8d1c207488ce7f4708e28dd8c0c0f401224349576f6a49608db22dd312491c30000f3c3af52d2c1", 0x6b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x7) [ 1000.523623][T12046] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1000.533304][T12046] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.541648][T12046] usb 4-1: Product: syz [ 1000.546341][T12046] usb 4-1: Manufacturer: syz [ 1000.552462][T12046] usb 4-1: SerialNumber: syz [ 1000.594050][T12046] cdc_ether: probe of 4-1:1.0 failed with error -22 16:17:07 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000640)='wlan1\x00\x1b\x1a\x02\xd9n\xff\x8a\xb2\xd9\x00L\x06\xb5\x12\x03F\xd9\x00\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xa9\xb8p\xab\xc1?r\xebkX!D\xc3c\b{\xe0Q\\^\x14\xa1B=M\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xe4\xe8#/\x11%\xac%j\x9d\xeb\xba\xe6\xc4\xc4\x02\x8dT5\xddB48\x8f\xde\xbb\xc18\x84\xb5:f\xcb\xb4\r\x85\xf4\xee\xf2g~YX\bE;I\xa7\xe9\xf4]\x00\x8d\xec\xb2\x02\xe94\x87#07M\xfa\xaf@B=u\x013\x1e%\x18\x82\xc1\x80~H\x90\x9c\x8f;s\xc9\x17\x8a\x99\xb6\xabNG\xf7:\xbaN\x03\xae`\xcc\x03\x04E\xbaw\x7fo\xc5B\xf3\xd1}|\x92V\xbang\xdf\x8b\x8a\xd7\x1bD\x95\x1d\xfe\xb2\x87\xa14Z\xe5\xb3\xad\xd1\xb9F\x1d\a\r\xcd\xf6\xd3\xb1\x92i\x9f\xa5\x1b\xb5\xc68\x84,\n\xea[\xde\v\xf4iU\x97 \xc38\xb9\xd3d\xfb\xd0\x85Z\riO\x1ce\xc9\xc9p\x8f\xd1+\xd7\xceV\xab+M\xb3\x9e\xec:\xcb\x1bfE\x9f\xab\xd2\xcb\a.\xbc\xaf\x11\xd6#\xb6\x91K\xeb\xfd\xf2;i\x1ay\xe6I:\xb0w\x0e\x00\x00\x9a7\xcd;i\xf0\xc6j\xea\x85\xad}\xfcs\xac\xc0\x82\xc5\x12\xd8\xde\xbd\xd1\x9e0t\xb8\xdf\xc9\x86\x89\n\xec\xe7\x05\xc3\x92*\xb6\x1a\xa4\x8c\xec\x84\x8aD\xf2Cg\x7fPk\t\x8e\xb4\xafV\xe8y\xfb\x9aX\x956\x829\x16\xd5)\n\x98\xc0\x9a\x8cs\x97\xa5\xd7\xbc\xaf\xcf\n>j8\xba\xf1\xf4W\xd2\xf2\xeb\xe1\x89Y\xe2(\xd1\xec\xf8\x19\x18\xbbi\xec\xc3c\xe48\x80\x98KC<|\x04\x85\xd8\x00\xe6\x12\x12\xfe\xa0\xf4\x88\xb9\xea\x14E\x1a0([X7S\xe9\xb9\xe8\xdaIc\x9a\xc6g\x91\x86\xf4\xff\b\xd7*\xa5\xd3Z))\xd2_\x10\xbam\xb1\xfa\x82<\x15\xdb\x94\xc7^V\xa0=\x06\x1d\x0e\x04\xa1\xdc\x10\b\x80\xc6\xfd\x89\xe8\x1c\xe7X\'0\xd7 \xbfxu\xbf\x9fo\xc7\r\x98O)\bi\xff\x96\xd6+\x8b\xaea\x90\\\x1f\xe8\xf4\xa9-\xd0\x04\xbd\xe4c.&\xff\x95\xc8\xca\x01$z\x86\xdc\xbb\x18e\xb6W\xb2Yh\x84\xf5\x8c\x10\xbd\xa3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xd3\x04\x03\x8a<,A\x921\xff0\x15\xe3U>\x9f\xa5??\xce\x90Ky\xa1\xb5a(\xef\xcd\xbctE?%\x87O\x13\x82\x00\x00\x00\x00\x00\x00\x00\x00') socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') [ 1000.644017][T23024] device wlan1 entered promiscuous mode [ 1000.650075][T17986] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1000.727635][T23038] device wlan1 left promiscuous mode [ 1000.801684][T10735] usb 4-1: USB disconnect, device number 9 [ 1000.822954][ T34] usb 3-1: new high-speed USB device number 55 using dummy_hcd 16:17:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0}, 0x60, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() exit_group(0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x9, 0x2e}, 0xd8) fcntl$setstatus(r1, 0x4, 0x2000) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) mq_open(0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080, 0x3e}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 1000.893220][T17986] usb 5-1: Using ep0 maxpacket: 8 [ 1000.898599][T23040] device wlan1 entered promiscuous mode 16:17:07 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000640)='wlan1\x00\x1b\x1a\x02\xd9n\xff\x8a\xb2\xd9\x00L\x06\xb5\x12\x03F\xd9\x00\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xa9\xb8p\xab\xc1?r\xebkX!D\xc3c\b{\xe0Q\\^\x14\xa1B=M\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xe4\xe8#/\x11%\xac%j\x9d\xeb\xba\xe6\xc4\xc4\x02\x8dT5\xddB48\x8f\xde\xbb\xc18\x84\xb5:f\xcb\xb4\r\x85\xf4\xee\xf2g~YX\bE;I\xa7\xe9\xf4]\x00\x8d\xec\xb2\x02\xe94\x87#07M\xfa\xaf@B=u\x013\x1e%\x18\x82\xc1\x80~H\x90\x9c\x8f;s\xc9\x17\x8a\x99\xb6\xabNG\xf7:\xbaN\x03\xae`\xcc\x03\x04E\xbaw\x7fo\xc5B\xf3\xd1}|\x92V\xbang\xdf\x8b\x8a\xd7\x1bD\x95\x1d\xfe\xb2\x87\xa14Z\xe5\xb3\xad\xd1\xb9F\x1d\a\r\xcd\xf6\xd3\xb1\x92i\x9f\xa5\x1b\xb5\xc68\x84,\n\xea[\xde\v\xf4iU\x97 \xc38\xb9\xd3d\xfb\xd0\x85Z\riO\x1ce\xc9\xc9p\x8f\xd1+\xd7\xceV\xab+M\xb3\x9e\xec:\xcb\x1bfE\x9f\xab\xd2\xcb\a.\xbc\xaf\x11\xd6#\xb6\x91K\xeb\xfd\xf2;i\x1ay\xe6I:\xb0w\x0e\x00\x00\x9a7\xcd;i\xf0\xc6j\xea\x85\xad}\xfcs\xac\xc0\x82\xc5\x12\xd8\xde\xbd\xd1\x9e0t\xb8\xdf\xc9\x86\x89\n\xec\xe7\x05\xc3\x92*\xb6\x1a\xa4\x8c\xec\x84\x8aD\xf2Cg\x7fPk\t\x8e\xb4\xafV\xe8y\xfb\x9aX\x956\x829\x16\xd5)\n\x98\xc0\x9a\x8cs\x97\xa5\xd7\xbc\xaf\xcf\n>j8\xba\xf1\xf4W\xd2\xf2\xeb\xe1\x89Y\xe2(\xd1\xec\xf8\x19\x18\xbbi\xec\xc3c\xe48\x80\x98KC<|\x04\x85\xd8\x00\xe6\x12\x12\xfe\xa0\xf4\x88\xb9\xea\x14E\x1a0([X7S\xe9\xb9\xe8\xdaIc\x9a\xc6g\x91\x86\xf4\xff\b\xd7*\xa5\xd3Z))\xd2_\x10\xbam\xb1\xfa\x82<\x15\xdb\x94\xc7^V\xa0=\x06\x1d\x0e\x04\xa1\xdc\x10\b\x80\xc6\xfd\x89\xe8\x1c\xe7X\'0\xd7 \xbfxu\xbf\x9fo\xc7\r\x98O)\bi\xff\x96\xd6+\x8b\xaea\x90\\\x1f\xe8\xf4\xa9-\xd0\x04\xbd\xe4c.&\xff\x95\xc8\xca\x01$z\x86\xdc\xbb\x18e\xb6W\xb2Yh\x84\xf5\x8c\x10\xbd\xa3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xd3\x04\x03\x8a<,A\x921\xff0\x15\xe3U>\x9f\xa5??\xce\x90Ky\xa1\xb5a(\xef\xcd\xbctE?%\x87O\x13\x82\x00\x00\x00\x00\x00\x00\x00\x00') r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') [ 1000.996901][T23054] device wlan1 left promiscuous mode 16:17:08 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:08 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000640)='wlan1\x00\x1b\x1a\x02\xd9n\xff\x8a\xb2\xd9\x00L\x06\xb5\x12\x03F\xd9\x00\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xa9\xb8p\xab\xc1?r\xebkX!D\xc3c\b{\xe0Q\\^\x14\xa1B=M\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xe4\xe8#/\x11%\xac%j\x9d\xeb\xba\xe6\xc4\xc4\x02\x8dT5\xddB48\x8f\xde\xbb\xc18\x84\xb5:f\xcb\xb4\r\x85\xf4\xee\xf2g~YX\bE;I\xa7\xe9\xf4]\x00\x8d\xec\xb2\x02\xe94\x87#07M\xfa\xaf@B=u\x013\x1e%\x18\x82\xc1\x80~H\x90\x9c\x8f;s\xc9\x17\x8a\x99\xb6\xabNG\xf7:\xbaN\x03\xae`\xcc\x03\x04E\xbaw\x7fo\xc5B\xf3\xd1}|\x92V\xbang\xdf\x8b\x8a\xd7\x1bD\x95\x1d\xfe\xb2\x87\xa14Z\xe5\xb3\xad\xd1\xb9F\x1d\a\r\xcd\xf6\xd3\xb1\x92i\x9f\xa5\x1b\xb5\xc68\x84,\n\xea[\xde\v\xf4iU\x97 \xc38\xb9\xd3d\xfb\xd0\x85Z\riO\x1ce\xc9\xc9p\x8f\xd1+\xd7\xceV\xab+M\xb3\x9e\xec:\xcb\x1bfE\x9f\xab\xd2\xcb\a.\xbc\xaf\x11\xd6#\xb6\x91K\xeb\xfd\xf2;i\x1ay\xe6I:\xb0w\x0e\x00\x00\x9a7\xcd;i\xf0\xc6j\xea\x85\xad}\xfcs\xac\xc0\x82\xc5\x12\xd8\xde\xbd\xd1\x9e0t\xb8\xdf\xc9\x86\x89\n\xec\xe7\x05\xc3\x92*\xb6\x1a\xa4\x8c\xec\x84\x8aD\xf2Cg\x7fPk\t\x8e\xb4\xafV\xe8y\xfb\x9aX\x956\x829\x16\xd5)\n\x98\xc0\x9a\x8cs\x97\xa5\xd7\xbc\xaf\xcf\n>j8\xba\xf1\xf4W\xd2\xf2\xeb\xe1\x89Y\xe2(\xd1\xec\xf8\x19\x18\xbbi\xec\xc3c\xe48\x80\x98KC<|\x04\x85\xd8\x00\xe6\x12\x12\xfe\xa0\xf4\x88\xb9\xea\x14E\x1a0([X7S\xe9\xb9\xe8\xdaIc\x9a\xc6g\x91\x86\xf4\xff\b\xd7*\xa5\xd3Z))\xd2_\x10\xbam\xb1\xfa\x82<\x15\xdb\x94\xc7^V\xa0=\x06\x1d\x0e\x04\xa1\xdc\x10\b\x80\xc6\xfd\x89\xe8\x1c\xe7X\'0\xd7 \xbfxu\xbf\x9fo\xc7\r\x98O)\bi\xff\x96\xd6+\x8b\xaea\x90\\\x1f\xe8\xf4\xa9-\xd0\x04\xbd\xe4c.&\xff\x95\xc8\xca\x01$z\x86\xdc\xbb\x18e\xb6W\xb2Yh\x84\xf5\x8c\x10\xbd\xa3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xd3\x04\x03\x8a<,A\x921\xff0\x15\xe3U>\x9f\xa5??\xce\x90Ky\xa1\xb5a(\xef\xcd\xbctE?%\x87O\x13\x82\x00\x00\x00\x00\x00\x00\x00\x00') r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') [ 1001.139144][T23056] device wlan1 entered promiscuous mode [ 1001.183209][T17986] usb 5-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice= b.4a [ 1001.203012][T17986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.211947][T23060] device wlan1 left promiscuous mode [ 1001.233852][ T34] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.244607][T17986] usb 5-1: Product: syz [ 1001.249909][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1001.273649][T17986] usb 5-1: Manufacturer: syz [ 1001.278443][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1001.300535][ T34] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1001.301619][T17986] usb 5-1: SerialNumber: syz [ 1001.342110][ T34] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1001.343721][T17986] usb 5-1: config 0 descriptor?? [ 1001.413692][T17986] ums-cypress 5-1:0.0: USB Mass Storage device detected [ 1001.451598][ T34] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1001.493056][ T34] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.505647][ T34] usb 3-1: config 0 descriptor?? [ 1001.557237][ T34] legousbtower 3-1:0.0: interrupt endpoints not found [ 1001.577761][T23062] device wlan1 entered promiscuous mode 16:17:08 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000640)='wlan1\x00\x1b\x1a\x02\xd9n\xff\x8a\xb2\xd9\x00L\x06\xb5\x12\x03F\xd9\x00\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xa9\xb8p\xab\xc1?r\xebkX!D\xc3c\b{\xe0Q\\^\x14\xa1B=M\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xe4\xe8#/\x11%\xac%j\x9d\xeb\xba\xe6\xc4\xc4\x02\x8dT5\xddB48\x8f\xde\xbb\xc18\x84\xb5:f\xcb\xb4\r\x85\xf4\xee\xf2g~YX\bE;I\xa7\xe9\xf4]\x00\x8d\xec\xb2\x02\xe94\x87#07M\xfa\xaf@B=u\x013\x1e%\x18\x82\xc1\x80~H\x90\x9c\x8f;s\xc9\x17\x8a\x99\xb6\xabNG\xf7:\xbaN\x03\xae`\xcc\x03\x04E\xbaw\x7fo\xc5B\xf3\xd1}|\x92V\xbang\xdf\x8b\x8a\xd7\x1bD\x95\x1d\xfe\xb2\x87\xa14Z\xe5\xb3\xad\xd1\xb9F\x1d\a\r\xcd\xf6\xd3\xb1\x92i\x9f\xa5\x1b\xb5\xc68\x84,\n\xea[\xde\v\xf4iU\x97 \xc38\xb9\xd3d\xfb\xd0\x85Z\riO\x1ce\xc9\xc9p\x8f\xd1+\xd7\xceV\xab+M\xb3\x9e\xec:\xcb\x1bfE\x9f\xab\xd2\xcb\a.\xbc\xaf\x11\xd6#\xb6\x91K\xeb\xfd\xf2;i\x1ay\xe6I:\xb0w\x0e\x00\x00\x9a7\xcd;i\xf0\xc6j\xea\x85\xad}\xfcs\xac\xc0\x82\xc5\x12\xd8\xde\xbd\xd1\x9e0t\xb8\xdf\xc9\x86\x89\n\xec\xe7\x05\xc3\x92*\xb6\x1a\xa4\x8c\xec\x84\x8aD\xf2Cg\x7fPk\t\x8e\xb4\xafV\xe8y\xfb\x9aX\x956\x829\x16\xd5)\n\x98\xc0\x9a\x8cs\x97\xa5\xd7\xbc\xaf\xcf\n>j8\xba\xf1\xf4W\xd2\xf2\xeb\xe1\x89Y\xe2(\xd1\xec\xf8\x19\x18\xbbi\xec\xc3c\xe48\x80\x98KC<|\x04\x85\xd8\x00\xe6\x12\x12\xfe\xa0\xf4\x88\xb9\xea\x14E\x1a0([X7S\xe9\xb9\xe8\xdaIc\x9a\xc6g\x91\x86\xf4\xff\b\xd7*\xa5\xd3Z))\xd2_\x10\xbam\xb1\xfa\x82<\x15\xdb\x94\xc7^V\xa0=\x06\x1d\x0e\x04\xa1\xdc\x10\b\x80\xc6\xfd\x89\xe8\x1c\xe7X\'0\xd7 \xbfxu\xbf\x9fo\xc7\r\x98O)\bi\xff\x96\xd6+\x8b\xaea\x90\\\x1f\xe8\xf4\xa9-\xd0\x04\xbd\xe4c.&\xff\x95\xc8\xca\x01$z\x86\xdc\xbb\x18e\xb6W\xb2Yh\x84\xf5\x8c\x10\xbd\xa3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xd3\x04\x03\x8a<,A\x921\xff0\x15\xe3U>\x9f\xa5??\xce\x90Ky\xa1\xb5a(\xef\xcd\xbctE?%\x87O\x13\x82\x00\x00\x00\x00\x00\x00\x00\x00') r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') [ 1001.679112][T10735] usb 5-1: USB disconnect, device number 10 [ 1001.714980][T23085] device wlan1 left promiscuous mode [ 1001.905095][T23088] device wlan1 entered promiscuous mode 16:17:10 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:17:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0}, 0x60, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() exit_group(0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x9, 0x2e}, 0xd8) fcntl$setstatus(r1, 0x4, 0x2000) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) mq_open(0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080, 0x3e}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 16:17:10 executing program 1: socket$kcm(0x29, 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 16:17:10 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0}, 0x60, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() exit_group(0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x9, 0x2e}, 0xd8) fcntl$setstatus(r1, 0x4, 0x2000) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) mq_open(0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080, 0x3e}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 1003.476768][ T34] usb 3-1: USB disconnect, device number 55 16:17:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "9efa620a9c14898b", "0a1a555d81566a270fe9bf3bb290a624ad90b07703c9caf6d56449a61b4b26d7", "7e2b8382", "e5d7c972fee205f7"}, 0x38) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000200)) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 16:17:10 executing program 1: socket$kcm(0x29, 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') [ 1003.658085][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:17:10 executing program 1: socket$kcm(0x29, 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 16:17:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "9efa620a9c14898b", "0a1a555d81566a270fe9bf3bb290a624ad90b07703c9caf6d56449a61b4b26d7", "7e2b8382", "e5d7c972fee205f7"}, 0x38) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000200)) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) [ 1003.842268][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:17:10 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000640)='wlan1\x00\x1b\x1a\x02\xd9n\xff\x8a\xb2\xd9\x00L\x06\xb5\x12\x03F\xd9\x00\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xa9\xb8p\xab\xc1?r\xebkX!D\xc3c\b{\xe0Q\\^\x14\xa1B=M\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xe4\xe8#/\x11%\xac%j\x9d\xeb\xba\xe6\xc4\xc4\x02\x8dT5\xddB48\x8f\xde\xbb\xc18\x84\xb5:f\xcb\xb4\r\x85\xf4\xee\xf2g~YX\bE;I\xa7\xe9\xf4]\x00\x8d\xec\xb2\x02\xe94\x87#07M\xfa\xaf@B=u\x013\x1e%\x18\x82\xc1\x80~H\x90\x9c\x8f;s\xc9\x17\x8a\x99\xb6\xabNG\xf7:\xbaN\x03\xae`\xcc\x03\x04E\xbaw\x7fo\xc5B\xf3\xd1}|\x92V\xbang\xdf\x8b\x8a\xd7\x1bD\x95\x1d\xfe\xb2\x87\xa14Z\xe5\xb3\xad\xd1\xb9F\x1d\a\r\xcd\xf6\xd3\xb1\x92i\x9f\xa5\x1b\xb5\xc68\x84,\n\xea[\xde\v\xf4iU\x97 \xc38\xb9\xd3d\xfb\xd0\x85Z\riO\x1ce\xc9\xc9p\x8f\xd1+\xd7\xceV\xab+M\xb3\x9e\xec:\xcb\x1bfE\x9f\xab\xd2\xcb\a.\xbc\xaf\x11\xd6#\xb6\x91K\xeb\xfd\xf2;i\x1ay\xe6I:\xb0w\x0e\x00\x00\x9a7\xcd;i\xf0\xc6j\xea\x85\xad}\xfcs\xac\xc0\x82\xc5\x12\xd8\xde\xbd\xd1\x9e0t\xb8\xdf\xc9\x86\x89\n\xec\xe7\x05\xc3\x92*\xb6\x1a\xa4\x8c\xec\x84\x8aD\xf2Cg\x7fPk\t\x8e\xb4\xafV\xe8y\xfb\x9aX\x956\x829\x16\xd5)\n\x98\xc0\x9a\x8cs\x97\xa5\xd7\xbc\xaf\xcf\n>j8\xba\xf1\xf4W\xd2\xf2\xeb\xe1\x89Y\xe2(\xd1\xec\xf8\x19\x18\xbbi\xec\xc3c\xe48\x80\x98KC<|\x04\x85\xd8\x00\xe6\x12\x12\xfe\xa0\xf4\x88\xb9\xea\x14E\x1a0([X7S\xe9\xb9\xe8\xdaIc\x9a\xc6g\x91\x86\xf4\xff\b\xd7*\xa5\xd3Z))\xd2_\x10\xbam\xb1\xfa\x82<\x15\xdb\x94\xc7^V\xa0=\x06\x1d\x0e\x04\xa1\xdc\x10\b\x80\xc6\xfd\x89\xe8\x1c\xe7X\'0\xd7 \xbfxu\xbf\x9fo\xc7\r\x98O)\bi\xff\x96\xd6+\x8b\xaea\x90\\\x1f\xe8\xf4\xa9-\xd0\x04\xbd\xe4c.&\xff\x95\xc8\xca\x01$z\x86\xdc\xbb\x18e\xb6W\xb2Yh\x84\xf5\x8c\x10\xbd\xa3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xd3\x04\x03\x8a<,A\x921\xff0\x15\xe3U>\x9f\xa5??\xce\x90Ky\xa1\xb5a(\xef\xcd\xbctE?%\x87O\x13\x82\x00\x00\x00\x00\x00\x00\x00\x00') r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') [ 1003.997202][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:17:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) munlockall() r3 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) arch_prctl$ARCH_GET_GS(0x1004, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x12000000) syz_io_uring_setup(0x0, 0x0, &(0x7f000088a000/0x4000)=nil, &(0x7f00002f8000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640)) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x18}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000500ac1e010108000700ffffffff08000700ac1414aa08000400", @ANYRES32=0x0, @ANYBLOB="e0f92d39637f73965ecdcf1995c0ff52bfb513c77b498a74ee28bc8c0b425191b8d5a81ab3c4efd270bf82894f79336ce25d8c54f6d7eada8bc2ea9ddfc8e6fc8012d20f79117548199a389c8c2907cfd876750ff2c6dc348e56e0af7eb1f8b9fa27f726ec741e10443f9da23b9cb3afd1991a9a9735d1814b99640c8bc3cebb8c0d85982a000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x24008010}, 0x20000085) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, 0x0, 0x0, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 16:17:11 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000640)='wlan1\x00\x1b\x1a\x02\xd9n\xff\x8a\xb2\xd9\x00L\x06\xb5\x12\x03F\xd9\x00\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xa9\xb8p\xab\xc1?r\xebkX!D\xc3c\b{\xe0Q\\^\x14\xa1B=M\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xe4\xe8#/\x11%\xac%j\x9d\xeb\xba\xe6\xc4\xc4\x02\x8dT5\xddB48\x8f\xde\xbb\xc18\x84\xb5:f\xcb\xb4\r\x85\xf4\xee\xf2g~YX\bE;I\xa7\xe9\xf4]\x00\x8d\xec\xb2\x02\xe94\x87#07M\xfa\xaf@B=u\x013\x1e%\x18\x82\xc1\x80~H\x90\x9c\x8f;s\xc9\x17\x8a\x99\xb6\xabNG\xf7:\xbaN\x03\xae`\xcc\x03\x04E\xbaw\x7fo\xc5B\xf3\xd1}|\x92V\xbang\xdf\x8b\x8a\xd7\x1bD\x95\x1d\xfe\xb2\x87\xa14Z\xe5\xb3\xad\xd1\xb9F\x1d\a\r\xcd\xf6\xd3\xb1\x92i\x9f\xa5\x1b\xb5\xc68\x84,\n\xea[\xde\v\xf4iU\x97 \xc38\xb9\xd3d\xfb\xd0\x85Z\riO\x1ce\xc9\xc9p\x8f\xd1+\xd7\xceV\xab+M\xb3\x9e\xec:\xcb\x1bfE\x9f\xab\xd2\xcb\a.\xbc\xaf\x11\xd6#\xb6\x91K\xeb\xfd\xf2;i\x1ay\xe6I:\xb0w\x0e\x00\x00\x9a7\xcd;i\xf0\xc6j\xea\x85\xad}\xfcs\xac\xc0\x82\xc5\x12\xd8\xde\xbd\xd1\x9e0t\xb8\xdf\xc9\x86\x89\n\xec\xe7\x05\xc3\x92*\xb6\x1a\xa4\x8c\xec\x84\x8aD\xf2Cg\x7fPk\t\x8e\xb4\xafV\xe8y\xfb\x9aX\x956\x829\x16\xd5)\n\x98\xc0\x9a\x8cs\x97\xa5\xd7\xbc\xaf\xcf\n>j8\xba\xf1\xf4W\xd2\xf2\xeb\xe1\x89Y\xe2(\xd1\xec\xf8\x19\x18\xbbi\xec\xc3c\xe48\x80\x98KC<|\x04\x85\xd8\x00\xe6\x12\x12\xfe\xa0\xf4\x88\xb9\xea\x14E\x1a0([X7S\xe9\xb9\xe8\xdaIc\x9a\xc6g\x91\x86\xf4\xff\b\xd7*\xa5\xd3Z))\xd2_\x10\xbam\xb1\xfa\x82<\x15\xdb\x94\xc7^V\xa0=\x06\x1d\x0e\x04\xa1\xdc\x10\b\x80\xc6\xfd\x89\xe8\x1c\xe7X\'0\xd7 \xbfxu\xbf\x9fo\xc7\r\x98O)\bi\xff\x96\xd6+\x8b\xaea\x90\\\x1f\xe8\xf4\xa9-\xd0\x04\xbd\xe4c.&\xff\x95\xc8\xca\x01$z\x86\xdc\xbb\x18e\xb6W\xb2Yh\x84\xf5\x8c\x10\xbd\xa3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xd3\x04\x03\x8a<,A\x921\xff0\x15\xe3U>\x9f\xa5??\xce\x90Ky\xa1\xb5a(\xef\xcd\xbctE?%\x87O\x13\x82\x00\x00\x00\x00\x00\x00\x00\x00') r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') [ 1004.103137][ T34] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1004.463076][ T34] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.498517][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1004.545229][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1004.580596][ T34] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1004.629681][ T34] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1004.660752][ T34] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1004.684671][ T34] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.708275][ T34] usb 3-1: config 0 descriptor?? [ 1004.774211][ T34] legousbtower 3-1:0.0: interrupt endpoints not found 16:17:13 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:17:13 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000640)='wlan1\x00\x1b\x1a\x02\xd9n\xff\x8a\xb2\xd9\x00L\x06\xb5\x12\x03F\xd9\x00\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xa9\xb8p\xab\xc1?r\xebkX!D\xc3c\b{\xe0Q\\^\x14\xa1B=M\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xe4\xe8#/\x11%\xac%j\x9d\xeb\xba\xe6\xc4\xc4\x02\x8dT5\xddB48\x8f\xde\xbb\xc18\x84\xb5:f\xcb\xb4\r\x85\xf4\xee\xf2g~YX\bE;I\xa7\xe9\xf4]\x00\x8d\xec\xb2\x02\xe94\x87#07M\xfa\xaf@B=u\x013\x1e%\x18\x82\xc1\x80~H\x90\x9c\x8f;s\xc9\x17\x8a\x99\xb6\xabNG\xf7:\xbaN\x03\xae`\xcc\x03\x04E\xbaw\x7fo\xc5B\xf3\xd1}|\x92V\xbang\xdf\x8b\x8a\xd7\x1bD\x95\x1d\xfe\xb2\x87\xa14Z\xe5\xb3\xad\xd1\xb9F\x1d\a\r\xcd\xf6\xd3\xb1\x92i\x9f\xa5\x1b\xb5\xc68\x84,\n\xea[\xde\v\xf4iU\x97 \xc38\xb9\xd3d\xfb\xd0\x85Z\riO\x1ce\xc9\xc9p\x8f\xd1+\xd7\xceV\xab+M\xb3\x9e\xec:\xcb\x1bfE\x9f\xab\xd2\xcb\a.\xbc\xaf\x11\xd6#\xb6\x91K\xeb\xfd\xf2;i\x1ay\xe6I:\xb0w\x0e\x00\x00\x9a7\xcd;i\xf0\xc6j\xea\x85\xad}\xfcs\xac\xc0\x82\xc5\x12\xd8\xde\xbd\xd1\x9e0t\xb8\xdf\xc9\x86\x89\n\xec\xe7\x05\xc3\x92*\xb6\x1a\xa4\x8c\xec\x84\x8aD\xf2Cg\x7fPk\t\x8e\xb4\xafV\xe8y\xfb\x9aX\x956\x829\x16\xd5)\n\x98\xc0\x9a\x8cs\x97\xa5\xd7\xbc\xaf\xcf\n>j8\xba\xf1\xf4W\xd2\xf2\xeb\xe1\x89Y\xe2(\xd1\xec\xf8\x19\x18\xbbi\xec\xc3c\xe48\x80\x98KC<|\x04\x85\xd8\x00\xe6\x12\x12\xfe\xa0\xf4\x88\xb9\xea\x14E\x1a0([X7S\xe9\xb9\xe8\xdaIc\x9a\xc6g\x91\x86\xf4\xff\b\xd7*\xa5\xd3Z))\xd2_\x10\xbam\xb1\xfa\x82<\x15\xdb\x94\xc7^V\xa0=\x06\x1d\x0e\x04\xa1\xdc\x10\b\x80\xc6\xfd\x89\xe8\x1c\xe7X\'0\xd7 \xbfxu\xbf\x9fo\xc7\r\x98O)\bi\xff\x96\xd6+\x8b\xaea\x90\\\x1f\xe8\xf4\xa9-\xd0\x04\xbd\xe4c.&\xff\x95\xc8\xca\x01$z\x86\xdc\xbb\x18e\xb6W\xb2Yh\x84\xf5\x8c\x10\xbd\xa3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xd3\x04\x03\x8a<,A\x921\xff0\x15\xe3U>\x9f\xa5??\xce\x90Ky\xa1\xb5a(\xef\xcd\xbctE?%\x87O\x13\x82\x00\x00\x00\x00\x00\x00\x00\x00') r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 16:17:13 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:13 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x1d7, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x9}}}}}]}}]}}, 0x0) 16:17:13 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, 0x0) 16:17:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) munlockall() r3 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) arch_prctl$ARCH_GET_GS(0x1004, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x12000000) syz_io_uring_setup(0x0, 0x0, &(0x7f000088a000/0x4000)=nil, &(0x7f00002f8000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640)) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x18}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000500ac1e010108000700ffffffff08000700ac1414aa08000400", @ANYRES32=0x0, @ANYBLOB="e0f92d39637f73965ecdcf1995c0ff52bfb513c77b498a74ee28bc8c0b425191b8d5a81ab3c4efd270bf82894f79336ce25d8c54f6d7eada8bc2ea9ddfc8e6fc8012d20f79117548199a389c8c2907cfd876750ff2c6dc348e56e0af7eb1f8b9fa27f726ec741e10443f9da23b9cb3afd1991a9a9735d1814b99640c8bc3cebb8c0d85982a000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x24008010}, 0x20000085) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, 0x0, 0x0, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0) [ 1006.690960][T17986] usb 3-1: USB disconnect, device number 56 16:17:13 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000640)='wlan1\x00\x1b\x1a\x02\xd9n\xff\x8a\xb2\xd9\x00L\x06\xb5\x12\x03F\xd9\x00\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xa9\xb8p\xab\xc1?r\xebkX!D\xc3c\b{\xe0Q\\^\x14\xa1B=M\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xe4\xe8#/\x11%\xac%j\x9d\xeb\xba\xe6\xc4\xc4\x02\x8dT5\xddB48\x8f\xde\xbb\xc18\x84\xb5:f\xcb\xb4\r\x85\xf4\xee\xf2g~YX\bE;I\xa7\xe9\xf4]\x00\x8d\xec\xb2\x02\xe94\x87#07M\xfa\xaf@B=u\x013\x1e%\x18\x82\xc1\x80~H\x90\x9c\x8f;s\xc9\x17\x8a\x99\xb6\xabNG\xf7:\xbaN\x03\xae`\xcc\x03\x04E\xbaw\x7fo\xc5B\xf3\xd1}|\x92V\xbang\xdf\x8b\x8a\xd7\x1bD\x95\x1d\xfe\xb2\x87\xa14Z\xe5\xb3\xad\xd1\xb9F\x1d\a\r\xcd\xf6\xd3\xb1\x92i\x9f\xa5\x1b\xb5\xc68\x84,\n\xea[\xde\v\xf4iU\x97 \xc38\xb9\xd3d\xfb\xd0\x85Z\riO\x1ce\xc9\xc9p\x8f\xd1+\xd7\xceV\xab+M\xb3\x9e\xec:\xcb\x1bfE\x9f\xab\xd2\xcb\a.\xbc\xaf\x11\xd6#\xb6\x91K\xeb\xfd\xf2;i\x1ay\xe6I:\xb0w\x0e\x00\x00\x9a7\xcd;i\xf0\xc6j\xea\x85\xad}\xfcs\xac\xc0\x82\xc5\x12\xd8\xde\xbd\xd1\x9e0t\xb8\xdf\xc9\x86\x89\n\xec\xe7\x05\xc3\x92*\xb6\x1a\xa4\x8c\xec\x84\x8aD\xf2Cg\x7fPk\t\x8e\xb4\xafV\xe8y\xfb\x9aX\x956\x829\x16\xd5)\n\x98\xc0\x9a\x8cs\x97\xa5\xd7\xbc\xaf\xcf\n>j8\xba\xf1\xf4W\xd2\xf2\xeb\xe1\x89Y\xe2(\xd1\xec\xf8\x19\x18\xbbi\xec\xc3c\xe48\x80\x98KC<|\x04\x85\xd8\x00\xe6\x12\x12\xfe\xa0\xf4\x88\xb9\xea\x14E\x1a0([X7S\xe9\xb9\xe8\xdaIc\x9a\xc6g\x91\x86\xf4\xff\b\xd7*\xa5\xd3Z))\xd2_\x10\xbam\xb1\xfa\x82<\x15\xdb\x94\xc7^V\xa0=\x06\x1d\x0e\x04\xa1\xdc\x10\b\x80\xc6\xfd\x89\xe8\x1c\xe7X\'0\xd7 \xbfxu\xbf\x9fo\xc7\r\x98O)\bi\xff\x96\xd6+\x8b\xaea\x90\\\x1f\xe8\xf4\xa9-\xd0\x04\xbd\xe4c.&\xff\x95\xc8\xca\x01$z\x86\xdc\xbb\x18e\xb6W\xb2Yh\x84\xf5\x8c\x10\xbd\xa3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xd3\x04\x03\x8a<,A\x921\xff0\x15\xe3U>\x9f\xa5??\xce\x90Ky\xa1\xb5a(\xef\xcd\xbctE?%\x87O\x13\x82\x00\x00\x00\x00\x00\x00\x00\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 16:17:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) munlockall() r3 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) arch_prctl$ARCH_GET_GS(0x1004, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x12000000) syz_io_uring_setup(0x0, 0x0, &(0x7f000088a000/0x4000)=nil, &(0x7f00002f8000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640)) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x18}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000500ac1e010108000700ffffffff08000700ac1414aa08000400", @ANYRES32=0x0, @ANYBLOB="e0f92d39637f73965ecdcf1995c0ff52bfb513c77b498a74ee28bc8c0b425191b8d5a81ab3c4efd270bf82894f79336ce25d8c54f6d7eada8bc2ea9ddfc8e6fc8012d20f79117548199a389c8c2907cfd876750ff2c6dc348e56e0af7eb1f8b9fa27f726ec741e10443f9da23b9cb3afd1991a9a9735d1814b99640c8bc3cebb8c0d85982a000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x24008010}, 0x20000085) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, 0x0, 0x0, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 16:17:13 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000640)='wlan1\x00\x1b\x1a\x02\xd9n\xff\x8a\xb2\xd9\x00L\x06\xb5\x12\x03F\xd9\x00\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xa9\xb8p\xab\xc1?r\xebkX!D\xc3c\b{\xe0Q\\^\x14\xa1B=M\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xe4\xe8#/\x11%\xac%j\x9d\xeb\xba\xe6\xc4\xc4\x02\x8dT5\xddB48\x8f\xde\xbb\xc18\x84\xb5:f\xcb\xb4\r\x85\xf4\xee\xf2g~YX\bE;I\xa7\xe9\xf4]\x00\x8d\xec\xb2\x02\xe94\x87#07M\xfa\xaf@B=u\x013\x1e%\x18\x82\xc1\x80~H\x90\x9c\x8f;s\xc9\x17\x8a\x99\xb6\xabNG\xf7:\xbaN\x03\xae`\xcc\x03\x04E\xbaw\x7fo\xc5B\xf3\xd1}|\x92V\xbang\xdf\x8b\x8a\xd7\x1bD\x95\x1d\xfe\xb2\x87\xa14Z\xe5\xb3\xad\xd1\xb9F\x1d\a\r\xcd\xf6\xd3\xb1\x92i\x9f\xa5\x1b\xb5\xc68\x84,\n\xea[\xde\v\xf4iU\x97 \xc38\xb9\xd3d\xfb\xd0\x85Z\riO\x1ce\xc9\xc9p\x8f\xd1+\xd7\xceV\xab+M\xb3\x9e\xec:\xcb\x1bfE\x9f\xab\xd2\xcb\a.\xbc\xaf\x11\xd6#\xb6\x91K\xeb\xfd\xf2;i\x1ay\xe6I:\xb0w\x0e\x00\x00\x9a7\xcd;i\xf0\xc6j\xea\x85\xad}\xfcs\xac\xc0\x82\xc5\x12\xd8\xde\xbd\xd1\x9e0t\xb8\xdf\xc9\x86\x89\n\xec\xe7\x05\xc3\x92*\xb6\x1a\xa4\x8c\xec\x84\x8aD\xf2Cg\x7fPk\t\x8e\xb4\xafV\xe8y\xfb\x9aX\x956\x829\x16\xd5)\n\x98\xc0\x9a\x8cs\x97\xa5\xd7\xbc\xaf\xcf\n>j8\xba\xf1\xf4W\xd2\xf2\xeb\xe1\x89Y\xe2(\xd1\xec\xf8\x19\x18\xbbi\xec\xc3c\xe48\x80\x98KC<|\x04\x85\xd8\x00\xe6\x12\x12\xfe\xa0\xf4\x88\xb9\xea\x14E\x1a0([X7S\xe9\xb9\xe8\xdaIc\x9a\xc6g\x91\x86\xf4\xff\b\xd7*\xa5\xd3Z))\xd2_\x10\xbam\xb1\xfa\x82<\x15\xdb\x94\xc7^V\xa0=\x06\x1d\x0e\x04\xa1\xdc\x10\b\x80\xc6\xfd\x89\xe8\x1c\xe7X\'0\xd7 \xbfxu\xbf\x9fo\xc7\r\x98O)\bi\xff\x96\xd6+\x8b\xaea\x90\\\x1f\xe8\xf4\xa9-\xd0\x04\xbd\xe4c.&\xff\x95\xc8\xca\x01$z\x86\xdc\xbb\x18e\xb6W\xb2Yh\x84\xf5\x8c\x10\xbd\xa3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xd3\x04\x03\x8a<,A\x921\xff0\x15\xe3U>\x9f\xa5??\xce\x90Ky\xa1\xb5a(\xef\xcd\xbctE?%\x87O\x13\x82\x00\x00\x00\x00\x00\x00\x00\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 16:17:14 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000640)='wlan1\x00\x1b\x1a\x02\xd9n\xff\x8a\xb2\xd9\x00L\x06\xb5\x12\x03F\xd9\x00\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xa9\xb8p\xab\xc1?r\xebkX!D\xc3c\b{\xe0Q\\^\x14\xa1B=M\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xe4\xe8#/\x11%\xac%j\x9d\xeb\xba\xe6\xc4\xc4\x02\x8dT5\xddB48\x8f\xde\xbb\xc18\x84\xb5:f\xcb\xb4\r\x85\xf4\xee\xf2g~YX\bE;I\xa7\xe9\xf4]\x00\x8d\xec\xb2\x02\xe94\x87#07M\xfa\xaf@B=u\x013\x1e%\x18\x82\xc1\x80~H\x90\x9c\x8f;s\xc9\x17\x8a\x99\xb6\xabNG\xf7:\xbaN\x03\xae`\xcc\x03\x04E\xbaw\x7fo\xc5B\xf3\xd1}|\x92V\xbang\xdf\x8b\x8a\xd7\x1bD\x95\x1d\xfe\xb2\x87\xa14Z\xe5\xb3\xad\xd1\xb9F\x1d\a\r\xcd\xf6\xd3\xb1\x92i\x9f\xa5\x1b\xb5\xc68\x84,\n\xea[\xde\v\xf4iU\x97 \xc38\xb9\xd3d\xfb\xd0\x85Z\riO\x1ce\xc9\xc9p\x8f\xd1+\xd7\xceV\xab+M\xb3\x9e\xec:\xcb\x1bfE\x9f\xab\xd2\xcb\a.\xbc\xaf\x11\xd6#\xb6\x91K\xeb\xfd\xf2;i\x1ay\xe6I:\xb0w\x0e\x00\x00\x9a7\xcd;i\xf0\xc6j\xea\x85\xad}\xfcs\xac\xc0\x82\xc5\x12\xd8\xde\xbd\xd1\x9e0t\xb8\xdf\xc9\x86\x89\n\xec\xe7\x05\xc3\x92*\xb6\x1a\xa4\x8c\xec\x84\x8aD\xf2Cg\x7fPk\t\x8e\xb4\xafV\xe8y\xfb\x9aX\x956\x829\x16\xd5)\n\x98\xc0\x9a\x8cs\x97\xa5\xd7\xbc\xaf\xcf\n>j8\xba\xf1\xf4W\xd2\xf2\xeb\xe1\x89Y\xe2(\xd1\xec\xf8\x19\x18\xbbi\xec\xc3c\xe48\x80\x98KC<|\x04\x85\xd8\x00\xe6\x12\x12\xfe\xa0\xf4\x88\xb9\xea\x14E\x1a0([X7S\xe9\xb9\xe8\xdaIc\x9a\xc6g\x91\x86\xf4\xff\b\xd7*\xa5\xd3Z))\xd2_\x10\xbam\xb1\xfa\x82<\x15\xdb\x94\xc7^V\xa0=\x06\x1d\x0e\x04\xa1\xdc\x10\b\x80\xc6\xfd\x89\xe8\x1c\xe7X\'0\xd7 \xbfxu\xbf\x9fo\xc7\r\x98O)\bi\xff\x96\xd6+\x8b\xaea\x90\\\x1f\xe8\xf4\xa9-\xd0\x04\xbd\xe4c.&\xff\x95\xc8\xca\x01$z\x86\xdc\xbb\x18e\xb6W\xb2Yh\x84\xf5\x8c\x10\xbd\xa3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xd3\x04\x03\x8a<,A\x921\xff0\x15\xe3U>\x9f\xa5??\xce\x90Ky\xa1\xb5a(\xef\xcd\xbctE?%\x87O\x13\x82\x00\x00\x00\x00\x00\x00\x00\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') [ 1007.053008][T12046] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1007.193238][T17986] usb 3-1: new high-speed USB device number 57 using dummy_hcd 16:17:14 executing program 1: socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000640)='wlan1\x00\x1b\x1a\x02\xd9n\xff\x8a\xb2\xd9\x00L\x06\xb5\x12\x03F\xd9\x00\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xa9\xb8p\xab\xc1?r\xebkX!D\xc3c\b{\xe0Q\\^\x14\xa1B=M\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xe4\xe8#/\x11%\xac%j\x9d\xeb\xba\xe6\xc4\xc4\x02\x8dT5\xddB48\x8f\xde\xbb\xc18\x84\xb5:f\xcb\xb4\r\x85\xf4\xee\xf2g~YX\bE;I\xa7\xe9\xf4]\x00\x8d\xec\xb2\x02\xe94\x87#07M\xfa\xaf@B=u\x013\x1e%\x18\x82\xc1\x80~H\x90\x9c\x8f;s\xc9\x17\x8a\x99\xb6\xabNG\xf7:\xbaN\x03\xae`\xcc\x03\x04E\xbaw\x7fo\xc5B\xf3\xd1}|\x92V\xbang\xdf\x8b\x8a\xd7\x1bD\x95\x1d\xfe\xb2\x87\xa14Z\xe5\xb3\xad\xd1\xb9F\x1d\a\r\xcd\xf6\xd3\xb1\x92i\x9f\xa5\x1b\xb5\xc68\x84,\n\xea[\xde\v\xf4iU\x97 \xc38\xb9\xd3d\xfb\xd0\x85Z\riO\x1ce\xc9\xc9p\x8f\xd1+\xd7\xceV\xab+M\xb3\x9e\xec:\xcb\x1bfE\x9f\xab\xd2\xcb\a.\xbc\xaf\x11\xd6#\xb6\x91K\xeb\xfd\xf2;i\x1ay\xe6I:\xb0w\x0e\x00\x00\x9a7\xcd;i\xf0\xc6j\xea\x85\xad}\xfcs\xac\xc0\x82\xc5\x12\xd8\xde\xbd\xd1\x9e0t\xb8\xdf\xc9\x86\x89\n\xec\xe7\x05\xc3\x92*\xb6\x1a\xa4\x8c\xec\x84\x8aD\xf2Cg\x7fPk\t\x8e\xb4\xafV\xe8y\xfb\x9aX\x956\x829\x16\xd5)\n\x98\xc0\x9a\x8cs\x97\xa5\xd7\xbc\xaf\xcf\n>j8\xba\xf1\xf4W\xd2\xf2\xeb\xe1\x89Y\xe2(\xd1\xec\xf8\x19\x18\xbbi\xec\xc3c\xe48\x80\x98KC<|\x04\x85\xd8\x00\xe6\x12\x12\xfe\xa0\xf4\x88\xb9\xea\x14E\x1a0([X7S\xe9\xb9\xe8\xdaIc\x9a\xc6g\x91\x86\xf4\xff\b\xd7*\xa5\xd3Z))\xd2_\x10\xbam\xb1\xfa\x82<\x15\xdb\x94\xc7^V\xa0=\x06\x1d\x0e\x04\xa1\xdc\x10\b\x80\xc6\xfd\x89\xe8\x1c\xe7X\'0\xd7 \xbfxu\xbf\x9fo\xc7\r\x98O)\bi\xff\x96\xd6+\x8b\xaea\x90\\\x1f\xe8\xf4\xa9-\xd0\x04\xbd\xe4c.&\xff\x95\xc8\xca\x01$z\x86\xdc\xbb\x18e\xb6W\xb2Yh\x84\xf5\x8c\x10\xbd\xa3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xd3\x04\x03\x8a<,A\x921\xff0\x15\xe3U>\x9f\xa5??\xce\x90Ky\xa1\xb5a(\xef\xcd\xbctE?%\x87O\x13\x82\x00\x00\x00\x00\x00\x00\x00\x00') r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') [ 1007.313169][T12046] usb 4-1: Using ep0 maxpacket: 8 16:17:14 executing program 1: socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000640)='wlan1\x00\x1b\x1a\x02\xd9n\xff\x8a\xb2\xd9\x00L\x06\xb5\x12\x03F\xd9\x00\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xa9\xb8p\xab\xc1?r\xebkX!D\xc3c\b{\xe0Q\\^\x14\xa1B=M\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xe4\xe8#/\x11%\xac%j\x9d\xeb\xba\xe6\xc4\xc4\x02\x8dT5\xddB48\x8f\xde\xbb\xc18\x84\xb5:f\xcb\xb4\r\x85\xf4\xee\xf2g~YX\bE;I\xa7\xe9\xf4]\x00\x8d\xec\xb2\x02\xe94\x87#07M\xfa\xaf@B=u\x013\x1e%\x18\x82\xc1\x80~H\x90\x9c\x8f;s\xc9\x17\x8a\x99\xb6\xabNG\xf7:\xbaN\x03\xae`\xcc\x03\x04E\xbaw\x7fo\xc5B\xf3\xd1}|\x92V\xbang\xdf\x8b\x8a\xd7\x1bD\x95\x1d\xfe\xb2\x87\xa14Z\xe5\xb3\xad\xd1\xb9F\x1d\a\r\xcd\xf6\xd3\xb1\x92i\x9f\xa5\x1b\xb5\xc68\x84,\n\xea[\xde\v\xf4iU\x97 \xc38\xb9\xd3d\xfb\xd0\x85Z\riO\x1ce\xc9\xc9p\x8f\xd1+\xd7\xceV\xab+M\xb3\x9e\xec:\xcb\x1bfE\x9f\xab\xd2\xcb\a.\xbc\xaf\x11\xd6#\xb6\x91K\xeb\xfd\xf2;i\x1ay\xe6I:\xb0w\x0e\x00\x00\x9a7\xcd;i\xf0\xc6j\xea\x85\xad}\xfcs\xac\xc0\x82\xc5\x12\xd8\xde\xbd\xd1\x9e0t\xb8\xdf\xc9\x86\x89\n\xec\xe7\x05\xc3\x92*\xb6\x1a\xa4\x8c\xec\x84\x8aD\xf2Cg\x7fPk\t\x8e\xb4\xafV\xe8y\xfb\x9aX\x956\x829\x16\xd5)\n\x98\xc0\x9a\x8cs\x97\xa5\xd7\xbc\xaf\xcf\n>j8\xba\xf1\xf4W\xd2\xf2\xeb\xe1\x89Y\xe2(\xd1\xec\xf8\x19\x18\xbbi\xec\xc3c\xe48\x80\x98KC<|\x04\x85\xd8\x00\xe6\x12\x12\xfe\xa0\xf4\x88\xb9\xea\x14E\x1a0([X7S\xe9\xb9\xe8\xdaIc\x9a\xc6g\x91\x86\xf4\xff\b\xd7*\xa5\xd3Z))\xd2_\x10\xbam\xb1\xfa\x82<\x15\xdb\x94\xc7^V\xa0=\x06\x1d\x0e\x04\xa1\xdc\x10\b\x80\xc6\xfd\x89\xe8\x1c\xe7X\'0\xd7 \xbfxu\xbf\x9fo\xc7\r\x98O)\bi\xff\x96\xd6+\x8b\xaea\x90\\\x1f\xe8\xf4\xa9-\xd0\x04\xbd\xe4c.&\xff\x95\xc8\xca\x01$z\x86\xdc\xbb\x18e\xb6W\xb2Yh\x84\xf5\x8c\x10\xbd\xa3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xd3\x04\x03\x8a<,A\x921\xff0\x15\xe3U>\x9f\xa5??\xce\x90Ky\xa1\xb5a(\xef\xcd\xbctE?%\x87O\x13\x82\x00\x00\x00\x00\x00\x00\x00\x00') r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') [ 1007.433648][T12046] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1007.474301][T12046] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1007.518703][T12046] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1007.573481][T17986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1007.602890][T17986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1007.613225][T17986] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1007.653226][T17986] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1007.670614][T17986] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1007.681245][T17986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.692970][T17986] usb 3-1: config 0 descriptor?? [ 1007.744929][T17986] legousbtower 3-1:0.0: interrupt endpoints not found [ 1007.783768][T12046] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1007.801097][T12046] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.828770][T12046] usb 4-1: Product: syz [ 1007.839677][T12046] usb 4-1: Manufacturer: syz [ 1007.862900][T12046] usb 4-1: SerialNumber: syz [ 1007.903707][T12046] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 1008.105740][ T34] usb 4-1: USB disconnect, device number 10 [ 1008.882871][ T34] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1009.123067][ T34] usb 4-1: Using ep0 maxpacket: 8 [ 1009.243034][ T34] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1009.253697][ T34] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1009.269423][ T34] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1009.443071][ T34] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1009.453682][ T34] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.461827][ T34] usb 4-1: Product: syz [ 1009.474212][ T34] usb 4-1: Manufacturer: syz [ 1009.478941][ T34] usb 4-1: SerialNumber: syz [ 1009.524166][ T34] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 1009.728635][ T34] usb 4-1: USB disconnect, device number 11 16:17:16 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:17:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) munlockall() r3 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) arch_prctl$ARCH_GET_GS(0x1004, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x12000000) syz_io_uring_setup(0x0, 0x0, &(0x7f000088a000/0x4000)=nil, &(0x7f00002f8000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640)) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x18}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000500ac1e010108000700ffffffff08000700ac1414aa08000400", @ANYRES32=0x0, @ANYBLOB="e0f92d39637f73965ecdcf1995c0ff52bfb513c77b498a74ee28bc8c0b425191b8d5a81ab3c4efd270bf82894f79336ce25d8c54f6d7eada8bc2ea9ddfc8e6fc8012d20f79117548199a389c8c2907cfd876750ff2c6dc348e56e0af7eb1f8b9fa27f726ec741e10443f9da23b9cb3afd1991a9a9735d1814b99640c8bc3cebb8c0d85982a000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x24008010}, 0x20000085) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, 0x0, 0x0, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 16:17:16 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:16 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 16:17:16 executing program 1: socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000640)='wlan1\x00\x1b\x1a\x02\xd9n\xff\x8a\xb2\xd9\x00L\x06\xb5\x12\x03F\xd9\x00\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xa9\xb8p\xab\xc1?r\xebkX!D\xc3c\b{\xe0Q\\^\x14\xa1B=M\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xe4\xe8#/\x11%\xac%j\x9d\xeb\xba\xe6\xc4\xc4\x02\x8dT5\xddB48\x8f\xde\xbb\xc18\x84\xb5:f\xcb\xb4\r\x85\xf4\xee\xf2g~YX\bE;I\xa7\xe9\xf4]\x00\x8d\xec\xb2\x02\xe94\x87#07M\xfa\xaf@B=u\x013\x1e%\x18\x82\xc1\x80~H\x90\x9c\x8f;s\xc9\x17\x8a\x99\xb6\xabNG\xf7:\xbaN\x03\xae`\xcc\x03\x04E\xbaw\x7fo\xc5B\xf3\xd1}|\x92V\xbang\xdf\x8b\x8a\xd7\x1bD\x95\x1d\xfe\xb2\x87\xa14Z\xe5\xb3\xad\xd1\xb9F\x1d\a\r\xcd\xf6\xd3\xb1\x92i\x9f\xa5\x1b\xb5\xc68\x84,\n\xea[\xde\v\xf4iU\x97 \xc38\xb9\xd3d\xfb\xd0\x85Z\riO\x1ce\xc9\xc9p\x8f\xd1+\xd7\xceV\xab+M\xb3\x9e\xec:\xcb\x1bfE\x9f\xab\xd2\xcb\a.\xbc\xaf\x11\xd6#\xb6\x91K\xeb\xfd\xf2;i\x1ay\xe6I:\xb0w\x0e\x00\x00\x9a7\xcd;i\xf0\xc6j\xea\x85\xad}\xfcs\xac\xc0\x82\xc5\x12\xd8\xde\xbd\xd1\x9e0t\xb8\xdf\xc9\x86\x89\n\xec\xe7\x05\xc3\x92*\xb6\x1a\xa4\x8c\xec\x84\x8aD\xf2Cg\x7fPk\t\x8e\xb4\xafV\xe8y\xfb\x9aX\x956\x829\x16\xd5)\n\x98\xc0\x9a\x8cs\x97\xa5\xd7\xbc\xaf\xcf\n>j8\xba\xf1\xf4W\xd2\xf2\xeb\xe1\x89Y\xe2(\xd1\xec\xf8\x19\x18\xbbi\xec\xc3c\xe48\x80\x98KC<|\x04\x85\xd8\x00\xe6\x12\x12\xfe\xa0\xf4\x88\xb9\xea\x14E\x1a0([X7S\xe9\xb9\xe8\xdaIc\x9a\xc6g\x91\x86\xf4\xff\b\xd7*\xa5\xd3Z))\xd2_\x10\xbam\xb1\xfa\x82<\x15\xdb\x94\xc7^V\xa0=\x06\x1d\x0e\x04\xa1\xdc\x10\b\x80\xc6\xfd\x89\xe8\x1c\xe7X\'0\xd7 \xbfxu\xbf\x9fo\xc7\r\x98O)\bi\xff\x96\xd6+\x8b\xaea\x90\\\x1f\xe8\xf4\xa9-\xd0\x04\xbd\xe4c.&\xff\x95\xc8\xca\x01$z\x86\xdc\xbb\x18e\xb6W\xb2Yh\x84\xf5\x8c\x10\xbd\xa3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xd3\x04\x03\x8a<,A\x921\xff0\x15\xe3U>\x9f\xa5??\xce\x90Ky\xa1\xb5a(\xef\xcd\xbctE?%\x87O\x13\x82\x00\x00\x00\x00\x00\x00\x00\x00') r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 16:17:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0}, 0x60, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() exit_group(0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x9, 0x2e}, 0xd8) fcntl$setstatus(r1, 0x4, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) mq_open(0x0, 0x0, 0x8, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080, 0x3e}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 1009.801580][T10735] usb 3-1: USB disconnect, device number 57 16:17:16 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 16:17:16 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r2, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:16 executing program 3: syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0x0, 0x49c800) 16:17:17 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 16:17:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0}, 0x60, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() exit_group(0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x9, 0x2e}, 0xd8) fcntl$setstatus(r1, 0x4, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) mq_open(0x0, 0x0, 0x8, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000900)={0x0, 0x0, "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", "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"}) recvmsg(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080, 0x3e}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 16:17:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1010.297743][T10735] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1010.673601][T10735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1010.700838][T10735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1010.737611][T10735] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1010.771466][T10735] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1010.821879][T10735] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1010.880940][T10735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.921584][T10735] usb 3-1: config 0 descriptor?? [ 1010.974225][T10735] legousbtower 3-1:0.0: interrupt endpoints not found 16:17:19 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:17:19 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 16:17:19 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="663c7b4700807094e71b0fb1f138a925d86800278dcff47d010b0067dd32378f364600000001000000f20aa20f920139d34715b9f50100771c3697b11dc6845ece76b468d1c207488ce7f4708e28dd8c0c0f401224349576f6a49608db22dd312491c30000f3c3af52d2c178f958148557ec26eb401067facb137e183de6d35a360014856cf24dc90371a8b5679e06a44a749790739d272b9926c451679cfa777f00", 0xa2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x7) 16:17:19 executing program 0: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000240)={0x0, 0x81, 0x6, 0x81}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000000c0)=@urb_type_bulk={0x3, {}, 0x4, 0x20, &(0x7f00000002c0)="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", 0xf80, 0x1, 0x3, 0x400, 0xffff, 0x4, &(0x7f0000000040)="44828beef986d8fbfae6fde348aca1b5e9d4bf16646146f5198becb03900f9720e0f8e7a4d6cc327939901bcbae0f052ef374d6235ebbf71803bbda8471f121c1dc1f1"}) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x7890251765aaf55f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f00000012c0)={0x4, [[0x0, 0xfffffff7, 0xe456, 0x8, 0x66, 0x4, 0x2, 0x7], [0x80000001, 0x4, 0x5, 0x933d, 0x100, 0xffffff73, 0x4], [0x2, 0x3, 0x3, 0x0, 0x1, 0x1, 0x40]], [], [{0x1, 0x7}, {0x0, 0x0, 0x1}, {0x400, 0xc5, 0x0, 0x1}, {0x3, 0x5, 0x1, 0x1, 0x1, 0x1}, {0x6, 0x6, 0x0, 0x0, 0x1}, {0x29, 0x3, 0x0, 0x0, 0x1}, {0x1f, 0x7fff, 0x1, 0x1, 0x1, 0x1}, {0xfffff958}, {0x9, 0x7, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x80000001, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x8, 0x0, 0x0, 0x1}, {0x3ff8}]}) 16:17:19 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:19 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r2, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) [ 1012.897598][T17986] usb 3-1: USB disconnect, device number 58 16:17:20 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000640)='wlan1\x00\x1b\x1a\x02\xd9n\xff\x8a\xb2\xd9\x00L\x06\xb5\x12\x03F\xd9\x00\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xa9\xb8p\xab\xc1?r\xebkX!D\xc3c\b{\xe0Q\\^\x14\xa1B=M\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xe4\xe8#/\x11%\xac%j\x9d\xeb\xba\xe6\xc4\xc4\x02\x8dT5\xddB48\x8f\xde\xbb\xc18\x84\xb5:f\xcb\xb4\r\x85\xf4\xee\xf2g~YX\bE;I\xa7\xe9\xf4]\x00\x8d\xec\xb2\x02\xe94\x87#07M\xfa\xaf@B=u\x013\x1e%\x18\x82\xc1\x80~H\x90\x9c\x8f;s\xc9\x17\x8a\x99\xb6\xabNG\xf7:\xbaN\x03\xae`\xcc\x03\x04E\xbaw\x7fo\xc5B\xf3\xd1}|\x92V\xbang\xdf\x8b\x8a\xd7\x1bD\x95\x1d\xfe\xb2\x87\xa14Z\xe5\xb3\xad\xd1\xb9F\x1d\a\r\xcd\xf6\xd3\xb1\x92i\x9f\xa5\x1b\xb5\xc68\x84,\n\xea[\xde\v\xf4iU\x97 \xc38\xb9\xd3d\xfb\xd0\x85Z\riO\x1ce\xc9\xc9p\x8f\xd1+\xd7\xceV\xab+M\xb3\x9e\xec:\xcb\x1bfE\x9f\xab\xd2\xcb\a.\xbc\xaf\x11\xd6#\xb6\x91K\xeb\xfd\xf2;i\x1ay\xe6I:\xb0w\x0e\x00\x00\x9a7\xcd;i\xf0\xc6j\xea\x85\xad}\xfcs\xac\xc0\x82\xc5\x12\xd8\xde\xbd\xd1\x9e0t\xb8\xdf\xc9\x86\x89\n\xec\xe7\x05\xc3\x92*\xb6\x1a\xa4\x8c\xec\x84\x8aD\xf2Cg\x7fPk\t\x8e\xb4\xafV\xe8y\xfb\x9aX\x956\x829\x16\xd5)\n\x98\xc0\x9a\x8cs\x97\xa5\xd7\xbc\xaf\xcf\n>j8\xba\xf1\xf4W\xd2\xf2\xeb\xe1\x89Y\xe2(\xd1\xec\xf8\x19\x18\xbbi\xec\xc3c\xe48\x80\x98KC<|\x04\x85\xd8\x00\xe6\x12\x12\xfe\xa0\xf4\x88\xb9\xea\x14E\x1a0([X7S\xe9\xb9\xe8\xdaIc\x9a\xc6g\x91\x86\xf4\xff\b\xd7*\xa5\xd3Z))\xd2_\x10\xbam\xb1\xfa\x82<\x15\xdb\x94\xc7^V\xa0=\x06\x1d\x0e\x04\xa1\xdc\x10\b\x80\xc6\xfd\x89\xe8\x1c\xe7X\'0\xd7 \xbfxu\xbf\x9fo\xc7\r\x98O)\bi\xff\x96\xd6+\x8b\xaea\x90\\\x1f\xe8\xf4\xa9-\xd0\x04\xbd\xe4c.&\xff\x95\xc8\xca\x01$z\x86\xdc\xbb\x18e\xb6W\xb2Yh\x84\xf5\x8c\x10\xbd\xa3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xd3\x04\x03\x8a<,A\x921\xff0\x15\xe3U>\x9f\xa5??\xce\x90Ky\xa1\xb5a(\xef\xcd\xbctE?%\x87O\x13\x82\x00\x00\x00\x00\x00\x00\x00\x00') socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 16:17:20 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="663c7b4700807094e71b0fb1f138a925d86800278dcff47d010b0067dd32378f364600000001000000f20aa20f920139d34715b9f50100771c3697b11dc6845ece76b468d1c207488ce7f4708e28dd8c0c0f401224349576f6a49608db22", 0x5e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x7) 16:17:20 executing program 0: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000240)={0x0, 0x81, 0x6, 0x81}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000000c0)=@urb_type_bulk={0x3, {}, 0x4, 0x20, &(0x7f00000002c0)="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", 0xf80, 0x1, 0x3, 0x400, 0xffff, 0x4, &(0x7f0000000040)="44828beef986d8fbfae6fde348aca1b5e9d4bf16646146f5198becb03900f9720e0f8e7a4d6cc327939901bcbae0f052ef374d6235ebbf71803bbda8471f121c1dc1f1"}) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x7890251765aaf55f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f00000012c0)={0x4, [[0x0, 0xfffffff7, 0xe456, 0x8, 0x66, 0x4, 0x2, 0x7], [0x80000001, 0x4, 0x5, 0x933d, 0x100, 0xffffff73, 0x4], [0x2, 0x3, 0x3, 0x0, 0x1, 0x1, 0x40]], [], [{0x1, 0x7}, {0x0, 0x0, 0x1}, {0x400, 0xc5, 0x0, 0x1}, {0x3, 0x5, 0x1, 0x1, 0x1, 0x1}, {0x6, 0x6, 0x0, 0x0, 0x1}, {0x29, 0x3, 0x0, 0x0, 0x1}, {0x1f, 0x7fff, 0x1, 0x1, 0x1, 0x1}, {0xfffff958}, {0x9, 0x7, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x80000001, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x8, 0x0, 0x0, 0x1}, {0x3ff8}]}) [ 1013.140444][T23337] device wlan1 left promiscuous mode [ 1013.260845][T23340] device wlan1 entered promiscuous mode 16:17:20 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000640)='wlan1\x00\x1b\x1a\x02\xd9n\xff\x8a\xb2\xd9\x00L\x06\xb5\x12\x03F\xd9\x00\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xa9\xb8p\xab\xc1?r\xebkX!D\xc3c\b{\xe0Q\\^\x14\xa1B=M\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xe4\xe8#/\x11%\xac%j\x9d\xeb\xba\xe6\xc4\xc4\x02\x8dT5\xddB48\x8f\xde\xbb\xc18\x84\xb5:f\xcb\xb4\r\x85\xf4\xee\xf2g~YX\bE;I\xa7\xe9\xf4]\x00\x8d\xec\xb2\x02\xe94\x87#07M\xfa\xaf@B=u\x013\x1e%\x18\x82\xc1\x80~H\x90\x9c\x8f;s\xc9\x17\x8a\x99\xb6\xabNG\xf7:\xbaN\x03\xae`\xcc\x03\x04E\xbaw\x7fo\xc5B\xf3\xd1}|\x92V\xbang\xdf\x8b\x8a\xd7\x1bD\x95\x1d\xfe\xb2\x87\xa14Z\xe5\xb3\xad\xd1\xb9F\x1d\a\r\xcd\xf6\xd3\xb1\x92i\x9f\xa5\x1b\xb5\xc68\x84,\n\xea[\xde\v\xf4iU\x97 \xc38\xb9\xd3d\xfb\xd0\x85Z\riO\x1ce\xc9\xc9p\x8f\xd1+\xd7\xceV\xab+M\xb3\x9e\xec:\xcb\x1bfE\x9f\xab\xd2\xcb\a.\xbc\xaf\x11\xd6#\xb6\x91K\xeb\xfd\xf2;i\x1ay\xe6I:\xb0w\x0e\x00\x00\x9a7\xcd;i\xf0\xc6j\xea\x85\xad}\xfcs\xac\xc0\x82\xc5\x12\xd8\xde\xbd\xd1\x9e0t\xb8\xdf\xc9\x86\x89\n\xec\xe7\x05\xc3\x92*\xb6\x1a\xa4\x8c\xec\x84\x8aD\xf2Cg\x7fPk\t\x8e\xb4\xafV\xe8y\xfb\x9aX\x956\x829\x16\xd5)\n\x98\xc0\x9a\x8cs\x97\xa5\xd7\xbc\xaf\xcf\n>j8\xba\xf1\xf4W\xd2\xf2\xeb\xe1\x89Y\xe2(\xd1\xec\xf8\x19\x18\xbbi\xec\xc3c\xe48\x80\x98KC<|\x04\x85\xd8\x00\xe6\x12\x12\xfe\xa0\xf4\x88\xb9\xea\x14E\x1a0([X7S\xe9\xb9\xe8\xdaIc\x9a\xc6g\x91\x86\xf4\xff\b\xd7*\xa5\xd3Z))\xd2_\x10\xbam\xb1\xfa\x82<\x15\xdb\x94\xc7^V\xa0=\x06\x1d\x0e\x04\xa1\xdc\x10\b\x80\xc6\xfd\x89\xe8\x1c\xe7X\'0\xd7 \xbfxu\xbf\x9fo\xc7\r\x98O)\bi\xff\x96\xd6+\x8b\xaea\x90\\\x1f\xe8\xf4\xa9-\xd0\x04\xbd\xe4c.&\xff\x95\xc8\xca\x01$z\x86\xdc\xbb\x18e\xb6W\xb2Yh\x84\xf5\x8c\x10\xbd\xa3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xd3\x04\x03\x8a<,A\x921\xff0\x15\xe3U>\x9f\xa5??\xce\x90Ky\xa1\xb5a(\xef\xcd\xbctE?%\x87O\x13\x82\x00\x00\x00\x00\x00\x00\x00\x00') socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 16:17:20 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0ec594a8"}, 0x0, 0x0, @fd, 0x4}) [ 1013.353046][T17986] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1013.402961][T23351] device wlan1 left promiscuous mode 16:17:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3c}}, 0x0) [ 1013.715336][T23354] device wlan1 entered promiscuous mode [ 1013.733541][T17986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1013.766353][T17986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1013.825609][T17986] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1013.866862][T17986] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1013.886101][T17986] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1013.906491][T17986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.929832][T17986] usb 3-1: config 0 descriptor?? [ 1013.984246][T17986] legousbtower 3-1:0.0: interrupt endpoints not found 16:17:22 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:17:22 executing program 0: r0 = socket(0x18, 0x0, 0x1) sendmsg$kcm(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000000800)=[{0x0}, {0x0}], 0x2, &(0x7f00000008c0)=ANY=[], 0x10e8}, 0x0) 16:17:22 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000640)='wlan1\x00\x1b\x1a\x02\xd9n\xff\x8a\xb2\xd9\x00L\x06\xb5\x12\x03F\xd9\x00\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xa9\xb8p\xab\xc1?r\xebkX!D\xc3c\b{\xe0Q\\^\x14\xa1B=M\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xe4\xe8#/\x11%\xac%j\x9d\xeb\xba\xe6\xc4\xc4\x02\x8dT5\xddB48\x8f\xde\xbb\xc18\x84\xb5:f\xcb\xb4\r\x85\xf4\xee\xf2g~YX\bE;I\xa7\xe9\xf4]\x00\x8d\xec\xb2\x02\xe94\x87#07M\xfa\xaf@B=u\x013\x1e%\x18\x82\xc1\x80~H\x90\x9c\x8f;s\xc9\x17\x8a\x99\xb6\xabNG\xf7:\xbaN\x03\xae`\xcc\x03\x04E\xbaw\x7fo\xc5B\xf3\xd1}|\x92V\xbang\xdf\x8b\x8a\xd7\x1bD\x95\x1d\xfe\xb2\x87\xa14Z\xe5\xb3\xad\xd1\xb9F\x1d\a\r\xcd\xf6\xd3\xb1\x92i\x9f\xa5\x1b\xb5\xc68\x84,\n\xea[\xde\v\xf4iU\x97 \xc38\xb9\xd3d\xfb\xd0\x85Z\riO\x1ce\xc9\xc9p\x8f\xd1+\xd7\xceV\xab+M\xb3\x9e\xec:\xcb\x1bfE\x9f\xab\xd2\xcb\a.\xbc\xaf\x11\xd6#\xb6\x91K\xeb\xfd\xf2;i\x1ay\xe6I:\xb0w\x0e\x00\x00\x9a7\xcd;i\xf0\xc6j\xea\x85\xad}\xfcs\xac\xc0\x82\xc5\x12\xd8\xde\xbd\xd1\x9e0t\xb8\xdf\xc9\x86\x89\n\xec\xe7\x05\xc3\x92*\xb6\x1a\xa4\x8c\xec\x84\x8aD\xf2Cg\x7fPk\t\x8e\xb4\xafV\xe8y\xfb\x9aX\x956\x829\x16\xd5)\n\x98\xc0\x9a\x8cs\x97\xa5\xd7\xbc\xaf\xcf\n>j8\xba\xf1\xf4W\xd2\xf2\xeb\xe1\x89Y\xe2(\xd1\xec\xf8\x19\x18\xbbi\xec\xc3c\xe48\x80\x98KC<|\x04\x85\xd8\x00\xe6\x12\x12\xfe\xa0\xf4\x88\xb9\xea\x14E\x1a0([X7S\xe9\xb9\xe8\xdaIc\x9a\xc6g\x91\x86\xf4\xff\b\xd7*\xa5\xd3Z))\xd2_\x10\xbam\xb1\xfa\x82<\x15\xdb\x94\xc7^V\xa0=\x06\x1d\x0e\x04\xa1\xdc\x10\b\x80\xc6\xfd\x89\xe8\x1c\xe7X\'0\xd7 \xbfxu\xbf\x9fo\xc7\r\x98O)\bi\xff\x96\xd6+\x8b\xaea\x90\\\x1f\xe8\xf4\xa9-\xd0\x04\xbd\xe4c.&\xff\x95\xc8\xca\x01$z\x86\xdc\xbb\x18e\xb6W\xb2Yh\x84\xf5\x8c\x10\xbd\xa3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xd3\x04\x03\x8a<,A\x921\xff0\x15\xe3U>\x9f\xa5??\xce\x90Ky\xa1\xb5a(\xef\xcd\xbctE?%\x87O\x13\x82\x00\x00\x00\x00\x00\x00\x00\x00') socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 16:17:22 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3c}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x0) [ 1015.976166][T19082] usb 3-1: USB disconnect, device number 59 16:17:23 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = gettid() tkill(r1, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) process_vm_writev(0x0, &(0x7f0000000600)=[{&(0x7f0000000400)=""/127, 0x7f}], 0x1, 0x0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x21, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2d05}], 0x1, 0x0, 0x0, 0x2bc0}, 0x350c) [ 1016.050447][T23383] device wlan1 left promiscuous mode 16:17:23 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x44040, 0x0) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)) 16:17:23 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) 16:17:23 executing program 0: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) [ 1016.227105][ T35] kauditd_printk_skb: 13520 callbacks suppressed [ 1016.227120][ T35] audit: type=1800 audit(1610036243.204:13594): pid=23398 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16131 res=0 errno=0 16:17:23 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) [ 1016.338846][ T35] audit: type=1800 audit(1610036243.234:13595): pid=23398 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16131 res=0 errno=0 [ 1016.370566][T23389] device wlan1 entered promiscuous mode 16:17:23 executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = gettid() tkill(r2, 0x3a) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) process_vm_writev(r2, &(0x7f0000000600)=[{&(0x7f0000000080)=""/186, 0xba}, {&(0x7f0000000140)=""/178, 0xb2}, {0x0}, {&(0x7f0000000400)=""/127, 0x7f}, {0x0}, {0x0}], 0x6, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000a40)={0x0, 0x21, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2d05}], 0x1, 0x0, 0x0, 0x2bc0}, 0x350c) 16:17:23 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000640)='wlan1\x00\x1b\x1a\x02\xd9n\xff\x8a\xb2\xd9\x00L\x06\xb5\x12\x03F\xd9\x00\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xa9\xb8p\xab\xc1?r\xebkX!D\xc3c\b{\xe0Q\\^\x14\xa1B=M\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xe4\xe8#/\x11%\xac%j\x9d\xeb\xba\xe6\xc4\xc4\x02\x8dT5\xddB48\x8f\xde\xbb\xc18\x84\xb5:f\xcb\xb4\r\x85\xf4\xee\xf2g~YX\bE;I\xa7\xe9\xf4]\x00\x8d\xec\xb2\x02\xe94\x87#07M\xfa\xaf@B=u\x013\x1e%\x18\x82\xc1\x80~H\x90\x9c\x8f;s\xc9\x17\x8a\x99\xb6\xabNG\xf7:\xbaN\x03\xae`\xcc\x03\x04E\xbaw\x7fo\xc5B\xf3\xd1}|\x92V\xbang\xdf\x8b\x8a\xd7\x1bD\x95\x1d\xfe\xb2\x87\xa14Z\xe5\xb3\xad\xd1\xb9F\x1d\a\r\xcd\xf6\xd3\xb1\x92i\x9f\xa5\x1b\xb5\xc68\x84,\n\xea[\xde\v\xf4iU\x97 \xc38\xb9\xd3d\xfb\xd0\x85Z\riO\x1ce\xc9\xc9p\x8f\xd1+\xd7\xceV\xab+M\xb3\x9e\xec:\xcb\x1bfE\x9f\xab\xd2\xcb\a.\xbc\xaf\x11\xd6#\xb6\x91K\xeb\xfd\xf2;i\x1ay\xe6I:\xb0w\x0e\x00\x00\x9a7\xcd;i\xf0\xc6j\xea\x85\xad}\xfcs\xac\xc0\x82\xc5\x12\xd8\xde\xbd\xd1\x9e0t\xb8\xdf\xc9\x86\x89\n\xec\xe7\x05\xc3\x92*\xb6\x1a\xa4\x8c\xec\x84\x8aD\xf2Cg\x7fPk\t\x8e\xb4\xafV\xe8y\xfb\x9aX\x956\x829\x16\xd5)\n\x98\xc0\x9a\x8cs\x97\xa5\xd7\xbc\xaf\xcf\n>j8\xba\xf1\xf4W\xd2\xf2\xeb\xe1\x89Y\xe2(\xd1\xec\xf8\x19\x18\xbbi\xec\xc3c\xe48\x80\x98KC<|\x04\x85\xd8\x00\xe6\x12\x12\xfe\xa0\xf4\x88\xb9\xea\x14E\x1a0([X7S\xe9\xb9\xe8\xdaIc\x9a\xc6g\x91\x86\xf4\xff\b\xd7*\xa5\xd3Z))\xd2_\x10\xbam\xb1\xfa\x82<\x15\xdb\x94\xc7^V\xa0=\x06\x1d\x0e\x04\xa1\xdc\x10\b\x80\xc6\xfd\x89\xe8\x1c\xe7X\'0\xd7 \xbfxu\xbf\x9fo\xc7\r\x98O)\bi\xff\x96\xd6+\x8b\xaea\x90\\\x1f\xe8\xf4\xa9-\xd0\x04\xbd\xe4c.&\xff\x95\xc8\xca\x01$z\x86\xdc\xbb\x18e\xb6W\xb2Yh\x84\xf5\x8c\x10\xbd\xa3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xd3\x04\x03\x8a<,A\x921\xff0\x15\xe3U>\x9f\xa5??\xce\x90Ky\xa1\xb5a(\xef\xcd\xbctE?%\x87O\x13\x82\x00\x00\x00\x00\x00\x00\x00\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') [ 1016.499177][T23413] device wlan1 left promiscuous mode [ 1016.582908][T17986] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1016.582928][T19082] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1016.732242][T23416] device wlan1 entered promiscuous mode [ 1016.873824][T17986] usb 4-1: Using ep0 maxpacket: 16 [ 1016.956174][T19082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1016.967978][T19082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1016.978419][T19082] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1016.989591][T19082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1016.993317][T17986] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1016.999693][T19082] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1017.022501][T19082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.035042][T19082] usb 3-1: config 0 descriptor?? [ 1017.084351][T19082] legousbtower 3-1:0.0: interrupt endpoints not found [ 1017.183524][T17986] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1017.193411][T17986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.201499][T17986] usb 4-1: Product: syz [ 1017.205750][T17986] usb 4-1: Manufacturer: syz [ 1017.210624][T17986] usb 4-1: SerialNumber: syz [ 1017.254144][T17986] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 1017.455862][T19082] usb 4-1: USB disconnect, device number 12 [ 1018.232894][T17986] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1018.472938][T17986] usb 4-1: Using ep0 maxpacket: 16 [ 1018.593094][T17986] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1018.763130][T17986] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1018.772970][T17986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.781833][T17986] usb 4-1: Product: syz [ 1018.787918][T17986] usb 4-1: Manufacturer: syz [ 1018.794033][T17986] usb 4-1: SerialNumber: syz [ 1018.844512][T17986] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 1019.049952][T17986] usb 4-1: USB disconnect, device number 13 16:17:26 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:17:26 executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = gettid() tkill(r2, 0x3a) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) process_vm_writev(r2, &(0x7f0000000600)=[{&(0x7f0000000080)=""/186, 0xba}, {&(0x7f0000000140)=""/178, 0xb2}, {0x0}, {&(0x7f0000000400)=""/127, 0x7f}, {0x0}, {0x0}], 0x6, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000a40)={0x0, 0x21, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2d05}], 0x1, 0x0, 0x0, 0x2bc0}, 0x350c) 16:17:26 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000640)='wlan1\x00\x1b\x1a\x02\xd9n\xff\x8a\xb2\xd9\x00L\x06\xb5\x12\x03F\xd9\x00\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xa9\xb8p\xab\xc1?r\xebkX!D\xc3c\b{\xe0Q\\^\x14\xa1B=M\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xe4\xe8#/\x11%\xac%j\x9d\xeb\xba\xe6\xc4\xc4\x02\x8dT5\xddB48\x8f\xde\xbb\xc18\x84\xb5:f\xcb\xb4\r\x85\xf4\xee\xf2g~YX\bE;I\xa7\xe9\xf4]\x00\x8d\xec\xb2\x02\xe94\x87#07M\xfa\xaf@B=u\x013\x1e%\x18\x82\xc1\x80~H\x90\x9c\x8f;s\xc9\x17\x8a\x99\xb6\xabNG\xf7:\xbaN\x03\xae`\xcc\x03\x04E\xbaw\x7fo\xc5B\xf3\xd1}|\x92V\xbang\xdf\x8b\x8a\xd7\x1bD\x95\x1d\xfe\xb2\x87\xa14Z\xe5\xb3\xad\xd1\xb9F\x1d\a\r\xcd\xf6\xd3\xb1\x92i\x9f\xa5\x1b\xb5\xc68\x84,\n\xea[\xde\v\xf4iU\x97 \xc38\xb9\xd3d\xfb\xd0\x85Z\riO\x1ce\xc9\xc9p\x8f\xd1+\xd7\xceV\xab+M\xb3\x9e\xec:\xcb\x1bfE\x9f\xab\xd2\xcb\a.\xbc\xaf\x11\xd6#\xb6\x91K\xeb\xfd\xf2;i\x1ay\xe6I:\xb0w\x0e\x00\x00\x9a7\xcd;i\xf0\xc6j\xea\x85\xad}\xfcs\xac\xc0\x82\xc5\x12\xd8\xde\xbd\xd1\x9e0t\xb8\xdf\xc9\x86\x89\n\xec\xe7\x05\xc3\x92*\xb6\x1a\xa4\x8c\xec\x84\x8aD\xf2Cg\x7fPk\t\x8e\xb4\xafV\xe8y\xfb\x9aX\x956\x829\x16\xd5)\n\x98\xc0\x9a\x8cs\x97\xa5\xd7\xbc\xaf\xcf\n>j8\xba\xf1\xf4W\xd2\xf2\xeb\xe1\x89Y\xe2(\xd1\xec\xf8\x19\x18\xbbi\xec\xc3c\xe48\x80\x98KC<|\x04\x85\xd8\x00\xe6\x12\x12\xfe\xa0\xf4\x88\xb9\xea\x14E\x1a0([X7S\xe9\xb9\xe8\xdaIc\x9a\xc6g\x91\x86\xf4\xff\b\xd7*\xa5\xd3Z))\xd2_\x10\xbam\xb1\xfa\x82<\x15\xdb\x94\xc7^V\xa0=\x06\x1d\x0e\x04\xa1\xdc\x10\b\x80\xc6\xfd\x89\xe8\x1c\xe7X\'0\xd7 \xbfxu\xbf\x9fo\xc7\r\x98O)\bi\xff\x96\xd6+\x8b\xaea\x90\\\x1f\xe8\xf4\xa9-\xd0\x04\xbd\xe4c.&\xff\x95\xc8\xca\x01$z\x86\xdc\xbb\x18e\xb6W\xb2Yh\x84\xf5\x8c\x10\xbd\xa3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xd3\x04\x03\x8a<,A\x921\xff0\x15\xe3U>\x9f\xa5??\xce\x90Ky\xa1\xb5a(\xef\xcd\xbctE?%\x87O\x13\x82\x00\x00\x00\x00\x00\x00\x00\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 16:17:26 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f0000000040)=""/201, 0xc9}], 0x1) r0 = socket$pptp(0x18, 0x1, 0x2) fdatasync(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') readv(r1, &(0x7f0000000580), 0x3c1) 16:17:26 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x93e03906751a68be, 0xffffffffffffffff, 0x0) [ 1019.109868][T19082] usb 3-1: USB disconnect, device number 60 [ 1019.189702][T23472] device wlan1 left promiscuous mode 16:17:26 executing program 3: mq_open(&(0x7f0000000000)='@@{&\x00', 0x0, 0x0, &(0x7f00000000c0)) 16:17:26 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:26 executing program 4: openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x4a242, 0x0) 16:17:26 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:26 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x44040, 0x0) 16:17:26 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1019.553038][ T35] audit: type=1800 audit(1610036246.534:13596): pid=23495 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16180 res=0 errno=0 [ 1019.589523][T23478] device wlan1 entered promiscuous mode [ 1019.611699][T23497] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1019.636026][ T35] audit: type=1800 audit(1610036246.554:13597): pid=23495 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16180 res=0 errno=0 [ 1019.673118][T19082] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1020.092999][T19082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1020.104250][T19082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1020.121575][T19082] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1020.133749][T19082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1020.145139][T19082] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1020.156570][T19082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.167711][T19082] usb 3-1: config 0 descriptor?? [ 1020.224615][T19082] legousbtower 3-1:0.0: interrupt endpoints not found 16:17:29 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:17:29 executing program 4: syz_open_dev$dri(&(0x7f0000001580)='/dev/dri/card#\x00', 0x0, 0x40) 16:17:29 executing program 3: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x20, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 16:17:29 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000640)='wlan1\x00\x1b\x1a\x02\xd9n\xff\x8a\xb2\xd9\x00L\x06\xb5\x12\x03F\xd9\x00\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xa9\xb8p\xab\xc1?r\xebkX!D\xc3c\b{\xe0Q\\^\x14\xa1B=M\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xe4\xe8#/\x11%\xac%j\x9d\xeb\xba\xe6\xc4\xc4\x02\x8dT5\xddB48\x8f\xde\xbb\xc18\x84\xb5:f\xcb\xb4\r\x85\xf4\xee\xf2g~YX\bE;I\xa7\xe9\xf4]\x00\x8d\xec\xb2\x02\xe94\x87#07M\xfa\xaf@B=u\x013\x1e%\x18\x82\xc1\x80~H\x90\x9c\x8f;s\xc9\x17\x8a\x99\xb6\xabNG\xf7:\xbaN\x03\xae`\xcc\x03\x04E\xbaw\x7fo\xc5B\xf3\xd1}|\x92V\xbang\xdf\x8b\x8a\xd7\x1bD\x95\x1d\xfe\xb2\x87\xa14Z\xe5\xb3\xad\xd1\xb9F\x1d\a\r\xcd\xf6\xd3\xb1\x92i\x9f\xa5\x1b\xb5\xc68\x84,\n\xea[\xde\v\xf4iU\x97 \xc38\xb9\xd3d\xfb\xd0\x85Z\riO\x1ce\xc9\xc9p\x8f\xd1+\xd7\xceV\xab+M\xb3\x9e\xec:\xcb\x1bfE\x9f\xab\xd2\xcb\a.\xbc\xaf\x11\xd6#\xb6\x91K\xeb\xfd\xf2;i\x1ay\xe6I:\xb0w\x0e\x00\x00\x9a7\xcd;i\xf0\xc6j\xea\x85\xad}\xfcs\xac\xc0\x82\xc5\x12\xd8\xde\xbd\xd1\x9e0t\xb8\xdf\xc9\x86\x89\n\xec\xe7\x05\xc3\x92*\xb6\x1a\xa4\x8c\xec\x84\x8aD\xf2Cg\x7fPk\t\x8e\xb4\xafV\xe8y\xfb\x9aX\x956\x829\x16\xd5)\n\x98\xc0\x9a\x8cs\x97\xa5\xd7\xbc\xaf\xcf\n>j8\xba\xf1\xf4W\xd2\xf2\xeb\xe1\x89Y\xe2(\xd1\xec\xf8\x19\x18\xbbi\xec\xc3c\xe48\x80\x98KC<|\x04\x85\xd8\x00\xe6\x12\x12\xfe\xa0\xf4\x88\xb9\xea\x14E\x1a0([X7S\xe9\xb9\xe8\xdaIc\x9a\xc6g\x91\x86\xf4\xff\b\xd7*\xa5\xd3Z))\xd2_\x10\xbam\xb1\xfa\x82<\x15\xdb\x94\xc7^V\xa0=\x06\x1d\x0e\x04\xa1\xdc\x10\b\x80\xc6\xfd\x89\xe8\x1c\xe7X\'0\xd7 \xbfxu\xbf\x9fo\xc7\r\x98O)\bi\xff\x96\xd6+\x8b\xaea\x90\\\x1f\xe8\xf4\xa9-\xd0\x04\xbd\xe4c.&\xff\x95\xc8\xca\x01$z\x86\xdc\xbb\x18e\xb6W\xb2Yh\x84\xf5\x8c\x10\xbd\xa3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xd3\x04\x03\x8a<,A\x921\xff0\x15\xe3U>\x9f\xa5??\xce\x90Ky\xa1\xb5a(\xef\xcd\xbctE?%\x87O\x13\x82\x00\x00\x00\x00\x00\x00\x00\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 16:17:29 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:29 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1022.178291][T12046] usb 3-1: USB disconnect, device number 61 [ 1022.252322][T23528] device wlan1 left promiscuous mode 16:17:29 executing program 4: r0 = socket(0x18, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10e8}, 0x0) 16:17:29 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) [ 1022.573070][T17986] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1022.620115][T23532] device wlan1 entered promiscuous mode [ 1022.627052][T23538] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 16:17:29 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000640)='wlan1\x00\x1b\x1a\x02\xd9n\xff\x8a\xb2\xd9\x00L\x06\xb5\x12\x03F\xd9\x00\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xa9\xb8p\xab\xc1?r\xebkX!D\xc3c\b{\xe0Q\\^\x14\xa1B=M\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xe4\xe8#/\x11%\xac%j\x9d\xeb\xba\xe6\xc4\xc4\x02\x8dT5\xddB48\x8f\xde\xbb\xc18\x84\xb5:f\xcb\xb4\r\x85\xf4\xee\xf2g~YX\bE;I\xa7\xe9\xf4]\x00\x8d\xec\xb2\x02\xe94\x87#07M\xfa\xaf@B=u\x013\x1e%\x18\x82\xc1\x80~H\x90\x9c\x8f;s\xc9\x17\x8a\x99\xb6\xabNG\xf7:\xbaN\x03\xae`\xcc\x03\x04E\xbaw\x7fo\xc5B\xf3\xd1}|\x92V\xbang\xdf\x8b\x8a\xd7\x1bD\x95\x1d\xfe\xb2\x87\xa14Z\xe5\xb3\xad\xd1\xb9F\x1d\a\r\xcd\xf6\xd3\xb1\x92i\x9f\xa5\x1b\xb5\xc68\x84,\n\xea[\xde\v\xf4iU\x97 \xc38\xb9\xd3d\xfb\xd0\x85Z\riO\x1ce\xc9\xc9p\x8f\xd1+\xd7\xceV\xab+M\xb3\x9e\xec:\xcb\x1bfE\x9f\xab\xd2\xcb\a.\xbc\xaf\x11\xd6#\xb6\x91K\xeb\xfd\xf2;i\x1ay\xe6I:\xb0w\x0e\x00\x00\x9a7\xcd;i\xf0\xc6j\xea\x85\xad}\xfcs\xac\xc0\x82\xc5\x12\xd8\xde\xbd\xd1\x9e0t\xb8\xdf\xc9\x86\x89\n\xec\xe7\x05\xc3\x92*\xb6\x1a\xa4\x8c\xec\x84\x8aD\xf2Cg\x7fPk\t\x8e\xb4\xafV\xe8y\xfb\x9aX\x956\x829\x16\xd5)\n\x98\xc0\x9a\x8cs\x97\xa5\xd7\xbc\xaf\xcf\n>j8\xba\xf1\xf4W\xd2\xf2\xeb\xe1\x89Y\xe2(\xd1\xec\xf8\x19\x18\xbbi\xec\xc3c\xe48\x80\x98KC<|\x04\x85\xd8\x00\xe6\x12\x12\xfe\xa0\xf4\x88\xb9\xea\x14E\x1a0([X7S\xe9\xb9\xe8\xdaIc\x9a\xc6g\x91\x86\xf4\xff\b\xd7*\xa5\xd3Z))\xd2_\x10\xbam\xb1\xfa\x82<\x15\xdb\x94\xc7^V\xa0=\x06\x1d\x0e\x04\xa1\xdc\x10\b\x80\xc6\xfd\x89\xe8\x1c\xe7X\'0\xd7 \xbfxu\xbf\x9fo\xc7\r\x98O)\bi\xff\x96\xd6+\x8b\xaea\x90\\\x1f\xe8\xf4\xa9-\xd0\x04\xbd\xe4c.&\xff\x95\xc8\xca\x01$z\x86\xdc\xbb\x18e\xb6W\xb2Yh\x84\xf5\x8c\x10\xbd\xa3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xd3\x04\x03\x8a<,A\x921\xff0\x15\xe3U>\x9f\xa5??\xce\x90Ky\xa1\xb5a(\xef\xcd\xbctE?%\x87O\x13\x82\x00\x00\x00\x00\x00\x00\x00\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') [ 1022.713760][T12046] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1022.843207][T17986] usb 4-1: Using ep0 maxpacket: 8 [ 1022.851673][T23551] device wlan1 left promiscuous mode [ 1022.993586][T17986] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1023.074407][T23552] device wlan1 entered promiscuous mode [ 1023.093064][T12046] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 16:17:30 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1023.134899][T12046] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 16:17:30 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000640)='wlan1\x00\x1b\x1a\x02\xd9n\xff\x8a\xb2\xd9\x00L\x06\xb5\x12\x03F\xd9\x00\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xa9\xb8p\xab\xc1?r\xebkX!D\xc3c\b{\xe0Q\\^\x14\xa1B=M\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xe4\xe8#/\x11%\xac%j\x9d\xeb\xba\xe6\xc4\xc4\x02\x8dT5\xddB48\x8f\xde\xbb\xc18\x84\xb5:f\xcb\xb4\r\x85\xf4\xee\xf2g~YX\bE;I\xa7\xe9\xf4]\x00\x8d\xec\xb2\x02\xe94\x87#07M\xfa\xaf@B=u\x013\x1e%\x18\x82\xc1\x80~H\x90\x9c\x8f;s\xc9\x17\x8a\x99\xb6\xabNG\xf7:\xbaN\x03\xae`\xcc\x03\x04E\xbaw\x7fo\xc5B\xf3\xd1}|\x92V\xbang\xdf\x8b\x8a\xd7\x1bD\x95\x1d\xfe\xb2\x87\xa14Z\xe5\xb3\xad\xd1\xb9F\x1d\a\r\xcd\xf6\xd3\xb1\x92i\x9f\xa5\x1b\xb5\xc68\x84,\n\xea[\xde\v\xf4iU\x97 \xc38\xb9\xd3d\xfb\xd0\x85Z\riO\x1ce\xc9\xc9p\x8f\xd1+\xd7\xceV\xab+M\xb3\x9e\xec:\xcb\x1bfE\x9f\xab\xd2\xcb\a.\xbc\xaf\x11\xd6#\xb6\x91K\xeb\xfd\xf2;i\x1ay\xe6I:\xb0w\x0e\x00\x00\x9a7\xcd;i\xf0\xc6j\xea\x85\xad}\xfcs\xac\xc0\x82\xc5\x12\xd8\xde\xbd\xd1\x9e0t\xb8\xdf\xc9\x86\x89\n\xec\xe7\x05\xc3\x92*\xb6\x1a\xa4\x8c\xec\x84\x8aD\xf2Cg\x7fPk\t\x8e\xb4\xafV\xe8y\xfb\x9aX\x956\x829\x16\xd5)\n\x98\xc0\x9a\x8cs\x97\xa5\xd7\xbc\xaf\xcf\n>j8\xba\xf1\xf4W\xd2\xf2\xeb\xe1\x89Y\xe2(\xd1\xec\xf8\x19\x18\xbbi\xec\xc3c\xe48\x80\x98KC<|\x04\x85\xd8\x00\xe6\x12\x12\xfe\xa0\xf4\x88\xb9\xea\x14E\x1a0([X7S\xe9\xb9\xe8\xdaIc\x9a\xc6g\x91\x86\xf4\xff\b\xd7*\xa5\xd3Z))\xd2_\x10\xbam\xb1\xfa\x82<\x15\xdb\x94\xc7^V\xa0=\x06\x1d\x0e\x04\xa1\xdc\x10\b\x80\xc6\xfd\x89\xe8\x1c\xe7X\'0\xd7 \xbfxu\xbf\x9fo\xc7\r\x98O)\bi\xff\x96\xd6+\x8b\xaea\x90\\\x1f\xe8\xf4\xa9-\xd0\x04\xbd\xe4c.&\xff\x95\xc8\xca\x01$z\x86\xdc\xbb\x18e\xb6W\xb2Yh\x84\xf5\x8c\x10\xbd\xa3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xd3\x04\x03\x8a<,A\x921\xff0\x15\xe3U>\x9f\xa5??\xce\x90Ky\xa1\xb5a(\xef\xcd\xbctE?%\x87O\x13\x82\x00\x00\x00\x00\x00\x00\x00\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') [ 1023.193810][T17986] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1023.212961][T12046] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 16:17:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) [ 1023.241362][T17986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.272293][T12046] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1023.290624][T17986] usb 4-1: Product: syz [ 1023.305178][T17986] usb 4-1: Manufacturer: syz [ 1023.312584][T17986] usb 4-1: SerialNumber: syz [ 1023.329831][T12046] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1023.352416][T23557] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1023.357237][T12046] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.376055][T12046] usb 3-1: config 0 descriptor?? [ 1023.444380][T12046] legousbtower 3-1:0.0: interrupt endpoints not found [ 1023.479109][T23564] device wlan1 left promiscuous mode [ 1023.613982][T17986] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 1023.692078][T23569] device wlan1 entered promiscuous mode [ 1023.815221][T19082] usb 4-1: USB disconnect, device number 14 [ 1024.592943][T17986] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1024.854191][T17986] usb 4-1: Using ep0 maxpacket: 8 [ 1024.992989][T17986] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1025.183121][T17986] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1025.192687][T17986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.207964][T17986] usb 4-1: Product: syz [ 1025.212174][T17986] usb 4-1: Manufacturer: syz [ 1025.224303][T17986] usb 4-1: SerialNumber: syz [ 1025.273041][T17986] usb 4-1: can't set config #1, error -71 [ 1025.280431][T17986] usb 4-1: USB disconnect, device number 15 16:17:32 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000603adb40940601007b12000000010902b801010000000009040000036ce07b0009050b0300000000000905000000000000000200f736d05153d07556ac97f56f288d3f971f366e6b1a0ede3ea9edec3e802120c853e64317f32a898b5a1466e17b040400d4bd87f8468c2ce14362b41b76363b31c9a2cf14c3baf1c931f622cf7628f4fdb1df69bf66e3030e16f0a5c3ac888ba46b632d624a16cbbf54875116ceae867e58bc9da8a34540ac67e366d2eda9cf8aba2cd5d5dd89a8d32d209619456fb5cf56a2aeb0213b9cfc8fb7207f6cc9edffdb3349f9009ce7cc7c318469f91868d0247849460d0e022a6fa6e63c1b76e3be51297f661f927df06ff791afbc38ee88956764a6ea6b940934ffe02453ed201832c36a48cbddcaf89408a973bea4a3299e6963916163459b058483"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:17:32 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:32 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000640)='wlan1\x00\x1b\x1a\x02\xd9n\xff\x8a\xb2\xd9\x00L\x06\xb5\x12\x03F\xd9\x00\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xa9\xb8p\xab\xc1?r\xebkX!D\xc3c\b{\xe0Q\\^\x14\xa1B=M\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xe4\xe8#/\x11%\xac%j\x9d\xeb\xba\xe6\xc4\xc4\x02\x8dT5\xddB48\x8f\xde\xbb\xc18\x84\xb5:f\xcb\xb4\r\x85\xf4\xee\xf2g~YX\bE;I\xa7\xe9\xf4]\x00\x8d\xec\xb2\x02\xe94\x87#07M\xfa\xaf@B=u\x013\x1e%\x18\x82\xc1\x80~H\x90\x9c\x8f;s\xc9\x17\x8a\x99\xb6\xabNG\xf7:\xbaN\x03\xae`\xcc\x03\x04E\xbaw\x7fo\xc5B\xf3\xd1}|\x92V\xbang\xdf\x8b\x8a\xd7\x1bD\x95\x1d\xfe\xb2\x87\xa14Z\xe5\xb3\xad\xd1\xb9F\x1d\a\r\xcd\xf6\xd3\xb1\x92i\x9f\xa5\x1b\xb5\xc68\x84,\n\xea[\xde\v\xf4iU\x97 \xc38\xb9\xd3d\xfb\xd0\x85Z\riO\x1ce\xc9\xc9p\x8f\xd1+\xd7\xceV\xab+M\xb3\x9e\xec:\xcb\x1bfE\x9f\xab\xd2\xcb\a.