000 [ 1139.376097][ T6891] R13: 0000000000200000 R14: 0000000000008011 R15: 0000000010000000 [ 1139.384033][ T6891] [ 1139.386327][ T6891] Allocated by task 6889: [ 1139.390619][ T6891] __kasan_kmalloc+0x117/0x1b0 [ 1139.395346][ T6891] kmem_cache_alloc_bulk+0x1cf/0x250 [ 1139.400609][ T6891] io_get_req+0x27f/0x850 [ 1139.404901][ T6891] io_submit_sqe+0x83/0xe90 [ 1139.409366][ T6891] __se_sys_io_uring_enter+0x8ce/0x1f80 [ 1139.414874][ T6891] do_syscall_64+0xcb/0x150 [ 1139.419344][ T6891] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1139.425205][ T6891] [ 1139.427497][ T6891] Freed by task 389: [ 1139.431355][ T6891] __kasan_slab_free+0x168/0x220 [ 1139.436276][ T6891] slab_free_freelist_hook+0xd0/0x150 [ 1139.441611][ T6891] kmem_cache_free+0xac/0x5c0 [ 1139.446250][ T6891] io_poll_complete_work+0x725/0x930 [ 1139.451496][ T6891] process_one_work+0x777/0xf90 [ 1139.456307][ T6891] worker_thread+0xa8f/0x1430 [ 1139.460944][ T6891] kthread+0x317/0x340 [ 1139.465004][ T6891] ret_from_fork+0x1f/0x30 [ 1139.469377][ T6891] [ 1139.471689][ T6891] The buggy address belongs to the object at ffff8881cf1f8a80 [ 1139.471689][ T6891] which belongs to the cache io_kiocb of size 264 [ 1139.485451][ T6891] The buggy address is located 256 bytes inside of [ 1139.485451][ T6891] 264-byte region [ffff8881cf1f8a80, ffff8881cf1f8b88) [ 1139.498705][ T6891] The buggy address belongs to the page: [ 1139.504314][ T6891] page:ffffea00073c7e00 refcount:1 mapcount:0 mapping:ffff8881da1f6c80 index:0xffff8881cf1f9b00 compound_mapcount: 0 [ 1139.516515][ T6891] flags: 0x8000000000010200(slab|head) [ 1139.521938][ T6891] raw: 8000000000010200 ffffea000743bd80 0000000700000007 ffff8881da1f6c80 [ 1139.530482][ T6891] raw: ffff8881cf1f9b00 0000000080150013 00000001ffffffff 0000000000000000 [ 1139.539022][ T6891] page dumped because: kasan: bad access detected [ 1139.545408][ T6891] [ 1139.547700][ T6891] Memory state around the buggy address: [ 1139.553292][ T6891] ffff8881cf1f8a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1139.561349][ T6891] ffff8881cf1f8b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1139.569373][ T6891] >ffff8881cf1f8b80: fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1139.577393][ T6891] ^ [ 1139.581423][ T6891] ffff8881cf1f8c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1139.589465][ T6891] ffff8881cf1f8c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1139.597490][ T6891] ================================================================== [ 1139.605513][ T6891] Disabling lock debugging due to kernel taint [ 1139.642005][T23894] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:50:51 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) 21:50:51 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0xfffffdef) 21:50:51 executing program 5: r0 = add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = request_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='rxrpc\x00', r0) r2 = request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='syz', r2) keyctl$search(0xa, r1, &(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x1}, r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) write$UHID_CREATE(r4, &(0x7f0000000500)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000400)=""/211, 0xd3, 0x5, 0x7fffffff, 0x7, 0x6ab917c1, 0x800}}, 0x120) ioctl$FITRIM(r3, 0x40047211, 0x0) 21:50:51 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x220448a4}, 0x4) 21:50:51 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x8076d1, &(0x7f0000000140)={0x0, 0x0, 0x20, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:51 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x7ad7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:51 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0xb, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1141.179212][ T12] usb 4-1: USB disconnect, device number 83 [ 1141.209154][ T6912] FAT-fs (loop5): Unrecognized mount option "rxrpc" or missing value 21:50:51 executing program 2: r0 = epoll_create1(0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pidfd_open(r1, 0x0) r2 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r3 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) writev(r7, &(0x7f0000000440)=[{&(0x7f00000000c0)="725c964f21726b9ed6e16f9710a2158a8daf07e36ff0d3594e9ccf4e50fbb21802f202e9f863ef4bf30a506cacef79a43645", 0x32}, {&(0x7f00000001c0)="ab2156cd81cd", 0x6}, {&(0x7f0000000200)="e19e4f9af932c94f0effd20c50ae6ff99d9511ef99886a37ccfbd50f8d7458c0f7589584a6728c7d7774f7e6f5661fdf0f325430700cafa122827d49876518819879866bd5e4b799a8bbc0badd785fbb1f159f1ae978013bb57ce2a320c9f6b6d09346f1936f9f5183582cbdf109161445ad0a1ae4d40863582df1cccab8331d09a7fae4c411c7d0457424d0fab65d4c2f61a5fc1150d9b4faaa095c5f75fa7656eb5383b69e2e85679eb8a4408bb1bf6b4fcae82d0092d3235d7e12f7246aec83e6d97713d6881b08bafa538d40ba5d6fbbcf82773834899557dba2e022d2f724eaedf26b8f79874c204cc7dd82949c8e", 