\xbc\xaf\x11\xd6#\xb6\x91K\xeb\xfd\xf2;i\x1ay\xe6I:\xb0w\x0e\x00\x00\x9a7\xcd;i\xf0\xc6j\xea\x85\xad}\xfcs\xac\xc0\x82\xc5\x12\xd8\xde\xbd\xd1\x9e0t\xb8\xdf\xc9\x86\x89\n\xec\xe7\x05\xc3\x92*\xb6\x1a\xa4\x8c\xec\x84\x8aD\xf2Cg\x7fPk\t\x8e\xb4\xafV\xe8y\xfb\x9aX\x956\x829\x16\xd5)\n\x98\xc0\x9a\x8cs\x97\xa5\xd7\xbc\xaf\xcf\n>j8\xba\xf1\xf4W\xd2\xf2\xeb\xe1\x89Y\xe2(\xd1\xec\xf8\x19\x18\xbbi\xec\xc3c\xe48\x80\x98KC<|\x04\x85\xd8\x00\xe6\x12\x12\xfe\xa0\xf4\x88\xb9\xea\x14E\x1a0([X7S\xe9\xb9\xe8\xdaIc\x9a\xc6g\x91\x86\xf4\xff\b\xd7*\xa5\xd3Z))\xd2_\x10\xbam\xb1\xfa\x82<\x15\xdb\x94\xc7^V\xa0=\x06\x1d\x0e\x04\xa1\xdc\x10\b\x80\xc6\xfd\x89\xe8\x1c\xe7X\'0\xd7 \xbfxu\xbf\x9fo\xc7\r\x98O)\bi\xff\x96\xd6+\x8b\xaea\x90\\\x1f\xe8\xf4\xa9-\xd0\x04\xbd\xe4c.&\xff\x95\xc8\xca\x01$z\x86\xdc\xbb\x18e\xb6W\xb2Yh\x84\xf5\x8c\x10\xbd\xa3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xd3\x04\x03\x8a<,A\x921\xff0\x15\xe3U>\x9f\xa5??\xce\x90Ky\xa1\xb5a(\xef\xcd\xbctE?%\x87O\x13\x82\x00\x00\x00\x00\x00\x00\x00\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 16:17:32 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:17:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:32 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) [ 1025.360789][T19082] usb 3-1: USB disconnect, device number 62 [ 1025.429890][T23612] device wlan1 left promiscuous mode [ 1025.883117][T19082] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1025.893408][T23618] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1025.926326][T23617] device wlan1 entered promiscuous mode 16:17:32 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000640)='wlan1\x00\x1b\x1a\x02\xd9n\xff\x8a\xb2\xd9\x00L\x06\xb5\x12\x03F\xd9\x00\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xa9\xb8p\xab\xc1?r\xebkX!D\xc3c\b{\xe0Q\\^\x14\xa1B=M\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xe4\xe8#/\x11%\xac%j\x9d\xeb\xba\xe6\xc4\xc4\x02\x8dT5\xddB48\x8f\xde\xbb\xc18\x84\xb5:f\xcb\xb4\r\x85\xf4\xee\xf2g~YX\bE;I\xa7\xe9\xf4]\x00\x8d\xec\xb2\x02\xe94\x87#07M\xfa\xaf@B=u\x013\x1e%\x18\x82\xc1\x80~H\x90\x9c\x8f;s\xc9\x17\x8a\x99\xb6\xabNG\xf7:\xbaN\x03\xae`\xcc\x03\x04E\xbaw\x7fo\xc5B\xf3\xd1}|\x92V\xbang\xdf\x8b\x8a\xd7\x1bD\x95\x1d\xfe\xb2\x87\xa14Z\xe5\xb3\xad\xd1\xb9F\x1d\a\r\xcd\xf6\xd3\xb1\x92i\x9f\xa5\x1b\xb5\xc68\x84,\n\xea[\xde\v\xf4iU\x97 \xc38\xb9\xd3d\xfb\xd0\x85Z\riO\x1ce\xc9\xc9p\x8f\xd1+\xd7\xceV\xab+M\xb3\x9e\xec:\xcb\x1bfE\x9f\xab\xd2\xcb\a.\xbc\xaf\x11\xd6#\xb6\x91K\xeb\xfd\xf2;i\x1ay\xe6I:\xb0w\x0e\x00\x00\x9a7\xcd;i\xf0\xc6j\xea\x85\xad}\xfcs\xac\xc0\x82\xc5\x12\xd8\xde\xbd\xd1\x9e0t\xb8\xdf\xc9\x86\x89\n\xec\xe7\x05\xc3\x92*\xb6\x1a\xa4\x8c\xec\x84\x8aD\xf2Cg\x7fPk\t\x8e\xb4\xafV\xe8y\xfb\x9aX\x956\x829\x16\xd5)\n\x98\xc0\x9a\x8cs\x97\xa5\xd7\xbc\xaf\xcf\n>j8\xba\xf1\xf4W\xd2\xf2\xeb\xe1\x89Y\xe2(\xd1\xec\xf8\x19\x18\xbbi\xec\xc3c\xe48\x80\x98KC<|\x04\x85\xd8\x00\xe6\x12\x12\xfe\xa0\xf4\x88\xb9\xea\x14E\x1a0([X7S\xe9\xb9\xe8\xdaIc\x9a\xc6g\x91\x86\xf4\xff\b\xd7*\xa5\xd3Z))\xd2_\x10\xbam\xb1\xfa\x82<\x15\xdb\x94\xc7^V\xa0=\x06\x1d\x0e\x04\xa1\xdc\x10\b\x80\xc6\xfd\x89\xe8\x1c\xe7X\'0\xd7 \xbfxu\xbf\x9fo\xc7\r\x98O)\bi\xff\x96\xd6+\x8b\xaea\x90\\\x1f\xe8\xf4\xa9-\xd0\x04\xbd\xe4c.&\xff\x95\xc8\xca\x01$z\x86\xdc\xbb\x18e\xb6W\xb2Yh\x84\xf5\x8c\x10\xbd\xa3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xd3\x04\x03\x8a<,A\x921\xff0\x15\xe3U>\x9f\xa5??\xce\x90Ky\xa1\xb5a(\xef\xcd\xbctE?%\x87O\x13\x82\x00\x00\x00\x00\x00\x00\x00\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') [ 1026.129007][T23629] device wlan1 left promiscuous mode [ 1026.262968][T19082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 16:17:33 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) [ 1026.305076][T19082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1026.331308][T19082] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 16:17:33 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000640)='wlan1\x00\x1b\x1a\x02\xd9n\xff\x8a\xb2\xd9\x00L\x06\xb5\x12\x03F\xd9\x00\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xa9\xb8p\xab\xc1?r\xebkX!D\xc3c\b{\xe0Q\\^\x14\xa1B=M\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xe4\xe8#/\x11%\xac%j\x9d\xeb\xba\xe6\xc4\xc4\x02\x8dT5\xddB48\x8f\xde\xbb\xc18\x84\xb5:f\xcb\xb4\r\x85\xf4\xee\xf2g~YX\bE;I\xa7\xe9\xf4]\x00\x8d\xec\xb2\x02\xe94\x87#07M\xfa\xaf@B=u\x013\x1e%\x18\x82\xc1\x80~H\x90\x9c\x8f;s\xc9\x17\x8a\x99\xb6\xabNG\xf7:\xbaN\x03\xae`\xcc\x03\x04E\xbaw\x7fo\xc5B\xf3\xd1}|\x92V\xbang\xdf\x8b\x8a\xd7\x1bD\x95\x1d\xfe\xb2\x87\xa14Z\xe5\xb3\xad\xd1\xb9F\x1d\a\r\xcd\xf6\xd3\xb1\x92i\x9f\xa5\x1b\xb5\xc68\x84,\n\xea[\xde\v\xf4iU\x97 \xc38\xb9\xd3d\xfb\xd0\x85Z\riO\x1ce\xc9\xc9p\x8f\xd1+\xd7\xceV\xab+M\xb3\x9e\xec:\xcb\x1bfE\x9f\xab\xd2\xcb\a.\xbc\xaf\x11\xd6#\xb6\x91K\xeb\xfd\xf2;i\x1ay\xe6I:\xb0w\x0e\x00\x00\x9a7\xcd;i\xf0\xc6j\xea\x85\xad}\xfcs\xac\xc0\x82\xc5\x12\xd8\xde\xbd\xd1\x9e0t\xb8\xdf\xc9\x86\x89\n\xec\xe7\x05\xc3\x92*\xb6\x1a\xa4\x8c\xec\x84\x8aD\xf2Cg\x7fPk\t\x8e\xb4\xafV\xe8y\xfb\x9aX\x956\x829\x16\xd5)\n\x98\xc0\x9a\x8cs\x97\xa5\xd7\xbc\xaf\xcf\n>j8\xba\xf1\xf4W\xd2\xf2\xeb\xe1\x89Y\xe2(\xd1\xec\xf8\x19\x18\xbbi\xec\xc3c\xe48\x80\x98KC<|\x04\x85\xd8\x00\xe6\x12\x12\xfe\xa0\xf4\x88\xb9\xea\x14E\x1a0([X7S\xe9\xb9\xe8\xdaIc\x9a\xc6g\x91\x86\xf4\xff\b\xd7*\xa5\xd3Z))\xd2_\x10\xbam\xb1\xfa\x82<\x15\xdb\x94\xc7^V\xa0=\x06\x1d\x0e\x04\xa1\xdc\x10\b\x80\xc6\xfd\x89\xe8\x1c\xe7X\'0\xd7 \xbfxu\xbf\x9fo\xc7\r\x98O)\bi\xff\x96\xd6+\x8b\xaea\x90\\\x1f\xe8\xf4\xa9-\xd0\x04\xbd\xe4c.&\xff\x95\xc8\xca\x01$z\x86\xdc\xbb\x18e\xb6W\xb2Yh\x84\xf5\x8c\x10\xbd\xa3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xd3\x04\x03\x8a<,A\x921\xff0\x15\xe3U>\x9f\xa5??\xce\x90Ky\xa1\xb5a(\xef\xcd\xbctE?%\x87O\x13\x82\x00\x00\x00\x00\x00\x00\x00\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 16:17:33 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:17:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:33 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x6000, 0x0) [ 1026.348748][T19082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1026.360386][T19082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1026.380971][T19082] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1026.437386][T19082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.452286][T19082] usb 3-1: config 0 descriptor?? [ 1026.723038][T19082] legousbtower 3-1:0.0: LEGO USB Tower firmware version is 52.185 build 65199 [ 1026.746747][T19082] legousbtower 3-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1026.812935][ T34] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1027.173005][ T34] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.184739][ T34] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.194675][ T34] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1027.204162][ T34] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.217669][ T34] usb 4-1: config 0 descriptor?? [ 1027.324102][T23669] usb 3-1: Couldn't submit interrupt_in_urb -90 [ 1027.525331][T17986] usb 3-1: USB disconnect, device number 63 [ 1027.543419][T17986] legousbtower 3-1:0.0: LEGO USB Tower #-160 now disconnected [ 1027.716722][ T34] corsair 0003:1B1C:1B34.0008: failed to start in urb: -90 [ 1027.728178][ T34] corsair 0003:1B1C:1B34.0008: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input0 [ 1027.923559][ T34] usb 4-1: USB disconnect, device number 16 16:17:35 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000603adb40940601007b12000000010902b801010000000009040000036ce07b0009050b0300000000000905000000000000000200f736d05153d07556ac97f56f288d3f971f366e6b1a0ede3ea9edec3e802120c853e64317f32a898b5a1466e17b040400d4bd87f8468c2ce14362b41b76363b31c9a2cf14c3baf1c931f622cf7628f4fdb1df69bf66e3030e16f0a5c3ac888ba46b632d624a16cbbf54875116ceae867e58bc9da8a34540ac67e366d2eda9cf8aba2cd5d5dd89a8d32d209619456fb5cf56a2aeb0213b9cfc8fb7207f6cc9edffdb3349f9009ce7cc7c318469f91868d0247849460d0e022a6fa6e63c1b76e3be51297f661f927df06ff791afbc38ee88956764a6ea6b940934ffe02453ed201832c36a48cbddcaf89408a973bea4a3299e6963916163459b058483"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:17:35 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000640)='wlan1\x00\x1b\x1a\x02\xd9n\xff\x8a\xb2\xd9\x00L\x06\xb5\x12\x03F\xd9\x00\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xa9\xb8p\xab\xc1?r\xebkX!D\xc3c\b{\xe0Q\\^\x14\xa1B=M\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xe4\xe8#/\x11%\xac%j\x9d\xeb\xba\xe6\xc4\xc4\x02\x8dT5\xddB48\x8f\xde\xbb\xc18\x84\xb5:f\xcb\xb4\r\x85\xf4\xee\xf2g~YX\bE;I\xa7\xe9\xf4]\x00\x8d\xec\xb2\x02\xe94\x87#07M\xfa\xaf@B=u\x013\x1e%\x18\x82\xc1\x80~H\x90\x9c\x8f;s\xc9\x17\x8a\x99\xb6\xabNG\xf7:\xbaN\x03\xae`\xcc\x03\x04E\xbaw\x7fo\xc5B\xf3\xd1}|\x92V\xbang\xdf\x8b\x8a\xd7\x1bD\x95\x1d\xfe\xb2\x87\xa14Z\xe5\xb3\xad\xd1\xb9F\x1d\a\r\xcd\xf6\xd3\xb1\x92i\x9f\xa5\x1b\xb5\xc68\x84,\n\xea[\xde\v\xf4iU\x97 \xc38\xb9\xd3d\xfb\xd0\x85Z\riO\x1ce\xc9\xc9p\x8f\xd1+\xd7\xceV\xab+M\xb3\x9e\xec:\xcb\x1bfE\x9f\xab\xd2\xcb\a.\xbc\xaf\x11\xd6#\xb6\x91K\xeb\xfd\xf2;i\x1ay\xe6I:\xb0w\x0e\x00\x00\x9a7\xcd;i\xf0\xc6j\xea\x85\xad}\xfcs\xac\xc0\x82\xc5\x12\xd8\xde\xbd\xd1\x9e0t\xb8\xdf\xc9\x86\x89\n\xec\xe7\x05\xc3\x92*\xb6\x1a\xa4\x8c\xec\x84\x8aD\xf2Cg\x7fPk\t\x8e\xb4\xafV\xe8y\xfb\x9aX\x956\x829\x16\xd5)\n\x98\xc0\x9a\x8cs\x97\xa5\xd7\xbc\xaf\xcf\n>j8\xba\xf1\xf4W\xd2\xf2\xeb\xe1\x89Y\xe2(\xd1\xec\xf8\x19\x18\xbbi\xec\xc3c\xe48\x80\x98KC<|\x04\x85\xd8\x00\xe6\x12\x12\xfe\xa0\xf4\x88\xb9\xea\x14E\x1a0([X7S\xe9\xb9\xe8\xdaIc\x9a\xc6g\x91\x86\xf4\xff\b\xd7*\xa5\xd3Z))\xd2_\x10\xbam\xb1\xfa\x82<\x15\xdb\x94\xc7^V\xa0=\x06\x1d\x0e\x04\xa1\xdc\x10\b\x80\xc6\xfd\x89\xe8\x1c\xe7X\'0\xd7 \xbfxu\xbf\x9fo\xc7\r\x98O)\bi\xff\x96\xd6+\x8b\xaea\x90\\\x1f\xe8\xf4\xa9-\xd0\x04\xbd\xe4c.&\xff\x95\xc8\xca\x01$z\x86\xdc\xbb\x18e\xb6W\xb2Yh\x84\xf5\x8c\x10\xbd\xa3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xd3\x04\x03\x8a<,A\x921\xff0\x15\xe3U>\x9f\xa5??\xce\x90Ky\xa1\xb5a(\xef\xcd\xbctE?%\x87O\x13\x82\x00\x00\x00\x00\x00\x00\x00\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 16:17:35 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) 16:17:35 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) 16:17:35 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:35 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:35 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000640)='wlan1\x00\x1b\x1a\x02\xd9n\xff\x8a\xb2\xd9\x00L\x06\xb5\x12\x03F\xd9\x00\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xa9\xb8p\xab\xc1?r\xebkX!D\xc3c\b{\xe0Q\\^\x14\xa1B=M\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xe4\xe8#/\x11%\xac%j\x9d\xeb\xba\xe6\xc4\xc4\x02\x8dT5\xddB48\x8f\xde\xbb\xc18\x84\xb5:f\xcb\xb4\r\x85\xf4\xee\xf2g~YX\bE;I\xa7\xe9\xf4]\x00\x8d\xec\xb2\x02\xe94\x87#07M\xfa\xaf@B=u\x013\x1e%\x18\x82\xc1\x80~H\x90\x9c\x8f;s\xc9\x17\x8a\x99\xb6\xabNG\xf7:\xbaN\x03\xae`\xcc\x03\x04E\xbaw\x7fo\xc5B\xf3\xd1}|\x92V\xbang\xdf\x8b\x8a\xd7\x1bD\x95\x1d\xfe\xb2\x87\xa14Z\xe5\xb3\xad\xd1\xb9F\x1d\a\r\xcd\xf6\xd3\xb1\x92i\x9f\xa5\x1b\xb5\xc68\x84,\n\xea[\xde\v\xf4iU\x97 \xc38\xb9\xd3d\xfb\xd0\x85Z\riO\x1ce\xc9\xc9p\x8f\xd1+\xd7\xceV\xab+M\xb3\x9e\xec:\xcb\x1bfE\x9f\xab\xd2\xcb\a.\xbc\xaf\x11\xd6#\xb6\x91K\xeb\xfd\xf2;i\x1ay\xe6I:\xb0w\x0e\x00\x00\x9a7\xcd;i\xf0\xc6j\xea\x85\xad}\xfcs\xac\xc0\x82\xc5\x12\xd8\xde\xbd\xd1\x9e0t\xb8\xdf\xc9\x86\x89\n\xec\xe7\x05\xc3\x92*\xb6\x1a\xa4\x8c\xec\x84\x8aD\xf2Cg\x7fPk\t\x8e\xb4\xafV\xe8y\xfb\x9aX\x956\x829\x16\xd5)\n\x98\xc0\x9a\x8cs\x97\xa5\xd7\xbc\xaf\xcf\n>j8\xba\xf1\xf4W\xd2\xf2\xeb\xe1\x89Y\xe2(\xd1\xec\xf8\x19\x18\xbbi\xec\xc3c\xe48\x80\x98KC<|\x04\x85\xd8\x00\xe6\x12\x12\xfe\xa0\xf4\x88\xb9\xea\x14E\x1a0([X7S\xe9\xb9\xe8\xdaIc\x9a\xc6g\x91\x86\xf4\xff\b\xd7*\xa5\xd3Z))\xd2_\x10\xbam\xb1\xfa\x82<\x15\xdb\x94\xc7^V\xa0=\x06\x1d\x0e\x04\xa1\xdc\x10\b\x80\xc6\xfd\x89\xe8\x1c\xe7X\'0\xd7 \xbfxu\xbf\x9fo\xc7\r\x98O)\bi\xff\x96\xd6+\x8b\xaea\x90\\\x1f\xe8\xf4\xa9-\xd0\x04\xbd\xe4c.&\xff\x95\xc8\xca\x01$z\x86\xdc\xbb\x18e\xb6W\xb2Yh\x84\xf5\x8c\x10\xbd\xa3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xd3\x04\x03\x8a<,A\x921\xff0\x15\xe3U>\x9f\xa5??\xce\x90Ky\xa1\xb5a(\xef\xcd\xbctE?%\x87O\x13\x82\x00\x00\x00\x00\x00\x00\x00\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 16:17:35 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:35 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000640)='wlan1\x00\x1b\x1a\x02\xd9n\xff\x8a\xb2\xd9\x00L\x06\xb5\x12\x03F\xd9\x00\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xa9\xb8p\xab\xc1?r\xebkX!D\xc3c\b{\xe0Q\\^\x14\xa1B=M\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xe4\xe8#/\x11%\xac%j\x9d\xeb\xba\xe6\xc4\xc4\x02\x8dT5\xddB48\x8f\xde\xbb\xc18\x84\xb5:f\xcb\xb4\r\x85\xf4\xee\xf2g~YX\bE;I\xa7\xe9\xf4]\x00\x8d\xec\xb2\x02\xe94\x87#07M\xfa\xaf@B=u\x013\x1e%\x18\x82\xc1\x80~H\x90\x9c\x8f;s\xc9\x17\x8a\x99\xb6\xabNG\xf7:\xbaN\x03\xae`\xcc\x03\x04E\xbaw\x7fo\xc5B\xf3\xd1}|\x92V\xbang\xdf\x8b\x8a\xd7\x1bD\x95\x1d\xfe\xb2\x87\xa14Z\xe5\xb3\xad\xd1\xb9F\x1d\a\r\xcd\xf6\xd3\xb1\x92i\x9f\xa5\x1b\xb5\xc68\x84,\n\xea[\xde\v\xf4iU\x97 \xc38\xb9\xd3d\xfb\xd0\x85Z\riO\x1ce\xc9\xc9p\x8f\xd1+\xd7\xceV\xab+M\xb3\x9e\xec:\xcb\x1bfE\x9f\xab\xd2\xcb\a.\xbc\xaf\x11\xd6#\xb6\x91K\xeb\xfd\xf2;i\x1ay\xe6I:\xb0w\x0e\x00\x00\x9a7\xcd;i\xf0\xc6j\xea\x85\xad}\xfcs\xac\xc0\x82\xc5\x12\xd8\xde\xbd\xd1\x9e0t\xb8\xdf\xc9\x86\x89\n\xec\xe7\x05\xc3\x92*\xb6\x1a\xa4\x8c\xec\x84\x8aD\xf2Cg\x7fPk\t\x8e\xb4\xafV\xe8y\xfb\x9aX\x956\x829\x16\xd5)\n\x98\xc0\x9a\x8cs\x97\xa5\xd7\xbc\xaf\xcf\n>j8\xba\xf1\xf4W\xd2\xf2\xeb\xe1\x89Y\xe2(\xd1\xec\xf8\x19\x18\xbbi\xec\xc3c\xe48\x80\x98KC<|\x04\x85\xd8\x00\xe6\x12\x12\xfe\xa0\xf4\x88\xb9\xea\x14E\x1a0([X7S\xe9\xb9\xe8\xdaIc\x9a\xc6g\x91\x86\xf4\xff\b\xd7*\xa5\xd3Z))\xd2_\x10\xbam\xb1\xfa\x82<\x15\xdb\x94\xc7^V\xa0=\x06\x1d\x0e\x04\xa1\xdc\x10\b\x80\xc6\xfd\x89\xe8\x1c\xe7X\'0\xd7 \xbfxu\xbf\x9fo\xc7\r\x98O)\bi\xff\x96\xd6+\x8b\xaea\x90\\\x1f\xe8\xf4\xa9-\xd0\x04\xbd\xe4c.&\xff\x95\xc8\xca\x01$z\x86\xdc\xbb\x18e\xb6W\xb2Yh\x84\xf5\x8c\x10\xbd\xa3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xd3\x04\x03\x8a<,A\x921\xff0\x15\xe3U>\x9f\xa5??\xce\x90Ky\xa1\xb5a(\xef\xcd\xbctE?%\x87O\x13\x82\x00\x00\x00\x00\x00\x00\x00\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') [ 1028.386500][T10735] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1028.396209][T19082] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1028.642961][T10735] usb 5-1: Using ep0 maxpacket: 16 [ 1028.712851][T17986] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1028.763747][T19082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1028.775834][T10735] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1028.788749][T19082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1028.798774][T19082] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1028.810680][T19082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1028.821720][T19082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1028.831615][T19082] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1028.840893][T19082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.850458][T19082] usb 3-1: config 0 descriptor?? [ 1028.953029][T10735] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1028.966899][T10735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.982080][T10735] usb 5-1: Product: syz [ 1028.988885][T10735] usb 5-1: Manufacturer: syz [ 1028.999809][T10735] usb 5-1: SerialNumber: syz [ 1029.044128][T10735] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 1029.113091][T19082] legousbtower 3-1:0.0: LEGO USB Tower firmware version is 52.185 build 65199 [ 1029.124373][T19082] legousbtower 3-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1029.144688][T17986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1029.168244][T17986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.183310][T17986] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1029.200350][T17986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.212454][T17986] usb 4-1: config 0 descriptor?? [ 1029.248552][T17969] usb 5-1: USB disconnect, device number 11 16:17:36 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:17:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:36 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000640)='wlan1\x00\x1b\x1a\x02\xd9n\xff\x8a\xb2\xd9\x00L\x06\xb5\x12\x03F\xd9\x00\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xa9\xb8p\xab\xc1?r\xebkX!D\xc3c\b{\xe0Q\\^\x14\xa1B=M\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xe4\xe8#/\x11%\xac%j\x9d\xeb\xba\xe6\xc4\xc4\x02\x8dT5\xddB48\x8f\xde\xbb\xc18\x84\xb5:f\xcb\xb4\r\x85\xf4\xee\xf2g~YX\bE;I\xa7\xe9\xf4]\x00\x8d\xec\xb2\x02\xe94\x87#07M\xfa\xaf@B=u\x013\x1e%\x18\x82\xc1\x80~H\x90\x9c\x8f;s\xc9\x17\x8a\x99\xb6\xabNG\xf7:\xbaN\x03\xae`\xcc\x03\x04E\xbaw\x7fo\xc5B\xf3\xd1}|\x92V\xbang\xdf\x8b\x8a\xd7\x1bD\x95\x1d\xfe\xb2\x87\xa14Z\xe5\xb3\xad\xd1\xb9F\x1d\a\r\xcd\xf6\xd3\xb1\x92i\x9f\xa5\x1b\xb5\xc68\x84,\n\xea[\xde\v\xf4iU\x97 \xc38\xb9\xd3d\xfb\xd0\x85Z\riO\x1ce\xc9\xc9p\x8f\xd1+\xd7\xceV\xab+M\xb3\x9e\xec:\xcb\x1bfE\x9f\xab\xd2\xcb\a.\xbc\xaf\x11\xd6#\xb6\x91K\xeb\xfd\xf2;i\x1ay\xe6I:\xb0w\x0e\x00\x00\x9a7\xcd;i\xf0\xc6j\xea\x85\xad}\xfcs\xac\xc0\x82\xc5\x12\xd8\xde\xbd\xd1\x9e0t\xb8\xdf\xc9\x86\x89\n\xec\xe7\x05\xc3\x92*\xb6\x1a\xa4\x8c\xec\x84\x8aD\xf2Cg\x7fPk\t\x8e\xb4\xafV\xe8y\xfb\x9aX\x956\x829\x16\xd5)\n\x98\xc0\x9a\x8cs\x97\xa5\xd7\xbc\xaf\xcf\n>j8\xba\xf1\xf4W\xd2\xf2\xeb\xe1\x89Y\xe2(\xd1\xec\xf8\x19\x18\xbbi\xec\xc3c\xe48\x80\x98KC<|\x04\x85\xd8\x00\xe6\x12\x12\xfe\xa0\xf4\x88\xb9\xea\x14E\x1a0([X7S\xe9\xb9\xe8\xdaIc\x9a\xc6g\x91\x86\xf4\xff\b\xd7*\xa5\xd3Z))\xd2_\x10\xbam\xb1\xfa\x82<\x15\xdb\x94\xc7^V\xa0=\x06\x1d\x0e\x04\xa1\xdc\x10\b\x80\xc6\xfd\x89\xe8\x1c\xe7X\'0\xd7 \xbfxu\xbf\x9fo\xc7\r\x98O)\bi\xff\x96\xd6+\x8b\xaea\x90\\\x1f\xe8\xf4\xa9-\xd0\x04\xbd\xe4c.&\xff\x95\xc8\xca\x01$z\x86\xdc\xbb\x18e\xb6W\xb2Yh\x84\xf5\x8c\x10\xbd\xa3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xd3\x04\x03\x8a<,A\x921\xff0\x15\xe3U>\x9f\xa5??\xce\x90Ky\xa1\xb5a(\xef\xcd\xbctE?%\x87O\x13\x82\x00\x00\x00\x00\x00\x00\x00\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|7l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') [ 1029.583291][T17986] usbhid 4-1:0.0: can't add hid device: -71 [ 1029.589570][T17986] usbhid: probe of 4-1:0.0 failed with error -71 [ 1029.609425][T17986] usb 4-1: USB disconnect, device number 17 [ 1029.723033][T23772] usb 3-1: Couldn't submit interrupt_in_urb -90 [ 1029.931342][T17969] usb 3-1: USB disconnect, device number 64 [ 1029.939519][T17969] legousbtower 3-1:0.0: LEGO USB Tower #-160 now disconnected [ 1030.022927][ T34] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1030.034592][T17986] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1030.262865][ T34] usb 5-1: Using ep0 maxpacket: 16 [ 1030.382955][ T34] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 16:17:37 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:17:37 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) [ 1030.453529][T17986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.464891][T17986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1030.481395][T17986] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1030.494627][T17986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.519801][T17986] usb 4-1: config 0 descriptor?? [ 1030.563481][ T34] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1030.574096][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.582105][ T34] usb 5-1: Product: syz [ 1030.595906][ T34] usb 5-1: Manufacturer: syz [ 1030.600983][ T34] usb 5-1: SerialNumber: syz [ 1030.653889][ T34] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 1030.782952][T10735] usb 3-1: new high-speed USB device number 65 using dummy_hcd 16:17:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f0000000040)=""/201, 0xc9}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') readv(r0, &(0x7f0000000580), 0x3c1) 16:17:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:37 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000640)='wlan1\x00\x1b\x1a\x02\xd9n\xff\x8a\xb2\xd9\x00L\x06\xb5\x12\x03F\xd9\x00\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xa9\xb8p\xab\xc1?r\xebkX!D\xc3c\b{\xe0Q\\^\x14\xa1B=M\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xe4\xe8#/\x11%\xac%j\x9d\xeb\xba\xe6\xc4\xc4\x02\x8dT5\xddB48\x8f\xde\xbb\xc18\x84\xb5:f\xcb\xb4\r\x85\xf4\xee\xf2g~YX\bE;I\xa7\xe9\xf4]\x00\x8d\xec\xb2\x02\xe94\x87#07M\xfa\xaf@B=u\x013\x1e%\x18\x82\xc1\x80~H\x90\x9c\x8f;s\xc9\x17\x8a\x99\xb6\xabNG\xf7:\xbaN\x03\xae`\xcc\x03\x04E\xbaw\x7fo\xc5B\xf3\xd1}|\x92V\xbang\xdf\x8b\x8a\xd7\x1bD\x95\x1d\xfe\xb2\x87\xa14Z\xe5\xb3\xad\xd1\xb9F\x1d\a\r\xcd\xf6\xd3\xb1\x92i\x9f\xa5\x1b\xb5\xc68\x84,\n\xea[\xde\v\xf4iU\x97 \xc38\xb9\xd3d\xfb\xd0\x85Z\riO\x1ce\xc9\xc9p\x8f\xd1+\xd7\xceV\xab+M\xb3\x9e\xec:\xcb\x1bfE\x9f\xab\xd2\xcb\a.\xbc\xaf\x11\xd6#\xb6\x91K\xeb\xfd\xf2;i\x1ay\xe6I:\xb0w\x0e\x00\x00\x9a7\xcd;i\xf0\xc6j\xea\x85\xad}\xfcs\xac\xc0\x82\xc5\x12\xd8\xde\xbd\xd1\x9e0t\xb8\xdf\xc9\x86\x89\n\xec\xe7\x05\xc3\x92*\xb6\x1a\xa4\x8c\xec\x84\x8aD\xf2Cg\x7fPk\t\x8e\xb4\xafV\xe8y\xfb\x9aX\x956\x829\x16\xd5)\n\x98\xc0\x9a\x8cs\x97\xa5\xd7\xbc\xaf\xcf\n>j8\xba\xf1\xf4W\xd2\xf2\xeb\xe1\x89Y\xe2(\xd1\xec\xf8\x19\x18\xbbi\xec\xc3c\xe48\x80\x98KC<|\x04\x85\xd8\x00\xe6\x12\x12\xfe\xa0\xf4\x88\xb9\xea\x14E\x1a0([X7S\xe9\xb9\xe8\xdaIc\x9a\xc6g\x91\x86\xf4\xff\b\xd7*\xa5\xd3Z))\xd2_\x10\xbam\xb1\xfa\x82<\x15\xdb\x94\xc7^V\xa0=\x06\x1d\x0e\x04\xa1\xdc\x10\b\x80\xc6\xfd\x89\xe8\x1c\xe7X\'0\xd7 \xbfxu\xbf\x9fo\xc7\r\x98O)\bi\xff\x96\xd6+\x8b\xaea\x90\\\x1f\xe8\xf4\xa9-\xd0\x04\xbd\xe4c.&\xff\x95\xc8\xca\x01$z\x86\xdc\xbb\x18e\xb6W\xb2Yh\x84\xf5\x8c\x10\xbd\xa3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xd3\x04\x03\x8a<,A\x921\xff0\x15\xe3U>\x9f\xa5??\xce\x90Ky\xa1\xb5a(\xef\xcd\xbctE?%\x87O\x13\x82\x00\x00\x00\x00\x00\x00\x00\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, 0x0) [ 1030.854306][T12046] usb 5-1: USB disconnect, device number 12 16:17:37 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000640)='wlan1\x00\x1b\x1a\x02\xd9n\xff\x8a\xb2\xd9\x00L\x06\xb5\x12\x03F\xd9\x00\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xa9\xb8p\xab\xc1?r\xebkX!D\xc3c\b{\xe0Q\\^\x14\xa1B=M\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xe4\xe8#/\x11%\xac%j\x9d\xeb\xba\xe6\xc4\xc4\x02\x8dT5\xddB48\x8f\xde\xbb\xc18\x84\xb5:f\xcb\xb4\r\x85\xf4\xee\xf2g~YX\bE;I\xa7\xe9\xf4]\x00\x8d\xec\xb2\x02\xe94\x87#07M\xfa\xaf@B=u\x013\x1e%\x18\x82\xc1\x80~H\x90\x9c\x8f;s\xc9\x17\x8a\x99\xb6\xabNG\xf7:\xbaN\x03\xae`\xcc\x03\x04E\xbaw\x7fo\xc5B\xf3\xd1}|\x92V\xbang\xdf\x8b\x8a\xd7\x1bD\x95\x1d\xfe\xb2\x87\xa14Z\xe5\xb3\xad\xd1\xb9F\x1d\a\r\xcd\xf6\xd3\xb1\x92i\x9f\xa5\x1b\xb5\xc68\x84,\n\xea[\xde\v\xf4iU\x97 \xc38\xb9\xd3d\xfb\xd0\x85Z\riO\x1ce\xc9\xc9p\x8f\xd1+\xd7\xceV\xab+M\xb3\x9e\xec:\xcb\x1bfE\x9f\xab\xd2\xcb\a.\xbc\xaf\x11\xd6#\xb6\x91K\xeb\xfd\xf2;i\x1ay\xe6I:\xb0w\x0e\x00\x00\x9a7\xcd;i\xf0\xc6j\xea\x85\xad}\xfcs\xac\xc0\x82\xc5\x12\xd8\xde\xbd\xd1\x9e0t\xb8\xdf\xc9\x86\x89\n\xec\xe7\x05\xc3\x92*\xb6\x1a\xa4\x8c\xec\x84\x8aD\xf2Cg\x7fPk\t\x8e\xb4\xafV\xe8y\xfb\x9aX\x956\x829\x16\xd5)\n\x98\xc0\x9a\x8cs\x97\xa5\xd7\xbc\xaf\xcf\n>j8\xba\xf1\xf4W\xd2\xf2\xeb\xe1\x89Y\xe2(\xd1\xec\xf8\x19\x18\xbbi\xec\xc3c\xe48\x80\x98KC<|\x04\x85\xd8\x00\xe6\x12\x12\xfe\xa0\xf4\x88\xb9\xea\x14E\x1a0([X7S\xe9\xb9\xe8\xdaIc\x9a\xc6g\x91\x86\xf4\xff\b\xd7*\xa5\xd3Z))\xd2_\x10\xbam\xb1\xfa\x82<\x15\xdb\x94\xc7^V\xa0=\x06\x1d\x0e\x04\xa1\xdc\x10\b\x80\xc6\xfd\x89\xe8\x1c\xe7X\'0\xd7 \xbfxu\xbf\x9fo\xc7\r\x98O)\bi\xff\x96\xd6+\x8b\xaea\x90\\\x1f\xe8\xf4\xa9-\xd0\x04\xbd\xe4c.&\xff\x95\xc8\xca\x01$z\x86\xdc\xbb\x18e\xb6W\xb2Yh\x84\xf5\x8c\x10\xbd\xa3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xd3\x04\x03\x8a<,A\x921\xff0\x15\xe3U>\x9f\xa5??\xce\x90Ky\xa1\xb5a(\xef\xcd\xbctE?%\x87O\x13\x82\x00\x00\x00\x00\x00\x00\x00\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, 0x0) 16:17:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:38 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="663c7b4700807094e71b0fb1f138a925d86800278dcff47d010b0067dd32378f364600000001000000f20aa20f920139d34715b9f50100771c3697b11dc6845ece76b468d1c207488ce7f4708e28dd8c0c0f401224349576f6a49608db22dd312491c30000f3c3af52d2c178f958148557ec26eb401067facb137e183de6d35a360014856cf24dc90371a8b5679e06a44a749790739d272b", 0x98}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x7) 16:17:38 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000640)='wlan1\x00\x1b\x1a\x02\xd9n\xff\x8a\xb2\xd9\x00L\x06\xb5\x12\x03F\xd9\x00\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xa9\xb8p\xab\xc1?r\xebkX!D\xc3c\b{\xe0Q\\^\x14\xa1B=M\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xe4\xe8#/\x11%\xac%j\x9d\xeb\xba\xe6\xc4\xc4\x02\x8dT5\xddB48\x8f\xde\xbb\xc18\x84\xb5:f\xcb\xb4\r\x85\xf4\xee\xf2g~YX\bE;I\xa7\xe9\xf4]\x00\x8d\xec\xb2\x02\xe94\x87#07M\xfa\xaf@B=u\x013\x1e%\x18\x82\xc1\x80~H\x90\x9c\x8f;s\xc9\x17\x8a\x99\xb6\xabNG\xf7:\xbaN\x03\xae`\xcc\x03\x04E\xbaw\x7fo\xc5B\xf3\xd1}|\x92V\xbang\xdf\x8b\x8a\xd7\x1bD\x95\x1d\xfe\xb2\x87\xa14Z\xe5\xb3\xad\xd1\xb9F\x1d\a\r\xcd\xf6\xd3\xb1\x92i\x9f\xa5\x1b\xb5\xc68\x84,\n\xea[\xde\v\xf4iU\x97 \xc38\xb9\xd3d\xfb\xd0\x85Z\riO\x1ce\xc9\xc9p\x8f\xd1+\xd7\xceV\xab+M\xb3\x9e\xec:\xcb\x1bfE\x9f\xab\xd2\xcb\a.\xbc\xaf\x11\xd6#\xb6\x91K\xeb\xfd\xf2;i\x1ay\xe6I:\xb0w\x0e\x00\x00\x9a7\xcd;i\xf0\xc6j\xea\x85\xad}\xfcs\xac\xc0\x82\xc5\x12\xd8\xde\xbd\xd1\x9e0t\xb8\xdf\xc9\x86\x89\n\xec\xe7\x05\xc3\x92*\xb6\x1a\xa4\x8c\xec\x84\x8aD\xf2Cg\x7fPk\t\x8e\xb4\xafV\xe8y\xfb\x9aX\x956\x829\x16\xd5)\n\x98\xc0\x9a\x8cs\x97\xa5\xd7\xbc\xaf\xcf\n>j8\xba\xf1\xf4W\xd2\xf2\xeb\xe1\x89Y\xe2(\xd1\xec\xf8\x19\x18\xbbi\xec\xc3c\xe48\x80\x98KC<|\x04\x85\xd8\x00\xe6\x12\x12\xfe\xa0\xf4\x88\xb9\xea\x14E\x1a0([X7S\xe9\xb9\xe8\xdaIc\x9a\xc6g\x91\x86\xf4\xff\b\xd7*\xa5\xd3Z))\xd2_\x10\xbam\xb1\xfa\x82<\x15\xdb\x94\xc7^V\xa0=\x06\x1d\x0e\x04\xa1\xdc\x10\b\x80\xc6\xfd\x89\xe8\x1c\xe7X\'0\xd7 \xbfxu\xbf\x9fo\xc7\r\x98O)\bi\xff\x96\xd6+\x8b\xaea\x90\\\x1f\xe8\xf4\xa9-\xd0\x04\xbd\xe4c.&\xff\x95\xc8\xca\x01$z\x86\xdc\xbb\x18e\xb6W\xb2Yh\x84\xf5\x8c\x10\xbd\xa3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xd3\x04\x03\x8a<,A\x921\xff0\x15\xe3U>\x9f\xa5??\xce\x90Ky\xa1\xb5a(\xef\xcd\xbctE?%\x87O\x13\x82\x00\x00\x00\x00\x00\x00\x00\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, 0x0) [ 1031.058770][T17986] corsair 0003:1B1C:1B34.0009: failed to start in urb: -90 [ 1031.091001][T17986] corsair 0003:1B1C:1B34.0009: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input0 [ 1031.143525][T10735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1031.163335][T10735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1031.197711][T10735] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1031.222379][T10735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1031.234446][T10735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1031.246555][T10735] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1031.255918][T10735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.267658][T10735] usb 3-1: config 0 descriptor?? [ 1031.303288][T17986] usb 4-1: USB disconnect, device number 18 [ 1031.543083][T10735] legousbtower 3-1:0.0: LEGO USB Tower firmware version is 52.185 build 65199 [ 1031.558234][T10735] legousbtower 3-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 16:17:38 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:17:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:38 executing program 1: r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x20, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x1d7, 0x8}}]}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 1032.142978][T10735] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1032.148875][T23874] usb 3-1: Couldn't submit interrupt_in_urb -90 [ 1032.153026][ T34] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1032.344935][T19081] usb 3-1: USB disconnect, device number 65 [ 1032.355379][T19081] legousbtower 3-1:0.0: LEGO USB Tower #-160 now disconnected [ 1032.403008][ T34] usb 2-1: Using ep0 maxpacket: 8 [ 1032.503001][T10735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.514955][T10735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.528012][ T34] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1032.538167][T10735] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1032.548024][ T34] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1032.557944][T10735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.567466][ T34] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1032.582388][T10735] usb 4-1: config 0 descriptor?? [ 1032.753744][ T34] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1032.763574][ T34] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.771671][ T34] usb 2-1: Product: syz [ 1032.776021][ T34] usb 2-1: Manufacturer: syz [ 1032.782036][ T34] usb 2-1: SerialNumber: syz 16:17:39 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:17:39 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:17:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) [ 1033.043816][ T34] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1033.074363][T10735] corsair 0003:1B1C:1B34.000A: failed to start in urb: -90 [ 1033.082585][T10735] corsair 0003:1B1C:1B34.000A: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input0 [ 1033.163097][T19082] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1033.245582][T12046] usb 2-1: USB disconnect, device number 8 [ 1033.299296][T10735] usb 4-1: USB disconnect, device number 19 [ 1033.523964][T19082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1033.540324][T19082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1033.560889][T19082] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1033.575783][T19082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1033.590118][T19082] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1033.602500][T19082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.615634][T19082] usb 3-1: config 0 descriptor?? 16:17:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:40 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:17:40 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1033.872973][T19082] legousbtower 3-1:0.0: get version request failed: -121 [ 1033.885271][T19082] legousbtower: probe of 3-1:0.0 failed with error -121 [ 1034.033251][T17986] usb 2-1: new high-speed USB device number 9 using dummy_hcd 16:17:41 executing program 4: openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) [ 1034.075573][T12046] usb 3-1: USB disconnect, device number 66 16:17:41 executing program 4: io_submit(0x0, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) [ 1034.193037][T17969] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1034.286214][T17986] usb 2-1: Using ep0 maxpacket: 8 16:17:41 executing program 4: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x70000020) 16:17:41 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 1034.423511][T17986] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1034.457192][T17986] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1034.471985][T17986] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1034.564386][T17969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1034.576177][T17969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1034.587492][T17969] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 16:17:41 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) [ 1034.607482][T17969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.638256][T17969] usb 4-1: config 0 descriptor?? [ 1034.685400][T17986] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1034.695696][T17986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.712962][T17986] usb 2-1: Product: syz [ 1034.717388][T17986] usb 2-1: Manufacturer: syz [ 1034.722063][T17986] usb 2-1: SerialNumber: syz [ 1034.722878][T19082] usb 5-1: new high-speed USB device number 13 using dummy_hcd 16:17:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a320000000014000380080002400000000008000140000000002c0000000e0a01010000000000000000010000000900020073797a32000000000900010073797a30"], 0xb4}}, 0x0) 16:17:41 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:17:41 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1034.943937][T17986] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1034.962258][T17986] usb 2-1: USB disconnect, device number 9 16:17:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='2'], 0x24}}, 0x0) [ 1034.996910][T19082] usb 5-1: Using ep0 maxpacket: 16 16:17:42 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @mcast2, 0x2}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1035.117219][T19082] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1035.133199][T19082] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1035.138127][T17969] corsair 0003:1B1C:1B34.000B: failed to start in urb: -90 [ 1035.143927][T19082] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1035.179469][T17969] corsair 0003:1B1C:1B34.000B: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input0 16:17:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x24000801) [ 1035.222841][ T34] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1035.368990][T17969] usb 4-1: USB disconnect, device number 20 [ 1035.413511][T19082] usb 5-1: string descriptor 0 read error: -22 [ 1035.420171][T19082] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1035.442689][T19082] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.506016][T19082] usb 5-1: 0:2 : does not exist [ 1035.602947][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1035.621113][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1035.661538][ T34] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1035.691946][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1035.708127][ T34] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1035.711122][T17986] usb 5-1: USB disconnect, device number 13 [ 1035.728599][ T34] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.754622][ T34] usb 3-1: config 0 descriptor?? 16:17:42 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r1) 16:17:42 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)={{0x12, 0x1, 0x0, 0x20, 0x3b, 0xab, 0x8, 0x1608, 0x247, 0xda9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x17, 0xb2, 0x80}}]}}]}}, 0x0) 16:17:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:42 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1036.017057][ T34] legousbtower 3-1:0.0: get version request failed: -121 [ 1036.027493][ T34] legousbtower: probe of 3-1:0.0 failed with error -121 [ 1036.219671][T17986] usb 3-1: USB disconnect, device number 67 [ 1036.233192][T17999] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1036.242410][T17969] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1036.512962][T17969] usb 2-1: Using ep0 maxpacket: 8 [ 1036.553145][T12046] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1036.643632][T17999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1036.654968][T17999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1036.672263][T17999] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1036.685620][T17999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.697913][T17999] usb 4-1: config 0 descriptor?? [ 1036.823002][T12046] usb 5-1: Using ep0 maxpacket: 16 [ 1036.828907][T17969] usb 2-1: New USB device found, idVendor=1608, idProduct=0247, bcdDevice= d.a9 [ 1036.851260][T17969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.859566][T17969] usb 2-1: Product: syz [ 1036.865941][T17969] usb 2-1: Manufacturer: syz [ 1036.870664][T17969] usb 2-1: SerialNumber: syz [ 1036.879779][T17969] usb 2-1: config 0 descriptor?? [ 1036.924781][T17969] io_ti 2-1:0.0: required endpoints missing [ 1036.973740][T12046] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1036.982719][T12046] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1037.001178][T12046] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1037.126742][ T4912] usb 2-1: USB disconnect, device number 10 [ 1037.184989][T17999] corsair 0003:1B1C:1B34.000C: failed to start in urb: -90 [ 1037.204441][T17999] corsair 0003:1B1C:1B34.000C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input0 [ 1037.313015][T12046] usb 5-1: string descriptor 0 read error: -22 [ 1037.319562][T12046] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1037.330457][T12046] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.386469][T17999] usb 4-1: USB disconnect, device number 21 [ 1037.404731][T12046] usb 5-1: 0:2 : does not exist 16:17:44 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x5, @sliced}) 16:17:44 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:17:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r0, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:44 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1037.448653][T12046] usb 5-1: USB disconnect, device number 14 16:17:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f0000000040)=""/201, 0xc9}], 0x1) fdatasync(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') readv(r0, &(0x7f0000000580), 0x3c1) 16:17:44 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r4 = socket$inet6(0xa, 0x200000000003, 0x87) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40505331, &(0x7f0000000080)={{0xf}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @mcast2, 0x2}, 0x1c) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 16:17:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xaa1c5019) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = gettid() tkill(r1, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) process_vm_writev(0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/186, 0xba}, {0x0}, {&(0x7f0000000200)=""/119, 0x77}, {&(0x7f0000000400)=""/127, 0x7f}, {0x0}], 0x5, &(0x7f0000002d80)=[{0x0}, {&(0x7f0000000740)=""/231, 0xe7}, {&(0x7f0000000840)=""/141, 0x8d}, {0x0}, {0x0}, {&(0x7f0000002b40)=""/1, 0x1}, {&(0x7f0000002b80)=""/244, 0xf4}, {0x0}, {&(0x7f0000002d40)=""/56, 0x38}], 0x9, 0x0) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x21, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2d05}], 0x1, 0x0, 0x0, 0x2bc0}, 0x350c) [ 1037.792994][T17969] usb 3-1: new high-speed USB device number 68 using dummy_hcd 16:17:44 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r1) 16:17:44 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="663c7b4700807094e71b0fb1f138a925d86800278dcff47d010b0067dd32378f364600000001000000f20aa20f920139d34715b9f50100771c3697b11dc6845ece76b468d1c207488ce7f4708e28dd8c0c0f401224349576f6a49608db22dd312491c30000f3c3af52d2c178f958148557ec26eb401067facb137e183de6d35a360014856cf24dc90371a8b5679e06a44a749790739d272b9926c451679cfa777f00000000000000768c70b3abbac14e46aeedd6db64da77faa39549711caa02154c61e11380c1275948b5", 0xcb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x7) [ 1037.920529][ T4912] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1038.183481][ T4912] usb 2-1: Using ep0 maxpacket: 8 [ 1038.212970][T17969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1038.224654][T17969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1038.241957][T17969] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1038.254251][T17969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1038.263482][ T34] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1038.268183][T17969] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1038.284586][T17969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.294620][T17969] usb 3-1: config 0 descriptor?? [ 1038.463608][ T4912] usb 2-1: New USB device found, idVendor=1608, idProduct=0247, bcdDevice= d.a9 [ 1038.477540][ T4912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.486423][ T4912] usb 2-1: Product: syz [ 1038.490820][ T4912] usb 2-1: Manufacturer: syz [ 1038.495752][ T4912] usb 2-1: SerialNumber: syz [ 1038.503270][ T4912] usb 2-1: config 0 descriptor?? [ 1038.545306][ T4912] io_ti 2-1:0.0: required endpoints missing [ 1038.577109][T17969] legousbtower 3-1:0.0: get version request failed: -121 [ 1038.584593][T17969] legousbtower: probe of 3-1:0.0 failed with error -121 [ 1038.643243][ T34] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1038.655182][ T34] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1038.667369][ T34] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1038.678950][ T34] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.688716][ T34] usb 4-1: config 0 descriptor?? 16:17:45 executing program 1: sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0xc3f00ab48135e9) 16:17:45 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:17:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r0, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) [ 1038.753304][ T4912] usb 2-1: USB disconnect, device number 11 [ 1038.776426][T19081] usb 3-1: USB disconnect, device number 68 16:17:45 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000100)) [ 1039.174310][ T34] corsair 0003:1B1C:1B34.000D: failed to start in urb: -90 [ 1039.201792][ T34] corsair 0003:1B1C:1B34.000D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input0 16:17:46 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:17:46 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="663c7b4700807094e71b0fb1f138a925d86800278dcff47d010b0067dd32378f364600000001000000f20aa20f920139d34715b9f50100771c3697b11dc6845ece76b468d1c207488ce7f4708e28dd8c0c0f401224349576f6a49608db22dd312491c30000f3c3af52d2c178f958148557ec26eb401067facb13", 0x7a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x7) 16:17:46 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x2007, @fd=r3, 0x0, 0x0}, 0x0) r4 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r4, 0x0) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0) [ 1039.394252][T12046] usb 4-1: USB disconnect, device number 22 16:17:46 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x2007, @fd=r3, 0x0, 0x0}, 0x0) r4 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r4, 0x0) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0) [ 1039.618918][T17969] usb 3-1: new high-speed USB device number 69 using dummy_hcd 16:17:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r0, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:46 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:17:46 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r1) [ 1040.023026][T17969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1040.033976][T17969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1040.053013][T17969] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1040.068143][T17969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1040.086763][T17969] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1040.100724][T17969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.121979][T17969] usb 3-1: config 0 descriptor?? [ 1040.222898][ T34] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1040.403081][T17969] legousbtower 3-1:0.0: get version request failed: -32 [ 1040.414660][T17969] legousbtower: probe of 3-1:0.0 failed with error -32 [ 1040.583445][ T34] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.595491][ T34] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.607184][ T34] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1040.618275][ T34] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.628497][ T34] usb 4-1: config 0 descriptor?? 16:17:48 executing program 4: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) 16:17:48 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x2007, @fd=r3, 0x0, 0x0}, 0x0) r4 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r4, 0x0) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0) 16:17:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, 0x0, 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:48 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:17:48 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) [ 1041.115783][ T34] corsair 0003:1B1C:1B34.000E: failed to start in urb: -90 [ 1041.159028][ T34] corsair 0003:1B1C:1B34.000E: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input0 [ 1041.317600][T17969] usb 4-1: USB disconnect, device number 23 16:17:49 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 16:17:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) syz_genetlink_get_family_id$tipc(0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[], 0x1000001bd) 16:17:49 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:17:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0}, 0x60, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() exit_group(0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x9, 0x2e}, 0xd8) fcntl$setstatus(r1, 0x4, 0x2000) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080, 0x3e}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 16:17:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, 0x0, 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:49 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) [ 1042.334116][ T34] usb 3-1: USB disconnect, device number 69 [ 1042.662979][ T4912] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1042.822967][ T34] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1043.083445][ T4912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.095107][ T4912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.112027][ T4912] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1043.125571][ T4912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.141322][ T4912] usb 4-1: config 0 descriptor?? 16:17:50 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) 16:17:50 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000200)=@string={0x2}}, {0x52, &(0x7f00000002c0)=@string={0x52, 0x3, "5c263e131dd9fccfca47aaee080ae87d1088e1d99b8d588cd735e2462d2d7e7423804b23de6dd74fdab84f5e7d225b8769eae17d924cd714a361ea139197b9292ccfd9e93b6be25e480f795648f35dde"}}]}) [ 1043.266016][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1043.297475][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 16:17:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, 0x0, 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:50 executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) accept(r0, 0x0, 0x0) [ 1043.329221][ T34] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1043.358647][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1043.399829][ T34] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1043.424019][ T34] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.450123][ T34] usb 3-1: config 0 descriptor?? 16:17:50 executing program 4: syz_open_dev$dri(&(0x7f0000001580)='/dev/dri/card#\x00', 0x0, 0x5) 16:17:50 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x11, &(0x7f000079bffc), &(0x7f0000000080)=0x4) [ 1043.662969][T18001] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1043.674423][ T4912] corsair 0003:1B1C:1B34.000F: failed to start in urb: -90 [ 1043.698329][ T4912] corsair 0003:1B1C:1B34.000F: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input0 [ 1043.732931][ T34] legousbtower 3-1:0.0: get version request failed: -32 [ 1043.740052][ T34] legousbtower: probe of 3-1:0.0 failed with error -32 [ 1043.885304][T17969] usb 4-1: USB disconnect, device number 24 [ 1043.912865][T18001] usb 2-1: Using ep0 maxpacket: 16 [ 1044.032966][T18001] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1044.083008][T18001] usb 2-1: language id specifier not provided by device, defaulting to English [ 1044.218215][T18001] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1044.238763][T18001] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.264603][T18001] usb 2-1: Product: syz [ 1044.269139][T18001] usb 2-1: Manufacturer: ♜ጾ쿼䟊ਈ編è è¶›è±˜ã——䛢ⴭ瑾耣â‹æ·žä¿—룚å¹â‰½è›î©©ç·¡ä²’ᓗ憣áªéž‘â¦¹ì¼¬î§™æ¬»å»¢à½ˆå™¹ïˆ [ 1044.292310][T18001] usb 2-1: SerialNumber: syz [ 1044.358828][T18001] cdc_ether: probe of 2-1:1.0 failed with error -22 16:17:51 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 16:17:51 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) 16:17:51 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) 16:17:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:51 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x142, 0x0) [ 1044.558659][T18001] usb 2-1: USB disconnect, device number 12 [ 1044.732973][T17969] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1045.103750][T17969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1045.114851][T17969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1045.131064][T17969] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1045.143884][T17969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.160992][T17969] usb 4-1: config 0 descriptor?? [ 1045.353023][T19081] usb 2-1: new high-speed USB device number 13 using dummy_hcd 16:17:52 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:17:52 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049db2e08450c10105d6d0083820109021b00010000000009040000"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) [ 1045.448398][T18001] usb 3-1: USB disconnect, device number 70 [ 1045.603624][T19081] usb 2-1: Using ep0 maxpacket: 16 [ 1045.654358][T17969] corsair 0003:1B1C:1B34.0010: failed to start in urb: -90 [ 1045.673820][T17969] corsair 0003:1B1C:1B34.0010: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input0 [ 1045.733599][T19081] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1045.763438][T19082] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1045.793984][T19081] usb 2-1: language id specifier not provided by device, defaulting to English [ 1045.865438][ T4912] usb 4-1: USB disconnect, device number 25 [ 1045.879731][T18001] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1045.933468][T19081] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1045.942707][T19081] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.957234][T19081] usb 2-1: Product: syz [ 1045.961659][T19081] usb 2-1: Manufacturer: ♜ጾ쿼䟊ਈ編è è¶›è±˜ã——䛢ⴭ瑾耣â‹æ·žä¿—룚å¹â‰½è›î©©ç·¡ä²’ᓗ憣áªéž‘â¦¹ì¼¬î§™æ¬»å»¢à½ˆå™¹ïˆ [ 1045.981858][T19081] usb 2-1: SerialNumber: syz [ 1046.024400][T19081] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1046.036878][T19082] usb 5-1: Using ep0 maxpacket: 8 [ 1046.193051][T19082] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 16:17:53 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000200)=@string={0x2}}, {0x52, &(0x7f00000002c0)=@string={0x52, 0x3, "5c263e131dd9fccfca47aaee080ae87d1088e1d99b8d588cd735e2462d2d7e7423804b23de6dd74fdab84f5e7d225b8769eae17d924cd714a361ea139197b9292ccfd9e93b6be25e480f795648f35dde"}}]}) [ 1046.234557][T17969] usb 2-1: USB disconnect, device number 13 [ 1046.255312][T18001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1046.271792][T18001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 16:17:53 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) 16:17:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) [ 1046.289234][T18001] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1046.300112][T18001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1046.322468][T18001] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1046.331974][T18001] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.345245][T18001] usb 3-1: config 0 descriptor?? [ 1046.365137][T19082] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=6d.5d 16:17:53 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1046.380267][T19082] usb 5-1: New USB device strings: Mfr=0, Product=131, SerialNumber=130 [ 1046.403794][T19082] usb 5-1: Product: syz [ 1046.413987][T19082] usb 5-1: SerialNumber: syz [ 1046.442734][T19082] usb 5-1: config 0 descriptor?? [ 1046.504388][T19082] yurex 5-1:0.0: Could not find endpoints [ 1046.603150][T18001] legousbtower 3-1:0.0: get version request failed: -32 [ 1046.610300][T18001] legousbtower: probe of 3-1:0.0 failed with error -32 [ 1046.706482][ T4912] usb 5-1: USB disconnect, device number 15 [ 1046.773127][T17969] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1046.802987][T19082] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1047.012905][T17969] usb 2-1: Using ep0 maxpacket: 16 16:17:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:54 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1047.133573][T17969] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1047.193714][T17969] usb 2-1: language id specifier not provided by device, defaulting to English [ 1047.203607][T19082] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1047.234023][T19082] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1047.262878][T19082] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1047.272211][T19082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.292691][T19082] usb 4-1: config 0 descriptor?? [ 1047.311625][T24524] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1047.323582][T17969] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1047.343558][T17969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.375569][T17969] usb 2-1: Product: syz [ 1047.385850][T17969] usb 2-1: Manufacturer: ♜ጾ쿼䟊ਈ編è è¶›è±˜ã——䛢ⴭ瑾耣â‹æ·žä¿—룚å¹â‰½è›î©©ç·¡ä²’ᓗ憣áªéž‘â¦¹ì¼¬î§™æ¬»å»¢à½ˆå™¹ïˆ [ 1047.422828][T17969] usb 2-1: SerialNumber: syz [ 1047.464271][T17969] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1047.603085][ T4912] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1047.681738][T19081] usb 2-1: USB disconnect, device number 14 [ 1047.784593][T19082] corsair 0003:1B1C:1B34.0011: failed to start in urb: -90 [ 1047.798650][T19082] corsair 0003:1B1C:1B34.0011: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input0 [ 1047.863089][ T4912] usb 5-1: Using ep0 maxpacket: 8 [ 1047.998509][T17969] usb 4-1: USB disconnect, device number 26 [ 1048.003513][ T4912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 16:17:55 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:17:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x40012500, 0x0, 0x0) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) [ 1048.163614][ T4912] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=6d.5d [ 1048.167307][T24559] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1048.177671][ T4912] usb 5-1: New USB device strings: Mfr=0, Product=131, SerialNumber=130 16:17:55 executing program 1: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x20, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1048.251274][ T4912] usb 5-1: Product: syz [ 1048.261855][ T4912] usb 5-1: SerialNumber: syz [ 1048.273168][ T4912] usb 5-1: config 0 descriptor?? [ 1048.314543][ T4912] yurex 5-1:0.0: Could not find endpoints 16:17:55 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x10140, 0x0) [ 1048.485934][T19082] usb 5-1: USB disconnect, device number 16 16:17:55 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:17:55 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1048.538850][ T4912] usb 3-1: USB disconnect, device number 71 16:17:55 executing program 4: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000280)='3\x00', 0x2) [ 1048.602965][T17969] usb 2-1: new high-speed USB device number 15 using dummy_hcd 16:17:55 executing program 4: mq_open(&(0x7f00000000c0)='\xee\xca\xd4\b\x85\x04\xdda\x87\xf1\x88\xd1\x0fE\xeb\xff\xa5\xc2\x8f\xfc\x18\x1d\xef\x90p\xd6\xd2\x18\x1f\xdbG\xd4>x\xd8\xc7\xb9\x93#\x91\x02\xf7\x1b\xe0\xae\xdf\xbe\xb8\x97\xa0\xf5\x7f\xf7-\v\xf8\x9b\xda\x14\xed.\xacQ\t\xa9Q\xe4H\x10\x93bi\\_\xc2\xd3W\xb8\xd8\xcb\x96p\xff\x18\'\xae\x8cL\xbaE\xcb\xd3\x9eg\n`\xfc\x18|\x01\x10\x14\x85\xf1.{\xd1\xf0\xa24\x89 \xc7\xc6L\x1a\xdd\xc3\"\x9ej\"\x1a\\l\xbe\xa9C\a\xe5\xe9\x11\xf7U\x86\t\xa0\xb1\xd1G\xf50\xf5P\x11w\xdfs&\xbe\x81=\xde\xeat\xc3\f\x00]\xbd9\xc4`s\xa4{-eqDpx\xa3\x96\x88\x01\xf4w\x86#\x14UM\x89\x05\xa8\xdb\x03\bDH\xce\xe3<\xd3\b\xe8\xa9\x97\xf5\xdd!\xaf', 0x0, 0x0, 0x0) 16:17:55 executing program 4: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9, 0x24, 0x3, 0x0, 0x307, 0x1, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x7f, {0x7, 0x25, 0x1, 0x3, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x4, 0x0, 0x0, "89"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x0, 0xc4, 0x6, "bf"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x3, 0xff, 0x8, {0x7, 0x25, 0x1, 0x0, 0x7f, 0xffff}}}}}}}]}}, 0x0) [ 1048.853889][T17969] usb 2-1: Using ep0 maxpacket: 8 [ 1048.872911][T19081] usb 4-1: new high-speed USB device number 27 using dummy_hcd 16:17:55 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:17:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x40012500, 0x0, 0x0) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) [ 1048.972975][T17969] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1049.052989][ T4912] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1049.092488][T24609] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1049.110233][T18001] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1049.153806][T17969] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1049.168503][T17969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.178620][T17969] usb 2-1: Product: syz [ 1049.191827][T17969] usb 2-1: Manufacturer: syz [ 1049.199679][T17969] usb 2-1: SerialNumber: syz [ 1049.273108][T19081] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1049.285776][T19081] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1049.300284][T19081] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1049.310629][T19081] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.320691][T19081] usb 4-1: config 0 descriptor?? [ 1049.363102][T18001] usb 5-1: Using ep0 maxpacket: 16 [ 1049.433802][ T4912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1049.446392][ T4912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1049.456715][ T4912] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1049.477956][ T4912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1049.483034][T18001] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1049.498976][T17969] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1049.502033][ T4912] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1049.514816][T17969] usb 2-1: USB disconnect, device number 15 [ 1049.529140][T18001] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.537580][ T4912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.561203][ T4912] usb 3-1: config 0 descriptor?? [ 1049.572233][T18001] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1049.743048][T18001] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1049.753317][T18001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.762275][T18001] usb 5-1: Product: syz [ 1049.768503][T18001] usb 5-1: Manufacturer: syz [ 1049.774505][T18001] usb 5-1: SerialNumber: syz [ 1049.833146][ T4912] legousbtower 3-1:0.0: get version request failed: -32 [ 1049.840423][ T4912] legousbtower: probe of 3-1:0.0 failed with error -32 [ 1049.849128][T19081] corsair 0003:1B1C:1B34.0012: failed to start in urb: -90 16:17:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x40012500, 0x0, 0x0) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:56 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) [ 1049.892108][T19081] corsair 0003:1B1C:1B34.0012: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input0 16:17:56 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) [ 1050.051084][ T4912] usb 4-1: USB disconnect, device number 27 [ 1050.103095][T18001] usb 5-1: 0:2 : does not exist [ 1050.122273][T18001] usb 5-1: USB disconnect, device number 17 [ 1050.242931][T19081] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1050.503126][T19081] usb 2-1: Using ep0 maxpacket: 8 [ 1050.642727][T19081] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1050.802908][T17969] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1050.833576][T19081] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1050.843193][T19081] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.852014][T19081] usb 2-1: Product: syz [ 1050.859423][T19081] usb 2-1: Manufacturer: syz [ 1050.864696][T19081] usb 2-1: SerialNumber: syz [ 1051.042841][T17969] usb 5-1: Using ep0 maxpacket: 16 16:17:58 executing program 1: pipe2$9p(0x0, 0x2000) 16:17:58 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) [ 1051.146327][T19081] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1051.163206][T19081] usb 2-1: USB disconnect, device number 16 [ 1051.173612][T17969] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1051.190934][T17969] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.222971][T17969] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1051.392938][T17969] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1051.402707][T17969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.416787][T17969] usb 5-1: Product: syz [ 1051.421132][T17969] usb 5-1: Manufacturer: syz [ 1051.432350][T17969] usb 5-1: SerialNumber: syz 16:17:58 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:17:58 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 16:17:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x0, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:17:58 executing program 1: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x107080) [ 1051.600519][ T4912] usb 3-1: USB disconnect, device number 72 16:17:58 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x50, 0x0, 0x2, [{0x4, &(0x7f0000000440)=@lang_id={0x4}}, {0x4, &(0x7f0000000480)=@lang_id={0x4}}]}) 16:17:58 executing program 0: pipe(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) 16:17:58 executing program 1: clock_gettime(0x6, &(0x7f0000000140)) [ 1051.763134][T17969] usb 5-1: 0:2 : does not exist 16:17:58 executing program 0: pipe(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) [ 1051.791598][T17969] usb 5-1: USB disconnect, device number 18 16:17:58 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r2) r3 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000280)=""/4096, 0x24) 16:17:58 executing program 0: pipe(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) 16:17:58 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1051.912968][T18001] usb 4-1: new high-speed USB device number 28 using dummy_hcd 16:17:58 executing program 1: r0 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) [ 1052.002392][T24763] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1052.045720][T24764] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1052.117983][ T4912] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1052.232982][T17969] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1052.283480][T18001] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.317252][T18001] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.362953][T18001] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1052.372524][T18001] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.390896][T18001] usb 4-1: config 0 descriptor?? [ 1052.473268][T17969] usb 5-1: Using ep0 maxpacket: 8 [ 1052.502924][ T4912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1052.526698][ T4912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1052.546246][ T4912] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1052.568669][ T4912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1052.594041][ T4912] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1052.607337][ T4912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.607416][T17969] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1052.623319][ T4912] usb 3-1: config 0 descriptor?? [ 1052.793153][T17969] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1052.802443][T17969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.823960][T17969] usb 5-1: Product: syz [ 1052.829265][T17969] usb 5-1: SerialNumber: syz [ 1052.874651][T18001] corsair 0003:1B1C:1B34.0013: failed to start in urb: -90 [ 1052.883763][T17969] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 1052.908172][ T4912] legousbtower 3-1:0.0: get version request failed: -32 [ 1052.909120][T18001] corsair 0003:1B1C:1B34.0013: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input0 [ 1052.920100][ T4912] legousbtower: probe of 3-1:0.0 failed with error -32 [ 1053.082560][ T4912] usb 5-1: USB disconnect, device number 19 [ 1053.099180][T19081] usb 4-1: USB disconnect, device number 28 [ 1053.862862][T17969] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1054.103602][T17969] usb 5-1: Using ep0 maxpacket: 8 [ 1054.223627][T17969] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1054.393067][T17969] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1054.402399][T17969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.415933][T17969] usb 5-1: Product: syz [ 1054.420079][T17969] usb 5-1: SerialNumber: syz [ 1054.473740][T17969] cdc_ether: probe of 5-1:1.0 failed with error -22 16:18:01 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:18:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[r3], 0x1}, 0x3) io_uring_enter(r0, 0x2a5a, 0x0, 0x0, 0x0, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsu\x00', 0x204401, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f00000003c0)={0x0, 0x0, 0x10000}) 16:18:01 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x0, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:18:01 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:18:01 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 16:18:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getchain={0x34, 0x66, 0x0, 0x0, 0x0, {}, [{0x8}, {0x8}]}, 0x5b}}, 0x0) [ 1054.683228][ T4912] usb 5-1: USB disconnect, device number 20 [ 1054.721420][T19081] usb 3-1: USB disconnect, device number 73 16:18:01 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x54, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x1, 0x0, &(0x7f0000000540)="a6"}) 16:18:01 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000080)='()\x00') [ 1054.858555][T24852] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 16:18:01 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000019c0)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0}, 0x0) 16:18:01 executing program 4: r0 = socket(0x18, 0x0, 0x1) sendmsg$kcm(r0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[], 0x10e8}, 0x0) 16:18:01 executing program 1: getpeername$l2tp6(0xffffffffffffffff, 0x0, 0x0) 16:18:02 executing program 1: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) [ 1055.043141][T19082] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1055.193033][T19081] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1055.426694][T19082] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1055.439472][T19082] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1055.455855][T19082] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1055.468530][T19082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.481455][T19082] usb 4-1: config 0 descriptor?? [ 1055.603109][T19081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1055.615051][T19081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1055.643036][T19081] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1055.658347][T19081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1055.685991][T19081] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1055.697182][T19081] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.708000][T19081] usb 3-1: config 0 descriptor?? [ 1055.962995][T19081] legousbtower 3-1:0.0: get version request failed: -32 [ 1055.973269][T19081] legousbtower: probe of 3-1:0.0 failed with error -32 [ 1055.994300][T19082] corsair 0003:1B1C:1B34.0014: failed to start in urb: -90 [ 1056.008749][T19082] corsair 0003:1B1C:1B34.0014: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input0 [ 1056.195512][T17969] usb 4-1: USB disconnect, device number 29 16:18:04 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:18:04 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) 16:18:04 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1c) 16:18:04 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:18:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x0, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 16:18:04 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1057.811089][ T34] usb 3-1: USB disconnect, device number 74 16:18:04 executing program 4: syz_open_dev$dri(&(0x7f0000001580)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x0) 16:18:04 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{}]}}}]}}]}}, 0x0) [ 1057.924861][ T35] audit: type=1800 audit(1610036284.904:13598): pid=24919 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16363 res=0 errno=0 [ 1057.963147][T24926] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 16:18:05 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004748ffffffffffbf000000", @ANYRES32=r4, @ANYBLOB="010000595da28b2cb7d89de0f4fa0000010000001800"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8}]}}]}, 0x38}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$packet_int(r6, 0x107, 0x7, &(0x7f0000000200), 0x4) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4}, 0x14) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f8feffff560000042abd7000fedbdfa50728d8406faecccad00000000000000000000000000000001e00000000000000", @ANYRES32=0x0, @ANYBLOB="d539afbc6c84fe53d2eeeb81d6bce315bbe10385afb8112a1b272f085e5bb6bac790c199896ce067c0598a8160256bb12e1db4357db8e6c6cc5615ec7b5f09479da6dffb50117a49967847cfe072c1037fdce3dd8f6b03b98e4af8c1719b9342e6e827693776ef9180d6f8b6a6226c43f8d29c16fd86012a7d72359d674a4819992df758f2222c842ef52c2c3e4b680a1235c0ef4598f1d95b2be4fcdf5a405155e73ab919e1a40f382f19ab5bc0668e877a1ec5d99c89a61563e3e5220d54f16611901baf2943c447e456e4602ec571e65a062c7761a49dce7186fa9192bba0c8"], 0x18}, 0x1, 0x0, 0x0, 0xc040}, 0x24040000) [ 1058.004138][ T35] audit: type=1800 audit(1610036284.984:13599): pid=24928 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16361 res=0 errno=0 [ 1058.107899][T24937] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1058.127855][T24938] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 16:18:05 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6}, [@country_functional={0x6, 0x24, 0x7, 0xf3}]}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000200)=@string={0x2}}, {0x52, &(0x7f00000002c0)=@string={0x52, 0x3, "5c263e131dd9fccfca47aaee080ae87d1088e1d99b8d588cd735e2462d2d7e7423804b23de6dd74fdab84f5e7d225b8769eae17d924cd714a361ea139197b9292ccfd9e93b6be25e480f795648f35dde"}}]}) [ 1058.160447][T12046] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1058.332903][T19082] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1058.352854][ T34] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1058.532850][T19081] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1058.533582][T12046] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.553621][T12046] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1058.566784][T12046] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1058.576329][T12046] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.590778][T12046] usb 4-1: config 0 descriptor?? [ 1058.609786][T19082] usb 5-1: Using ep0 maxpacket: 8 16:18:05 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:18:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) [ 1058.749536][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1058.761273][T19082] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.773209][T19082] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1058.786494][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1058.804066][T19081] usb 2-1: Using ep0 maxpacket: 16 [ 1058.814716][T19082] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1058.826675][T24957] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1058.826922][ T34] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1058.862970][T19082] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1058.882546][T19082] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1058.900230][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1058.915514][ T34] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1058.928871][ T34] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.942072][T19081] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1058.957344][ T34] usb 3-1: config 0 descriptor?? [ 1059.017384][T19081] usb 2-1: language id specifier not provided by device, defaulting to English [ 1059.093983][T19082] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1059.104134][T19082] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.112300][T19082] usb 5-1: Product: syz [ 1059.124934][T19082] usb 5-1: Manufacturer: syz [ 1059.129672][T19082] usb 5-1: SerialNumber: syz [ 1059.133057][T12046] usbhid 4-1:0.0: can't add hid device: -71 [ 1059.141625][T12046] usbhid: probe of 4-1:0.0 failed with error -71 [ 1059.161814][T12046] usb 4-1: USB disconnect, device number 30 [ 1059.176665][T19081] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1059.201762][T19081] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.211712][T19082] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 1059.223639][ T34] legousbtower 3-1:0.0: get version request failed: -121 [ 1059.230794][ T34] legousbtower: probe of 3-1:0.0 failed with error -121 [ 1059.261154][T19081] usb 2-1: Product: syz [ 1059.267831][T19081] usb 2-1: Manufacturer: ♜ጾ쿼䟊ਈ編è è¶›è±˜ã——䛢ⴭ瑾耣â‹æ·žä¿—룚å¹â‰½è›î©©ç·¡ä²’ᓗ憣áªéž‘â¦¹ì¼¬î§™æ¬»å»¢à½ˆå™¹ïˆ [ 1059.283593][T19081] usb 2-1: SerialNumber: syz [ 1059.325252][T19081] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1059.414420][T12046] usb 5-1: USB disconnect, device number 21 [ 1059.527704][T17969] usb 2-1: USB disconnect, device number 17 [ 1060.212858][T19081] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1060.302975][T19082] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1060.462835][T19081] usb 5-1: Using ep0 maxpacket: 8 [ 1060.563036][T19082] usb 2-1: Using ep0 maxpacket: 16 [ 1060.603103][T19081] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.614525][T19081] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1060.625610][T19081] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1060.636674][T19081] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1060.647022][T19081] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1060.693018][T19082] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1060.743677][T19082] usb 2-1: language id specifier not provided by device, defaulting to English [ 1060.843149][T19081] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1060.853462][T19081] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.862098][T19081] usb 5-1: Product: syz [ 1060.869756][T19081] usb 5-1: Manufacturer: syz [ 1060.876634][T19081] usb 5-1: SerialNumber: syz 16:18:07 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:18:07 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:18:07 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:18:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0}, 0x60, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() exit_group(0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x9, 0x2e}, 0xd8) fcntl$setstatus(r1, 0x4, 0x2000) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) mq_open(0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080, 0x3e}, 0x0) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 1060.898626][T19082] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1060.921813][T19082] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.925330][T17969] usb 3-1: USB disconnect, device number 75 [ 1060.932347][T19081] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 1060.989121][T19082] usb 2-1: Product: syz [ 1061.017184][T19082] usb 2-1: Manufacturer: ♜ጾ쿼䟊ਈ編è è¶›è±˜ã——䛢ⴭ瑾耣â‹æ·žä¿—룚å¹â‰½è›î©©ç·¡ä²’ᓗ憣áªéž‘â¦¹ì¼¬î§™æ¬»å»¢à½ˆå™¹ïˆ 16:18:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x86, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, 0x0) munlockall() syz_io_uring_setup(0x0, 0x0, &(0x7f000088a000/0x4000)=nil, &(0x7f00002f8000/0x3000)=nil, &(0x7f0000000600), 0x0) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r1, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x4000000000003be, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000085) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, 0x0, 0x0, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0) [ 1061.057806][T12046] usb 5-1: USB disconnect, device number 22 [ 1061.097318][T19082] usb 2-1: SerialNumber: syz [ 1061.100935][T25026] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1061.153958][T19082] cdc_ether: probe of 2-1:1.0 failed with error -22 16:18:08 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x6}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000200)=@string={0x2}}, {0x52, &(0x7f00000002c0)=@string={0x52, 0x3, "5c263e131dd9fccfca47aaee080ae87d1088e1d99b8d588cd735e2462d2d7e7423804b23de6dd74fdab84f5e7d225b8769eae17d924cd714a361ea139197b9292ccfd9e93b6be25e480f795648f35dde"}}]}) [ 1061.239672][T18001] usb 2-1: USB disconnect, device number 18 [ 1061.293000][T17986] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1061.432968][T17969] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1061.652982][T17986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1061.682915][T17986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 16:18:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x86, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, 0x0) munlockall() syz_io_uring_setup(0x0, 0x0, &(0x7f000088a000/0x4000)=nil, &(0x7f00002f8000/0x3000)=nil, &(0x7f0000000600), 0x0) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r1, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x4000000000003be, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000085) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, 0x0, 0x0, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0) [ 1061.692728][T17986] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1061.702972][T18001] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1061.719657][T17986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.734600][T17986] usb 4-1: config 0 descriptor?? [ 1061.803626][T17969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1061.824049][T17969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 16:18:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0}, 0x60, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() exit_group(0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x9, 0x2e}, 0xd8) fcntl$setstatus(r1, 0x4, 0x2000) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) mq_open(0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080, 0x3e}, 0x0) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 16:18:08 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1061.857272][T17969] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1061.879550][T17969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1061.905380][T17969] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1061.922394][T17969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.968787][T17969] usb 3-1: config 0 descriptor?? [ 1061.983704][T18001] usb 2-1: Using ep0 maxpacket: 16 [ 1062.052221][T25065] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1062.103042][T18001] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1062.172922][T18001] usb 2-1: language id specifier not provided by device, defaulting to English 16:18:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0}, 0x60, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() exit_group(0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x9, 0x2e}, 0xd8) fcntl$setstatus(r1, 0x4, 0x2000) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) mq_open(0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080, 0x3e}, 0x0) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 1062.263057][T17969] legousbtower 3-1:0.0: get version request failed: -121 [ 1062.270964][T17969] legousbtower: probe of 3-1:0.0 failed with error -121 [ 1062.283054][T17986] usbhid 4-1:0.0: can't add hid device: -71 [ 1062.291861][T17986] usbhid: probe of 4-1:0.0 failed with error -71 [ 1062.314031][T17986] usb 4-1: USB disconnect, device number 31 [ 1062.322930][T18001] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1062.339506][T18001] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.348611][T18001] usb 2-1: Product: syz [ 1062.353297][T18001] usb 2-1: Manufacturer: ♜ጾ쿼䟊ਈ編è è¶›è±˜ã——䛢ⴭ瑾耣â‹æ·žä¿—룚å¹â‰½è›î©©ç·¡ä²’ᓗ憣áªéž‘â¦¹ì¼¬î§™æ¬»å»¢à½ˆå™¹ïˆ [ 1062.368066][T18001] usb 2-1: SerialNumber: syz [ 1062.427917][T18001] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1062.630107][ T34] usb 2-1: USB disconnect, device number 19 16:18:09 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:18:09 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1062.909366][T25107] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1063.033124][T17986] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1063.392939][T17986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1063.404312][T17986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1063.422401][T17986] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1063.422845][ T34] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1063.438205][T17986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.451848][T17986] usb 4-1: config 0 descriptor?? [ 1063.713146][ T34] usb 2-1: Using ep0 maxpacket: 16 [ 1063.853026][ T34] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1063.903447][ T34] usb 2-1: language id specifier not provided by device, defaulting to English 16:18:11 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:18:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[r3], 0x1}, 0x3) io_uring_enter(r0, 0x2a5a, 0x0, 0x0, 0x0, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsu\x00', 0x204401, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f00000003c0)={0x2, 0x0, 0x10000}) 16:18:11 executing program 4: syz_open_dev$dri(&(0x7f0000001580)='/dev/dri/card#\x00', 0x0, 0x204000) 16:18:11 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1063.995888][T19081] usb 3-1: USB disconnect, device number 76 [ 1064.012916][T17986] usbhid 4-1:0.0: can't add hid device: -71 [ 1064.018962][T17986] usbhid: probe of 4-1:0.0 failed with error -71 [ 1064.053891][ T34] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1064.064194][T17986] usb 4-1: USB disconnect, device number 32 [ 1064.081283][ T34] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.097454][ T34] usb 2-1: Product: syz 16:18:11 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x501, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) [ 1064.102648][ T34] usb 2-1: Manufacturer: ♜ጾ쿼䟊ਈ編è è¶›è±˜ã——䛢ⴭ瑾耣â‹æ·žä¿—룚å¹â‰½è›î©©ç·¡ä²’ᓗ憣áªéž‘â¦¹ì¼¬î§™æ¬»å»¢à½ˆå™¹ïˆ [ 1064.124640][ T34] usb 2-1: SerialNumber: syz [ 1064.174193][ T34] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1064.195036][T25149] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 16:18:11 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x6}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000200)=@string={0x2}}, {0x52, &(0x7f00000002c0)=@string={0x52, 0x3, "5c263e131dd9fccfca47aaee080ae87d1088e1d99b8d588cd735e2462d2d7e7423804b23de6dd74fdab84f5e7d225b8769eae17d924cd714a361ea139197b9292ccfd9e93b6be25e480f795648f35dde"}}]}) 16:18:11 executing program 5: shmget(0x0, 0x7000, 0x0, &(0x7f0000ff7000/0x7000)=nil) 16:18:11 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 1064.327551][ T34] usb 2-1: USB disconnect, device number 20 16:18:11 executing program 4: r0 = eventfd(0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 16:18:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000340)=0xffffffff, 0x4) 16:18:11 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:18:11 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x2007, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0) [ 1064.623062][T19081] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1064.822996][T19082] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1064.831182][ T34] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1065.043172][T19081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1065.054655][T19081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1065.065231][T19081] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1065.077238][T19081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1065.088863][T19081] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1065.099589][T19081] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.109146][ T34] usb 2-1: Using ep0 maxpacket: 16 [ 1065.120494][T19081] usb 3-1: config 0 descriptor?? [ 1065.223227][T19082] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1065.234475][T19082] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1065.244426][T19082] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1065.253724][T19082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.263052][T19082] usb 4-1: config 0 descriptor?? [ 1065.292977][ T34] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1065.353341][ T34] usb 2-1: language id specifier not provided by device, defaulting to English [ 1065.393019][T19081] legousbtower 3-1:0.0: get version request failed: -121 [ 1065.400294][T19081] legousbtower: probe of 3-1:0.0 failed with error -121 [ 1065.493135][ T34] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1065.502499][ T34] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.510717][ T34] usb 2-1: Product: syz [ 1065.519425][ T34] usb 2-1: Manufacturer: ♜ጾ쿼䟊ਈ編è è¶›è±˜ã——䛢ⴭ瑾耣â‹æ·žä¿—룚å¹â‰½è›î©©ç·¡ä²’ᓗ憣áªéž‘â¦¹ì¼¬î§™æ¬»å»¢à½ˆå™¹ïˆ [ 1065.534016][ T34] usb 2-1: SerialNumber: syz [ 1065.584615][ T34] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1065.799509][T19081] usb 2-1: USB disconnect, device number 21 [ 1065.822950][T19082] usbhid 4-1:0.0: can't add hid device: -71 [ 1065.831091][T19082] usbhid: probe of 4-1:0.0 failed with error -71 [ 1065.847051][T19082] usb 4-1: USB disconnect, device number 33 16:18:14 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000603adb40940601007b12000000010902b801010000000009040000036ce07b0009050b0300000000000905000000000000000200f736d05153d07556ac97f56f288d3f971f366e6b1a0ede3ea9edec3e802120c853e64317f32a898b5a1466e17b040400d4bd87f8468c2ce14362b41b76363b31c9a2cf14c3baf1c931f622cf7628f4fdb1df69bf66e3030e16f0a5c3ac888ba46b632d624a16cbbf54875116ceae867e58bc9da8a34540ac67e366d2eda9cf8aba2cd5d5dd89a8d32d209619456fb5cf56a2aeb0213b9cfc8fb7207f6cc9edffdb3349f9009ce7cc7c318469f91868d0247849460d0e022a6fa6e63c1b76e3be51297f661f927df06ff791afbc38ee88956764a6ea6b940934ffe02453ed201832c36a48cbddcaf89408a973bea4a3299e6963916163459b05848337"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x4, "889e2fab"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:18:14 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xe) 16:18:14 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x2007, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0) 16:18:14 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:18:14 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:18:14 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000001c0)=""/81) [ 1067.162356][T19082] usb 3-1: USB disconnect, device number 77 16:18:14 executing program 5: socketpair$nbd(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={0x0}}, 0x0) 16:18:14 executing program 1: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000100)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) write$P9_ROPEN(r0, &(0x7f0000000140)={0x18}, 0x18) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) creat(&(0x7f0000000240)='./bus\x00', 0x0) [ 1067.310248][T25249] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 16:18:14 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) [ 1067.449939][T25254] loop1: detected capacity change from 264192 to 0 16:18:14 executing program 5: socket(0x0, 0x865aab4808f22b87, 0x0) [ 1067.502883][T19081] usb 4-1: new high-speed USB device number 34 using dummy_hcd 16:18:14 executing program 5: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, r0) 16:18:14 executing program 4: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a00)={{0x1}}) [ 1067.638496][ T35] audit: type=1804 audit(1610036294.614:13600): pid=25254 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir054442357/syzkaller.4llGqe/249/file1/bus" dev="sda1" ino=16375 res=1 errno=0 [ 1067.696999][ T35] audit: type=1804 audit(1610036294.674:13601): pid=25260 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir054442357/syzkaller.4llGqe/249/file1/bus" dev="sda1" ino=16375 res=1 errno=0 [ 1067.723010][T19082] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1067.933019][T19081] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.945116][T19081] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.962873][T19081] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1067.972049][T19081] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.983190][T19081] usb 4-1: config 0 descriptor?? [ 1068.143352][T19082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1068.154503][T19082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1068.171965][T19082] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1068.184580][T19082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1068.197233][T19082] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1068.207913][T19082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.221687][T19082] usb 3-1: config 0 descriptor?? [ 1068.473280][T19082] legousbtower 3-1:0.0: get version request failed: -121 [ 1068.480855][T19082] legousbtower: probe of 3-1:0.0 failed with error -121 [ 1068.512895][T19081] usbhid 4-1:0.0: can't add hid device: -71 [ 1068.519191][T19081] usbhid: probe of 4-1:0.0 failed with error -71 [ 1068.534925][T19081] usb 4-1: USB disconnect, device number 34 16:18:17 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x4, "889e2fab"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:18:17 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, 0x0) 16:18:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000001480)={&(0x7f0000000440), 0xc, &(0x7f0000001440)={&(0x7f00000004c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x288, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x4b}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x17c, 0xe, 0x0, 0x1, [{0xe4, 0x0, "63cad2d764e3c884763c70844350ab988c26ed30fd5fc9ec403ab185cb2b22a58254acc8e2c2f7253081ff78e78e760d42a41397a190a6be9b8e128fb2c924c4085e5bc32239722d0c90c65552c213d74857e62a8a78dc10199c89288d7c24232d4c70b56c05e2f0db3268e5e9d209c0337e7f4a94fe11e245269bfcb399c5e07b55c500e14327b1399b53a1c24070267f72856a23f04114b2f2be75edab9192ad44864429e933530aee1c5c10d9250cdd0fb4a3153984fde131e81f2a59337f3a997f79c2b9590b0a0fb1c4f438acd406f15470f1b363f74d2f02e7ab24d60f"}, {0x91, 0x0, "53bbfc4ac4eec317c3c46e3887af248c050919f12e5b6c7d7435c313a7bdf2d1289756cc6ba8b4c97a5e1b49fa3688ad07c162923b2c018d14036396ced58377d61671c5e8404951de324843e2e7e006e23567a410aaefaa283ab1f3862463aba3d658ca7d103b84d34ce0833d5813665f5d87f101827e1728edccf65f2da502c40e2041f3ee43822bdd83b4ff"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0xef, 0xb, "5dce7e114e49cb385b9b9197f00548fd6e4abe06b8c44e929d8c356091d165f1e9d7c353c94af93a84b263a05593322b2956ed6479515a1b35bc7cb2649bb1fabb48968b91d4d747192a52853426f89fc49d160ac177f341e6515e0a24f992bb0b769aa40afa213f6c57c80f866453ea4e21e90807b15fff94e32259ba245536497bc04ce0519b34e55de030e7f31076a60187ad4d0795da24e1cd7f72f06aca8fd64d9b70fe0f3783100c1e5f2882f6733a07feca4ff09b4e75b529f2818530f2bd4999a518c502f6208225a69def5a3183e74b3514183c196f4826281fd36d97e9b4b0aa5614bcf62fe4"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xb4}]}, @NL80211_ATTR_NAN_FUNC={0x44, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xc0}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x7}, @NL80211_NAN_FUNC_SRF={0x8, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}]}]}, @NL80211_ATTR_NAN_FUNC={0x2bc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x8, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x2ac, 0xd, 0x0, 0x1, [{0x8a, 0x0, "78d4850d0297a6779b55fb7c9c19169065442fae6c7a0244d94096dfb3974d8ef588e8c8362d48d78165106f889e5b95f4b06e6a5ac262d0123bd0da80c246cc8057937eecd88e24b45e033baa548dc56e00eae6085a4d62102e1a494af98cfdf37dee097100ede0459cf3b72b8221553d5107ff3a7453010a6dce6746faf3f207ea65b0c615"}, {0xeb, 0x0, "f605feaae1dec2c4b892770ef06313dad2255749c86607011b3e76379b3bca97a0ed1342bf41cfa825f52fcb600201ecb484cf46dac58c119f5a24aa353f18ce14739204bd26efd02997ab4373d73de0a2c9a46cd8557749c18104702a213eea86d12e1a93189e2cab4cc034c2b9de6a4ad65714d4487a07d8c2fd9df4ce92f5f6913556ad191661bb6e94690b69842cbfd0656410cbeaf7934ec10e3470039784432de9a8a92b44647b9bc8fad13caea7fa197233dd0edac0ef8fe95a6fd7d8e6e442393a0e67a9f28811d221dfc0d49edfb44eae04db58b3f68ebea14d5e4f045251abebfc88"}, {0x28, 0x0, "43178e18b4030cd3bc8922aee82f21676378b06e5614940288cc2bcc32303805fc9b6373"}, {0xbd, 0x0, "1861d2d1d6f29f91e6d64de2d1f0a73964b47cb64430f8bccc2e87e039932c08c137f02b4a9bccbabb3484d4ffb9e45f17defc59c682437ea2d60283c41ee8187a1c1fb4fc5c0dc938a600a11cbd87fc035a44fa10dcf7e9e490e3bbe6a98fe359082cb76602d38b8632b1460b8cb9f442117c6105e70132ee952604bdf649de1ee5261cfd5fed90c31e81dacc7b15d8957e4bbb108ba0c9f41852119ff418f070c943f1bb60684a959e01b771032a919f2339e7589b5f0c06"}, {0x48, 0x0, "c9b10f9474ac8a2f896e76db3c70b8f645b4f33489c42ef9d298e2e33d039ba0dfa073e550973eac02a6a828fea1525fa1c86cf78d09aa92f17a9f488aee185b6182e060"}]}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x5}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}]}, @NL80211_ATTR_NAN_FUNC={0x804, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x24c, 0xd, 0x0, 0x1, [{0xe9, 0x0, "b3635be8695ac9362a9f9d9cd7278a9bcbcff2aceb4a7c8fc26f5853171b8acd08816fffc6db3fd5b12c0a4d71dc137826f86586ee0304758271487832b47b30d1cf2968d0b2022d22e63163d68c73e6361551677e8153b0d686af1d404abca99996c1b470ceee0ebdc841d2c4cea3c04a7f38546b4fde3fcdc080b6c208de9f2340ba87308f9c7590b1f0222229ffe9d80f85d8730ba6fbfbe5f58f2e9ffc9ef38ccef1e2c8714fe241f33bf2f3a39a0cd61c07109febc7d7863c2e429b79678031844888ccb849cb3207a6d4e257cff8bac5927fd647b87c9893ed6151772f6f3051956f"}, {0xce, 0x0, "dde13c792f3d7ed3d7ce404813b73e69eac5a10d0f0572e98648ea2317642219db7429cc7174e9c03617718c09b2664b0701158796e0b05fd17b781716afbffb7454ef7a8fbf5f7e7f281827ae10aba3cb9c33482af549169f9feaa380bbb9b3690544613b5c6a64fb322a07a22d77beb3ec1f0a1047e6f0fab17f5d7dad7759ca2ebf174d3f6eb87eda2f8deda30b1ad50a0b6ace44dd08073457c593d950aab76a9a52eb9a85cdcf9de139bb54db92857ba954db45f464c97a1a85870800e3e7277dc4c5005bead5ad"}, {0x4d, 0x0, "422f83fe10747d6787ebf49c8eeba6d8622706225bed8b06744975b8520faa052c9b513b72e40f41fce55632a2102f1018f8a0f309b3cda7b3f903a5035e37dd62534b5818b59ff675"}, {0x39, 0x0, "3c82a7854b13a012c927bcd073afa2ce1c811d52ca12c74961fe846919125cf83d81a05d1284f80bc0535cd9c0cfbb7f582eaf8f19"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_SRF={0x7c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x64, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5}, @NL80211_NAN_SRF_BF_IDX={0x5}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x524, 0xe, 0x0, 0x1, [{0x39, 0x0, "a050e366de3a0df65b081c3b115b46cc48fc6e355e8eb00027723a6d5f971c9f457bffd7ac558e14f352a2d1bffd9fdb56447bcdb9"}, {0x11, 0x0, "01fa11cbc0fc7a0455c79f5bf5"}, {0xbd, 0x0, "1ec7d55861d99e0b1506a7263fefa7a75975a5dccb16534178d09d463efbb3c276127c282bad3ca95e23667f1e21eccc44255b52f375193fe1aa74f1647522c2cd8cdce0d5cc2195abf0e59ed2178c82b54aa12f3de62cf39a986095a8decd98811f4efa34f6d3aff3269499896b3bdbab58f0ef5d6ea184884e60ee73d07930aff6ddbef196a5a418d3167012aa89563ae75515fc11acad3c91249d5cd90944d44006d06c637e0d439cb29b8f11142c0bdce27899b818f5c9"}, {0x25, 0x0, "64e160a8f310de9deef915651863220155f74ba67a1bacb759dec03fc07adc1815"}, {0xa5, 0x0, "e2c62b98205e20e6aec704d3331cd8551e631dc3b33bfa9b80de9b5edeb3c0a9a332e171f81256805021e842efdde9e19eeffc2d25ea05ef03912f23b5a4baa49f83a8549b57b3791a49610719b71653150c852988da0cacf3418d9a14a4031f1f6c7dfcb063498464bfb3e30e83e5fb32ada491d8a786e53435af4e47339b1d0955ede4b8ad5e7ec30d99ac106f05cebae72fa93c1ed47edced7580acbfd11d44"}, {0xe5, 0x0, "407911f561270aa9029d5555b7ce252f8262fb3bb1eebde1672c94bfd32c768751c48e2ce9edddecbadc3b170ed0f8d4e5d4101738b6fb268ae08e5bfc6c914932b36dc96d53e6c0ddf4f8780dbf0bf479fc9e3bf34793ba377c643b280a23163bb9d05aac3c340973f82d72803e411524f155fa0c8f57efa0b78707e2c8bfb7042f143baec11a9ee4b0293c79144d68db96ed303e5d1347704fef24a0605865872031749fb57b66f92d979ba63d287277b925b84c9585cfba6e256f3889d51e78b43d079e696ca27b14bb3b77ebbf06a32b940c45e721f1103855cbd1c84f2d3f"}, {0xdd, 0x0, "96daf23422b46020f4d58ac2d7bdacaf2ddd4dafc85e0ba0c20149c77321d910ffeec79635f36300b0cd56f2ca2e49a054f383f428cf5ba7e5cd042a79981ab17bff8c2a68b2f90e0871128961e0c18ce0e171d5a1790bd37f3dc4ff74a6577fafd9407dcecde5c2f828912cbb03f98bd8b10b698bb749622f6151b33804f340f6c9a00198021368ea7cbfa1c70fbb414d0fabc80292526e2000d3ce94c4a84cb95455ee523c3badd8691074e4a2d2f93cd2a93fa29278706a318d38d6b879c0ffc92eaf6360da347d9c17ff4708585d2c25c6b8fac724d63a"}, {0x35, 0x0, "d832d8ab322555fd13121cbb5e1310d55c86b44dce6b0f278b6e84ea2ec9c0e00d667bb6d6b852bf6ecd9130d40226603e"}, {0x6d, 0x0, "56dda379ee11c1bcb306d589d40affe1509b5d6b7640f87c7cea77f97f77c7bf64b06475b0297b4ef9855c9baeb48fdd951b4b5e14b5240668e345d7c630bc1ba21d22f866af7b730f8aadf475f8e7c0f4bd71bf45c49cd254aabebe0cb0253c0a1df354c5acfc282e"}, {0xcd, 0x0, "c42a9c02a1f6e55a6c8b88732e0e8a652c79a9a98ea4fc761e8927b999fa66384230170c848feb332d47b0525be4866d6146337ec8ca62b0ed344bb7feae87f16c086c80806973b13d640556b9877616ee4df7c33c7c12cb565a9847f63bdc48c8907699e82b148b5abadf14a16aea2984114fc1ddd5fdf7c0fe99ffc89a3647a514bcace2fd76390fcf3106db0e3b3f73f0e36c46ac3bfc54f7dad5ccb348a4338f0e2939febdcc2fe1223f5f5ff383b31f583ac6d819bb0d38b76262b9851af25470f54c97a13ab3"}]}]}, @NL80211_ATTR_NAN_FUNC={0x10c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x108, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x2004c894}, 0x8) 16:18:17 executing program 4: wait4(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000003c0)) 16:18:17 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20}, 0x20}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:18:17 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1070.237915][T19081] usb 3-1: USB disconnect, device number 78 16:18:17 executing program 4: prctl$PR_SET_MM_MAP(0x4, 0xe, 0x0, 0x0) 16:18:17 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 16:18:17 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) read$ptp(r0, &(0x7f0000000300)=""/107, 0x6b) [ 1070.394984][T25310] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 16:18:17 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 16:18:17 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000001180)={0x1, {0x0, 0x0, 0x0}}, 0x48) 16:18:17 executing program 5: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1070.582844][ T34] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1070.742914][T19081] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1070.963012][ T34] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.974152][ T34] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1070.983977][ T34] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1070.993743][ T34] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.004251][ T34] usb 4-1: config 0 descriptor?? [ 1071.123081][T19081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1071.134709][T19081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1071.156379][T19081] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1071.167408][T19081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1071.179128][T19081] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1071.202921][T19081] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.215721][T19081] usb 3-1: config 0 descriptor?? [ 1071.472954][T19081] legousbtower 3-1:0.0: get version request failed: -121 [ 1071.480337][T19081] legousbtower: probe of 3-1:0.0 failed with error -121 [ 1071.543023][ T34] usbhid 4-1:0.0: can't add hid device: -71 [ 1071.549040][ T34] usbhid: probe of 4-1:0.0 failed with error -71 [ 1071.568506][ T34] usb 4-1: USB disconnect, device number 35 16:18:20 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x4, "889e2fab"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:18:20 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptp0\x00', 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000100)) 16:18:20 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb, 0x10, r0, 0x0) 16:18:20 executing program 1: socket(0x11, 0xa, 0x6) 16:18:20 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20}, 0x20}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:18:20 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1073.327147][ T34] usb 3-1: USB disconnect, device number 79 16:18:20 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000fef000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) 16:18:20 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x6, 0x1fc}) 16:18:20 executing program 4: perf_event_open(&(0x7f0000000280)={0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1073.453390][T25367] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 16:18:20 executing program 1: r0 = semget$private(0x0, 0x2, 0x0) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f00000000c0)=""/4) 16:18:20 executing program 4: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x0, 0x4000) 16:18:20 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10041, 0x0) [ 1073.843003][ T34] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1074.213109][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1074.224622][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1074.243330][ T34] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1074.258354][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1074.273853][ T34] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1074.286961][ T34] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.300510][ T34] usb 3-1: config 0 descriptor?? [ 1074.573005][ T34] legousbtower 3-1:0.0: get version request failed: -121 [ 1074.580472][ T34] legousbtower: probe of 3-1:0.0 failed with error -121 16:18:23 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x6, "889e2fab34b9"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:18:23 executing program 1: socketpair$nbd(0x2, 0x1, 0x14, &(0x7f0000000380)) 16:18:23 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) 16:18:23 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x86000, 0x0) 16:18:23 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 16:18:23 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20}, 0x20}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1076.424625][T19081] usb 3-1: USB disconnect, device number 80 16:18:23 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) 16:18:23 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000280), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 1076.567117][T25421] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 16:18:23 executing program 1: openat$ptp0(0xffffffffffffff9c, 0x0, 0x422cc2, 0x0) 16:18:23 executing program 5: openat$full(0xffffffffffffff9c, 0xfffffffffffffffd, 0x0, 0x0) 16:18:23 executing program 1: socket$inet(0x2, 0x0, 0x80000000) 16:18:23 executing program 4: syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x8, 0x161380) [ 1076.912975][T19081] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1077.283318][T19081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1077.294474][T19081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1077.305983][T19081] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1077.317900][T19081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1077.329092][T19081] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1077.338237][T19081] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.354977][T19081] usb 3-1: config 0 descriptor?? [ 1077.613026][T19081] legousbtower 3-1:0.0: get version request failed: -121 [ 1077.620231][T19081] legousbtower: probe of 3-1:0.0 failed with error -121 16:18:26 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x6, "889e2fab34b9"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:18:26 executing program 5: socketpair$nbd(0x1, 0x5, 0x0, &(0x7f0000000380)) 16:18:26 executing program 4: syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={0x0}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={0x0}}, 0x0) 16:18:26 executing program 1: socketpair(0x0, 0x80000, 0x0, 0x0) 16:18:26 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 16:18:26 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x4}}}]}, 0x34}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1079.513949][T17969] usb 3-1: USB disconnect, device number 81 16:18:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={0x0}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001900)='NLBL_MGMT\x00') 16:18:26 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, 0x0) syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x0, 0x4000) 16:18:26 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1079.659501][T25468] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 16:18:26 executing program 4: r0 = getpgrp(0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xb, 0xffffffffffffffff, 0x0) 16:18:26 executing program 1: setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x80000001) 16:18:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'sit0\x00', 0x0}) [ 1079.992873][T17969] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1080.352941][T17969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1080.365066][T17969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1080.380678][T17969] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1080.395744][T17969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1080.410853][T17969] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1080.423728][T17969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.444254][T17969] usb 3-1: config 0 descriptor?? [ 1080.703061][T17969] legousbtower 3-1:0.0: get version request failed: -121 [ 1080.710582][T17969] legousbtower: probe of 3-1:0.0 failed with error -121 16:18:29 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000603adb40940601007b12000000010902b801010000000009040000036ce07b0009050b0300000000000905000000000000000200f736d05153d07556ac97f56f288d3f971f366e6b1a0ede3ea9edec3e802120c853e64317f32a898b5a1466e17b040400d4bd87f8468c2ce14362b41b76363b31c9a2cf14c3baf1c931f622cf7628f4fdb1df69bf66e3030e16f0a5c3ac888ba46b632d624a16cbbf54875116ceae867e58bc9da8a34540ac67e366d2eda9cf8aba2cd5d5dd89a8d32d209619456fb5cf56a2aeb0213b9cfc8fb7207f6cc9edffdb3349f9009ce7cc7c318469f91868d0247849460d0e022a6fa6e63c1b76e3be51297f661f927df06ff791afbc38ee88956764a6ea6b940934ffe02453ed201832c36a48cbddcaf89408a973bea4a3299e6963916163459b05848337"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x6, "889e2fab34b9"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:18:29 executing program 4: mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xf8cf) 16:18:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000180)={[{@utf8='utf8=1'}]}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r1 = memfd_create(&(0x7f0000000000), 0x0) sendfile(r1, r0, 0x0, 0x100000002) 16:18:29 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x0, 0x0) ioctl$RTC_WIE_ON(r0, 0x700f) 16:18:29 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:18:29 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x4}}}]}, 0x34}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1082.611816][T18001] usb 3-1: USB disconnect, device number 82 [ 1082.671526][T25511] loop1: detected capacity change from 6 to 0 16:18:29 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptp0\x00', 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f00000003c0)) 16:18:29 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000019240), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40003, 0x2, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, 0x0}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r1, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/nf_conntrack\x00') r3 = accept$unix(r2, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000340)=0xffffffffffffffff) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f00000000c0)={0x2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x1, 'none\x00', 0x0, 0x1ff, 0x67}, 0x2c) socketpair(0xf, 0x80002, 0x24a8, &(0x7f0000000480)) preadv(r2, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/92, 0x5c}, {0x0}, {&(0x7f0000002040)=""/4096, 0x1000}, {0x0}, {&(0x7f00000004c0)=""/196, 0xc4}], 0x5, 0x0, 0x0) [ 1082.721964][T25511] FAT-fs (loop1): Directory bread(block 6) failed 16:18:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000180)={[{@utf8='utf8=1'}]}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r1 = memfd_create(&(0x7f0000000000), 0x0) sendfile(r1, r0, 0x0, 0x100000002) [ 1082.789563][T25523] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 16:18:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000180)={[{@utf8='utf8=1'}]}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r1 = memfd_create(&(0x7f0000000000), 0x0) sendfile(r1, r0, 0x0, 0x100000002) [ 1082.948054][T25533] loop4: detected capacity change from 6 to 0 [ 1082.960887][T25533] FAT-fs (loop4): Directory bread(block 6) failed 16:18:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000180)={[{@utf8='utf8=1'}]}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r1 = memfd_create(&(0x7f0000000000), 0x0) sendfile(r1, r0, 0x0, 0x100000002) [ 1082.993301][T25535] loop1: detected capacity change from 6 to 0 [ 1083.048698][T25535] FAT-fs (loop1): Directory bread(block 6) failed 16:18:30 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000019240), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40003, 0x2, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, 0x0}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r1, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/nf_conntrack\x00') r3 = accept$unix(r2, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000340)=0xffffffffffffffff) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f00000000c0)={0x2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x1, 'none\x00', 0x0, 0x1ff, 0x67}, 0x2c) socketpair(0xf, 0x80002, 0x24a8, &(0x7f0000000480)) preadv(r2, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/92, 0x5c}, {0x0}, {&(0x7f0000002040)=""/4096, 0x1000}, {0x0}, {&(0x7f00000004c0)=""/196, 0xc4}], 0x5, 0x0, 0x0) [ 1083.132936][T18001] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1083.263334][T25548] loop4: detected capacity change from 6 to 0 [ 1083.326067][T25548] FAT-fs (loop4): Directory bread(block 6) failed [ 1083.503560][T18001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1083.533511][T18001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1083.575886][T18001] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1083.625477][T18001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1083.652669][T18001] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1083.675698][T18001] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.700195][T18001] usb 3-1: config 0 descriptor?? [ 1083.973045][T18001] legousbtower 3-1:0.0: get version request failed: -121 [ 1083.981522][T18001] legousbtower: probe of 3-1:0.0 failed with error -121 16:18:32 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x7, "889e2fab34b9af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:18:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000180)={[{@utf8='utf8=1'}]}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r1 = memfd_create(&(0x7f0000000000), 0x0) sendfile(r1, r0, 0x0, 0x100000002) 16:18:32 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:18:32 executing program 4: syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000180)={[{@utf8='utf8=1'}]}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r1 = memfd_create(&(0x7f0000000000), 0x0) sendfile(r1, r0, 0x0, 0x100000002) 16:18:32 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000019240), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40003, 0x2, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, 0x0}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r1, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/nf_conntrack\x00') r3 = accept$unix(r2, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000340)=0xffffffffffffffff) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f00000000c0)={0x2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x1, 'none\x00', 0x0, 0x1ff, 0x67}, 0x2c) socketpair(0xf, 0x80002, 0x24a8, &(0x7f0000000480)) preadv(r2, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/92, 0x5c}, {0x0}, {&(0x7f0000002040)=""/4096, 0x1000}, {0x0}, {&(0x7f00000004c0)=""/196, 0xc4}], 0x5, 0x0, 0x0) 16:18:32 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x4}}}]}, 0x34}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1085.732481][T12039] usb 3-1: USB disconnect, device number 83 [ 1085.787386][T25575] loop4: detected capacity change from 6 to 0 [ 1085.799138][T25575] FAT-fs (loop4): Directory bread(block 6) failed [ 1085.830548][T25577] loop1: detected capacity change from 6 to 0 [ 1085.858546][T25584] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1085.874810][T25577] FAT-fs (loop1): Directory bread(block 6) failed 16:18:32 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000019240), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40003, 0x2, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, 0x0}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r1, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/nf_conntrack\x00') r3 = accept$unix(r2, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000340)=0xffffffffffffffff) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f00000000c0)={0x2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x1, 'none\x00', 0x0, 0x1ff, 0x67}, 0x2c) socketpair(0xf, 0x80002, 0x24a8, &(0x7f0000000480)) preadv(r2, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/92, 0x5c}, {0x0}, {&(0x7f0000002040)=""/4096, 0x1000}, {0x0}, {&(0x7f00000004c0)=""/196, 0xc4}], 0x5, 0x0, 0x0) 16:18:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000180)={[{@utf8='utf8=1'}]}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r1 = memfd_create(&(0x7f0000000000), 0x0) sendfile(r1, r0, 0x0, 0x100000002) 16:18:33 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000019240), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40003, 0x2, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, 0x0}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r1, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/nf_conntrack\x00') r3 = accept$unix(r2, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000340)=0xffffffffffffffff) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f00000000c0)={0x2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x1, 'none\x00', 0x0, 0x1ff, 0x67}, 0x2c) socketpair(0xf, 0x80002, 0x24a8, &(0x7f0000000480)) preadv(r2, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/92, 0x5c}, {0x0}, {&(0x7f0000002040)=""/4096, 0x1000}, {0x0}, {&(0x7f00000004c0)=""/196, 0xc4}], 0x5, 0x0, 0x0) 16:18:33 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000019240), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40003, 0x2, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, 0x0}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r1, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/nf_conntrack\x00') r3 = accept$unix(r2, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000340)=0xffffffffffffffff) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f00000000c0)={0x2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x1, 'none\x00', 0x0, 0x1ff, 0x67}, 0x2c) socketpair(0xf, 0x80002, 0x24a8, &(0x7f0000000480)) preadv(r2, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/92, 0x5c}, {0x0}, {&(0x7f0000002040)=""/4096, 0x1000}, {0x0}, {&(0x7f00000004c0)=""/196, 0xc4}], 0x5, 0x0, 0x0) [ 1086.212841][T12039] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1086.234428][T25602] loop1: detected capacity change from 6 to 0 [ 1086.269837][T25602] FAT-fs (loop1): Directory bread(block 6) failed 16:18:33 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:18:33 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000019240), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40003, 0x2, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, 0x0}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r1, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/nf_conntrack\x00') r3 = accept$unix(r2, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000340)=0xffffffffffffffff) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f00000000c0)={0x2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x1, 'none\x00', 0x0, 0x1ff, 0x67}, 0x2c) socketpair(0xf, 0x80002, 0x24a8, &(0x7f0000000480)) preadv(r2, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/92, 0x5c}, {0x0}, {&(0x7f0000002040)=""/4096, 0x1000}, {0x0}, {&(0x7f00000004c0)=""/196, 0xc4}], 0x5, 0x0, 0x0) [ 1086.573426][T12039] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1086.610169][T12039] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1086.669432][T12039] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1086.727521][T12039] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1086.762921][T12039] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1086.772249][T12039] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.800572][T12039] usb 3-1: config 0 descriptor?? [ 1087.073023][T12039] legousbtower 3-1:0.0: get version request failed: -121 [ 1087.080270][T12039] legousbtower: probe of 3-1:0.0 failed with error -121 16:18:35 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000603adb40940601007b12000000010902b801010000000009040000036ce07b0009050b0300000000000905000000000000000200f736d05153d07556ac97f56f288d3f971f366e6b1a0ede3ea9edec3e802120c853e64317f32a898b5a1466e17b040400d4bd87f8468c2ce14362b41b76363b31c9a2cf14c3baf1c931f622cf7628f4fdb1df69bf66e3030e16f0a5c3ac888ba46b632d624a16cbbf54875116ceae867e58bc9da8a34540ac67e366d2eda9cf8aba2cd5d5dd89a8d32d209619456fb5cf56a2aeb0213b9cfc8fb7207f6cc9edffdb3349f9009ce7cc7c318469f91868d0247849460d0e022a6fa6e63c1b76e3be51297f661f927df06ff791afbc38ee88956764a6ea6b940934ffe02453ed201832c36a48cbddcaf89408a973bea4a3299e6963916163459b05848337"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x7, "889e2fab34b9af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:18:35 executing program 1: modify_ldt$write2(0x11, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x10) 16:18:35 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:18:35 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000019240), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40003, 0x2, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, 0x0}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r1, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/nf_conntrack\x00') r3 = accept$unix(r2, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000340)=0xffffffffffffffff) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f00000000c0)={0x2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x1, 'none\x00', 0x0, 0x1ff, 0x67}, 0x2c) socketpair(0xf, 0x80002, 0x24a8, &(0x7f0000000480)) preadv(r2, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/92, 0x5c}, {0x0}, {&(0x7f0000002040)=""/4096, 0x1000}, {0x0}, {&(0x7f00000004c0)=""/196, 0xc4}], 0x5, 0x0, 0x0) 16:18:35 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000019240), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40003, 0x2, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, 0x0}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r1, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/nf_conntrack\x00') r3 = accept$unix(r2, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000340)=0xffffffffffffffff) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f00000000c0)={0x2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x1, 'none\x00', 0x0, 0x1ff, 0x67}, 0x2c) socketpair(0xf, 0x80002, 0x24a8, &(0x7f0000000480)) preadv(r2, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/92, 0x5c}, {0x0}, {&(0x7f0000002040)=""/4096, 0x1000}, {0x0}, {&(0x7f00000004c0)=""/196, 0xc4}], 0x5, 0x0, 0x0) 16:18:35 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1088.828012][T12039] usb 3-1: USB disconnect, device number 84 16:18:35 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:18:36 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000140)=""/174) [ 1089.162946][T17986] usb 4-1: new high-speed USB device number 36 using dummy_hcd 16:18:36 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000019240), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40003, 0x2, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, 0x0}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r1, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/nf_conntrack\x00') r3 = accept$unix(r2, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000340)=0xffffffffffffffff) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f00000000c0)={0x2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x1, 'none\x00', 0x0, 0x1ff, 0x67}, 0x2c) socketpair(0xf, 0x80002, 0x24a8, &(0x7f0000000480)) preadv(r2, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/92, 0x5c}, {0x0}, {&(0x7f0000002040)=""/4096, 0x1000}, {0x0}, {&(0x7f00000004c0)=""/196, 0xc4}], 0x5, 0x0, 0x0) 16:18:36 executing program 1: mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000180), 0x0, 0x0) 16:18:36 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000080)=""/153) 16:18:36 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000280)) [ 1089.352852][T17986] usb 4-1: device descriptor read/64, error 18 [ 1089.359652][T12039] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1089.632917][T17986] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1089.743072][T12039] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1089.754543][T12039] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1089.781784][T12039] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1089.797264][T12039] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1089.812480][T12039] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1089.825815][T17986] usb 4-1: device descriptor read/64, error 18 [ 1089.832060][T12039] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.850659][T12039] usb 3-1: config 0 descriptor?? [ 1089.963098][T17986] usb usb4-port1: attempt power cycle [ 1090.123017][T12039] legousbtower 3-1:0.0: get version request failed: -121 [ 1090.130992][T12039] legousbtower: probe of 3-1:0.0 failed with error -121 [ 1090.672857][T17986] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1090.842961][T17986] usb 4-1: device descriptor read/8, error -61 [ 1091.113023][T17986] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1091.283043][T17986] usb 4-1: device descriptor read/8, error -61 [ 1091.403614][T17986] usb usb4-port1: unable to enumerate USB device 16:18:38 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x7, "889e2fab34b9af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:18:38 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, 0x0) 16:18:38 executing program 1: prctl$PR_SET_MM_MAP(0x35, 0xe, &(0x7f0000000200)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) 16:18:38 executing program 5: r0 = getpgrp(0x0) waitid(0x2, r0, 0x0, 0x2, &(0x7f0000000280)) 16:18:38 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:18:38 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1091.938569][T17986] usb 3-1: USB disconnect, device number 85 16:18:39 executing program 5: request_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='\x00', 0x0) 16:18:39 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x18, r0, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x4}]}, 0x18}}, 0x0) 16:18:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB='O'], 0x1c}}, 0x0) 16:18:39 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/full\x00', 0x0, 0x0) accept$alg(r0, 0x0, 0x0) 16:18:39 executing program 4: r0 = eventfd(0x0) write$eventfd(r0, &(0x7f0000000100), 0x8) 16:18:39 executing program 1: syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0xffffffffffffffff, 0x0) [ 1092.313002][T18001] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1092.422889][T17986] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1092.503073][T18001] usb 4-1: device descriptor read/64, error 18 [ 1092.782993][T18001] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1092.803696][T17986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1092.822805][T17986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1092.832503][T17986] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1092.862087][T17986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1092.877734][T17986] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1092.891165][T17986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.908444][T17986] usb 3-1: config 0 descriptor?? [ 1093.012993][T18001] usb 4-1: device descriptor read/64, error 18 [ 1093.133068][T18001] usb usb4-port1: attempt power cycle [ 1093.173012][T17986] legousbtower 3-1:0.0: get version request failed: -121 [ 1093.180177][T17986] legousbtower: probe of 3-1:0.0 failed with error -121 [ 1093.863014][T18001] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1094.043038][T18001] usb 4-1: device descriptor read/8, error -61 [ 1094.330528][T18001] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1094.513171][T18001] usb 4-1: device descriptor read/8, error -61 [ 1094.633537][T18001] usb usb4-port1: unable to enumerate USB device 16:18:42 executing program 4: request_key(&(0x7f0000000200)='.dead\x00', 0x0, 0x0, 0xfffffffffffffffc) 16:18:42 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) 16:18:42 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:18:42 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:18:42 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:18:42 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1095.036652][T19081] usb 3-1: USB disconnect, device number 86 16:18:42 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:18:42 executing program 1: socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503d03206023e0400a00e00c513f7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 16:18:42 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 16:18:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000004c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x288, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x17c, 0xe, 0x0, 0x1, [{0xe1, 0x0, "63cad2d764e3c884763c70844350ab988c26ed30fd5fc9ec403ab185cb2b22a58254acc8e2c2f7253081ff78e78e760d42a41397a190a6be9b8e128fb2c924c4085e5bc32239722d0c90c65552c213d74857e62a8a78dc10199c89288d7c24232d4c70b56c05e2f0db3268e5e9d209c0337e7f4a94fe11e245269bfcb399c5e07b55c500e14327b1399b53a1c24070267f72856a23f04114b2f2be75edab9192ad44864429e933530aee1c5c10d9250cdd0fb4a3153984fde131e81f2a59337f3a997f79c2b9590b0a0fb1c4f438acd406f15470f1b363f74d2f02e7ab"}, {0x91, 0x0, "53bbfc4ac4eec317c3c46e3887af248c050919f12e5b6c7d7435c313a7bdf2d1289756cc6ba8b4c97a5e1b49fa3688ad07c162923b2c018d14036396ced58377d61671c5e8404951de324843e2e7e006e23567a410aaefaa283ab1f3862463aba3d658ca7d103b84d34ce0833d5813665f5d87f101827e1728edccf65f2da502c40e2041f3ee43822bdd83b4ff"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0xed, 0xb, "5dce7e114e49cb385b9b9197f00548fd6e4abe06b8c44e929d8c356091d165f1e9d7c353c94af93a84b263a05593322b2956ed6479515a1b35bc7cb2649bb1fabb48968b91d4d747192a52853426f89fc49d160ac177f341e6515e0a24f992bb0b769aa40afa213f6c57c80f866453ea4e21e90807b15fff94e32259ba245536497bc04ce0519b34e55de030e7f31076a60187ad4d0795da24e1cd7f72f06aca8fd64d9b70fe0f3783100c1e5f2882f6733a07feca4ff09b4e75b529f2818530f2bd4999a518c502f6208225a69def5a3183e74b3514183c196f4826281fd36d97e9b4b0aa5614bcf6"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x44, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TTL={0x8}, @NL80211_NAN_FUNC_SRF={0x8, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}]}]}, @NL80211_ATTR_NAN_FUNC={0x2bc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x8, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x2ac, 0xd, 0x0, 0x1, [{0x89, 0x0, "78d4850d0297a6779b55fb7c9c19169065442fae6c7a0244d94096dfb3974d8ef588e8c8362d48d78165106f889e5b95f4b06e6a5ac262d0123bd0da80c246cc8057937eecd88e24b45e033baa548dc56e00eae6085a4d62102e1a494af98cfdf37dee097100ede0459cf3b72b8221553d5107ff3a7453010a6dce6746faf3f207ea65b0c6"}, {0xe9, 0x0, "f605feaae1dec2c4b892770ef06313dad2255749c86607011b3e76379b3bca97a0ed1342bf41cfa825f52fcb600201ecb484cf46dac58c119f5a24aa353f18ce14739204bd26efd02997ab4373d73de0a2c9a46cd8557749c18104702a213eea86d12e1a93189e2cab4cc034c2b9de6a4ad65714d4487a07d8c2fd9df4ce92f5f6913556ad191661bb6e94690b69842cbfd0656410cbeaf7934ec10e3470039784432de9a8a92b44647b9bc8fad13caea7fa197233dd0edac0ef8fe95a6fd7d8e6e442393a0e67a9f28811d221dfc0d49edfb44eae04db58b3f68ebea14d5e4f045251abeb"}, {0x25, 0x0, "43178e18b4030cd3bc8922aee82f21676378b06e5614940288cc2bcc32303805fc"}, {0xbd, 0x0, "1861d2d1d6f29f91e6d64de2d1f0a73964b47cb64430f8bccc2e87e039932c08c137f02b4a9bccbabb3484d4ffb9e45f17defc59c682437ea2d60283c41ee8187a1c1fb4fc5c0dc938a600a11cbd87fc035a44fa10dcf7e9e490e3bbe6a98fe359082cb76602d38b8632b1460b8cb9f442117c6105e70132ee952604bdf649de1ee5261cfd5fed90c31e81dacc7b15d8957e4bbb108ba0c9f41852119ff418f070c943f1bb60684a959e01b771032a919f2339e7589b5f0c06"}, {0x45, 0x0, "c9b10f9474ac8a2f896e76db3c70b8f645b4f33489c42ef9d298e2e33d039ba0dfa073e550973eac02a6a828fea1525fa1c86cf78d09aa92f17a9f488aee185b61"}]}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x804, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x24c, 0xd, 0x0, 0x1, [{0xe9, 0x0, "b3635be8695ac9362a9f9d9cd7278a9bcbcff2aceb4a7c8fc26f5853171b8acd08816fffc6db3fd5b12c0a4d71dc137826f86586ee0304758271487832b47b30d1cf2968d0b2022d22e63163d68c73e6361551677e8153b0d686af1d404abca99996c1b470ceee0ebdc841d2c4cea3c04a7f38546b4fde3fcdc080b6c208de9f2340ba87308f9c7590b1f0222229ffe9d80f85d8730ba6fbfbe5f58f2e9ffc9ef38ccef1e2c8714fe241f33bf2f3a39a0cd61c07109febc7d7863c2e429b79678031844888ccb849cb3207a6d4e257cff8bac5927fd647b87c9893ed6151772f6f3051956f"}, {0xcd, 0x0, "dde13c792f3d7ed3d7ce404813b73e69eac5a10d0f0572e98648ea2317642219db7429cc7174e9c03617718c09b2664b0701158796e0b05fd17b781716afbffb7454ef7a8fbf5f7e7f281827ae10aba3cb9c33482af549169f9feaa380bbb9b3690544613b5c6a64fb322a07a22d77beb3ec1f0a1047e6f0fab17f5d7dad7759ca2ebf174d3f6eb87eda2f8deda30b1ad50a0b6ace44dd08073457c593d950aab76a9a52eb9a85cdcf9de139bb54db92857ba954db45f464c97a1a85870800e3e7277dc4c5005bead5"}, {0x4d, 0x0, "422f83fe10747d6787ebf49c8eeba6d8622706225bed8b06744975b8520faa052c9b513b72e40f41fce55632a2102f1018f8a0f309b3cda7b3f903a5035e37dd62534b5818b59ff675"}, {0x39, 0x0, "3c82a7854b13a012c927bcd073afa2ce1c811d52ca12c74961fe846919125cf83d81a05d1284f80bc0535cd9c0cfbb7f582eaf8f19"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_SRF={0x7c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x64, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5}, @NL80211_NAN_SRF_BF_IDX={0x5}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x524, 0xe, 0x0, 0x1, [{0x39, 0x0, "a050e366de3a0df65b081c3b115b46cc48fc6e355e8eb00027723a6d5f971c9f457bffd7ac558e14f352a2d1bffd9fdb56447bcdb9"}, {0x11, 0x0, "01fa11cbc0fc7a0455c79f5bf5"}, {0xbd, 0x0, "1ec7d55861d99e0b1506a7263fefa7a75975a5dccb16534178d09d463efbb3c276127c282bad3ca95e23667f1e21eccc44255b52f375193fe1aa74f1647522c2cd8cdce0d5cc2195abf0e59ed2178c82b54aa12f3de62cf39a986095a8decd98811f4efa34f6d3aff3269499896b3bdbab58f0ef5d6ea184884e60ee73d07930aff6ddbef196a5a418d3167012aa89563ae75515fc11acad3c91249d5cd90944d44006d06c637e0d439cb29b8f11142c0bdce27899b818f5c9"}, {0x25, 0x0, "64e160a8f310de9deef915651863220155f74ba67a1bacb759dec03fc07adc1815"}, {0xa5, 0x0, "e2c62b98205e20e6aec704d3331cd8551e631dc3b33bfa9b80de9b5edeb3c0a9a332e171f81256805021e842efdde9e19eeffc2d25ea05ef03912f23b5a4baa49f83a8549b57b3791a49610719b71653150c852988da0cacf3418d9a14a4031f1f6c7dfcb063498464bfb3e30e83e5fb32ada491d8a786e53435af4e47339b1d0955ede4b8ad5e7ec30d99ac106f05cebae72fa93c1ed47edced7580acbfd11d44"}, {0xe5, 0x0, "407911f561270aa9029d5555b7ce252f8262fb3bb1eebde1672c94bfd32c768751c48e2ce9edddecbadc3b170ed0f8d4e5d4101738b6fb268ae08e5bfc6c914932b36dc96d53e6c0ddf4f8780dbf0bf479fc9e3bf34793ba377c643b280a23163bb9d05aac3c340973f82d72803e411524f155fa0c8f57efa0b78707e2c8bfb7042f143baec11a9ee4b0293c79144d68db96ed303e5d1347704fef24a0605865872031749fb57b66f92d979ba63d287277b925b84c9585cfba6e256f3889d51e78b43d079e696ca27b14bb3b77ebbf06a32b940c45e721f1103855cbd1c84f2d3f"}, {0xdd, 0x0, "96daf23422b46020f4d58ac2d7bdacaf2ddd4dafc85e0ba0c20149c77321d910ffeec79635f36300b0cd56f2ca2e49a054f383f428cf5ba7e5cd042a79981ab17bff8c2a68b2f90e0871128961e0c18ce0e171d5a1790bd37f3dc4ff74a6577fafd9407dcecde5c2f828912cbb03f98bd8b10b698bb749622f6151b33804f340f6c9a00198021368ea7cbfa1c70fbb414d0fabc80292526e2000d3ce94c4a84cb95455ee523c3badd8691074e4a2d2f93cd2a93fa29278706a318d38d6b879c0ffc92eaf6360da347d9c17ff4708585d2c25c6b8fac724d63a"}, {0x35, 0x0, "d832d8ab322555fd13121cbb5e1310d55c86b44dce6b0f278b6e84ea2ec9c0e00d667bb6d6b852bf6ecd9130d40226603e"}, {0x6d, 0x0, "56dda379ee11c1bcb306d589d40affe1509b5d6b7640f87c7cea77f97f77c7bf64b06475b0297b4ef9855c9baeb48fdd951b4b5e14b5240668e345d7c630bc1ba21d22f866af7b730f8aadf475f8e7c0f4bd71bf45c49cd254aabebe0cb0253c0a1df354c5acfc282e"}, {0xcd, 0x0, "c42a9c02a1f6e55a6c8b88732e0e8a652c79a9a98ea4fc761e8927b999fa66384230170c848feb332d47b0525be4866d6146337ec8ca62b0ed344bb7feae87f16c086c80806973b13d640556b9877616ee4df7c33c7c12cb565a9847f63bdc48c8907699e82b148b5abadf14a16aea2984114fc1ddd5fdf7c0fe99ffc89a3647a514bcace2fd76390fcf3106db0e3b3f73f0e36c46ac3bfc54f7dad5ccb348a4338f0e2939febdcc2fe1223f5f5ff383b31f583ac6d819bb0d38b76262b9851af25470f54c97a13ab3"}]}]}, @NL80211_ATTR_NAN_FUNC={0x10c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x108, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}]}, 0xec4}}, 0x0) 16:18:42 executing program 5: request_key(&(0x7f0000000080)='big_key\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 16:18:42 executing program 4: add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 16:18:42 executing program 1: socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503d03206023e0400a00e00c513f7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) [ 1095.388641][T18001] usb 4-1: new high-speed USB device number 44 using dummy_hcd 16:18:42 executing program 4: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) 16:18:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) [ 1095.588086][T19081] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1095.632875][T18001] usb 4-1: device descriptor read/64, error 18 [ 1095.902875][T18001] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1095.963588][T19081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1095.980266][T19081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1096.004986][T19081] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1096.020202][T19081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1096.035275][T19081] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1096.044672][T19081] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.055495][T19081] usb 3-1: config 0 descriptor?? [ 1096.109388][T18001] usb 4-1: device descriptor read/64, error 18 [ 1096.243007][T18001] usb usb4-port1: attempt power cycle [ 1096.313063][T19081] legousbtower 3-1:0.0: LEGO USB Tower firmware version is 52.185 build 65199 [ 1096.333488][T19081] legousbtower 3-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1096.972890][T18001] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1097.173100][T18001] usb 4-1: device descriptor read/8, error -61 [ 1097.452982][T18001] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1097.612954][T25749] usb 3-1: LEGO USB Tower reset control request failed [ 1097.622293][T19081] usb 3-1: USB disconnect, device number 87 [ 1097.630476][T19081] legousbtower 3-1:0.0: LEGO USB Tower #-160 now disconnected [ 1097.642907][T18001] usb 4-1: device descriptor read/8, error -61 [ 1097.773073][T18001] usb usb4-port1: unable to enumerate USB device 16:18:45 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:18:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 16:18:45 executing program 5: perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x0) 16:18:45 executing program 1: socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503d03206023e0400a00e00c513f7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 16:18:45 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:18:45 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:18:45 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 16:18:45 executing program 4: request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0xfffffffffffffffd) 16:18:45 executing program 1: socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503d03206023e0400a00e00c513f7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 16:18:45 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000280), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 16:18:45 executing program 5: getrusage(0xffffffffffffffff, &(0x7f0000000540)) 16:18:45 executing program 1: syz_open_dev$rtc(&(0x7f00000001c0)='/dev/rtc#\x00', 0x5, 0x141) [ 1098.479403][T18001] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1098.553321][T19081] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1098.752997][T19081] usb 4-1: device descriptor read/64, error 18 [ 1098.883175][T18001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1098.894323][T18001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1098.910514][T18001] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1098.926015][T18001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1098.941332][T18001] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1098.953499][T18001] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.969149][T18001] usb 3-1: config 0 descriptor?? [ 1099.023011][T19081] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1099.232886][T19081] usb 4-1: device descriptor read/64, error 18 [ 1099.244620][T18001] legousbtower 3-1:0.0: LEGO USB Tower firmware version is 52.185 build 65199 [ 1099.262069][T18001] legousbtower 3-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1099.353279][T19081] usb usb4-port1: attempt power cycle [ 1100.072886][T19081] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1100.243143][T19081] usb 4-1: device descriptor read/8, error -61 [ 1100.492996][T25815] usb 3-1: LEGO USB Tower reset control request failed [ 1100.505098][T18001] usb 3-1: USB disconnect, device number 88 [ 1100.522322][T18001] legousbtower 3-1:0.0: LEGO USB Tower #-160 now disconnected [ 