0xf1}, {&(0x7f0000000300)="c70dccdf9b961fd1269ecbb8082438770552d3729cf8a23b7d7f3b1c7eeaf7c57aec6316d392c97a824d0f51415e4eaabec460b7c44a70da61f34d635a23c7c6062a918aaf0a9ed1c40be64e88255a37a5dcca4a450a5ea68a627e9355078492842fa42c14f13e32dd07c4c6a0474e42ae577d761d2c34f6c6d157e0020878b70c082e6a248412c9fc93790d83403a09e411783de545eab0bf11882ae8bf", 0x9e}, {&(0x7f00000003c0)="46941eecdd0aecfd5cefaec56d117c33c344dd5829d30070de48b39274f4fde6a9428fa02f0af7b1aaee774058a831342ac546b1eabd029d895e93fa3a4b04ed05a47c56e5d843825ffe87a8ebb08920619c5e5f89de486b35e1352f4f2f5bc6a7584fdd53c7499dbe6714c600987470321e8db486f3bd", 0x77}], 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r3, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:52 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0xfffffff5) 21:50:52 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={r5, 0x3b7d, 0x7, 0x9}) symlinkat(&(0x7f00000000c0)='./file0\x00', r6, &(0x7f0000000240)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:52 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x462d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:mnt_t:s0\x00', 0x1b, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:52 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x10000000000) [ 1141.651328][ T12] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1141.911323][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1142.031418][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1142.241482][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1142.250590][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.259273][ T12] usb 4-1: Product: syz [ 1142.263690][ T12] usb 4-1: Manufacturer: syz [ 1142.268259][ T12] usb 4-1: SerialNumber: syz [ 1142.311753][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1142.512505][ T12] usb 4-1: USB disconnect, device number 84 [ 1143.281360][ T12] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1143.521363][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1143.641408][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1143.811436][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1143.820435][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.828417][ T12] usb 4-1: Product: syz [ 1143.832617][ T12] usb 4-1: Manufacturer: syz [ 1143.837194][ T12] usb 4-1: SerialNumber: syz [ 1143.881895][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:50:54 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=ANY=[@ANYBLOB="1e03a3431dc364bf540b1d8621ff668382b071c308063e815a35"]}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x1ff, 0x0, 0x2, 0xffffffff}, {0x2739, 0x6, 0x80}, {0x3, 0xff, 0x9, 0x5}, {0x4, 0x7f, 0x2, 0x7}]}, 0x10) 21:50:54 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f00000000c0)='./file0\x00'}, 0x10) r8 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x5e, 0x4000) syz_genetlink_get_family_id$smc(&(0x7f0000000340)='SMC_PNETID\x00') mmap$usbmon(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xd, 0x10, r8, 0x101) syz_io_uring_submit(r6, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) r9 = syz_open_dev$hidraw(&(0x7f0000000240)='/dev/hidraw#\x00', 0x0, 0x640) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x0, 0x305, 0x0, 0x0, {0x11}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7f, 0x4}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000280)={{0x0, 0xfff, 0x5, 0x8, 0x6, 0x8, 0x3, 0x0, 0x7fffffff, 0x0, 0x4, 0x101, 0x8000, 0x0, 0x3ff}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:54 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x8000000000000) 21:50:54 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) connect$tipc(r6, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x42, 0x3}, 0x1}}, 0x10) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/udplite\x00') ioctl$TIOCGPTPEER(r7, 0x5441, 0x100000001) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:54 executing program 5: r0 = syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x100, 0x10) dup3(r1, r0, 0x80000) ioctl$FITRIM(r1, 0x40047211, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x800, 0x0) read$FUSE(r1, &(0x7f0000002040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r3, 0x0, 0x20000000, &(0x7f0000000200)) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e21, 0xfffffc01, @ipv4={[], [], @loopback}, 0x8}}, 0x0, 0x0, 0x3e, 0x0, "1eb0c509339c88c1f8d274eb877312e81b307c01687581d2b19a0cf8530f39cfcbdeb18450e01dca30063ac0a794d22a79a0d66e80a8afe53a6cf99975bd960b71dc36f29bf6320467e75bd341b8bf79"}, 0xd8) 21:50:54 executing program 0: r0 = epoll_create1(0x80000) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x74d0, &(0x7f0000000140)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x9fd9) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x0, 