1100.532957][T19081] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1100.713085][T19081] usb 4-1: device descriptor read/8, error -61 [ 1100.833126][T19081] usb usb4-port1: unable to enumerate USB device 16:18:48 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:18:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000004c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x288, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x17c, 0xe, 0x0, 0x1, [{0xe4, 0x0, "63cad2d764e3c884763c70844350ab988c26ed30fd5fc9ec403ab185cb2b22a58254acc8e2c2f7253081ff78e78e760d42a41397a190a6be9b8e128fb2c924c4085e5bc32239722d0c90c65552c213d74857e62a8a78dc10199c89288d7c24232d4c70b56c05e2f0db3268e5e9d209c0337e7f4a94fe11e245269bfcb399c5e07b55c500e14327b1399b53a1c24070267f72856a23f04114b2f2be75edab9192ad44864429e933530aee1c5c10d9250cdd0fb4a3153984fde131e81f2a59337f3a997f79c2b9590b0a0fb1c4f438acd406f15470f1b363f74d2f02e7ab24d60f"}, {0x91, 0x0, "53bbfc4ac4eec317c3c46e3887af248c050919f12e5b6c7d7435c313a7bdf2d1289756cc6ba8b4c97a5e1b49fa3688ad07c162923b2c018d14036396ced58377d61671c5e8404951de324843e2e7e006e23567a410aaefaa283ab1f3862463aba3d658ca7d103b84d34ce0833d5813665f5d87f101827e1728edccf65f2da502c40e2041f3ee43822bdd83b4ff"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0xef, 0xb, "5dce7e114e49cb385b9b9197f00548fd6e4abe06b8c44e929d8c356091d165f1e9d7c353c94af93a84b263a05593322b2956ed6479515a1b35bc7cb2649bb1fabb48968b91d4d747192a52853426f89fc49d160ac177f341e6515e0a24f992bb0b769aa40afa213f6c57c80f866453ea4e21e90807b15fff94e32259ba245536497bc04ce0519b34e55de030e7f31076a60187ad4d0795da24e1cd7f72f06aca8fd64d9b70fe0f3783100c1e5f2882f6733a07feca4ff09b4e75b529f2818530f2bd4999a518c502f6208225a69def5a3183e74b3514183c196f4826281fd36d97e9b4b0aa5614bcf62fe4"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xb4}]}, @NL80211_ATTR_NAN_FUNC={0x44, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TTL={0x8}, @NL80211_NAN_FUNC_SRF={0x8, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}]}]}, @NL80211_ATTR_NAN_FUNC={0x2bc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x8, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x2ac, 0xd, 0x0, 0x1, [{0x89, 0x0, "78d4850d0297a6779b55fb7c9c19169065442fae6c7a0244d94096dfb3974d8ef588e8c8362d48d78165106f889e5b95f4b06e6a5ac262d0123bd0da80c246cc8057937eecd88e24b45e033baa548dc56e00eae6085a4d62102e1a494af98cfdf37dee097100ede0459cf3b72b8221553d5107ff3a7453010a6dce6746faf3f207ea65b0c6"}, {0xe9, 0x0, "f605feaae1dec2c4b892770ef06313dad2255749c86607011b3e76379b3bca97a0ed1342bf41cfa825f52fcb600201ecb484cf46dac58c119f5a24aa353f18ce14739204bd26efd02997ab4373d73de0a2c9a46cd8557749c18104702a213eea86d12e1a93189e2cab4cc034c2b9de6a4ad65714d4487a07d8c2fd9df4ce92f5f6913556ad191661bb6e94690b69842cbfd0656410cbeaf7934ec10e3470039784432de9a8a92b44647b9bc8fad13caea7fa197233dd0edac0ef8fe95a6fd7d8e6e442393a0e67a9f28811d221dfc0d49edfb44eae04db58b3f68ebea14d5e4f045251abeb"}, {0x25, 0x0, "43178e18b4030cd3bc8922aee82f21676378b06e5614940288cc2bcc32303805fc"}, {0xbd, 0x0, "1861d2d1d6f29f91e6d64de2d1f0a73964b47cb64430f8bccc2e87e039932c08c137f02b4a9bccbabb3484d4ffb9e45f17defc59c682437ea2d60283c41ee8187a1c1fb4fc5c0dc938a600a11cbd87fc035a44fa10dcf7e9e490e3bbe6a98fe359082cb76602d38b8632b1460b8cb9f442117c6105e70132ee952604bdf649de1ee5261cfd5fed90c31e81dacc7b15d8957e4bbb108ba0c9f41852119ff418f070c943f1bb60684a959e01b771032a919f2339e7589b5f0c06"}, {0x45, 0x0, "c9b10f9474ac8a2f896e76db3c70b8f645b4f33489c42ef9d298e2e33d039ba0dfa073e550973eac02a6a828fea1525fa1c86cf78d09aa92f17a9f488aee185b61"}]}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x5}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}]}, @NL80211_ATTR_NAN_FUNC={0x804, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x24c, 0xd, 0x0, 0x1, [{0xe9, 0x0, "b3635be8695ac9362a9f9d9cd7278a9bcbcff2aceb4a7c8fc26f5853171b8acd08816fffc6db3fd5b12c0a4d71dc137826f86586ee0304758271487832b47b30d1cf2968d0b2022d22e63163d68c73e6361551677e8153b0d686af1d404abca99996c1b470ceee0ebdc841d2c4cea3c04a7f38546b4fde3fcdc080b6c208de9f2340ba87308f9c7590b1f0222229ffe9d80f85d8730ba6fbfbe5f58f2e9ffc9ef38ccef1e2c8714fe241f33bf2f3a39a0cd61c07109febc7d7863c2e429b79678031844888ccb849cb3207a6d4e257cff8bac5927fd647b87c9893ed6151772f6f3051956f"}, {0xcd, 0x0, "dde13c792f3d7ed3d7ce404813b73e69eac5a10d0f0572e98648ea2317642219db7429cc7174e9c03617718c09b2664b0701158796e0b05fd17b781716afbffb7454ef7a8fbf5f7e7f281827ae10aba3cb9c33482af549169f9feaa380bbb9b3690544613b5c6a64fb322a07a22d77beb3ec1f0a1047e6f0fab17f5d7dad7759ca2ebf174d3f6eb87eda2f8deda30b1ad50a0b6ace44dd08073457c593d950aab76a9a52eb9a85cdcf9de139bb54db92857ba954db45f464c97a1a85870800e3e7277dc4c5005bead5"}, {0x4d, 0x0, "422f83fe10747d6787ebf49c8eeba6d8622706225bed8b06744975b8520faa052c9b513b72e40f41fce55632a2102f1018f8a0f309b3cda7b3f903a5035e37dd62534b5818b59ff675"}, {0x39, 0x0, "3c82a7854b13a012c927bcd073afa2ce1c811d52ca12c74961fe846919125cf83d81a05d1284f80bc0535cd9c0cfbb7f582eaf8f19"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_SRF={0x7c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x64, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5}, @NL80211_NAN_SRF_BF_IDX={0x5}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x524, 0xe, 0x0, 0x1, [{0x39, 0x0, "a050e366de3a0df65b081c3b115b46cc48fc6e355e8eb00027723a6d5f971c9f457bffd7ac558e14f352a2d1bffd9fdb56447bcdb9"}, {0x11, 0x0, "01fa11cbc0fc7a0455c79f5bf5"}, {0xc0, 0x0, "1ec7d55861d99e0b1506a7263fefa7a75975a5dccb16534178d09d463efbb3c276127c282bad3ca95e23667f1e21eccc44255b52f375193fe1aa74f1647522c2cd8cdce0d5cc2195abf0e59ed2178c82b54aa12f3de62cf39a986095a8decd98811f4efa34f6d3aff3269499896b3bdbab58f0ef5d6ea184884e60ee73d07930aff6ddbef196a5a418d3167012aa89563ae75515fc11acad3c91249d5cd90944d44006d06c637e0d439cb29b8f11142c0bdce27899b818f5c9b49e67"}, {0x25, 0x0, "64e160a8f310de9deef915651863220155f74ba67a1bacb759dec03fc07adc1815"}, {0xa5, 0x0, "e2c62b98205e20e6aec704d3331cd8551e631dc3b33bfa9b80de9b5edeb3c0a9a332e171f81256805021e842efdde9e19eeffc2d25ea05ef03912f23b5a4baa49f83a8549b57b3791a49610719b71653150c852988da0cacf3418d9a14a4031f1f6c7dfcb063498464bfb3e30e83e5fb32ada491d8a786e53435af4e47339b1d0955ede4b8ad5e7ec30d99ac106f05cebae72fa93c1ed47edced7580acbfd11d44"}, {0xe5, 0x0, "407911f561270aa9029d5555b7ce252f8262fb3bb1eebde1672c94bfd32c768751c48e2ce9edddecbadc3b170ed0f8d4e5d4101738b6fb268ae08e5bfc6c914932b36dc96d53e6c0ddf4f8780dbf0bf479fc9e3bf34793ba377c643b280a23163bb9d05aac3c340973f82d72803e411524f155fa0c8f57efa0b78707e2c8bfb7042f143baec11a9ee4b0293c79144d68db96ed303e5d1347704fef24a0605865872031749fb57b66f92d979ba63d287277b925b84c9585cfba6e256f3889d51e78b43d079e696ca27b14bb3b77ebbf06a32b940c45e721f1103855cbd1c84f2d3f"}, {0xdd, 0x0, "96daf23422b46020f4d58ac2d7bdacaf2ddd4dafc85e0ba0c20149c77321d910ffeec79635f36300b0cd56f2ca2e49a054f383f428cf5ba7e5cd042a79981ab17bff8c2a68b2f90e0871128961e0c18ce0e171d5a1790bd37f3dc4ff74a6577fafd9407dcecde5c2f828912cbb03f98bd8b10b698bb749622f6151b33804f340f6c9a00198021368ea7cbfa1c70fbb414d0fabc80292526e2000d3ce94c4a84cb95455ee523c3badd8691074e4a2d2f93cd2a93fa29278706a318d38d6b879c0ffc92eaf6360da347d9c17ff4708585d2c25c6b8fac724d63a"}, {0x35, 0x0, "d832d8ab322555fd13121cbb5e1310d55c86b44dce6b0f278b6e84ea2ec9c0e00d667bb6d6b852bf6ecd9130d40226603e"}, {0x6d, 0x0, "56dda379ee11c1bcb306d589d40affe1509b5d6b7640f87c7cea77f97f77c7bf64b06475b0297b4ef9855c9baeb48fdd951b4b5e14b5240668e345d7c630bc1ba21d22f866af7b730f8aadf475f8e7c0f4bd71bf45c49cd254aabebe0cb0253c0a1df354c5acfc282e"}, {0xcd, 0x0, "c42a9c02a1f6e55a6c8b88732e0e8a652c79a9a98ea4fc761e8927b999fa66384230170c848feb332d47b0525be4866d6146337ec8ca62b0ed344bb7feae87f16c086c80806973b13d640556b9877616ee4df7c33c7c12cb565a9847f63bdc48c8907699e82b148b5abadf14a16aea2984114fc1ddd5fdf7c0fe99ffc89a3647a514bcace2fd76390fcf3106db0e3b3f73f0e36c46ac3bfc54f7dad5ccb348a4338f0e2939febdcc2fe1223f5f5ff383b31f583ac6d819bb0d38b76262b9851af25470f54c97a13ab3"}]}]}, @NL80211_ATTR_NAN_FUNC={0x10c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x108, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "40a77f96f272ee81c2563b61f99ed66f4710b753bdbba58574aa6a7add669d59cdef6192aeeebfd3f7bd60db02229ad949aafd499b5e0b5e9078cde0afa93251dc18c29394863364b0cf39ca6a3e3c92410aa078334d92655bbe75033e7f9467b643b8dc8af02a759e0a67211bafd49cf18a8320c1e7e34e24a2f1a462bace7284b4f096c63b1399dae8ef1893ec0530cec8aca661d85a24155782471a1e7a2ddc3d9c62074a520aab0c518a2c8828dd28b2517b7049dfe3f266d2905f96482716fff80b856727a8d491d3407611e45e29e9cdc5a4f772984a19b3fa7508bedd47223561b513b42a50e0aeca3e3f8db756e43935f361fb7139cba4ece23c54"}]}]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x2004c894}, 0x8) 16:18:48 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) fallocate(r0, 0x3, 0x0, 0x1) 16:18:48 executing program 1: mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000180), 0xc6c, 0x4) 16:18:48 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1101.090735][T25867] loop4: detected capacity change from 264192 to 0 [ 1101.190333][ T35] audit: type=1800 audit(1610036328.164:13602): pid=25867 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="loop4" ino=3 res=0 errno=0 16:18:48 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:18:48 executing program 1: sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4041) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x1, 0x70bd29, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4090}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x4c, 0x0, 0x702, 0x70bd28, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xf749}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000044}, 0x40000) 16:18:48 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x4000, 0x0) 16:18:48 executing program 5: socket$inet(0x2, 0x2, 0x3) 16:18:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, 0x0, &(0x7f0000000200)) 16:18:48 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) fallocate(r0, 0x3, 0x0, 0x1) [ 1101.362984][T18001] usb 3-1: new high-speed USB device number 89 using dummy_hcd 16:18:48 executing program 1: perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8020}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1101.496512][T25898] loop4: detected capacity change from 264192 to 0 [ 1101.599826][ T35] audit: type=1800 audit(1610036328.574:13603): pid=25907 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15796 res=0 errno=0 [ 1101.683043][T12039] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1101.735351][T18001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1101.756259][T18001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1101.775409][T18001] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1101.792931][T18001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1101.809114][T18001] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1101.823531][T18001] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.836985][T18001] usb 3-1: config 0 descriptor?? [ 1101.873094][T12039] usb 4-1: device descriptor read/64, error 18 [ 1102.102906][T18001] legousbtower 3-1:0.0: LEGO USB Tower firmware version is 52.185 build 65199 [ 1102.116453][T18001] legousbtower 3-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1102.142962][T12039] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1102.342926][T12039] usb 4-1: device descriptor read/64, error 18 [ 1102.463030][T12039] usb usb4-port1: attempt power cycle [ 1103.192948][T12039] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1103.362977][T25870] usb 3-1: LEGO USB Tower reset control request failed [ 1103.372545][T17969] usb 3-1: USB disconnect, device number 89 [ 1103.399670][T17969] legousbtower 3-1:0.0: LEGO USB Tower #-160 now disconnected [ 1103.447112][T12039] usb 4-1: device descriptor read/8, error -61 [ 1103.732871][T12039] usb 4-1: new high-speed USB device number 55 using dummy_hcd 16:18:50 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000603adb40940601007b12000000010902b801010000000009040000036ce07b0009050b0300000000000905000000000000000200f736d05153d07556ac97f56f288d3f971f366e6b1a0ede3ea9edec3e802120c853e64317f32a898b5a1466e17b040400d4bd87f8468c2ce14362b41b76363b31c9a2cf14c3baf1c931f622cf7628f4fdb1df69bf66e3030e16f0a5c3ac888ba46b632d624a16cbbf54875116ceae867e58bc9da8a34540ac67e366d2eda9cf8aba2cd5d5dd89a8d32d209619456fb5cf56a2aeb0213b9cfc8fb7207f6cc9edffdb3349f9009ce7cc7c318469f91868d0247849460d0e022a6fa6e63c1b76e3be51297f661f927df06ff791afbc38ee88956764a6ea6b940934ffe02453ed201832c36a48cbddcaf89408a973bea4a3299e6963916163459b05848337"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:18:50 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x30b901, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, 0x0) 16:18:50 executing program 5: socketpair$nbd(0x2, 0x2, 0x0, &(0x7f0000000380)) 16:18:50 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) fallocate(r0, 0x3, 0x0, 0x1) 16:18:50 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1103.903429][T12039] usb 4-1: device descriptor read/8, error -61 [ 1103.973513][T25941] loop4: detected capacity change from 264192 to 0 [ 1104.002111][ T35] audit: type=1800 audit(1610036330.974:13604): pid=25941 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="loop4" ino=4 res=0 errno=0 [ 1104.023511][T12039] usb usb4-port1: unable to enumerate USB device [ 1104.232937][T17986] usb 3-1: new high-speed USB device number 90 using dummy_hcd 16:18:51 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:18:51 executing program 5: r0 = getpgrp(0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, r0, 0xb, 0xffffffffffffffff, 0x0) 16:18:51 executing program 1: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x808, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x420}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:18:51 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) fallocate(r0, 0x3, 0x0, 0x1) 16:18:51 executing program 1: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0) [ 1104.389106][T25961] loop4: detected capacity change from 264192 to 0 16:18:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x0) [ 1104.433075][ T35] audit: type=1800 audit(1610036331.404:13605): pid=25961 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="loop4" ino=5 res=0 errno=0 16:18:51 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1104.602887][T17986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1104.630543][T17986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1104.665794][T17986] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1104.682404][T17986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1104.698120][T17986] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1104.711465][T17986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.734683][T17986] usb 3-1: config 0 descriptor?? [ 1104.803868][T19082] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1105.012947][T19082] usb 4-1: device descriptor read/64, error 18 [ 1105.012995][T17986] legousbtower 3-1:0.0: LEGO USB Tower firmware version is 52.185 build 65199 [ 1105.035193][T17986] legousbtower 3-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1105.292965][T19082] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1105.492868][T19082] usb 4-1: device descriptor read/64, error 18 [ 1105.623217][T19082] usb usb4-port1: attempt power cycle [ 1105.627356][T25988] usb 3-1: LEGO USB Tower reset control request failed [ 1105.642257][T17969] usb 3-1: USB disconnect, device number 90 [ 1105.654830][T17969] legousbtower 3-1:0.0: LEGO USB Tower #-160 now disconnected 16:18:53 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:18:53 executing program 5: socketpair(0x10, 0x80000, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') 16:18:53 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$char_usb(r0, 0x0, 0x0) 16:18:53 executing program 4: syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001900)='NLBL_MGMT\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 16:18:53 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1106.332935][T19082] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1106.502986][T17969] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1106.533794][T19082] usb 4-1: device descriptor read/8, error -61 [ 1106.812907][T19082] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1106.863005][T17969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1106.874043][T17969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1106.890900][T17969] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1106.905099][T17969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1106.919887][T17969] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1106.931852][T17969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.945261][T17969] usb 3-1: config 0 descriptor?? [ 1107.013724][T19082] usb 4-1: device descriptor read/8, error -61 [ 1107.142977][T19082] usb usb4-port1: unable to enumerate USB device [ 1107.202912][T17969] legousbtower 3-1:0.0: LEGO USB Tower firmware version is 52.185 build 65199 [ 1107.220006][T17969] legousbtower 3-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 16:18:54 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:18:54 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptp0\x00', 0x0, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) 16:18:54 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000100)={'syztnl0\x00', 0x0}) 16:18:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001600)={'batadv_slave_1\x00'}) 16:18:54 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:18:54 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:18:54 executing program 4: openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptp0\x00', 0x24100, 0x0) [ 1107.803061][T26056] usb 3-1: LEGO USB Tower reset control request failed [ 1107.812589][T17986] usb 3-1: USB disconnect, device number 91 [ 1107.840905][T17986] legousbtower 3-1:0.0: LEGO USB Tower #-160 now disconnected [ 1107.852842][T19082] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1108.253720][T19082] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.273376][T19082] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1108.292832][T19082] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 16:18:55 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:18:55 executing program 1: accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/full\x00', 0x842, 0x0) 16:18:55 executing program 5: add_key$keyring(&(0x7f0000000180)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 16:18:55 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x6, 0x1fc}) 16:18:55 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1108.302507][T19082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.314334][T19082] usb 4-1: config 0 descriptor?? [ 1108.432228][T26079] blktrace: Concurrent blktraces are not allowed on loop0 [ 1108.713028][T19082] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1109.072902][T19082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1109.084470][T19082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1109.097620][T19082] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1109.108243][T19082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1109.120929][T19082] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1109.130152][T19082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.141513][T19082] usb 3-1: config 0 descriptor?? [ 1109.403021][T19082] legousbtower 3-1:0.0: LEGO USB Tower firmware version is 52.185 build 65199 [ 1109.422811][T19082] legousbtower 3-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1110.003251][T26106] usb 3-1: LEGO USB Tower reset control request failed [ 1110.012396][T19081] usb 3-1: USB disconnect, device number 92 [ 1110.034859][T19081] legousbtower 3-1:0.0: LEGO USB Tower #-160 now disconnected 16:18:57 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:18:57 executing program 5: add_key$fscrypt_v1(&(0x7f00000003c0)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 16:18:57 executing program 4: r0 = socket(0xa, 0x1, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) 16:18:57 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000003c0)='logon\x00', &(0x7f0000000400)={'fscrypt:'}, &(0x7f0000000440)={0x0, "059b3d8dfd358cceae1af449bfd9a0773ddcf7a7e60a7887b4aced630f321d4a86bb9b6c241251614c6f595e41b673887cb69ed859f9f40413a2d9193b33f12f"}, 0x48, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f00000003c0)='logon\x00', &(0x7f0000000400)={'fscrypt:'}, &(0x7f0000000440)={0x0, "059b3d8dfd358cceae1af449bfd9a0773ddcf7a7e60a7887b4aced630f321d4a86bb9b6c241251614c6f595e41b673887cb69ed859f9f40413a2d9193b33f12f"}, 0x48, 0xfffffffffffffffd) keyctl$unlink(0x9, r0, r1) 16:18:57 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:18:57 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) [ 1110.566350][T19081] usb 4-1: USB disconnect, device number 60 16:18:57 executing program 5: add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) 16:18:57 executing program 1: keyctl$revoke(0x3, 0x0) keyctl$link(0x8, 0x0, 0x0) 16:18:57 executing program 4: symlink(&(0x7f0000005f80)='./file0\x00', 0x0) 16:18:57 executing program 5: r0 = socket(0x2, 0x1, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0xfffffec2, 0x0) 16:18:57 executing program 4: openat(0xffffffffffffffff, 0x0, 0x569002, 0x0) 16:18:57 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40202, 0x0) [ 1110.892929][ T34] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1111.072964][T19081] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1111.273538][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1111.290154][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1111.301718][ T34] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1111.314277][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1111.327161][ T34] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1111.337127][ T34] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.346978][ T34] usb 3-1: config 0 descriptor?? [ 1111.433056][T19081] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.443719][T19081] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1111.452917][T19081] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1111.463434][T19081] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.473001][T19081] usb 4-1: config 0 descriptor?? [ 1111.602946][ T34] legousbtower 3-1:0.0: LEGO USB Tower firmware version is 52.185 build 65199 [ 1111.615567][ T34] legousbtower 3-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1112.193008][T26174] usb 3-1: LEGO USB Tower reset control request failed [ 1112.201496][T12039] usb 3-1: USB disconnect, device number 93 [ 1112.210218][T12039] legousbtower 3-1:0.0: LEGO USB Tower #-160 now disconnected 16:19:00 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:19:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0xfda, 0x0, 0x406}, 0xc) 16:19:00 executing program 4: r0 = socket(0xa, 0x3, 0x4) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={0x0}}, 0x20000001) 16:19:00 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f00000003c0)='logon\x00', &(0x7f0000000400)={'fscrypt:'}, &(0x7f0000000440)={0x0, "059b3d8dfd358cceae1af449bfd9a0773ddcf7a7e60a7887b4aced630f321d4a86bb9b6c241251614c6f595e41b673887cb69ed859f9f40413a2d9193b33f12f"}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0) 16:19:00 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:19:00 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) [ 1113.670550][T19081] usb 4-1: USB disconnect, device number 61 16:19:00 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000c40)='./file0\x00', 0x0) open$dir(&(0x7f0000000cc0)='./file0\x00', 0x80000, 0x0) 16:19:00 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/autofs\x00', 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r0, 0x0, 0x0) 16:19:00 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000480)={'fscrypt:'}, &(0x7f0000000080)={0x0, "57268985a54eda81e08bfe5d5c63a76acd229d93d44c8b336e3eed2c9abddf3174bb2d1f5274040906c6f9e28c068496ec453db760fff823dc2431a215cf6bfb"}, 0x48, 0xfffffffffffffffe) 16:19:00 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2043, 0x0) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) 16:19:00 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 16:19:00 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x508, 0x4a8, 0x180, 0xffffffff, 0x258, 0x180, 0x598, 0x598, 0xffffffff, 0x598, 0x598, 0x5, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @dev, @remote}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@local, @gre_key, @icmp_id}}}, {{@ipv6={@ipv4={[], [], @loopback}, @mcast1, [], [], 'bond_slave_0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ipv6={@mcast1, @mcast1, [], [], 'netpci0\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv6=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@remote, @ipv4=@remote, @icmp_id, @icmp_id}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) [ 1114.032853][ T34] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1114.172966][T19081] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1114.403391][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1114.419394][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1114.431309][ T34] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1114.443987][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1114.455295][ T34] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1114.465853][ T34] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.475786][ T34] usb 3-1: config 0 descriptor?? [ 1114.543458][T19081] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1114.554336][T19081] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1114.565148][T19081] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1114.574754][T19081] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.584822][T19081] usb 4-1: config 0 descriptor?? [ 1114.733049][ T34] legousbtower 3-1:0.0: LEGO USB Tower firmware version is 52.185 build 65199 [ 1114.744025][ T34] legousbtower 3-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1115.323368][T26242] usb 3-1: LEGO USB Tower reset control request failed [ 1115.332052][ T34] usb 3-1: USB disconnect, device number 94 [ 1115.340521][ T34] legousbtower 3-1:0.0: LEGO USB Tower #-160 now disconnected 16:19:03 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:19:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:19:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0}}, 0x800) 16:19:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 16:19:03 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:19:03 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) [ 1116.756556][ T34] usb 4-1: USB disconnect, device number 62 16:19:03 executing program 1: ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0) 16:19:03 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f00000002c0)='.log\x00', 0x0, 0x0) 16:19:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20040800) 16:19:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x34}}, 0x10) 16:19:04 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/autofs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 16:19:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1117.102884][T19081] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1117.273322][ T34] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1117.483147][T19081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1117.494462][T19081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1117.504284][T19081] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1117.515026][T19081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1117.526062][T19081] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1117.535965][T19081] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.545943][T19081] usb 3-1: config 0 descriptor?? [ 1117.633081][ T34] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.645264][ T34] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1117.659733][ T34] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1117.682283][ T34] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.714244][ T34] usb 4-1: config 0 descriptor?? [ 1117.754821][ T34] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1117.813073][T19081] legousbtower 3-1:0.0: LEGO USB Tower firmware version is 52.185 build 65199 [ 1117.829935][T19081] legousbtower 3-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1118.402897][T26309] usb 3-1: LEGO USB Tower reset control request failed [ 1118.411318][T19081] usb 3-1: USB disconnect, device number 95 [ 1118.419399][T19081] legousbtower 3-1:0.0: LEGO USB Tower #-160 now disconnected 16:19:06 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:19:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20000000) 16:19:06 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/if_inet6\x00') ioctl$CHAR_RAW_DISCARD(r0, 0x1277, 0x0) 16:19:06 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000000c0)=""/156) 16:19:06 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:19:06 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000603adb40940601007b12000000010902b801010000000009040000036ce07b0009050b0300000000000905000000000000000200f736d05153d07556ac97f56f288d3f971f366e6b1a0ede3ea9edec3e802120c853e64317f32a898b5a1466e17b040400d4bd87f8468c2ce14362b41b76363b31c9a2cf14c3baf1c931f622cf7628f4fdb1df69bf66e3030e16f0a5c3ac888ba46b632d624a16cbbf54875116ceae867e58bc9da8a34540ac67e366d2eda9cf8aba2cd5d5dd89a8d32d209619456fb5cf56a2aeb0213b9cfc8fb7207f6cc9edffdb3349f9009ce7cc7c318469f91868d0247849460d0e022a6fa6e63c1b76e3be51297f661f927df06ff791afbc38ee88956764a6ea6b940934ffe02453ed201832c36a48cbddcaf89408a973bea4a3299e6963916163459b05848337"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) [ 1119.847295][ T34] usb 4-1: USB disconnect, device number 63 16:19:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x40040d4) 16:19:06 executing program 1: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) 16:19:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x4) [ 1119.994065][T26341] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 16:19:07 executing program 4: syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x0, 0x2) 16:19:07 executing program 1: msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000001840)=""/88) 16:19:07 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/autofs\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r0, 0x0, 0x0) [ 1120.182916][T19081] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1120.302831][ T34] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1120.563629][T19081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1120.576031][T19081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1120.587464][T19081] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1120.598925][T19081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1120.610500][T19081] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1120.619643][T19081] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.636077][T19081] usb 3-1: config 0 descriptor?? [ 1120.667505][ T34] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.679449][ T34] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1120.700897][ T34] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1120.710305][ T34] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.722546][ T34] usb 4-1: config 0 descriptor?? [ 1120.774740][ T34] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1120.892925][T19081] legousbtower 3-1:0.0: LEGO USB Tower firmware version is 52.185 build 65199 [ 1120.912566][T19081] legousbtower 3-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1121.483028][T26381] usb 3-1: LEGO USB Tower reset control request failed [ 1121.688592][T17986] usb 3-1: USB disconnect, device number 96 [ 1121.697731][T17986] legousbtower 3-1:0.0: LEGO USB Tower #-160 now disconnected 16:19:09 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:19:09 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x0, 0x0, 0xe5e, 0x0, 0x1}, 0x40) 16:19:09 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 16:19:09 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000013140)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0xb0, &(0x7f0000000400)=""/176, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:19:09 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:19:09 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) [ 1122.948568][T19081] usb 4-1: USB disconnect, device number 64 16:19:10 executing program 4: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) 16:19:10 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x1, &(0x7f0000000300)=@raw=[@exit], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:19:10 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$sock(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000013c0)="dc", 0x1}], 0x1}, 0x0) [ 1123.105502][T26414] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 16:19:10 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) 16:19:10 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000004080)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000004140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x7, 0xffffffffffffffff, 0x0) 16:19:10 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x12, 0x9, 0x0, 0x7d}, 0x40) [ 1123.293045][ T34] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1123.463046][T19081] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1123.662889][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1123.674318][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1123.690154][ T34] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1123.704135][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1123.717806][ T34] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1123.730202][ T34] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.742694][ T34] usb 3-1: config 0 descriptor?? [ 1123.823687][T19081] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.834408][T19081] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1123.854270][T19081] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1123.867477][T19081] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.894420][T19081] usb 4-1: config 0 descriptor?? [ 1123.934362][T19081] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1124.013001][ T34] legousbtower 3-1:0.0: LEGO USB Tower firmware version is 52.185 build 65199 [ 1124.036965][ T34] legousbtower 3-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1124.603160][T26456] usb 3-1: LEGO USB Tower reset control request failed [ 1124.809033][T12039] usb 3-1: USB disconnect, device number 97 [ 1124.831350][T12039] legousbtower 3-1:0.0: LEGO USB Tower #-160 now disconnected 16:19:13 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:19:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000580000005800000005000000000000000000000300000000050000000300000002000000faffffff0000000a"], &(0x7f0000000080)=""/4096, 0x75, 0x1000, 0x1}, 0x20) 16:19:13 executing program 5: socket$kcm(0xa, 0x2, 0x11) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffeffffffff, 0x6}, 0x62, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x2, 0x1, 0x2, 0x6, 0x0, 0xffffffff, 0x44500, 0xb, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x4, 0x8}, 0x11006, 0x0, 0x1000, 0x7, 0x3f6, 0xa, 0x80}, 0x0, 0x5, r0, 0x1) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='net_prio.prioidx\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="2d637075202b7069ebb30400dfcffeb6493eee9a557f55a0fceb782d618c2bab0f4400df590530776023f6ae06dcf702538c53bc449c6d00000000000400335a1b4871833e5fb49c00000000000000993a0294feb33a86013177f8c6babed473d80945227841da19b76943ad9a6dde1bae0731a096bd018b2a3800000000000000f27a804ddd0b24a5265e0a18b1ef6b76cc09c02a83319f5be02acbd10dea2f68ee8fa4deae38632eb7bc2f4d0e243d715d00"/189], 0x17) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(r1, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x8, 0x0, 0x36, 0x5, 0x0, 0x4, 0xc05, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0xa}, 0x2, 0x1ff, 0x20, 0x5, 0x1ff, 0x5d9, 0x101}, r3, 0x4, r0, 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x3, 0x4, 0x6, 0x6, 0x0, 0x1, 0x91800, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x312b, 0x24cbbc399fbc85ab, @perf_config_ext={0xca9a, 0x20}, 0x2000, 0x4, 0x4, 0x7, 0x4, 0x96, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8042f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000480), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open$cgroup(&(0x7f0000000380)={0x4, 0x70, 0x81, 0x6, 0x1c, 0x1, 0x0, 0xd6, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfbc, 0x2, @perf_bp={0x0, 0xc}, 0x14021, 0x40, 0xfffffffa, 0x5, 0x8001, 0xfff, 0xf001}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xb) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0xc0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x1}, 0x0, 0x0, &(0x7f00000004c0)={0x5, 0x2, 0x9, 0x200}, &(0x7f0000000500)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x200000000000008}}, 0x10) close(r4) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8953, &(0x7f0000000040)=0x2) 16:19:13 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:19:13 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x200}, 0x40) 16:19:13 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) [ 1126.046073][ T34] usb 4-1: USB disconnect, device number 65 16:19:13 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:19:13 executing program 4: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="df0c40e04495d728810bdb462fee3272c86e79f2f71fde88c0a4cd91eb29d4d4b3efd47309cb4b8e674fe47ba8a4ac91", 0x30}, {&(0x7f0000000780)="5234ba275f731ddc764238", 0xb}], 0x2}, 0x0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/58, 0x3a}], 0x1}, 0x40000100) [ 1126.205191][T26489] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 16:19:13 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000980)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0xdd90efec22bfc43c, 0x3, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000d00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e80)={0x0, 0xd}, 0x10}, 0x78) 16:19:13 executing program 5: socket$kcm(0xa, 0x2, 0x11) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffeffffffff, 0x6}, 0x62, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x2, 0x1, 0x2, 0x6, 0x0, 0xffffffff, 0x44500, 0xb, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x4, 0x8}, 0x11006, 0x0, 0x1000, 0x7, 0x3f6, 0xa, 0x80}, 0x0, 0x5, r0, 0x1) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='net_prio.prioidx\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="2d637075202b7069ebb30400dfcffeb6493eee9a557f55a0fceb782d618c2bab0f4400df590530776023f6ae06dcf702538c53bc449c6d00000000000400335a1b4871833e5fb49c00000000000000993a0294feb33a86013177f8c6babed473d80945227841da19b76943ad9a6dde1bae0731a096bd018b2a3800000000000000f27a804ddd0b24a5265e0a18b1ef6b76cc09c02a83319f5be02acbd10dea2f68ee8fa4deae38632eb7bc2f4d0e243d715d00"/189], 0x17) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(r1, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x8, 0x0, 0x36, 0x5, 0x0, 0x4, 0xc05, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0xa}, 0x2, 0x1ff, 0x20, 0x5, 0x1ff, 0x5d9, 0x101}, r3, 0x4, r0, 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x3, 0x4, 0x6, 0x6, 0x0, 0x1, 0x91800, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x312b, 0x24cbbc399fbc85ab, @perf_config_ext={0xca9a, 0x20}, 0x2000, 0x4, 0x4, 0x7, 0x4, 0x96, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8042f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000480), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open$cgroup(&(0x7f0000000380)={0x4, 0x70, 0x81, 0x6, 0x1c, 0x1, 0x0, 0xd6, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfbc, 0x2, @perf_bp={0x0, 0xc}, 0x14021, 0x40, 0xfffffffa, 0x5, 0x8001, 0xfff, 0xf001}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xb) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0xc0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x1}, 0x0, 0x0, &(0x7f00000004c0)={0x5, 0x2, 0x9, 0x200}, &(0x7f0000000500)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x200000000000008}}, 0x10) close(r4) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8953, &(0x7f0000000040)=0x2) 16:19:13 executing program 1: socket$kcm(0xa, 0x2, 0x11) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffeffffffff, 0x6}, 0x62, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x2, 0x1, 0x2, 0x6, 0x0, 0xffffffff, 0x44500, 0xb, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x4, 0x8}, 0x11006, 0x0, 0x1000, 0x7, 0x3f6, 0xa, 0x80}, 0x0, 0x5, r0, 0x1) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='net_prio.prioidx\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="2d637075202b7069ebb30400dfcffeb6493eee9a557f55a0fceb782d618c2bab0f4400df590530776023f6ae06dcf702538c53bc449c6d00000000000400335a1b4871833e5fb49c00000000000000993a0294feb33a86013177f8c6babed473d80945227841da19b76943ad9a6dde1bae0731a096bd018b2a3800000000000000f27a804ddd0b24a5265e0a18b1ef6b76cc09c02a83319f5be02acbd10dea2f68ee8fa4deae38632eb7bc2f4d0e243d715d00"/189], 0x17) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(r1, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x8, 0x0, 0x36, 0x5, 0x0, 0x4, 0xc05, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0xa}, 0x2, 0x1ff, 0x20, 0x5, 0x1ff, 0x5d9, 0x101}, r3, 0x4, r0, 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x3, 0x4, 0x6, 0x6, 0x0, 0x1, 0x91800, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x312b, 0x24cbbc399fbc85ab, @perf_config_ext={0xca9a, 0x20}, 0x2000, 0x4, 0x4, 0x7, 0x4, 0x96, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8042f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000480), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open$cgroup(&(0x7f0000000380)={0x4, 0x70, 0x81, 0x6, 0x1c, 0x1, 0x0, 0xd6, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfbc, 0x2, @perf_bp={0x0, 0xc}, 0x14021, 0x40, 0xfffffffa, 0x5, 0x8001, 0xfff, 0xf001}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xb) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0xc0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x1}, 0x0, 0x0, &(0x7f00000004c0)={0x5, 0x2, 0x9, 0x200}, &(0x7f0000000500)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x200000000000008}}, 0x10) close(r4) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8953, &(0x7f0000000040)=0x2) 16:19:13 executing program 4: socket$kcm(0xa, 0x2, 0x11) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffeffffffff, 0x6}, 0x62, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x2, 0x1, 0x2, 0x6, 0x0, 0xffffffff, 0x44500, 0xb, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x4, 0x8}, 0x11006, 0x0, 0x1000, 0x7, 0x3f6, 0xa, 0x80}, 0x0, 0x5, r0, 0x1) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='net_prio.prioidx\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="2d637075202b7069ebb30400dfcffeb6493eee9a557f55a0fceb782d618c2bab0f4400df590530776023f6ae06dcf702538c53bc449c6d00000000000400335a1b4871833e5fb49c00000000000000993a0294feb33a86013177f8c6babed473d80945227841da19b76943ad9a6dde1bae0731a096bd018b2a3800000000000000f27a804ddd0b24a5265e0a18b1ef6b76cc09c02a83319f5be02acbd10dea2f68ee8fa4deae38632eb7bc2f4d0e243d715d00"/189], 0x17) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(r1, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x8, 0x0, 0x36, 0x5, 0x0, 0x4, 0xc05, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0xa}, 0x2, 0x1ff, 0x20, 0x5, 0x1ff, 0x5d9, 0x101}, r3, 0x4, r0, 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x3, 0x4, 0x6, 0x6, 0x0, 0x1, 0x91800, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x312b, 0x24cbbc399fbc85ab, @perf_config_ext={0xca9a, 0x20}, 0x2000, 0x4, 0x4, 0x7, 0x4, 0x96, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8042f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000480), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open$cgroup(&(0x7f0000000380)={0x4, 0x70, 0x81, 0x6, 0x1c, 0x1, 0x0, 0xd6, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfbc, 0x2, @perf_bp={0x0, 0xc}, 0x14021, 0x40, 0xfffffffa, 0x5, 0x8001, 0xfff, 0xf001}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xb) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0xc0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x1}, 0x0, 0x0, &(0x7f00000004c0)={0x5, 0x2, 0x9, 0x200}, &(0x7f0000000500)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x200000000000008}}, 0x10) close(r4) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8953, &(0x7f0000000040)=0x2) [ 1126.421065][T12039] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1126.532864][ T34] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1126.803039][T12039] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1126.814082][T12039] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1126.831614][T12039] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1126.846738][T12039] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1126.860846][T12039] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1126.872971][T12039] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.882335][T12039] usb 3-1: config 0 descriptor?? [ 1126.893535][ T34] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.912839][ T34] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1126.935399][ T34] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1126.951899][ T34] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.965836][ T34] usb 4-1: config 0 descriptor?? [ 1127.004779][ T34] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1127.143008][T12039] legousbtower 3-1:0.0: LEGO USB Tower firmware version is 52.185 build 65199 [ 1127.160234][T12039] legousbtower 3-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1127.733663][T26529] usb 3-1: LEGO USB Tower reset control request failed [ 1127.935280][ T34] usb 3-1: USB disconnect, device number 98 [ 1127.950895][ T34] legousbtower 3-1:0.0: LEGO USB Tower #-160 now disconnected 16:19:16 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:19:16 executing program 5: perf_event_open$cgroup(&(0x7f0000000300)={0x7, 0x70, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:19:16 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x5f, 0x61, 0x2e]}}, &(0x7f00000002c0)=""/143, 0x2e, 0x8f, 0x1}, 0x20) 16:19:16 executing program 4: perf_event_open(&(0x7f0000004140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:19:16 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000603adb40940601007b12000000010902b801010000000009040000036ce07b0009050b0300000000000905000000000000000200f736d05153d07556ac97f56f288d3f971f366e6b1a0ede3ea9edec3e802120c853e64317f32a898b5a1466e17b040400d4bd87f8468c2ce14362b41b76363b31c9a2cf14c3baf1c931f622cf7628f4fdb1df69bf66e3030e16f0a5c3ac888ba46b632d624a16cbbf54875116ceae867e58bc9da8a34540ac67e366d2eda9cf8aba2cd5d5dd89a8d32d209619456fb5cf56a2aeb0213b9cfc8fb7207f6cc9edffdb3349f9009ce7cc7c318469f91868d0247849460d0e022a6fa6e63c1b76e3be51297f661f927df06ff791afbc38ee88956764a6ea6b940934ffe02453ed201832c36a48cbddcaf89408a973bea4a3299e6963916163459b05848337"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x2, "d976"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) 16:19:16 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1129.137561][T12039] usb 4-1: USB disconnect, device number 66 16:19:16 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0xa5, &(0x7f0000000100)=""/165, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:19:16 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000013140)={0x18, 0x7, &(0x7f0000000000)=@framed={{}, [@alu={0x0, 0x1, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map]}, &(0x7f0000000100)='GPL\x00', 0x6, 0xb0, &(0x7f0000000400)=""/176, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:19:16 executing program 4: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000001980)) [ 1129.275929][T26561] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 16:19:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}}, 0x80, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2}, 0x0) 16:19:16 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x20000110, &(0x7f0000000000)=@framed={{}, [@ldst]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xa5, &(0x7f0000000100)=""/165, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:19:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f00000002c0)=""/143, 0x2a, 0x8f, 0x1}, 0x20) [ 1129.509030][T17969] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1129.689779][T12039] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1129.923045][T17969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1129.934785][T17969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1129.950511][T17969] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1129.962537][T17969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1129.975609][T17969] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1129.986325][T17969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.000569][T17969] usb 3-1: config 0 descriptor?? [ 1130.083608][T12039] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.099799][T12039] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1130.118942][T12039] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1130.129440][T12039] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.147226][T12039] usb 4-1: config 0 descriptor?? [ 1130.205074][T12039] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1130.253061][T17969] legousbtower 3-1:0.0: LEGO USB Tower firmware version is 52.185 build 65199 [ 1130.280612][T17969] legousbtower 3-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1130.842991][T26603] usb 3-1: LEGO USB Tower reset control request failed [ 1131.048350][T17969] usb 3-1: USB disconnect, device number 99 [ 1131.062055][T17969] legousbtower 3-1:0.0: LEGO USB Tower #-160 now disconnected 16:19:19 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:19:19 executing program 5: sigaltstack(&(0x7f0000ffc000/0x1000)=nil, 0x0) 16:19:19 executing program 4: pselect6(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000280)={0x0}) 16:19:19 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:19:19 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200040, 0x0) 16:19:19 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x2, "d976"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) [ 1132.226272][T19082] usb 4-1: USB disconnect, device number 67 16:19:19 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x430a02, 0x0) 16:19:19 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) epoll_pwait(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 16:19:19 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r0, 0xf, &(0x7f0000000080)) [ 1132.392600][T26634] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 16:19:19 executing program 1: semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000100)=""/4096) 16:19:19 executing program 5: pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, 0x0) 16:19:19 executing program 4: r0 = semget$private(0x0, 0x1, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/131) [ 1132.593011][T17969] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1132.742878][T19082] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1133.012948][T17969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1133.024135][T17969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1133.042476][T17969] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1133.057854][T17969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1133.071712][T17969] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1133.083934][T17969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.100502][T17969] usb 3-1: config 0 descriptor?? [ 1133.103286][T19082] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.126523][T19082] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1133.140676][T19082] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1133.152144][T19082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.192328][T19082] usb 4-1: config 0 descriptor?? [ 1133.244780][T19082] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1133.373060][T17969] legousbtower 3-1:0.0: LEGO USB Tower firmware version is 52.185 build 65199 [ 1133.399061][T17969] legousbtower 3-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1133.962994][T26670] usb 3-1: LEGO USB Tower reset control request failed [ 1134.164103][T19082] usb 3-1: USB disconnect, device number 100 [ 1134.172196][T19082] legousbtower 3-1:0.0: LEGO USB Tower #-160 now disconnected 16:19:22 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:19:22 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000540)='/dev/full\x00', 0x0, 0x0) sendmsg$sock(r0, 0x0, 0x0) 16:19:22 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000540)='/dev/full\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 16:19:22 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000540)='/dev/full\x00', 0x0, 0x0) dup3(r1, r0, 0x80000) 16:19:22 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:19:22 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000603adb40940601007b12000000010902b801010000000009040000036ce07b0009050b0300000000000905000000000000000200f736d05153d07556ac97f56f288d3f971f366e6b1a0ede3ea9edec3e802120c853e64317f32a898b5a1466e17b040400d4bd87f8468c2ce14362b41b76363b31c9a2cf14c3baf1c931f622cf7628f4fdb1df69bf66e3030e16f0a5c3ac888ba46b632d624a16cbbf54875116ceae867e58bc9da8a34540ac67e366d2eda9cf8aba2cd5d5dd89a8d32d209619456fb5cf56a2aeb0213b9cfc8fb7207f6cc9edffdb3349f9009ce7cc7c318469f91868d0247849460d0e022a6fa6e63c1b76e3be51297f661f927df06ff791afbc38ee88956764a6ea6b940934ffe02453ed201832c36a48cbddcaf89408a973bea4a3299e6963916163459b05848337"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x2, "d976"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) [ 1135.326189][T19082] usb 4-1: USB disconnect, device number 68 16:19:22 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000540)='/dev/full\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) 16:19:22 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 16:19:22 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20c0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) [ 1135.500417][T26704] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 16:19:22 executing program 4: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3) 16:19:22 executing program 1: semctl$SEM_STAT(0x0, 0x4, 0x12, &(0x7f0000000140)=""/253) 16:19:22 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0x40, 0x0) [ 1135.704939][ T34] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1135.842873][T19082] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1136.083036][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1136.094264][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1136.109959][ T34] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1136.124227][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1136.139838][ T34] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1136.152202][ T34] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.169332][ T34] usb 3-1: config 0 descriptor?? [ 1136.213269][T19082] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1136.241863][T19082] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1136.269365][T19082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.284394][T19082] usb 4-1: config 0 descriptor?? [ 1136.330694][T19082] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1136.422951][ T34] legousbtower 3-1:0.0: LEGO USB Tower firmware version is 52.185 build 65199 [ 1136.446298][ T34] legousbtower 3-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1137.026787][T26742] usb 3-1: LEGO USB Tower reset control request failed [ 1137.228769][T17969] usb 3-1: USB disconnect, device number 101 [ 1137.240252][T17969] legousbtower 3-1:0.0: LEGO USB Tower #-160 now disconnected 16:19:25 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:19:25 executing program 4: bpf$MAP_GET_NEXT_KEY(0x1a, 0x0, 0x0) 16:19:25 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1}}) 16:19:25 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={0x0}}, 0x0) 16:19:25 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:19:25 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x3, "d9762e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) [ 1138.420259][T19082] usb 4-1: USB disconnect, device number 69 16:19:25 executing program 1: socketpair(0xa, 0x3, 0x8, &(0x7f0000000200)) 16:19:25 executing program 5: shmget(0x2, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) 16:19:25 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) timerfd_gettime(r0, 0x0) 16:19:25 executing program 1: bpf$PROG_LOAD(0xa, 0x0, 0x0) 16:19:25 executing program 5: bpf$BPF_BTF_LOAD(0x7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) [ 1138.607964][T26779] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 16:19:25 executing program 4: bpf$PROG_LOAD(0x1b, 0x0, 0x0) [ 1138.744893][ T34] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1138.932825][T19082] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1139.102937][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1139.114314][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1139.130451][ T34] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1139.145166][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1139.159176][ T34] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1139.171472][ T34] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.187433][ T34] usb 3-1: config 0 descriptor?? [ 1139.303082][T19082] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1139.316514][T19082] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1139.331877][T19082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.347569][T19082] usb 4-1: config 0 descriptor?? [ 1139.404767][T19082] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1139.442990][ T34] legousbtower 3-1:0.0: LEGO USB Tower firmware version is 52.185 build 65199 [ 1139.457641][ T34] legousbtower 3-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1140.033078][T26810] usb 3-1: LEGO USB Tower reset control request failed [ 1140.238924][T17969] usb 3-1: USB disconnect, device number 102 [ 1140.253149][T17969] legousbtower 3-1:0.0: LEGO USB Tower #-160 now disconnected 16:19:28 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:19:28 executing program 1: bpf$BPF_BTF_LOAD(0x8, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 16:19:28 executing program 5: r0 = socket(0x28, 0x1, 0x0) getsockname(r0, 0x0, &(0x7f0000000100)) 16:19:28 executing program 4: bpf$PROG_LOAD(0x22, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:19:28 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:19:28 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x3, "d9762e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) [ 1141.533272][ T34] usb 4-1: USB disconnect, device number 70 16:19:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x2}, 0x40) 16:19:28 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote}, 0x1c, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000100)='3Z^', 0x3}, {&(0x7f0000000200)="f4", 0x1}], 0x3}, 0x0) 16:19:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x2, 0x1, 0x401, 0x0, 0x0, {0x0, 0x2}}, 0x14}}, 0x0) [ 1141.672421][T26843] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 16:19:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x2}, 0x40) [ 1141.772000][T26850] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 16:19:28 executing program 1: bpf$PROG_LOAD(0x10, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:19:28 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ipvlan0\x00', 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast, @random="00801000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}}}, 0x0) [ 1141.872961][T10735] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1141.982881][ T34] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1142.233358][T10735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1142.249399][T10735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1142.259198][T10735] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1142.273900][T10735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1142.289249][T10735] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1142.300948][T10735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.319286][T10735] usb 3-1: config 0 descriptor?? [ 1142.363161][ T34] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1142.377788][ T34] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1142.388609][ T34] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.399703][ T34] usb 4-1: config 0 descriptor?? [ 1142.451016][ T34] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1142.593152][T10735] legousbtower 3-1:0.0: LEGO USB Tower firmware version is 52.185 build 65199 [ 1142.612486][T10735] legousbtower 3-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1143.183052][T26881] usb 3-1: LEGO USB Tower reset control request failed [ 1143.388920][T12039] usb 3-1: USB disconnect, device number 103 [ 1143.401413][T12039] legousbtower 3-1:0.0: LEGO USB Tower #-160 now disconnected 16:19:31 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b400000000001090224000100000000090400000103010000092100000001220100090581"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:19:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0xffff}, 0x40) 16:19:31 executing program 5: bpf$BPF_BTF_LOAD(0x1d, 0x0, 0x0) 16:19:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ipvlan0\x00', 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast, @random="00801000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}}}, 0x0) 16:19:31 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:19:31 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x3, "d9762e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440)="8b", 0x1) [ 1144.621640][T17969] usb 4-1: USB disconnect, device number 71 16:19:31 executing program 5: r0 = epoll_create(0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000400c}) 16:19:31 executing program 1: bpf$PROG_LOAD(0x3, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:19:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ipvlan0\x00', 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast, @random="00801000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}}}, 0x0) [ 1144.790214][T26915] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 16:19:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ipvlan0\x00', 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast, @random="00801000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}}}, 0x0) 16:19:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 16:19:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r0, 0x0, &(0x7f0000001440)) [ 1145.012937][T18001] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1145.122894][T17969] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1145.403019][T18001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1145.414044][T18001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1145.427225][T18001] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1145.438951][T18001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1145.450373][T18001] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1145.460624][T18001] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.471432][T18001] usb 3-1: config 0 descriptor?? [ 1145.562879][T17969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1145.574285][T17969] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1145.583666][T17969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.596547][T17969] usb 4-1: config 0 descriptor?? [ 1145.644866][T17969] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1145.763540][T18001] legousbtower 3-1:0.0: LEGO USB Tower firmware version is 52.185 build 65199 [ 1145.781255][T18001] legousbtower 3-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1146.352997][T26959] usb 3-1: LEGO USB Tower reset control request failed [ 1146.555659][T18001] usb 3-1: USB disconnect, device number 104 [ 1146.572214][T18001] legousbtower 3-1:0.0: LEGO USB Tower #-160 now disconnected 16:19:34 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2}}) 16:19:34 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 16:19:34 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback, 0x0, 0x7800}}) 16:19:34 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:19:34 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000440)="8b", 0x1) 16:19:34 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b400000000001090224000100000000090400000103010000092100000001220100090581"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1147.709265][T10735] usb 4-1: USB disconnect, device number 72 16:19:34 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x0) 16:19:34 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f0000000c80)='batadv\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x8, &(0x7f0000001040)=@framed={{}, [@jmp, @generic, @btf_id, @ldst]}, &(0x7f0000001080)='syzkaller\x00', 0x100, 0xe3, &(0x7f00000010c0)=""/227, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:19:34 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast1}}) [ 1147.876496][T26991] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 16:19:34 executing program 4: bpf$PROG_LOAD(0x1c, 0x0, 0x0) 16:19:34 executing program 5: bpf$BPF_BTF_LOAD(0x16, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 16:19:34 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x80000001, 0x0, 0x1}, 0x40) 16:19:35 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 16:19:35 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$sock(r0, 0x0, 0x0, 0x0) [ 1148.062802][ T34] usb 3-1: new high-speed USB device number 105 using dummy_hcd 16:19:35 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback, 0x0, 0x0, 0x1, 0x200}}) [ 1148.128578][T27009] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1148.224050][T10735] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1148.452932][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1148.464787][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1148.482593][ T34] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1148.497447][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1148.510005][ T34] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1148.520911][ T34] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.530662][ T34] usb 3-1: config 0 descriptor?? [ 1148.603414][T10735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1148.614799][T10735] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1148.624530][T10735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.635499][T10735] usb 4-1: config 0 descriptor?? 16:19:35 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1148.694910][T10735] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1148.773930][T27032] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1148.823022][ T34] legousbtower 3-1:0.0: LEGO USB Tower firmware version is 52.185 build 65199 [ 1148.841687][ T34] legousbtower 3-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1149.628656][T17986] usb 3-1: USB disconnect, device number 105 [ 1149.638027][T17986] legousbtower 3-1:0.0: LEGO USB Tower #-160 now disconnected 16:19:37 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000440)="8b", 0x1) [ 1150.443003][ T34] usb 3-1: new high-speed USB device number 106 using dummy_hcd 16:19:37 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b400000000001090224000100000000090400000103010000092100000001220100090581"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:19:37 executing program 4: pipe(&(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r0, 0x0, r3, 0x0, 0x5, 0xd) 16:19:37 executing program 5: bpf$BPF_BTF_LOAD(0x1d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 16:19:37 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback, 0x0, 0x0, 0x1, 0x200}}) 16:19:37 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1150.804662][T19081] usb 4-1: USB disconnect, device number 73 [ 1150.837051][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1150.875009][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 16:19:37 executing program 5: bpf$BPF_BTF_LOAD(0x21, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 16:19:37 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback, 0x0, 0x0, 0x1, 0x200}}) [ 1150.919203][ T34] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1150.948017][T27075] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1150.950828][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1150.987746][ T34] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b 16:19:38 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback, 0x0, 0x0, 0x1, 0x200}}) 16:19:38 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, &(0x7f0000000a00)=""/158, 0x32, 0x9e, 0x1}, 0x20) [ 1151.031559][ T34] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.062353][ T34] usb 3-1: config 0 descriptor?? 16:19:38 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3d, 0x3d, 0xc, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "d6"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000a00)=""/158, 0x64, 0x9e, 0x1}, 0x20) 16:19:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1c}, 0x40) [ 1151.332920][T19081] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1151.340642][ T34] legousbtower 3-1:0.0: LEGO USB Tower firmware version is 52.185 build 65199 [ 1151.366221][ T34] legousbtower 3-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1151.712918][T19081] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1151.736853][T19081] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1151.762358][T19081] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.776560][T19081] usb 4-1: config 0 descriptor?? [ 1151.824825][T19081] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1152.145173][T17969] usb 3-1: USB disconnect, device number 106 [ 1152.170098][T17969] legousbtower 3-1:0.0: LEGO USB Tower #-160 now disconnected 16:19:39 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000440)="8b", 0x1) [ 1152.982886][T17969] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1153.412977][T17969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1153.424455][T17969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1153.437008][T17969] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1153.448322][T17969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1153.459478][T17969] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1153.469991][T17969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.488935][T17969] usb 3-1: config 0 descriptor?? [ 1153.772985][T17969] legousbtower 3-1:0.0: LEGO USB Tower firmware version is 52.185 build 65199 [ 1153.790312][T17969] legousbtower 3-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 16:19:40 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:19:40 executing program 5: bpf$BPF_BTF_LOAD(0x14, &(0x7f0000000280)={0x0, &(0x7f00000001c0)=""/139, 0x0, 0x8b}, 0x20) 16:19:40 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 16:19:40 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:19:40 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) [ 1153.892024][T19081] usb 4-1: USB disconnect, device number 74 16:19:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x0) 16:19:40 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, 0x80000001, 0x0, 0x1}, 0x40) 16:19:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa}]}, 0x28}}, 0x0) [ 1154.016885][T27151] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 16:19:41 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @random, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "f2c88d", 0x8, 0x0, 0x0, @private1, @local, {[@routing={0x2c}]}}}}}, 0x0) 16:19:41 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x2, &(0x7f0000000000)=@raw=[@ldst, @exit], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x97, &(0x7f0000000080)=""/151, 0x40f00, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x2, 0x8, 0x6}, 0x10}, 0x78) 16:19:41 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x42) [ 1154.392870][T19081] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1154.575229][T10735] usb 3-1: USB disconnect, device number 107 [ 1154.604496][T10735] legousbtower 3-1:0.0: LEGO USB Tower #-160 now disconnected [ 1154.753406][T19081] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1154.764800][T19081] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1154.790788][T19081] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1154.800554][T19081] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.810917][T19081] usb 4-1: config 0 descriptor?? 16:19:42 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) [ 1155.352885][T19081] usbhid 4-1:0.0: can't add hid device: -71 [ 1155.359385][T19081] usbhid: probe of 4-1:0.0 failed with error -71 [ 1155.378523][T19081] usb 4-1: USB disconnect, device number 75 [ 1155.432858][T18001] usb 3-1: new high-speed USB device number 108 using dummy_hcd 16:19:42 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:19:42 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00^\x00\a\x00'/20, @ANYRES32=r2, @ANYBLOB="e6"], 0x24}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x300, 0x0, 0x4b6ae4f95a5de35b) 16:19:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, 0xffffffffffffffff, 0x0) 16:19:42 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000480)="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", 0x101, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 16:19:42 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1155.813432][T18001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1155.829631][T18001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 16:19:42 executing program 5: bpf$BPF_BTF_LOAD(0x4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) [ 1155.853826][T18001] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1155.876154][T18001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1155.898353][T27210] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 16:19:42 executing program 4: socket$inet(0x2, 0x0, 0x1000) 16:19:42 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @random, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3fa410", 0xc, 0x11, 0x0, @local, @local, {[], {0x0, 0x0, 0x7, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 1155.908076][T18001] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1155.928814][T18001] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.948897][T18001] usb 3-1: config 0 descriptor?? 16:19:43 executing program 5: bpf$PROG_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:19:43 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback, 0x80000001}, 0x1c, 0x0}, 0x0) 16:19:43 executing program 1: bpf$PROG_LOAD(0x23, 0x0, 0x0) [ 1156.213048][T17969] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1156.222957][T18001] legousbtower 3-1:0.0: LEGO USB Tower firmware version is 52.185 build 65199 [ 1156.249931][T18001] legousbtower 3-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1156.633104][T17969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1156.644134][T17969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1156.660068][T17969] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1156.673486][T17969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.697060][T17969] usb 4-1: config 0 descriptor?? [ 1157.025031][T18001] usb 3-1: USB disconnect, device number 108 [ 1157.045191][T18001] legousbtower 3-1:0.0: LEGO USB Tower #-160 now disconnected [ 1157.252939][T17969] usbhid 4-1:0.0: can't add hid device: -71 [ 1157.260870][T17969] usbhid: probe of 4-1:0.0 failed with error -71 [ 1157.280734][T17969] usb 4-1: USB disconnect, device number 76 16:19:44 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000603adb40940601007b12000000010902b801010000000009040000036ce07b0009050b0300000000000905000000000000000200f736d05153d07556ac97f56f288d3f971f366e6b1a0ede3ea9edec3e802120c853e64317f32a898b5a1466e17b040400d4bd87f8468c2ce14362b41b76363b31c9a2cf14c3baf1c931f622cf7628f4fdb1df69bf66e3030e16f0a5c3ac888ba46b632d624a16cbbf54875116ceae867e58bc9da8a34540ac67e366d2eda9cf8aba2cd5d5dd89a8d32d209619456fb5cf56a2aeb0213b9cfc8fb7207f6cc9edffdb3349f9009ce7cc7c318469f91868d0247849460d0e022a6fa6e63c1b76e3be51297f661f927df06ff791afbc38ee88956764a6ea6b940934ffe02453ed201832c36a48cbddcaf89408a973bea4a3299e6963916163459b05848337"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) 16:19:44 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:19:44 executing program 4: bpf$PROG_LOAD(0x10, 0x0, 0x0) 16:19:44 executing program 5: r0 = socket(0x28, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, 0x0) 16:19:44 executing program 1: socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0xa, 0x0) socket$packet(0x11, 0x2, 0x300) 16:19:44 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:19:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) 16:19:44 executing program 5: bpf$PROG_LOAD(0x4, 0x0, 0x0) 16:19:44 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x1, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1157.795360][T27280] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1157.842962][T17969] usb 3-1: new high-speed USB device number 109 using dummy_hcd 16:19:44 executing program 5: syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') 16:19:44 executing program 4: bpf$BPF_BTF_LOAD(0x11, 0x0, 0x0) 16:19:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000540)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xeb0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffff}, @ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'veth0_vlan\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '%#+(&\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_MASK={0x55, 0x5, "1d90ca0fcff01f39594eb1917eeee4fad38b1cb265b64553e51e6806b845e97d7f72adda7d38c2f0b7d958970b45121538ad0d205b7612c5c948f26eb2ecda3eb8cc36f8628ee88f595257d07d79297f26"}, @ETHTOOL_A_BITSET_VALUE={0xdd, 0x4, "6681eba87182e9fae143c62d9ff2eb66a252c6a86ab9b285895cf21713b5aae51ccaa0ef7ca14784c2f90905aa4a1e03e5238b7e5b030e3e057c3a9e959f9e45762c4b892fb6ddb9868febd098091850db4d3cea448eae35901a190e0fe9a6e166cf68752fd558e0e9992666ba083e5afa15987421b24f040a86fbbeb764ae3d1f1f4e238e7596b0321c4b3d4e711802f9db54a2082d89e86dc46f6fc6a6bc8e5b9085b2307c1275a5db8c7171685845ddbe7c3d3c3009f53059affff43b95fa9dd8ffc707465a7a7b8bb365f1300692ff40ddd7e6ec000801"}, @ETHTOOL_A_BITSET_MASK={0xce9, 0x5, "e2025835f09044d2e5cfbd52b31db073ce31013bcf4c5300a25699eaebae114b6b919e1eba0668be0283739c783e29b135639d9c5bbccbdc9ea615f353aae72d1d47deb4df5650e97f1820c1d173381ec147a59c78a6daaa86593cbc4789a33ea486f3bba11bcb29ae0d121187a5c359817b0b77f1cfa3bd0dc77604f11f2cb2fa9c825fceb24c83f9ab7c0667786d3e509f7df90498529b97ca53012c1100ee522c178911d8b4fd0f66c6a539cb1bb4601f13e09e72c8453510101d80e7dcfb5683934a681bc3f3fd76270c5bbb2822e864fd2f8df499f6e95617beabb5cd06c8698f31f26239bfc898079050a112f043bea7876c04165d8e89ac9fe270926132b402468dab01272d1d4fa9369cd8c3695b75e23b381b70e797d79ea4ffba84bae587eb980ad06f52c0e763fabb9e3184c4e04faf38f54db8d60e904edef56e041a8206a21301b55a1d18c3cdd1e2a91dd521374bea9c63ffb7c52ee22de94be38b90970b2b92b5e93e2572b4a9178bcefdd94a8c1f95f4a9d5c8027a256e9dc00366b3e973b99e9e518ea3a4e30b93544d622aca8764d10c569d93191d22525b1b406c76a5dfd65e90d359ab773004d375b796e515e7f3038ba0653ad86a602a8d6a9c10544f81cbc4fce0b68a002dd6a3bf7e8ff6c9f9831890361b44620989b7cc725f624d79df837c7e79b4f32800de020352a5b13dca4e94c647b54f4f0f630dcb15e29bc78fabd4eaee5388955a0e08a44fbb35e995f28dbe70dd58671ffae12713b74a9015c22449100d57ff617862c528c913c5a0ac6fe658355099ce5dc3a757f69270c9438973827fe4876d44f759ec8e140ab7609681f080e7c5ac760a11c790bc8133bc0a794b92a0b77ce4c75fe45e2c350b82291121c6f4821d6c1c9351f4de98781c714140a3d7a3005d9fc16fb5505744b444e24d8b1129da330241811b71e4ea2d186f06523be39a00b7b912504f66309a4c1ae24fb6d58bc73159b1b03f9601169d280afe32ecdc36045b6cb3125d4941c9ed00e23cfac959038e30db7ac3a4001ef8ae8983b2a907b1d10ab1fee4433384a9907aa34654186713dc07a3c0a490f3cd916369b06f2244ab3dde27d0d8a0c855d1cb4ede18ee5970c013ae3360bcfee979980041cb1c296e1cadae34e72d81d0ffde132069f1a955276189db5ea73cc0876a25945776e42fac6e5320f976e36ce314e0173c708b8505eeb642280609cd1dc94450202259464ae300a3190b5bae7805175a9d04d05f6ab5cd7ef5f2e623ccc0f77947fdbccccb4642966e86adbf1f3612dbbe826342d5716aaa755d7712b330352ffefb6a4d2b1e7e719baf5cfa9cef9e1f6f2a98c2e4a50639a5560d01c4f9da84d36412bd7947a5e86bc918174d799bf2ef43e9edcf2551b0aed7e56dd10c7691482c83cd1695ad871942933815d1dcdecde9732777ea875d75168c3020c07e76bb0bae4c29c3faa74c44f62ea5fcc4943dd9bf54008d60f395d4817fdfd1f82582d76ce8678a0c324bf0f31a2edba289f8988f89d169268eb764acfa85f20613ff6bf4fcfbd99f532af26e8475d7ba35f76441f9114735e3cbce61d2c06ba93b254415da403bd84b34b6c479aa7630634a01496dfd947316663e546bbcd00579d300c9f8297d7a6d2a65d93e581d59c5d70aa514c35db70cdaf8f92f3f03be8020b5dc50d0ea7c220a0bde68939af5e2a5090d32dee8a0b12ea629a78d3da71b04368a7c2110da11bbce672fc7b97cf8f1eff763b257df1d05dc0a59bb241d9b508f0559a21f7d9564f3b932f9e23550c54a6e05e8877997b531b29a8b51b576de85a38678c750b7f7c2316e7fd6960a3eec6560fd6859fcbdea6d002cd8e8a0ca42352b0712eaa9345ec281611cccc27e85659dc4e24db1326ae8a1a3b18e4b91aa699a3ad04e6ac13b0d3c7428395a2c677fd0049e9a43e41dc0ffe7df8829583c107ed738180e839423339d0e4ac12a7fb5d5edef6e3808339f3e12aab7fb807470661aacc95b43e70f534acff16e6a7d55f15ab259d915662561a97eb1b13cbb3a5282177eb082be65dc431f1bfaf0ac3be23f862ca42814d8fb31d7ea1504fe4f5715df8bb9bc8955a2ada598451fd495f431ee8fcf04a1f134efbe33c3f6aebcc3aaf4ee4ea3b29c2a8fcd00db1eb4d1dbcb0dc9f3f2dc066d622e11334c2f98992367f91547112c4e8a297124a17747872b7e00f50d04c3f5685a5b696e50a9dea8a250c4c5d601ba7ac7cbd7e4b42f055159c399811acc938dd7ad15ee02527b32716966f3c6a2fd737f8f5b3505d2e184c22dc3804e6c2dfdf39ff466dbb4a894ff45e788da4b66fbab73c6031890100b372bade2041302049534cc9996681c5ffa21ba28fb4ecd19b534b0940ffd42d0403a80bff0e2944650e3f0d95f7950caf90684cc84ea9b3964b3a9167db54b99b8fa4a7ee3902548ed5b413e06867b1d17d2615aec8e8371613b35174e6c4dec89f5f2f811f51173b21e6b45e9cdbf72ac5cb934dee04a5149840ace9bc27f206100c8469ce1db2d4d4d2191fb05a2c5472fd4fed0449a075811b73d59627682c31827bb70b9ba8c3144755a2bf468980590bbc475348aaee5524c5866b35b3687c056a1d02fbddf97631b67e90ed224ceee288d3a4dc575c228725f5c073b03ab091e98a5602e4e28f66ee0d88b4ba8d5792585b2bceb0493fddde1cc3cb110eefb03d1f5db773ee44c3d0839439823f6e1600ba485751fd157b251ff342cfeadab5424109df27ea800c55afea938121eabfbbccc2c57bd7fab0f5858307def653deaa28c83d27ac28e0ce526fb8c84b2c67ddea1162d3392af85c0f3dc746a8c4fda95fa2ba12d285dbcaa87b586f9b5e439da07653fe0642189e89bda2872cc8672205a3f8ac903fbc0c508ed45969f128387ab7925fb48473ecdccdd4429f2ec57e8d7cc7571f26e15b68db077560e7dd5b11013665f2477644af020255727d5955db6a92349e1a948fb15295e5024d563083dfabf8adf7281d038c4d9dfeec2e10493a8b0f487f674a2f8f62ba2fcc15030c4f4ea57c04d98e62860b6c9a8cb872a48a725455ffc6c2e8baae45461b2c1d9d3b0553f0abb30f2383e95f1e68f627ad837134dcde646b4a37a669e68139e1ac70e10720e0336ca2cdf2efa40e22b4a28fa294a5d7412ea0c01c47c354cc5c5edf37f7ded889224763706c4af5fa982f1a41bc3675e481c28103c6e8c4778d5e3c7455661d8f1cba7c985c73435a329bc9cac90c355fae862eca522785052f60af679ef7cad123d7a5487fd90e9916717d0c113578a86445448fb5cfb544744765a3ed7ad28856322db9c004b0075e6a72186197e90bc4d18af92d2b4e10a743d00fb6dcdeb77e4be944ac051ed1c00ea19280cd801037dd5db8a200ec3c0b2482daf08063f34ce046f78eeba247cc1e97e801b9c35a7c3da91f9bc5a648ffd5ed3560b97ac55d2e2e7e16b14b7549208908feda225231a000a6364e00f1c9dc79eadd6753f46a2bbdf7e12a787ab447af55d39687de40f56788704736668dd0614febd483b55de27bd11b278381ebaa0653163ca2b90cb680e5afda6106b4d0867c3ed1b1ab04750550fe919e06b8872d546ed572733f075dfdca47230f2705614592c3bd3ad5318e0dc0a5f62f2df7adc703b7d8993393907d839c40ec7337e450454c2dc4a7a20c8b288acd5e9416f1888673569d20d18a8d452e585db7d4ce602eb3a0879582841215e58270165b3c7c9fe698db180d2032ae9d2d474c87a1015715417ced05b1a047c0d66ab987fbe9fa2761bf5c17f7cc5866c90d58dd550dea592018098e300e92192f0c146a6821c38b4e0a76afc4037054178c0928cc71b6f5f24f65bdfdae95126c113b045789335cdeae23e99e7817ad3f8b77038644d1d8600630d6f0d4130cffb90b0852c595ebab569e1890b1273653912f26af6a53b1ffb1ec80afd00418c098b43851bb491d461ce53c2b7f377fcb7fa3396834755f18df260cfa4d91d869e7a1b6b805fb7a04dbeb954dd5c11562527e0d2fa5a5ec310ad097040cc88996d90b9d79a086cb30af9738a5d363fcf24abcd09b46ee93f27357ad79e6f088789af9719f877c64134f0db44cd639aaeab1e0c5b2db646ac7bcb2bd45a01bbd3633c8c993c236cfbda5c2318577600d154aa22f3bd964dcafc7f179c1b7d1087e2777cae5b695c364f4f984876d29e029c64fe47a2f0e9232bc565ff460088f35e78abacb5d4f47063a1cb3769faf814e7745cdef580997401b8e7ad11d63c9e50baa1eeb980ea522ec43d9f69c99c945ff8ef84db37f10a0f884bc86a76262ab9cb1b83fae3476142161fd36d62e051a9a653e133f229d01b048a3340c99bfea8fb7529f4bcb0d2d69c48d857a84d83ef7c812f6a3da7f2f62ce5776590d44a75e0c846045e258a54dc1618cb3d729804bb98209b88238763524ac89a4650203bad1ea34fa2c5117317ab5ab443e2397afa05ac7324b299ee8809bb20d7c3fca08a99e8cc6834d03fb40433ac94c5ca9a96bbd19e90e54946557debcbdf22d5bb961a3a7b24cbb69d0998c0716e6296625fc363b147a464afa777d96ad42bc6040118c610a05977d5ab97692a30d35d6726f2bcc127290b3f33fde63be608"}]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x40}, 0x4) [ 1158.053093][T17986] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1158.222968][T17969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1158.234415][T17969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1158.245025][T17969] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1158.256947][T17969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1158.268364][T17969] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1158.282158][T17969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.300668][T17969] usb 3-1: config 0 descriptor?? [ 1158.503354][T17986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1158.514639][T17986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1158.531710][T17986] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1158.544468][T17986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.560061][T17986] usb 4-1: config 0 descriptor?? [ 1158.582956][T17969] legousbtower 3-1:0.0: LEGO USB Tower firmware version is 52.185 build 65199 [ 1158.606330][T17969] legousbtower 3-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1159.102850][T17986] usbhid 4-1:0.0: can't add hid device: -71 [ 1159.109822][T17986] usbhid: probe of 4-1:0.0 failed with error -71 [ 1159.130850][T17986] usb 4-1: USB disconnect, device number 77 [ 1159.397390][T17986] usb 3-1: USB disconnect, device number 109 [ 1159.427391][T17986] legousbtower 3-1:0.0: LEGO USB Tower #-160 now disconnected 16:19:46 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) 16:19:46 executing program 5: r0 = epoll_create1(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x20000000}) 16:19:46 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2, 0x67660dcf}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x88}, 0x0) 16:19:46 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x20) 16:19:46 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c61"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:19:46 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:19:47 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x2a, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f00000001c0)=""/139, 0x2a, 0x8b, 0x1}, 0x20) 16:19:47 executing program 1: bpf$PROG_LOAD(0x9, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:19:47 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000f40)={'sit0\x00', &(0x7f0000000ec0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast1}}}) [ 1160.080982][T27363] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 16:19:47 executing program 1: socket$inet(0x2, 0x3, 0x4) 16:19:47 executing program 4: pipe(&(0x7f0000000800)={0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000500)) 16:19:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)='\'', 0x1}, {&(0x7f0000000100)='3', 0x1}], 0x2}, 0x0) [ 1160.250910][T17986] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1160.302980][T10735] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1160.643619][T17986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1160.655448][T17986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1160.672399][T17986] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1160.685165][T17986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.699224][T17986] usb 4-1: config 0 descriptor?? [ 1160.708854][T10735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1160.720483][T10735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1160.738917][T10735] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1160.759863][T10735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1160.780136][T10735] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1160.792197][T10735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.807660][T10735] usb 3-1: config 0 descriptor?? [ 1161.093073][T10735] legousbtower 3-1:0.0: LEGO USB Tower firmware version is 52.185 build 65199 [ 1161.104866][T10735] legousbtower 3-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1161.252924][T17986] usbhid 4-1:0.0: can't add hid device: -71 [ 1161.259271][T17986] usbhid: probe of 4-1:0.0 failed with error -71 [ 1161.270070][T17986] usb 4-1: USB disconnect, device number 78 [ 1161.888368][T17986] usb 3-1: USB disconnect, device number 110 [ 1161.907091][T17986] legousbtower 3-1:0.0: LEGO USB Tower #-160 now disconnected 16:19:49 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440), 0x0) 16:19:49 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0f00000028252c037cb9c344e1b35377487bf0b2e9b5367de23da76cf990753ea1939890e5c2ac15acb5d7f84ac26abee41dd9ede0803733d254df12aad7417f4a92a9441e3e77cd8d1038b2750a966c64ab709bc4b7a0aaa9"]}) 16:19:49 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto(r0, &(0x7f0000000580)="f5", 0x1, 0x48080, &(0x7f0000000680)=@in6={0xa, 0x4e20, 0x0, @loopback, 0xffffffe1}, 0x80) 16:19:49 executing program 4: r0 = socket(0x28, 0x1, 0x0) connect$unix(r0, 0x0, 0xf00) 16:19:49 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c61"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:19:49 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:19:49 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2, 0x7}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="88"], 0x88}, 0x0) 16:19:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x40) 16:19:49 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) [ 1162.496120][T27430] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 16:19:49 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="88"], 0x88}, 0x0) 16:19:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote}, 0x1c, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000100)='3', 0x1}], 0x2}, 0x0) 16:19:49 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @random, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "f2c88d", 0x10, 0x0, 0x0, @private1, @local, {[@routing={0x2c}], "11c8c40bca51283b"}}}}}, 0x0) [ 1162.733016][T10735] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1162.822984][T19082] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1163.093371][T10735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1163.105357][T10735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1163.117593][T10735] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1163.128692][T10735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.141719][T10735] usb 4-1: config 0 descriptor?? [ 1163.183523][T19082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1163.196588][T19082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1163.216148][T19082] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1163.229674][T19082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1163.242333][T19082] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1163.252963][T19082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.262583][T19082] usb 3-1: config 0 descriptor?? [ 1163.522854][T19082] legousbtower 3-1:0.0: LEGO USB Tower firmware version is 52.185 build 65199 [ 1163.546787][T19082] legousbtower 3-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1163.692880][T10735] usbhid 4-1:0.0: can't add hid device: -71 [ 1163.699221][T10735] usbhid: probe of 4-1:0.0 failed with error -71 [ 1163.714798][T10735] usb 4-1: USB disconnect, device number 79 [ 1164.335108][T19082] usb 3-1: USB disconnect, device number 111 [ 1164.352111][T19082] legousbtower 3-1:0.0: LEGO USB Tower #-160 now disconnected 16:19:51 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440), 0x0) 16:19:51 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0xb}]}]}}, &(0x7f0000000a00)=""/158, 0x32, 0x9e, 0x1}, 0x20) 16:19:51 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001d0025c5f7ffff080d000000020000000000000000000ac913000100", 0x20}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) r1 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x2, 0x0, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x666c611dbfd5b0, 0x0) 16:19:51 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x1, &(0x7f0000000000)=@raw=[@ldst], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:19:51 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c61"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:19:51 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:19:51 executing program 4: r0 = socket(0x28, 0x1, 0x0) accept$unix(r0, 0x0, 0x0) 16:19:51 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x1000000}]}}, &(0x7f00000001c0)=""/139, 0x2a, 0x8b, 0x1}, 0x20) [ 1164.976546][T27505] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 16:19:52 executing program 5: bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)={0x78, 0xb, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xc912}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x2400c064}, 0x20000000) 16:19:52 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080), 0x4) 16:19:52 executing program 4: bpf$BPF_BTF_LOAD(0x2, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 16:19:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900)='nl80211\x00') [ 1165.192885][T19082] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1165.222912][T17986] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1165.563542][T19082] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1165.574450][T19082] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1165.591943][T19082] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1165.602806][T19082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.617608][T19082] usb 4-1: config 0 descriptor?? [ 1165.643466][T17986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1165.655009][T17986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1165.665120][T17986] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1165.684781][T17986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1165.695936][T17986] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1165.708359][T17986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.720528][T17986] usb 3-1: config 0 descriptor?? [ 1165.982908][T17986] legousbtower 3-1:0.0: LEGO USB Tower firmware version is 52.185 build 65199 [ 1166.000578][T17986] legousbtower 3-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1166.183031][T19082] usbhid 4-1:0.0: can't add hid device: -71 [ 1166.189239][T19082] usbhid: probe of 4-1:0.0 failed with error -71 [ 1166.200346][T19082] usb 4-1: USB disconnect, device number 80 [ 1166.785285][T19082] usb 3-1: USB disconnect, device number 112 [ 1166.809944][T19082] legousbtower 3-1:0.0: LEGO USB Tower #-160 now disconnected 16:19:54 executing program 2: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000603adb40940601007b12000000010902b801010000000009040000036ce07b0009050b0300000000000905000000000000000200f736d05153d07556ac97f56f288d3f971f366e6b1a0ede3ea9edec3e802120c853e64317f32a898b5a1466e17b040400d4bd87f8468c2ce14362b41b76363b31c9a2cf14c3baf1c931f622cf7628f4fdb1df69bf66e3030e16f0a5c3ac888ba46b632d624a16cbbf54875116ceae867e58bc9da8a34540ac67e366d2eda9cf8aba2cd5d5dd89a8d32d209619456fb5cf56a2aeb0213b9cfc8fb7207f6cc9edffdb3349f9009ce7cc7c318469f91868d0247849460d0e022a6fa6e63c1b76e3be51297f661f927df06ff791afbc38ee88956764a6ea6b940934ffe02453ed201832c36a48cbddcaf89408a973bea4a3299e6963916163459b05848337"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000028c0)={0x2c, &(0x7f0000002740)={0x0, 0x0, 0x8, "889e2fab34b9affe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000440), 0x0) 16:19:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x34, 0xb, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8}]}]}, 0x34}}, 0x0) 16:19:54 executing program 1: bpf$BPF_BTF_LOAD(0xe, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 16:19:54 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:19:54 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) 16:19:54 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:19:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) accept4(r0, 0x0, 0x0, 0x0) 16:19:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x6f) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000064000100"/20, @ANYRES32=r2], 0x24}}, 0x0) 16:19:54 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x18000000000002e0, 0x1c, 0x0, &(0x7f0000000080)="391bb42004d53c9c6ac092c60800c4863b2063cd183551b2f33475e5", 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x48) [ 1167.440736][T27575] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 16:19:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x0) 16:19:54 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f0000000a00)=""/158, 0x26, 0x9e, 0x1}, 0x20) 16:19:54 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) [ 1167.646999][T17986] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1167.672875][T19082] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1168.042979][T19082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1168.054096][T19082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1168.063514][T17986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1168.073978][T19082] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1168.081549][T17986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1168.092892][T19082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1168.100589][T17986] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1168.113348][T19082] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1168.115293][T17986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.135838][T17986] usb 4-1: config 0 descriptor?? [ 1168.162164][T19082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.186924][T19082] usb 3-1: config 0 descriptor?? [ 1168.442904][T19082] legousbtower 3-1:0.0: LEGO USB Tower firmware version is 52.185 build 65199 [ 1168.462105][T19082] legousbtower 3-1:0.0: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1168.674112][T17986] usbhid 4-1:0.0: can't add hid device: -71 [ 1168.680473][T17986] usbhid: probe of 4-1:0.0 failed with error -71 [ 1168.689272][T17986] usb 4-1: USB disconnect, device number 81 [ 1169.244848][T17986] usb 3-1: USB disconnect, device number 113 [ 1169.261206][T17986] legousbtower 3-1:0.0: LEGO USB Tower #-160 now disconnected 16:19:56 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:19:56 executing program 4: bpf$PROG_LOAD(0x6, 0x0, 0x0) 16:19:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x0, @nfc, @l2tp={0x2, 0x0, @remote}, @phonet}) 16:19:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 16:19:56 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x88}, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)='\'', 0x1}, {&(0x7f0000000100)='3', 0x1}], 0x2}, 0x0) 16:19:56 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:19:56 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$sock_cred(r0, 0x1, 0x39, &(0x7f0000003440), &(0x7f0000003480)=0xc) 16:19:56 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/712], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001400)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4ff0800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x69, 0x20000000, &(0x7f00000004c0)="b95b03b700030703009e40f005dd1fff060007000000e08477fbac141436e00a0001c699da153f0809e6e380f60106f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058e05cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 16:19:56 executing program 5: socket$inet6(0xa, 0x0, 0x10001) 16:19:56 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$bt_hci(r0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'veth1_macvtap\x00', {0x3}, 0x3800}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x29, 0x1, 0x6) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000040)={'team0\x00', {0x2, 0x0, @loopback}}) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x81) [ 1169.900909][T27643] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1169.904924][T27642] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1169.975582][T27648] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables 16:19:57 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x18000000000002e0, 0xe0, 0x0, &(0x7f0000000080)="391bb42004d53c9c6ac092c60800c4863b2063cd183551b2f33475e5", 0x0, 0x500, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x18000000000002e0, 0xe0, 0x0, &(0x7f0000000080)="391bb42004d53c9c6ac092c60800c4863b2063cd183551b2f33475e5", 0x0, 0x500, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 16:19:57 executing program 5: mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x0) [ 1170.102818][T17986] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1170.472979][T17986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.497323][T17986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1170.515500][T17986] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1170.528637][T17986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.554972][T17986] usb 4-1: config 0 descriptor?? [ 1171.092926][T17986] usbhid 4-1:0.0: can't add hid device: -71 [ 1171.099181][T17986] usbhid: probe of 4-1:0.0 failed with error -71 [ 1171.120325][T17986] usb 4-1: USB disconnect, device number 82 16:19:58 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:19:58 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001c40)={'syztnl1\x00', 0x0}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 16:19:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000002200)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000021c0)={&(0x7f0000000540)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xeb0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'veth0_vlan\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '%#+(&\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_MASK={0x55, 0x5, "1d90ca0fcff01f39594eb1917eeee4fad38b1cb265b64553e51e6806b845e97d7f72adda7d38c2f0b7d958970b45121538ad0d205b7612c5c948f26eb2ecda3eb8cc36f8628ee88f595257d07d79297f26"}, @ETHTOOL_A_BITSET_VALUE={0xdd, 0x4, "6681eba87182e9fae143c62d9ff2eb66a252c6a86ab9b285895cf21713b5aae51ccaa0ef7ca14784c2f90905aa4a1e03e5238b7e5b030e3e057c3a9e959f9e45762c4b892fb6ddb9868febd098091850db4d3cea448eae35901a190e0fe9a6e166cf68752fd558e0e9992666ba083e5afa15987421b24f040a86fbbeb764ae3d1f1f4e238e7596b0321c4b3d4e711802f9db54a2082d89e86dc46f6fc6a6bc8e5b9085b2307c1275a5db8c7171685845ddbe7c3d3c3009f53059affff43b95fa9dd8ffc707465a7a7b8bb365f1300692ff40ddd7e6ec000801"}, @ETHTOOL_A_BITSET_MASK={0xce5, 0x5, "e2025835f09044d2e5cfbd52b31db073ce31013bcf4c5300a25699eaebae114b6b919e1eba0668be0283739c783e29b135639d9c5bbccbdc9ea615f353aae72d1d47deb4df5650e97f1820c1d173381ec147a59c78a6daaa86593cbc4789a33ea486f3bba11bcb29ae0d121187a5c359817b0b77f1cfa3bd0dc77604f11f2cb2fa9c825fceb24c83f9ab7c0667786d3e509f7df90498529b97ca53012c1100ee522c178911d8b4fd0f66c6a539cb1bb4601f13e09e72c8453510101d80e7dcfb5683934a681bc3f3fd76270c5bbb2822e864fd2f8df499f6e95617beabb5cd06c8698f31f26239bfc898079050a112f043bea7876c04165d8e89ac9fe270926132b402468dab01272d1d4fa9369cd8c3695b75e23b381b70e797d79ea4ffba84bae587eb980ad06f52c0e763fabb9e3184c4e04faf38f54db8d60e904edef56e041a8206a21301b55a1d18c3cdd1e2a91dd521374bea9c63ffb7c52ee22de94be38b90970b2b92b5e93e2572b4a9178bcefdd94a8c1f95f4a9d5c8027a256e9dc00366b3e973b99e9e518ea3a4e30b93544d622aca8764d10c569d93191d22525b1b406c76a5dfd65e90d359ab773004d375b796e515e7f3038ba0653ad86a602a8d6a9c10544f81cbc4fce0b68a002dd6a3bf7e8ff6c9f9831890361b44620989b7cc725f624d79df837c7e79b4f32800de020352a5b13dca4e94c647b54f4f0f630dcb15e29bc78fabd4eaee5388955a0e08a44fbb35e995f28dbe70dd58671ffae12713b74a9015c22449100d57ff617862c528c913c5a0ac6fe658355099ce5dc3a757f69270c9438973827fe4876d44f759ec8e140ab7609681f080e7c5ac760a11c790bc8133bc0a794b92a0b77ce4c75fe45e2c350b82291121c6f4821d6c1c9351f4de98781c714140a3d7a3005d9fc16fb5505744b444e24d8b1129da330241811b71e4ea2d186f06523be39a00b7b912504f66309a4c1ae24fb6d58bc73159b1b03f9601169d280afe32ecdc36045b6cb3125d4941c9ed00e23cfac959038e30db7ac3a4001ef8ae8983b2a907b1d10ab1fee4433384a9907aa34654186713dc07a3c0a490f3cd916369b06f2244ab3dde27d0d8a0c855d1cb4ede18ee5970c013ae3360bcfee979980041cb1c296e1cadae34e72d81d0ffde132069f1a955276189db5ea73cc0876a25945776e42fac6e5320f976e36ce314e0173c708b8505eeb642280609cd1dc94450202259464ae300a3190b5bae7805175a9d04d05f6ab5cd7ef5f2e623ccc0f77947fdbccccb4642966e86adbf1f3612dbbe826342d5716aaa755d7712b330352ffefb6a4d2b1e7e719baf5cfa9cef9e1f6f2a98c2e4a50639a5560d01c4f9da84d36412bd7947a5e86bc918174d799bf2ef43e9edcf2551b0aed7e56dd10c7691482c83cd1695ad871942933815d1dcdecde9732777ea875d75168c3020c07e76bb0bae4c29c3faa74c44f62ea5fcc4943dd9bf54008d60f395d4817fdfd1f82582d76ce8678a0c324bf0f31a2edba289f8988f89d169268eb764acfa85f20613ff6bf4fcfbd99f532af26e8475d7ba35f76441f9114735e3cbce61d2c06ba93b254415da403bd84b34b6c479aa7630634a01496dfd947316663e546bbcd00579d300c9f8297d7a6d2a65d93e581d59c5d70aa514c35db70cdaf8f92f3f03be8020b5dc50d0ea7c220a0bde68939af5e2a5090d32dee8a0b12ea629a78d3da71b04368a7c2110da11bbce672fc7b97cf8f1eff763b257df1d05dc0a59bb241d9b508f0559a21f7d9564f3b932f9e23550c54a6e05e8877997b531b29a8b51b576de85a38678c750b7f7c2316e7fd6960a3eec6560fd6859fcbdea6d002cd8e8a0ca42352b0712eaa9345ec281611cccc27e85659dc4e24db1326ae8a1a3b18e4b91aa699a3ad04e6ac13b0d3c7428395a2c677fd0049e9a43e41dc0ffe7df8829583c107ed738180e839423339d0e4ac12a7fb5d5edef6e3808339f3e12aab7fb807470661aacc95b43e70f534acff16e6a7d55f15ab259d915662561a97eb1b13cbb3a5282177eb082be65dc431f1bfaf0ac3be23f862ca42814d8fb31d7ea1504fe4f5715df8bb9bc8955a2ada598451fd495f431ee8fcf04a1f134efbe33c3f6aebcc3aaf4ee4ea3b29c2a8fcd00db1eb4d1dbcb0dc9f3f2dc066d622e11334c2f98992367f91547112c4e8a297124a17747872b7e00f50d04c3f5685a5b696e50a9dea8a250c4c5d601ba7ac7cbd7e4b42f055159c399811acc938dd7ad15ee02527b32716966f3c6a2fd737f8f5b3505d2e184c22dc3804e6c2dfdf39ff466dbb4a894ff45e788da4b66fbab73c6031890100b372bade2041302049534cc9996681c5ffa21ba28fb4ecd19b534b0940ffd42d0403a80bff0e2944650e3f0d95f7950caf90684cc84ea9b3964b3a9167db54b99b8fa4a7ee3902548ed5b413e06867b1d17d2615aec8e8371613b35174e6c4dec89f5f2f811f51173b21e6b45e9cdbf72ac5cb934dee04a5149840ace9bc27f206100c8469ce1db2d4d4d2191fb05a2c5472fd4fed0449a075811b73d59627682c31827bb70b9ba8c3144755a2bf468980590bbc475348aaee5524c5866b35b3687c056a1d02fbddf97631b67e90ed224ceee288d3a4dc575c228725f5c073b03ab091e98a5602e4e28f66ee0d88b4ba8d5792585b2bceb0493fddde1cc3cb110eefb03d1f5db773ee44c3d0839439823f6e1600ba485751fd157b251ff342cfeadab5424109df27ea800c55afea938121eabfbbccc2c57bd7fab0f5858307def653deaa28c83d27ac28e0ce526fb8c84b2c67ddea1162d3392af85c0f3dc746a8c4fda95fa2ba12d285dbcaa87b586f9b5e439da07653fe0642189e89bda2872cc8672205a3f8ac903fbc0c508ed45969f128387ab7925fb48473ecdccdd4429f2ec57e8d7cc7571f26e15b68db077560e7dd5b11013665f2477644af020255727d5955db6a92349e1a948fb15295e5024d563083dfabf8adf7281d038c4d9dfeec2e10493a8b0f487f674a2f8f62ba2fcc15030c4f4ea57c04d98e62860b6c9a8cb872a48a725455ffc6c2e8baae45461b2c1d9d3b0553f0abb30f2383e95f1e68f627ad837134dcde646b4a37a669e68139e1ac70e10720e0336ca2cdf2efa40e22b4a28fa294a5d7412ea0c01c47c354cc5c5edf37f7ded889224763706c4af5fa982f1a41bc3675e481c28103c6e8c4778d5e3c7455661d8f1cba7c985c73435a329bc9cac90c355fae862eca522785052f60af679ef7cad123d7a5487fd90e9916717d0c113578a86445448fb5cfb544744765a3ed7ad28856322db9c004b0075e6a72186197e90bc4d18af92d2b4e10a743d00fb6dcdeb77e4be944ac051ed1c00ea19280cd801037dd5db8a200ec3c0b2482daf08063f34ce046f78eeba247cc1e97e801b9c35a7c3da91f9bc5a648ffd5ed3560b97ac55d2e2e7e16b14b7549208908feda225231a000a6364e00f1c9dc79eadd6753f46a2bbdf7e12a787ab447af55d39687de40f56788704736668dd0614febd483b55de27bd11b278381ebaa0653163ca2b90cb680e5afda6106b4d0867c3ed1b1ab04750550fe919e06b8872d546ed572733f075dfdca47230f2705614592c3bd3ad5318e0dc0a5f62f2df7adc703b7d8993393907d839c40ec7337e450454c2dc4a7a20c8b288acd5e9416f1888673569d20d18a8d452e585db7d4ce602eb3a0879582841215e58270165b3c7c9fe698db180d2032ae9d2d474c87a1015715417ced05b1a047c0d66ab987fbe9fa2761bf5c17f7cc5866c90d58dd550dea592018098e300e92192f0c146a6821c38b4e0a76afc4037054178c0928cc71b6f5f24f65bdfdae95126c113b045789335cdeae23e99e7817ad3f8b77038644d1d8600630d6f0d4130cffb90b0852c595ebab569e1890b1273653912f26af6a53b1ffb1ec80afd00418c098b43851bb491d461ce53c2b7f377fcb7fa3396834755f18df260cfa4d91d869e7a1b6b805fb7a04dbeb954dd5c11562527e0d2fa5a5ec310ad097040cc88996d90b9d79a086cb30af9738a5d363fcf24abcd09b46ee93f27357ad79e6f088789af9719f877c64134f0db44cd639aaeab1e0c5b2db646ac7bcb2bd45a01bbd3633c8c993c236cfbda5c2318577600d154aa22f3bd964dcafc7f179c1b7d1087e2777cae5b695c364f4f984876d29e029c64fe47a2f0e9232bc565ff460088f35e78abacb5d4f47063a1cb3769faf814e7745cdef580997401b8e7ad11d63c9e50baa1eeb980ea522ec43d9f69c99c945ff8ef84db37f10a0f884bc86a76262ab9cb1b83fae3476142161fd36d62e051a9a653e133f229d01b048a3340c99bfea8fb7529f4bcb0d2d69c48d857a84d83ef7c812f6a3da7f2f62ce5776590d44a75e0c846045e258a54dc1618cb3d729804bb98209b88238763524ac89a4650203bad1ea34fa2c5117317ab5ab443e2397afa05ac7324b299ee8809bb20d7c3fca08a99e8cc6834d03fb40433ac94c5ca9a96bbd19e90e54946557debcbdf22d5bb961a3a7b24cbb69d0998c0716e6296625fc363b147a464afa777d96ad42bc6040118c610a05977d5ab97692a30d35d6726f2bcc127290b3f33fd"}]}]}, 0xec4}}, 0x0) 16:19:58 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x2000) 16:19:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001840)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x2c}}, 0x0) 16:19:58 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:19:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x2, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_MARK_MASK={0x8}, @CTA_MARK={0x8}]}, 0x24}}, 0x0) 16:19:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x34, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe94}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) 16:19:58 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x3, &(0x7f0000000340)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:19:58 executing program 1: bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x78) [ 1171.683683][T27694] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 16:19:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)=""/4081, 0xff1}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000280)=""/63, 0x3f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) recvmsg(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)=""/147, 0x93}, {0x0}, {0x0}], 0x3}, 0x0) shutdown(r3, 0x0) 16:19:58 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) close(r0) [ 1171.912990][T10735] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1172.283457][T10735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.295608][T10735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.307849][T10735] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1172.318642][T10735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.328795][T10735] usb 4-1: config 0 descriptor?? [ 1172.882929][T10735] usbhid 4-1:0.0: can't add hid device: -71 [ 1172.890063][T10735] usbhid: probe of 4-1:0.0 failed with error -71 [ 1172.908813][T10735] usb 4-1: USB disconnect, device number 83 16:20:00 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:20:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:20:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={0x0}}, 0x0) 16:20:00 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x42c, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x76a53bf4}, 0x40) 16:20:00 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:20:00 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) 16:20:00 executing program 5: bpf$BPF_BTF_LOAD(0x2, 0x0, 0x0) 16:20:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000540)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xeb0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'veth0_vlan\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '%#+(&\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_MASK={0x55, 0x5, "1d90ca0fcff01f39594eb1917eeee4fad38b1cb265b64553e51e6806b845e97d7f72adda7d38c2f0b7d958970b45121538ad0d205b7612c5c948f26eb2ecda3eb8cc36f8628ee88f595257d07d79297f26"}, @ETHTOOL_A_BITSET_VALUE={0xdd, 0x4, "6681eba87182e9fae143c62d9ff2eb66a252c6a86ab9b285895cf21713b5aae51ccaa0ef7ca14784c2f90905aa4a1e03e5238b7e5b030e3e057c3a9e959f9e45762c4b892fb6ddb9868febd098091850db4d3cea448eae35901a190e0fe9a6e166cf68752fd558e0e9992666ba083e5afa15987421b24f040a86fbbeb764ae3d1f1f4e238e7596b0321c4b3d4e711802f9db54a2082d89e86dc46f6fc6a6bc8e5b9085b2307c1275a5db8c7171685845ddbe7c3d3c3009f53059affff43b95fa9dd8ffc707465a7a7b8bb365f1300692ff40ddd7e6ec000801"}, @ETHTOOL_A_BITSET_MASK={0xce5, 0x5, "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"}]}]}, 0xec4}}, 0x0) 16:20:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1001}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1800000016000161e20018a57aa6480408000000bb"], 0x78}}, 0x0) 16:20:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000040)) 16:20:00 executing program 5: bpf$PROG_LOAD(0x11, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:20:00 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000004480)) [ 1173.715891][T19081] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1174.082933][T19081] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.094404][T19081] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1174.107591][T19081] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1174.117150][T19081] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.128831][T19081] usb 4-1: config 0 descriptor?? [ 1174.672967][T19081] usbhid 4-1:0.0: can't add hid device: -71 [ 1174.679898][T19081] usbhid: probe of 4-1:0.0 failed with error -71 [ 1174.690237][T19081] usb 4-1: USB disconnect, device number 84 16:20:02 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:20:02 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) 16:20:02 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x1, &(0x7f0000000000)=@raw=[@ldst], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:20:02 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2={0xff, 0x2, [0x7]}}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="88"], 0x88}, 0x0) 16:20:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 16:20:02 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:20:02 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto(r0, &(0x7f0000000580)="f5", 0x1, 0x0, &(0x7f0000000680)=@in6={0xa, 0x4e20, 0x0, @loopback}, 0x80) 16:20:02 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = socket$unix(0x1, 0x2, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r2}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x2f}, 0x4c) sendmmsg(r1, &(0x7f0000000040), 0x40000000000020f, 0x0) 16:20:02 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 16:20:02 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)='\'', 0x1}], 0x1}, 0x0) 16:20:02 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @random, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3fa410", 0xc, 0x11, 0x0, @local, @local, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 16:20:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'dummy0\x00', &(0x7f0000000440)=ANY=[@ANYRES16=r0]}) [ 1175.502860][T17986] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1175.902977][T17986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1175.914849][T17986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1175.931291][T17986] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1175.945248][T17986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.960932][T17986] usb 4-1: config 0 descriptor?? [ 1176.512851][T17986] usbhid 4-1:0.0: can't add hid device: -71 [ 1176.519032][T17986] usbhid: probe of 4-1:0.0 failed with error -71 [ 1176.537208][T17986] usb 4-1: USB disconnect, device number 85 16:20:03 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:20:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x1, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x4}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {0x300}, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x1, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x4}]}, 0x24}}, 0x0) sendmsg$sock(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@generic={0x11, "0fc021a2d27274ba8cf9d80204fd3d7768ef80b14cd524e44d7ef1975439c12a2402e01fa8de9ebb3ab383537b14b5a7f45aa6751d5459e8f13992722d91913c9478f82f8ba36abfaa47bbc63bd1b8dfad49a1b1ec702d49b451d0ba41ff20de981efeb8aa7d442188f5241d5fcac27eaa92919a1ec1bf3c06381bd9789f"}, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000780)=[@txtime={{0x18, 0x1, 0x3d, 0x10000}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @mark={{0x14, 0x1, 0x24, 0x60}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x200000000000001}}], 0x78}, 0x4081) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000020101030000b0bc00ffff72aa81caf39fb202de0812b044d0d7d08550fee0b8b0a570b7a47c3b8c10b76529988759176e949b6b5527f9ac57709736dcfea68521e6598a9bd35186cd3e8f"], 0x44}}, 0x0) 16:20:03 executing program 1: socket$inet(0x2, 0x1, 0x8) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x4898e60748c23968) 16:20:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x3c0, &(0x7f0000000080)=[{&(0x7f0000001680)={0x20, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x6, 0x0, 0x0, 0x0, @str=',\x00'}, @nested={0x5, 0x0, 0x0, 0x1, [@generic='\x00']}]}, 0x20}], 0x1}, 0x0) 16:20:03 executing program 2: socket(0x26, 0x5, 0x8) 16:20:03 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:20:04 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000100)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000024000100"/20, @ANYRES32=r2, @ANYBLOB="0291820001ffffff"], 0x24}}, 0x0) 16:20:04 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) [ 1177.117401][T27852] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. 16:20:04 executing program 1: bpf$PROG_LOAD(0x6, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:20:04 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f0000000940)={&(0x7f0000000840), 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0) 16:20:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff9000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10) 16:20:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) [ 1177.322934][T17986] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1177.682918][T17986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1177.694379][T17986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1177.711809][T17986] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1177.724572][T17986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.740537][T17986] usb 4-1: config 0 descriptor?? [ 1177.910764][T27879] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1178.283133][T17986] usbhid 4-1:0.0: can't add hid device: -71 [ 1178.289452][T17986] usbhid: probe of 4-1:0.0 failed with error -71 [ 1178.305532][T17986] usb 4-1: USB disconnect, device number 86 16:20:05 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0), 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:20:05 executing program 2: bpf$PROG_LOAD(0x16, 0x0, 0x0) 16:20:05 executing program 1: bpf$BPF_BTF_LOAD(0x1e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 16:20:05 executing program 4: r0 = socket(0x28, 0x1, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20048045) 16:20:05 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:20:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x1, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x4}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {0x300}, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x1, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x4}]}, 0x24}}, 0x0) sendmsg$sock(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@generic={0x11, "0fc021a2d27274ba8cf9d80204fd3d7768ef80b14cd524e44d7ef1975439c12a2402e01fa8de9ebb3ab383537b14b5a7f45aa6751d5459e8f13992722d91913c9478f82f8ba36abfaa47bbc63bd1b8dfad49a1b1ec702d49b451d0ba41ff20de981efeb8aa7d442188f5241d5fcac27eaa92919a1ec1bf3c06381bd9789f"}, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000780)=[@txtime={{0x18, 0x1, 0x3d, 0x10000}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @mark={{0x14, 0x1, 0x24, 0x60}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x200000000000001}}], 0x78}, 0x4081) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000020101030000b0bc00ffff72aa81caf39fb202de0812b044d0d7d08550fee0b8b0a570b7a47c3b8c10b76529988759176e949b6b5527f9ac57709736dcfea68521e6598a9bd35186cd3e8f"], 0x44}}, 0x0) 16:20:05 executing program 1: pipe(&(0x7f0000000000)) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) 16:20:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) 16:20:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000cc0)=ANY=[@ANYBLOB='{'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x3}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @dev}]}}]}, 0x48}}, 0x0) [ 1178.847333][T27901] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. 16:20:05 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:20:06 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x44000, 0x0) 16:20:06 executing program 2: pipe(&(0x7f0000002480)) [ 1179.082931][T19081] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1179.503466][T19081] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1179.517169][T19081] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1179.530625][T19081] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1179.540306][T19081] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.551198][T19081] usb 4-1: config 0 descriptor?? [ 1180.283152][T19081] usbhid 4-1:0.0: can't add hid device: -71 [ 1180.289273][T19081] usbhid: probe of 4-1:0.0 failed with error -71 [ 1180.297489][T19081] usb 4-1: USB disconnect, device number 87 16:20:07 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0), 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:20:07 executing program 4: pipe(&(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0xfffffdea) splice(r0, 0x0, r3, 0x0, 0x80000005, 0x0) 16:20:07 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x67, 0x0, 0x1f}]}}, &(0x7f00000001c0)=""/139, 0x2a, 0x8b, 0x1}, 0x20) 16:20:07 executing program 1: socket(0xa, 0x0, 0x9087) 16:20:07 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:20:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x1, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x4}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {0x300}, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x1, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x4}]}, 0x24}}, 0x0) sendmsg$sock(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@generic={0x11, "0fc021a2d27274ba8cf9d80204fd3d7768ef80b14cd524e44d7ef1975439c12a2402e01fa8de9ebb3ab383537b14b5a7f45aa6751d5459e8f13992722d91913c9478f82f8ba36abfaa47bbc63bd1b8dfad49a1b1ec702d49b451d0ba41ff20de981efeb8aa7d442188f5241d5fcac27eaa92919a1ec1bf3c06381bd9789f"}, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000780)=[@txtime={{0x18, 0x1, 0x3d, 0x10000}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @mark={{0x14, 0x1, 0x24, 0x60}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x200000000000001}}], 0x78}, 0x4081) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000020101030000b0bc00ffff72aa81caf39fb202de0812b044d0d7d08550fee0b8b0a570b7a47c3b8c10b76529988759176e949b6b5527f9ac57709736dcfea68521e6598a9bd35186cd3e8f"], 0x44}}, 0x0) 16:20:07 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000005e0007ebffffff000000000000000000", @ANYRES32, @ANYBLOB="de"], 0x24}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x300, 0x0, 0x4b6ae4f95a5de35b) 16:20:07 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, 0x0) 16:20:07 executing program 1: pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) [ 1180.868520][T27953] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. 16:20:07 executing program 2: shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000000)=""/64) 16:20:08 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) 16:20:08 executing program 2: pipe(&(0x7f0000002480)={0xffffffffffffffff}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) [ 1181.063158][T12039] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1181.432919][T12039] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1181.444232][T12039] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1181.454079][T12039] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1181.463684][T12039] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.476322][T12039] usb 4-1: config 0 descriptor?? [ 1182.213108][T12039] usbhid 4-1:0.0: can't add hid device: -71 [ 1182.219404][T12039] usbhid: probe of 4-1:0.0 failed with error -71 [ 1182.228011][T12039] usb 4-1: USB disconnect, device number 88 16:20:09 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0), 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:20:09 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:20:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000000c0)={'veth1_vlan\x00'}) 16:20:09 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0) 16:20:09 executing program 4: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x8a000, 0x0) 16:20:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x1, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x4}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {0x300}, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x1, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x4}]}, 0x24}}, 0x0) sendmsg$sock(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@generic={0x11, "0fc021a2d27274ba8cf9d80204fd3d7768ef80b14cd524e44d7ef1975439c12a2402e01fa8de9ebb3ab383537b14b5a7f45aa6751d5459e8f13992722d91913c9478f82f8ba36abfaa47bbc63bd1b8dfad49a1b1ec702d49b451d0ba41ff20de981efeb8aa7d442188f5241d5fcac27eaa92919a1ec1bf3c06381bd9789f"}, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000780)=[@txtime={{0x18, 0x1, 0x3d, 0x10000}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @mark={{0x14, 0x1, 0x24, 0x60}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x200000000000001}}], 0x78}, 0x4081) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000020101030000b0bc00ffff72aa81caf39fb202de0812b044d0d7d08550fee0b8b0a570b7a47c3b8c10b76529988759176e949b6b5527f9ac57709736dcfea68521e6598a9bd35186cd3e8f"], 0x44}}, 0x0) 16:20:09 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) 16:20:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) 16:20:09 executing program 2: pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, 0x0) 16:20:09 executing program 4: lstat(&(0x7f0000002400)='./file0\x00', 0x0) [ 1182.802106][T28001] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. 16:20:09 executing program 4: pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, 0x0) 16:20:09 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x400, 0x0) [ 1183.022873][T12039] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1183.402963][T12039] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1183.414232][T12039] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1183.424154][T12039] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1183.434011][T12039] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.443752][T12039] usb 4-1: config 0 descriptor?? [ 1184.182911][T12039] usbhid 4-1:0.0: can't add hid device: -71 [ 1184.189507][T12039] usbhid: probe of 4-1:0.0 failed with error -71 [ 1184.208862][T12039] usb 4-1: USB disconnect, device number 89 16:20:11 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:20:11 executing program 4: pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(r0, &(0x7f0000000400)='./file0\x00', 0x0) 16:20:11 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x141800, 0x0) 16:20:11 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xa0002, 0x0) 16:20:11 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:20:11 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(0xffffffffffffffff, r0, 0x0) 16:20:11 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) 16:20:11 executing program 5: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x3f6f75cc0fe770ea, 0x0) 16:20:11 executing program 2: pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r0, 0xa, 0x0) 16:20:11 executing program 1: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x80, 0x1) [ 1184.771411][T28044] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 16:20:11 executing program 1: openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x101800, 0x0) 16:20:11 executing program 5: openat$fuse(0xffffffffffffff9c, &(0x7f0000000840)='/dev/fuse\x00', 0x2, 0x0) [ 1185.015958][T10735] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1185.383747][T10735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1185.394898][T10735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1185.410337][T10735] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1185.422296][T10735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.440485][T10735] usb 4-1: config 0 descriptor?? [ 1185.934372][T10735] corsair 0003:1B1C:1B34.0015: failed to start in urb: -90 [ 1185.951996][T10735] corsair 0003:1B1C:1B34.0015: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input0 [ 1186.149538][T12039] usb 4-1: USB disconnect, device number 90 16:20:13 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:20:13 executing program 4: pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADDIR(r0, 0x0, 0x0) 16:20:13 executing program 2: pipe(&(0x7f0000002480)={0xffffffffffffffff}) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) 16:20:13 executing program 5: lstat(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)) 16:20:13 executing program 1: pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) 16:20:13 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:20:13 executing program 5: openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) 16:20:13 executing program 4: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x113f70fe}, 0x0, 0x0) 16:20:13 executing program 1: pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x80000) 16:20:13 executing program 2: io_submit(0x0, 0x0, &(0x7f00000018c0)) 16:20:13 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) [ 1186.813289][T28100] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 16:20:13 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, 0x0) [ 1187.072807][T10735] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1187.433342][T10735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1187.444524][T10735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1187.458083][T10735] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1187.468641][T10735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.478557][T10735] usb 4-1: config 0 descriptor?? [ 1187.974559][T10735] corsair 0003:1B1C:1B34.0016: failed to start in urb: -90 [ 1187.991106][T10735] corsair 0003:1B1C:1B34.0016: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input0 [ 1188.185289][T12039] usb 4-1: USB disconnect, device number 91 16:20:15 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:20:15 executing program 1: pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) 16:20:15 executing program 2: pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) 16:20:15 executing program 4: pipe(&(0x7f0000002480)={0xffffffffffffffff}) read$FUSE(r0, 0x0, 0x0) 16:20:15 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4cc1, 0x0) 16:20:15 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:20:15 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 16:20:15 executing program 2: openat$random(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x40000, 0x0) 16:20:15 executing program 4: clock_gettime(0x0, &(0x7f0000000380)) 16:20:15 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x8b00, 0x0) [ 1188.804229][T28152] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 16:20:15 executing program 1: pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) 16:20:15 executing program 5: pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(r0, &(0x7f0000008c40)=ANY=[], 0x650) [ 1189.112890][T10735] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1189.502861][T10735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1189.514837][T10735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1189.525203][T10735] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1189.535733][T10735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.545615][T10735] usb 4-1: config 0 descriptor?? [ 1190.034211][T10735] corsair 0003:1B1C:1B34.0017: failed to start in urb: -90 [ 1190.050799][T10735] corsair 0003:1B1C:1B34.0017: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input0 [ 1190.236400][T10735] usb 4-1: USB disconnect, device number 92 16:20:17 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 16:20:17 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0x0) 16:20:17 executing program 2: pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 16:20:17 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:20:17 executing program 1: pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, 0x0, 0x0) 16:20:17 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff00000500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:20:17 executing program 1: pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r0, 0x0, 0x0) 16:20:17 executing program 4: openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x80600, 0x0) 16:20:17 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000440)='/proc/thread-self\x00', 0x80402, 0x0) 16:20:17 executing program 5: pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) [ 1190.878398][T28205] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 16:20:17 executing program 5: chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0xee01) 16:20:17 executing program 1: pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, 0x0, 0x0) [ 1191.163006][ T34] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1191.522991][ T34] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1191.534416][ T34] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1191.550400][ T34] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1191.562284][ T34] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.577569][ T34] usb 4-1: config 0 descriptor?? [ 1192.054673][ T34] corsair 0003:1B1C:1B34.0018: failed to start in urb: -90 [ 1192.080208][ T34] corsair 0003:1B1C:1B34.0018: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input0 [ 1192.255428][ T34] usb 4-1: USB disconnect, device number 93 16:20:19 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 16:20:19 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff00000500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:20:19 executing program 4: mount(&(0x7f0000000540)=@sr0='/dev/sr0\x00', &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='afs\x00', 0x0, 0x0) 16:20:19 executing program 2: pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_OPEN(r0, 0x0, 0x0) 16:20:19 executing program 1: pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 16:20:19 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200000, 0x0) 16:20:19 executing program 1: write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x650) 16:20:19 executing program 4: pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xffffffffffffffff) 16:20:19 executing program 5: pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) 16:20:19 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) [ 1192.887732][T28262] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 16:20:19 executing program 4: newfstatat(0xffffffffffffff9c, &(0x7f0000008940)='./file0\x00', 0x0, 0x0) 16:20:19 executing program 1: getresgid(&(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)) [ 1193.132851][ T34] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1193.492974][ T34] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1193.504615][ T34] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1193.514574][ T34] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1193.524196][ T34] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.538208][ T34] usb 4-1: config 0 descriptor?? [ 1194.024614][ T34] corsair 0003:1B1C:1B34.0019: failed to start in urb: -90 [ 1194.041817][ T34] corsair 0003:1B1C:1B34.0019: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input0 [ 1194.225715][ T34] usb 4-1: USB disconnect, device number 94 16:20:21 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 16:20:21 executing program 5: pipe(&(0x7f0000002480)={0xffffffffffffffff}) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) 16:20:21 executing program 4: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x2000, 0x0) 16:20:21 executing program 1: pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_STATFS(r0, 0x0, 0x0) 16:20:21 executing program 2: bpf$PROG_LOAD(0x7, 0x0, 0x0) 16:20:21 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff00000500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:20:21 executing program 2: openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x40040, 0x0) 16:20:21 executing program 1: pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 16:20:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) 16:20:21 executing program 5: pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIOCLEX(r0, 0x5451) [ 1194.881564][T28314] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 16:20:21 executing program 1: keyctl$search(0xa, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 16:20:22 executing program 5: pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) [ 1195.160445][T17969] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1195.523037][T17969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1195.534347][T17969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1195.545959][T17969] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1195.556278][T17969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.570596][T17969] usb 4-1: config 0 descriptor?? [ 1196.064209][T17969] corsair 0003:1B1C:1B34.001A: failed to start in urb: -90 [ 1196.072354][T17969] corsair 0003:1B1C:1B34.001A: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input0 [ 1196.269372][T17969] usb 4-1: USB disconnect, device number 95 16:20:23 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 16:20:23 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff00000500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:20:23 executing program 4: pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENT(r0, 0x0, 0x0) 16:20:23 executing program 2: pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) 16:20:23 executing program 1: pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x0, 0x0) 16:20:23 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x701000, 0x0) 16:20:23 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000002040)={{0x0, 0xee00}}) 16:20:23 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, 0x0) 16:20:23 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) 16:20:23 executing