0x502, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x401}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4050}, 0x80) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) r7 = fcntl$dupfd(r0, 0x406, r6) ioctl$sock_SIOCADDDLCI(r7, 0x8980, &(0x7f00000001c0)={'dummy0\x00', 0x7}) get_robust_list(0xffffffffffffffff, &(0x7f0000000440)=&(0x7f0000000400)={&(0x7f0000000340), 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}}, &(0x7f0000000480)=0x18) [ 1144.081806][ T12] usb 4-1: USB disconnect, device number 85 21:50:54 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000006b9c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000006b9c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004d8c0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {r2}], 0x0, "145757ad8a62cc"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000400)={r2, 0x2715}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r3, 0x40047211, 0x0) 21:50:54 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') chdir(&(0x7f0000000040)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0xa2) ioctl$FITRIM(r0, 0x40047211, 0x0) 21:50:54 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = fcntl$dupfd(r0, 0x406, r0) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f00000000c0)=0xa76) r5 = socket$packet(0x11, 0x2, 0x300) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r1, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:54 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchownat(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0x0, r0, 0x1000) r1 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r1, 0x40047211, 0x0) 21:50:54 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x80000000000000) 21:50:55 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000200)=""/5) r3 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = socket$packet(0x11, 0x2, 0x300) dup(r6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000002680)=[{{&(0x7f0000000ac0)=@ax25={{0x3, @rose}, [@netrom, @netrom, @bcast, @bcast, @null, @default, @remote, @bcast]}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {&(0x7f0000000c40)=""/90, 0x5a}, {&(0x7f0000000580)=""/125, 0x7d}], 0x4, &(0x7f0000000540)=""/46, 0x2e}, 0x5}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000640)=""/152, 0x98}, {&(0x7f00000004c0)=""/118, 0x76}], 0x2, &(0x7f0000000340)=""/27, 0x1b}, 0xdd7}, {{&(0x7f0000000700)=@x25={0x9, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000800)=""/109, 0x6d}, 0x2}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f0000001200)=""/167, 0xa7}, {&(0x7f00000007c0)=""/44, 0x2c}, {&(0x7f0000000c00)=""/59, 0x3b}], 0x4}}], 0x4, 0x22, 0x0) sendfile(r3, r7, &(0x7f00000000c0)=0x1f, 0x3) io_uring_enter(r3, 0x3f, 0x0, 0x0, 0x0, 0x0) [ 1144.561379][ T12] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1144.801378][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1144.921422][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1145.101436][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1145.110447][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.118820][ T12] usb 4-1: Product: syz [ 1145.123016][ T12] usb 4-1: Manufacturer: 䎣쌝뽤୔蘝Ａ荦낂썱؈脾㕚 [ 1145.130387][ T12] usb 4-1: SerialNumber: syz [ 1145.173584][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1145.372659][ T12] usb 4-1: USB disconnect, device number 86 [ 1146.141498][ T12] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1146.391411][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1146.521455][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1146.691477][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1146.700531][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.708610][ T12] usb 4-1: Product: syz [ 1146.712812][ T12] usb 4-1: Manufacturer: 䎣쌝뽤୔蘝Ａ荦낂썱؈脾㕚 [ 1146.720193][ T12] usb 4-1: SerialNumber: syz [ 1146.761837][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 21:50:57 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "a3862106d19409ff668382b071c30c063e815a3571e84d0d6ddf5900"}}]}) 21:50:57 executing program 5: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x3, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000004}, 0x10) ioctl$FITRIM(r0, 0x40047211, 0x0) 21:50:57 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r7, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r7, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r7, 0xc0096616, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040045}, 0x20000000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x706) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:57 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x2}, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) rt_tgsigqueueinfo(r6, 0x0, 0xc, &(0x7f00000001c0)={0x37, 0x0, 