program 1: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 16:20:23 executing program 5: pipe(&(0x7f0000002580)={0xffffffffffffffff, 0xffffffffffffffff}) write$tcp_mem(r0, 0x0, 0x0) [ 1196.935903][T28369] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 16:20:24 executing program 4: pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setown(r0, 0x8, 0x0) [ 1197.185035][ T34] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1197.583721][ T34] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1197.595164][ T34] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1197.612107][ T34] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1197.623291][ T34] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.635241][ T34] usb 4-1: config 0 descriptor?? [ 1198.114508][ T34] corsair 0003:1B1C:1B34.001B: failed to start in urb: -90 [ 1198.139640][ T34] corsair 0003:1B1C:1B34.001B: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input0 [ 1198.323638][T17986] usb 4-1: USB disconnect, device number 96 16:20:25 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 16:20:25 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) 16:20:25 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700)='/dev/zero\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 16:20:25 executing program 4: setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[], 0x74, 0x0) 16:20:25 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$TCGETX(r0, 0x5432, 0x0) 16:20:25 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff00000500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:20:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 16:20:25 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700)='/dev/zero\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 16:20:25 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700)='/dev/zero\x00', 0x0, 0x0) ioctl$CHAR_RAW_GETSIZE64(r0, 0x80081272, 0x0) 16:20:25 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, 0x0) [ 1198.943454][T28422] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 16:20:26 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700)='/dev/zero\x00', 0x0, 0x0) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, 0x0) 16:20:26 executing program 2: select(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x10000}, 0x0, 0x0) [ 1199.222880][T10735] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1199.633029][T10735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1199.644336][T10735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1199.654261][T10735] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1199.663964][T10735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.674834][T10735] usb 4-1: config 0 descriptor?? [ 1200.164605][T10735] corsair 0003:1B1C:1B34.001C: failed to start in urb: -90 [ 1200.189155][T10735] corsair 0003:1B1C:1B34.001C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input0 [ 1200.366714][T10735] usb 4-1: USB disconnect, device number 97 16:20:27 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 16:20:27 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700)='/dev/zero\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) 16:20:27 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 16:20:27 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0x0) 16:20:27 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700)='/dev/zero\x00', 0x0, 0x0) ioctl$CHAR_RAW_ROSET(r0, 0x125d, 0x0) 16:20:27 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff00000500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:20:27 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 16:20:27 executing program 1: clock_gettime(0x1, &(0x7f0000001000)) 16:20:28 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) 16:20:28 executing program 4: r0 = epoll_create(0x8000) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) [ 1201.012454][T28479] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 16:20:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x2f) 16:20:28 executing program 5: clock_getres(0x5, &(0x7f0000000200)) [ 1201.267124][T17986] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1201.632862][T17986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1201.644577][T17986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1201.661585][T17986] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1201.674153][T17986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.693478][T17986] usb 4-1: config 0 descriptor?? [ 1202.174256][T17986] corsair 0003:1B1C:1B34.001D: failed to start in urb: -90 [ 1202.182558][T17986] corsair 0003:1B1C:1B34.001D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input0 [ 1202.375683][T17986] usb 4-1: USB disconnect, device number 98 16:20:29 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 16:20:29 executing program 1: syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x1, 0x410202) 16:20:29 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.stat\x00', 0x0, 0x0) 16:20:29 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700)='/dev/zero\x00', 0x0, 0x0) ioctl$CHAR_RAW_SECDISCARD(r0, 0x127d, 0x0) 16:20:29 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff0000050000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:20:29 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000020c0)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0x0) 16:20:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000740), 0x0) 16:20:30 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700)='/dev/zero\x00', 0x0, 0x0) openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) 16:20:30 executing program 2: request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) 16:20:30 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) [ 1203.013424][T28532] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 16:20:30 executing program 1: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.subtree_control\x00', 0x2, 0x0) 16:20:30 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x141200, 0x0) [ 1203.272818][T17969] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1203.692918][T17969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1203.704354][T17969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1203.720065][T17969] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1203.732047][T17969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.744959][T17969] usb 4-1: config 0 descriptor?? [ 1204.254490][T17969] corsair 0003:1B1C:1B34.001E: failed to start in urb: -90 [ 1204.276107][T17969] corsair 0003:1B1C:1B34.001E: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input0 [ 1204.455883][T10735] usb 4-1: USB disconnect, device number 99 16:20:31 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 16:20:31 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 16:20:31 executing program 4: semget$private(0x0, 0x1, 0x10) 16:20:31 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700)='/dev/zero\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) 16:20:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000740)='I', 0x1) 16:20:31 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff0000050000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:20:32 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700)='/dev/zero\x00', 0x0, 0x0) ioctl$CHAR_RAW_FRASET(r0, 0x1264, 0x0) 16:20:32 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700)='/dev/zero\x00', 0x0, 0x0) ioctl$CHAR_RAW_ALIGNOFF(r0, 0x127a, 0x0) 16:20:32 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) 16:20:32 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) [ 1205.073485][T28584] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 16:20:32 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x204000, 0x0) 16:20:32 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700)='/dev/zero\x00', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) [ 1205.342924][T19081] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1205.702938][T19081] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1205.702974][T19081] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1205.703032][T19081] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1205.703056][T19081] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.711729][T19081] usb 4-1: config 0 descriptor?? [ 1206.224248][T19081] corsair 0003:1B1C:1B34.001F: failed to start in urb: -90 [ 1206.232502][T19081] corsair 0003:1B1C:1B34.001F: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input0 [ 1206.426853][T19081] usb 4-1: USB disconnect, device number 100 16:20:33 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 16:20:33 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700)='/dev/zero\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) 16:20:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x10) 16:20:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, &(0x7f0000000080)) 16:20:33 executing program 2: semget(0x2, 0x0, 0x222) 16:20:33 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff0000050000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:20:34 executing program 4: semget(0x2, 0x3, 0x222) 16:20:34 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 16:20:34 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 16:20:34 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700)='/dev/zero\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) [ 1207.079491][T28639] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 16:20:34 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xf0ff7f00000000}}, 0x0) 16:20:34 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x10, &(0x7f0000000000)=0x7, 0x4) [ 1207.342816][ T34] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1207.763652][ T34] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1207.774995][ T34] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1207.784957][ T34] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1207.794345][ T34] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.804016][ T34] usb 4-1: config 0 descriptor?? [ 1208.264819][ T34] corsair 0003:1B1C:1B34.0020: failed to start in urb: -90 [ 1208.282442][ T34] corsair 0003:1B1C:1B34.0020: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input0 [ 1208.479767][T18001] usb 4-1: USB disconnect, device number 101 16:20:35 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x11, @empty, 0x0, 0x0, 'nq\x00'}, 0x2c) 16:20:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000002040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) 16:20:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0xb4, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x0, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x0, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x0, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x0, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL]}]}, 0xb4}}, 0x0) 16:20:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x1b}, 0x40) 16:20:35 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) 16:20:36 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 16:20:36 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x19, &(0x7f0000000000)=0x7, 0x4) 16:20:36 executing program 5: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_bcm(r0, &(0x7f0000002180)={0x0, 0x0, 0x0}, 0x0) 16:20:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f00000006c0)="09f9a108f7eb2ad08094f8c52bf203214817478dfd34837dc5e8faec3c3728bb716c19ac02d4285491502780cdb8c5bbc036f2d2dd1244899111f060ae6fb6b3b08b5ff9821797d662258865885bc4e6331b35f42527bbf1956d4756", 0x5c, 0x200400d8, &(0x7f00000007c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x16}, 0x5}, 0x1c) [ 1209.068765][T28690] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1209.101481][T28693] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 16:20:36 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 16:20:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1b}, 0x1c) 16:20:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)=""/4081, 0xff1}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) shutdown(r3, 0x0) [ 1209.408120][T19081] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1209.773060][T19081] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1209.784456][T19081] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1209.801882][T19081] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1209.815294][T19081] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.832415][T19081] usb 4-1: config 0 descriptor?? [ 1210.334205][T19081] corsair 0003:1B1C:1B34.0021: failed to start in urb: -90 [ 1210.342703][T19081] corsair 0003:1B1C:1B34.0021: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input0 [ 1210.536183][T18001] usb 4-1: USB disconnect, device number 102 16:20:38 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 16:20:38 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) 16:20:38 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x903, &(0x7f0000000280), 0x8) 16:20:38 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) 16:20:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1b}, 0x1c) 16:20:38 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0x101, &(0x7f0000000280), &(0x7f0000000200)=0x98) 16:20:38 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x28, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) r2 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x21, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 16:20:38 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001740)={&(0x7f0000000200)=@in={0x10, 0x2}, 0x10, &(0x7f0000001680)=[{&(0x7f0000000240)='C', 0x1}, {0x0}], 0x2, &(0x7f00000016c0)=[@authinfo={0x10}, @authinfo={0x10}, @prinfo={0x14, 0x84, 0x7, {0x1}}], 0x34}, 0x0) 16:20:38 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000080), 0x84) 16:20:38 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x10040) 16:20:38 executing program 5: syz_open_dev$sg(&(0x7f00000006c0)='/dev/sg#\x00', 0x5, 0x208200) 16:20:38 executing program 2: syz_genetlink_get_family_id$l2tp(&(0x7f0000001600)='l2tp\x00') [ 1211.452963][T19081] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1211.832949][T19081] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1211.844164][T19081] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1211.858448][T19081] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1211.867729][T19081] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.880338][T19081] usb 4-1: config 0 descriptor?? [ 1212.364064][T19081] corsair 0003:1B1C:1B34.0022: failed to start in urb: -90 [ 1212.372317][T19081] corsair 0003:1B1C:1B34.0022: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input0 [ 1212.570531][T19081] usb 4-1: USB disconnect, device number 103 16:20:40 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 16:20:40 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000001400)={'HL\x00'}, &(0x7f0000001440)=0x1e) 16:20:40 executing program 2: bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f000000aac0)='IPVS\x00') 16:20:40 executing program 5: getitimer(0x1, &(0x7f0000000500)) 16:20:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1b}, 0x1c) 16:20:40 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) 16:20:40 executing program 5: openat$vcs(0xffffffffffffff9c, 0x0, 0x408002, 0x0) 16:20:40 executing program 4: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000280)) 16:20:40 executing program 2: syz_open_dev$ndb(&(0x7f0000000b80)='/dev/nbd#\x00', 0x0, 0x800) 16:20:40 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, 0x0) 16:20:40 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001700)={0x0, @tipc, @isdn, @ethernet}) 16:20:40 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000001540)='/dev/vcs\x00', 0x80000, 0x0) [ 1213.492833][T17986] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1213.920666][T17986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1213.932220][T17986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1213.948176][T17986] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 1213.960913][T17986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.979422][T17986] usb 4-1: config 0 descriptor?? [ 1214.494559][T17986] corsair 0003:1B1C:1B34.0023: failed to start in urb: -90 [ 1214.510319][T17986] corsair 0003:1B1C:1B34.0023: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input0 [ 1214.697353][T19081] usb 4-1: USB disconnect, device number 104 16:20:42 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, 0x0, 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:20:42 executing program 2: pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r0, 0x0, 0x0) 16:20:42 executing program 4: perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:20:42 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[], &(0x7f0000000080)=""/4096, 0x75, 0x1000, 0x8}, 0x20) 16:20:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1b}, 0x1c) 16:20:42 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x5, 0x0, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0xa5, &(0x7f0000000100)=""/165, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:20:42 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0470, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) [ 1215.278580][T28865] BPF:Invalid magic [ 1215.297534][T28865] BPF:Invalid magic 16:20:42 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f000000d3c0)={0xd}, 0x40) 16:20:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000680)=@gcm_128={{}, "2d86eb71626ed6d5", "38bbfeeb5d46f0bb4bb577f3821c4824", "72074beb", "c658bbf8097277f5"}, 0x28) 16:20:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001a80)={0xffffffffffffffff}) r1 = dup(r0) write$fb(r1, &(0x7f0000000400)='L', 0x1) 16:20:42 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x7) recvmsg(r0, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0) 16:20:42 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) 16:20:43 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, 0x0, 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:20:43 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') 16:20:43 executing program 3: openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x1, 0x0) 16:20:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x1, &(0x7f0000000100)=@raw=[@jmp], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:20:43 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1b}, 0x1c) 16:20:43 executing program 4: recvmsg(0xffffffffffffffff, 0x0, 0xb0cfd8feca4f69e0) 16:20:43 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x8000, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)}) 16:20:43 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1b}, 0x1c) 16:20:43 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0x5111, 0x0) 16:20:43 executing program 4: fanotify_mark(0xffffffffffffffff, 0x15, 0x0, 0xffffffffffffffff, 0x0) 16:20:43 executing program 5: r0 = openat$procfs(0xffffff9c, &(0x7f0000001500)='/proc/tty/drivers\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0) 16:20:43 executing program 2: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/nvme-fabrics\x00', 0x442, 0x0) 16:20:44 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, 0x0, 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16:20:44 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1b}, 0x1c) 16:20:44 executing program 3: openat$vicodec1(0xffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) 16:20:44 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='net/ipv6_route\x00') setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) 16:20:44 executing program 5: r0 = openat$drirender128(0xffffff9c, &(0x7f0000000300)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000340)) 16:20:44 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='net/ipv6_route\x00') setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, 0x0, 0x0) 16:20:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40091) 16:20:44 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1b}, 0x1c) 16:20:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x4000014) 16:20:44 executing program 2: pipe2(&(0x7f00000025c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) recvmsg(r0, 0x0, 0x0) 16:20:44 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)) 16:20:44 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) 16:20:44 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe2, 0x0) 16:20:44 executing program 5: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0) 16:20:44 executing program 4: r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a45322, &(0x7f0000000180)) 16:20:44 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1b}, 0x1c) 16:20:44 executing program 2: ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, 0x0) 16:20:44 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x148) 16:20:45 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1b}, 0x1c) 16:20:45 executing program 5: r0 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) 16:20:45 executing program 2: r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, 0x0) 16:20:45 executing program 4: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, 0x0, 0x0) 16:20:45 executing program 3: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0) 16:20:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x4000844) 16:20:45 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe2, 0x0) 16:20:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) 16:20:45 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @rand_addr=0x64010102}}}, 0x88) 16:20:45 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) 16:20:45 executing program 3: r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000003380)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, 0x0) 16:20:45 executing program 5: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 16:20:45 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000380), 0x4) 16:20:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x80) 16:20:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) 16:20:46 executing program 5: syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x60000) 16:20:46 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:20:46 executing program 4: keyctl$get_persistent(0x16, 0xee00, 0xfffffffffffffff9) 16:20:46 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe2, 0x0) 16:20:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) 16:20:46 executing program 5: r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) 16:20:46 executing program 2: pipe2(&(0x7f00000025c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40086437, 0x0) 16:20:46 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x7, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, 0x0) 16:20:46 executing program 4: r0 = openat$misdntimer(0xffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000080)) 16:20:46 executing program 5: r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) 16:20:46 executing program 2: r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0x0, 0x0) 16:20:46 executing program 3: r0 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, 0x0) 16:20:46 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='stat\x00') write$cgroup_pid(r0, 0x0, 0x0) 16:20:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) 16:20:47 executing program 5: r0 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 16:20:47 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) 16:20:47 executing program 4: process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000003640)=[{0x0}], 0x1, 0x0) 16:20:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x3574dd3779e61f28) 16:20:47 executing program 2: openat$userio(0xffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x140100, 0x0) 16:20:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) 16:20:47 executing program 5: r0 = openat$fb0(0xffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, 0x0) 16:20:47 executing program 5: openat$hwrng(0xffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 16:20:47 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:20:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x8000) 16:20:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) 16:20:47 executing program 2: perf_event_open$cgroup(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) 16:20:48 executing program 5: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) 16:20:48 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000), 0x14) 16:20:48 executing program 4: r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000003380)='/dev/ocfs2_control\x00', 0x0, 0x0) getpeername$packet(r0, 0x0, 0x0) 16:20:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4008880) 16:20:48 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) 16:20:48 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 16:20:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={0x0}}, 0x8040) 16:20:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20000000) 16:20:48 executing program 3: r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 16:20:48 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000340)='logon\x00', &(0x7f0000000200)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000240)={0x0, "c77324e65c760867f3c07b4a0a85e1bf2a0b0173b10a5e271e1835ed515a3046d097fc4b8fe4410d33191b48c8aa27794ec9cc00"}, 0x48, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140)='keyring\x00', 0x0, 0x0, 0x0, r0) 16:20:48 executing program 5: r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, 0x0, 0x0) 16:20:48 executing program 4: r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000003380)='/dev/ocfs2_control\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) 16:20:49 executing program 1: r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) 16:20:49 executing program 2: r0 = openat$cuse(0xffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 16:20:49 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) 16:20:49 executing program 4: r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) 16:20:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x3c}}, 0x4840) 16:20:49 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 16:20:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20000000) 16:20:49 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) 16:20:49 executing program 2: r0 = openat$dlm_plock(0xffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 16:20:49 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f0000001a40)='IPVS\x00') 16:20:49 executing program 4: write$midi(0xffffffffffffffff, 0x0, 0x0) 16:20:49 executing program 5: pipe2(&(0x7f00000025c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, 0x0) 16:20:49 executing program 3: add_key(&(0x7f0000000100)='.request_key_auth\x00', 0x0, 0x0, 0x0, 0x0) 16:20:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20000000) 16:20:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00') write$RDMA_USER_CM_CMD_BIND(r0, 0x0, 0x0) 16:20:49 executing program 1: r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) 16:20:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000002f80)=ANY=[], 0x30}}, 0x2000c800) 16:20:50 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 16:20:50 executing program 3: sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, 0x0, 0x0) 16:20:50 executing program 2: syz_open_dev$ndb(&(0x7f0000000180)='/dev/nbd#\x00', 0x0, 0x4c4280) 16:20:50 executing program 4: openat$sndseq(0xffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x40) 16:20:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/fscreate\x00') ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) 16:20:50 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x0, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) 16:20:50 executing program 2: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffc, &(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)='\\&-)\x00') 16:20:50 executing program 5: r0 = openat$audio(0xffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000080)) 16:20:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[], 0x4c}}, 0x4000) 16:20:50 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000028c0)) 16:20:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000d40)=ANY=[], 0x420}}, 0x20000000) 16:20:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={0x0}}, 0x20040000) 16:20:51 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 16:20:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x80) 16:20:51 executing program 5: r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r0, 0x0, 0x0) 16:20:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0xc4800) 16:20:51 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40000) 16:20:51 executing program 2: r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 16:20:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x40) 16:20:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/fscreate\x00') setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 16:20:51 executing program 4: r0 = openat$dlm_plock(0xffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 16:20:51 executing program 5: r0 = openat$audio(0xffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:20:51 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x0, 0x0) recvmsg$can_j1939(r0, 0x0, 0x0) 16:20:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={0x0}}, 0x0) 16:20:52 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 16:20:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x24048041) 16:20:52 executing program 4: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 16:20:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0}}, 0x20000000) 16:20:52 executing program 2: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, 0x0, 0x0) 16:20:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4008090) 16:20:52 executing program 5: r0 = openat$dlm_plock(0xffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 16:20:52 executing program 2: r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000003380)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) 16:20:52 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, 0x0) 16:20:52 executing program 3: r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0) 16:20:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0x800) 16:20:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20000094) 16:20:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4) 16:20:53 executing program 4: bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340), 0x10) 16:20:53 executing program 2: r0 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) 16:20:53 executing program 1: r0 = openat$hwrng(0xffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) 16:20:53 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 16:20:53 executing program 0: openat$audio(0xffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80882, 0x0) 16:20:53 executing program 5: r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) 16:20:53 executing program 3: r0 = openat$hwrng(0xffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, 0x0, 0x0) 16:20:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x1c}}, 0x20000010) 16:20:53 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 16:20:53 executing program 2: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) 16:20:53 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='net/ipv6_route\x00') setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, 0x0) 16:20:53 executing program 5: semctl$GETNCNT(0x0, 0x4, 0xe, 0x0) 16:20:53 executing program 4: r0 = openat$audio(0xffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) 16:20:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000077c0)={0x0}}, 0x20040000) 16:20:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x8040) 16:20:53 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xd, 0xffffffffffffffff, 0x0) 16:20:53 executing program 2: r0 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 16:20:53 executing program 4: r0 = openat$cuse(0xffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_GETXATTR(r0, 0x0, 0x0) 16:20:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4000000) 16:20:54 executing program 4: creat(&(0x7f0000000140)='./file0\x00', 0x18) 16:20:54 executing program 0: r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x210000, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000001c0)=')--\x00', &(0x7f0000000200)=')', 0x1) 16:20:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)=0x6a) 16:20:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40) 16:20:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:20:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:20:54 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 16:20:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0}}, 0x20004810) 16:20:54 executing program 1: r0 = openat$hwrng(0xffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, 0x0, 0x0) 16:20:54 executing program 0: r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000003380)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0505611, 0x0) 16:20:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 16:20:54 executing program 5: r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, 0x0, 0x0) 16:20:54 executing program 4: r0 = openat$audio(0xffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) 16:20:54 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000740)={0x2, 0x0, @broadcast}, 0x10) 16:20:54 executing program 0: r0 = openat$vsock(0xffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, 0x0) 16:20:54 executing program 1: r0 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) dup(r0) 16:20:54 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000680)={0x7, 'tunl0\x00'}) 16:20:54 executing program 5: r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x0, 0x0) sendmsg$NET_DM_CMD_START(r0, 0x0, 0x0) 16:20:54 executing program 4: r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) 16:20:54 executing program 3: r0 = openat$drirender128(0xffffff9c, &(0x7f0000000180)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) 16:20:54 executing program 1: r0 = openat$ipvs(0xffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) 16:20:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x20000010) 16:20:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x10) 16:20:54 executing program 4: r0 = openat$audio(0xffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000040)) 16:20:54 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='net/ipv6_route\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, 0x0, 0x0) 16:20:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x25add6c562f66638) 16:20:54 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x404c890) 16:20:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={0x0}}, 0x404c000) 16:20:54 executing program 2: r0 = openat$ipvs(0xffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc008641d, 0x0) 16:20:54 executing program 4: syz_mount_image$ocfs2(&(0x7f0000000140)='ocfs2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[]) 16:20:54 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/fscreate\x00') setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) 16:20:54 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001380)='memory.current\x00', 0x0, 0x0) 16:20:54 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000001500)='/proc/tty/drivers\x00', 0x0, 0x0) 16:20:54 executing program 1: r0 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, 0x0) 16:20:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 16:20:55 executing program 4: r0 = openat$audio(0xffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, 0x0) 16:20:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x10) 16:20:55 executing program 1: sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, 0x0, 0x0) 16:20:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 16:20:55 executing program 0: syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)) 16:20:55 executing program 2: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, 0x0) 16:20:55 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='net/ipv6_route\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0x0) 16:20:55 executing program 4: r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) sendmsg$AUDIT_SET(r0, 0x0, 0x0) 16:20:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x44}}, 0x80) 16:20:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x10) 16:20:55 executing program 3: r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, 0x0) [ 1228.304303][T29375] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. 16:20:55 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='net/ipv6_route\x00') setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x0) 16:20:55 executing program 2: add_key$fscrypt_v1(&(0x7f0000000340)='logon\x00', &(0x7f0000000200)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000240)={0x0, "c77324e65c760867f3c07b4a0a85e1bf2a0b0173b10a5e271e1835ed515a3046d097fc4b8fe4410d33191b48c8aa27794ec9cc00"}, 0x48, 0xffffffffffffffff) 16:20:55 executing program 4: r0 = openat$audio(0xffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) [ 1228.387893][T29375] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. 16:20:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x68}}, 0x40081) 16:20:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20000000) 16:20:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20000008) 16:20:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x20040854) 16:20:55 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:20:55 executing program 1: r0 = openat$vsock(0xffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0xa98) 16:20:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000001540)='net/icmp\x00') setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x0) 16:20:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4040000) 16:20:55 executing program 0: r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) inotify_rm_watch(r0, 0x0) 16:20:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000200)=0x88) 16:20:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000004d80)={0x0}}, 0x40) 16:20:55 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000a00)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:20:55 executing program 3: r0 = openat$hwrng(0xffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x0) 16:20:55 executing program 1: r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000280)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, 0x0) 16:20:55 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) 16:20:55 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) recvmmsg(r0, &(0x7f00000053c0), 0x0, 0x42, &(0x7f0000005500)={0x77359400}) 16:20:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x48}}, 0x40) 16:20:55 executing program 3: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) 16:20:55 executing program 1: r0 = socket$phonet(0x23, 0x2, 0x1) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, &(0x7f0000000900)) 16:20:55 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan1\x00') write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) 16:20:56 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100), &(0x7f00000001c0)=0x8) 16:20:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp6\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:20:56 executing program 3: r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) [ 1229.162972][T10735] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1229.523549][T10735] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1229.534718][T10735] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1229.553100][T10735] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1229.568044][T10735] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1229.587735][T10735] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1229.601159][T10735] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1229.762911][T10735] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1229.772695][T10735] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.788425][T10735] usb 6-1: Product: syz [ 1229.795459][T10735] usb 6-1: Manufacturer: syz [ 1229.800059][T10735] usb 6-1: SerialNumber: syz [ 1230.302916][T10735] cdc_ncm 6-1:1.0: bind() failure [ 1230.322914][T10735] cdc_ncm: probe of 6-1:1.1 failed with error -71 [ 1230.342996][T10735] cdc_mbim: probe of 6-1:1.1 failed with error -71 [ 1230.363141][T10735] usbtest: probe of 6-1:1.1 failed with error -71 [ 1230.372340][T10735] usb 6-1: USB disconnect, device number 4 [ 1231.062849][T18001] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1231.463074][T18001] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.475055][T18001] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1231.488639][T18001] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1231.498480][T18001] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1231.509897][T18001] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1231.520011][T18001] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1231.702915][T18001] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1231.712306][T18001] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.723449][T18001] usb 6-1: Product: syz [ 1231.728432][T18001] usb 6-1: Manufacturer: syz [ 1231.734558][T18001] usb 6-1: SerialNumber: syz 16:20:58 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001080)) 16:20:58 executing program 1: r0 = openat$audio(0xffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) 16:20:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname(r0, 0x0, &(0x7f0000000780)) 16:20:58 executing program 2: r0 = openat$ipvs(0xffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r0, 0x0, 0x0) 16:20:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x4c040) 16:20:58 executing program 3: socket$inet6_sctp(0xa, 0x75a96f1d33b7969b, 0x84) [ 1231.873028][T18001] cdc_ncm 6-1:1.0: bind() failure [ 1231.881146][T18001] cdc_ncm 6-1:1.1: bind() failure 16:20:58 executing program 0: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0505611, 0x0) 16:20:58 executing program 2: ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) [ 1231.948403][T18001] usb 6-1: USB disconnect, device number 5 16:20:59 executing program 4: r0 = openat$ipvs(0xffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) sendmsg$AUDIT_ADD_RULE(r0, 0x0, 0x0) 16:20:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000001c0)=0x80) recvmsg$kcm(r1, 0x0, 0x0) 16:20:59 executing program 3: process_vm_readv(0x0, &(0x7f0000001180)=[{0x0}], 0x1, &(0x7f0000001240), 0x0, 0x0) 16:20:59 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000140)) 16:20:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000004c40)={0x0, 0x0, &(0x7f0000004c00)={0x0}}, 0x800) 16:20:59 executing program 0: r0 = openat$ipvs(0xffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, 0x0, 0x0) 16:20:59 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname(r0, &(0x7f0000000700)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000780)=0x80) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x0) 16:20:59 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, 0x0) 16:20:59 executing program 5: r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000003380)='/dev/ocfs2_control\x00', 0x0, 0x0) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, 0x0) 16:20:59 executing program 1: r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) 16:20:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, 0x0) 16:20:59 executing program 5: r0 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, 0x0) 16:20:59 executing program 0: r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, 0x0) 16:20:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/fscreate\x00') ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) 16:20:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/fscreate\x00') getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, 0x0) 16:20:59 executing program 1: openat$ocfs2_control(0xffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x4080, 0x0) 16:20:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/fscreate\x00') ioctl$NBD_DO_IT(r0, 0xab03) 16:20:59 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f00000002c0)) 16:20:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/fscreate\x00') connect$can_bcm(r0, 0x0, 0x0) 16:20:59 executing program 4: r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, 0x0) 16:20:59 executing program 5: r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) recvmsg$can_j1939(r0, 0x0, 0x0) 16:20:59 executing program 1: r0 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 16:20:59 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40000) 16:20:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='limits\x00') recvmsg(r0, 0x0, 0x0) 16:20:59 executing program 2: r0 = openat$hwrng(0xffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000002140)='cpuset.memory_spread_slab\x00', 0x2, 0x0) 16:20:59 executing program 5: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001240)=[{0x0}], 0x1, 0x0) 16:20:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f0000002a00)=ANY=[], 0xbc}}, 0x40000) 16:20:59 executing program 1: ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) 16:20:59 executing program 3: r0 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 16:20:59 executing program 5: r0 = openat$dlm_control(0xffffff9c, &(0x7f00000014c0)='/dev/dlm-control\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, 0x0, 0x0) 16:20:59 executing program 4: openat$full(0xffffff9c, 0x0, 0x480101, 0x0) 16:20:59 executing program 0: r0 = openat$dlm_plock(0xffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, 0x0) 16:20:59 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000003100), &(0x7f0000003280)=0x4) 16:20:59 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) 16:20:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/fscreate\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r0, 0x0, 0x0) 16:21:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x50}}, 0x48000) 16:21:00 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000180)=""/66) 16:21:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, 0x0, &(0x7f00000009c0)) 16:21:00 executing program 2: r0 = openat$dlm_plock(0xffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, 0x0) 16:21:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x10) 16:21:00 executing program 3: r0 = openat$hwrng(0xffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$SMC_PNETID_DEL(r0, 0x0, 0x0) 16:21:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4000000) 16:21:00 executing program 4: r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x0, 0x0) 16:21:00 executing program 0: r0 = openat$dlm_control(0xffffff9c, &(0x7f00000014c0)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 16:21:00 executing program 1: perf_event_open$cgroup(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 16:21:00 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, 0x0) 16:21:00 executing program 5: r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000003380)='/dev/ocfs2_control\x00', 0x0, 0x0) recvmsg$can_bcm(r0, 0x0, 0x0) 16:21:00 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) 16:21:00 executing program 0: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) 16:21:00 executing program 4: syz_io_uring_setup(0x41b3, &(0x7f0000000240), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_setup(0x77e3, &(0x7f00000004c0)) 16:21:00 executing program 1: pipe2(&(0x7f00000025c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bind$ax25(r0, 0x0, 0x0) 16:21:00 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 16:21:00 executing program 1: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x4200) 16:21:00 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) 16:21:00 executing program 5: r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, 0x0) 16:21:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x24000010) 16:21:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000036c0)={0x0, 0x0, &(0x7f0000003680)={0x0}}, 0x40) 16:21:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x10) 16:21:00 executing program 3: socket(0x18, 0x0, 0xfff) 16:21:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x1c}}, 0x900) 16:21:00 executing program 4: r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0x0) 16:21:00 executing program 0: r0 = openat$ipvs(0xffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 16:21:00 executing program 1: r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) recvmsg$can_bcm(r0, 0x0, 0x0) [ 1233.852813][T18001] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1234.253006][T18001] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1234.264117][T18001] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1234.281753][T18001] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1234.293264][T18001] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1234.304456][T18001] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1234.315628][T18001] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1234.523436][T18001] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1234.533462][T18001] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.541535][T18001] usb 3-1: Product: syz [ 1234.554330][T18001] usb 3-1: Manufacturer: syz [ 1234.560005][T18001] usb 3-1: SerialNumber: syz [ 1234.863475][T18001] cdc_ncm 3-1:1.0: bind() failure [ 1234.873801][T18001] cdc_ncm 3-1:1.1: bind() failure [ 1234.888829][T18001] usb 3-1: USB disconnect, device number 114 [ 1235.582830][ T34] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1235.942928][ T34] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1235.954844][ T34] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1235.970219][ T34] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1235.983204][ T34] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1235.996121][ T34] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1236.008937][ T34] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1236.172955][ T34] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1236.182237][ T34] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.197218][ T34] usb 3-1: Product: syz [ 1236.201466][ T34] usb 3-1: Manufacturer: syz [ 1236.211257][ T34] usb 3-1: SerialNumber: syz 16:21:03 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/fscreate\x00') ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0505609, 0x0) 16:21:03 executing program 3: r0 = openat$dlm_plock(0xffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$HIDIOCGPHYS(r0, 0x80404812, 0x0) 16:21:03 executing program 5: openat$vga_arbiter(0xffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x101000, 0x0) 16:21:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4041) 16:21:03 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x58}}, 0x4020000) 16:21:03 executing program 1: syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) [ 1236.492980][ T34] cdc_ncm 3-1:1.0: bind() failure [ 1236.508432][ T34] cdc_ncm 3-1:1.1: bind() failure 16:21:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={0x0}}, 0x800) 16:21:03 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) [ 1236.571315][ T34] usb 3-1: USB disconnect, device number 115 16:21:03 executing program 0: r0 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000001440)='/proc/capi/capi20ncci\x00', 0x0, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x0, 0x0, 0x0) 16:21:03 executing program 2: r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000003380)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0e05403, 0x0) 16:21:03 executing program 4: r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, 0x0) 16:21:03 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 16:21:03 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 16:21:03 executing program 3: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) openat$cgroup_type(r0, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) 16:21:03 executing program 4: r0 = openat$dlm_plock(0xffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, 0x0) 16:21:03 executing program 2: r0 = openat$cachefiles(0xffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) [ 1236.789360][T18001] usb 2-1: new full-speed USB device number 22 using dummy_hcd 16:21:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/fscreate\x00') ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) [ 1237.103066][ T34] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1237.202944][T18001] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1237.212421][T18001] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1237.224339][T18001] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1237.403048][T18001] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1237.412536][T18001] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.422527][T18001] usb 2-1: Product: syz [ 1237.428161][T18001] usb 2-1: Manufacturer: syz [ 1237.434229][T18001] usb 2-1: SerialNumber: syz [ 1237.473709][ T34] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1237.485473][ T34] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1237.512624][ T34] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1237.527011][ T34] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1237.539765][ T34] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1237.553484][ T34] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1237.722974][ T34] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1237.732823][ T34] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.740833][ T34] usb 1-1: Product: syz [ 1237.748294][ T34] usb 1-1: Manufacturer: syz [ 1237.754067][ T34] usb 1-1: SerialNumber: syz [ 1237.773044][T18001] usb 2-1: 0:2 : does not exist [ 1237.796096][T18001] usb 2-1: USB disconnect, device number 22 [ 1238.273078][ T34] cdc_ncm 1-1:1.0: bind() failure [ 1238.293124][ T34] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1238.318476][ T34] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1238.343245][ T34] usbtest: probe of 1-1:1.1 failed with error -71 [ 1238.358434][ T34] usb 1-1: USB disconnect, device number 6 [ 1238.473157][T19081] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 1238.832987][T19081] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1238.842187][T19081] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1238.858571][T19081] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1239.012842][ T34] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1239.027063][T19081] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1239.038544][T19081] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.052523][T19081] usb 2-1: Product: syz [ 1239.060442][T19081] usb 2-1: Manufacturer: syz [ 1239.066544][T19081] usb 2-1: SerialNumber: syz 16:21:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20000000) 16:21:06 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='net/ipv6_route\x00') setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0) 16:21:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x48012) 16:21:06 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, r0) 16:21:06 executing program 5: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) [ 1239.373601][ T34] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1239.393132][T19081] usb 2-1: 0:2 : does not exist 16:21:06 executing program 3: ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, 0x0) [ 1239.416248][T19081] usb 2-1: USB disconnect, device number 23 [ 1239.430304][ T34] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1239.472319][ T34] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1239.498282][ T34] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1239.523595][ T34] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1239.536813][ T34] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1239.702978][ T34] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1239.712257][ T34] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.738101][ T34] usb 1-1: Product: syz [ 1239.743426][ T34] usb 1-1: Manufacturer: syz [ 1239.748051][ T34] usb 1-1: SerialNumber: syz 16:21:06 executing program 0: r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, 0x0) 16:21:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) 16:21:06 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0) 16:21:06 executing program 2: ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40106435, 0x0) 16:21:06 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmmsg(r0, &(0x7f0000006480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 16:21:06 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000000), 0x4) [ 1239.836425][ T34] usb 1-1: can't set config #1, error -71 [ 1239.867522][ T34] usb 1-1: USB disconnect, device number 7 16:21:06 executing program 4: r0 = openat$dlm_plock(0xffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 16:21:06 executing program 2: pipe2(&(0x7f00000025c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$CAPI_INSTALLED(r0, 0x80024322) 16:21:06 executing program 1: openat$fb0(0xffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20800, 0x0) 16:21:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x14084) 16:21:06 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 16:21:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x4040040) 16:21:07 executing program 4: r0 = openat$uinput(0xffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x0) 16:21:07 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) recvmmsg(r0, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x42, 0x0) 16:21:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x50}}, 0x10) 16:21:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 16:21:07 executing program 4: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) bind$alg(r0, 0x0, 0x0) 16:21:07 executing program 5: io_uring_setup(0x77e3, &(0x7f00000004c0)={0x0, 0x0, 0x20}) 16:21:07 executing program 1: r0 = openat$hwrng(0xffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) getpeername$tipc(r0, 0x0, 0x0) 16:21:07 executing program 2: openat$tun(0xffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x40080, 0x0) 16:21:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x8000) 16:21:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x14}}, 0x44054) 16:21:07 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='net/ipv6_route\x00') ioctl$HIDIOCSFEATURE(r0, 0xc0404806, 0x0) 16:21:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x890) 16:21:07 executing program 1: r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) 16:21:07 executing program 2: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 16:21:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={0x0}}, 0x44000) 16:21:07 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000180)='/dev/nbd#\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40047703, 0x0) 16:21:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20044014) 16:21:07 executing program 1: r0 = openat$hwrng(0xffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, 0x0, 0x0) 16:21:07 executing program 5: pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, 0x0) 16:21:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/fscreate\x00') sendmsg$rds(r0, 0x0, 0x0) 16:21:07 executing program 4: r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 16:21:07 executing program 0: r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, 0x0) 16:21:07 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x60002) write$FUSE_STATFS(r0, 0x0, 0x0) 16:21:07 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='net/ipv6_route\x00') sendmsg$NLBL_MGMT_C_VERSION(r0, 0x0, 0x0) 16:21:07 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/fscreate\x00') setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, 0x0) 16:21:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={0x0}}, 0x20000000) 16:21:07 executing program 4: r0 = openat$hwrng(0xffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, 0x0, 0x0) 16:21:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname(r0, &(0x7f0000000700)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000780)=0x80) setsockopt$sock_int(r1, 0x1, 0x0, 0x0, 0x0) 16:21:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000880)=ANY=[], 0x574}}, 0x4000000) 16:21:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x5c}}, 0x10) 16:21:07 executing program 2: r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000003380)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 16:21:07 executing program 4: r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') 16:21:07 executing program 1: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, 0x0, 0x0) 16:21:08 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, 0x0, 0x0) 16:21:08 executing program 2: openat$pidfd(0xffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x80000, 0x0) 16:21:08 executing program 5: openat$mixer(0xffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2dc1, 0x0) 16:21:08 executing program 0: open_tree(0xffffffffffffffff, 0x0, 0x9000) 16:21:08 executing program 4: process_vm_writev(0x0, &(0x7f00000025c0), 0x0, &(0x7f0000003640)=[{0x0}], 0x1, 0x0) 16:21:08 executing program 3: r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000002c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) 16:21:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4) 16:21:08 executing program 2: syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 16:21:08 executing program 5: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) 16:21:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, 0x0) 16:21:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x805) 16:21:08 executing program 1: r0 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bind$bt_rfcomm(r0, 0x0, 0x0) 16:21:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x4004) 16:21:08 executing program 5: clock_gettime(0x0, &(0x7f0000008c00)) 16:21:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 16:21:08 executing program 0: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, 0x0, 0x0) 16:21:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x1c}}, 0x24000002) 16:21:08 executing program 1: r0 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) 16:21:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x48800) [ 1241.562933][T17986] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1241.943040][T17986] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1241.957456][T17986] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1241.972986][T17986] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1241.986247][T17986] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1241.999609][T17986] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1242.012157][T17986] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1242.182978][T17986] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1242.197631][T17986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.209036][T17986] usb 3-1: Product: syz [ 1242.219081][T17986] usb 3-1: Manufacturer: syz [ 1242.225221][T17986] usb 3-1: SerialNumber: syz [ 1242.513098][T17986] cdc_ncm 3-1:1.0: bind() failure [ 1242.520266][T17986] cdc_ncm 3-1:1.1: bind() failure [ 1242.536655][T17986] usb 3-1: USB disconnect, device number 116 [ 1243.262843][ T34] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1243.642953][ T34] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1243.655248][ T34] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1243.668599][ T34] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1243.678843][ T34] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1243.689104][ T34] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1243.701222][ T34] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1243.883023][ T34] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1243.892257][ T34] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.907727][ T34] usb 3-1: Product: syz [ 1243.912017][ T34] usb 3-1: Manufacturer: syz [ 1243.921982][ T34] usb 3-1: SerialNumber: syz 16:21:11 executing program 2: select(0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) 16:21:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x40) 16:21:11 executing program 4: r0 = openat$dlm_plock(0xffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$HIDIOCGNAME(r0, 0x80404806, 0x0) 16:21:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x80) 16:21:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000c084) 16:21:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x8040) [ 1244.222958][ T34] cdc_ncm 3-1:1.0: bind() failure [ 1244.252165][ T34] cdc_ncm 3-1:1.1: bind() failure 16:21:11 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) [ 1244.295687][ T34] usb 3-1: USB disconnect, device number 117 16:21:11 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000240)='logon\x00', &(0x7f0000000180)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f00000001c0)={0x0, "c08b67a71754deb9a370045b3e2ed17a9a68e28f7ebf28a54eb540b897111ca84e2ef509e98e24a480b4973029662a0eb95e3ea0c0dd44c29fc5b0e1a74ae08a"}, 0x48, 0xfffffffffffffffc) keyctl$unlink(0x9, r0, r0) 16:21:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x240408c4) 16:21:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xc000) 16:21:11 executing program 1: semget$private(0x0, 0x1, 0x11) 16:21:11 executing program 0: socket$packet(0x11, 0x2, 0x300) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001fc0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002000)={0x14}, 0x14}}, 0x0) socket(0x9, 0x0, 0x0) 16:21:12 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000540)=@buf={0x28, &(0x7f0000000480)="5e4dbea7505206e8d7167fbd1cbb17f88082f449825ce283b95eb5ddff576e39f2073fca6d761063"}) 16:21:12 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x4840) 16:21:12 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000300)='/dev/capi20\x00', 0x80801, 0x0) write$capi20_data(r0, 0x0, 0x0) 16:21:12 executing program 4: openat$audio1(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x220080, 0x0) 16:21:12 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="663c7b4700807094e71b0fb1f138a925d86800278dcff47d010b0067dd32378f364600000001000000f20aa20f920139d34715b9f50100771c3697b11dc6845ece76b468d1c207488ce7f4708e28dd8c0c0f401224349576f6a49608db22dd312491c30000f3c3af52d2c1", 0x6b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 16:21:12 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000001640)='/dev/hwrng\x00', 0x101001, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000005000)='/dev/null\x00', 0x202, 0x0) 16:21:12 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvram\x00', 0x0, 0x0) write$evdev(r0, 0x0, 0x0) 16:21:12 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0xb1, 0x23, 0xcc, 0x8, 0x1b3d, 0x9314, 0x653, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xe4, 0xef}}]}}]}}, 0x0) 16:21:12 executing program 4: openat$hwrng(0xffffffffffffff9c, 0x0, 0x220000, 0x0) 16:21:12 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005d6c0)={0x0, [], 0x0, "48e8c2377dede2"}) 16:21:12 executing program 2: ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000000)={@id={0x2, 0x0, @c='\x1c-gT\xb6\xcc}\xaa\xcbY\x98u\xd7\xfa\xf9\xbb'}}) pipe(&(0x7f0000005100)) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) syz_genetlink_get_family_id$tipc2(&(0x7f0000005180)='TIPCv2\x00') 16:21:12 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[], 0x1000001bd) 16:21:12 executing program 4: io_setup(0x6b1d, &(0x7f0000000000)=0x0) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 16:21:12 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) 16:21:12 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="663c7b4700807094e71b0fb1f138a925d86800278dcff47d010b0067dd32378f364600000001000000f20aa20f920139d34715b9f50100771c3697b11dc6845ece76b468d1c207488ce7f4708e28dd8c0c0f401224349576f6a49608db22dd312491c30000f3c3af", 0x68}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 16:21:12 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, 0x0) [ 1245.673192][T17986] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1245.952824][T17986] usb 1-1: Using ep0 maxpacket: 8 [ 1246.273084][T17986] usb 1-1: New USB device found, idVendor=1b3d, idProduct=9314, bcdDevice= 6.53 [ 1246.282453][T17986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.299121][T17986] usb 1-1: Product: syz [ 1246.307409][T17986] usb 1-1: Manufacturer: syz [ 1246.316160][T17986] usb 1-1: SerialNumber: syz [ 1246.346056][T17986] usb 1-1: config 0 descriptor?? [ 1246.383924][T17986] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1246.392655][T17986] usb 1-1: Detected FT232RL [ 1246.603004][T17986] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1246.632891][T17986] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1246.662973][T17986] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 1246.671166][T17986] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1246.695009][T17986] usb 1-1: USB disconnect, device number 8 [ 1246.714720][T17986] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1246.731839][T17986] ftdi_sio 1-1:0.0: device disconnected [ 1247.362818][T17986] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1247.602901][T17986] usb 1-1: Using ep0 maxpacket: 8 [ 1247.883052][T17986] usb 1-1: New USB device found, idVendor=1b3d, idProduct=9314, bcdDevice= 6.53 [ 1247.892858][T17986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.900911][T17986] usb 1-1: Product: syz [ 1247.906888][T17986] usb 1-1: Manufacturer: syz [ 1247.913446][T17986] usb 1-1: SerialNumber: syz [ 1247.919779][T17986] usb 1-1: config 0 descriptor?? [ 1247.964237][T17986] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1247.972617][T17986] usb 1-1: Detected FT232RL [ 1248.182883][T17986] ftdi_sio ttyUSB0: Unable to read latency timer: -71 16:21:15 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) 16:21:15 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x381002) 16:21:15 executing program 5: recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 16:21:15 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x8, 0x4840) 16:21:15 executing program 0: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000740)='/dev/adsp1\x00', 0x1, 0x0) [ 1248.223171][T17986] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1248.252013][T17986] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 1248.289449][T17986] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 16:21:15 executing program 4: sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0xd01b9577fe9911cf) 16:21:15 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000002a80)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000000c0)="bb", 0x1}], 0x1}}], 0x1, 0x0) 16:21:15 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x1, &(0x7f00000000c0)=@raw=[@call], &(0x7f0000000100)='syzkaller\x00', 0x1, 0xe5, &(0x7f0000000180)=""/229, 0x0, 0x12, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1248.349578][T17986] usb 1-1: USB disconnect, device number 9 [ 1248.387797][T17986] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 16:21:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$capi20_data(r0, &(0x7f00000002c0)={{0x10}}, 0x12) 16:21:15 executing program 0: syz_read_part_table(0x0, 0x2, &(0x7f0000002400)=[{0x0, 0x0, 0x400007f}, {&(0x7f0000001280)="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", 0x1d4}]) [ 1248.441640][T17986] ftdi_sio 1-1:0.0: device disconnected [ 1248.535516][T30135] loop0: detected capacity change from 262144 to 0 16:21:15 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000040)=""/32) 16:21:15 executing program 5: renameat2(0xffffffffffffffff, &(0x7f0000003f00)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003f40)='./file0\x00', 0x1) 16:21:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="663c7b4700807094e71b0fb1f138a925d86800278dcff47d010b0067dd32378f364600000001000000f20aa20f920139d34715b9f50100771c3697b11dc6845ece76b468d1c207488ce7f470", 0x4c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x7) 16:21:15 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0x2, &(0x7f0000000080)=@raw=[@map_val], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:21:15 executing program 5: geteuid() syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYBLOB]) [ 1248.670934][T30135] loop0: detected capacity change from 262144 to 0 16:21:15 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000040)=""/32) 16:21:15 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a3a4e3f7"}, 0x0, 0x0, @planes=0x0}) 16:21:15 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="663c7b4700807094e71b0fb1f138a925d86800278dcff47d010b0067dd32378f364600000001000000f20aa20f920139d34715b9f50100771c3697b11dc6845ece76b468d1c207488ce7f4708e28dd8c0c0f401224349576f6a49608db22dd312491c30000f3c3af52d2c178f958148557ec26eb401067facb137e183de6d35a360014856c", 0x85}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x7) [ 1248.744829][T30156] fuse: Bad value for 'fd' 16:21:16 executing program 3: syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x3c0c0) 16:21:16 executing program 5: syz_read_part_table(0x0, 0x2, &(0x7f0000002400)=[{0x0, 0x0, 0x400007f}, {&(0x7f0000001280)="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", 0x1d3}]) 16:21:16 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000040)=""/32) 16:21:16 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="663c7b4700807094e71b0fb1f138a925d86800278dcff47d010b0067dd32378f364600000001000000f20aa20f920139d34715b9f50100771c3697b11dc6845ece76b468d1c207488ce7f4708e28dd8c0c0f401224349576f6a49608db22dd312491c30000", 0x65}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 16:21:16 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 16:21:16 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000040)=""/32) [ 1249.410973][T30181] loop5: detected capacity change from 262144 to 0 16:21:18 executing program 5: syz_read_part_table(0x0, 0x2, &(0x7f0000002400)=[{0x0, 0x0, 0x400007f}, {&(0x7f0000001280)="6f879bbdcea2c80cdd13ae228a07c272157c4d47beaca0eee0775d48db40725f81b6e3736859314573a39ad910d576a9111a05eb0ac935a4597904f3fe8abd9c749d28f9d5672b8449986cc8eb006c7c5c186c235a9d45c0c9b692e5c7bab3605af74cb0b3e42b2348df2a72d92446c7503fdc4e554b8c4fcfefe5e883b7cf1db420d8b79a4ab0972205039b1f0b4dcb832a437edef412703542c3e87f8c5616c1c980c7635b45a8915a037d11136301c82ed05106ba3ed322a8aa1ffd4a20dfb6a51eaa6d54a135fec2c96791fcdd7d7054dfdc20f6805f6aa9915c7c6f95bc94b5d26edbb297ef27a81123757c8628df0b74919a67ba16108e4ee8d520918ae48b689afa23891137db5259d136ff31397832562f72e99537818104957218337d23969d9c958ba863a1b672923ce369d301f8a2799b3176a0ead724315689ce7506a2c721058ec2b9d4c7d5fab199eda2c3cc2bcbdefb32e8a5921f3cfa11179f40f67202ccba1140af59032236a58c09b3233fb85fe18d1e35924a664f0e6111e63999165c891ef100649263b382aca29a40aac785bba7c54694f08644b7bbb02ea4186fda66a62b64fe863f21fd8fc2bd87e9d94f1e50f5c0c05a0cfc32a92fa2e3729bd62ed68cdad350b1f87a3b2270f1", 0x1d3}]) 16:21:18 executing program 2: ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000040)=""/32) 16:21:18 executing program 4: socketpair(0xa, 0x3, 0x5, &(0x7f0000000000)) 16:21:18 executing program 3: syz_io_uring_setup(0x6f10, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) 16:21:18 executing program 2: ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000040)=""/32) [ 1251.671965][T30203] loop5: detected capacity change from 262144 to 0 16:21:18 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 16:21:18 executing program 3: getitimer(0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f00000021c0)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={0x0}}, 0x0) 16:21:18 executing program 4: faccessat2(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0, 0x300) 16:21:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x201}, 0x14}}, 0x0) 16:21:19 executing program 0: syz_io_uring_setup(0x6f10, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:21:19 executing program 2: ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000040)=""/32) 16:21:19 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="91002d"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 16:21:19 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) 16:21:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0x8, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="91002d"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 16:21:19 executing program 5: syz_io_uring_setup(0x6f10, &(0x7f0000000000)={0x0, 0x9665, 0x8}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:21:19 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000040)=""/32) 16:21:19 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x80000ff, 0x8900) r1 = syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x0, 0x80) recvfrom$ax25(r1, &(0x7f0000000a40)=""/250, 0xfa, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) syz_mount_image$gfs2meta(&(0x7f0000000000)='gfs2meta\x00', &(0x7f0000000040)='./file0\x00', 0x200, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000080)="92c347b218ff6cd8918c146fb0c1291c03219cf164865808ec5de5c8cfdb08ab0871d6269df003dffd4a9cb7fb64b3e351ee95fb73ef23cc72a8dbdfa56c063989c38a4a8215638343cbd9bdfb265f9e3a0b7a2cef2d7e93bef36a7b516528e8ec8146f9efabb26f3bc18a3d47faa471e9cbcd99761b81911c9567283c7e17ff3d860b7546c03a0948a5b3c06948abd4b30400015ca71d2eea0edefdbefb9389927a6c94ac1c101d34bab51132fe5e1cb9d0e5ed38339e9f61cafcc69acf2854c62f1c248ac99a19dc0ee7dba455064c690bfa8dd8c0bef9e481dedea11e52", 0xdf, 0x7ffffffd}, {&(0x7f0000000180)="d0991a93d53759080093a288", 0xc}], 0x5c, &(0x7f00000002c0)={[{')&(\xe2#'}], [{@euid_gt={'euid>'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@permit_directio='permit_directio'}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@subj_type={'subj_type', 0x3d, ')&(\xe2#'}}, {@appraise='appraise'}, {@context={'context', 0x3d, 'staff_u'}}, {@hash='hash'}, {@fsmagic={'fsmagic', 0x3d, 0x200}}]}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0x8400, 0x0) 16:21:19 executing program 5: syz_io_uring_setup(0x5406, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f00000000c0)) [ 1252.461099][T30247] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 16:21:19 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, 0x0) 16:21:19 executing program 0: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x6000, 0x0) [ 1252.539335][T30255] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 16:21:19 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000040)=""/32) [ 1252.591477][T30258] loop1: detected capacity change from 264192 to 0 16:21:19 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000280)=@raw=[@map_val], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 16:21:19 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000100)="bc", 0x1}], 0x2, &(0x7f0000000500)=ANY=[], 0x300}, 0x0) [ 1252.664630][T30258] gfs2meta: Unknown parameter ')&(â#' 16:21:19 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000040)=""/32) 16:21:19 executing program 3: syz_io_uring_setup(0x59fd, &(0x7f0000000000)={0x0, 0x9aa8, 0x0, 0x4}, &(0x7f0000ff4000/0xb000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x53d0, &(0x7f0000000140)={0x0, 0x7c05, 0x2, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 1252.735065][T30280] loop1: detected capacity change from 264192 to 0 [ 1252.757134][T30280] gfs2meta: Unknown parameter ')&(â#' 16:21:19 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x2}]}) 16:21:19 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{}, {0x8001}]}) 16:21:19 executing program 4: syz_mount_image$gfs2meta(0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[{&(0x7f0000000080)='O', 0x1}, {&(0x7f0000000140)="b2", 0x1}, {&(0x7f0000000200)="97", 0x1}, {0x0, 0x0, 0x3ff}], 0x0, 0x0) 16:21:19 executing program 5: syz_mount_image$gfs2meta(0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000080)='O', 0x1}, {&(0x7f0000000140)="b2", 0x1}, {0x0, 0x0, 0x3ff}], 0x0, 0x0) 16:21:19 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000040)=""/32) 16:21:19 executing program 0: select(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x74}, &(0x7f0000000140)={0x77359400}) 16:21:20 executing program 1: socketpair(0x1, 0x0, 0x2, &(0x7f0000000140)) 16:21:20 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000040)=""/32) [ 1252.983875][T30308] loop4: detected capacity change from 3 to 0 16:21:20 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1253.072082][T30312] loop5: detected capacity change from 3 to 0 16:21:20 executing program 0: syz_io_uring_setup(0x59fd, &(0x7f0000000000), &(0x7f0000ff4000/0xb000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x53d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x3f8f, &(0x7f0000000240)={0x0, 0x8337}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 16:21:20 executing program 4: syz_mount_image$gfs2meta(0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000080)="92c347b2", 0x4, 0x7ffffffd}], 0x0, 0x0) 16:21:20 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x901, 0x0) 16:21:20 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8924, &(0x7f0000000040)={'wlan0\x00'}) 16:21:20 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000040)=""/32) [ 1253.233605][T30312] loop5: detected capacity change from 3 to 0 16:21:20 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8929, &(0x7f0000000040)={'wlan0\x00'}) 16:21:20 executing program 5: perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x6) 16:21:20 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, 0x0) [ 1253.336355][T30344] loop4: detected capacity change from 264192 to 0 16:21:20 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) 16:21:20 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x2, &(0x7f0000000200)=@raw=[@map_val], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:21:20 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 16:21:20 executing program 0: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x10000) [ 1253.512952][T30344] loop4: detected capacity change from 264192 to 0 16:21:20 executing program 4: perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x8, 0xffffffffffffffff, 0x6) 16:21:20 executing program 5: syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) 16:21:20 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, 0x0) 16:21:20 executing program 3: syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x0, 0x31b300) 16:21:20 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc020660b, 0x0) 16:21:20 executing program 1: syz_io_uring_setup(0x53d0, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x3f8f, &(0x7f0000000240), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 16:21:20 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) 16:21:20 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x1, 0x81) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 16:21:20 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0189436, 0x0) 16:21:20 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000000)) 16:21:20 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, 0x0) 16:21:20 executing program 1: syz_io_uring_setup(0x53d0, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x3f8f, &(0x7f0000000240), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 16:21:20 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x42d01, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x0, 0x3}) 16:21:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x48001) 16:21:20 executing program 0: socketpair(0x25, 0x0, 0x0, &(0x7f0000000240)) 16:21:20 executing program 2: socketpair(0x1, 0x0, 0x7, &(0x7f0000000040)) 16:21:20 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8922, &(0x7f0000000040)={'wlan0\x00'}) 16:21:20 executing program 5: syz_io_uring_setup(0x6f10, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:21:21 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8937, &(0x7f0000000040)={'wlan0\x00'}) 16:21:21 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x40049409, &(0x7f0000000040)={'wlan0\x00'}) 16:21:21 executing program 0: syz_mount_image$gfs2meta(&(0x7f0000000000)='gfs2meta\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000180)="d0", 0x1}], 0x0, &(0x7f00000002c0)={[{'/dev/vcsa#\x00'}], [{@euid_gt={'euid>'}}, {@measure='measure'}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@subj_type={'subj_type', 0x3d, ')&(\xe2#'}}, {@fsmagic={'fsmagic'}}]}) 16:21:21 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8982, &(0x7f0000000040)={'wlan0\x00'}) [ 1254.069439][T30433] wlan0: mtu less than device minimum 16:21:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)=':', 0x1}, {&(0x7f0000000100)="bc", 0x1}, {&(0x7f0000000200)="9f", 0x1}, {0x0}, {0x0}], 0x5, &(0x7f0000000500)=ANY=[], 0x300}, 0x20004015) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 16:21:21 executing program 1: syz_mount_image$gfs2meta(&(0x7f0000000000)='gfs2meta\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000000080)='O', 0x1, 0x8}, {&(0x7f0000000140)="b2", 0x1}], 0x161882, &(0x7f0000000400)=ANY=[]) 16:21:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40) [ 1254.150390][T30444] gfs2meta: Unknown parameter '/dev/vcsa#' 16:21:21 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)=':', 0x1}, {0x0}, {&(0x7f0000000200)="9f", 0x1}], 0x3, &(0x7f0000000500)=ANY=[], 0x300}, 0x0) [ 1254.228208][T30444] gfs2meta: Unknown parameter '/dev/vcsa#' 16:21:21 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x894c, 0x0) 16:21:21 executing program 4: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x42d01, 0x0) 16:21:21 executing program 0: syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x0, 0xc700) 16:21:21 executing program 5: recvfrom$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5406, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x2, 0xb8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f00000000c0)) 16:21:21 executing program 3: syz_io_uring_setup(0x6d74, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080), 0x0) 16:21:21 executing program 5: syz_mount_image$gfs2meta(&(0x7f0000000000)='gfs2meta\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x161882, &(0x7f0000000400)=ANY=[]) 16:21:21 executing program 4: syz_io_uring_setup(0x59fd, &(0x7f0000000000), &(0x7f0000ff4000/0xb000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x53d0, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 16:21:21 executing program 1: syz_io_uring_setup(0x5406, &(0x7f0000000000)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) 16:21:21 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x7, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '0j\"h'}, 0x0, 0x0, @fd}) 16:21:21 executing program 3: syz_mount_image$gfs2meta(0x0, &(0x7f0000000040)='./file0\x00', 0x100, 0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x8}], 0x41001, &(0x7f00000000c0)=ANY=[@ANYBLOB='/dev/vcsa#\x00,*dev/vcs']) 16:21:21 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a0, &(0x7f0000000040)={'wlan0\x00'}) 16:21:21 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8923, &(0x7f0000000040)={'wlan0\x00'}) 16:21:21 executing program 4: stat(&(0x7f0000000000)='./file0\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) 16:21:21 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) 16:21:21 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8993, &(0x7f0000000040)={'wlan0\x00'}) 16:21:21 executing program 3: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x12f200) 16:21:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 16:21:21 executing program 1: perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x6) 16:21:21 executing program 0: syz_io_uring_setup(0x59fd, &(0x7f0000000000), &(0x7f0000ff4000/0xb000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x53d0, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x3f8f, &(0x7f0000000240), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 16:21:21 executing program 2: syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x0, 0x81) 16:21:21 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 16:21:22 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f0000000180), r1, r0}}, 0x18) 16:21:22 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a1, &(0x7f0000000040)={'wlan0\x00'}) 16:21:22 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{}, {0x8001}, {}]}) 16:21:22 executing program 2: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xf68, 0x941) 16:21:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) 16:21:22 executing program 3: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x12f200) 16:21:22 executing program 2: syz_mount_image$gfs2meta(&(0x7f0000000000)='gfs2meta\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000080)="92c347b218ff", 0x6, 0x7ffffffd}, {0x0}], 0x0, 0x0) 16:21:22 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xc) 16:21:22 executing program 0: syz_mount_image$gfs2meta(&(0x7f0000000000)='gfs2meta\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)) 16:21:22 executing program 5: openat$ocfs2_control(0xffffff9c, &(0x7f0000000200)='/dev/ocfs2_control\x00', 0xc3, 0x0) 16:21:22 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x1a28, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x40) 16:21:22 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x42d01, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)) [ 1255.297033][T30590] loop2: detected capacity change from 264192 to 0 16:21:22 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8947, &(0x7f0000000040)={'wlan0\x00'}) [ 1255.387530][T30597] gfs2: gfs2 mount does not exist 16:21:22 executing program 5: openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) 16:21:22 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2, &(0x7f0000000200)=@raw=[@map_val], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000b40)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1255.412998][T30590] loop2: detected capacity change from 264192 to 0 16:21:22 executing program 1: socketpair(0x1, 0x0, 0x0, &(0x7f0000000140)) 16:21:22 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0x6000, 0x0) [ 1255.508130][T30597] gfs2: gfs2 mount does not exist 16:21:22 executing program 2: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x8b80) 16:21:22 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89e0, 0x0) 16:21:22 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000080), 0x4) 16:21:22 executing program 0: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x0, 0x7ffffffb}) 16:21:22 executing program 3: r0 = syz_open_dev$audion(0x0, 0x0, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000006c0)='/dev/audio#\x00', 0x1, 0x309081) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="91002d8b0100"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 16:21:22 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x40) 16:21:22 executing program 2: syz_mount_image$gfs2meta(&(0x7f0000000000)='gfs2meta\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)) 16:21:22 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f0000000040)={'wlan0\x00'}) 16:21:22 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) [ 1255.695441][T30633] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1255.758119][T30636] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 16:21:22 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x8001}]}) 16:21:22 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x101, 0x0, 0x1}, 0x40) 16:21:22 executing program 5: syz_init_net_socket$ax25(0x3, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) 16:21:22 executing program 2: syz_mount_image$gfs2meta(0x0, &(0x7f0000000040)='./file0\x00', 0x100, 0x0, 0x0, 0x0, 0x0) 16:21:22 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 16:21:22 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8940, &(0x7f0000000040)={'wlan0\x00'}) 16:21:22 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80108907, 0x0) 16:21:22 executing program 0: syz_mount_image$gfs2meta(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 16:21:23 executing program 5: syz_io_uring_setup(0x53d0, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3f8f, &(0x7f0000000240), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 16:21:23 executing program 4: syz_io_uring_setup(0x1c10, &(0x7f0000000200)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 16:21:23 executing program 1: syz_mount_image$gfs2meta(0x0, &(0x7f0000000040)='./file0\x00', 0x100, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB]) 16:21:23 executing program 2: syz_mount_image$gfs2meta(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000080)="92c347b218ff6cd8918c146fb0c1291c03219c", 0x13, 0x7ffffffd}, {0x0}], 0x0, 0x0) 16:21:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000000)) 16:21:23 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540)}}, 0xffffffffffffff93) 16:21:23 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89b0, &(0x7f0000000040)={'wlan0\x00'}) [ 1256.217822][T30683] loop2: detected capacity change from 264192 to 0 16:21:23 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd}, 0x40) 16:21:23 executing program 5: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x121300) 16:21:23 executing program 4: syz_io_uring_setup(0x59fd, &(0x7f0000000000), &(0x7f0000ff4000/0xb000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 16:21:23 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x834f34500bbbcfe8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1256.347730][T30683] loop2: detected capacity change from 264192 to 0 16:21:23 executing program 1: syz_mount_image$gfs2meta(&(0x7f0000000000)='gfs2meta\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='/']) 16:21:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000a80)={&(0x7f0000000980), 0xc, &(0x7f0000000a40)={0x0, 0x1fc87d283b394a55}}, 0x0) 16:21:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) 16:21:23 executing program 5: syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) 16:21:23 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a1, 0x0) 16:21:23 executing program 4: syz_mount_image$gfs2meta(&(0x7f0000000000)='gfs2meta\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='rootcontext=']) [ 1256.562403][T30720] gfs2meta: Unknown parameter '/' 16:21:23 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 16:21:23 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0045878, 0x0) 16:21:23 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x0, 0x81) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 16:21:23 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8927, &(0x7f0000000040)={'wlan0\x00'}) 16:21:23 executing program 2: syz_mount_image$gfs2meta(&(0x7f0000000000)='gfs2meta\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x2, &(0x7f0000000380)=[{&(0x7f0000000080)='O', 0x1}, {&(0x7f0000000140)="b2", 0x1}], 0x161882, &(0x7f0000000400)=ANY=[@ANYBLOB]) [ 1256.709698][T30735] gfs2meta: Unknown parameter 'rootcontext' [ 1256.758343][T30735] gfs2meta: Unknown parameter 'rootcontext' 16:21:23 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x0, 0x8900) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) 16:21:23 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x300}, 0x0) 16:21:23 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x6) 16:21:23 executing program 5: syz_mount_image$gfs2meta(&(0x7f0000000000)='gfs2meta\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)) 16:21:23 executing program 4: perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:21:23 executing program 0: syz_io_uring_setup(0x5406, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, 0xb8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f00000000c0)) 16:21:24 executing program 3: add_key(&(0x7f0000000080)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 16:21:24 executing program 5: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) 16:21:24 executing program 1: syz_io_uring_setup(0x6d74, &(0x7f0000000000)={0x0, 0xdc4c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:21:24 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:21:24 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2, &(0x7f0000000040)=@raw=[@map], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:21:24 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x40) 16:21:24 executing program 0: syz_io_uring_setup(0x59fd, &(0x7f0000000000)={0x0, 0x9aa8}, &(0x7f0000ff4000/0xb000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x53d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f00000001c0), 0x0) 16:21:24 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 16:21:24 executing program 2: perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x8, 0xffffffffffffffff, 0x6) 16:21:24 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8983, 0x0) 16:21:24 executing program 4: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) ioctl$TIOCEXCL(r0, 0x540c) 16:21:24 executing program 1: syz_mount_image$gfs2meta(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:21:24 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0) 16:21:24 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8921, &(0x7f0000000040)={'wlan0\x00'}) 16:21:24 executing program 5: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) 16:21:24 executing program 4: ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) recvfrom$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000a40)=""/250, 0xfa, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x2, 0x0) 16:21:24 executing program 0: syz_mount_image$gfs2meta(0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[{0x0, 0x0, 0x3ff}], 0x0, 0x0) 16:21:24 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0189436, &(0x7f0000000040)={'wlan0\x00'}) 16:21:24 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, 0x0) 16:21:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="91"], 0x1c}}, 0x0) 16:21:24 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x0, 0x81) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1257.692392][T30841] loop0: detected capacity change from 3 to 0 16:21:24 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8932, &(0x7f0000000040)={'wlan0\x00'}) 16:21:24 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x0, 0x0) accept4$x25(r0, 0x0, 0x0, 0x6f2e3f4b15813dc3) 16:21:24 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x3, &(0x7f0000000680)=@framed, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1257.798728][T30851] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1257.809940][T30852] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 16:21:24 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x1, 0x80) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) syz_mount_image$gfs2meta(&(0x7f0000000000)='gfs2meta\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000080)="92c347b218ff6cd8918c146fb0c1291c03219cf164865808ec5de5c8cfdb08ab0871d6269df003dffd4a9cb7fb64b3e351ee95fb73ef23cc72a8dbdfa56c063989c38a4a8215638343cbd9bdfb265f9e3a0b7a2cef2d7e93bef36a7b5165", 0x5e, 0x7ffffffd}, {&(0x7f0000000180)="d0991a93d537", 0x6}], 0x5c, &(0x7f00000002c0)={[], [{@euid_gt={'euid>'}}, {@measure='measure'}, {@permit_directio='permit_directio'}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@subj_type={'subj_type', 0x3d, ')&(\xe2#'}}, {@context={'context', 0x3d, 'staff_u'}}, {@hash='hash'}, {@fsmagic={'fsmagic', 0x3d, 0x200}}]}) 16:21:24 executing program 0: syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x1, 0x80) syz_mount_image$gfs2meta(&(0x7f0000000000)='gfs2meta\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000080)="92c347b218ff6cd8918c146fb0c1291c03219cf164865808ec5de5c8cfdb08ab0871d6269df003dffd4a9cb7fb64b3e351ee95fb73ef23cc72a8dbdfa56c063989c38a4a8215638343cbd9bdfb265f9e3a0b7a2cef2d7e93bef36a7b516528e8ec8146f9efabb26f3bc18a3d47faa471e9cbcd99761b81911c9567283c7e17ff3d860b7546c03a0948a5b3c06948abd4b30400015ca71d2eea0edefdbefb9389927a6c94ac1c101d34bab51132fe5e1cb9d0e5ed38339e9f61cafcc69acf2854c62f1c248ac99a19dc0ee7dba455064c690bfa8dd8c0bef9e481dedea11e52ea6de948", 0xe3, 0x7ffffffd}, {&(0x7f0000000180)="d0991a93d537590800", 0x9}], 0x5c, &(0x7f00000002c0)={[{'/dev/vcsa#\x00'}, {')&(\xe2#'}], [{@euid_gt={'euid>'}}, {@measure='measure'}, {@permit_directio='permit_directio'}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@subj_type={'subj_type', 0x3d, ')&(\xe2#'}}, {@context={'context', 0x3d, 'staff_u'}}, {@hash='hash'}]}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0x8400, 0x0) 16:21:24 executing program 5: syz_io_uring_setup(0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xb8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f00000000c0)) 16:21:24 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x40) 16:21:24 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x0, 0x81) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 1257.957145][T30865] loop1: detected capacity change from 264192 to 0 [ 1257.991926][T30865] gfs2meta: Unknown parameter 'euid>00000000000000000000' 16:21:25 executing program 2: socketpair(0x2c, 0x0, 0x0, &(0x7f0000000400)) [ 1258.031237][T30864] loop0: detected capacity change from 264192 to 0 16:21:25 executing program 0: r0 = syz_open_dev$vcsa(0x0, 0x1, 0x80) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) syz_mount_image$gfs2meta(&(0x7f0000000000)='gfs2meta\x00', &(0x7f0000000040)='./file0\x00', 0x200, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000080)="92c347b218ff6cd8918c146fb0c1291c03219cf164865808ec5de5c8cfdb08ab0871d6269df003dffd4a9cb7fb64b3e351ee95fb73ef23cc72a8dbdfa56c063989c38a4a8215638343cbd9bdfb265f9e3a0b7a2cef2d7e93bef36a7b516528e8ec8146f9efabb26f3bc18a3d47faa471e9cbcd99761b81911c9567283c7e17ff3d860b7546c03a0948a5b3c06948abd4b30400015ca71d2eea0edefdbefb9389927a6c94ac1c101d34bab51132fe5e1cb9d0e5ed38339e9f61cafcc69acf2854c62f1c248ac99a19dc0ee7dba455064c690bfa8dd8c0bef9", 0xd8, 0x7ffffffd}, {&(0x7f0000000180)="d0991a93d53759080093a288", 0xc}], 0x5c, &(0x7f00000002c0)={[{'/dev/vcsa#\x00'}, {')&(\xe2#'}], [{@euid_gt={'euid>'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@measure='measure'}, {@permit_directio='permit_directio'}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@subj_type={'subj_type', 0x3d, ')&(\xe2#'}}, {@context={'context', 0x3d, 'staff_u'}}, {@hash='hash'}, {@fsmagic={'fsmagic', 0x3d, 0x200}}]}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0x8400, 0x0) [ 1258.079331][T30864] gfs2meta: Unknown parameter '/dev/vcsa#' 16:21:25 executing program 1: syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x0, 0x24002) 16:21:25 executing program 4: syz_io_uring_setup(0x1c10, &(0x7f0000000200), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 16:21:25 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8971, &(0x7f0000000040)={'wlan0\x00'}) 16:21:25 executing program 2: socket$inet(0x2, 0xa, 0x9) 16:21:25 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) 16:21:25 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x4020940d, 0x0) [ 1258.319088][T30896] loop0: detected capacity change from 264192 to 0 [ 1258.329581][T30896] gfs2meta: Unknown parameter '/dev/vcsa#' 16:21:25 executing program 1: r0 = io_uring_setup(0x4a32, &(0x7f00000003c0)) r1 = syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000440)=r1, 0x1) 16:21:25 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x7ff, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:21:25 executing program 4: syz_mount_image$gfs2meta(&(0x7f0000000000)='gfs2meta\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='/']) 16:21:25 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 16:21:25 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{}, {0x8001, 0x0, 0x1}, {}]}) 16:21:25 executing program 2: syz_mount_image$gfs2meta(0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x7ffffffd}], 0x0, 0x0) [ 1258.552162][T30921] gfs2meta: Unknown parameter '/' 16:21:25 executing program 3: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000180)='1\x00', 0x2) 16:21:25 executing program 0: syz_io_uring_setup(0x53d0, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3f8f, &(0x7f0000000240), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 16:21:25 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 1258.627747][T30936] loop2: detected capacity change from 264192 to 0 [ 1258.640208][T30921] gfs2meta: Unknown parameter '/' 16:21:25 executing program 1: syz_io_uring_setup(0x6f10, &(0x7f0000000000)={0x0, 0x9665}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000000c0)) 16:21:25 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2, &(0x7f0000000200)=@raw=[@map_val], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:21:25 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) 16:21:25 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) 16:21:25 executing program 0: syz_mount_image$gfs2meta(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) 16:21:25 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r1}}, 0x18) 16:21:25 executing program 2: syz_io_uring_setup(0x6f10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x284}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:21:25 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90) 16:21:25 executing program 5: syz_mount_image$gfs2meta(0x0, &(0x7f0000000040)='./file0\x00', 0x100, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='/dev/vcsa#\x00,*dev/vcsa#\x00,fsname=/dev/']) 16:21:25 executing program 4: syz_mount_image$gfs2meta(&(0x7f0000000000)='gfs2meta\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x41001, &(0x7f00000000c0)=ANY=[]) 16:21:26 executing program 3: syz_io_uring_setup(0x6f10, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) 16:21:26 executing program 1: syz_io_uring_setup(0x53d0, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 16:21:26 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 16:21:26 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000400)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r1, 0x1}}, 0x18) 16:21:26 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f0000000040)={'wlan0\x00'}) 16:21:26 executing program 5: syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x0, 0x8900) syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x1, 0x80) syz_mount_image$gfs2meta(&(0x7f0000000000)='gfs2meta\x00', &(0x7f0000000040)='./file0\x00', 0x200, 0x0, &(0x7f00000001c0), 0x5c, &(0x7f00000002c0)={[{')&(\xe2#'}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@subj_type={'subj_type', 0x3d, ')&(\xe2#'}}]}) 16:21:26 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x1, 0x81) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 16:21:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000a80)={&(0x7f0000000980), 0xc, &(0x7f0000000a40)={0x0, 0xfffffffffffffcfa}}, 0x0) 16:21:26 executing program 1: socketpair(0x18, 0x0, 0x7, &(0x7f0000000180)) 16:21:26 executing program 2: syz_io_uring_setup(0x5406, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) 16:21:26 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000400)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r1}}, 0x18) 16:21:26 executing program 3: socket$inet6(0xa, 0x1005, 0x0) [ 1259.308723][T31023] loop5: detected capacity change from 1 to 0 16:21:26 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x10, r0, 0x8000000) [ 1259.367402][T31023] gfs2meta: Unknown parameter ')&(â#' 16:21:26 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x4020940d, &(0x7f0000000040)={'wlan0\x00'}) 16:21:26 executing program 3: recvfrom$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) 16:21:26 executing program 4: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x50040) [ 1259.460280][T31046] loop5: detected capacity change from 1 to 0 [ 1259.490463][T31046] gfs2meta: Unknown parameter ')&(â#' 16:21:26 executing program 2: syz_mount_image$gfs2meta(&(0x7f0000000000)='gfs2meta\x00', 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={[], [{@euid_gt={'euid>'}}, {@permit_directio='permit_directio'}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@context={'context', 0x3d, 'staff_u'}}]}) 16:21:26 executing program 5: pipe2$9p(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r0, &(0x7f00000009c0)={0x1001, 0x75, 0x0, {0xff6, "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"}}, 0x1001) 16:21:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x201, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x1c}}, 0x0) 16:21:26 executing program 1: syz_mount_image$gfs2meta(0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000000080)='O', 0x1}, {&(0x7f0000000140)="b2", 0x1}], 0x0, 0x0) 16:21:26 executing program 3: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_mount_image$gfs2meta(0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x7ffffffd}], 0x0, 0x0) 16:21:26 executing program 4: syz_io_uring_setup(0x59fd, &(0x7f0000000000), &(0x7f0000ff4000/0xb000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x53d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x3f8f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 16:21:26 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2, &(0x7f0000000200)=@raw=[@map_val], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000b40)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:21:26 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x40049409, 0x0) [ 1259.821275][T31073] loop3: detected capacity change from 264192 to 0 16:21:26 executing program 5: syz_io_uring_setup(0x53d0, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3f8f, &(0x7f0000000240)={0x0, 0x8337, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 16:21:26 executing program 1: syz_io_uring_setup(0x5406, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x2, 0xb8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f00000000c0)) 16:21:26 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00'}) 16:21:26 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{}]}) 16:21:26 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) write$P9_RSYMLINK(r0, 0x0, 0x0) 16:21:27 executing program 1: openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x800, 0x0) 16:21:27 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x1, &(0x7f0000000180)=@raw=[@call], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:21:27 executing program 4: r0 = syz_io_uring_setup(0x59fd, &(0x7f0000000000), &(0x7f0000ff4000/0xb000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r0, 0x0) 16:21:27 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0xffffffffffffffff) 16:21:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x1c}}, 0x0) 16:21:27 executing program 5: syz_mount_image$gfs2meta(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) 16:21:27 executing program 1: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x20481) 16:21:27 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) 16:21:27 executing program 2: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="91002d8b0100"], 0x1c}}, 0x0) [ 1260.351436][T31159] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 16:21:27 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8983, &(0x7f0000000040)={'wlan0\x00'}) 16:21:27 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:21:27 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/dri/renderD128\x00', 0x80, 0x0) 16:21:27 executing program 5: syz_mount_image$gfs2meta(&(0x7f0000000000)='gfs2meta\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000080)="92c347b218ff6cd8918c146fb0c1291c03219c", 0x13, 0x7ffffffd}, {0x0}], 0x0, 0x0) 16:21:27 executing program 2: epoll_create(0x5) 16:21:27 executing program 0: syz_io_uring_setup(0x6f10, &(0x7f0000000000)={0x0, 0x9665}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:21:27 executing program 1: perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:21:27 executing program 4: syz_io_uring_setup(0x5406, &(0x7f0000000000)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f00000000c0)) [ 1260.627853][T31173] loop5: detected capacity change from 264192 to 0 16:21:27 executing program 3: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xfffffffffffffffa, 0x8b80) 16:21:27 executing program 2: syz_io_uring_setup(0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f00000000c0)) 16:21:27 executing program 1: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x8002, 0x0) 16:21:27 executing program 0: syz_mount_image$gfs2meta(&(0x7f0000000000)='gfs2meta\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[]) 16:21:27 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000040)) [ 1260.775267][T31173] loop5: detected capacity change from 264192 to 0 16:21:27 executing program 5: syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x7fffffff, 0x0) syz_io_uring_setup(0x6f10, &(0x7f0000000000)={0x0, 0x9665, 0x8, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:21:27 executing program 1: syz_io_uring_setup(0x53d0, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x3f8f, &(0x7f0000000240)={0x0, 0x8337, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) [ 1260.970449][T31219] gfs2: gfs2 mount does not exist 16:21:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 16:21:28 executing program 2: r0 = io_uring_setup(0x4a32, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000440), 0x1) 16:21:28 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f00000000c0)={0xb}) 16:21:28 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x80}) [ 1261.104106][T31219] gfs2: gfs2 mount does not exist 16:21:28 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x1, &(0x7f0000000100)=@raw=[@jmp], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:21:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, r1, 0x201, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}}, 0x0) 16:21:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x201, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x20}}, 0x0) 16:21:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0x200000cc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="91002d"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 16:21:28 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x1, &(0x7f0000000100)=@raw=[@jmp], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:21:28 executing program 1: socketpair(0xa, 0x3, 0xb, &(0x7f0000000080)) 16:21:28 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 16:21:28 executing program 0: shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000100)=""/198) 16:21:28 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/timer\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 16:21:28 executing program 4: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x0, 0x0) 16:21:28 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9900f026"}, 0x0, 0x0, @userptr}) 16:21:28 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 16:21:28 executing program 5: syz_genetlink_get_family_id$l2tp(&(0x7f0000000300)='l2tp\x00') io_setup(0x3, &(0x7f0000000640)) 16:21:28 executing program 0: select(0x0, 0x0, &(0x7f00000011c0), &(0x7f0000002200), &(0x7f0000002240)={0x0, 0xea60}) 16:21:28 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/timer\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x12, r0, 0x0) 16:21:28 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000002400)=[{0x0, 0x0, 0x400007f}, {&(0x7f0000001280)="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", 0x1e3}]) 16:21:28 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000003900)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x4, [], 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x40) 16:21:28 executing program 1: rt_sigaction(0x15, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000200)) 16:21:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) [ 1261.677684][T31295] loop4: detected capacity change from 262144 to 0 16:21:28 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0x2, &(0x7f0000000100)) 16:21:28 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/timer\x00', 0x0, 0x0) dup2(r1, r0) 16:21:28 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0xd000) 16:21:28 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 16:21:28 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1261.850208][T31295] loop4: detected capacity change from 262144 to 0 16:21:28 executing program 0: shmget(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) 16:21:28 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x1, &(0x7f0000000040)=@raw=[@ldst={0x0, 0x0, 0x1}], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0xc1, &(0x7f0000000180)=""/193, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:21:28 executing program 3: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x2242, 0x0) 16:21:29 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101040, 0x0) 16:21:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}}, 0x0) 16:21:29 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), &(0x7f00000000c0), 0x0}) 16:21:29 executing program 0: select(0x40, &(0x7f0000001180), &(0x7f00000011c0), 0x0, &(0x7f0000002240)={0x0, 0xea60}) 16:21:29 executing program 4: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) waitid(0x0, 0xffffffffffffffff, &(0x7f0000000100), 0x4, 0x0) 16:21:29 executing program 3: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffffffffffffffff, 0x0) 16:21:29 executing program 5: select(0x40, &(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000002200)={0x800}, &(0x7f0000002240)={0x0, 0xea60}) 16:21:29 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$sequencer(r0, &(0x7f0000000180)=""/50, 0x32) 16:21:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, 0x0) 16:21:29 executing program 4: openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x1c0200, 0x0) 16:21:29 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf4240, &(0x7f0000000100)=@raw=[@jmp], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xec, &(0x7f0000000180)=""/236, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:21:29 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x84002, 0x0) 16:21:29 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9900f026"}, 0x0, 0x0, @userptr}) 16:21:29 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000880)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x2, @pix_mp={0x10000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x8000}]}}) 16:21:29 executing program 2: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x6, 0x40200) 16:21:29 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x0, 0x0) connect$l2tp(r0, 0x0, 0x0) 16:21:29 executing program 1: select(0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0) 16:21:29 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00)='IPVS\x00') 16:21:29 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001540), 0x0, &(0x7f0000001600)={[{@check_strict='check=strict'}]}) 16:21:29 executing program 4: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ocfs2_control\x00', 0x0, 0x0) 16:21:29 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x1, &(0x7f0000000100)=@raw=[@jmp], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:21:29 executing program 5: shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffb000/0x3000)=nil) [ 1262.780740][T31370] ISOFS: Unable to identify CD-ROM format. [ 1262.907642][T31370] ISOFS: Unable to identify CD-ROM format. 16:21:30 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x82, 0x0) write$fb(r0, 0x0, 0x0) 16:21:30 executing program 4: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ocfs2_control\x00', 0x0, 0x0) 16:21:30 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x1, &(0x7f0000000100)=@raw=[@jmp], &(0x7f0000000000)='syzkaller\x00', 0x1c7, 0xec, &(0x7f0000000180)=""/236, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:21:30 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0x5421, &(0x7f0000000100)) 16:21:30 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "e4c57da12e2a0d852798a88918d0f6bd21cd16759f2cb7690be1bf0f7fc60caec3dbd82e40366bf465d242f6798b82c43f6da5517bd6eb1814d87a51f8d9c5", 0x31}, 0x60) 16:21:30 executing program 5: socketpair(0x0, 0x11, 0x0, 0x0) 16:21:30 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000880)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x0, @pix_mp}) 16:21:30 executing program 1: select(0x0, 0x0, 0x0, &(0x7f0000002200), &(0x7f0000002240)={0x0, 0xea60}) 16:21:30 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) 16:21:30 executing program 2: syz_mount_image$hpfs(0x0, 0x0, 0x0, 0x3, &(0x7f0000000600)=[{0x0}, {0x0, 0x0, 0xfffffffffffffff8}, {0x0}], 0x0, 0x0) 16:21:30 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, 0x0, 0x0) 16:21:30 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 16:21:30 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@nojoliet='nojoliet'}, {@mode={'mode'}}, {@hide='hide'}, {@session={'session'}}]}) 16:21:30 executing program 3: shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$SHM_LOCK(0x0, 0xb) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffff}]}, 0x20}}, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffa000/0x4000)=nil) 16:21:30 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) [ 1263.618895][T31416] loop2: detected capacity change from 16383 to 0 [ 1263.709362][T31414] ISOFS: Unable to identify CD-ROM format. 16:21:30 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f00000000c0)) 16:21:30 executing program 1: syz_open_dev$hiddev(&(0x7f0000000180)='/dev/usb/hiddev#\x00', 0x0, 0x490401) 16:21:30 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x1e0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x1}) 16:21:30 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x0) fsync(r0) 16:21:30 executing program 2: r0 = fanotify_init(0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, 0x0) 16:21:30 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4cb01, 0x0) 16:21:30 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x180000e, 0x12, r0, 0x9e000) 16:21:30 executing program 0: rt_sigaction(0x15, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000200)) 16:21:30 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = dup2(r1, r0) bind$nfc_llcp(r2, 0x0, 0x0) 16:21:30 executing program 3: r0 = getpid() syz_open_procfs(r0, 0x0) 16:21:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0xe6be769c412db193) 16:21:31 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 16:21:31 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000880)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0x7fffffff}) 16:21:31 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', 0x0}) 16:21:31 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 16:21:31 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x1e0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x1}) 16:21:31 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:21:31 executing program 5: r0 = shmget(0x0, 0x4000, 0x200, &(0x7f0000920000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) 16:21:31 executing program 1: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cachefiles\x00', 0x618a81, 0x0) 16:21:31 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f00000000c0)) 16:21:31 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$fb(r0, &(0x7f0000000100)=""/131, 0x83) 16:21:31 executing program 2: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x4000, 0x0) 16:21:31 executing program 5: socketpair(0x28, 0x0, 0x9, &(0x7f0000001380)) 16:21:31 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 16:21:31 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') 16:21:31 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0x5111, 0x0) 16:21:31 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0x10, 0x0) 16:21:31 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f00000000c0)) 16:21:31 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) 16:21:31 executing program 2: select(0x40, &(0x7f0000001180), 0x0, 0x0, &(0x7f0000002240)={0x0, 0xea60}) 16:21:31 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) 16:21:31 executing program 1: socketpair(0x9, 0x0, 0x0, &(0x7f00000007c0)) 16:21:31 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x1e0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8}) 16:21:31 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x4a81, 0x0) 16:21:31 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x180000e, 0x12, r0, 0x0) 16:21:31 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@l={0x92, 0xd, 0xe0}) 16:21:31 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000040)=@raw=[@ldst={0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @ldst, @exit, @map={0x18, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0xc1, &(0x7f0000000180)=""/193, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:21:31 executing program 2: io_setup(0x3, &(0x7f0000000640)=0x0) io_submit(r0, 0x3, &(0x7f0000000d80)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0, 0x0]) 16:21:31 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x541b, 0x0) 16:21:31 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') write$hidraw(r0, 0x0, 0x0) 16:21:31 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x1, &(0x7f0000000100)=@raw=[@jmp], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:21:31 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') r1 = dup2(r0, r0) fchmod(r1, 0x0) 16:21:32 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xff}) 16:21:32 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x541b, 0x0) 16:21:32 executing program 0: syz_genetlink_get_family_id$l2tp(0x0) io_setup(0x3, &(0x7f0000000640)) 16:21:32 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4002, 0x0) 16:21:32 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0x5402, 0x0) 16:21:32 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xff}) 16:21:32 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4400, 0x0) 16:21:32 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/current\x00') ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, 0x0) 16:21:32 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9cb, 0x80000000}) 16:21:32 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x640200, 0x0) mmap$fb(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 16:21:32 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xff}) 16:21:32 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000040), &(0x7f00000000c0), 0x0}) 16:21:32 executing program 4: syz_mount_image$fuse(&(0x7f0000000740)='fuse\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0]) 16:21:32 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x1e0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}) 16:21:32 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) 16:21:32 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xff}) 16:21:32 executing program 0: syz_open_dev$vcsa(0x0, 0x3, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000640)) syz_open_procfs(0xffffffffffffffff, &(0x7f00000008c0)='gid_map\x00') 16:21:32 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000880)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x2, @pix_mp}) [ 1265.429491][T31551] fuse: Bad value for 'fd' [ 1265.458799][T31551] fuse: Bad value for 'fd' 16:21:32 executing program 5: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvme-fabrics\x00', 0x0, 0x0) 16:21:32 executing program 2: ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xff}) 16:21:32 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x181000, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x3, 0x4001) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, 0x0) io_setup(0x3, &(0x7f0000000640)) 16:21:32 executing program 4: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0xa4040, 0x0) 16:21:32 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x1e0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}) 16:21:32 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "e4c57da12e2a0d852798a88918d0f6bd21cd16759f2cb7690be1bf0f7fc60caec3dbd82e40366bf465d242f6798b82c43f6da5517bd6eb1814d87a51f8d9c5"}, 0x60) 16:21:32 executing program 5: syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x400, 0x1) 16:21:32 executing program 3: socket(0x2, 0x2, 0x40) 16:21:32 executing program 2: ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xff}) 16:21:32 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000001a00)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, 0x0) 16:21:32 executing program 5: syz_mount_image$hfsplus(&(0x7f00000000c0)='hfsplus\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) 16:21:32 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0x4004510d, 0x0) 16:21:32 executing program 2: ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xff}) 16:21:32 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='security.selinux\x00') 16:21:32 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000040)=@raw=[@ldst, @func, @ldst, @exit, @map={0x18, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0xc1, &(0x7f0000000180)=""/193, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1265.879069][T31589] hfsplus: invalid gid specified [ 1265.889800][T31589] hfsplus: unable to parse mount options 16:21:32 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9cb}) 16:21:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 16:21:33 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xff}) 16:21:33 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xff}) [ 1266.003760][T31589] hfsplus: invalid gid specified [ 1266.008831][T31589] hfsplus: unable to parse mount options 16:21:33 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x8000, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)}) 16:21:33 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xec, &(0x7f0000000180)=""/236, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:21:33 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$sequencer(r0, &(0x7f0000000080)=""/81, 0x51) 16:21:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 16:21:33 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000880)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x8000}]}}) 16:21:33 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xff}) 16:21:33 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) 16:21:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x40) 16:21:33 executing program 0: socketpair(0x1f, 0x0, 0x0, &(0x7f0000000740)) 16:21:33 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x6202, 0x0) 16:21:33 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xff}) 16:21:33 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x3}]}) 16:21:33 executing program 1: select(0x40, &(0x7f0000001180), 0x0, 0x0, 0x0) 16:21:33 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) 16:21:33 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/timer\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0, 0x13, r0, 0x0) 16:21:34 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4020940d, &(0x7f0000000140)={0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:21:34 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xff}) 16:21:34 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0x5402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 16:21:34 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) 16:21:34 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='map=normal,session=0x0000000000000062,']) 16:21:34 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0x5402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 16:21:34 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xff}) 16:21:34 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x1e0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 16:21:34 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = dup2(r1, r0) sendto$l2tp6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1267.363719][T31657] ISOFS: Unable to identify CD-ROM format. [ 1267.463609][T31657] ISOFS: Unable to identify CD-ROM format. 