0x7}) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:57 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x100000000000000) 21:50:57 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) ioctl$UI_GET_SYSNAME(r6, 0x8040552c, &(0x7f00000001c0)) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r7, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="f15c93cb35c215fe339d1e9060c5b23e77cb58a87329a00288504db389cc6e395885fa906ac30eeae99fa388c31b5717e641e1586a90961b5f99b26c939d944f6cb1cf6817b7e51402a8459f9db642e97d3c05db56250a665d3ff188eb47e5b036d508aa5a5796fb8806b6a41487e0bfc3df087c18269bd7d2f477104c5d5db497ceaf3e1b11a5d63a2b7035dc69fa701f3b46fe701880800a7d38dccd4b3e8014aa15c96968359533ce2c5ffdd5f0d3297018bd7c025150940cdead92eb1e6bc6ba45eecf067b32425b6000b2f376ef9172426ae7fa97e5a84ef4dc540bbf5dd458ffcb75724135bd32fa04db6d6a75aedda7ab6e8501fc94e209dc3b2525ae24c954255d3247ca9c1b9525ce68179a52a87333aa2b0a8c1baa6ba6160c6d2018e67bac5402d0d89c5f798b8d1a87b0dc3306f546c61724530d9f4b6f0ee68677c7b261de5afa02d708a8ec979791de8f4831cc354ba453bc253e2435207f25494a594d4e5be39902358d362cb318ad965b7e7480a5ca5b6fe74e101c400c77392ee4419ad788f494230487811046f21f0f9665dfbaa9e94ed305a02e3fa47039e67dde19f89c8f1741aad752cdfe458ddf54e8fc10ff79b5", 0x1b9}], 0x3) sendto$inet(r7, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r7, 0x8982, &(0x7f00000000c0)={0x8, 'wg0\x00', {'sit0\x00'}, 0xffff}) [ 1146.961900][ T12] usb 4-1: USB disconnect, device number 87 21:50:57 executing program 5: setxattr$security_capability(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v1={0x1000000, [{0x1000, 0x20}]}, 0xc, 0x2) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) open$dir(&(0x7f0000000040)='./file1\x00', 0x200, 0x180) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x36c, r0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa9b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0xc0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa951}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x83f0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x26e7}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2000000}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x958a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff011a}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3065}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1b07}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0xa8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "fb3abdadebba2b628605ad6d9579bb96122674e340ce"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x90000000}, @TIPC_NLA_NODE_ID={0x4d, 0x3, "ca1f3657477721585039d9fd4b71cc841759f36b7893cdf8f2487967667bd02140257e1759e50da40898b2527702d80e483191b7567533d275569f1a6d6f2593cd9b3c595460c2c31d"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x36c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) 21:50:57 executing program 2: r0 = epoll_create1(0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x36, 0xffffff7f, 0x6, 0x9f25, 0x10, 0xffffffffffffffff, 0x2, [], 0x0, r0, 0x4, 0x80000001, 0x1}, 0x40) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000300)=0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r1, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) fstat(r1, &(0x7f00000001c0)) r3 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r4 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r4, 0x3f, 0x0, 0x0, 0x0, 0x0) 21:50:57 executing program 5: r0 = syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) readlinkat(r0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000100)=""/102, 0x66) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000180)={0xd, 0x2}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0xc, 0x4) chdir(&(0x7f00000001c0)='./file1\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ioctl$FITRIM(r3, 0x40047211, 0x0) 21:50:57 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x300000000000000) 21:50:58 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x400000000000000) [ 1147.421419][ T12] usb 4-1: new high-speed USB device number 88 using dummy_hcd 21:50:58 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3f, 0x0, 0x0, 0x0, 0x700000000000000) [ 1147.661446][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 1147.791465][ T12] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1147.961555][ T12] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 1147.970857][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.983072][ T12] usb 4-1: Product: syz [ 1147.988258][ T12] usb 4-1: Manufacturer: 蚣ء铑）荦낂썱،脾㕚്Y [ 1148.000108][ T12] usb 4-1: SerialNumber: syz [ 1148.042033][ T12] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1148.242719][ T12] usb 4-1: USB disconnect, device number 88 [ 1149.011429][ T12] usb 4-1: new high-speed USB device number 89 using dummy_hcd