16:21:34 executing program 1: shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) r0 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffa000/0x4000)=nil) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000540)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000440)=""/221, 0xdd, 0x101, 0x5, 0x0, 0x5, 0x20000000}}, 0x120) shmctl$IPC_RMID(r0, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000680)) shmget(0x0, 0x2000, 0x100, &(0x7f0000ffb000/0x2000)=nil) 16:21:34 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) 16:21:34 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0x5402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 16:21:34 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f00000000c0)='\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 16:21:34 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) 16:21:34 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x1e0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 16:21:34 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) 16:21:34 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_RMID(r0, 0x0) 16:21:34 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0x5402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 16:21:34 executing program 1: rt_sigaction(0x15, 0x0, 0x0, 0x8, &(0x7f0000000200)) 16:21:34 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/timer\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000740)='fuse\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=', @ANYRESDEC=0x0, @ANYBLOB='\a']) 16:21:34 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) 16:21:34 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 16:21:34 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x1, 0x0) 16:21:34 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000280)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000100)=""/122, 0x7a}}, 0x120) 16:21:34 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}) [ 1267.880993][T31699] fuse: Bad value for 'rootmode' 16:21:35 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x0, 0x0, 0x0, @SEQ_CONTROLLER=0xff}) 16:21:35 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x1e0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) [ 1268.007568][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.030890][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 16:21:35 executing program 5: socketpair(0x28, 0x0, 0x9, &(0x7f0000000000)) [ 1268.075478][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 16:21:35 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 16:21:35 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0x541b, 0x0) [ 1268.122891][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 16:21:35 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x0, 0x0, 0x0, @SEQ_CONTROLLER=0xff}) 16:21:35 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x88002, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 16:21:35 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) 16:21:35 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 16:21:35 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x1, &(0x7f0000000100)=@raw=[@jmp], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1268.162923][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.162951][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 16:21:35 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x0, 0x0, 0x0, @SEQ_CONTROLLER=0xff}) 16:21:35 executing program 5: setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040), 0xffffffffffffffbe) [ 1268.162967][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.164617][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 16:21:35 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x6, &(0x7f0000000040)=@raw=[@ldst, @ldst, @exit, @map={0x18, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0xc1, &(0x7f0000000180)=""/193, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1268.164644][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.164665][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.164686][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.164707][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.164728][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.164748][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.164768][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.164789][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.164809][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.164830][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.164850][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.164870][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.164891][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.164911][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.164930][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.164950][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.164971][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.164991][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.165010][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.165030][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.165050][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.165070][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.165090][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.165110][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.165131][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.165151][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.165171][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169104][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169136][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169157][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169178][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169199][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169220][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169241][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169262][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169283][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169304][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169325][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169346][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169367][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169387][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169406][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169431][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169450][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169471][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169490][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169505][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169521][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169537][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169553][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169569][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169585][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169601][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169617][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169633][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169653][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169672][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169692][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169712][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169732][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169750][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169768][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169787][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169805][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169822][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169841][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169860][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169880][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169899][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169918][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169937][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169956][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169975][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.169994][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.170013][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.170033][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.170051][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.170070][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.177069][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.177099][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.177119][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.177140][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.177161][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.177181][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.177202][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.178155][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.178176][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.178197][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.178217][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.178238][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.178258][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.178280][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.178300][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.178321][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.178450][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.178472][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.178493][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.178514][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.178535][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.178556][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.178576][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.178596][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.178616][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.178637][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.178657][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.178677][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.178698][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.178719][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.178741][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.178762][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.178783][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.178802][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.178822][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.178842][T19081] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1268.185129][T19081] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz1 16:21:37 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x1e0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 16:21:37 executing program 3: ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0x5402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) 16:21:37 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa}) 16:21:37 executing program 4: io_setup(0x3, &(0x7f0000000640)=0x0) io_submit(r0, 0x1, &(0x7f0000000d80)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 16:21:37 executing program 5: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) 16:21:37 executing program 1: write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) 16:21:37 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x1, &(0x7f0000000100)=@raw=[@jmp], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, 0x78) 16:21:37 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa}) 16:21:37 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x620040, 0x0) fcntl$addseals(r0, 0x409, 0x0) 16:21:37 executing program 3: ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0x5402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) 16:21:37 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x204c02, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/timer\x00', 0x0, 0x0) dup2(r1, r0) 16:21:37 executing program 1: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0x80000) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ocfs2_control\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00)='IPVS\x00') 16:21:37 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x20900, 0x0) read$sequencer(r0, &(0x7f00000000c0)=""/246, 0xf6) 16:21:37 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000180)={0x1e0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 16:21:37 executing program 3: ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0x5402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) 16:21:37 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa}) 16:21:37 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ocfs2_control\x00', 0x0, 0x0) bind$isdn_base(r0, 0x0, 0x0) 16:21:37 executing program 4: syz_mount_image$hpfs(&(0x7f0000001c80)='hpfs\x00', &(0x7f0000001cc0)='./file0\x00', 0x0, 0x9, &(0x7f0000000600)=[{&(0x7f0000000880)="f1650e1c0eba28201351863085cae124ba8a2e3ef4bf0807905b62dbb0e96c8f4ca898a8359a555481afa781eed829277dedbe5de00ed592bec30e2dc532301703ee2803f9af", 0x46, 0x2}, {&(0x7f0000000080)="eb54fa4866dc7b", 0x7, 0x6}, {&(0x7f00000000c0)="d754b3e58a939fe084a5088c9927ecace3e07505c045dafa28dbf0b9f928bd6b7b8d3103d0a1746c07802f77597c98f4a980e7504de5aa213bc9250bda3731de86c3f7af7932bd2a5bd2b560842f94654152a0612bbe9e6de26d4abce676830f7c83100208387f79a025b7fb34c6d11c308da4129ccde44bf3505f78308ada7d82a8fde05685a7419d0633c711835b5b23b67f95c7cbd109021df8fa68930d5066abf52e6a880afc655b7a41743cd979c6cc99a3387485213d5b939c4b56d71b75c1d47bf9d98d66bc92f3b83503c7d605f2eadbfd76eb4228f9740a57f5fb3a11cfd60661c4db025b0f", 0xea, 0xfffffffffffffff8}, {&(0x7f00000001c0)="5c24054fe015ec2353e83c2c9070374000243fed3cfe4b04fc32f3fb8a27170bf9070f4ff6c280b24c54ddd64d4810f274698272c9fa85c261e17f46ab186127f1fa87af491499a16bd9dd05ae5aa1403ef2c63d9d3c080968843cfb42f3223428dfe27cc3e88115c056db42d3758421e584544789d629975b19376cb56a1c778860d11230a7de79825dfa6dd69be3a1d89def8af365", 0x96}, {&(0x7f0000000280)="e8ff2feccc9953be69f103537aaa8a5169b774355df688436ff86865bbf573a3b5f78d1dab89a1ebdab0326196a0430abbcd9c6653214d3da6ac3ce83bca7834b51a7ce3d7dc17afc784aa6732de85e6e1b42bf98869d60c6c56ad4472c93f033b72801267cc95dc8ae04674578a0ae3d9243769d156dd8962044be6b9914a92875ac4b81e22058f2b70e8bb922fa8665be3c0386351cd5be5fc1270a39d91a11ceb714bf32202af1f3f605481aa1febff284de27a2c9dc2e44b43c656628c94", 0xc0, 0x80000001}, {&(0x7f0000000340)="b5d0e51947d61ab272815d478e89a25a7ec7efb656fa26a6c92e41b1b21a505541f4d830f84e7a5902467f37280df1dcda93617f1bcbf2258399ab2f2eacecbdbf1f3c325f9458391abc5a489e4eb34399866995cd4bec7c2756e117cb414529e57b77e23f0676aced7606bed0409d1fa0814f91244556a789b2e75aa481c56d3087b96ae3c7598a3bc2be81de0fde", 0x8f, 0x4}, {&(0x7f0000000400)="1aadac8535fba662d074ff63fdaa1dbf6e6ec47c7c78c246d750c7bac03a2423ae1b4daa58a72de97ad4b8dc675c7b", 0x2f, 0x2}, {&(0x7f0000000480)="ce9d8086ff10dcb4fd9662b0d327772a641d2fb3f98b40f7fd2340de2a016944defadbdd8030cb10ffa9cb63a9199329c67313fcd09bed0d3958e94902094b5b18d993e7cee188ee03c05abeb86320d6b438973029b802125f6787733bb6dea5db5e", 0x62, 0x1}, {&(0x7f0000000500)="b6b3d040c4b02d0aaf275a7c969ae69459c76647be1e1ee538539e988d771d3332fce245317d176e3c8609b3ccdd235614a3af59ba278e57d59c79d0c49e5ab0153ac7d221e1e32b84e9d1c8dd651ef31ec17465fbe127061aad2187832950607e2fdf7bb7b4fe79f46b902710a01831d5af1be00844bf078b60dc416f95699d466bfa388fcb586c3769322d601f6b16c276af0983f32d3f3bdfe4ebc3e5e0c565fbe16828b7dab9ac26e38a4af795454729e90b98df954c69ac5a24e247d226a58b9cc2ea3acc95ab55c0da93a16ead914be74e1a64874cc823333b30ef6eb75843e8714febc587b69b773212a7", 0xee, 0x1ff}], 0x0, &(0x7f0000000840)={[{'hpfs\x00'}, {'hpfs\x00'}, {'dont_measure'}], [{@dont_appraise='dont_appraise'}]}) 16:21:37 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') fremovexattr(r0, &(0x7f00000000c0)=@known='system.posix_acl_default\x00') 16:21:37 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000180)={0x1e0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 16:21:37 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) write$fb(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x84002, 0x0) 16:21:37 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0x5402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 16:21:37 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000080), 0x4) 16:21:37 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x181000, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x2, @pix_mp={0x9, 0x2, 0x3247504d, 0x3, 0x4, [{0x3, 0x10001}, {0x401, 0x4}, {0x3d6c6411, 0x8}, {0x5, 0x401}, {0xfff, 0x4}, {0x100, 0x101}, {0x0, 0xb390}, {0x8, 0x3}], 0x6, 0xd4, 0x0, 0x0, 0x6}}) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x3, 0x4001) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000180)=""/30) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x20000, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvme-fabrics\x00', 0x202000, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x7, 0x80, 0xdbe7, 0xffff, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x65, 0x0, 0x7, 0x50, 0x0, @remote, @multicast1}}}}) syz_genetlink_get_family_id$l2tp(0x0) io_setup(0x3, &(0x7f0000000640)) syz_open_procfs(0xffffffffffffffff, &(0x7f00000008c0)='gid_map\x00') syz_genetlink_get_family_id$l2tp(&(0x7f0000000dc0)='l2tp\x00') [ 1270.950769][T31798] loop4: detected capacity change from 264192 to 0 [ 1271.005949][T31798] hpfs: bad mount options. [ 1271.048667][T31798] loop4: detected capacity change from 264192 to 0 [ 1271.066177][T31798] hpfs: bad mount options. 16:21:38 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "e4c57da12e2a0d852798a88918d0f6bd21cd16759f2cb7690be1bf0f7fc60caec3dbd82e40366bf465d242f6798b82c43f6da5517bd6eb1814d87a51f8d9c5"}, 0x60) 16:21:38 executing program 4: io_setup(0x3, &(0x7f0000000640)) 16:21:38 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000180)={0x1e0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 16:21:38 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0x5402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 16:21:38 executing program 1: io_setup(0x0, &(0x7f0000000640)) 16:21:38 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0xc0684608, 0x0) 16:21:38 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0x5402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 16:21:38 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000040)=@framed={{}, [@btf_id, @call, @call]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xec, &(0x7f0000000180)=""/236, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:21:38 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x1e0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 16:21:38 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000140)={0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:21:38 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140), 0x10) 16:21:38 executing program 2: select(0x40, &(0x7f0000001180), 0x0, &(0x7f0000002200)={0x800}, 0x0) 16:21:38 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x1e0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 16:21:38 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0x5402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 16:21:38 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000600)=""/117) 16:21:38 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) dup2(r1, r0) 16:21:38 executing program 4: mlockall(0x7) mlockall(0x3) mlockall(0x1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 16:21:38 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x1e0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 16:21:38 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0x5402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 16:21:38 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) 16:21:38 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x0) write$fb(r0, 0x0, 0x0) 16:21:38 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) dup2(r1, r0) 16:21:38 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) dup2(r1, r0) 16:21:38 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000180)={0x1e0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 16:21:38 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0x5402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 16:21:38 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x200000) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) 16:21:38 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x200, 0x13}) 16:21:38 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000180)={0x1e0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 16:21:39 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) 16:21:39 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) dup2(r1, r0) 16:21:39 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0x5402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) 16:21:39 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000880)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000340)={0x0, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 16:21:39 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x1e0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}) 16:21:39 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000180)={0x1e0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 16:21:39 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 16:21:39 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0x5402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) 16:21:39 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 16:21:39 executing program 4: syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f00000006c0)={[{@sbsector={'sbsector'}}]}) 16:21:39 executing program 2: socketpair(0x2, 0x0, 0x401, &(0x7f0000000540)) 16:21:39 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) 16:21:39 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 16:21:39 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0x5402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) 16:21:39 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) 16:21:39 executing program 5: syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x3, 0x4001) 16:21:39 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 16:21:39 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/llc/core\x00') [ 1272.906541][T31911] ISOFS: Unable to identify CD-ROM format. 16:21:40 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) 16:21:40 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xec, 0x99, 0xce, 0x8, 0x100d, 0x3342, 0xabb4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x50, 0x17, 0x6e}}]}}]}}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 16:21:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000780), 0x4) 16:21:40 executing program 4: syz_mount_image$hpfs(&(0x7f0000001c80)='hpfs\x00', &(0x7f0000001cc0)='./file0\x00', 0x0, 0x9, &(0x7f0000000600)=[{&(0x7f0000000880)="f1650e1c0eba28201351863685cae124ba8a2e3ef4bf0807905b62dbb0e96c8f4ca898a8359a555481afa781eed829277dedbe5de00ed592bec30e2dc532301703ee2803f9af6cc913b74354475df995", 0x41, 0x2}, {&(0x7f0000000080)="eb54fa4866dc7b", 0x7, 0x6}, {&(0x7f00000000c0)="d754b3e58a939fe084a5088c9927ecace3e07505c045dafa28dbf0b9f928bd6b7b8d3103d0a1746c07802f77597c98f4a980e7504de5aa213bc9250bda3731de86c3f7af7932bd2a5bd2b560842f94654152a0612bbe9e6de26d4abce676830f7c83100208387f79a025b7fb34c6d11c308da4129ccde44bf3505f78308ada7d82a8fde05685a7419d0633c711835b5b23b67f95c7cbd109021df8fa68930d5066abf52e6a880afc655b7a41743cd979c6cc99a3387485213d5b939c4b56d71b75c1d47bf9d98d66bc92f3b83503c7d605f2eadbfd76eb4228f9740a57f5fb3a11cfd60661c4db025b0f", 0xffffffffffffffff, 0xfffffffffffffff8}, {&(0x7f00000001c0)="5c24054fe015ec2353e83c2c9070374000243fed3cfe4b04fc32f3fb8a27170bf9070f4ff6c280b24c54ddd64d4810f274698272c9fa85c261e17f46ab186127f1fa87af491499a16bd9dd05ae5aa1403ef2c63d9d3c080968843cfb42f3223428dfe27cc3e88115c056db42d3758421e584544789d629975b19376cb56a1c778860d11230a7de79825dfa6dd69be3a1d89def8af365", 0x96, 0x6f4b}, {&(0x7f0000000280)="e8ff2feccc9953be69f103537aaa8a5169b774355df688436ff86865bbf573a3b5f78d1dab89a1ebdab0326196a0430abbcd9c6653214d3da6ac3ce83bca7834b51a7ce3d7dc17afc784aa6732de85e6e1b42bf98869d60c6c56ad4472c93f033b72801267cc95dc8ae04674578a0ae3d9243769d156dd8962044be6b9914a92875ac4b81e22058f2b70e8bb922fa8665be3c0386351cd5be5fc1270a39d91a11ceb714bf32202af1f3f605481aa1febff284de27a2c9dc2e44b43c656628c94", 0xc0, 0x80000001}, {&(0x7f0000000340)="b5d0e51947d61ab272815d478e89a25a7ec7efb656fa26a6c92e41b1b21a505541f4d830f84e7a5902467f37280df1dcda93617f1bcbf2258399ab2f2eacecbdbf1f3c325f9458391abc5a489e4eb34399866995cd4bec7c2756e117cb414529e57b77e23f0676aced7606bed0409d1fa0814f91244556a789b2e75aa481c56d3087b96ae3c7598a3bc2be81de0fde", 0x8f, 0x4}, {&(0x7f0000000400)="1aadac8535fba662d074ff63fdaa1dbf6e6ec47c7c78c246d750c7bac03a2423ae1b4daa58a72de97ad4b8dc675c7b66c58c60e72b74b015bdc42e37bec084198363d1cf02615cc6d7b2dbf84d8272739703e0c673a603590a7d71883b5b", 0x5e, 0x2}, {&(0x7f0000000480)="ce9d8086ff10dcb4fd9662b0d327772a641d2fb3f98b40f7fd2340de2a016944defadbdd8030cb10ffa9cb63a9199329c67313fcd09bed0d3958e94902094b5b18d993e7cee188ee03c05abeb86320d6b438973029b802125f6787733bb6dea5db5e", 0x62, 0x1}, {&(0x7f0000000500)="b6b3d040c4b02d0aaf275a7c969ae69459c76647be1e1ee538539e988d771d3332fce245317d176e3c8609b3ccdd235614a3af59ba278e57d59c79d0c49e5ab0153ac7d221e1e32b84e9d1c8dd651ef31ec17465fbe127061aad2187832950607e2fdf7bb7b4fe79f46b902710a01831d5af1be00844bf078b60dc416f95699d466bfa388fcb586c3769322d601f6b16c276af0983f32d3f3bdfe4ebc3e5e0c565fbe16828b7dab9ac26e38a4af795454729e90b98df954c69ac5a24e247d226a58b9cc2ea3acc95ab55c0da93a16ead914be74e1a64874cc823333b30ef6eb75843e8714febc587b69b773212a7", 0xfffffffffffffc57, 0x1ff}], 0x0, &(0x7f0000000840)={[{'hpfs\x00'}, {'hpfs\x00'}, {'dont_measure'}], [{@dont_appraise='dont_appraise'}]}) 16:21:40 executing program 3: io_setup(0x3, &(0x7f0000000640)=0x0) io_submit(r0, 0x0, 0x0) 16:21:40 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 16:21:40 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3ff}) 16:21:40 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) 16:21:40 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 16:21:40 executing program 3: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvme-fabrics\x00', 0x202000, 0x0) 16:21:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote}, 0x1c, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000100)='3Z^', 0x3}, {&(0x7f0000000200)="f4", 0x1}], 0x3}, 0x0) 16:21:40 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) 16:21:40 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) [ 1273.362828][T19081] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1273.539884][T31943] loop4: detected capacity change from 264192 to 0 [ 1273.550292][T31943] hpfs: bad mount options. [ 1273.613167][T19081] usb 6-1: Using ep0 maxpacket: 8 [ 1273.973350][T19081] usb 6-1: string descriptor 0 read error: -22 [ 1273.979816][T19081] usb 6-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=ab.b4 [ 1273.998415][T19081] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.012327][T19081] usb 6-1: config 0 descriptor?? [ 1274.064357][T19081] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1274.269431][T19081] usb 6-1: USB disconnect, device number 6 [ 1275.052952][T19081] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1275.302873][T19081] usb 6-1: Using ep0 maxpacket: 8 [ 1275.683909][T19081] usb 6-1: string descriptor 0 read error: -22 [ 1275.690809][T19081] usb 6-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=ab.b4 [ 1275.707749][T19081] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.719467][T19081] usb 6-1: config 0 descriptor?? [ 1275.785157][T19081] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! 16:21:43 executing program 5: shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffb000/0x3000)=nil) 16:21:43 executing program 3: select(0x0, 0x0, &(0x7f00000011c0), 0x0, &(0x7f0000002240)={0x0, 0xea60}) 16:21:43 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300)='l2tp\x00') io_setup(0x3, &(0x7f0000000640)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000dc0)='l2tp\x00') 16:21:43 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) 16:21:43 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 16:21:43 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='map=normal,session=0x0']) [ 1275.993002][T19081] usb 6-1: USB disconnect, device number 7 16:21:43 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x1e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 16:21:43 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) dup2(r1, r0) [ 1276.133698][T32007] ISOFS: Unable to identify CD-ROM format. 16:21:43 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x1e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 16:21:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x1, &(0x7f0000000100)=@raw=[@jmp], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:21:43 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000040)=@raw=[@ldst={0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @ldst={0x0, 0x0, 0x1}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0xc1, &(0x7f0000000180)=""/193, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:21:43 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x3aacc3, 0x0) write$hidraw(r0, 0x0, 0x0) [ 1276.312038][T32007] ISOFS: Unable to identify CD-ROM format. 16:21:43 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) recvmsg$can_raw(r0, 0x0, 0x0) 16:21:43 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) dup2(r1, r0) 16:21:43 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x1e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 16:21:43 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0xc4882, 0x0) 16:21:43 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') 16:21:43 executing program 2: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000680)='/dev/nvme-fabrics\x00', 0x10002, 0x0) 16:21:43 executing program 3: shmctl$SHM_UNLOCK(0x0, 0x2) 16:21:43 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x1e0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 16:21:43 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) dup2(r1, r0) 16:21:43 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) 16:21:43 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x9e000) 16:21:43 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000180)) 16:21:43 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x1, &(0x7f0000000100)=@raw=[@jmp], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:21:43 executing program 2: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)={0x0, 0xea60}) 16:21:43 executing program 5: openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x400000, 0x0) 16:21:43 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r1, r0) 16:21:43 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x1e0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 16:21:43 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) 16:21:43 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000180)={0x3a}) 16:21:43 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r1, r0) 16:21:43 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) 16:21:43 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x1e0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 16:21:43 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4002, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0x5402, 0x0) 16:21:44 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4400, &(0x7f0000000100)=@raw=[@jmp], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xec, &(0x7f0000000180)=""/236, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:21:44 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$sequencer(r0, &(0x7f0000000040)=""/36, 0x24) 16:21:44 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r1, r0) 16:21:44 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 16:21:44 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x1e0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4}) 16:21:44 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4400, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) 16:21:44 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000880)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000008c0)) 16:21:44 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$sequencer(r0, &(0x7f0000000040)=""/36, 0x24) 16:21:44 executing program 5: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmget(0x0, 0x4000, 0x200, &(0x7f0000920000/0x4000)=nil) 16:21:44 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) 16:21:44 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x1, &(0x7f0000000100)=@raw=[@jmp], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:21:44 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x1, &(0x7f0000000100)=@raw=[@jmp], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:21:44 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) 16:21:44 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$sequencer(r0, &(0x7f0000000040)=""/36, 0x24) 16:21:44 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) 16:21:44 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1, 0x0, 0x0, 0x0) 16:21:44 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ocfs2_control\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) 16:21:44 executing program 0: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/btrfs-control\x00', 0x36041, 0x0) 16:21:44 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$sequencer(r0, &(0x7f0000000040)=""/36, 0x24) 16:21:44 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/sequencer\x00', 0x14d980, 0x0) 16:21:44 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/timer\x00', 0x0, 0x0) r1 = gettid() ioprio_get$pid(0x1, r1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) write$fb(r0, 0x0, 0x0) dup(0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/timer\x00', 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) write$fb(0xffffffffffffffff, 0x0, 0x0) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000240)={0x18}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x84002, 0x0) 16:21:44 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) 16:21:44 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = dup2(r0, r0) accept$nfc_llcp(r1, 0x0, 0x0) 16:21:44 executing program 2: read$sequencer(0xffffffffffffffff, &(0x7f0000000040)=""/36, 0x24) 16:21:44 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_LOCK(0x0, 0xb) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) 16:21:44 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x1e0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 16:21:44 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) 16:21:44 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@random={'osx.', '/dev/sequencer2\x00'}) 16:21:44 executing program 2: read$sequencer(0xffffffffffffffff, &(0x7f0000000040)=""/36, 0x24) 16:21:44 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_UNLOCK(r0, 0x2) 16:21:44 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/5, 0x5}], 0x1, 0x0, 0x0, 0x0) 16:21:44 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x101082) 16:21:44 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000280)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0}}, 0x120) 16:21:45 executing program 2: read$sequencer(0xffffffffffffffff, &(0x7f0000000040)=""/36, 0x24) 16:21:45 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x1ec5bf, &(0x7f0000000100)=@raw=[@jmp], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xec, &(0x7f0000000180)=""/236, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:21:45 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x74df40, 0x0) connect$l2tp(r0, 0x0, 0x0) 16:21:45 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$sequencer(r0, &(0x7f0000000040)=""/36, 0x24) 16:21:45 executing program 5: semctl$SEM_STAT(0x0, 0x4, 0x12, &(0x7f0000000140)=""/253) 16:21:45 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) 16:21:45 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x1e0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, 0x0, 0x8}) 16:21:45 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0x1, &(0x7f0000000100)=@raw=[@jmp], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:21:45 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$sequencer(r0, &(0x7f0000000040)=""/36, 0x24) 16:21:45 executing program 3: waitid(0x0, 0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) 16:21:45 executing program 4: shmget$private(0x0, 0x4000, 0x54000900, &(0x7f0000ffa000/0x4000)=nil) 16:21:45 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000400)) 16:21:45 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$sequencer(r0, &(0x7f0000000040)=""/36, 0x24) 16:21:45 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0xc0189436, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}) 16:21:45 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0x5421, 0x0) 16:21:45 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$sequencer(0xffffffffffffffff, &(0x7f0000000040)=""/36, 0x24) 16:21:45 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000880)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000340)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 16:21:45 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) 16:21:45 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) read$fb(r0, &(0x7f0000000380)=""/170, 0x2000042a) 16:21:45 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x244100) ftruncate(r0, 0x0) 16:21:45 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0x1, &(0x7f0000000100)=@raw=[@jmp], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:21:45 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$sequencer(0xffffffffffffffff, &(0x7f0000000040)=""/36, 0x24) 16:21:45 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x40}) 16:21:45 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x10) 16:21:45 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) 16:21:45 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$sequencer(0xffffffffffffffff, &(0x7f0000000040)=""/36, 0x24) 16:21:45 executing program 1: ioperm(0x0, 0x1, 0x5) 16:21:45 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/timer\x00', 0x0, 0x0) mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 16:21:45 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x181000, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x2, @pix_mp={0x9, 0x2, 0x3247504d, 0x3, 0x4, [{0x3, 0x10001}, {0x401, 0x4}, {0x3d6c6411, 0x8}, {0x5, 0x401}, {0xfff, 0x4}, {0x100, 0x101}, {0x0, 0xb390}, {0x8, 0x3}], 0x6, 0xd4, 0x0, 0x1, 0x6}}) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x3, 0x4001) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000180)=""/30) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x20000, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvme-fabrics\x00', 0x202000, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300)='l2tp\x00') io_setup(0x3, &(0x7f0000000640)) syz_open_procfs(0xffffffffffffffff, &(0x7f00000008c0)='gid_map\x00') syz_genetlink_get_family_id$l2tp(&(0x7f0000000dc0)='l2tp\x00') 16:21:45 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x1e0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}) 16:21:46 executing program 3: socket(0x34, 0x0, 0x0) 16:21:46 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$sequencer(r0, 0x0, 0x0) 16:21:46 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x8000, 0x1, &(0x7f0000000000)=[0x0], &(0x7f0000000040), &(0x7f00000000c0), 0x0}) 16:21:46 executing program 1: syz_mount_image$hpfs(&(0x7f0000001c80)='hpfs\x00', &(0x7f0000001cc0)='./file0\x00', 0x0, 0x9, &(0x7f0000000600)=[{&(0x7f0000000880)="f1650e1c0eba28201351863785cae124ba8a2e3ef4bf0807905b62dbb0e96c8f4ca898a8359a555481afa781eed829277dedbe5de00ed592bec30e2dc532301703ee2803f9af6cc913b743", 0x4b, 0x2}, {&(0x7f0000000080)="eb54fa4866dc7b", 0x7, 0x6}, {&(0x7f00000000c0)="d754b3e58a939fe084a5088c9927ecace3e07505c045dafa28dbf0b9f928bd6b7b8d3103d0a1746c07802f77597c98f4a980e7504de5aa213bc9250bda3731de86c3f7af7932bd2a5bd2b560842f94654152a0612bbe9e6de26d4abce676830f7c83100208387f79a025b7fb34c6d11c308da4129ccde44bf3505f78308ada7d82a8fde05685a7419d0633c711835b5b23b67f95c7cbd109021df8fa68930d5066abf52e6a880afc655b7a41743cd979c6cc99a3387485213d5b939c4b56d71b75c1d47bf9d98d66bc92f3b83503c7d605f2eadbfd76eb4228f9740a57f5fb3a11cfd60661c4db025b0f", 0xea, 0xfffffffffffffff8}, {&(0x7f00000001c0)="5c24054fe015ec2353e83c2c9070374000243fed3cfe4b04fc32f3fb8a27170bf9070f4ff6c280b24c54ddd64d4810f274698272c9fa85c261e17f46ab186127f1fa87af491499a16bd9dd05ae5aa1403ef2c63d9d3c080968843cfb42f3223428dfe27cc3e88115c056db42d3758421e584544789d629975b19376cb56a1c778860d11230a7de79825dfa6dd69be3a1d89def8af365", 0x96, 0x6f4b}, {&(0x7f0000000280)="e8ff2feccc9953be69f103537aaa8a5169b774355df688436ff86865bbf573a3b5f78d1dab89a1ebdab0326196a0430abbcd9c6653214d3da6ac3ce83bca7834b51a7ce3d7dc17afc784aa6732de85e6e1b42bf98869d60c6c56ad4472c93f033b72801267cc95dc8ae04674578a0ae3d9243769d156dd8962044be6b9914a92875ac4b81e22058f2b70e8bb922fa8665be3c0386351cd5be5fc1270a39d91a11ceb714bf32202af1f3f605481aa1febff284de27a2c9dc2e44b43c656628c94", 0xc0, 0x80000001}, {&(0x7f0000000340)="b5d0e51947d61ab272815d478e89a25a7ec7efb656fa26a6c92e41b1b21a505541f4d830f84e7a5902467f37280df1dcda93617f1bcbf2258399ab2f2eacecbdbf1f3c325f9458391abc5a489e4eb34399866995cd4bec7c2756e117cb414529e57b77e23f0676aced7606bed0409d1fa0814f91244556a789b2e75aa481c56d3087b96ae3c7598a3bc2be81de0fde", 0x8f, 0x4}, {&(0x7f0000000400)="1aadac8535fba662d074ff63fdaa1dbf6e6ec47c7c78c246d750c7bac03a2423ae1b4daa58a72de97ad4b8dc675c7b66c58c60e72b74b015bdc42e37bec084198363d1cf02615cc6d7b2dbf84d8272739703e0c673a603590a7d71883b5b", 0x5e, 0x2}, {&(0x7f0000000480)="ce9d8086ff10dcb4fd9662b0d327772a641d2fb3f98b40f7fd2340de2a016944defadbdd8030cb10ffa9cb63a9199329c67313fcd09bed0d3958e94902094b5b18d993e7cee188ee03c05abeb86320d6b438973029b802125f6787733bb6dea5db5e", 0x62, 0x1}, {&(0x7f0000000500)="b6b3d040c4b02d0aaf275a7c969ae69459c76647be1e1ee538539e988d771d3332fce245317d176e3c8609b3ccdd235614a3af59ba278e57d59c79d0c49e5ab0153ac7d221e1e32b84e9d1c8dd651ef31ec17465fbe127061aad2187832950607e2fdf7bb7b4fe79f46b902710a01831d5af1be00844bf078b60dc416f95699d466bfa388fcb586c3769322d601f6b16c276af0983f32d3f3bdfe4ebc3e5e0c565fbe16828b7dab9ac26e38a4af795454729e90b98df954c69ac5a24e247d226a58b9cc2ea3acc95ab55c0da93a16ead914be74e1a64874cc823333b30ef6eb7", 0xe0, 0x1ff}], 0x0, &(0x7f0000000840)={[{'hpfs\x00'}, {'hpfs\x00'}, {'dont_measure'}], [{@dont_appraise='dont_appraise'}]}) 16:21:46 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='map=normal,session=0']) 16:21:46 executing program 3: shmget$private(0x0, 0x4000, 0x54007a00, &(0x7f0000ffa000/0x4000)=nil) 16:21:46 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$sequencer(r0, 0x0, 0x0) 16:21:46 executing program 3: rt_sigaction(0x15, &(0x7f0000000100)={&(0x7f0000000040)="8f8af810370008804140810200000000c423f917530700450ffb27c482fd33e036650fdb1bc482250c073e26f26dc442f920f3c44119c2420b0b", 0x0, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000200)) [ 1279.175442][T32248] loop1: detected capacity change from 264192 to 0 16:21:46 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4400, 0x0) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, 0x0) [ 1279.232610][T32248] hpfs: bad mount options. 16:21:46 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, 0x0) 16:21:46 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$sequencer(r0, 0x0, 0x0) [ 1279.311264][T32254] ISOFS: Unable to identify CD-ROM format. [ 1279.328114][T32248] loop1: detected capacity change from 264192 to 0 16:21:46 executing program 3: shmctl$SHM_UNLOCK(0x0, 0xd) 16:21:46 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f00000000c0)='\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) 16:21:46 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000fef000/0x3000)=nil, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 1279.391682][T32248] hpfs: bad mount options. 16:21:46 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/current\x00') 16:21:46 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x181000, 0x0) [ 1279.516351][T32254] ISOFS: Unable to identify CD-ROM format. 16:21:46 executing program 4: rt_sigaction(0x15, &(0x7f0000000100)={&(0x7f0000000040)="8f8af810370008804140810200000000c423f917530700450ffb27c482fd33e036650fdb1bc482250c073e26f26dc442f920f3c44119c2420b0b", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000200)) 16:21:46 executing program 0: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, 0x0}, 0x10) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000600)=""/117) 16:21:46 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) 16:21:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@call]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xec, &(0x7f0000000180)=""/236, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:21:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x17, 0x1, &(0x7f0000000100)=@raw=[@jmp], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:21:46 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 16:21:46 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0x5451, 0x0) 16:21:46 executing program 3: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0xd000) 16:21:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x2, &(0x7f0000000040)=@raw=[@ldst, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0xc1, &(0x7f0000000180)=""/193, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:21:46 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_UNLOCK(r0, 0xf) 16:21:46 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x82, 0x0) write$fb(r0, &(0x7f0000000080)="cc", 0x1) 16:21:46 executing program 2: io_setup(0x3, &(0x7f0000000640)=0x0) io_submit(r0, 0x1, &(0x7f0000000d80)=[0x0]) 16:21:46 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvme-fabrics\x00', 0x202000, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, 0x0, 0x0) 16:21:46 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$HIDIOCGRAWINFO(r0, 0x80084803, 0x0) 16:21:46 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0x5450, 0x0) 16:21:47 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000880)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) 16:21:47 executing program 1: syz_open_dev$vcsa(0xfffffffffffffffe, 0x0, 0x0) 16:21:47 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvme-fabrics\x00', 0x202000, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 16:21:47 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x10000000000000) 16:21:47 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) fchmod(r0, 0x0) 16:21:47 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x48201, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 16:21:47 executing program 4: syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x0) 16:21:47 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) 16:21:47 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) fsync(r0) 16:21:47 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) 16:21:47 executing program 2: socketpair(0x1, 0x0, 0xffffffff, &(0x7f0000000000)) 16:21:47 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, 0x0, 0x0) 16:21:47 executing program 4: syz_mount_image$iso9660(&(0x7f0000000180)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000440)={[{@map_normal='map=normal'}]}) 16:21:47 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x14, 0x1, &(0x7f0000000100)=@raw=[@jmp], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:21:47 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) fchmod(r0, 0x0) 16:21:47 executing program 1: syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0xd000) 16:21:47 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x1e0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 16:21:47 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) 16:21:47 executing program 2: syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f00000006c0)={[{@sbsector={'sbsector'}}, {@gid={'gid'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@overriderock='overriderockperm'}]}) 16:21:47 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x200}) 16:21:47 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300)='l2tp\x00') [ 1280.570844][T32352] ISOFS: Unable to identify CD-ROM format. 16:21:47 executing program 0: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0x0) 16:21:47 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x121681, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0x5111, 0x0) 16:21:47 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x143e43, 0x0) read$fb(r0, 0x0, 0x0) [ 1280.697375][T32367] ISOFS: Unable to identify CD-ROM format. [ 1280.719892][T32352] ISOFS: Unable to identify CD-ROM format. 16:21:47 executing program 4: socket(0x23, 0x0, 0x6) 16:21:47 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0x2, 0x0) 16:21:47 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x200000) fsync(r0) [ 1280.866903][T32367] ISOFS: Unable to identify CD-ROM format. 16:21:47 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x200300, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 16:21:48 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x100}]}}) io_setup(0x3, &(0x7f0000000640)) 16:21:48 executing program 0: socketpair(0x2b, 0x1, 0x0, &(0x7f0000000200)) 16:21:48 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000fef000/0x3000)=nil, 0x7000) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16:21:48 executing program 4: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) io_setup(0x3, &(0x7f0000000640)) 16:21:48 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x1e0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4}) 16:21:48 executing program 5: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) io_setup(0x0, &(0x7f0000000640)) 16:21:48 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@session={'session'}}]}) 16:21:48 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x6, &(0x7f0000000040)=@raw=[@ldst, @func, @exit, @map={0x18, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0xc1, &(0x7f0000000180)=""/193, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:21:48 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffff}]}, 0x20}, 0x1, 0x0, 0x0, 0xd0}, 0x0) r2 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x1, 0x1, 0x6, 0xb, 0x0, 0x70bd2b, 0x25dfdbfe, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e20, 0x1, @private2}, @in6={0xa, 0x4e24, 0x2, @mcast2, 0x3}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}]}, 0x58}}, 0x20004801) shmctl$IPC_RMID(r1, 0x0) 16:21:48 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2, 0x0) 16:21:48 executing program 3: syz_mount_image$xfs(&(0x7f0000000200)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x80, &(0x7f0000000680)={[{@grpquota='grpquota'}, {@nolargeio='nolargeio'}, {@filestreams='filestreams'}, {@nobarrier='nobarrier'}]}) 16:21:48 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000002a80)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000000c0)="bb", 0x1}, {0x0}], 0x2, &(0x7f0000000540)=[@rthdrdstopts={{0x18}}, @flowinfo={{0x14}}], 0x30}}], 0x1, 0x0) 16:21:48 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x0, 0x0) connect$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) [ 1281.405133][T32419] ISOFS: Unable to identify CD-ROM format. 16:21:48 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x2}, {}]}) [ 1281.450376][T32428] xfs: Unknown parameter 'nobarrier' 16:21:48 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) read$fb(r0, &(0x7f0000000380)=""/170, 0xaa) 16:21:48 executing program 2: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, 0x0}, 0x10) socketpair(0x10, 0x0, 0x0, &(0x7f00000000c0)) [ 1281.554304][T32419] ISOFS: Unable to identify CD-ROM format. [ 1281.566422][T32428] xfs: Unknown parameter 'nobarrier' 16:21:48 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x82, 0x0) write$fb(r0, &(0x7f0000000080)="ccd1", 0x2) 16:21:48 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x7) recvmsg(r0, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x40002020) 16:21:48 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) 16:21:48 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000), 0x4) pipe(&(0x7f0000000040)) 16:21:48 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @private}}, 0x80) 16:21:48 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/timer\x00', 0x0, 0x0) dup2(r1, r0) 16:21:48 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') 16:21:49 executing program 1: getgroups(0x1, &(0x7f0000000040)=[0x0]) 16:21:49 executing program 2: getitimer(0xaa26369b909f82d5, 0x0) 16:21:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4400, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x3, 0x4001) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x3, 0x4001) ioctl$HIDIOCGRAWINFO(r2, 0x80084803, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) 16:21:49 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmctl$IPC_RMID(r1, 0x0) 16:21:49 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x7, &(0x7f0000000040)=@framed={{}, [@map_val, @generic]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0xec, &(0x7f0000000180)=""/236, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x79) 16:21:49 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/cachefiles\x00', 0x0, 0x0) 16:21:49 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000a, 0x13, r0, 0x0) 16:21:49 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="1f", 0x1, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) keyctl$read(0x7, r0, 0x0, 0x0) 16:21:49 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) 16:21:49 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4400, 0x0) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x3, 0x4001) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, 0x0) 16:21:49 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x44100, 0x0) 16:21:49 executing program 5: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300)='l2tp\x00') io_setup(0x3, &(0x7f0000000640)) syz_open_procfs(0xffffffffffffffff, &(0x7f00000008c0)='gid_map\x00') syz_genetlink_get_family_id$l2tp(&(0x7f0000000dc0)='l2tp\x00') 16:21:49 executing program 3: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x0, 0x0) 16:21:49 executing program 0: sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x2de55fa4f3a01e64) 16:21:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newtfilter={0x34, 0x2c, 0x28c96dddc3d86841, 0x0, 0x0, {}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) 16:21:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='nv\x00', 0x3) 16:21:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x2c}, 0xfffffffffffffed3, &(0x7f00000001c0)={0x0}}, 0x0) 16:21:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000180)={[{@utf8='utf8=1'}]}) 16:21:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0xf, 0x2c, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @TCA_CHAIN={0x8}]}, 0x34}}, 0x0) 16:21:50 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f00000008c0)='gid_map\x00') 16:21:50 executing program 1: select(0x40, &(0x7f0000001180), 0x0, &(0x7f0000002200), 0x0) [ 1283.011934][T32519] loop5: detected capacity change from 6 to 0 16:21:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="f8040000650004"], 0x4f8}}, 0x0) [ 1283.097879][T32519] FAT-fs (loop5): Directory bread(block 6) failed 16:21:50 executing program 4: capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000900)='setgroups\x00') 16:21:50 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5, 0x42040) 16:21:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 16:21:50 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000000100)=""/4092, 0xffc}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='setgroups\x00') preadv(r0, &(0x7f00000017c0), 0x1c1, 0x2, 0x0) 16:21:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000180)={[{@utf8='utf8=1'}]}) 16:21:50 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) [ 1283.327246][T32541] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) 16:21:50 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000000100)=""/4092, 0xffc}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='setgroups\x00') preadv(r0, &(0x7f00000017c0), 0x1c1, 0x2, 0x0) 16:21:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x130, 0x98, 0x290, 0x1f8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x6}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x40}}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'team_slave_1\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 16:21:50 executing program 4: prctl$PR_CAPBSET_DROP(0x18, 0x880000000000019) [ 1283.428636][T32546] loop5: detected capacity change from 6 to 0 16:21:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0xffffff7f}, 0x0) [ 1283.470748][T32546] FAT-fs (loop5): Directory bread(block 6) failed [ 1283.484710][T32556] x_tables: duplicate underflow at hook 1 16:21:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x24, 0x10, 0x28c96dddc3d86841}, 0x24}}, 0x0) 16:21:51 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x2, [@ptr, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @int, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}]}}, 0x0, 0xb6}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 16:21:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000180)={[{@utf8='utf8=1'}]}) 16:21:51 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000000100)=""/4092, 0xffc}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='setgroups\x00') preadv(r0, &(0x7f00000017c0), 0x1c1, 0x2, 0x0) 16:21:51 executing program 4: r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f00000003c0)='trusted\x00', &(0x7f0000000400)={'syz', 0x1}, 0xfffffffffffffff9) 16:21:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 16:21:51 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) [ 1284.121828][T32572] loop5: detected capacity change from 6 to 0 [ 1284.159400][T32572] FAT-fs (loop5): Directory bread(block 6) failed 16:21:51 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000000100)=""/4092, 0xffc}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='setgroups\x00') preadv(r0, &(0x7f00000017c0), 0x1c1, 0x2, 0x0) 16:21:51 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x268, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) read$FUSE(r2, &(0x7f0000000780)={0x2020}, 0x2020) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:21:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000180)={[{@utf8='utf8=1'}]}) [ 1284.170985][T32580] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 16:21:51 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x400002000010e03}], 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nfs']) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) [ 1284.341049][T32595] loop1: detected capacity change from 270 to 0 [ 1284.375105][T32597] loop5: detected capacity change from 6 to 0 16:21:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x6558000a, &(0x7f0000000080)={&(0x7f0000000180)=@ipv6_getroute={0x38, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_GATEWAY={0x14, 0x5, @local={0xfc, 0x0}}]}, 0x38}}, 0x0) 16:21:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x24, 0x28, 0x28c96dddc3d86841}, 0x24}}, 0x0) [ 1284.433376][T32597] FAT-fs (loop5): Directory bread(block 6) failed 16:21:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@deltfilter={0x24, 0x2d, 0x4}, 0x24}}, 0x0) 16:21:54 executing program 1: r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x7, r0, 0x0) 16:21:54 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f0000000080)=@abs={0x1}, 0x6e) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 16:21:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x2}, 0xb, &(0x7f00000001c0)={0x0}}, 0x0) 16:21:54 executing program 4: userfaultfd(0x180000) 16:21:54 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000800)={'syz', 0x3}, &(0x7f0000000080)="1f", 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0xee01, 0xee01) [ 1287.081274][T32630] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability 16:21:54 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5, 0x0) mmap$snddsp(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 16:21:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x28c96dddc3d86841, 0x0, 0x0, {}, [@TCA_RATE={0x38}, @TCA_CHAIN={0x8}]}, 0x34}}, 0x0) 16:21:54 executing program 2: r0 = request_key(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='.&-\x00', 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x3}, r0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="1f", 0x1, 0xffffffffffffffff) request_key(&(0x7f0000000280)='encrypted\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='{\\-\x00', r0) 16:21:54 executing program 5: keyctl$unlink(0x1e, 0x0, 0x0) 16:21:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x24, 0x1e, 0x28c96dddc3d86841}, 0x24}}, 0x0) 16:21:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x24, 0x18, 0x28c96dddc3d86841}, 0x24}}, 0x0) 16:21:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="f8"], 0x4f8}}, 0x0) 16:21:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0x28c96dddc3d86841, 0x0, 0x0, {}, [@TCA_CHAIN={0x8, 0x6}]}, 0x2c}}, 0x0) [ 1287.341144][T32648] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1287.361304][T32653] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 16:21:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0x28c96dddc3d86841, 0x0, 0x0, {}, [@TCA_RATE={0x6, 0x38}]}, 0x2c}}, 0x0) 16:21:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006d40)={0x0, 0x0, &(0x7f0000006d00)={&(0x7f00000002c0)=@delchain={0x24}, 0x24}}, 0x0) 16:21:54 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xfff, 0x241) 16:21:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x38}, 0x0) 16:21:54 executing program 5: add_key(&(0x7f0000000280)='trusted\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x0) 16:21:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000100041e80000000000020000000000001f51"], 0x34}}, 0x0) 16:21:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x24, 0x1d, 0x28c96dddc3d86841}, 0x24}}, 0x0) 16:21:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000040), 0x2000004c, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @TCA_CHAIN={0x8}]}, 0x34}}, 0x0) 16:21:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006d40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000006d00)={&(0x7f00000002c0)=@delchain={0x1ec4, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x5c, 0x2, [@TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_POLICE={0x20, 0x5, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8}]}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_TO={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8}]}}, @filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x1e08, 0x2, [@TCA_BASIC_ACT={0x1e04, 0x3, [@m_police={0x1e00, 0x0, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x1014, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}], [@TCA_POLICE_RATE={0x404}], [@TCA_POLICE_RATE={0x404}]]}, {0xdc1, 0x6, "298d355ae66570392b7abd12e0779ff70157bbc9a2f27dc063d8db01a29ae28425370b50f77ab224f875edbec0e3479461c54a75fe1a2991c80c27a0df8238ca864ddbdfc2bc754672b89dfe9eabfb34368d1246af9b015c8378ba36af6097118239afc36cb2467ac317d4afeabf5e54e8f0477e3773128a08fa73fa9354a4f71e5e26ae4c452e7b7dc28bb45fdbfb349c6b00d7cb1f4b7b121892946b1759fe970f07fb6d9e9c1a92057412690b916041c5342ef5d7d5f3072db8dc196c3129fd2876f3afb9e5287d81d2458ca6a7da19bbc53876f1519ed5e161ee5542339d7f303c2b67322df288bb642144ea1e18311a761a8e573836ea7f3526e34bd9ac87b84212f45cb53f006348718eef751535db1c9d328880dcae1c88d605ff3f56cba7247dda8c4da3b46241ee86c1646542dbb484796bd6e6f93585a737813fdb995bbe8f5bcac8c337cd473ccf05109692de59c23bcebe71aa6e52527b1143f8de3ed9783eb7ec04798a50e0b7af39cc7484eed74ae44658a425f02d8045bba19f8a1548c3164a6ece5709133494a5829d5c45fbea0220699004faba03cdadd254dee9136a99a8b1c3bbb63e08e29d4d1a996494aa6fd5003c8ca0df8800206a9fa24ad49f8521b9b2110491759b1a8e4e87198da5df87fdc791c5368a4095387257732d93e0b0cb01ef748819ca2434c919d2cbc2def09c43598cb85d8ed21299cebdafa18889cca85fd5070852554929b8932ecc742b6994d9944fb5ae71ddd617ba8a730c9ff7627ce29b05ab804665e361b12029db4d6d8417edc48d4f2bdd8a018c72a1adda9e124799c04582bbe3a5db4b7436cc5e1895cc9b1d66c53a23c7383f28ab07eaeb688132c91b0845509a087b6bbb7850dd548bf37b9a335f047fd5e552fd093ece92e4b010c8da1c66e9ff1463eda8137bf6f7e9956c5f2cd0783c08b75f4992222d039865fe02e45f662599ae6bf52c297ef1659ea0f32086c95cd046f1ea9917113b8a9fe654095be6208248b10f2ab3250b97e6199339ed753566d3d35a04bf53462412857432a4732f3e4ddf5cc3e49384e0a072c8bb44d0153f6a5ff883a2b76cf5c4eeef14d8cefcb287777b91f9613bee73397b5371a0ab42e8b19da8ea661f20f55d898a989c50307bc5aa74d8c36b38dd3948ff76a20fc9e34d1b6409d2a55bd8e2a5804654a58fe4abd79759d3392ae49af1097425b8d0a82a76cdc260075b8b927cfb153f656bc7a988b606743e86320872d4ed7417e208b95f2db31f4312b4df00763bb9044f5028e4027454391b3250a4747825795ade2bb1dfe0c332c7efa602f10a293b77d675d1f300747f7fa9a9f7e12339df63519b706fb67a5ea915d86c68a574a0a7b58c4a8ebe073ebcd05a88f393702fe499921fde82bd38402c8c9c309632702069f33dea09ba0d49f2bf58c9118e8699d8f690207e9bd28cc23dc0e355a964bfaf3f5f350f4297f5f6e5598eb723a39b37a9302da3fef3b18a8ec8cada8b2e50216faf653ab09ca9618b96fce20bcae3112b91ab644c4c8402016e1119486dd2a7d4ea5fbe958b03eaabf53f4e040347176d777ff72fdb417d3ae31bc207548544d3930aa657b0bd0afc705213d0cad97766a0ea33e80f4431b24fd7b84e25380ce407cdb1ca0c089f040bde003c4577f0fe038215bbedfa61b40b87195370ee91ab8ac974ad5e4f2eb4e126b843686323dd60bd5b81a7499ab2ee477b2bb54a1fcaec4ec4426dda44493771e87a5af3a4becb1821a3b84f84ab77efdd938592d241a59ad47aa6ceac8bb96ca9d23a287fb2855f180d537348f5a4b82f36273505cd22b99e7001702db65e46acb27aabb199d976474acd36db4aeeb474d8a5eb4d47d3e352af96dacb1dc8b53f10f101247c736fb980d4af2fd5be3a6f124a18c26eee763fe82decf6cbbdb2e12e88d731a0578c172a8b50f1d9bfcd0e4bb68bbe93ff71e1331d4e7bf98d55bb6d4a3c37e27b7d71c677a51a938708ee6300459e22db79ae9e21ed7d7ab1c679c7180986284810a05726e5ea45845132a6cc2a22c7955d564ee6d29453be80acd223181808784c2a7c08e9e2aab0f6661dae2f0dab9466319a08d9510d87dbbc930ebe047ff79f6d085422b944bf722aecc9ab1c88c13f6c5abfea9f281fef1457ee64be8420855d07419675af7cc395e44a109e50a586d4978cfc1c3fd6c7f10f9a79d1763dd934fd191748991e03bb4d592f37fb28977e86069e91643e8225a4bd3f7d6d2655a08befc267674e5ee8af305bf462677d29c7cac76e889fcfc8f6ab220e538e6d111175ef2ab7ae125b46ee371791d666cfae1f81354a6776f0b1e7ee34efc0a26fd4e4a7dd44c368e0e9be6bace647b62d0e6fd930b18f6a14b94712712fce40c6fa2223eeeb8bca0ee799c0dd718706a52c5a1090df84d35535ede39799478d8c3190630c786e8087015768ecab131fa3da3912e652fdc3c630f62696ad96c84f41de3a8ba1e43f2ae1cc1aa20b4da96a7a10f426c522c0af7064b9a91f0bd6fb5a54209fabaf39438545800f484d9432bc57704b56d53506fd486deefe0e01087be027af0a8752f3a75ab943bdc5011ba2d75e60800a067d1640feee0313493b36d58a4908531c16aa368f802207facf47599b4e20d3f83022d7b00d7ac17f8a7c3a12bd1340ce05f02bb1f0310d2cdd1382a3a588fe5bc5d5f19fd0f0081db19de5fbcc24fedc4e969c343607d3135105aeafc5a5fa0279d2ebe3e82056003702bd9faeefecff7c5fd10a8060a50d29f3e719eeac9e6df997becb6034fe9e31317c4cea50ad921e0cc1ac76970b28c0aa800c5c9ace2aeed13e8e4a682984e51b8054a56d5bec27c776954972264466702e5cb43d675e0742eb5243ea1bed01905ffb39ab1654667b9a86813f7c6125e12ce8735d2b5c0b669e5e88889578113ba63a1afb4d3b53b52d551982643f9b1055323436e643e501655e393b5c32096fc491a21ff335f247c15c87af4380a3fa2175b368f86774050ff514a0a8650211ddce4acbe368dc7a337501b30095171779575293db32dea06afc282d0a412af72aca3cc38bb9a81f05299af88886a3b73b765f0aa724800bd51aa15c5d749e40c815161403e2b2aa2edf454f9d7fc801ca2c274dbeb5f52881df5d0fceb71f9fe212d09dbffab4e7ced65c369bcd4d51b2b19752c69d4406fbf59b373a7afca4525d501f03af14ad3dea75921e569255f4b00535d86fa56edae7c517b3ec3f89941d483f087645a002c8c3caf1c11a5ca1f0dbbe7e6c8a545f3220c8cc0992b6453861e1deb35d62cf8a0a9ba739534a4d8c8c18bf136b4adcc402b04ab3817a4be1d319761025b11c076a86e4c7ad1a64eb56c5e0a2a557016a7c93853edaf81ac02062a13bedba851e3d6235db22598228241f01ea6624e821740fb40811f83e2962dae6ceda3859aebaed2f25e301558a4a47ca09d0e91ef32dae42c3bd7942847fb327bdceb79b553ca9572dbbf7dc1736ea0c34058a5a3b5907cf28fc0214873f681cc4a521da72116a3babcaa142889bcff884d0a6879fc764544c6a334d7ed6962e1533e13a31fd6e4a8b80ab5418034a227c81ff90260acb93555950f5a39ff13455ce76795a486b25dddf26a383cae6ad020d046c63fdc26923f396a88b4088519d784b00d6c92bf08cb312c2a1d32f0ccd859cf11af233208d55d39ff3fae804e7dbe2df253729f5b123b0d7ff1e3a787d5310045ff28674e5570d159e976d1a471e3fdd82a9f8f4ab2007e18e1d4cbfada28b180ea7d3da4616c8939c24715b54a0947901a4d84f5019662a7360481ecbd03f9692e917203895a893f8aa3d7cbd509146a5a2702fe5bedeeff5ed771b9bc3ddacb0f6e50f593f99c627e21953e9af38ff5cef5a9ce63f765a671b1a9bfa64101e029f1bab65a3f46c7f4b2688a0a4d5d021974feaf704a5a9ad897dbaaf2108fbdc8d5ae2e9cc48c16a2c062dd426b0dfd675a84a5b57237c1df15ea62a7d5056d6691622457dc239742089e161e9dbdbc89a998fb674a5483fdd072595a473419b0d03a6ed31056f13c1d7de207ac28666ac118ab3e24984a429d257aa55b5caa43dea16343ab7cd1f3f27b0bd1e56d9c82ae4478e41f9fdf15c15d9a59b7d71fe4a76028661653f4270fcff1d0f711522aa4e0d2d91645420b5e385c79e7c587cb1ef8cd0ca6447fe8dd659437dec470119cedecd53fa94e9bd8ae0221452fcc23828af0addd89e0f588fb3085649fcea122bc031b3c1c2eb47e304b90d975a746ca462aede7ea0bc4101e97532bebed9efcf418f67f87eb7c71630598ac2c9fdd0d913a871462a2960b13b8966bd5e3885e4879ee1a95ff755383b325e81eb38dd44d0475e6babbc850e234c4c57c36841a5c2ede6c04ad443180eb107707ba22deee6fae9c2241ed60c1c5977dea53e0a588f2699851d735ee35360200be991314067e303d8ed24965d272620cf10120f62c8f55bde3b9706ec29bec28ab9d78a93083b24ea843e79aeb352f19b533a293b02b599240613717cc984b9008b0856cbdc620130574e08b9ca61a97da28fa5a6a1b080a16466380554ac54824c3a878db435da69982b56d8d1fe61f2d4a6bb2dd3cf11be66bc5c173c55936e57a4bdec72d6f9465ee75da237a54d8798ff4cbbf47c1408f1000560cdb9b4c951a8f00f07d737faf029f544d381ead0686b6effbfd186603c17a07b4dfe67126d541d953ec638a7d04211a822ea6b5edddb927a2a0fbeb8d3c6d72008875d6b596383ec0b65e1533f96fbccb9b286d89212f118e6eaa0936fae9b90bb3e6272bb3299ed415c6f5af04a798cb77a10ffe25e3a7c9cbe0780f5de823d88a57777a57a2932a745b794525b21e74e13999d5354701a4a7ce06c2a62459f4457c63237613ecf2833bb0938c7ea509c44473f663819e07ebfac85d58021"}, {0xc}, {0xc}}}]}]}}]}, 0x1ec4}}, 0x0) 16:21:54 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_RMID(r0, 0xc) 16:21:54 executing program 2: socket(0x1, 0x0, 0x7) 16:21:54 executing program 5: r0 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='^+\x00', &(0x7f0000000080)='))^:*(@\x00', 0x0) [ 1287.737089][T32678] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 16:21:54 executing program 3: add_key$user(0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) 16:21:54 executing program 0: semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000040)=""/17) 16:21:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2}, 0x8) [ 1287.861636][T32684] ================================================================== [ 1287.871648][T32684] BUG: KASAN: null-ptr-deref in bdi_put+0x22/0xa0 [ 1287.878111][T32684] Write of size 4 at addr 0000000000000040 by task syz-executor.5/32684 [ 1287.886652][T32684] [ 1287.889071][T32684] CPU: 0 PID: 32684 Comm: syz-executor.5 Not tainted 5.11.0-rc2-syzkaller #0 [ 1287.897896][T32684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1287.907961][T32684] Call Trace: [ 1287.911246][T32684] dump_stack+0x107/0x163 [ 1287.915593][T32684] ? bdi_put+0x22/0xa0 [ 1287.919670][T32684] ? bdi_put+0x22/0xa0 [ 1287.923746][T32684] kasan_report.cold+0x5f/0xd5 [ 1287.928526][T32684] ? bdi_put+0x22/0xa0 [ 1287.932696][T32684] check_memory_region+0x13d/0x180 [ 1287.938080][T32684] bdi_put+0x22/0xa0 [ 1287.941997][T32684] bdev_evict_inode+0x262/0x460 [ 1287.947560][T32684] ? __blkdev_direct_IO_simple+0x930/0x930 [ 1287.953381][T32684] evict+0x2ed/0x6b0 [ 1287.957298][T32684] iput.part.0+0x57e/0x810 16:21:54 executing program 4: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) [ 1287.961725][T32684] ? find_inode_nowait+0x190/0x190 [ 1287.966853][T32684] iput+0x58/0x70 [ 1287.970495][T32684] dentry_unlink_inode+0x2b1/0x3d0 [ 1287.975708][T32684] __dentry_kill+0x3c0/0x640 [ 1287.980314][T32684] ? dput+0x35/0xbc0 [ 1287.984225][T32684] ? dput+0x35/0xbc0 [ 1287.988138][T32684] dput+0x725/0xbc0 [ 1287.992083][T32684] shrink_dcache_for_umount+0x11f/0x330 [ 1287.998078][T32684] generic_shutdown_super+0x68/0x370 [ 1288.003379][T32684] kill_anon_super+0x36/0x60 [ 1288.007979][T32684] deactivate_locked_super+0x94/0x160 [ 1288.013375][T32684] deactivate_super+0xad/0xd0 [ 1288.018068][T32684] put_fs_context+0xaa/0x650 [ 1288.022670][T32684] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1288.029016][T32684] fscontext_release+0x4c/0x60 [ 1288.033808][T32684] __fput+0x283/0x920 [ 1288.037821][T32684] ? fs_validate_description+0x1d0/0x1d0 [ 1288.043473][T32684] task_work_run+0xdd/0x190 [ 1288.047999][T32684] exit_to_user_mode_prepare+0x249/0x250 [ 1288.053654][T32684] syscall_exit_to_user_mode+0x19/0x50 [ 1288.059150][T32684] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1288.065056][T32684] RIP: 0033:0x417b71 [ 1288.068959][T32684] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 a4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1288.088752][T32684] RSP: 002b:00007ffebe75d2b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1288.097187][T32684] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000417b71 [ 1288.105186][T32684] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000003 16:21:55 executing program 2: mmap$snddsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x0) [ 1288.113166][T32684] RBP: 0000000000000001 R08: 0000000000001b30 R09: 00000000b861db34 [ 1288.121308][T32684] R10: 00007ffebe75d390 R11: 0000000000000293 R12: ffffffffffffffff [ 1288.129290][T32684] R13: 000000000013a6b6 R14: 00000000000003e8 R15: 000000000119bf8c [ 1288.137284][T32684] ================================================================== [ 1288.145430][T32684] Disabling lock debugging due to kernel taint 16:21:55 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x50000}]}) 16:21:55 executing program 2: socket(0x0, 0xc, 0x0) 16:21:55 executing program 1: request_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0) 16:21:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x2}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 16:21:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000240041e80000000000020000000000001f51"], 0x34}}, 0x0) [ 1288.339769][T32715] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1288.354684][T32684] Kernel panic - not syncing: panic_on_warn set ... [ 1288.361487][T32684] CPU: 1 PID: 32684 Comm: syz-executor.5 Tainted: G B 5.11.0-rc2-syzkaller #0 [ 1288.371656][T32684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1288.381699][T32684] Call Trace: [ 1288.385052][T32684] dump_stack+0x107/0x163 [ 1288.389467][T32684] ? bdi_alloc+0x90/0x140 [ 1288.393817][T32684] panic+0x306/0x73d [ 1288.397708][T32684] ? __warn_printk+0xf3/0xf3 [ 1288.402392][T32684] ? preempt_schedule_common+0x59/0xc0 [ 1288.407847][T32684] ? bdi_put+0x22/0xa0 [ 1288.411908][T32684] ? preempt_schedule_thunk+0x16/0x18 [ 1288.417536][T32684] ? trace_hardirqs_on+0x38/0x1c0 [ 1288.422554][T32684] ? trace_hardirqs_on+0x51/0x1c0 [ 1288.427664][T32684] ? bdi_put+0x22/0xa0 [ 1288.431725][T32684] ? bdi_put+0x22/0xa0 [ 1288.435780][T32684] end_report+0x58/0x5e [ 1288.439928][T32684] kasan_report.cold+0x67/0xd5 [ 1288.444688][T32684] ? bdi_put+0x22/0xa0 [ 1288.448751][T32684] check_memory_region+0x13d/0x180 [ 1288.453891][T32684] bdi_put+0x22/0xa0 [ 1288.457865][T32684] bdev_evict_inode+0x262/0x460 [ 1288.462737][T32684] ? __blkdev_direct_IO_simple+0x930/0x930 [ 1288.468629][T32684] evict+0x2ed/0x6b0 [ 1288.472521][T32684] iput.part.0+0x57e/0x810 [ 1288.476958][T32684] ? find_inode_nowait+0x190/0x190 [ 1288.482153][T32684] iput+0x58/0x70 [ 1288.485774][T32684] dentry_unlink_inode+0x2b1/0x3d0 [ 1288.491052][T32684] __dentry_kill+0x3c0/0x640 [ 1288.495635][T32684] ? dput+0x35/0xbc0 [ 1288.499527][T32684] ? dput+0x35/0xbc0 [ 1288.503508][T32684] dput+0x725/0xbc0 [ 1288.507399][T32684] shrink_dcache_for_umount+0x11f/0x330 [ 1288.512941][T32684] generic_shutdown_super+0x68/0x370 [ 1288.518316][T32684] kill_anon_super+0x36/0x60 [ 1288.522901][T32684] deactivate_locked_super+0x94/0x160 [ 1288.528270][T32684] deactivate_super+0xad/0xd0 [ 1288.532939][T32684] put_fs_context+0xaa/0x650 [ 1288.537614][T32684] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1288.543943][T32684] fscontext_release+0x4c/0x60 [ 1288.548700][T32684] __fput+0x283/0x920 [ 1288.552789][T32684] ? fs_validate_description+0x1d0/0x1d0 [ 1288.558417][T32684] task_work_run+0xdd/0x190 [ 1288.563002][T32684] exit_to_user_mode_prepare+0x249/0x250 [ 1288.568626][T32684] syscall_exit_to_user_mode+0x19/0x50 [ 1288.574253][T32684] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1288.580139][T32684] RIP: 0033:0x417b71 [ 1288.584023][T32684] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 a4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1288.603913][T32684] RSP: 002b:00007ffebe75d2b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1288.612431][T32684] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000417b71 [ 1288.620481][T32684] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000003 [ 1288.628532][T32684] RBP: 0000000000000001 R08: 0000000000001b30 R09: 00000000b861db34 [ 1288.636489][T32684] R10: 00007ffebe75d390 R11: 0000000000000293 R12: ffffffffffffffff [ 1288.644449][T32684] R13: 000000000013a6b6 R14: 00000000000003e8 R15: 000000000119bf8c [ 1288.656101][T32684] Kernel Offset: disabled [ 1288.660424][T32684] Rebooting in 86400 seconds..